last executing test programs:

3m7.766447468s ago: executing program 3 (id=17):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000041fd4b5c5b6b658f0b000000050000000800020001000000"], 0x1c}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x4004480c, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000aeca15be20fddd022eb8cbc9a3882b2425fb369efb3433b6e86c2ec2e8010da0d73f9f10902233b03e87ea702baf4af9e9734603f74927b9692774c547a9644d13cc0be3cf987a05c0279674f00824b40407b40a450c314320bcc543166bcdebfb68a4a40bde691507500d09d425e3bf3592071a2d56efb58a9b8700ae3efb02acf480d6d6302e38bc4f3b84c1f775d53312ed2252cab153a1aa4508d67e8925950f5ecb9c5ad71f42fc4a606c86cafe04bd77ad4e8f9060b9d502b351bb68"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_VDPA_GET_VQS_COUNT(r4, 0x8004af80, &(0x7f0000001140))
syz_io_uring_setup(0x690a, 0x0, 0x0, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendto$inet6(r5, 0x0, 0x0, 0x4c004, &(0x7f0000002880)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x7c, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4, 0x20}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r8 = socket$tipc(0x1e, 0x5, 0x0)
getsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, 0xffffffffffffffff, &(0x7f0000000700)=0x12)
sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x30}}, 0x50)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
mkdir(&(0x7f0000000300)='./file0\x00', 0xa0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x3, 0x0, @empty}}, 0xfffffffc, 0x3, 0x989, 0x0, 0x84, 0x8000}, 0x9c)

3m7.171633833s ago: executing program 3 (id=23):
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0xa, 0x0, 0x0, 0x4}}, 0x26)
r6 = socket$netlink(0x10, 0x3, 0x13)
bind$netlink(r6, 0x0, 0x0)
setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/igmp6\x00')
preadv(r7, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/83, 0x53}], 0x1, 0xfffffffe, 0x5)

3m6.067862612s ago: executing program 3 (id=25):
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {}, 0xa, 0x0, 0x0, 0x4}}, 0x26)
r6 = socket$netlink(0x10, 0x3, 0x13)
bind$netlink(r6, 0x0, 0x0)
setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/igmp6\x00')
preadv(r7, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/83, 0x53}], 0x1, 0xfffffffe, 0x5)
ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000200)={0x0, 0xed, 0x8, &(0x7f0000000080)={0x4, "fe91c08abe449b1f96adab094fbe11af38f058f7c7d39e22c775fd2509c6c5e9e3"}})
pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1, 0x6, 0x40)
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f00000000c0)=@x86={0x6, 0x0, 0xfe, 0x0, 0x21df, 0x9, 0x3, 0x1, 0x9, 0xa, 0x1, 0x5, 0x0, 0x8, 0x4000004, 0x1, 0x0, 0x2, 0x9, '\x00', 0x10, 0x2})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200)

3m5.062242793s ago: executing program 3 (id=29):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000000, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"])
chdir(&(0x7f0000000280)='./file0\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$pokeuser(0x6, r0, 0x114, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00')
pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000084000040"])
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
inotify_init()
write$uinput_user_dev(r2, &(0x7f0000000880)={'syz0\x00', {0x5, 0x4b99, 0x4, 0x1}, 0x1e, [0x5, 0x4379, 0x8, 0x4, 0x2, 0x7ff, 0x2, 0x9, 0x654f, 0x7, 0x3, 0xba7, 0x8, 0x9, 0x5, 0x3, 0xc9, 0x9, 0xef7, 0x1, 0x3c, 0x1, 0x5, 0x907, 0x4, 0x80, 0x8, 0xfffffff7, 0x6, 0x0, 0xb, 0x370, 0x5, 0x778ac212, 0x1, 0x3, 0x0, 0x401, 0x3, 0x16, 0x10000, 0x9, 0xe, 0x9, 0x9, 0x5, 0x1, 0x8c02, 0x3, 0x9, 0x7, 0x4, 0x10000, 0x5, 0x100, 0x48d4, 0xfffffffc, 0xa, 0x2, 0xc4a4, 0x5, 0x1, 0x9, 0x1717], [0x6, 0x8, 0x8001, 0xfff, 0x3ff, 0x0, 0x3, 0x7fff, 0x2b, 0xc, 0x5, 0x0, 0xffffffff, 0x9508, 0x0, 0x5, 0xd, 0x1, 0x80, 0x1, 0x10001, 0x3ff, 0xffffffff, 0x7, 0x2df4, 0x400, 0xffffff7f, 0x1000, 0x1ff, 0x6, 0xb, 0x9, 0x4, 0x40, 0xfffffffb, 0x6, 0x4, 0x7fffffff, 0x8, 0xf, 0x1, 0xc, 0x9, 0x80000000, 0x14c0eb9d, 0x1, 0x7, 0x80, 0x7, 0x7f, 0xab4, 0x6, 0xe, 0xa, 0x6, 0x4, 0x2, 0xe, 0x5, 0x3, 0x6ece, 0x3ff, 0xe773, 0x8], [0xde3, 0x5dd4, 0x3, 0x4, 0x3, 0x5, 0x0, 0x5, 0xfffffffe, 0x5, 0x7fe0000, 0x8000, 0xffffffff, 0x8, 0x7, 0xd04c, 0x2, 0x4, 0x4, 0x8, 0x80000000, 0x19000000, 0x8, 0x1ff, 0x6, 0x7, 0x0, 0x0, 0x2e6, 0x1, 0x8, 0x4, 0x9, 0x0, 0x4, 0x0, 0x3, 0x3, 0x5, 0x7, 0x1000, 0x4, 0x3, 0x7bb14aae, 0x4, 0x1000, 0x6, 0x3, 0x3, 0x8, 0x5, 0x0, 0x3, 0x3, 0x3ff, 0x7, 0x2, 0x8, 0x3, 0x1, 0x2, 0xfffffffe, 0x4, 0x1], [0x7f, 0x401, 0x101, 0x1b3, 0x1, 0x0, 0x7, 0x1000, 0x4, 0x1645, 0x2, 0x800, 0x7, 0x0, 0x4, 0x0, 0x7, 0x9, 0x2, 0x1000, 0x8, 0x10000, 0xd6, 0x2a8, 0xd1, 0x8d1, 0x5, 0x8, 0x10, 0x5, 0x5, 0xa, 0x7, 0x6, 0x4e1bbb9d, 0x5, 0x1, 0x90b, 0x77ffffff, 0x1, 0x10, 0x0, 0x3, 0x4, 0x5, 0x0, 0x8, 0xe, 0x4, 0x2, 0x8, 0x1, 0x100, 0x2, 0x2, 0xc, 0x20000004, 0x6, 0xbf09, 0x9, 0x6, 0x1, 0x6, 0xa3]}, 0x45c)
fgetxattr(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="73652e39700062494444fdfadd3a3b7fd678d25909437f4a7b7fadd09c7a31a0aff4f1a65038d214989d8680732bbf8e82dd9bc4da0b044b4f688c4d0d24009ea49435c2b1625c83d9b224498d3e80ebda8cb2d25465d041e44811df2707aaaa7cc79fb3a252400ae74f1fee06ad837ae7ff8750a1"], &(0x7f0000001340)=""/4096, 0x1000)
unlink(&(0x7f0000000040)='./file0\x00')
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_EEE_SET(r7, &(0x7f0000008800)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000008740)=ANY=[], 0xa8}}, 0x20040040)
recvmmsg(r7, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/89, 0x59}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1}, 0xffffffff}], 0x2, 0x0, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
removexattr(&(0x7f0000019080)='./file0\x00', &(0x7f00000190c0)=@random={'user.', '/dev/kvm\x00'})
socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc)

3m4.380575035s ago: executing program 3 (id=31):
setresuid(0x0, 0xee01, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10e)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8}, @NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0xf21, 0xfffffffe, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0)
setfsgid(0xee01)
r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_TRY_ENCODER_CMD(r4, 0xc028564e, &(0x7f00000000c0)={0x0, 0x0, [0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x4]})

3m3.494153418s ago: executing program 3 (id=36):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup(r7)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000f40)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r5}})
r9 = mq_open(&(0x7f0000000a00)='trans=fd,', 0x40, 0x0, 0x0)
syncfs(r9)
recvmmsg$unix(r5, &(0x7f0000003500)=[{{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000000ac0)=""/52, 0x34}, {&(0x7f0000000b00)=""/170, 0xaa}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/208, 0xd0}, {&(0x7f0000000cc0)=""/162, 0xa2}, {0x0}, {&(0x7f0000000e40)=""/207, 0xcf}, {&(0x7f0000001f80)=""/161, 0xa1}, {0x0}], 0xa}}, {{&(0x7f0000003200)=@abs, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000003280)=""/249, 0xf9}, {&(0x7f0000003380)=""/212, 0xd4}, {&(0x7f0000003480)=""/58, 0x3a}], 0x3}}], 0x2, 0x40, &(0x7f0000003540)={0x77359400})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r10 = socket$kcm(0x2, 0x5, 0x84)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$inet(r10, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)}], 0x1}, 0x0)
recvmsg$kcm(r10, 0x0, 0x40000002)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000940)={0x0, <r12=>0x0})
syz_open_procfs(r12, &(0x7f0000000500)='fdinfo/3\x00')
sendmsg$inet(r6, &(0x7f00000009c0)={&(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000400)="745a3b87dc1cc2588a388f2791a0e371cf1c1225f85d2f048a87ceaef76f89d3cda12462117d722d3ac0d90a4fedc2d3d62fdd7defcac1d36d565183df7bca968485e96e44ca6744a397e22a61b45f693cee10a132b5c29346bb94460db26a4c1354076c2ed0e1a6387a3a72673e3c3785da101b80737786382dac047e308fdb171ffd0ea5a2ba69fb1945579b0981b7edcdec233d820f885a68d278f1a755d7bfc5616e081fdc0ebac67145ecbb6f4a2d810be50699576f1730ac3bfe7ab1cda85d46ae0fb3e61c82c154ad2c453389564cbe91e72ed72d1892f9348b80587e1932585413034f4c038c0f2090", 0xed}], 0x1, &(0x7f00000006c0)=[@ip_retopts={{0x78, 0x0, 0x7, {[@noop, @generic={0x88, 0x9, "58ea5a0753e2a0"}, @noop, @generic={0x83, 0x2}, @lsrr={0x83, 0x13, 0xb4, [@broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @timestamp={0x44, 0x18, 0xd8, 0x0, 0x0, [0x2, 0xa, 0x500000, 0x7, 0x9]}, @ssrr={0x89, 0xf, 0xa4, [@multicast1, @multicast1, @rand_addr=0x64010100]}, @ssrr={0x89, 0xb, 0x73, [@rand_addr, @multicast2]}, @end, @timestamp={0x44, 0x18, 0x6, 0x0, 0x9, [0x2, 0x1, 0x129, 0x9, 0x8]}]}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@cipso={0x86, 0x25, 0x3, [{0x7, 0x2}, {0x2, 0xd, "1cc7585c687bf47ecff633"}, {0x7, 0x6, 'x\f\v\''}, {0x2, 0x8, "58efc2eeb678"}, {0x5, 0x2}]}, @cipso={0x86, 0x24, 0x1, [{0x2, 0x10, "032c508f4c91f087c10620eb24bc"}, {0x0, 0xe, "09f0ed505a1b04eced4dfd10"}]}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x42820000}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x37, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x24}, 0xdef}, {@rand_addr=0x64010101, 0x9}, {@loopback, 0x8}, {@empty, 0x9}, {@loopback, 0x5}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x48, 0x1, [{0x0, 0x7, "2f04ba04fc"}, {0x7, 0x11, "e89f6444dc16c06f51e2f154bd05b6"}, {0x7, 0xc, "9223602a31b800cbd391"}, {0x7, 0x2}, {0x0, 0xa, "6665f361c93d2c4f"}, {0x1, 0x5, "cdf2bd"}, {0x6, 0xd, "d27c6d4815e9537e2a553e"}]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x4e}}, @ip_retopts={{0x94, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x9, 0x0, 0x0, [0x5, 0x763, 0x9]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0x1c, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6f}, {@remote, 0x1a}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@multicast1}, {@loopback, 0x1}, {@empty, 0x3ff}]}, @timestamp={0x44, 0x24, 0x52, 0x0, 0x4, [0x9, 0x8a0, 0x0, 0x9, 0x4, 0xfffffff9, 0x392f, 0x7bd]}, @rr={0x7, 0x3, 0x41}, @rr={0x7, 0x17, 0x8f, [@remote, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @remote]}]}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x75, [@dev={0xac, 0x14, 0x14, 0x17}, @remote, @private=0xa010100, @local, @remote, @remote]}, @noop, @rr={0x7, 0x7, 0x93, [@dev={0xac, 0x14, 0x14, 0xc}]}, @cipso={0x86, 0x35, 0x2, [{0x7, 0x5, "7fac34"}, {0x7, 0xb, "d0240c976044183666"}, {0x1, 0x10, "acaf76b3f358bf1cbdc191d64cc6"}, {0x5, 0x5, 'A7c'}, {0x2, 0xa, "08ef7db37169f3db"}]}]}}}], 0x274}, 0x20040000)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/58, 0x3a)

3m3.454593135s ago: executing program 32 (id=36):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup(r7)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000f40)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r5}})
r9 = mq_open(&(0x7f0000000a00)='trans=fd,', 0x40, 0x0, 0x0)
syncfs(r9)
recvmmsg$unix(r5, &(0x7f0000003500)=[{{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000000ac0)=""/52, 0x34}, {&(0x7f0000000b00)=""/170, 0xaa}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/208, 0xd0}, {&(0x7f0000000cc0)=""/162, 0xa2}, {0x0}, {&(0x7f0000000e40)=""/207, 0xcf}, {&(0x7f0000001f80)=""/161, 0xa1}, {0x0}], 0xa}}, {{&(0x7f0000003200)=@abs, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000003280)=""/249, 0xf9}, {&(0x7f0000003380)=""/212, 0xd4}, {&(0x7f0000003480)=""/58, 0x3a}], 0x3}}], 0x2, 0x40, &(0x7f0000003540)={0x77359400})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r10 = socket$kcm(0x2, 0x5, 0x84)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$inet(r10, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)}], 0x1}, 0x0)
recvmsg$kcm(r10, 0x0, 0x40000002)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000940)={0x0, <r12=>0x0})
syz_open_procfs(r12, &(0x7f0000000500)='fdinfo/3\x00')
sendmsg$inet(r6, &(0x7f00000009c0)={&(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000400)="745a3b87dc1cc2588a388f2791a0e371cf1c1225f85d2f048a87ceaef76f89d3cda12462117d722d3ac0d90a4fedc2d3d62fdd7defcac1d36d565183df7bca968485e96e44ca6744a397e22a61b45f693cee10a132b5c29346bb94460db26a4c1354076c2ed0e1a6387a3a72673e3c3785da101b80737786382dac047e308fdb171ffd0ea5a2ba69fb1945579b0981b7edcdec233d820f885a68d278f1a755d7bfc5616e081fdc0ebac67145ecbb6f4a2d810be50699576f1730ac3bfe7ab1cda85d46ae0fb3e61c82c154ad2c453389564cbe91e72ed72d1892f9348b80587e1932585413034f4c038c0f2090", 0xed}], 0x1, &(0x7f00000006c0)=[@ip_retopts={{0x78, 0x0, 0x7, {[@noop, @generic={0x88, 0x9, "58ea5a0753e2a0"}, @noop, @generic={0x83, 0x2}, @lsrr={0x83, 0x13, 0xb4, [@broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @timestamp={0x44, 0x18, 0xd8, 0x0, 0x0, [0x2, 0xa, 0x500000, 0x7, 0x9]}, @ssrr={0x89, 0xf, 0xa4, [@multicast1, @multicast1, @rand_addr=0x64010100]}, @ssrr={0x89, 0xb, 0x73, [@rand_addr, @multicast2]}, @end, @timestamp={0x44, 0x18, 0x6, 0x0, 0x9, [0x2, 0x1, 0x129, 0x9, 0x8]}]}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@cipso={0x86, 0x25, 0x3, [{0x7, 0x2}, {0x2, 0xd, "1cc7585c687bf47ecff633"}, {0x7, 0x6, 'x\f\v\''}, {0x2, 0x8, "58efc2eeb678"}, {0x5, 0x2}]}, @cipso={0x86, 0x24, 0x1, [{0x2, 0x10, "032c508f4c91f087c10620eb24bc"}, {0x0, 0xe, "09f0ed505a1b04eced4dfd10"}]}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x42820000}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x37, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x24}, 0xdef}, {@rand_addr=0x64010101, 0x9}, {@loopback, 0x8}, {@empty, 0x9}, {@loopback, 0x5}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x48, 0x1, [{0x0, 0x7, "2f04ba04fc"}, {0x7, 0x11, "e89f6444dc16c06f51e2f154bd05b6"}, {0x7, 0xc, "9223602a31b800cbd391"}, {0x7, 0x2}, {0x0, 0xa, "6665f361c93d2c4f"}, {0x1, 0x5, "cdf2bd"}, {0x6, 0xd, "d27c6d4815e9537e2a553e"}]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x4e}}, @ip_retopts={{0x94, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x9, 0x0, 0x0, [0x5, 0x763, 0x9]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0x1c, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6f}, {@remote, 0x1a}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@multicast1}, {@loopback, 0x1}, {@empty, 0x3ff}]}, @timestamp={0x44, 0x24, 0x52, 0x0, 0x4, [0x9, 0x8a0, 0x0, 0x9, 0x4, 0xfffffff9, 0x392f, 0x7bd]}, @rr={0x7, 0x3, 0x41}, @rr={0x7, 0x17, 0x8f, [@remote, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @remote]}]}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x75, [@dev={0xac, 0x14, 0x14, 0x17}, @remote, @private=0xa010100, @local, @remote, @remote]}, @noop, @rr={0x7, 0x7, 0x93, [@dev={0xac, 0x14, 0x14, 0xc}]}, @cipso={0x86, 0x35, 0x2, [{0x7, 0x5, "7fac34"}, {0x7, 0xb, "d0240c976044183666"}, {0x1, 0x10, "acaf76b3f358bf1cbdc191d64cc6"}, {0x5, 0x5, 'A7c'}, {0x2, 0xa, "08ef7db37169f3db"}]}]}}}], 0x274}, 0x20040000)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/58, 0x3a)

2m21.025568709s ago: executing program 4 (id=230):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x44894)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
timer_delete(0x0)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2)
sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, r3, 0x207, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040035}, 0x6000840)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r4)
sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4040054)
sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5c, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r6 = syz_open_dev$sndmidi(0x0, 0x2, 0x145c03)
r7 = dup(r6)
ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SHUTDOWN={0x22, 0x15, 0x0, r0, 0x0, 0x0, 0x1, 0x0, 0x1})
r8 = gettid()
mknod(&(0x7f0000000440)='./file0\x00', 0x1ffa, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r9, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x28}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
acct(&(0x7f0000000140)='./file0\x00')
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0)

2m20.191858922s ago: executing program 4 (id=235):
socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9a0000001500000025bd7000fbdbdf2561656769733132382d67656e65726963"], 0xe0}, 0x1, 0x0, 0x0, 0x20044004}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000400), 0x1, 0x2)
ioctl$VIDIOC_ENUMSTD(r1, 0xc0405619, &(0x7f0000000440)={0x8, 0x3000000, "8c0331a53d314d327f3e939c4b6350804d9071ec226b44c0", {0x3ff, 0x47c6}, 0x6})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000030c00078005001500d900000005f9ae8f2f71e187fda1d6ba70aab51e0005000a000000050001000700000005000100070000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574000000"], 0x5c}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x932, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0xfffffffd, 0x8000, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x497, &(0x7f0000000500)={0x0, 0x7079, 0x80, 0x4, 0x288}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000300))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa1, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c910"], 0x15)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0)
r7 = creat(&(0x7f0000000240)='./file0/bus\x00', 0x0)
acct(&(0x7f0000000100)='./file0/bus\x00')
close(r7)
chroot(0x0)
umount2(&(0x7f0000000280)='./file0\x00', 0x40000)
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0)

2m19.904566349s ago: executing program 4 (id=238):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000200)='0', 0x1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001fc0)={'wpan0\x00'})
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYBLOB="010000000000000000002e0000000c0005000000000000000000060006000000000008000200", @ANYRES32, @ANYBLOB="05002b0000000000"], 0x38}}, 0x0)
r3 = syz_io_uring_setup(0x235, &(0x7f0000000300)={0x0, 0x200008, 0x10100}, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xc8}})
io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r6, &(0x7f0000000080)={0x2, 0x2, 0x3, 0x1}, 0x8)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00e70310008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[])
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r8 = timerfd_create(0x1, 0x0)
timerfd_settime(r8, 0x76677fe32e01e61f, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r9 = openat(r1, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000)=0x84, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x481842, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r10, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r9], 0xffdd)
ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0xc0105500, &(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRES8=r9])
finit_module(r9, &(0x7f0000000080)='-,\xea-\x00', 0x2)
ptrace(0x10, 0x1)

2m18.90445533s ago: executing program 4 (id=244):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000000, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"])
chdir(&(0x7f0000000280)='./file0\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$pokeuser(0x6, r0, 0x114, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00')
pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000084000040"])
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
inotify_init()
write$uinput_user_dev(r2, &(0x7f0000000880)={'syz0\x00', {0x5, 0x4b99, 0x4, 0x1}, 0x1e, [0x5, 0x4379, 0x8, 0x4, 0x2, 0x7ff, 0x2, 0x9, 0x654f, 0x7, 0x3, 0xba7, 0x8, 0x9, 0x5, 0x3, 0xc9, 0x9, 0xef7, 0x1, 0x3c, 0x1, 0x5, 0x907, 0x4, 0x80, 0x8, 0xfffffff7, 0x6, 0x0, 0xb, 0x370, 0x5, 0x778ac212, 0x1, 0x3, 0x0, 0x401, 0x3, 0x16, 0x10000, 0x9, 0xe, 0x9, 0x9, 0x5, 0x1, 0x8c02, 0x3, 0x9, 0x7, 0x4, 0x10000, 0x5, 0x100, 0x48d4, 0xfffffffc, 0xa, 0x2, 0xc4a4, 0x5, 0x1, 0x9, 0x1717], [0x6, 0x8, 0x8001, 0xfff, 0x3ff, 0x0, 0x3, 0x7fff, 0x2b, 0xc, 0x5, 0x0, 0xffffffff, 0x9508, 0x0, 0x5, 0xd, 0x1, 0x80, 0x1, 0x10001, 0x3ff, 0xffffffff, 0x7, 0x2df4, 0x400, 0xffffff7f, 0x1000, 0x1ff, 0x6, 0xb, 0x9, 0x4, 0x40, 0xfffffffb, 0x6, 0x4, 0x7fffffff, 0x8, 0xf, 0x1, 0xc, 0x9, 0x80000000, 0x14c0eb9d, 0x1, 0x7, 0x80, 0x7, 0x7f, 0xab4, 0x6, 0xe, 0xa, 0x6, 0x4, 0x2, 0xe, 0x5, 0x3, 0x6ece, 0x3ff, 0xe773, 0x8], [0xde3, 0x5dd4, 0x3, 0x4, 0x3, 0x5, 0x0, 0x5, 0xfffffffe, 0x5, 0x7fe0000, 0x8000, 0xffffffff, 0x8, 0x7, 0xd04c, 0x2, 0x4, 0x4, 0x8, 0x80000000, 0x19000000, 0x8, 0x1ff, 0x6, 0x7, 0x0, 0x0, 0x2e6, 0x1, 0x8, 0x4, 0x9, 0x0, 0x4, 0x0, 0x3, 0x3, 0x5, 0x7, 0x1000, 0x4, 0x3, 0x7bb14aae, 0x4, 0x1000, 0x6, 0x3, 0x3, 0x8, 0x5, 0x0, 0x3, 0x3, 0x3ff, 0x7, 0x2, 0x8, 0x3, 0x1, 0x2, 0xfffffffe, 0x4, 0x1], [0x7f, 0x401, 0x101, 0x1b3, 0x1, 0x0, 0x7, 0x1000, 0x4, 0x1645, 0x2, 0x800, 0x7, 0x0, 0x4, 0x0, 0x7, 0x9, 0x2, 0x1000, 0x8, 0x10000, 0xd6, 0x2a8, 0xd1, 0x8d1, 0x5, 0x8, 0x10, 0x5, 0x5, 0xa, 0x7, 0x6, 0x4e1bbb9d, 0x5, 0x1, 0x90b, 0x77ffffff, 0x1, 0x10, 0x0, 0x3, 0x4, 0x5, 0x0, 0x8, 0xe, 0x4, 0x2, 0x8, 0x1, 0x100, 0x2, 0x2, 0xc, 0x20000004, 0x6, 0xbf09, 0x9, 0x6, 0x1, 0x6, 0xa3]}, 0x45c)
fgetxattr(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="73652e39700062494444fdfadd3a3b7fd678d25909437f4a7b7fadd09c7a31a0aff4f1a65038d214989d8680732bbf8e82dd9bc4da0b044b4f688c4d0d24009ea49435c2b1625c83d9b224498d3e80ebda8cb2d25465d041e44811df2707aaaa7cc79fb3a252400ae74f1fee06ad837ae7ff8750a1"], &(0x7f0000001340)=""/4096, 0x1000)
unlink(&(0x7f0000000040)='./file0\x00')
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_EEE_SET(r7, &(0x7f0000008800)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000008740)=ANY=[], 0xa8}}, 0x20040040)
recvmmsg(r7, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/89, 0x59}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1}, 0xffffffff}], 0x2, 0x0, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
removexattr(&(0x7f0000019080)='./file0\x00', &(0x7f00000190c0)=@random={'user.', '/dev/kvm\x00'})
socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc)

