last executing test programs:

6m39.924464926s ago: executing program 32 (id=322):
socket(0xa, 0x2, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x3a3a7744)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[])
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r7=>r1}, './file1/file0\x00'})
sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000000540)={&(0x7f00000000c0), 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x50, 0xd, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2008}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040841}, 0x54)
r8 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xa80)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r8, 0xc0045516, &(0x7f0000000180)=0x2b7a)
readv(r8, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/90, 0x48}], 0x1)
ioctl$