2m18.46869054s ago: executing program 4 (id=246):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x0, 0x32e}, &(0x7f0000000180), 0x0)
io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif, 0x80, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x11000000}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180008c20a00080000000000005ba6e709b5edff1100000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r3}, 0x10)
r4 = io_uring_setup(0x253d, &(0x7f0000000500)={0x0, 0x547a, 0x2118, 0xfffffffd, 0x297})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect(r5, &(0x7f0000000300)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0x80)
close_range(r4, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1ff)
ioctl$EVIOCSKEYCODE_V2(r7, 0x40284504, &(0x7f0000000380)={0x1, 0x1d, 0x22, 0x36, "e8a45d3a07d0e74189f7620bf5d1fd404252b135afcc52e38de7eb776ef065b1"})
write$binfmt_elf32(r7, &(0x7f0000000040)=ANY=[], 0x158)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000003c0)='signal_generate\x00', r8}, 0x40)
close(r7)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
clock_gettime(0x6, &(0x7f00000001c0))
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000900020073797a30000000000500010007000000050005000a0000000c00078008001240fffffffa04000000000000003a69702c706f72742c697000050004000000000059c50ba9bfe034b1fd4acb1f8d638983c69160bede8606c395eb66bc8f142f"], 0x58}}, 0xc000)

2m18.196077293s ago: executing program 4 (id=247):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0xc02, 0x0)
write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20, 0x0, 0x0, 0x410000, 0x0, 0x5}}, 0x11c)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0)
r1 = syz_open_dev$hidraw(0x0, 0x1, 0x200)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, &(0x7f00000004c0))
close(r0)
r3 = socket(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0)
getsockname$unix(r3, 0x0, &(0x7f0000000000))
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x1a8000, 0xa, 0x1}, {0x0, 0xeeef0000, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, {0x80a0000, 0x0, 0xc}, {0x0, 0x0, 0xf, 0x0, 0x6, 0x0, 0x0, 0xfc}, {0x0, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x10000, 0x1, 0x9, 0x0, 0xfd}, {0xf000, 0x0, 0xca8a7e659055b412, 0x2, 0x0, 0x0, 0x0, 0x5, 0x9, 0x2, 0x3}, {0x0, 0xeeee8000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x4}, {}, {}, 0x20050002, 0x0, 0x0, 0x340030, 0x80000a, 0x2000, 0x3000, [0x800000000, 0x0, 0x1a7ff4f4]})
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
r8 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r8, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mount$9p_unix(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x8140aecc, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0)

2m18.167207959s ago: executing program 33 (id=247):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0xc02, 0x0)
write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20, 0x0, 0x0, 0x410000, 0x0, 0x5}}, 0x11c)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0)
r1 = syz_open_dev$hidraw(0x0, 0x1, 0x200)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, &(0x7f00000004c0))
close(r0)
r3 = socket(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0)
getsockname$unix(r3, 0x0, &(0x7f0000000000))
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x1a8000, 0xa, 0x1}, {0x0, 0xeeef0000, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, {0x80a0000, 0x0, 0xc}, {0x0, 0x0, 0xf, 0x0, 0x6, 0x0, 0x0, 0xfc}, {0x0, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x10000, 0x1, 0x9, 0x0, 0xfd}, {0xf000, 0x0, 0xca8a7e659055b412, 0x2, 0x0, 0x0, 0x0, 0x5, 0x9, 0x2, 0x3}, {0x0, 0xeeee8000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x4}, {}, {}, 0x20050002, 0x0, 0x0, 0x340030, 0x80000a, 0x2000, 0x3000, [0x800000000, 0x0, 0x1a7ff4f4]})
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
r8 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r8, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mount$9p_unix(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x8140aecc, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0)

8.554690974s ago: executing program 5 (id=1139):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000100008fc9"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00@', @ANYRES16=r2, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b"], 0x38}}, 0x4044810)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
statx(0xffffffffffffffff, &(0x7f0000004f80)='./file0\x00', 0x4000, 0x8, &(0x7f0000004fc0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005140)=[{{&(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000740)="8aa90236c2bf16009e9b2ee17df4d8633167d13431d5cddb94f614ade729b628a56ac872dba4ee1f561a4ac5ba94645e292492dbb2637bd6b66818239cad009431b2a6501099c5408214813cb8e2755703c59c4c1ab634bce5070a567ac38d01a1b4fb062fccf69a0361831f129a54f01ab6c2a258d4ce34c8cbbae79789d56394d9621358e75158", 0x88}, {&(0x7f0000000800)="a777fef3df2068bce952eac1aeee0a44ef912c751f7c3f3d4c18255392e578aaa2438c6d64ec4c1d430b5c64a87d6cf8374e9be43292d91ba95dda55148a29a303f302b61f7372b15a4966261c44fdc1e3562671eeb0fb0ba9d6f44316c6d6fd81b56ff954848775800a0942c1f622cfe94250f1f1ad150b2c24d8e422ff4c3e2849ec48a1ad47bb97bab72adec3532d455e720d6cba8e9b91fe513a1e380052de10d683270dc1fa6602fd83f2818ef7f33a12d70852b2110e46cb2da4bcf1264b35a40a5107a5f9ef1ea37270ea2ecda4b605dcf7d600ed761ad0e52b27", 0xde}, {&(0x7f0000000900)="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", 0xfd}, {&(0x7f0000000a00)="998f690e5ea7341e4be8ab79213c07a726ccff5e135beec67e44dbd7972e8b292acff0b27552d4d23b2e5769f6d946649c7d6cdc101443f13173fe84ae5ad36d43f8acc5d7431fc14dae", 0x4a}, {&(0x7f0000000500)="44dafd23e365", 0x6}, {&(0x7f0000000580)="80878ea5765a1feae80237c8380bf7fb7fa606b24f44324bf80dd9091a742d48d39ee1b814a3a94f26eefe9813bdafce91663382190e", 0x36}, {&(0x7f0000000a80)="2559e6f2e6338c5c9e2cdbeaf827e63f00ea44270511a393829aa8d3aaf5ffe0f93e20a204c52e9c0194704fe59f51e31828149993d13b81a27e5d4ff4965d51103f20ea7a6289a164acf4a9d30ffdfe656b18df8f25087117537d92882f889cf4613068be6174596b752545721fcd175fe7b2b6dadbb6a19673d9136764385e6ebda7fb239dfa39336f8507e47a741a187daaf30d1f0dc2f0c301375d658e21c53b02d8436586601a9e69d3135a1c257b08a6ce73820a04", 0xb8}], 0x7, 0x0, 0x0, 0x80}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b80)="d95596c641f0d4dc8bf840bf10d6440f225a208e805494c018f80418d33327b93f1066fa3975e4846788670ee0825ce352ed", 0x32}, {&(0x7f0000000bc0)="a944c0a9ba9055650bd78a815392c8a60e897c062e608a4d0b7a849950c11783b448da8661e25fd6769c160f64bb6b4e14b01e7489c50b2702bd9cf0c0641652884cc65aab3be585420d9e9a51bd2a8bc1e3a913398be89029bcbfa2e471cc5ad52884dd65df9c46b54280069832da2bd864d31b7bb1042e74a6d09bf35144f375da0712400135cfd8ca2372afd41e510d6a870d791c2bb2e9c57dbe07622a7039a3884786fe2c58fdc1560df01017", 0xaf}], 0x2, &(0x7f0000000cc0)=[@rights={{0x10, 0x1, 0x1, [r4]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, r0]}}, @rights={{0x28, 0x1, 0x1, [r1, r4, r4, r0, r0, r1, r3]}}, @cred={{0x18, 0x1, 0x2, {0x0, r5, r6}}}, @cred={{0x18}}], 0x9c, 0x2004c0d1}}, {{&(0x7f0000000fc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000001040)="036e2f7c0fcc4e36cea81487e65980a58a30", 0x12}, {&(0x7f0000001080)="8c2e7f6b42073e4f45b66baba0636cbbb5b969b9a1086e015fad96c85e23bc71b94bce3ac5d3efff03c68fe2e651e6e20cc0783660d504b8ea20a2550ad6f9f90aa9c68eab49911af6e7d9a0a643c0e7cab6d1b11ff7f67f2000f6c77429ed082bd588cb543d7652f5b7dbf9dc943720854977371fc40107a32ea93cbfa6d81ce522304fa20c2c93417942cb168164e41e4b64146245239bea60be7f69334b3e9521c89988bde2dbbd7a32549588955b08f20d1ead90f9", 0xb7}, {&(0x7f0000001140)="e21829766bbd4518d4408ee68cffd877ed97790c7332e60f93753f610a154eab939493dc0bdfc47689ee58ce4d559231b86158aacf2e6551cfd0606ba040256b8644e790b1632df8f04d8e39b7d490fc761d5736628cb2d59fe8416b58109fbd24638d9f19dceafeab012583f541ec4f9dacadd7df355c4aa014bb37d70031f31464568eeb2fbf42f86f668d8a410ce372315ebb94dd0b4f32b568d15f015cdc2c5714bce47b8f74a1dbcaf8ee108fb7a851113986472f3c821f0be0aaea644773cc972cbaf979ded0db828b0d1f6fddc58ac4355b2c9af43c2a6b9eb69d617ce71b5771c95f1e253379637074781b3869e8e6", 0xf3}, {&(0x7f0000001240)="e5a538dd482fd82c02061d911c7966e1039ed3ec6f28dedacb752455c10e38951f5a3a37a77ee17179aa177d5442e203ffed987bcb7d13b044235a9ff6797ee01cb7f7d8893512f4e66c01e719a9d363f95de6b8840f8a4ed5a9267c4dcb6fec1e863d75362b149b8efcc77f55c63ce84acceca45a6c07500b08ab02f07a2260cc78f2e0bdb723affd5a083691f8efa043000cc54ba142f43044f78293d29db77df510a184ee74e3c2b16da3d53273200c8bba75bda720a4b7c787cc", 0xbc}, {&(0x7f0000001300)="9a35f82e43e438f94ebe257f0674cdab3f92fd7747f2fbdfadb1f4295a1d7d0ec7b9f11530b08743f8401232d061be2e66d56183e873fdb8ac843b1c8d5f18599316efd7537059ef947811ffdd11d43740916d718c1bbf82cee4de00fa265399eb2a7ad6f3b07130810974b1e4fc9a2a1db750aadc43d4", 0x77}, {&(0x7f0000001380)="bc752dfeb826004e6302fbc1ee18fd1103a3c3d241b71302e5517f966b10d06f18c19770ae05db56077b93497e056a41b8c14ff2b988b405f3c7cc5bc22bed127b93408cc9f923f7dd422b05648256fc9e9c3fdffc5ae7d656674baf0a0cb5e1b6bb61e0612655f113d16c30ebe26760b788df134536cbb06d439fda3bc304e038cec4da37be25f6ac74fce115b7c062dc2a156cd45e6298e0fa53c6d979e69e5bd12dde530208893312327fcafc10a1c55980e808accd09b2617bbe3ac94fdbb244908bf59b3ab50816ebb9d3fe1589b193314a4394e808b8cba14b5e6a7f4b21621016981b667d138c7d", 0xeb}], 0x6, &(0x7f0000001600)=[@cred={{0x18}}], 0x18, 0x801}}, {{&(0x7f0000001640)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001740)=[{&(0x7f00000016c0)="4e6e13f7857d8b8ea4d43e391be12ea1e12fe414b543f773a364286427e7d6be29b5f7ee2274d83791fd301a195e745ff175d2f780966cb1428edd8db843", 0x3e}], 0x1, &(0x7f0000001840)=ANY=[@ANYBLOB="180000000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="180000080008000002007600", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x48, 0x80}}, {{&(0x7f00000018c0)=@abs={0x1, 0x0, 0x4e22}, 0xac, &(0x7f0000002e80)=[{&(0x7f0000001940)="73b20b7d4c9bda023961e7e35929936f58964f55ca60cec1ef5ced780def96691afbde33ddfc03381497148e33353fd90837bef4dfdeeb6a85d78427d080bbcbb57d2d7aba88ef56ae1638e2100a4fb8d65167db4b52dd94e9d66189466de8e6644b3288cba2ab1240e4ce1c114b7b", 0x6f}, {&(0x7f00000019c0)="a6e5134a1be2670f856fd56bbd2f0d256cbf7993ddb20f4e287d4166df1dfe7a0c06d75350917a769dc56ef3164418bae87539e40c15ca007dd4e26d4aa807732084ec128540bc2ade7564a476a695698c5266c6a53c8688173e76a6a814b07f3769b9d1710a94fdfcb307578697551c8a21419ccb3e4f8a9017d6c31e510a1a9baf2ad8e500035e2e5644b03e1f69c09d1e6c524cd5aab1fd10e15c3bc4b925a494d24841505b5e183a573b84330a7eb65e09d41d0cd62f3f708eb109c6aa3f5d133d8e63319bebd436bff3ff23a6f9bfb3", 0xd2}, {&(0x7f0000001ac0)="6e68530b4e2b1bd3a24938ada4bcb96f9df175d23735f6b919b60f29569d1097f98fc01361c9e08f629d6df65803e39d1e7c3574cf3ec11da9c5be96e37f1621babd8844c7c78e7f71b2d2c5ff01b262ecbd061cc778ebaa8f5ce73369695cd2d09c0ac7db13dc070ec9954677190d224631ac2f1eb611525f5d4a6b9328503aea68a4009d9e1a9c65c90942c4e364f7c055e4fc762fec789f9546ebe8ac48afffc2d715340ed30428256724ae051d99a6a7598432d226320be4780b7eb3aa01447fb2e5bb1842a707d8f16d4426c455ef15130503dc727ee43fbc4ebbf8c405009f8a618c99af2dc8698da851435f6a8c4497616a0509ae66bf6b67da33a1211e3c47e2081ef9931e3203f165776ac14a59bf3a7e759c8b465555b5fa3f96bca8ffd8582c60c86611b00664f3b76bd186567c382150604aa95d7ca1d454071bb1b590c3a7057d9a26e084b376c26b81a79242af1448835934eee04d7f88f0081003f6e92cd1c7a481e1c3c37ebb47f1bca7fd940e49fcc36b59fc1e111ac520632bffc940693183ff3104307ede4433a2faed13d6095c49a98b36c9bc57c116060e7e623ddd0f09771aa14dc33cfcd929765f9c832825181ce30edc5d92123264a6242e66a01dce397f05fdf79039eabd6e5e274a608ee83c716543d40bcc01db772d527baa84872f637626078d6ace99fd9b3e68e31f4783e5f3aee9ee0e9eb917d5af382e235bb9805a1b91b218a1247d6a9e27b95d19fcdecf215eb8c43f6cfc57cf1bdbb060456cfaea884280e718071812b068e5fc708f66646dc8d578a8b695edc6d35a26f5e8bb90df62b838b69d8ac6839a04a1401f9f38359a90d9e9fa9d91da301b26a36c9c840939f78efa85d62d1e228be15a900a1a608e5241807cbb5f5eeed85e61d9505421f4b7e39c989fcf070187db49bdc8e8af9500fef12b3eb5db6588cdfc7c5036cb6ebaaed40d2b45db28889e665e4d0ab71f0ecd75343d3bb0602f34e1b22985f66bb5586411d543e478f27c2c84ea982648cb2452616ffbc665fcf4b246b4292738028c56c073a4816823241c754f5ed2503c6a917113d04c3ce8486cea09a2b30687b445139b08825e602f40318bd9cf3bb45d20d76226b6696065f2ed4c1448220db3557f015bab8e5a95a001bab5e34d488186a368a4ac5f95ad65fd38b8a8cd3261bd401700f2d081c0e6614f95c38084d775fe7f93e57d2d22d3441105af9f5bda33a8351b0677bc627bf92296c4a0f5a08ed3de028ee6899c9260f4fed1cc60d997fdb5dcafbe3981bcde7a24a9290f69992d5c46d4859caebccd703faa1a16a79033da53fd5ebebcbbdccad0bebb77cab2caf65817a2cc097f2922cbc5fe11cb7473c94b85ad239b8eded13b9fbc8b188364da16ad16fcf1ae30b469776a7c6e1e4075460522afa67fe80f7080e84f099bd522b18290719a3ebec3139acf2a66e0f10e96f87254052b7ac76634c539eb5b6a4101a8a02d99af452f8369092671cc7effad8645529cd65731201f1423e92b83d27d05301589f91628c2434e1be27f22e1d188cca6189258ab22a6b76bec7993f0502f162c3a40417ce148dc21a854e09ca74c42972a01a3656fbe74dfc8d78a7851f7b7d801ce75e4aad945880da8a6e58e6a73e2f92cf9c562c6a645098f2dea7baf09e52e6a786e59876161c60624f3dfe1d926ddcd5b06a6d93af4ffa22dc5b584188462295861d409b54a715088f8147aa284279a8a44835a183f914730d2273a5d0c8474de32f22f579f27b12333e21835f145af771864fe77696d995cf550ab8defab22d01edadf3a972316c61bfdd90a2fd7f98bc87a33a99ca09b1e2dbef727a635b75500bed1ea1e9dfd31ad267a9a1d591d9ade55cc352d79d33b7ac513823905e28b80585921a17aa99f2753e5285432ff4875fa127fb8ad5392f32e0d701412039cfa5f292e6cb000149b72ae90456c6bcc1a4c1dfc3a4280b7065211aca789184db7ae91cc273447d8e524df524c7803892bc8f722c60fb0114b92ee002147f664b16e2ff9080249a72edc4c30c9cb90ba0e32da0b38d6c485b7d85c0ffbf921de61b646351527a7d749cb2d407a005c4bee2574ff56d9442f8a86fb033f16878e88164fbbf1d68efc0c82e674dfc863ee02db1b3fc039540d690867b4e3ad1320b6c37f141ff9a173b0f3af6a4aab88eda0dc96560549ed0c1e32a0a614ae011c578e7944741113646ab26c1ac234148890a07a5c02a201d7475b3d768ccb8ad20355bf48a34bb949817fe7c228b9edf2fb0141a82a3c4fcc50a9e457c292f0c35c10c93de6999e6129eba06175408dcb022f24621ac71a41164312dc2af5b29b508456446e06c07f658c9763497ee0496ed7c3b5b553b81a55eb54f5db458f2b4b6f161304453192e2d35e9418b4a0a18658259ae6819539f75df2786b0a0c0d9b560ffbb48cb7602d031bf33afd9c874e1f2a25fdecb21f2941820542497640f6c86afc0cfe7f2abdf5fadefd6b0f4df14fbd95c480037978bc8ccba34941d1488a3d7d05c65d48ed4be18e91b10919c68ffe7314c1276629340b33cc7403eac1a992e1c755d2e62199d524ceae39469fb2a6b8d6bc41e68ca40f789f3613467bc0f71a84b4c535b95f902ebb3c42a23602cd28b53ca8af9a2d0dd76e4b890bcdda3cd8cc41036ac92ab4132ebc1eb83d90ba66dd81b7cb20201247972d968d89d419430017f8c86890de2f35488f90f01db983bd42413b44780fd1682c0960a2c7f964305ff3df6d3b13a927db8e04265eeecec157d724c1ef4373a71c509b00b086914be69631aca6ee38e5d7d72659b952493e3444bdb33eb0c37d524b5435e0eb525a45c598430893cf7d45d2a108eeea310bbd0fcabcacf51c26f3d0c1bb2048c5970e283255c4ed559633034f0322957554c94c1421495bdd88b38f6bcf0cc5139bbc9971325675863429c0f21035a9e8ba0c845d6c1d9d143b553dc15cef6e978f65b84d687218ee400225162297ffb753d9c12e3d211474dccf5cf865b617ed2257b058a249975882f73829e863304122b94e229d6ad1c8c230d87647b6d52e77f0e6217e8c3bd57cabb6272e04311ce501ef4023a5076bfbbf1a92e6af655ccf778bc3ba2c3b388a561e0562e37024a17f2b43895292d63b189eea15f09bd56860b900106251b9b335e753cb2512a1586528ad74bf82182d977228aaaffdc04fffb4a94a4ba1f9415d9cb92bf895a1a5125f1a8398fe6f140c711d101f02ee763d50f29e1b400ed1c7955719e0bb2f472d472090483d5860a2409fa5121e4a020b2a79183c3d95da243ade8bfa32c2004edcc2b3b55bb7d0aa6ab6ba7b32b5e73a36425267fb9a804aa22e111984331893de3109f43ebb3882d46ea05f15057eb121ae7a1eafa625e6e8228864292baf4abdd98dae7d64cc86e2f9d37b45f897f49f70bb738f9f76fb767828ee6fabeab8d772c68e04da0c8ff232e7251eb5d0aa36a8a0b4d4c2a73d625195b4d81b98782625f0c803aa841462ecdf9ebc3c65a4eaf56e3d65c1935ad1db7bcf5678571f2cda2023a9e9e64ac37028e56812b8512e903e53efb860bd2762456333ba02913af921591c0a264bbe3e81255dc50098f2cd569741264aa211987cffedc3464e6211e1e28ee82b21629507a0710615de5ef3c77e81222f38c99a59f85b5c7e46c9ddb7c8ffbae8257970be774c8c07c5e720cb4684d9fda24c72a5a4ac3e73f604f3ee4883228e500c5e4f5adf1b4141c534f6f74ad4ef3cd1d79136d46acfcbc642f8d6fc3759b551b82f4d77c5e748bcef300235b18d8d78f32f7c63ff051c510c8d5987caf5b3bcd3679686ff11a3063fe5df7c45dd32a514c9e7dc728e92d974cab429b0920336c807aca1fb7248d1c96f872085a1bc3e4b4f10dfdef6b4c6885f3f0528f16bd0189250fdce693d41aa665bf825949d71f17459014d14a791523545bfea787b500e12abc002328e54f5255c91a76145502021f249fe452bdc7b1fe86d7d3ee88d268917d55623004f7273339b421d12752ebb1941ca6c3d8bd3b34997afbaa260734956b9aa5c33ef132859c2411884dfa5695318f19f67e06ab8c9b598e66fc05d92a793237cc3e8a30e2f5755e923a7253e0a8926498861557d334fab772fdb77e9af80d776f944de7f366bd65c9493ddb2610f7714c30b70a48bb9055cf743336e62324a393c5ea47489f4081598e2ceecebc99e92efd51034249bb5c7b1a04573dfec5b23b04053927a5a4f977a26bf2c31d7504630225e77ecebed0c84b611c6940976d3962482fbefdf7c2368e3f90602fce88640b007386b3605b487cf5816930fd2f74b5031070a086628dacde5c2ebc6587b58b345bd280615bbc33130bedd2eafa230214ab885a900d70fc408f6e08f2c754fda6f961d1c828ce0839d13242cfa1c9acdca27a202f86ce104a5d77d11bc3c962c116c4564e98cd6c260cac619198a91343602f9f0003bf8073c5d806bda72dfd5ca859c1882764cb9afc6b0109e05a87c28d3fe567fe341c9346f450cff1d3fd7fca77ff053fcd6045154feee173dfbe3d6b62865b7a7a86ae9d71ba1a6413e2f4decf8ac825821f63128cc070be05724cb077ef98af19989317c4849bb26eaf338298eb1b404e833560da4f7be99031f5260ad9e797a8477e68e29940e9225a3b1db83bad430e03b4a8f8c010d8c8c8096e6b5b014385a9b993ff3059e64d1bf1be630ba9a6a5fa3d49163e639a14c2222cddeaea8d2f90e81409ebc256369b8808abead9b6ca8285759f4aef96ab6fa41cb8f43b11ffdd1f8f7147241a1adec0310e68c7a73bdef17509780434a908b516dfeecc52edcf6e45214c45e44660c541e6f772ee8c91e905332d68fdac15149fe20de3594ec7a74c9087a7ddc917c2f726bad102143b5138b28f068320d52ff566ac009d7db7b6da56cf08e7e1d669ba06cc14b266805fc916b3f1d6a2ae13e7d434d95a50047343bb1f3519342ada1fe562970bacd1073e1fc20bfb56bc8726e95650e4898c6e6b71c1c0b82a473c3de1ab2fa70beb8e649c174cd4af1c9173bcf8bcf6d12ae2836592b93fd619cb4ba826a78c6d89f0f782c4e294ea4245295407f5115911ecf0669b42c69c4aa9a0fb8ccba2d890bd4164a148fbb87ebb370693bd00350a12f5955dc343a1bbe32ac0294f738ef56e88b06e66a8df2dff30d184db55540a2b20217f0fb9cfdd5497a7414a7895f0db5c181c3678e66b1c5d9c8704e3eacd11571e35f4bdeb431e8661aa36b16178a8d99f6029617aa5ba4d174631af226e98c909ce42cfe5e1ebf45bb534ddf9a3c4633be857a1fb3536895916dfc432da4627cfc45b1fc3ff566db95c5c4e25eaf0ee54c50f8f9106a81a055d60db283027fb8eefc3efe8c6870f15fe962e44cea1ae5a6345906667b2aec43d15aa2dba88f01ea67b60c7a3fb60fe752e4f16344d6f53d640ceb212ca333b30c5b114f0a1b57c2e7751341dd4ee147f4843a49e72b73fd284d2f88160b47ad32473fa47099feaa58a7b45e39c7372a3e6bb13f9b31bb5b6369c1bab1a5e75d17cc51d38895db91a44b3b4d0dc624c8b3b814f8153416e8509247be20a328281de7a197e14d537ea627d147e73b848763dcf767032b091fddc902d9f5fd77a9cbc268e80f81a20b37a44404ad6c8b5eefd6d7e23d3a2411e02fbd8ab08cbe3181812ad67f8f5af81ccae12c0772d80cbf55c562bef895528b1f724e89f387baca5ab05cd279165fc92c8976", 0x1000}, {&(0x7f0000002ac0)="4d66f85167978da8a9562e4b518cbedbb268c13d60ba8f87d634b3766c021c97ad8ff7c2a8d739fb4107d1e0edb9bcf95c7df7e439988088e88ef84e99c32bfa5d24c62822c2ec1878819ce0dcb44ce447553d1c002f9f488f08aaf1a34cf526f9a8a205f78ab95b7278a3997d767597c2faab7e5f68d18be7ef60cb5e6f6c2752d5dda5f1e201c12abbf3ef60a0a206a31ac94933c71b9dca15ba56f1582f5bf4e34a71ac6cf797680d62aebdfb57a5bf58672d98965d81e65417e4c00ba2ff0ba103b2bed09b878975c59624f8bb84d91344177a944051150c7c2d92d42a01d2d90ae1378b41101e60ab30", 0xec}, {&(0x7f0000002bc0)}, {&(0x7f0000002c00)="fe0197772fdcf49d6ad4a436ef0d2a25e1723aea6b6f18f6e1d6e51a12524f68581f3af4282a8dd5558d6a11d17a2eff485b7aa6ee4d0c515467cad597ad04aad325660b533540f20411d5549451bf215f5594477dccd8e08809b8", 0x5b}, {&(0x7f0000002c80)="d16ad64a2ba27bda14b68029484da6accda93a89061b15467de90f106ccd3939f8534b7ead878ca4c229841ed934865ce9a7ec0fc3365d0eeff3db82f702a22033aee72db00d3ac4a99fce34cdae81e9fb285512315f3b18c51745436dfd9fdd8e3b23efe1466ba1f010c2c0e8853281e42b09a7c8ca52b9e44f15d19665f3ff17", 0x81}, {&(0x7f0000002d40)="3b54ab2c2cd4b012a3ea1c843891283d2caeaa28a2a8533b4d36fc531eba7aa2c284dfbfb64531f217ce76699d25536505c3804fb9bda043caa1ad99d9ed8ec981bc8d77a6bc3be58451a67142263f3a5c7519390abc92e03ef6cf03fbb0291eda0901e66ad732806e3dada46d597035e45fa0a6c06065539ac8db4f1c1ad1bc280d5edd960469fe499606b1e7c9bc3de1b84b24314301d2b5072858158ee79a4496a2eb7a31607c128964e7c8f016f355e683cdac930971d7962ee3d9e18b25a843be469de841744523fdff44fad60af09c26b245467f", 0xd7}, {&(0x7f0000002e40)="93c93f38455642d1a7ca217009e8906223998531411b7a9ba1", 0x19}], 0x9, &(0x7f00000050c0)=ANY=[@ANYBLOB="140000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="180000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32], 0x5c, 0x4004011}}], 0x5, 0x4054)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000dd0000000000000000280c00008000000000000000000065210000000000000000000100000000000000000000000000000000000000000000000000000001000000000000000000000200000000000000000000000000004a000000000000000001000000"], 0xb8}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="15000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001b8700303317e879125d9f0000000000003880653400"/36], 0x48)
preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/150, 0x96}], 0x1, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0)

5.775285596s ago: executing program 5 (id=1144):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x18}, 0x15, 0x3, 'none\x00', 0x19, 0x4, 0x10072}, 0x2c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'sed\x00', 0x2, 0x7, 0x37}, {@remote, 0x4e23, 0x10000, 0xc3, 0x12d5c, 0x12d58}}, 0x44)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0)
sendfile(r3, r3, 0x0, 0x7)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000280)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f00000002c0)={@hyper})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000080)={{@any, 0xffffffff}, 0x1, 0x1, 0x1})
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x204000, 0x0)
r5 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x440, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000002400)={0xeeef0000, 0x8000, 0x40000000})
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r6, 0x4008ae48, &(0x7f0000000000))

5.421128635s ago: executing program 5 (id=1147):
r0 = socket$packet(0x11, 0xa, 0x300)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

5.204456724s ago: executing program 5 (id=1149):
socket$rds(0x15, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
socket$netlink(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0)
io_setup(0x3, &(0x7f0000000180)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}])
r6 = dup(r3)
write$UHID_INPUT(r6, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006)

4.023212558s ago: executing program 5 (id=1157):
r0 = socket$packet(0x11, 0xa, 0x300)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

3.794767391s ago: executing program 5 (id=1158):
r0 = io_uring_setup(0x1d57, &(0x7f0000000000)={0x0, 0xa8b8, 0x2, 0x0, 0x278})
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000040)="05996a2de85e5e6bc225b35bd223551a35fc56d88814979a6fdae8e6438e293ea14eb81e3321e66a4a74c9bda8742c77acfd1d68ff2d2fd41581b6f9f5d7b56437d33b427ee3f436e48622d4f3aa", 0x4e)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
socket$kcm(0x10, 0x2, 0x10)
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000340)=@req3={0x2, 0x1, 0x6, 0x7e, 0x8, 0x4, 0xe}, 0x1c)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mount$bind(&(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x11080, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000037c0), 0x1, 0x0, &(0x7f0000003700)={0x77359400})
unshare(0x40000000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
gettid()
timer_create(0x0, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r4, r3], 0x3)

3.602014916s ago: executing program 0 (id=1161):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="1183dc77"], 0x1c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050000000008c10000031d48cd3fb111920f7073ef42f2f080057"], 0x54}}, 0x240440d0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="900c0000", @ANYRES16=r2, @ANYBLOB="00032dbd7000fedbdf25390000008a000300", @ANYRES32=r6, @ANYBLOB="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"], 0xc90}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
process_madvise(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000900)='1', 0x1}], 0x1, 0x3, 0x0)
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='taRget PCI:0:0:2.0\x00'], 0x13)
r8 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0)

3.524361392s ago: executing program 0 (id=1162):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000100008fc9"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00@', @ANYRES16=r2, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b"], 0x38}}, 0x4044810)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
statx(0xffffffffffffffff, &(0x7f0000004f80)='./file0\x00', 0x4000, 0x8, &(0x7f0000004fc0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005140)=[{{&(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000740)="8aa90236c2bf16009e9b2ee17df4d8633167d13431d5cddb94f614ade729b628a56ac872dba4ee1f561a4ac5ba94645e292492dbb2637bd6b66818239cad009431b2a6501099c5408214813cb8e2755703c59c4c1ab634bce5070a567ac38d01a1b4fb062fccf69a0361831f129a54f01ab6c2a258d4ce34c8cbbae79789d56394d9621358e75158", 0x88}, {&(0x7f0000000800)="a777fef3df2068bce952eac1aeee0a44ef912c751f7c3f3d4c18255392e578aaa2438c6d64ec4c1d430b5c64a87d6cf8374e9be43292d91ba95dda55148a29a303f302b61f7372b15a4966261c44fdc1e3562671eeb0fb0ba9d6f44316c6d6fd81b56ff954848775800a0942c1f622cfe94250f1f1ad150b2c24d8e422ff4c3e2849ec48a1ad47bb97bab72adec3532d455e720d6cba8e9b91fe513a1e380052de10d683270dc1fa6602fd83f2818ef7f33a12d70852b2110e46cb2da4bcf1264b35a40a5107a5f9ef1ea37270ea2ecda4b605dcf7d600ed761ad0e52b27", 0xde}, {&(0x7f0000000900)="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", 0xfd}, {&(0x7f0000000a00)="998f690e5ea7341e4be8ab79213c07a726ccff5e135beec67e44dbd7972e8b292acff0b27552d4d23b2e5769f6d946649c7d6cdc101443f13173fe84ae5ad36d43f8acc5d7431fc14dae", 0x4a}, {&(0x7f0000000500)="44dafd23e365", 0x6}, {&(0x7f0000000580)="80878ea5765a1feae80237c8380bf7fb7fa606b24f44324bf80dd9091a742d48d39ee1b814a3a94f26eefe9813bdafce91663382190e", 0x36}, {&(0x7f0000000a80)="2559e6f2e6338c5c9e2cdbeaf827e63f00ea44270511a393829aa8d3aaf5ffe0f93e20a204c52e9c0194704fe59f51e31828149993d13b81a27e5d4ff4965d51103f20ea7a6289a164acf4a9d30ffdfe656b18df8f25087117537d92882f889cf4613068be6174596b752545721fcd175fe7b2b6dadbb6a19673d9136764385e6ebda7fb239dfa39336f8507e47a741a187daaf30d1f0dc2f0c301375d658e21c53b02d8436586601a9e69d3135a1c257b08a6ce73820a04", 0xb8}], 0x7, 0x0, 0x0, 0x80}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b80)="d95596c641f0d4dc8bf840bf10d6440f225a208e805494c018f80418d33327b93f1066fa3975e4846788670ee0825ce352ed", 0x32}, {&(0x7f0000000bc0)="a944c0a9ba9055650bd78a815392c8a60e897c062e608a4d0b7a849950c11783b448da8661e25fd6769c160f64bb6b4e14b01e7489c50b2702bd9cf0c0641652884cc65aab3be585420d9e9a51bd2a8bc1e3a913398be89029bcbfa2e471cc5ad52884dd65df9c46b54280069832da2bd864d31b7bb1042e74a6d09bf35144f375da0712400135cfd8ca2372afd41e510d6a870d791c2bb2e9c57dbe07622a7039a3884786fe2c58fdc1560df01017", 0xaf}], 0x2, &(0x7f0000000cc0)=[@rights={{0x10, 0x1, 0x1, [r4]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, r0]}}, @rights={{0x28, 0x1, 0x1, [r1, r4, r4, r0, r0, r1, r3]}}, @cred={{0x18, 0x1, 0x2, {0x0, r5, r6}}}, @cred={{0x18}}], 0x9c, 0x2004c0d1}}, {{&(0x7f0000000fc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000001040)="036e2f7c0fcc4e36cea81487e65980a58a30", 0x12}, {&(0x7f0000001080)="8c2e7f6b42073e4f45b66baba0636cbbb5b969b9a1086e015fad96c85e23bc71b94bce3ac5d3efff03c68fe2e651e6e20cc0783660d504b8ea20a2550ad6f9f90aa9c68eab49911af6e7d9a0a643c0e7cab6d1b11ff7f67f2000f6c77429ed082bd588cb543d7652f5b7dbf9dc943720854977371fc40107a32ea93cbfa6d81ce522304fa20c2c93417942cb168164e41e4b64146245239bea60be7f69334b3e9521c89988bde2dbbd7a32549588955b08f20d1ead90f9", 0xb7}, {&(0x7f0000001140)="e21829766bbd4518d4408ee68cffd877ed97790c7332e60f93753f610a154eab939493dc0bdfc47689ee58ce4d559231b86158aacf2e6551cfd0606ba040256b8644e790b1632df8f04d8e39b7d490fc761d5736628cb2d59fe8416b58109fbd24638d9f19dceafeab012583f541ec4f9dacadd7df355c4aa014bb37d70031f31464568eeb2fbf42f86f668d8a410ce372315ebb94dd0b4f32b568d15f015cdc2c5714bce47b8f74a1dbcaf8ee108fb7a851113986472f3c821f0be0aaea644773cc972cbaf979ded0db828b0d1f6fddc58ac4355b2c9af43c2a6b9eb69d617ce71b5771c95f1e253379637074781b3869e8e6", 0xf3}, {&(0x7f0000001240)="e5a538dd482fd82c02061d911c7966e1039ed3ec6f28dedacb752455c10e38951f5a3a37a77ee17179aa177d5442e203ffed987bcb7d13b044235a9ff6797ee01cb7f7d8893512f4e66c01e719a9d363f95de6b8840f8a4ed5a9267c4dcb6fec1e863d75362b149b8efcc77f55c63ce84acceca45a6c07500b08ab02f07a2260cc78f2e0bdb723affd5a083691f8efa043000cc54ba142f43044f78293d29db77df510a184ee74e3c2b16da3d53273200c8bba75bda720a4b7c787cc", 0xbc}, {&(0x7f0000001300)="9a35f82e43e438f94ebe257f0674cdab3f92fd7747f2fbdfadb1f4295a1d7d0ec7b9f11530b08743f8401232d061be2e66d56183e873fdb8ac843b1c8d5f18599316efd7537059ef947811ffdd11d43740916d718c1bbf82cee4de00fa265399eb2a7ad6f3b07130810974b1e4fc9a2a1db750aadc43d4", 0x77}, {&(0x7f0000001380)="bc752dfeb826004e6302fbc1ee18fd1103a3c3d241b71302e5517f966b10d06f18c19770ae05db56077b93497e056a41b8c14ff2b988b405f3c7cc5bc22bed127b93408cc9f923f7dd422b05648256fc9e9c3fdffc5ae7d656674baf0a0cb5e1b6bb61e0612655f113d16c30ebe26760b788df134536cbb06d439fda3bc304e038cec4da37be25f6ac74fce115b7c062dc2a156cd45e6298e0fa53c6d979e69e5bd12dde530208893312327fcafc10a1c55980e808accd09b2617bbe3ac94fdbb244908bf59b3ab50816ebb9d3fe1589b193314a4394e808b8cba14b5e6a7f4b21621016981b667d138c7d", 0xeb}], 0x6, &(0x7f0000001600)=[@cred={{0x18}}], 0x18, 0x801}}, {{&(0x7f0000001640)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001740)=[{&(0x7f00000016c0)="4e6e13f7857d8b8ea4d43e391be12ea1e12fe414b543f773a364286427e7d6be29b5f7ee2274d83791fd301a195e745ff175d2f780966cb1428edd8db843", 0x3e}], 0x1, &(0x7f0000001840)=ANY=[@ANYBLOB="180000000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="180000080008000002007600", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x48, 0x80}}, {{&(0x7f00000018c0)=@abs={0x1, 0x0, 0x4e22}, 0xac, &(0x7f0000002e80)=[{&(0x7f0000001940)="73b20b7d4c9bda023961e7e35929936f58964f55ca60cec1ef5ced780def96691afbde33ddfc03381497148e33353fd90837bef4dfdeeb6a85d78427d080bbcbb57d2d7aba88ef56ae1638e2100a4fb8d65167db4b52dd94e9d66189466de8e6644b3288cba2ab1240e4ce1c114b7b", 0x6f}, {&(0x7f00000019c0)="a6e5134a1be2670f856fd56bbd2f0d256cbf7993ddb20f4e287d4166df1dfe7a0c06d75350917a769dc56ef3164418bae87539e40c15ca007dd4e26d4aa807732084ec128540bc2ade7564a476a695698c5266c6a53c8688173e76a6a814b07f3769b9d1710a94fdfcb307578697551c8a21419ccb3e4f8a9017d6c31e510a1a9baf2ad8e500035e2e5644b03e1f69c09d1e6c524cd5aab1fd10e15c3bc4b925a494d24841505b5e183a573b84330a7eb65e09d41d0cd62f3f708eb109c6aa3f5d133d8e63319bebd436bff3ff23a6f9bfb3", 0xd2}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000002ac0)="4d66f85167978da8a9562e4b518cbedbb268c13d60ba8f87d634b3766c021c97ad8ff7c2a8d739fb4107d1e0edb9bcf95c7df7e439988088e88ef84e99c32bfa5d24c62822c2ec1878819ce0dcb44ce447553d1c002f9f488f08aaf1a34cf526f9a8a205f78ab95b7278a3997d767597c2faab7e5f68d18be7ef60cb5e6f6c2752d5dda5f1e201c12abbf3ef60a0a206a31ac94933c71b9dca15ba56f1582f5bf4e34a71ac6cf797680d62aebdfb57a5bf58672d98965d81e65417e4c00ba2ff0ba103b2bed09b878975c59624f8bb84d91344177a944051150c7c2d92d42a01d2d90ae1378b41101e60ab30", 0xec}, {&(0x7f0000002bc0)}, {&(0x7f0000002c00)="fe0197772fdcf49d6ad4a436ef0d2a25e1723aea6b6f18f6e1d6e51a12524f68581f3af4282a8dd5558d6a11d17a2eff485b7aa6ee4d0c515467cad597ad04aad325660b533540f20411d5549451bf215f5594477dccd8e08809b8", 0x5b}, {&(0x7f0000002c80)="d16ad64a2ba27bda14b68029484da6accda93a89061b15467de90f106ccd3939f8534b7ead878ca4c229841ed934865ce9a7ec0fc3365d0eeff3db82f702a22033aee72db00d3ac4a99fce34cdae81e9fb285512315f3b18c51745436dfd9fdd8e3b23efe1466ba1f010c2c0e8853281e42b09a7c8ca52b9e44f15d19665f3ff17", 0x81}, {&(0x7f0000002d40)="3b54ab2c2cd4b012a3ea1c843891283d2caeaa28a2a8533b4d36fc531eba7aa2c284dfbfb64531f217ce76699d25536505c3804fb9bda043caa1ad99d9ed8ec981bc8d77a6bc3be58451a67142263f3a5c7519390abc92e03ef6cf03fbb0291eda0901e66ad732806e3dada46d597035e45fa0a6c06065539ac8db4f1c1ad1bc280d5edd960469fe499606b1e7c9bc3de1b84b24314301d2b5072858158ee79a4496a2eb7a31607c128964e7c8f016f355e683cdac930971d7962ee3d9e18b25a843be469de841744523fdff44fad60af09c26b245467f", 0xd7}, {&(0x7f0000002e40)="93c93f38455642d1a7ca217009e8906223998531411b7a9ba1", 0x19}], 0x9, &(0x7f00000050c0)=ANY=[@ANYBLOB="140000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="180000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32], 0x5c, 0x4004011}}], 0x5, 0x4054)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000dd0000000000000000280c00008000000000000000000065210000000000000000000100000000000000000000000000000000000000000000000000000001000000000000000000000200000000000000000000000000004a000000000000000001000000"], 0xb8}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, @void, @value}, 0x94)
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
preadv(r7, &(0x7f0000000180)=[{&(0x7f0000000000)=""/150, 0x96}], 0x1, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0)

3.444573995s ago: executing program 0 (id=1163):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x800, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = gettid()
sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f00000000c0), 0x2, 0x0)
sendfile(r5, r5, 0x0, 0x6)

2.431567183s ago: executing program 0 (id=1178):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xc0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(r4, &(0x7f00003e8000/0x1000)=nil, 0x4000)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x88002, 0x0)
pwritev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f0000000040)=0xd)
unshare(0x62040200)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)

2.144565529s ago: executing program 2 (id=1172):
mkdir(&(0x7f0000000280)='./bus\x00', 0xe8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180), 0xb)
copy_file_range(r1, &(0x7f0000000080), r0, 0x0, 0xfffffffffffffff8, 0xff01)

2.084750455s ago: executing program 2 (id=1173):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup(r7)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000f40)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r5}})
r9 = mq_open(&(0x7f0000000a00)='trans=fd,', 0x40, 0x0, 0x0)
syncfs(r9)
recvmmsg$unix(r5, &(0x7f0000003500)=[{{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000000ac0)=""/52, 0x34}, {&(0x7f0000000b00)=""/170, 0xaa}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/208, 0xd0}, {&(0x7f0000000cc0)=""/162, 0xa2}, {0x0}, {&(0x7f0000000e40)=""/207, 0xcf}, {&(0x7f0000001f80)=""/161, 0xa1}, {0x0}], 0xa}}, {{&(0x7f0000003200)=@abs, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000003280)=""/249, 0xf9}, {&(0x7f0000003380)=""/212, 0xd4}, {&(0x7f0000003480)=""/58, 0x3a}], 0x3}}], 0x2, 0x40, &(0x7f0000003540)={0x77359400})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r10 = socket$kcm(0x2, 0x5, 0x84)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$inet(r10, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)}], 0x1}, 0x0)
recvmsg$kcm(r10, 0x0, 0x40000002)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000940)={0x0, <r12=>0x0})
syz_open_procfs(r12, &(0x7f0000000500)='fdinfo/3\x00')
sendmsg$inet(r6, &(0x7f00000009c0)={&(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000400)="745a3b87dc1cc2588a388f2791a0e371cf1c1225f85d2f048a87ceaef76f89d3cda12462117d722d3ac0d90a4fedc2d3d62fdd7defcac1d36d565183df7bca968485e96e44ca6744a397e22a61b45f693cee10a132b5c29346bb94460db26a4c1354076c2ed0e1a6387a3a72673e3c3785da101b80737786382dac047e308fdb171ffd0ea5a2ba69fb1945579b0981b7edcdec233d820f885a68d278f1a755d7bfc5616e081fdc0ebac67145ecbb6f4a2d810be50699576f1730ac3bfe7ab1cda85d46ae0fb3e61c82c154ad2c453389564cbe91e72ed72d1892f9348b80587e1932585413034f4c038c0f2090", 0xed}], 0x1, &(0x7f00000006c0)=[@ip_retopts={{0x78, 0x0, 0x7, {[@noop, @generic={0x88, 0x9, "58ea5a0753e2a0"}, @noop, @generic={0x83, 0x2}, @lsrr={0x83, 0x13, 0xb4, [@broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @timestamp={0x44, 0x18, 0xd8, 0x0, 0x0, [0x2, 0xa, 0x500000, 0x7, 0x9]}, @ssrr={0x89, 0xf, 0xa4, [@multicast1, @multicast1, @rand_addr=0x64010100]}, @ssrr={0x89, 0xb, 0x73, [@rand_addr, @multicast2]}, @end, @timestamp={0x44, 0x18, 0x6, 0x0, 0x9, [0x2, 0x1, 0x129, 0x9, 0x8]}]}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@cipso={0x86, 0x25, 0x3, [{0x7, 0x2}, {0x2, 0xd, "1cc7585c687bf47ecff633"}, {0x7, 0x6, 'x\f\v\''}, {0x2, 0x8, "58efc2eeb678"}, {0x5, 0x2}]}, @cipso={0x86, 0x24, 0x1, [{0x2, 0x10, "032c508f4c91f087c10620eb24bc"}, {0x0, 0xe, "09f0ed505a1b04eced4dfd10"}]}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x42820000}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x37, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x24}, 0xdef}, {@rand_addr=0x64010101, 0x9}, {@loopback, 0x8}, {@empty, 0x9}, {@loopback, 0x5}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x48, 0x1, [{0x0, 0x7, "2f04ba04fc"}, {0x7, 0x11, "e89f6444dc16c06f51e2f154bd05b6"}, {0x7, 0xc, "9223602a31b800cbd391"}, {0x7, 0x2}, {0x0, 0xa, "6665f361c93d2c4f"}, {0x1, 0x5, "cdf2bd"}, {0x6, 0xd, "d27c6d4815e9537e2a553e"}]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x4e}}, @ip_retopts={{0x90, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x9, 0x0, 0x0, [0x5, 0x763, 0x9]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0x1c, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6f}, {@remote, 0x1a}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@multicast1}, {@loopback, 0x1}, {@empty, 0x3ff}]}, @timestamp={0x44, 0x24, 0x52, 0x0, 0x4, [0x9, 0x8a0, 0x0, 0x9, 0x4, 0xfffffff9, 0x392f, 0x7bd]}, @rr={0x7, 0x17, 0x8f, [@remote, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @remote]}]}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x75, [@dev={0xac, 0x14, 0x14, 0x17}, @remote, @private=0xa010100, @local, @remote, @remote]}, @noop, @rr={0x7, 0x7, 0x93, [@dev={0xac, 0x14, 0x14, 0xc}]}, @cipso={0x86, 0x3c, 0x2, [{0x7, 0x5, "7fac34"}, {0x7, 0xb, "d0240c976044183666"}, {0x1, 0x10, "acaf76b3f358bf1cbdc191d64cc6"}, {0x5, 0x5, 'A7c'}, {0x2, 0x11, "08ef7db37169f3db1cd4cd8d29ef2d"}]}]}}}], 0x278}, 0x20040000)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/58, 0x3a)

1.845139178s ago: executing program 2 (id=1174):
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, 0x0, 0x44084)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {}, 0xa, 0x0, 0x0, 0x4}}, 0x26)
r5 = socket$netlink(0x10, 0x3, 0x13)
bind$netlink(r5, 0x0, 0x0)
setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, 0x0)
preadv(r6, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/83, 0x53}], 0x1, 0xfffffffe, 0x5)

1.355241767s ago: executing program 0 (id=1176):
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, 0x0, 0x44084)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {}, 0xa, 0x0, 0x0, 0x4}}, 0x26)
r5 = socket$netlink(0x10, 0x3, 0x13)
bind$netlink(r5, 0x0, 0x0)
setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, 0x0)
preadv(r6, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/83, 0x53}], 0x1, 0xfffffffe, 0x5)

915.133046ms ago: executing program 2 (id=1177):
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="3103000000000000000009000000", @ANYRES32], 0x24}}, 0x0)
recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f00000001c0), 0x2000000000000112}, 0x3268455f}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/171, 0xab}], 0x1}, 0xfffffff9}], 0x2, 0x2, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000480)={<r3=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f0000000440), r3}}, 0x18)
r4 = dup(r1)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x3, 0x0, 0x9, 0x37a0}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0xf, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)

621.349ms ago: executing program 1 (id=1179):
mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x2011, 0xffffffffffffffff, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$team(&(0x7f00000001c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000004821178f459c0b7a600", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, 0x0, &(0x7f0000000400))
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100000000000c0002001f0000001e00000008000500", @ANYRES32], 0x50}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xffffffff, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x8, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400008a, 0x700)
fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000000000)=""/7, 0x7)
syz_io_uring_setup(0x70e4, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140))
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB=')'], 0x118)

555.122415ms ago: executing program 1 (id=1180):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="210ffefffffffddbdf", @ANYRES32=r3, @ANYBLOB="1183dc77"], 0x1c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050000000008c10000031d48cd3fb111920f7073ef42f2f080057"], 0x54}}, 0x240440d0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="900c0000", @ANYRES16=r2, @ANYBLOB="00032dbd7000fedbdf25390000008a000300", @ANYRES32=r6, @ANYBLOB="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"], 0xc90}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
process_madvise(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000900)='1', 0x1}], 0x1, 0x3, 0x0)
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='taRget PCI:0:0:2.0\x00'], 0x13)
r8 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0)

554.846028ms ago: executing program 1 (id=1181):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_prespec={0x44, 0x4, 0x2e}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

485.03034ms ago: executing program 1 (id=1182):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000011df7cb513e7120de728521f16d93d6fa04eeaad7e5c628fa9ddc41f4cc00d2d56232fb56c94029724cd3752b642c72864c257f44a7b4acb2b9ee06533ca4c346f0b4d3f0ffbb43cd2d48090b66311a005358ed733b9eee477e82e8123635169b5c09a84bd07d96ee9f8f90712d228edb69927e5dffa819060fc51d9b17605477cfa589fb582540d2b428741428a4e9a928577a77728972798de7394d6323abfd653ffa09152dd565f5c468078d95ef3471efdd1f5aae74c358ae957f27e57fce4c3633dac184901fc962699b679c69b6c3c1abcf91aae2bed64cf5021"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e86c0d85ff9782762f0800", 0x0, 0x1300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000011df7cb513e7120de728521f16d93d6fa04eeaad7e5c628fa9ddc41f4cc00d2d56232fb56c94029724cd3752b642c72864c257f44a7b4acb2b9ee06533ca4c346f0b4d3f0ffbb43cd2d48090b66311a005358ed733b9eee477e82e8123635169b5c09a84bd07d96ee9f8f90712d228edb69927e5dffa819060fc51d9b17605477cfa589fb582540d2b428741428a4e9a928577a77728972798de7394d6323abfd653ffa09152dd565f5c468078d95ef3471efdd1f5aae74c358ae957f27e57fce4c3633dac184901fc962699b679c69b6c3c1abcf91aae2bed64cf5021"], 0x48) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e86c0d85ff9782762f0800", 0x0, 0x1300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x14) (async)

484.525695ms ago: executing program 1 (id=1183):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup(r7)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000f40)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r5}})
r9 = mq_open(&(0x7f0000000a00)='trans=fd,', 0x40, 0x0, 0x0)
syncfs(r9)
recvmmsg$unix(r5, &(0x7f0000003500)=[{{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000000ac0)=""/52, 0x34}, {&(0x7f0000000b00)=""/170, 0xaa}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/208, 0xd0}, {&(0x7f0000000cc0)=""/162, 0xa2}, {0x0}, {&(0x7f0000000e40)=""/207, 0xcf}, {&(0x7f0000001f80)=""/161, 0xa1}, {0x0}], 0xa}}, {{&(0x7f0000003200)=@abs, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000003280)=""/249, 0xf9}, {&(0x7f0000003380)=""/212, 0xd4}, {&(0x7f0000003480)=""/58, 0x3a}], 0x3}}], 0x2, 0x40, &(0x7f0000003540)={0x77359400})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r10 = socket$kcm(0x2, 0x5, 0x84)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$inet(r10, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)}], 0x1}, 0x0)
recvmsg$kcm(r10, 0x0, 0x40000002)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000940)={0x0, <r12=>0x0})
syz_open_procfs(r12, &(0x7f0000000500)='fdinfo/3\x00')
sendmsg$inet(r6, &(0x7f00000009c0)={&(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000400)="745a3b87dc1cc2588a388f2791a0e371cf1c1225f85d2f048a87ceaef76f89d3cda12462117d722d3ac0d90a4fedc2d3d62fdd7defcac1d36d565183df7bca968485e96e44ca6744a397e22a61b45f693cee10a132b5c29346bb94460db26a4c1354076c2ed0e1a6387a3a72673e3c3785da101b80737786382dac047e308fdb171ffd0ea5a2ba69fb1945579b0981b7edcdec233d820f885a68d278f1a755d7bfc5616e081fdc0ebac67145ecbb6f4a2d810be50699576f1730ac3bfe7ab1cda85d46ae0fb3e61c82c154ad2c453389564cbe91e72ed72d1892f9348b80587e1932585413034f4c038c0f2090", 0xed}], 0x1, &(0x7f00000006c0)=[@ip_retopts={{0x78, 0x0, 0x7, {[@noop, @generic={0x88, 0x9, "58ea5a0753e2a0"}, @noop, @generic={0x83, 0x2}, @lsrr={0x83, 0x13, 0xb4, [@broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @timestamp={0x44, 0x18, 0xd8, 0x0, 0x0, [0x2, 0xa, 0x500000, 0x7, 0x9]}, @ssrr={0x89, 0xf, 0xa4, [@multicast1, @multicast1, @rand_addr=0x64010100]}, @ssrr={0x89, 0xb, 0x73, [@rand_addr, @multicast2]}, @end, @timestamp={0x44, 0x18, 0x6, 0x0, 0x9, [0x2, 0x1, 0x129, 0x9, 0x8]}]}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@cipso={0x86, 0x25, 0x3, [{0x7, 0x2}, {0x2, 0xd, "1cc7585c687bf47ecff633"}, {0x7, 0x6, 'x\f\v\''}, {0x2, 0x8, "58efc2eeb678"}, {0x5, 0x2}]}, @cipso={0x86, 0x24, 0x1, [{0x2, 0x10, "032c508f4c91f087c10620eb24bc"}, {0x0, 0xe, "09f0ed505a1b04eced4dfd10"}]}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x42820000}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x37, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x24}, 0xdef}, {@rand_addr=0x64010101, 0x9}, {@loopback, 0x8}, {@empty, 0x9}, {@loopback, 0x5}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x48, 0x1, [{0x0, 0x7, "2f04ba04fc"}, {0x7, 0x11, "e89f6444dc16c06f51e2f154bd05b6"}, {0x7, 0xc, "9223602a31b800cbd391"}, {0x7, 0x2}, {0x0, 0xa, "6665f361c93d2c4f"}, {0x1, 0x5, "cdf2bd"}, {0x6, 0xd, "d27c6d4815e9537e2a553e"}]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x4e}}, @ip_retopts={{0x90, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x9, 0x0, 0x0, [0x5, 0x763, 0x9]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0x1c, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6f}, {@remote, 0x1a}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@multicast1}, {@loopback, 0x1}, {@empty, 0x3ff}]}, @timestamp={0x44, 0x24, 0x52, 0x0, 0x4, [0x9, 0x8a0, 0x0, 0x9, 0x4, 0xfffffff9, 0x392f, 0x7bd]}, @rr={0x7, 0x17, 0x8f, [@remote, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @remote]}]}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x75, [@dev={0xac, 0x14, 0x14, 0x17}, @remote, @private=0xa010100, @local, @remote, @remote]}, @noop, @rr={0x7, 0x7, 0x93, [@dev={0xac, 0x14, 0x14, 0xc}]}, @cipso={0x86, 0x3c, 0x2, [{0x7, 0x5, "7fac34"}, {0x7, 0xb, "d0240c976044183666"}, {0x1, 0x10, "acaf76b3f358bf1cbdc191d64cc6"}, {0x5, 0x5, 'A7c'}, {0x2, 0x11, "08ef7db37169f3db1cd4cd8d29ef2d"}]}]}}}], 0x278}, 0x20040000)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/58, 0x3a)

64.800444ms ago: executing program 2 (id=1184):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/57, 0x39}], 0x1, 0x0, 0x0, 0x30}, 0x40000000)
sendmsg$key(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001280)={0x2, 0x2, 0x2, 0x2, 0x9, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_address={0x5, 0x5, 0x33, 0x80, 0x0, @in6={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d4}]}, 0x48}}, 0x8000)

64.215784ms ago: executing program 1 (id=1185):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xc0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(r4, &(0x7f00003e8000/0x1000)=nil, 0x4000)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x88002, 0x0)
pwritev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f0000000040)=0xd)
unshare(0x62040200)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)

1.982974ms ago: executing program 2 (id=1186):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
landlock_create_ruleset(&(0x7f0000000380)={0x5014, 0x0, 0x1}, 0x18, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000c80)=[{0x20, 0xfc, 0x0, 0xfffff00c}]}, 0x8)
fcntl$dupfd(r0, 0x0, r1)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SIOCX25SFACILITIES(r2, 0x89e3, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f00000000c0)={{}, 0x0, 0x4, @inherit={0x50, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x4, {0x50, 0x10000000000000, 0xd, 0x6, 0x3}, [0xfff]}}, @devid})
syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000)
lseek(0xffffffffffffffff, 0x1, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x10, 0x121b01)
socket(0xf, 0x3, 0x20000)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000040)={0x1})
socket$tipc(0x1e, 0x2, 0x0)
r7 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r7, &(0x7f0000000340)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, 0x10)

0s ago: executing program 0 (id=1187):
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {}, 0xa, 0x0, 0x0, 0x4}}, 0x26)
r6 = socket$netlink(0x10, 0x3, 0x13)
bind$netlink(r6, 0x0, 0x0)
setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/igmp6\x00')
preadv(r7, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/83, 0x53}], 0x1, 0xfffffffe, 0x5)
ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000200)={0x0, 0xed, 0x8, &(0x7f0000000080)={0x4, "fe91c08abe449b1f96adab094fbe11af38f058f7c7d39e22c775fd2509c6c5e9e3"}})
pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1, 0x6, 0x40)
r8 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f00000000c0)=@x86={0x6, 0x0, 0xfe, 0x0, 0x21df, 0x9, 0x3, 0x1, 0x9, 0xa, 0x1, 0x5, 0x0, 0x8, 0x4000004, 0x1, 0x0, 0x2, 0x9, '\x00', 0x10, 0x2})
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x200)

kernel console output (not intermixed with test programs):

3]  ? lockdep_hardirqs_on+0x7c/0x110
[  104.785080][ T7333]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  104.787280][ T7333]  ? __pfx_scsi_execute_cmd+0x10/0x10
[  104.789315][ T7333]  ? percpu_ref_put_many.constprop.0+0x2e/0x2a0
[  104.791692][ T7333]  sr_do_ioctl+0x21c/0x830
[  104.793398][ T7333]  ? __pfx_sr_do_ioctl+0x10/0x10
[  104.795281][ T7333]  sr_packet+0xee/0x1c0
[  104.796842][ T7333]  cdrom_get_media_event+0x117/0x260
[  104.798792][ T7333]  ? __pfx_cdrom_get_media_event+0x10/0x10
[  104.800989][ T7333]  ? __lock_acquire+0x2077/0x3c40
[  104.802883][ T7333]  sr_drive_status+0x167/0x360
[  104.804661][ T7333]  ? __pfx_sr_drive_status+0x10/0x10
[  104.806633][ T7333]  ? lock_acquire.part.0+0x11b/0x380
[  104.808616][ T7333]  cdrom_open+0x2ea/0x2680
[  104.810288][ T7333]  ? __pfx_sr_drive_status+0x10/0x10
[  104.812343][ T7333]  ? __mutex_trylock_common+0xea/0x250
[  104.814381][ T7333]  ? __pfx_cdrom_open+0x10/0x10
[  104.816255][ T7333]  ? sr_block_open+0x167/0x270
[  104.817816][ T7333]  ? trace_contention_end+0xee/0x140
[  104.819497][ T7333]  ? __mutex_lock+0x1cc/0xa60
[  104.820992][ T7333]  ? __pfx_lock_release+0x10/0x10
[  104.823012][ T7333]  ? sr_block_open+0x167/0x270
[  104.824955][ T7333]  ? __pfx___mutex_lock+0x10/0x10
[  104.826604][ T7333]  ? lockdep_hardirqs_on+0x7c/0x110
[  104.828121][ T7333]  ? __pfx_disk_check_media_change+0x10/0x10
[  104.830066][ T7333]  ? lockdep_hardirqs_on+0x7c/0x110
[  104.832028][ T7333]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  104.833785][ T7333]  sr_block_open+0x174/0x270
[  104.835256][ T7333]  ? __pfx_sr_block_open+0x10/0x10
[  104.836824][ T7333]  ? __pfx_sr_block_open+0x10/0x10
[  104.838290][ T7333]  blkdev_get_whole+0x96/0x290
[  104.839905][ T7333]  bdev_open+0x2c7/0xe20
[  104.841487][ T7333]  bdev_file_open_by_dev+0x17d/0x210
[  104.843434][ T7333]  setup_bdev_super+0x78/0x730
[  104.845234][ T7333]  get_tree_bdev_flags+0x365/0x620
[  104.847119][ T7333]  ? __pfx_ntfs_fill_super+0x10/0x10
[  104.849080][ T7333]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  104.851188][ T7333]  ? bpf_lsm_capable+0x9/0x10
[  104.852951][ T7333]  vfs_get_tree+0x8f/0x380
[  104.854617][ T7333]  path_mount+0x6e1/0x1f10
[  104.856312][ T7333]  ? kmem_cache_free+0x152/0x4c0
[  104.858172][ T7333]  ? __pfx_path_mount+0x10/0x10
[  104.859996][ T7333]  ? putname+0x13c/0x180
[  104.861576][ T7333]  __ia32_sys_mount+0x292/0x310
[  104.863390][ T7333]  ? __pfx___ia32_sys_mount+0x10/0x10
[  104.865381][ T7333]  __do_fast_syscall_32+0x73/0x120
[  104.867273][ T7333]  do_fast_syscall_32+0x32/0x80
[  104.869083][ T7333]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  104.871415][ T7333] RIP: 0023:0xf7fe1579
[  104.872937][ T7333] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  104.879873][ T7333] RSP: 002b:00000000f513655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  104.882879][ T7333] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 0000000020000080
[  104.885749][ T7333] RDX: 0000000020000180 RSI: 000000000021004f RDI: 0000000000000000
[  104.888616][ T7333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  104.891519][ T7333] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  104.894400][ T7333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  104.897293][ T7333]  </TASK>
[  104.907872][ T7343] tipc: Started in network mode
[  104.910033][ T7343] tipc: Node identity 7f000001, cluster identity 4711
[  104.912675][ T7343] tipc: Enabled bearer <udp:syz2>, priority 10
[  104.923447][ T7345] tipc: Enabled bearer <eth:team0>, priority 0
[  104.954009][ T7199] 8021q: adding VLAN 0 to HW filter on device team0
[  104.956805][ T7333] /dev/sr0: Can't open blockdev
[  104.968349][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.970478][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.973571][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.975619][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.015434][ T7199] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  105.018406][ T7199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  105.030189][ T7355] bond0: Device is already in use.
[  105.187293][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.294'.
[  105.191102][ T7199] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.198706][ T7372] IPVS: Error joining to the multicast group
[  105.368615][ T7382] Cannot find del_set index 0 as target
[  105.404346][ T7372] netlink: 60 bytes leftover after parsing attributes in process `syz.1.294'.
[  105.594333][ T7199] veth0_vlan: entered promiscuous mode
[  105.612341][ T7199] veth1_vlan: entered promiscuous mode
[  105.639091][ T7199] veth0_macvtap: entered promiscuous mode
[  105.670569][ T7199] veth1_macvtap: entered promiscuous mode
[  105.690660][ T7199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.694567][ T7199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.715038][ T7199] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.734462][ T7199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.737409][ T7199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.750123][ T7199] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.755284][ T7199] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.757784][ T7199] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.760282][ T7199] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.762739][ T7199] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.805236][  T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.807774][  T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.819372][  T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.821813][  T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.844064][ T7406] bridge1: entered promiscuous mode
[  105.847808][ T7406] team0: Port device bridge1 added
[  105.929702][   T57] tipc: Node number set to 2130706433
[  105.965287][ T7420] netlink: 'syz.0.292': attribute type 10 has an invalid length.
[  106.102280][ T7420] bond0: (slave wlan1): Opening slave failed
[  106.329145][ T7443] syz.2.296 uses obsolete (PF_INET,SOCK_PACKET)
[  106.390603][ T5978] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  106.543159][ T5978] usb 6-1: config 0 has no interfaces?
[  106.546470][ T5978] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  106.549138][ T5978] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  106.552198][ T5978] usb 6-1: Manufacturer: syz
[  106.555312][ T5978] usb 6-1: config 0 descriptor??
[  106.691846][ T7460] netfs: Duplicate cookie detected
[  106.693558][ T7460] netfs: O-cookie c=00000009 [fl=5080 na=1 nA=0 s=-]
[  106.695534][ T7460] netfs: O-cookie V=00000005 [9p,syz,]
[  106.697222][ T7460] netfs: O-key=[8] '18023e0200000000'
[  106.698752][ T7460] netfs: N-cookie c=0000000a [fl=8 na=0 nA=0 s=-]
[  106.700762][ T7460] netfs: N-cookie V=00000005 [9p,syz,]
[  106.702377][ T7460] netfs: N-key=[8] '18023e0200000000'
[  106.819689][ T5951] Bluetooth: hci1: command tx timeout
[  106.992958][   T73] usb 6-1: USB disconnect, device number 7
[  107.361378][ T7475] __nla_validate_parse: 2 callbacks suppressed
[  107.361395][ T7475] netlink: 68 bytes leftover after parsing attributes in process `syz.0.302'.
[  107.460492][ T7479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.303'.
[  107.476228][ T7479] bridge1: entered promiscuous mode
[  107.478206][ T7479] bridge1: entered allmulticast mode
[  107.480853][ T7479] team0: Port device bridge1 added
[  107.583878][ T7481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.305'.
[  107.598318][ T7481] bridge2: entered promiscuous mode
[  107.600237][ T7481] bridge2: entered allmulticast mode
[  107.602106][ T7481] team0: Port device bridge2 added
[  107.619522][ T7483] netlink: 68 bytes leftover after parsing attributes in process `syz.1.304'.
[  108.421664][ T7495] netlink: 68 bytes leftover after parsing attributes in process `syz.0.315'.
[  108.591155][ T7502] netlink: 68 bytes leftover after parsing attributes in process `syz.2.309'.
[  108.899668][ T5951] Bluetooth: hci1: command tx timeout
[  109.839978][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'.
[  109.844089][ T7516] team0: left allmulticast mode
[  109.846273][ T7516] team_slave_0: left allmulticast mode
[  109.848495][ T7516] team_slave_1: left allmulticast mode
[  109.851678][ T7516] bridge1: left allmulticast mode
[  109.853885][ T7516] bridge2: left allmulticast mode
[  109.855573][ T7516] bridge0: port 3(team0) entered disabled state
[  109.862489][ T7516] bridge_slave_1: left allmulticast mode
[  109.864870][ T7516] bridge_slave_1: left promiscuous mode
[  109.866668][ T7516] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.873684][ T7516] bridge_slave_0: left allmulticast mode
[  109.875360][ T7516] bridge_slave_0: left promiscuous mode
[  109.877138][ T7516] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.224172][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.316'.
[  110.227488][ T7521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.314'.
[  110.237667][ T7521] bridge0: entered promiscuous mode
[  110.240532][ T7521] team0: Port device bridge0 added
[  110.310553][ T7527] netlink: 68 bytes leftover after parsing attributes in process `syz.0.319'.
[  110.313018][ T7525] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.488827][ T7525] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.580357][ T7538] netlink: 'syz.1.317': attribute type 4 has an invalid length.
[  110.600146][ T7525] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.667698][ T7525] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.757760][ T7525] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.764937][ T7525] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.771514][ T7525] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.776261][ T7525] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.158811][ T7543] Cannot find del_set index 0 as target
[  111.370577][ T7552] gretap1: entered allmulticast mode
[  111.372766][ T7552] bridge0: port 1(gretap1) entered blocking state
[  111.374616][ T7552] bridge0: port 1(gretap1) entered disabled state
[  111.376994][ T7552] gretap1: entered promiscuous mode
[  111.382434][ T7552] bridge0: port 1(gretap1) entered blocking state
[  111.384391][ T7552] bridge0: port 1(gretap1) entered forwarding state
[  111.430827][    C3] bridge0: received packet on gretap1 with own address as source address (addr:ea:8f:5c:55:a9:90, vlan:0)
[  111.432018][    C0] bridge0: received packet on gretap1 with own address as source address (addr:ea:8f:5c:55:a9:90, vlan:0)
[  111.919790][    C3] bridge0: received packet on gretap1 with own address as source address (addr:ea:8f:5c:55:a9:90, vlan:0)
[  111.930158][    C1] bridge0: received packet on gretap1 with own address as source address (addr:ea:8f:5c:55:a9:90, vlan:0)
[  112.020138][    C3] bridge0: received packet on gretap1 with own address as source address (addr:ea:8f:5c:55:a9:90, vlan:0)
[  112.280175][    C3] bridge0: received packet on gretap1 with own address as source address (addr:ea:8f:5c:55:a9:90, vlan:0)
[  112.411694][ T7578] __nla_validate_parse: 2 callbacks suppressed
[  112.411710][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.332'.
[  112.421582][    C0] bridge0: received packet on gretap1 with own address as source address (addr:ea:8f:5c:55:a9:90, vlan:0)
[  112.422899][ T7578] bridge2: entered promiscuous mode
[  112.426823][ T7578] team0: Port device bridge2 added
[  112.914166][   T39] kauditd_printk_skb: 5 callbacks suppressed
[  112.914178][   T39] audit: type=1326 audit(1735027562.404:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.1.334" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000
[  112.934202][   T39] audit: type=1326 audit(1735027562.404:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.1.334" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000
[  112.949668][   T39] audit: type=1326 audit(1735027562.414:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.1.334" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf712e579 code=0x7ffc0000
[  112.962403][   T39] audit: type=1326 audit(1735027562.414:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.1.334" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000
[  112.980479][    C2] bridge0: received packet on gretap1 with own address as source address (addr:ea:8f:5c:55:a9:90, vlan:0)
[  112.983988][    C2] bridge0: received packet on gretap1 with own address as source address (addr:ea:8f:5c:55:a9:90, vlan:0)
[  113.002737][   T39] audit: type=1326 audit(1735027562.414:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.1.334" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000
[  113.286286][ T7589] syz.1.334 (7589): drop_caches: 2
[  113.519754][ T7599] netlink: 68 bytes leftover after parsing attributes in process `syz.2.344'.
[  113.570310][    C2] bridge0: received packet on gretap1 with own address as source address (addr:ea:8f:5c:55:a9:90, vlan:0)
[  113.598448][ T7605] netlink: 68 bytes leftover after parsing attributes in process `syz.5.338'.
[  113.849665][   T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  114.001046][   T25] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  114.003620][   T25] usb 5-1: config 1 has an invalid descriptor of length 78, skipping remainder of the config
[  114.007034][   T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  114.010818][   T25] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  114.015000][   T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 173, changing to 11
[  114.019271][   T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 17911, setting to 1024
[  114.025031][   T25] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  114.028376][   T25] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  114.040328][   T25] usb 5-1: Product: syz
[  114.042351][   T25] usb 5-1: Manufacturer: syz
[  114.046228][ T7601] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  114.053624][   T25] cdc_wdm 5-1:1.0: skipping garbage
[  114.055259][   T25] cdc_wdm 5-1:1.0: skipping garbage
[  114.063286][   T25] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  114.065859][   T25] cdc_wdm 5-1:1.0: Unknown control protocol
[  114.332456][    C2] wdm_int_callback: 350 callbacks suppressed
[  114.332469][    C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  114.336117][    C2] wdm_int_callback: 350 callbacks suppressed
[  114.336125][    C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  114.339760][    C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  114.341922][    C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  114.343940][    C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  114.345784][    C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  114.347659][    C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  114.349546][    C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  114.351457][    C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  114.353316][    C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  114.355195][    C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  114.357058][    C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  114.358928][    C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  114.360839][    C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  114.362821][    C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  114.364682][    C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  114.366537][    C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  114.368415][    C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  114.370330][    C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  114.372197][    C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  114.440034][   T73] usb 5-1: USB disconnect, device number 2
[  114.440102][    C2] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  114.538447][ T7625] netlink: 12 bytes leftover after parsing attributes in process `syz.5.341'.
[  114.543943][ T7625] bond0: (slave bond_slave_0): Releasing backup interface
[  114.553157][ T7625] team0: Port device bond_slave_0 added
[  115.253476][ T7638] netlink: 68 bytes leftover after parsing attributes in process `syz.5.347'.
[  116.267772][ T7657] netlink: 68 bytes leftover after parsing attributes in process `syz.1.350'.
[  116.489247][ T7662] Cannot find del_set index 0 as target
[  116.947088][ T7673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.353'.
[  116.961140][ T7673] team0: Port device bridge5 added
[  117.139904][    C2] bridge0: received packet on gretap1 with own address as source address (addr:ea:8f:5c:55:a9:90, vlan:0)
[  118.234923][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.362'.
[  118.245312][ T7737] bridge3: entered promiscuous mode
[  118.247176][ T7737] team0: Port device bridge3 added
[  118.299764][ T7739] netlink: 68 bytes leftover after parsing attributes in process `syz.1.363'.
[  118.544181][ T7744] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  118.547606][ T7744] overlayfs: missing 'lowerdir'
[  118.553764][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'.
[  118.557326][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'.
[  118.745340][ T7753] netlink: 68 bytes leftover after parsing attributes in process `syz.5.366'.
[  118.816844][   T39] audit: type=1800 audit(1735027568.304:59): pid=7756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.359" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0
[  119.563745][ T7760] bio_check_eod: 2 callbacks suppressed
[  119.563757][ T7760] syz.2.365: attempt to access beyond end of device
[  119.563757][ T7760] nbd2: rw=4096, sector=0, nr_sectors = 2 limit=0
[  119.581724][ T7760] XFS (nbd2): SB validate failed with error -5.
[  119.968396][ T7773] netlink: 68 bytes leftover after parsing attributes in process `syz.0.368'.
[  121.352192][ T7808] netlink: 68 bytes leftover after parsing attributes in process `syz.0.377'.
[  122.444681][ T7819] kernel profiling enabled (shift: 17)
[  122.551631][ T7828] netlink: 68 bytes leftover after parsing attributes in process `syz.1.381'.
[  122.566048][ T7830] Cannot find del_set index 0 as target
[  123.469234][ T7848] bridge4: entered promiscuous mode
[  123.529017][ T7850] netlink: 68 bytes leftover after parsing attributes in process `syz.1.387'.
[  123.545359][ T7852] sg_write: data in/out 476/2147479510 bytes for SCSI command 0x3-- guessing data in;
[  123.545359][ T7852]    program syz.2.388 not setting count and/or reply_len properly
[  123.733638][ T7862] binder: 7859:7862 ioctl c0306201 20000080 returned -14
[  123.745629][ T7860] binder: 7859:7860 ioctl c0306201 200003c0 returned -14
[  123.752662][ T7860] binder: 7859:7860 ioctl c0306201 20000480 returned -14
[  123.755370][ T7860] binder: 7859:7860 ioctl c0306201 200003c0 returned -14
[  124.911065][ T7889] overlayfs: missing 'lowerdir'
[  124.924344][ T7889] No control pipe specified
[  125.000391][ T7895] trusted_key: syz.0.399 sent an empty control message without MSG_MORE.
[  125.016168][ T7897] random: crng reseeded on system resumption
[  125.109624][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.400'.
[  125.140415][    C2] bridge0: received packet on gretap1 with own address as source address (addr:ea:8f:5c:55:a9:90, vlan:0)
[  126.023965][ T7912] netlink: 144 bytes leftover after parsing attributes in process `syz.0.403'.
[  126.649739][ T6379] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  126.748747][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.751035][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.753148][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.755418][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.757510][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.759704][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.761827][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.763923][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.766082][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.768201][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.768770][ T7940] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.411'.
[  126.770347][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.772991][ T7940] openvswitch: netlink: Missing key (keys=40, expected=80)
[  126.775135][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.775148][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.781458][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.783562][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.785687][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.787743][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.789885][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.791990][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.794059][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.796176][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.798252][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.800464][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.802698][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.805116][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.807267][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.809404][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.811804][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.813967][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.816402][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.819626][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.822116][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.827263][   T35] hid-generic 0000:0000:0000.0007: hidraw1: <UNKNOWN> HID vffffff.ff Device [syz0] on syz0
[  126.833211][ T6379] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.836258][ T6379] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.839053][ T6379] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  126.841801][ T6379] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.848085][ T6379] usb 7-1: config 0 descriptor??
[  126.999626][ T5978] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  127.172888][ T5978] usb 5-1: config 0 has no interfaces?
[  127.174683][ T5978] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  127.177926][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.186971][ T5978] usb 5-1: config 0 descriptor??
[  127.405268][ T7936] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13)
[  127.407123][ T7936] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  127.410212][ T7936] vhci_hcd vhci_hcd.0: Device attached
[  127.412283][ T7981] vhci_hcd: connection closed
[  127.414684][ T1137] vhci_hcd: stop threads
[  127.417633][ T1137] vhci_hcd: release socket
[  127.418350][   T35] usb 5-1: USB disconnect, device number 3
[  127.418935][ T1137] vhci_hcd: disconnect device
[  127.457075][ T7984] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  127.603000][   T39] audit: type=1804 audit(1735027577.094:60): pid=7987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.414" name="/newroot/96/bus/bus" dev="overlay" ino=534 res=1 errno=0
[  127.769041][ T7991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.415'.
[  127.873287][ T7994] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  127.906080][ T7994] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  128.092280][ T6379] usbhid 7-1:0.0: can't add hid device: -71
[  128.094190][ T6379] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  128.112117][ T6379] usb 7-1: USB disconnect, device number 8
[  128.465705][ T7998] : entered promiscuous mode
[  129.629787][ T5951] Bluetooth: hci1: command tx timeout
[  129.749393][ T8036] netlink: 168 bytes leftover after parsing attributes in process `syz.5.430'.
[  129.805101][ T8039] Cannot find del_set index 0 as target
[  130.195448][ T8055] netlink: 40 bytes leftover after parsing attributes in process `syz.2.435'.
[  130.550765][ T8061] netlink: 68 bytes leftover after parsing attributes in process `syz.5.437'.
[  131.362104][ T8066] NILFS (loop1): device size too small
[  131.629700][    T8] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  131.779651][    T8] usb 7-1: Using ep0 maxpacket: 16
[  131.784252][    T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.787970][    T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.791514][    T8] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  131.794372][    T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.799362][    T8] usb 7-1: config 0 descriptor??
[  132.182150][ T1412] ieee802154 phy0 wpan0: encryption failed: -22
[  132.184534][ T1412] ieee802154 phy1 wpan1: encryption failed: -22
[  132.211692][    T8] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:05AC:8241.0008/input/input9
[  132.280414][    T8] appleir 0003:05AC:8241.0008: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0
[  132.345918][ T8086] netlink: 68 bytes leftover after parsing attributes in process `syz.0.443'.
[  132.615027][ T8097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.446'.
[  132.923176][   T73] usb 7-1: USB disconnect, device number 9
[  133.511366][ T8107] netlink: 68 bytes leftover after parsing attributes in process `syz.1.449'.
[  134.204552][ T8119] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  134.209352][ T8119] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  134.215524][ T8119] gretap1: entered promiscuous mode
[  134.217178][ T8119] gretap1: entered allmulticast mode
[  134.616047][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.618278][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.621838][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.624642][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.626944][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.632069][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.634289][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.636499][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.638719][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.641364][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.647852][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.656636][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.659121][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.661578][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.663801][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.666197][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.668382][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.672498][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.674743][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.677725][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.680086][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.682494][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.684722][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.686880][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.689036][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.709515][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.714987][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.718226][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.721979][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.724358][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.726555][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.860013][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.862327][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.864569][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.867876][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.873826][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.876066][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.886903][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.898886][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.901147][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.908591][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.919451][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.921697][   T73] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  134.931449][   T73] hid-generic 0000:0000:0000.0009: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  135.836775][ T8163] input: syz0 as /devices/virtual/input/input10
[  136.835952][ T8183] netlink: 68 bytes leftover after parsing attributes in process `syz.5.467'.
[  136.944160][ T8191] netlink: 'syz.1.470': attribute type 4 has an invalid length.
[  136.967272][ T8191] netlink: 'syz.1.470': attribute type 4 has an invalid length.
[  137.004276][ T8191] can0: slcan on ptm0.
[  137.082949][ T8190] can0 (unregistered): slcan off ptm0.
[  137.821077][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'.
[  137.864470][ T5999] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  137.866310][ T5999] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  137.869465][ T5951] Bluetooth: hci1: command 0x0c1a tx timeout
[  137.913979][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.475'.
[  137.930611][ T8210] pim6reg: entered allmulticast mode
[  137.937880][ T8210] pim6reg: left allmulticast mode
[  138.859734][ T8247] netlink: 68 bytes leftover after parsing attributes in process `syz.0.489'.
[  139.076852][ T8255] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  139.079450][ T8255] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  139.082160][ T8255] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  139.084672][ T8255] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  139.087191][ T8255] vxlan0: entered promiscuous mode
[  139.088820][ T8255] vxlan0: entered allmulticast mode
[  139.096375][ T8255] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.098919][ T8255] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.101533][ T8255] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.103997][ T8255] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.210480][ T8261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.492'.
[  139.329169][   T39] audit: type=1326 audit(1735027588.814:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.5.493" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x0
[  139.623031][   T39] audit: type=1326 audit(1735027589.114:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.1.496" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x0
[  140.478381][ T8297] netlink: 1076 bytes leftover after parsing attributes in process `syz.5.500'.
[  140.903376][ T8314] 9pnet: p9_errstr2errno: server reported unknown error �@ÿN
[  140.999801][ T8318] binder: 8317:8318 ioctl 80404805 20000340 returned -22
[  141.063458][ T8319] FAULT_INJECTION: forcing a failure.
[  141.063458][ T8319] name failslab, interval 1, probability 0, space 0, times 0
[  141.067651][ T8319] CPU: 2 UID: 0 PID: 8319 Comm: syz.0.511 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0
[  141.071906][ T8319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  141.071927][ T8319] Call Trace:
[  141.071932][ T8319]  <TASK>
[  141.071937][ T8319]  dump_stack_lvl+0x16c/0x1f0
[  141.071955][ T8319]  should_fail_ex+0x497/0x5b0
[  141.071968][ T8319]  ? fs_reclaim_acquire+0xae/0x150
[  141.071981][ T8319]  should_failslab+0xc2/0x120
[  141.071995][ T8319]  __kmalloc_noprof+0xce/0x4f0
[  141.072007][ T8319]  ? ktime_get_coarse_real_ts64_mg+0x26e/0x310
[  141.072023][ T8319]  ? iter_file_splice_write+0x1cd/0x10b0
[  141.072036][ T8319]  iter_file_splice_write+0x1cd/0x10b0
[  141.072051][ T8319]  ? __pfx___lock_acquire+0x10/0x10
[  141.072062][ T8319]  ? __pfx_iter_file_splice_write+0x10/0x10
[  141.072072][ T8319]  ? touch_atime+0x90/0x5d0
[  141.072084][ T8319]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  141.072096][ T8319]  ? splice_direct_to_actor+0x346/0xa40
[  141.072108][ T8319]  ? __pfx_iter_file_splice_write+0x10/0x10
[  141.072119][ T8319]  direct_splice_actor+0x18f/0x6c0
[  141.072130][ T8319]  splice_direct_to_actor+0x346/0xa40
[  141.072141][ T8319]  ? __pfx_direct_splice_actor+0x10/0x10
[  141.072154][ T8319]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  141.072165][ T8319]  ? __fget_files+0x1fc/0x3a0
[  141.072177][ T8319]  do_splice_direct+0x178/0x250
[  141.072188][ T8319]  ? __pfx_do_splice_direct+0x10/0x10
[  141.072198][ T8319]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  141.072212][ T8319]  do_sendfile+0xaed/0xe30
[  141.072225][ T8319]  ? __pfx_do_sendfile+0x10/0x10
[  141.072235][ T8319]  ? __fget_files+0x206/0x3a0
[  141.072249][ T8319]  __ia32_compat_sys_sendfile+0x1e7/0x230
[  141.072269][ T8319]  ? ksys_write+0x1ba/0x250
[  141.072280][ T8319]  ? __pfx___ia32_compat_sys_sendfile+0x10/0x10
[  141.072296][ T8319]  __do_fast_syscall_32+0x73/0x120
[  141.072309][ T8319]  do_fast_syscall_32+0x32/0x80
[  141.072322][ T8319]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  141.072337][ T8319] RIP: 0023:0xf714e579
[  141.072346][ T8319] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  141.072356][ T8319] RSP: 002b:00000000f511f55c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb
[  141.072367][ T8319] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000007
[  141.072374][ T8319] RDX: 0000000000000000 RSI: 000000007ffff000 RDI: 0000000000000000
[  141.072381][ T8319] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  141.072387][ T8319] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  141.072393][ T8319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  141.072404][ T8319]  </TASK>
[  141.853130][ T8340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.519'.
[  141.856127][ T8340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.519'.
[  143.114583][ T8370] netlink: 'syz.5.527': attribute type 21 has an invalid length.
[  143.116721][ T8370] netlink: 'syz.5.527': attribute type 20 has an invalid length.
[  143.118996][ T8370] IPv6: NLM_F_CREATE should be specified when creating new route
[  143.331320][ T8378] netlink: 12 bytes leftover after parsing attributes in process `syz.5.530'.
[  143.357826][ T8378] team0: Port device bridge1 added
[  144.648721][ T8416] sg_write: process 450 (syz.2.541) changed security contexts after opening file descriptor, this is not allowed.
[  144.709975][ T8419] bridge5: entered promiscuous mode
[  144.972667][ T8429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.545'.
[  145.004179][ T8429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.545'.
[  145.408154][ T8439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.549'.
[  145.420777][ T8439] team0: Port device bridge7 added
[  146.069372][ T8468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.558'.
[  146.088044][ T8468] bridge6: entered promiscuous mode
[  146.090793][ T8468] team0: Port device bridge6 added
[  146.137046][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.555'.
[  146.146242][ T8461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.555'.
[  146.989759][   T57] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  147.079255][ T8503] netlink: 68 bytes leftover after parsing attributes in process `syz.5.569'.
[  147.160180][   T57] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  147.164014][   T57] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  147.166709][   T57] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  147.172366][   T57] usb 5-1: config 0 interface 0 has no altsetting 0
[  147.175142][   T57] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  147.177597][   T57] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  147.181817][   T57] usb 5-1: config 0 interface 0 has no altsetting 0
[  147.184764][   T57] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  147.187154][   T57] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  147.195249][   T57] usb 5-1: config 0 interface 0 has no altsetting 0
[  147.203527][   T57] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  147.205929][   T57] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  147.208876][   T57] usb 5-1: config 0 interface 0 has no altsetting 0
[  147.213558][   T57] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  147.214539][ T8510] netlink: 60 bytes leftover after parsing attributes in process `syz.1.571'.
[  147.216710][   T57] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  147.223271][   T57] usb 5-1: config 0 interface 0 has no altsetting 0
[  147.226024][   T57] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  147.228569][   T57] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  147.231739][   T57] usb 5-1: config 0 interface 0 has no altsetting 0
[  147.234407][   T57] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  147.236776][   T57] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  147.239937][   T57] usb 5-1: config 0 interface 0 has no altsetting 0
[  147.244215][   T57] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  147.246724][   T57] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  147.250048][   T57] usb 5-1: config 0 interface 0 has no altsetting 0
[  147.253651][   T57] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  147.256125][   T57] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  147.258381][   T57] usb 5-1: Product: syz
[  147.259496][   T57] usb 5-1: Manufacturer: syz
[  147.261678][   T57] usb 5-1: SerialNumber: syz
[  147.264843][   T57] usb 5-1: config 0 descriptor??
[  147.270527][   T57] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  147.600725][ T8519] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0
[  148.038047][    C1] usb 5-1: yurex_control_callback - control failed: -71
[  148.047125][    T9] usb 5-1: USB disconnect, device number 4
[  148.063215][    T9] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  148.076500][ T8531] netlink: 68 bytes leftover after parsing attributes in process `syz.2.578'.
[  148.359678][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  148.520755][    T9] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  148.530061][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  148.536733][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  148.543731][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  148.549160][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  148.554887][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  148.564797][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  148.571404][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  148.579049][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  148.582505][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  148.606823][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  148.683093][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  148.686259][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  148.691359][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  148.703538][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  148.725228][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  148.740450][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  148.743860][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  148.747918][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  148.762450][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  148.770606][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  148.775103][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  148.780052][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  148.783028][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  148.786273][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  148.790552][    T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  148.793141][    T9] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  148.800983][    T9] usb 5-1: Product: syz
[  148.802358][    T9] usb 5-1: Manufacturer: syz
[  148.803980][    T9] usb 5-1: SerialNumber: syz
[  148.814815][    T9] usb 5-1: config 0 descriptor??
[  148.845172][    T9] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  149.025778][    T9] usb 5-1: USB disconnect, device number 5
[  149.048096][    T9] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  149.117314][ T8558] FAULT_INJECTION: forcing a failure.
[  149.117314][ T8558] name failslab, interval 1, probability 0, space 0, times 0
[  149.121224][ T8558] CPU: 0 UID: 0 PID: 8558 Comm: syz.5.583 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0
[  149.124116][ T8558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  149.127045][ T8558] Call Trace:
[  149.127977][ T8558]  <TASK>
[  149.128787][ T8558]  dump_stack_lvl+0x16c/0x1f0
[  149.130127][ T8558]  should_fail_ex+0x497/0x5b0
[  149.131449][ T8558]  should_failslab+0xc2/0x120
[  149.132735][ T8558]  kmem_cache_alloc_noprof+0x6e/0x3b0
[  149.134206][ T8558]  ? skb_clone+0x190/0x3f0
[  149.135459][ T8558]  skb_clone+0x190/0x3f0
[  149.136714][ T8558]  netlink_deliver_tap+0xafd/0xca0
[  149.138116][ T8558]  netlink_dump+0xb60/0xd00
[  149.139397][ T8558]  ? __pfx_netlink_dump+0x10/0x10
[  149.140847][ T8558]  ? kasan_save_track+0x14/0x30
[  149.142200][ T8558]  ? __kasan_kmalloc+0xaa/0xb0
[  149.143527][ T8558]  ? genl_start+0x67d/0x960
[  149.144824][ T8558]  __netlink_dump_start+0x6d9/0x980
[  149.146315][ T8558]  genl_family_rcv_msg_dumpit+0x1e1/0x2e0
[  149.147933][ T8558]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  149.149725][ T8558]  ? genl_op_from_small+0x25/0x440
[  149.151195][ T8558]  ? __pfx_genl_start+0x10/0x10
[  149.152610][ T8558]  ? __pfx_genl_dumpit+0x10/0x10
[  149.154011][ T8558]  ? __pfx_genl_done+0x10/0x10
[  149.155386][ T8558]  ? bpf_lsm_capable+0x9/0x10
[  149.156778][ T8558]  ? security_capable+0x7e/0x260
[  149.158198][ T8558]  ? ns_capable+0xd7/0x110
[  149.159477][ T8558]  genl_rcv_msg+0x470/0x800
[  149.160758][ T8558]  ? __pfx_genl_rcv_msg+0x10/0x10
[  149.162148][ T8558]  ? __pfx_batadv_bla_claim_dump+0x10/0x10
[  149.163788][ T8558]  netlink_rcv_skb+0x165/0x410
[  149.165121][ T8558]  ? __pfx_genl_rcv_msg+0x10/0x10
[  149.166552][ T8558]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  149.168049][ T8558]  ? down_read+0xc9/0x330
[  149.169261][ T8558]  ? __pfx_down_read+0x10/0x10
[  149.170578][ T8558]  ? netlink_deliver_tap+0x1ae/0xca0
[  149.172060][ T8558]  genl_rcv+0x28/0x40
[  149.173169][ T8558]  netlink_unicast+0x53c/0x7f0
[  149.174491][ T8558]  ? __pfx_netlink_unicast+0x10/0x10
[  149.175980][ T8558]  ? __phys_addr_symbol+0x30/0x80
[  149.177350][ T8558]  ? __check_object_size+0x488/0x710
[  149.178790][ T8558]  netlink_sendmsg+0x8b8/0xd70
[  149.180156][ T8558]  ? __pfx_netlink_sendmsg+0x10/0x10
[  149.181623][ T8558]  ____sys_sendmsg+0x9ae/0xb40
[  149.182915][ T8558]  ? __pfx_____sys_sendmsg+0x10/0x10
[  149.184403][ T8558]  ? get_compat_msghdr+0x11b/0x170
[  149.185853][ T8558]  ___sys_sendmsg+0x135/0x1e0
[  149.187148][ T8558]  ? __pfx____sys_sendmsg+0x10/0x10
[  149.188633][ T8558]  ? __pfx_lock_release+0x10/0x10
[  149.190034][ T8558]  ? trace_lock_acquire+0x14e/0x1f0
[  149.191447][ T8558]  ? __fget_files+0x206/0x3a0
[  149.192769][ T8558]  __sys_sendmsg+0x16e/0x220
[  149.194041][ T8558]  ? __pfx___sys_sendmsg+0x10/0x10
[  149.195423][ T8558]  __do_fast_syscall_32+0x73/0x120
[  149.196912][ T8558]  do_fast_syscall_32+0x32/0x80
[  149.198251][ T8558]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  149.199987][ T8558] RIP: 0023:0xf70ae579
[  149.201139][ T8558] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  149.206358][ T8558] RSP: 002b:00000000f50a055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  149.208661][ T8558] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280
[  149.210805][ T8558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  149.213053][ T8558] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  149.215275][ T8558] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  149.217594][ T8558] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  149.219882][ T8558]  </TASK>
[  149.376950][ T8570] netlink: 68 bytes leftover after parsing attributes in process `syz.1.587'.
[  150.510922][ T8613] IPVS: Scheduler module ip_vs_sip not found
[  151.496830][    T9] libceph: connect (1)[c::]:6789 error -101
[  151.499131][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  151.505335][    T9] libceph: connect (1)[c::]:6789 error -101
[  151.507219][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  151.537112][ T8649] ceph: No mds server is up or the cluster is laggy
[  151.540320][ T8653] netlink: 'syz.2.608': attribute type 4 has an invalid length.
[  151.583240][ T6017] libceph: connect (1)[c::]:6789 error -101
[  151.585498][ T6017] libceph: mon0 (1)[c::]:6789 connect error
[  151.601784][ T8654] ceph: No mds server is up or the cluster is laggy
[  152.109824][ T6017] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  152.280840][ T6017] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  152.284244][ T6017] usb 10-1: config 1 has an invalid descriptor of length 78, skipping remainder of the config
[  152.287411][ T6017] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[  152.291659][ T6017] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  152.291867][ T8671] overlayfs: missing 'lowerdir'
[  152.295200][ T6017] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 173, changing to 11
[  152.300215][ T6017] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 17911, setting to 1024
[  152.310008][ T6017] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  152.312756][ T6017] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  152.315201][ T6017] usb 10-1: Product: syz
[  152.316551][ T6017] usb 10-1: Manufacturer: syz
[  152.319240][ T8659] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  152.322300][ T6017] cdc_wdm 10-1:1.0: skipping garbage
[  152.323965][ T6017] cdc_wdm 10-1:1.0: skipping garbage
[  152.328456][ T6017] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  152.332733][ T6017] cdc_wdm 10-1:1.0: Unknown control protocol
[  152.524979][    C2] wdm_int_callback: 376 callbacks suppressed
[  152.524992][    C2] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  152.528624][    C2] wdm_int_callback: 376 callbacks suppressed
[  152.528632][    C2] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  152.532306][    C2] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  152.534197][    C2] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  152.536140][    C2] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  152.538040][    C2] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  152.540902][    C2] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  152.543426][    C2] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  152.546088][    C2] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  152.548702][    C2] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  152.551568][    C2] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  152.554187][    C2] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  152.556827][    C2] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  152.559456][    C2] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  152.562172][    C2] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  152.564874][    C2] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  152.567594][    C2] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  152.570212][    C2] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  152.573277][    C2] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  152.575993][    C2] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  154.282330][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'.
[  154.371187][ T8735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.628'.
[  154.386123][ T8735] bridge7: entered promiscuous mode
[  154.388537][ T8735] team0: Port device bridge7 added
[  154.833893][ T6017] usb 10-1: USB disconnect, device number 2
[  154.900852][ T8753] overlayfs: failed to resolve './file1': -2
[  155.605219][ T8772] loop7: detected capacity change from 0 to 16384
[  155.895906][ T8785] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  156.432772][ T8813] netlink: 68 bytes leftover after parsing attributes in process `syz.1.644'.
[  156.658463][ T8818] bridge8: entered promiscuous mode
[  156.709421][ T8820] bridge9: entered promiscuous mode
[  156.772453][ T8822] Driver unsupported XDP return value 0 on prog  (id 85) dev N/A, expect packet loss!
[  157.415355][   T39] audit: type=1326 audit(1735027606.904:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8821 comm="syz.2.647" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x0
[  157.662115][ T8830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.650'.
[  157.676785][ T8830] bridge8: entered promiscuous mode
[  157.678572][ T8830] team0: Port device bridge8 added
[  158.948741][ T8855] bridge2: entered promiscuous mode
[  158.998883][ T8861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.659'.
[  160.990715][ T8890] netlink: 'syz.0.666': attribute type 4 has an invalid length.
[  161.000896][ T8890] netlink: 'syz.0.666': attribute type 4 has an invalid length.
[  161.114362][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.668'.
[  162.337644][ T8928] bridge3: entered promiscuous mode
[  162.347732][ T8926] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  162.408164][ T8932] netlink: 'syz.1.677': attribute type 10 has an invalid length.
[  162.419912][ T8932] team0: left promiscuous mode
[  162.421498][ T8932] bond0: left promiscuous mode
[  162.423116][ T8932] batadv0: left promiscuous mode
[  162.425119][ T8932] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  162.427460][ T8932] bridge1: left promiscuous mode
[  162.428979][ T8932] bridge2: left promiscuous mode
[  162.431303][   T39] audit: type=1326 audit(1735027611.924:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.5.676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000
[  162.437423][   T39] audit: type=1326 audit(1735027611.924:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.5.676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000
[  162.445991][ T8932] 8021q: adding VLAN 0 to HW filter on device team0
[  162.448247][   T39] audit: type=1326 audit(1735027611.934:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.5.676" exe="/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf70ae579 code=0x7ffc0000
[  162.454665][   T39] audit: type=1326 audit(1735027611.934:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.5.676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000
[  162.461910][   T39] audit: type=1326 audit(1735027611.934:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.5.676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000
[  162.469525][   T39] audit: type=1326 audit(1735027611.954:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.5.676" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ae579 code=0x7ffc0000
[  162.479828][   T39] audit: type=1326 audit(1735027611.954:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.5.676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000
[  162.479998][ T8930] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies.
[  162.490387][   T39] audit: type=1326 audit(1735027611.954:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.5.676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000
[  162.496508][   T39] audit: type=1326 audit(1735027611.964:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.5.676" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70ae579 code=0x7ffc0000
[  162.502851][   T39] audit: type=1326 audit(1735027611.964:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.5.676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000
[  162.525645][ T8930] netlink: 16 bytes leftover after parsing attributes in process `syz.5.676'.
[  162.528259][ T8930] netlink: 56 bytes leftover after parsing attributes in process `syz.5.676'.
[  162.546134][ T8935] infiniband syz1: set down
[  162.548709][ T8935] infiniband syz1: added team_slave_0
[  162.587563][ T8935] RDS/IB: syz1: added
[  162.589168][ T8935] smc: adding ib device syz1 with port count 1
[  162.600494][ T8940] netlink: 'syz.5.680': attribute type 11 has an invalid length.
[  162.600955][ T8935] smc:    ib device syz1 port 1 has pnetid 
[  162.602860][ T8940] netlink: 224 bytes leftover after parsing attributes in process `syz.5.680'.
[  162.895625][ T8951] bridge4: entered promiscuous mode
[  163.230505][ T8960] netlink: 830 bytes leftover after parsing attributes in process `syz.0.686'.
[  165.367980][ T9023] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  166.281908][ T9034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.706'.
[  166.367117][ T9038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.704'.
[  166.372012][ T9038] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  167.079652][ T9061] netlink: 32 bytes leftover after parsing attributes in process `syz.5.713'.
[  167.082322][ T9061] ip6gretap0: entered promiscuous mode
[  167.133031][ T9064] netlink: 'syz.5.714': attribute type 1 has an invalid length.
[  167.135272][ T9064] netlink: 'syz.5.714': attribute type 3 has an invalid length.
[  167.137513][ T9064] netlink: 224 bytes leftover after parsing attributes in process `syz.5.714'.
[  167.141882][ T9064] NCSI netlink: No device for ifindex 0
[  167.253206][ T9070] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  167.263101][ T9070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.712'.
[  167.266557][ T9070] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  167.305326][ T9071] can0: slcan on ptm0.
[  167.420076][ T9078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.717'.
[  168.160802][ T9069] can0 (unregistered): slcan off ptm0.
[  168.514666][ T9114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.726'.
[  168.676180][ T9117] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  169.128615][ T9131] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  169.134243][ T9131] netlink: 16 bytes leftover after parsing attributes in process `syz.0.729'.
[  169.137465][ T9131] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  169.301650][   T39] kauditd_printk_skb: 53 callbacks suppressed
[  169.301659][   T39] audit: type=1326 audit(1735027618.794:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.2.728" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x0
[  169.500132][ T9137] FAULT_INJECTION: forcing a failure.
[  169.500132][ T9137] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  169.505310][ T9137] CPU: 2 UID: 0 PID: 9137 Comm: syz.1.731 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0
[  169.509210][ T9137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  169.512902][ T9137] Call Trace:
[  169.514157][ T9137]  <TASK>
[  169.515262][ T9137]  dump_stack_lvl+0x16c/0x1f0
[  169.517018][ T9137]  should_fail_ex+0x497/0x5b0
[  169.518768][ T9137]  _copy_from_iter+0x29b/0x1400
[  169.520588][ T9137]  ? trace_lock_acquire+0x14e/0x1f0
[  169.522525][ T9137]  ? __pfx__copy_from_iter+0x10/0x10
[  169.524502][ T9137]  ? __virt_addr_valid+0x1a4/0x590
[  169.526441][ T9137]  ? __virt_addr_valid+0x5e/0x590
[  169.528125][ T9137]  ? __phys_addr_symbol+0x30/0x80
[  169.529558][ T9137]  ? __check_object_size+0x488/0x710
[  169.531185][ T9137]  file_tty_write.constprop.0+0x48d/0x9a0
[  169.532833][ T9137]  vfs_write+0x5ae/0x1150
[  169.534077][ T9137]  ? __pfx_tty_write+0x10/0x10
[  169.535458][ T9137]  ? __pfx_vfs_write+0x10/0x10
[  169.536832][ T9137]  ? __fget_files+0x40/0x3a0
[  169.538171][ T9137]  ksys_write+0x12b/0x250
[  169.539421][ T9137]  ? __pfx_ksys_write+0x10/0x10
[  169.540874][ T9137]  __do_fast_syscall_32+0x73/0x120
[  169.542343][ T9137]  do_fast_syscall_32+0x32/0x80
[  169.543747][ T9137]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  169.545553][ T9137] RIP: 0023:0xf712e579
[  169.546723][ T9137] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  169.552144][ T9137] RSP: 002b:00000000f512055c EFLAGS: 00000296 ORIG_RAX: 0000000000000004
[  169.554487][ T9137] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020001040
[  169.556714][ T9137] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000000
[  169.558941][ T9137] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  169.561191][ T9137] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  169.563427][ T9137] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  169.565661][ T9137]  </TASK>
[  169.662371][ T9143] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  169.665357][ T9143] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  169.668441][ T9143] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  169.673034][ T9143] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  169.704630][ T9144] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  169.706889][ T9144] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  169.709302][ T9144] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  169.712241][ T9144] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  169.883320][ T9159] netlink: 68 bytes leftover after parsing attributes in process `syz.1.738'.
[  169.961631][ T9163] Bluetooth: MGMT ver 1.23
[  170.037600][ T9168] netlink: 260 bytes leftover after parsing attributes in process `syz.0.740'.
[  170.950840][   T39] audit: type=1326 audit(1735027620.444:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.2.739" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7fc00000
[  171.037369][ T9192] binder: 9191:9192 ioctl c0306201 0 returned -14
[  171.224134][ T9202] 9pnet: p9_errstr2errno: server reported unknown error �@í΂Í(ááí«QhQÿ01777777777777777777777ÿÿÿÿÿÿÿÿ
[  171.263211][ T9202] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  171.265124][ T9202] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  171.265273][ T5999] IPVS: starting estimator thread 0...
[  171.267678][ T9202] vhci_hcd vhci_hcd.0: Device attached
[  171.273549][ T9205] tipc: Started in network mode
[  171.275327][ T9205] tipc: Node identity ac1414aa, cluster identity 4711
[  171.278588][ T9205] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  171.281143][ T9205] tipc: Enabled bearer <udp:s>, priority 10
[  171.303083][ T9202] MTD: Attempt to mount non-MTD device "/dev/nbd2"
[  171.306760][ T9202] syz.2.750: attempt to access beyond end of device
[  171.306760][ T9202] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0
[  171.350906][ T9210] IPVS: using max 41 ests per chain, 98400 per kthread
[  171.419705][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  171.529705][   T35] usb 42-1: SetAddress Request (2) to port 0
[  171.531697][   T35] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd
[  171.559691][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  171.701154][ T9208] vhci_hcd: connection reset by peer
[  171.702952][   T11] vhci_hcd: stop threads
[  171.704215][   T11] vhci_hcd: release socket
[  171.705538][   T11] vhci_hcd: disconnect device
[  171.709875][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  171.849675][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  171.989642][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  172.129677][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  172.157728][ T9235] __nla_validate_parse: 1 callbacks suppressed
[  172.157737][ T9235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.757'.
[  172.167165][ T9236] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  172.169341][ T9236] FAULT_INJECTION: forcing a failure.
[  172.169341][ T9236] name failslab, interval 1, probability 0, space 0, times 0
[  172.173751][ T9236] CPU: 3 UID: 0 PID: 9236 Comm: syz.5.758 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0
[  172.176842][ T9236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  172.179901][ T9236] Call Trace:
[  172.180880][ T9236]  <TASK>
[  172.181735][ T9236]  dump_stack_lvl+0x16c/0x1f0
[  172.183091][ T9236]  should_fail_ex+0x497/0x5b0
[  172.184447][ T9236]  should_failslab+0xc2/0x120
[  172.185807][ T9236]  kmem_cache_alloc_noprof+0x6e/0x3b0
[  172.187351][ T9236]  ? skb_clone+0x190/0x3f0
[  172.188641][ T9236]  skb_clone+0x190/0x3f0
[  172.189883][ T9236]  netlink_deliver_tap+0xafd/0xca0
[  172.191376][ T9236]  netlink_unicast+0x6b4/0x7f0
[  172.192750][ T9236]  ? __pfx_netlink_unicast+0x10/0x10
[  172.194261][ T9236]  ? genl_rcv_msg+0x4bd/0x800
[  172.195621][ T9236]  netlink_ack+0x6a5/0xb20
[  172.196902][ T9236]  netlink_rcv_skb+0x327/0x410
[  172.198267][ T9236]  ? __pfx_genl_rcv_msg+0x10/0x10
[  172.199726][ T9236]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  172.201240][ T9236]  ? down_read+0xc9/0x330
[  172.202484][ T9236]  ? __pfx_down_read+0x10/0x10
[  172.203866][ T9236]  ? netlink_deliver_tap+0x1ae/0xca0
[  172.205379][ T9236]  genl_rcv+0x28/0x40
[  172.206529][ T9236]  netlink_unicast+0x53c/0x7f0
[  172.207906][ T9236]  ? __pfx_netlink_unicast+0x10/0x10
[  172.209435][ T9236]  ? __phys_addr_symbol+0x30/0x80
[  172.210905][ T9236]  ? __check_object_size+0x488/0x710
[  172.212427][ T9236]  netlink_sendmsg+0x8b8/0xd70
[  172.213801][ T9236]  ? __pfx_netlink_sendmsg+0x10/0x10
[  172.215314][ T9236]  ____sys_sendmsg+0x9ae/0xb40
[  172.216705][ T9236]  ? __pfx_____sys_sendmsg+0x10/0x10
[  172.218211][ T9236]  ? get_compat_msghdr+0x11b/0x170
[  172.219803][ T9236]  ___sys_sendmsg+0x135/0x1e0
[  172.221171][ T9236]  ? __pfx____sys_sendmsg+0x10/0x10
[  172.222661][ T9236]  ? __pfx_lock_release+0x10/0x10
[  172.224110][ T9236]  ? trace_lock_acquire+0x14e/0x1f0
[  172.225601][ T9236]  ? __fget_files+0x206/0x3a0
[  172.226952][ T9236]  __sys_sendmsg+0x16e/0x220
[  172.228298][ T9236]  ? __pfx___sys_sendmsg+0x10/0x10
[  172.229794][ T9236]  __do_fast_syscall_32+0x73/0x120
[  172.231390][ T9236]  do_fast_syscall_32+0x32/0x80
[  172.232784][ T9236]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  172.234580][ T9236] RIP: 0023:0xf70ae579
[  172.235758][ T9236] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  172.241187][ T9236] RSP: 002b:00000000f50a055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  172.243558][ T9236] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000100
[  172.245803][ T9236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  172.248047][ T9236] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  172.250304][ T9236] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  172.252569][ T9236] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  172.254812][ T9236]  </TASK>
[  172.269879][ T5979] tipc: Node number set to 2886997162
[  172.299190][ T9242] netlink: 68 bytes leftover after parsing attributes in process `syz.5.759'.
[  172.409874][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  172.680012][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  172.752812][ T9263] syz.0.766[9263] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  172.752887][ T9263] syz.0.766[9263] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  172.756229][ T9263] syz.0.766[9263] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  172.840978][ T9266] netlink: 72 bytes leftover after parsing attributes in process `syz.0.766'.
[  172.848308][ T9264] netlink: 72 bytes leftover after parsing attributes in process `syz.0.766'.
[  173.209632][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  173.915030][ T9297] veth1_macvtap: left promiscuous mode
[  173.916815][ T9297] macsec0: entered promiscuous mode
[  173.918582][ T9297] macsec0: entered allmulticast mode
[  174.454057][ T9320] netlink: 'syz.0.772': attribute type 39 has an invalid length.
[  175.637648][ T9355] netlink: 68 bytes leftover after parsing attributes in process `syz.1.783'.
[  176.008289][ T9368] program syz.0.786 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  176.339664][    C0] net_ratelimit: 2 callbacks suppressed
[  176.339674][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  176.459654][   T57] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  176.579688][   T35] usb 42-1: device descriptor read/8, error -110
[  176.619647][   T57] usb 5-1: Using ep0 maxpacket: 16
[  176.622622][   T57] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  176.628215][   T57] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  176.639617][   T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11
[  176.642911][   T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024
[  176.646231][   T57] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  176.654810][   T57] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  176.659956][   T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.664605][   T57] usb 5-1: Product: syz
[  176.667053][   T57] usb 5-1: Manufacturer: syz
[  176.669643][   T57] usb 5-1: SerialNumber: syz
[  176.673131][   T57] usb 5-1: config 0 descriptor??
[  176.709767][   T73] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  176.859619][   T73] usb 6-1: Using ep0 maxpacket: 8
[  176.864534][   T73] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  176.867247][   T73] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  176.871093][   T73] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  176.875377][   T73] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  176.879407][   T73] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  176.884347][   T73] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  176.887097][   T73] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  176.891882][   T73] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  176.896119][   T73] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  176.900233][   T73] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  176.904460][   T73] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  176.906605][   T73] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  176.909524][   T57] appledisplay 5-1:0.0: Error while getting initial brightness: -71
[  176.910088][   T73] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  176.915474][   T73] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  176.918950][   T73] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  176.924133][   T57] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -71
[  176.924487][   T73] usb 6-1: string descriptor 0 read error: -22
[  176.928605][   T73] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  176.931638][   T73] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.936581][   T57] usb 5-1: USB disconnect, device number 6
[  176.942919][   T73] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  176.970030][   T35] usb usb42-port1: attempt power cycle
[  177.149672][ T9398] netlink: 44 bytes leftover after parsing attributes in process `syz.5.795'.
[  177.379655][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  177.473809][ T9405] netlink: 68 bytes leftover after parsing attributes in process `syz.0.797'.
[  177.530232][   T35] usb usb42-port1: unable to enumerate USB device
[  178.419688][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  179.459738][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  180.499625][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  180.532087][ T9464] netlink: 68 bytes leftover after parsing attributes in process `syz.2.815'.
[  180.985349][ T9473] netlink: 'syz.0.818': attribute type 1 has an invalid length.
[  180.987739][ T9473] netlink: 'syz.0.818': attribute type 4 has an invalid length.
[  180.990411][ T9473] netlink: 15363 bytes leftover after parsing attributes in process `syz.0.818'.
[  180.993351][ T9475] netlink: 68 bytes leftover after parsing attributes in process `syz.5.819'.
[  181.302455][ T5999] usb 6-1: USB disconnect, device number 8
[  181.352109][ T9485] netlink: 4060 bytes leftover after parsing attributes in process `syz.0.822'.
[  181.359258][ T9485] netlink: 112 bytes leftover after parsing attributes in process `syz.0.822'.
[  181.539625][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  182.579588][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  183.109773][   T63] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  183.279787][   T63] usb 7-1: Using ep0 maxpacket: 32
[  183.286051][   T63] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[  183.288695][   T63] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  183.292703][   T63] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[  183.295351][   T63] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  183.298179][   T63] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  183.302251][   T63] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  183.335392][   T63] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  183.338855][   T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.355834][   T63] usb 7-1: config 0 descriptor??
[  183.602170][   T63] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  183.619606][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  184.069527][ T9518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  184.115905][ T9532] netlink: 1296 bytes leftover after parsing attributes in process `syz.5.835'.
[  184.118495][ T9532] openvswitch: netlink: Flow key attr not present in new flow.
[  184.659676][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  185.291042][ T9552] xt_nat: multiple ranges no longer supported
[  185.699626][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  185.754097][    C1] usblp0: nonzero read bulk status received: -71
[  185.754228][   T35] usb 7-1: USB disconnect, device number 10
[  185.761166][   T35] usblp0: removed
[  186.527268][ T9576] netlink: 68 bytes leftover after parsing attributes in process `syz.0.848'.
[  186.739636][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  187.268792][ T9594] netlink: 'syz.1.856': attribute type 1 has an invalid length.
[  187.285138][ T9594] 8021q: adding VLAN 0 to HW filter on device bond3
[  187.316393][ T9594] 8021q: adding VLAN 0 to HW filter on device bond3
[  187.319742][ T9594] bond3: (slave ip6tnl1): The slave device specified does not support setting the MAC address
[  187.323068][ T9594] bond3: (slave ip6tnl1): Error -95 calling set_mac_address
[  187.599496][ T9614] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  187.602276][ T9614] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  187.604926][ T9614] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  187.779601][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  187.803972][ T9619] syzkaller1: entered promiscuous mode
[  187.805612][ T9619] syzkaller1: entered allmulticast mode
[  187.826452][ T9621] FAULT_INJECTION: forcing a failure.
[  187.826452][ T9621] name failslab, interval 1, probability 0, space 0, times 0
[  187.831364][ T9621] CPU: 0 UID: 0 PID: 9621 Comm: syz.0.863 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0
[  187.834381][ T9621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  187.837412][ T9621] Call Trace:
[  187.838382][ T9621]  <TASK>
[  187.839244][ T9621]  dump_stack_lvl+0x16c/0x1f0
[  187.840788][ T9621]  should_fail_ex+0x497/0x5b0
[  187.842246][ T9621]  ? fs_reclaim_acquire+0xae/0x150
[  187.843676][ T9621]  should_failslab+0xc2/0x120
[  187.845033][ T9621]  __kmalloc_noprof+0xce/0x4f0
[  187.846414][ T9621]  ? rcu_is_watching+0x12/0xc0
[  187.847795][ T9621]  ? p9_fcall_init+0x97/0x260
[  187.849152][ T9621]  p9_fcall_init+0x97/0x260
[  187.850475][ T9621]  p9_tag_alloc+0x17a/0x870
[  187.851793][ T9621]  ? __pfx_p9_tag_alloc+0x10/0x10
[  187.853244][ T9621]  p9_client_prepare_req+0x19f/0x4d0
[  187.854757][ T9621]  ? __pfx_p9_client_prepare_req+0x10/0x10
[  187.856424][ T9621]  p9_client_zc_rpc.constprop.0+0x105/0x880
[  187.858120][ T9621]  ? __pfx_p9_client_zc_rpc.constprop.0+0x10/0x10
[  187.859975][ T9621]  ? rcu_read_unlock+0x17/0x60
[  187.861361][ T9621]  ? __pfx_lock_release+0x10/0x10
[  187.862800][ T9621]  ? __lruvec_stat_mod_folio+0xa0/0x360
[  187.864385][ T9621]  ? __pfx_p9_virtio_zc_request+0x10/0x10
[  187.866010][ T9621]  p9_client_read_once+0x443/0x820
[  187.867496][ T9621]  ? __pfx_p9_client_read_once+0x10/0x10
[  187.869094][ T9621]  ? rcu_is_watching+0x12/0xc0
[  187.870477][ T9621]  ? rcu_is_watching+0x12/0xc0
[  187.871861][ T9621]  ? trace_kmalloc+0x2d/0xd0
[  187.873193][ T9621]  ? __kmalloc_noprof.cold+0x5e/0x63
[  187.874713][ T9621]  p9_client_read+0x13f/0x1b0
[  187.876084][ T9621]  v9fs_dir_readdir+0x522/0x700
[  187.877486][ T9621]  ? __pfx_v9fs_dir_readdir+0x10/0x10
[  187.879022][ T9621]  ? rwsem_read_trylock+0x12d/0x250
[  187.880522][ T9621]  ? iterate_dir+0x424/0xb40
[  187.881853][ T9621]  ? lock_acquire+0x2f/0xb0
[  187.883164][ T9621]  ? apparmor_file_permission+0x251/0x400
[  187.884825][ T9621]  iterate_dir+0x52f/0xb40
[  187.886115][ T9621]  __ia32_compat_sys_getdents+0x148/0x2c0
[  187.887750][ T9621]  ? __pfx___ia32_compat_sys_getdents+0x10/0x10
[  187.889545][ T9621]  ? __pfx_compat_filldir+0x10/0x10
[  187.891050][ T9621]  __do_fast_syscall_32+0x73/0x120
[  187.892532][ T9621]  do_fast_syscall_32+0x32/0x80
[  187.893937][ T9621]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  187.895750][ T9621] RIP: 0023:0xf714e579
[  187.896921][ T9621] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  187.902359][ T9621] RSP: 002b:00000000f514055c EFLAGS: 00000296 ORIG_RAX: 000000000000008d
[  187.904729][ T9621] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080
[  187.906971][ T9621] RDX: 0000000000000085 RSI: 0000000000000000 RDI: 0000000000000000
[  187.909212][ T9621] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  187.911470][ T9621] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  187.913710][ T9621] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  187.915960][ T9621]  </TASK>
[  188.819631][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  189.035466][ T9633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  189.859673][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  189.965702][ T9695] netlink: 28 bytes leftover after parsing attributes in process `syz.5.885'.
[  190.478917][ T9710] netlink: 'syz.1.889': attribute type 1 has an invalid length.
[  190.506211][ T9710] 8021q: adding VLAN 0 to HW filter on device bond4
[  190.525943][ T9710] 8021q: adding VLAN 0 to HW filter on device bond4
[  190.528077][ T9710] bond4: (slave ip6tnl1): The slave device specified does not support setting the MAC address
[  190.531544][ T9710] bond4: (slave ip6tnl1): Error -95 calling set_mac_address
[  190.571403][ T9703] syz.5.887 (9703): drop_caches: 1
[  190.601000][ T9703] syz.5.887 (9703): drop_caches: 1
[  190.899736][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  191.251343][ T9730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.894'.
[  191.449720][ T9738] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  191.452200][ T9738] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  191.454721][ T9738] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  191.693663][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.904'.
[  191.696322][ T9743] netlink: 40 bytes leftover after parsing attributes in process `syz.0.904'.
[  191.939600][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  192.105927][ T9761] netlink: 'syz.1.901': attribute type 1 has an invalid length.
[  192.115850][ T9761] 8021q: adding VLAN 0 to HW filter on device bond5
[  192.125788][ T9761] 8021q: adding VLAN 0 to HW filter on device bond5
[  192.128425][ T9761] bond5: (slave ip6tnl1): The slave device specified does not support setting the MAC address
[  192.132859][ T9761] bond5: (slave ip6tnl1): Error -95 calling set_mac_address
[  192.468726][ T9773] netlink: 'syz.0.907': attribute type 21 has an invalid length.
[  192.471319][ T9773] netlink: 144 bytes leftover after parsing attributes in process `syz.0.907'.
[  192.762639][ T9779] pim6reg: entered allmulticast mode
[  192.778092][ T9779] team0: Port device bond0 removed
[  192.781121][ T9779] bridge_slave_0: left allmulticast mode
[  192.782827][ T9779] bridge_slave_0: left promiscuous mode
[  192.784450][ T9779] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.787577][ T9779] bridge_slave_1: left allmulticast mode
[  192.789203][ T9779] bridge_slave_1: left promiscuous mode
[  192.791932][ T9779] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.799434][ T9779] bond0: (slave bond_slave_0): Releasing backup interface
[  192.805360][ T9779] bond0: (slave bond_slave_1): Releasing backup interface
[  192.814624][ T9779] team0: Port device team_slave_0 removed
[  192.820664][ T9779] team0: Port device team_slave_1 removed
[  192.822690][ T9779] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.825192][ T9779] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.842841][ T9779] team0: Port device bridge1 removed
[  192.847358][ T9779] team0: Port device bridge3 removed
[  192.853613][ T9779] team0: Port device bridge5 removed
[  192.858436][ T9779] team0: Port device bridge7 removed
[  192.874659][ T1137] tipc: Resetting bearer <eth:team0>
[  192.877169][ T9780] pim6reg: left allmulticast mode
[  192.979627][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  193.142732][ T9787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.910'.
[  193.166333][ T9787] team0: Port device bridge5 added
[  193.377909][ T9793] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  193.380650][ T9793] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  193.383235][ T9793] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  193.664954][ T1412] ieee802154 phy0 wpan0: encryption failed: -22
[  193.666899][ T1412] ieee802154 phy1 wpan1: encryption failed: -22
[  194.019607][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  195.069644][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  195.714335][ T9841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.923'.
[  196.099628][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  196.114977][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.925'.
[  196.118589][ T9852] netlink: 40 bytes leftover after parsing attributes in process `syz.5.925'.
[  197.139798][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  197.303757][ T9874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.929'.
[  197.459524][ T9878] netlink: 'syz.0.932': attribute type 1 has an invalid length.
[  197.494980][ T9878] 8021q: adding VLAN 0 to HW filter on device bond1
[  197.529138][ T9878] 8021q: adding VLAN 0 to HW filter on device bond1
[  197.532747][ T9878] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address
[  197.540523][ T9878] bond1: (slave ip6tnl1): Error -95 calling set_mac_address
[  198.033591][ T9869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  198.189724][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  198.715137][ T9916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.942'.
[  198.865417][ T9919] syz.1.943 (9919): drop_caches: 4
[  198.981547][ T9928] netlink: 68 bytes leftover after parsing attributes in process `syz.1.944'.
[  199.137963][ T9937] netlink: 'syz.0.947': attribute type 10 has an invalid length.
[  199.140750][ T9937] bond0: (slave wlan1): Opening slave failed
[  199.146172][ T9937] netlink: 164 bytes leftover after parsing attributes in process `syz.0.947'.
[  199.219744][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  200.269724][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  200.446407][ T9972] fuseblk: Bad value for 'fd'
[  200.820113][ T5979] usb 5-1: new low-speed USB device number 7 using dummy_hcd
[  201.104486][ T5979] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  201.106700][ T5979] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  201.110824][ T5979] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  201.113934][ T5979] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  201.117124][ T5979] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  201.122089][ T5979] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  201.124247][ T5979] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  201.127121][ T5979] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  201.129936][ T5979] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  201.133401][ T5979] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  201.137707][ T5979] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  201.139912][ T5979] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  201.142812][ T5979] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  201.145813][ T5979] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  201.148978][ T5979] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  201.164029][ T5979] usb 5-1: string descriptor 0 read error: -22
[  201.166327][ T5979] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  201.169466][ T5979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.205729][ T5979] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  201.299610][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  201.368842][T10001] overlayfs: missing 'lowerdir'
[  201.390067][ T9975] usb 5-1: Couldn't submit interrupt_out_urb -90
[  201.610419][T10003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.614480][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.614937][T10003] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.617199][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.629712][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.631994][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.634164][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.639673][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.641891][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.643966][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.646200][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.659256][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.660866][T10006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'.
[  201.661473][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.666074][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.668203][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.670780][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.672994][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.675078][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.677223][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.679413][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.681236][T10006] geneve2: entered promiscuous mode
[  201.687606][T10006] geneve2: entered allmulticast mode
[  201.694831][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.696949][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.699184][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.704940][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.707221][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.709298][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.711504][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.713739][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.716020][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.718134][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.720309][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.722552][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.724638][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.726864][   T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  201.728210][   T63] hid-generic 0000:0000:0000.000A: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  202.278801][   T73] usb 5-1: USB disconnect, device number 7
[  202.339803][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  203.379608][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  203.566056][T10044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.974'.
[  203.687785][T10049] ubi0: detaching mtd0
[  203.729180][T10049] ubi0: mtd0 is detached
[  204.126886][T10043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.299409][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.978'.
[  204.419658][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  205.037157][T10079] netlink: 76 bytes leftover after parsing attributes in process `syz.0.981'.
[  205.459699][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  205.459829][T10085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.983'.
[  205.508426][T10085] team0: Port device bridge6 added
[  205.937048][T10097] netlink: 72 bytes leftover after parsing attributes in process `syz.2.986'.
[  206.057685][T10102] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  206.509598][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  206.680697][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.990'.
[  206.955613][T10116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.991'.
[  207.008220][T10114] fuseblk: Bad value for 'fd'
[  207.033961][T10120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.992'.
[  207.085342][T10120] nbd: device at index 0 is going down
[  207.521494][T10129] netlink: 68 bytes leftover after parsing attributes in process `syz.1.995'.
[  207.539608][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  208.129631][    C0] vkms_vblank_simulate: vblank timer overrun
[  208.314763][T10149] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1001'.
[  208.467930][T10154] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1002'.
[  208.470944][T10154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1002'.
[  208.473531][T10154] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1002'.
[  208.476079][T10154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1002'.
[  208.579683][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  209.186944][T10159] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1011'.
[  209.619657][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  210.659634][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  211.699673][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  211.937018][T10203] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  212.283651][T10208] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  212.286943][T10208] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  212.292110][T10208] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  212.294715][T10208] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  212.297185][T10208] geneve2: entered promiscuous mode
[  212.298633][T10208] geneve2: entered allmulticast mode
[  212.396028][T10214] __nla_validate_parse: 2 callbacks suppressed
[  212.396040][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1017'.
[  212.401343][T10215] FAULT_INJECTION: forcing a failure.
[  212.401343][T10215] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  212.405244][T10215] CPU: 2 UID: 0 PID: 10215 Comm: syz.1.1015 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0
[  212.408256][T10215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  212.411173][T10215] Call Trace:
[  212.412105][T10215]  <TASK>
[  212.412933][T10215]  dump_stack_lvl+0x16c/0x1f0
[  212.414248][T10215]  should_fail_ex+0x497/0x5b0
[  212.415551][T10215]  _copy_from_user+0x2e/0xd0
[  212.416856][T10215]  __sys_bpf+0x215/0x57a0
[  212.418045][T10215]  ? __pfx_lock_release+0x10/0x10
[  212.419456][T10215]  ? __pfx___sys_bpf+0x10/0x10
[  212.420782][T10215]  ? vfs_write+0x306/0x1150
[  212.422036][T10215]  ? __mutex_unlock_slowpath+0x164/0x690
[  212.423595][T10215]  ? fput+0x67/0x440
[  212.424682][T10215]  ? ksys_write+0x1ba/0x250
[  212.425936][T10215]  ? __pfx_ksys_write+0x10/0x10
[  212.427316][T10215]  __ia32_sys_bpf+0x76/0xe0
[  212.428581][T10215]  __do_fast_syscall_32+0x73/0x120
[  212.430003][T10215]  do_fast_syscall_32+0x32/0x80
[  212.431380][T10215]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  212.433105][T10215] RIP: 0023:0xf712e579
[  212.434232][T10215] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  212.439487][T10215] RSP: 002b:00000000f50ff55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165
[  212.441760][T10215] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000020000200
[  212.444033][T10215] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000
[  212.446236][T10215] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  212.448460][T10215] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  212.450716][T10215] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  212.452946][T10215]  </TASK>
[  212.749615][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  213.572562][T10277] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  213.779632][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  214.495660][   T39] audit: type=1326 audit(2000000015.589:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000
[  214.511990][T10304] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies.
[  214.515251][   T39] audit: type=1326 audit(2000000015.589:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000
[  214.527380][   T39] audit: type=1326 audit(2000000015.599:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf712e579 code=0x7ffc0000
[  214.536774][T10304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1027'.
[  214.539269][T10304] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1027'.
[  214.542166][   T39] audit: type=1326 audit(2000000015.599:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000
[  214.549711][   T39] audit: type=1326 audit(2000000015.599:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000
[  214.560361][   T39] audit: type=1326 audit(2000000015.609:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf712e579 code=0x7ffc0000
[  214.566581][   T39] audit: type=1326 audit(2000000015.609:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000
[  214.573451][   T39] audit: type=1326 audit(2000000015.609:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000
[  214.608063][   T39] audit: type=1326 audit(2000000015.609:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf712e579 code=0x7ffc0000
[  214.618424][   T39] audit: type=1326 audit(2000000015.609:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000
[  214.687357][T10309] netlink: 'syz.1.1028': attribute type 1 has an invalid length.
[  214.829615][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  215.419729][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1037'.
[  215.496223][T10332] 9pnet_virtio: no channels available for device syz
[  215.577736][T10336] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1034'.
[  215.869603][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  215.986556][T10326] syz.1.1034 (10326) used greatest stack depth: 20040 bytes left
[  216.665486][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1047'.
[  216.851500][T10373] FAULT_INJECTION: forcing a failure.
[  216.851500][T10373] name failslab, interval 1, probability 0, space 0, times 0
[  216.856803][T10373] CPU: 1 UID: 0 PID: 10373 Comm: syz.0.1049 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0
[  216.860730][T10373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  216.863779][T10373] Call Trace:
[  216.864745][T10373]  <TASK>
[  216.865662][T10373]  dump_stack_lvl+0x16c/0x1f0
[  216.867596][T10373]  should_fail_ex+0x497/0x5b0
[  216.869520][T10373]  should_failslab+0xc2/0x120
[  216.871442][T10373]  kmem_cache_alloc_noprof+0x6e/0x3b0
[  216.873613][T10373]  ? trace_lock_acquire+0x14e/0x1f0
[  216.875720][T10373]  ? skb_clone+0x190/0x3f0
[  216.877543][T10373]  skb_clone+0x190/0x3f0
[  216.879291][T10373]  dev_queue_xmit_nit+0x38f/0xbc0
[  216.881344][T10373]  dev_hard_start_xmit+0x283/0x7b0
[  216.883441][T10373]  __dev_queue_xmit+0x7f0/0x43e0
[  216.885468][T10373]  ? __pfx___dev_queue_xmit+0x10/0x10
[  216.887460][T10373]  ? rcu_is_watching+0x12/0xc0
[  216.888839][T10373]  ? trace_kmem_cache_alloc+0x2d/0xd0
[  216.890499][T10373]  ? __copy_skb_header+0x2e8/0x5b0
[  216.891970][T10373]  ? __skb_clone+0x570/0x760
[  216.893299][T10373]  netlink_deliver_tap+0xa61/0xca0
[  216.894775][T10373]  netlink_unicast+0x5e1/0x7f0
[  216.896153][T10373]  ? __pfx_netlink_unicast+0x10/0x10
[  216.897688][T10373]  ? __phys_addr_symbol+0x30/0x80
[  216.899128][T10373]  ? __check_object_size+0x488/0x710
[  216.899661][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  216.900892][T10373]  netlink_sendmsg+0x8b8/0xd70
[  216.900912][T10373]  ? __pfx_netlink_sendmsg+0x10/0x10
[  216.900927][T10373]  ____sys_sendmsg+0x9ae/0xb40
[  216.900939][T10373]  ? __pfx_____sys_sendmsg+0x10/0x10
[  216.900950][T10373]  ? get_compat_msghdr+0x11b/0x170
[  216.910747][T10373]  ___sys_sendmsg+0x135/0x1e0
[  216.912103][T10373]  ? __pfx____sys_sendmsg+0x10/0x10
[  216.913659][T10373]  ? __pfx_lock_release+0x10/0x10
[  216.915112][T10373]  ? trace_lock_acquire+0x14e/0x1f0
[  216.916610][T10373]  ? __fget_files+0x206/0x3a0
[  216.917969][T10373]  __sys_sendmsg+0x16e/0x220
[  216.919409][T10373]  ? __pfx___sys_sendmsg+0x10/0x10
[  216.920921][T10373]  __do_fast_syscall_32+0x73/0x120
[  216.922390][T10373]  do_fast_syscall_32+0x32/0x80
[  216.923800][T10373]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  216.925760][T10373] RIP: 0023:0xf714e579
[  216.926941][T10373] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  216.933401][T10373] RSP: 002b:00000000f511f55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  216.935784][T10373] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000280
[  216.938026][T10373] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  216.940601][T10373] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  216.943734][T10373] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  216.946168][T10373] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  216.948425][T10373]  </TASK>
[  217.313800][T10386] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  217.520207][T10389] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1051'.
[  217.787579][T10392] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1052'.
[  217.939656][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  218.650827][T10399] 9pnet: Found fid 0 not clunked
[  218.689629][T10402] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1056'.
[  218.831634][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1057'.
[  218.979829][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  219.076251][T10414] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1060'.
[  220.014165][T10423] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1061'.
[  220.019708][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  220.387194][T10443] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  221.020261][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1066'.
[  221.020297][   T39] kauditd_printk_skb: 50 callbacks suppressed
[  221.020306][   T39] audit: type=1326 audit(2000000022.119:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.5.1064" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7fc00000
[  221.059607][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  221.204527][T10458] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1069'.
[  221.427194][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1070'.
[  222.099655][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  222.897690][T10481] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  223.139604][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  223.454999][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1077'.
[  224.179650][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  224.399266][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1086'.
[  224.656593][T10529] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  224.689693][    T8] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  224.849783][    T8] usb 10-1: Using ep0 maxpacket: 16
[  224.856085][    T8] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  224.858813][    T8] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  224.859207][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'.
[  224.862168][    T8] usb 10-1: Product: syz
[  224.865758][    T8] usb 10-1: Manufacturer: syz
[  224.881185][    T8] usb 10-1: SerialNumber: syz
[  224.905523][    T8] usb 10-1: config 0 descriptor??
[  225.150570][T10519] input: syz1 as /devices/virtual/input/input13
[  225.163437][   T63] usb 10-1: USB disconnect, device number 3
[  225.215384][T10554] FAULT_INJECTION: forcing a failure.
[  225.215384][T10554] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  225.219348][T10554] CPU: 2 UID: 0 PID: 10554 Comm: syz.1.1092 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0
[  225.219756][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  225.222603][T10554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  225.222613][T10554] Call Trace:
[  225.222617][T10554]  <TASK>
[  225.222622][T10554]  dump_stack_lvl+0x16c/0x1f0
[  225.222639][T10554]  should_fail_ex+0x497/0x5b0
[  225.222654][T10554]  _copy_from_user+0x2e/0xd0
[  225.222667][T10554]  get_compat_msghdr+0xa8/0x170
[  225.222683][T10554]  ? __pfx_get_compat_msghdr+0x10/0x10
[  225.222701][T10554]  ___sys_recvmsg+0x193/0x1a0
[  225.222715][T10554]  ? __pfx____sys_recvmsg+0x10/0x10
[  225.222728][T10554]  ? __fget_files+0x1fc/0x3a0
[  225.243699][T10554]  ? trace_lock_acquire+0x14e/0x1f0
[  225.245965][T10554]  ? __fget_files+0x206/0x3a0
[  225.248000][T10554]  ? __pfx___might_resched+0x10/0x10
[  225.250279][T10554]  do_recvmmsg+0x55d/0x740
[  225.251924][T10554]  ? __pfx_do_recvmmsg+0x10/0x10
[  225.253550][T10554]  ? vfs_write+0x306/0x1150
[  225.255128][T10554]  ? __fget_files+0x206/0x3a0
[  225.256588][T10554]  __sys_recvmmsg+0x21e/0x280
[  225.258044][T10554]  ? __pfx___sys_recvmmsg+0x10/0x10
[  225.259649][T10554]  ? __pfx_ksys_write+0x10/0x10
[  225.261348][T10554]  __ia32_compat_sys_recvmmsg_time32+0xc4/0x160
[  225.263268][T10554]  ? lockdep_hardirqs_on+0x7c/0x110
[  225.264870][T10554]  ? syscall_enter_from_user_mode_prepare+0x68/0xe0
[  225.266858][T10554]  __do_fast_syscall_32+0x73/0x120
[  225.268417][T10554]  do_fast_syscall_32+0x32/0x80
[  225.269908][T10554]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  225.271857][T10554] RIP: 0023:0xf712e579
[  225.273067][T10554] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  225.278899][T10554] RSP: 002b:00000000f50ff55c EFLAGS: 00000296 ORIG_RAX: 0000000000000151
[  225.281466][T10554] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000200066c0
[  225.283846][T10554] RDX: 0000000000000a0d RSI: 0000000000000000 RDI: 0000000000000000
[  225.286211][T10554] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  225.288609][T10554] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  225.291008][T10554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  225.293340][T10554]  </TASK>
[  225.733534][T10564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1096'.
[  226.062559][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1102'.
[  226.097102][T10579] binder: 10570:10579 ioctl c0046209 0 returned -22
[  226.259685][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  226.861335][T10590] overlay: ./file0 is not a directory
[  227.056370][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1108'.
[  227.173187][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1110'.
[  227.204027][T10608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1118'.
[  227.319799][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  228.339597][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  228.539639][ T5999] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  228.571848][T10648] veth1_macvtap: left promiscuous mode
[  228.573490][T10648] macsec0: entered promiscuous mode
[  228.574981][T10648] macsec0: entered allmulticast mode
[  228.689693][ T5999] usb 6-1: Using ep0 maxpacket: 16
[  228.693132][ T5999] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  228.696243][ T5999] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  228.699446][ T5999] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11
[  228.704837][ T5999] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024
[  228.708019][ T5999] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  228.720947][ T5999] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  228.723635][ T5999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.725917][ T5999] usb 6-1: Product: syz
[  228.727129][ T5999] usb 6-1: Manufacturer: syz
[  228.728543][ T5999] usb 6-1: SerialNumber: syz
[  228.735251][ T5999] usb 6-1: config 0 descriptor??
[  228.805169][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1120'.
[  229.026467][ T5999] appledisplay 6-1:0.0: Error while getting initial brightness: -71
[  229.029482][ T5999] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -71
[  229.034359][ T5999] usb 6-1: USB disconnect, device number 9
[  229.389630][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  229.752208][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1128'.
[  229.804331][T10676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1129'.
[  229.890364][T10685] FAULT_INJECTION: forcing a failure.
[  229.890364][T10685] name failslab, interval 1, probability 0, space 0, times 0
[  229.896704][T10685] CPU: 3 UID: 0 PID: 10685 Comm: syz.1.1132 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0
[  229.899790][T10685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  229.902926][T10685] Call Trace:
[  229.903952][T10685]  <TASK>
[  229.904802][T10685]  dump_stack_lvl+0x16c/0x1f0
[  229.906110][T10685]  should_fail_ex+0x497/0x5b0
[  229.907396][T10685]  ? fs_reclaim_acquire+0xae/0x150
[  229.908824][T10685]  should_failslab+0xc2/0x120
[  229.910254][T10685]  __kmalloc_cache_noprof+0x68/0x420
[  229.911751][T10685]  ? __pfx_lock_release+0x10/0x10
[  229.913124][T10685]  ? trace_lock_acquire+0x14e/0x1f0
[  229.914506][T10685]  ? trace_lock_acquire+0x14e/0x1f0
[  229.915937][T10685]  rxrpc_alloc_peer+0x93/0x3f0
[  229.917312][T10685]  rxrpc_lookup_peer+0x168/0x670
[  229.918728][T10685]  ? _raw_read_unlock+0x28/0x50
[  229.920097][T10685]  rxrpc_do_sendmsg+0xa6d/0x1420
[  229.921439][T10685]  ? __pfx_rxrpc_do_sendmsg+0x10/0x10
[  229.922961][T10685]  ? mark_lock+0xb60/0xc60
[  229.924240][T10685]  ? mark_held_locks+0x9f/0xe0
[  229.925575][T10685]  ? __local_bh_enable_ip+0xa4/0x120
[  229.927171][T10685]  rxrpc_sendmsg+0x427/0x5f0
[  229.928465][T10685]  ____sys_sendmsg+0x9ae/0xb40
[  229.929830][T10685]  ? __pfx_____sys_sendmsg+0x10/0x10
[  229.931353][T10685]  ? get_compat_msghdr+0x11b/0x170
[  229.932783][T10685]  ___sys_sendmsg+0x135/0x1e0
[  229.934065][T10685]  ? __pfx____sys_sendmsg+0x10/0x10
[  229.935508][T10685]  ? trace_lock_acquire+0x14e/0x1f0
[  229.936996][T10685]  __sys_sendmmsg+0x2fa/0x420
[  229.938345][T10685]  ? __pfx___sys_sendmmsg+0x10/0x10
[  229.939816][T10685]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  229.941459][T10685]  ? fput+0x67/0x440
[  229.942534][T10685]  ? ksys_write+0x1ba/0x250
[  229.943804][T10685]  ? __pfx_ksys_write+0x10/0x10
[  229.945145][T10685]  __ia32_compat_sys_sendmmsg+0x9d/0x100
[  229.946670][T10685]  ? syscall_enter_from_user_mode_prepare+0x68/0xe0
[  229.948488][T10685]  __do_fast_syscall_32+0x73/0x120
[  229.949985][T10685]  do_fast_syscall_32+0x32/0x80
[  229.951384][T10685]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  229.953180][T10685] RIP: 0023:0xf712e579
[  229.954343][T10685] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  229.959690][T10685] RSP: 002b:00000000f512055c EFLAGS: 00000296 ORIG_RAX: 0000000000000159
[  229.962047][T10685] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000180
[  229.964272][T10685] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  229.966492][T10685] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  229.968713][T10685] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  229.971207][T10685] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  229.973428][T10685]  </TASK>
[  230.049132][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1137'.
[  230.104375][T10704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1139'.
[  230.249618][ T5999] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  230.419655][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  230.429606][ T5999] usb 7-1: Using ep0 maxpacket: 16
[  230.432579][ T5999] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  230.435602][ T5999] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  230.438824][ T5999] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11
[  230.459667][ T5999] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024
[  230.459691][ T5999] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  230.461468][ T5999] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  230.479610][ T5999] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.481912][ T5999] usb 7-1: Product: syz
[  230.483112][ T5999] usb 7-1: Manufacturer: syz
[  230.484431][ T5999] usb 7-1: SerialNumber: syz
[  230.486580][ T5999] usb 7-1: config 0 descriptor??
[  230.708849][ T5999] appledisplay 7-1:0.0: Error while getting initial brightness: -71
[  230.712513][ T5999] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -71
[  230.720945][ T5999] usb 7-1: USB disconnect, device number 11
[  231.459612][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  231.549642][   T30] usb 7-1: new low-speed USB device number 12 using dummy_hcd
[  231.681195][   T30] usb 7-1: device descriptor read/64, error -71
[  231.919659][   T30] usb 7-1: new low-speed USB device number 13 using dummy_hcd
[  232.049663][   T30] usb 7-1: device descriptor read/64, error -71
[  232.159819][   T30] usb usb7-port1: attempt power cycle
[  232.499630][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  232.499787][   T30] usb 7-1: new low-speed USB device number 14 using dummy_hcd
[  232.520169][   T30] usb 7-1: device descriptor read/8, error -71
[  232.759710][   T30] usb 7-1: new low-speed USB device number 15 using dummy_hcd
[  232.780228][   T30] usb 7-1: device descriptor read/8, error -71
[  232.889809][   T30] usb usb7-port1: unable to enumerate USB device
[  233.160397][T10728] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.163496][T10728] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  233.191775][   T39] audit: type=1326 audit(2000000034.289:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.0.1145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000
[  233.203205][   T39] audit: type=1326 audit(2000000034.289:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.0.1145" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf714e579 code=0x7ffc0000
[  233.209325][   T39] audit: type=1326 audit(2000000034.289:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.0.1145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000
[  233.218880][   T39] audit: type=1326 audit(2000000034.289:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.0.1145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000
[  233.225226][   T39] audit: type=1326 audit(2000000034.289:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.0.1145" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf714e579 code=0x7ffc0000
[  233.235253][   T39] audit: type=1326 audit(2000000034.289:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.0.1145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000
[  233.242435][   T39] audit: type=1326 audit(2000000034.289:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.0.1145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000
[  233.248510][   T39] audit: type=1326 audit(2000000034.289:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.0.1145" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf714e579 code=0x7ffc0000
[  233.255086][   T39] audit: type=1326 audit(2000000034.289:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.0.1145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000
[  233.261403][   T39] audit: type=1326 audit(2000000034.289:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.0.1145" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf714e579 code=0x7ffc0000
[  233.276550][T10728] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.279654][T10728] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  233.324659][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1148'.
[  233.372243][T10728] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.375286][T10728] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  233.463360][T10728] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.466343][T10728] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  233.573632][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  233.688189][T10728] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  233.690790][T10728] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  233.699523][T10728] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  233.702053][T10728] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  233.711044][T10728] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  233.713468][T10728] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  233.722121][T10728] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  233.724605][T10728] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  233.855307][ T5999] IPVS: starting estimator thread 0...
[  233.939651][T10751] IPVS: using max 40 ests per chain, 96000 per kthread
[  234.036490][T10755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1153'.
[  234.138905][T10757] random: crng reseeded on system resumption
[  234.589911][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  235.060129][ T5999] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  235.117178][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1162'.
[  235.229784][ T5999] usb 10-1: Using ep0 maxpacket: 8
[  235.232415][ T5999] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  235.234568][ T5999] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  235.237830][ T5999] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  235.241204][ T5999] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  235.244304][ T5999] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  235.248312][ T5999] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  235.250550][ T5999] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  235.253710][ T5999] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  235.256997][ T5999] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  235.261932][ T5999] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  235.265868][ T5999] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  235.268020][ T5999] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  235.273839][ T5999] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  235.278245][ T5999] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  235.284595][ T5999] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  235.291268][ T5999] usb 10-1: string descriptor 0 read error: -22
[  235.293682][ T5999] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  235.297074][ T5999] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.311454][ T5999] adutux 10-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  235.619746][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  235.992892][T10806] netlink: 'syz.1.1168': attribute type 1 has an invalid length.
[  236.481475][T10820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1171'.
[  236.660656][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  237.701403][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  238.007542][T10850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1179'.
[  238.020928][T10850] team0: Port device bridge7 added
[  238.696455][T10872] ubi0: attaching mtd0
[  238.698195][T10872] ubi0: scanning is finished
[  238.701629][T10872] ------------[ cut here ]------------
[  238.703502][T10872] notifier callback ubi_wl_reboot_notifier already registered
[  238.703978][T10872] WARNING: CPU: 2 PID: 10872 at kernel/notifier.c:23 notifier_chain_register+0x157/0x420
[  238.708843][T10872] Modules linked in:
[  238.710428][T10872] CPU: 2 UID: 0 PID: 10872 Comm: syz.2.1186 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0
[  238.714935][T10872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  238.717928][T10872] RIP: 0010:notifier_chain_register+0x157/0x420
[  238.719806][T10872] Code: 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 c2 02 00 00 49 8b 75 00 48 c7 c7 a0 0f 4c 8b e8 fa 79 f4 ff 90 <0f> 0b 90 90 bb ef ff ff ff e8 ab b3 33 00 89 d8 48 83 c4 18 5b 5d
[  238.725188][T10872] RSP: 0018:ffffc9000447fa28 EFLAGS: 00010286
[  238.726879][T10872] RAX: 0000000000000000 RBX: ffff88804bb558c8 RCX: ffffc9000c001000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  238.729069][T10872] RDX: 0000000000080000 RSI: ffffffff815a1736 RDI: 0000000000000001
[  238.731647][T10872] RBP: 000000007fffffff R08: 0000000000000001 R09: 0000000000000000
[  238.734161][T10872] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000001
[  238.736426][T10872] R13: ffff88804bb558c8 R14: ffffffff8f6138e8 R15: dffffc0000000000
[  238.739522][T10872] FS:  0000000000000000(0000) GS:ffff88802b600000(0063) knlGS:00000000f5136b40
[  238.739642][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  238.739695][T10872] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  238.739706][T10872] CR2: 000000002f015ffc CR3: 000000006817c000 CR4: 0000000000352ef0
[  238.739713][T10872] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  238.739721][T10872] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  238.754373][T10872] Call Trace:
[  238.754380][T10872]  <TASK>
[  238.754386][T10872]  ? __warn+0xea/0x3c0
[  238.754404][T10872]  ? preempt_schedule_notrace+0x62/0xe0
[  238.754418][T10872]  ? notifier_chain_register+0x157/0x420
[  238.754433][T10872]  ? report_bug+0x3c0/0x580
[  238.754447][T10872]  ? handle_bug+0x54/0xa0
[  238.754461][T10872]  ? exc_invalid_op+0x17/0x50
[  238.754475][T10872]  ? asm_exc_invalid_op+0x1a/0x20
[  238.754490][T10872]  ? __warn_printk+0x1a6/0x350
[  238.754503][T10872]  ? notifier_chain_register+0x157/0x420
[  238.754515][T10872]  ? notifier_chain_register+0x156/0x420
[  238.754529][T10872]  blocking_notifier_chain_register+0x76/0xd0
[  238.754543][T10872]  ubi_wl_init+0x1018/0x17b0
[  238.754562][T10872]  ubi_attach+0x1cdd/0x4dc0
[  238.754577][T10872]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  238.754589][T10872]  ? lockdep_init_map_type+0x16d/0x7d0
[  238.754600][T10872]  ? __pfx_ubi_attach+0x10/0x10
[  238.754611][T10872]  ? ubi_attach_mtd_dev+0x1543/0x3590
[  238.754623][T10872]  ubi_attach_mtd_dev+0x158f/0x3590
[  238.754639][T10872]  ? __pfx_ubi_attach_mtd_dev+0x10/0x10
[  238.754650][T10872]  ? __pfx_get_mtd_device+0x10/0x10
[  238.754666][T10872]  ctrl_cdev_ioctl+0x339/0x3d0
[  238.754676][T10872]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  238.754689][T10872]  ? __fget_files+0x206/0x3a0
[  238.754717][T10872]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  238.754730][T10872]  compat_ptr_ioctl+0x6b/0xa0
[  238.754746][T10872]  ? __pfx_compat_ptr_ioctl+0x10/0x10
[  238.754761][T10872]  __do_compat_sys_ioctl+0x1cb/0x2c0
[  238.754773][T10872]  __do_fast_syscall_32+0x73/0x120
[  238.754788][T10872]  do_fast_syscall_32+0x32/0x80
[  238.754801][T10872]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  238.754816][T10872] RIP: 0023:0xf7fe1579
[  238.754825][T10872] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  238.754834][T10872] RSP: 002b:00000000f513655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  238.754846][T10872] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040186f40
[  238.754852][T10872] RDX: 0000000020000502 RSI: 0000000000000000 RDI: 0000000000000000
[  238.754859][T10872] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  238.754865][T10872] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  238.754872][T10872] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  238.754884][T10872]  </TASK>
[  238.754889][T10872] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  238.754896][T10872] CPU: 2 UID: 0 PID: 10872 Comm: syz.2.1186 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0
[  238.754907][T10872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  238.754913][T10872] Call Trace:
[  238.754917][T10872]  <TASK>
[  238.754920][T10872]  dump_stack_lvl+0x3d/0x1f0
[  238.754932][T10872]  panic+0x71d/0x800
[  238.754944][T10872]  ? __pfx_panic+0x10/0x10
[  238.754957][T10872]  ? show_trace_log_lvl+0x29d/0x3d0
[  238.754972][T10872]  ? notifier_chain_register+0x157/0x420
[  238.754984][T10872]  check_panic_on_warn+0xab/0xb0
[  238.754997][T10872]  __warn+0xf6/0x3c0
[  238.755009][T10872]  ? preempt_schedule_notrace+0x62/0xe0
[  238.755020][T10872]  ? notifier_chain_register+0x157/0x420
[  238.755031][T10872]  report_bug+0x3c0/0x580
[  238.755043][T10872]  handle_bug+0x54/0xa0
[  238.755055][T10872]  exc_invalid_op+0x17/0x50
[  238.755067][T10872]  asm_exc_invalid_op+0x1a/0x20
[  238.755078][T10872] RIP: 0010:notifier_chain_register+0x157/0x420
[  238.755090][T10872] Code: 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 c2 02 00 00 49 8b 75 00 48 c7 c7 a0 0f 4c 8b e8 fa 79 f4 ff 90 <0f> 0b 90 90 bb ef ff ff ff e8 ab b3 33 00 89 d8 48 83 c4 18 5b 5d
[  238.755098][T10872] RSP: 0018:ffffc9000447fa28 EFLAGS: 00010286
[  238.755106][T10872] RAX: 0000000000000000 RBX: ffff88804bb558c8 RCX: ffffc9000c001000
[  238.755113][T10872] RDX: 0000000000080000 RSI: ffffffff815a1736 RDI: 0000000000000001
[  238.755119][T10872] RBP: 000000007fffffff R08: 0000000000000001 R09: 0000000000000000
[  238.755124][T10872] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000001
[  238.755130][T10872] R13: ffff88804bb558c8 R14: ffffffff8f6138e8 R15: dffffc0000000000
[  238.755140][T10872]  ? __warn_printk+0x1a6/0x350
[  238.755154][T10872]  ? notifier_chain_register+0x156/0x420
[  238.755167][T10872]  blocking_notifier_chain_register+0x76/0xd0
[  238.755180][T10872]  ubi_wl_init+0x1018/0x17b0
[  238.755197][T10872]  ubi_attach+0x1cdd/0x4dc0
[  238.755211][T10872]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  238.755223][T10872]  ? lockdep_init_map_type+0x16d/0x7d0
[  238.755233][T10872]  ? __pfx_ubi_attach+0x10/0x10
[  238.755243][T10872]  ? ubi_attach_mtd_dev+0x1543/0x3590
[  238.755255][T10872]  ubi_attach_mtd_dev+0x158f/0x3590
[  238.755269][T10872]  ? __pfx_ubi_attach_mtd_dev+0x10/0x10
[  238.755279][T10872]  ? __pfx_get_mtd_device+0x10/0x10
[  238.755294][T10872]  ctrl_cdev_ioctl+0x339/0x3d0
[  238.755304][T10872]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  238.755315][T10872]  ? __fget_files+0x206/0x3a0
[  238.755327][T10872]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  238.755337][T10872]  compat_ptr_ioctl+0x6b/0xa0
[  238.755351][T10872]  ? __pfx_compat_ptr_ioctl+0x10/0x10
[  238.755363][T10872]  __do_compat_sys_ioctl+0x1cb/0x2c0
[  238.755381][T10872]  __do_fast_syscall_32+0x73/0x120
[  238.755395][T10872]  do_fast_syscall_32+0x32/0x80
[  238.755408][T10872]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  238.755422][T10872] RIP: 0023:0xf7fe1579
[  238.755430][T10872] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  238.755439][T10872] RSP: 002b:00000000f513655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  238.755449][T10872] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040186f40
[  238.755456][T10872] RDX: 0000000020000502 RSI: 0000000000000000 RDI: 0000000000000000
[  238.755462][T10872] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  238.755469][T10872] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  238.755476][T10872] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  238.755487][T10872]  </TASK>
[  238.755975][T10872] Kernel Offset: disabled

VM DIAGNOSIS:
08:08:08  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000490 RBX=ffff888068121950 RCX=0000000000000038 RDX=0000000000000030
RSI=00000000000481c0 RDI=00000000ffffffff RBP=ffffc9000e8cfb90 RSP=ffffc9000e8cfb30
R8 =ffff888068121440 R9 =fffffbfff2039c7a R10=ffffffff901ce300 R11=0000000000000002
R12=0000000000000cc0 R13=ffff888041ebdcc0 R14=0000000000000490 R15=00000000901ce300
RIP=ffffffff81f148a7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000002f018ffc CR3=000000006c698000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=00000000000007b1 RCX=ffffffff817560be RDX=fffffbfff2d36db7
RSI=0000000000000008 RDI=ffffffff969b6db0 RBP=0000000000000000 RSP=ffffc9000679f950
R8 =0000000000000000 R9 =fffffbfff2d36db6 R10=ffffffff969b6db7 R11=0000000000000002
R12=ffffed10042605e3 R13=ffff888021302440 R14=0000000000000005 R15=ffff888021302f70
RIP=ffffffff817560c6 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b500000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000002001a000 CR3=000000002b220000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85142d25 RDI=ffffffff9a667240 RBP=ffffffff9a667200 RSP=ffffc9000447f388
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000006
R12=0000000000000000 R13=0000000000000020 R14=ffffffff85142cc0 R15=0000000000000000
RIP=ffffffff85142d4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000002f015ffc CR3=000000006817c000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000001 RBX=ffff88802b646740 RCX=ffffffff818d52cc RDX=0000000000000001
RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90006cef998
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000006
R12=ffffed10056c8ce9 R13=0000000000000001 R14=ffff88802b646748 R15=ffff88802b73ff80
RIP=ffffffff81994fd0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000200001c0 CR3=000000000db7e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=4020000000000000 Opmask01=0000000040200000 Opmask02=0000000000000004 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe3be70a60 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30203a4449552032 203a555043205d32 37383031545b5d38 32343031372e3833
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30203a2036382031 20322e5043202032 3738303120323738 30312031372e3820
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30302d72656c6c61 6b7a79732d346372 2d302e33312e3620 6465746e69617420
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30000a3432303120 6b74000a2d232030 2d302e33312e3420 373066672d343020
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000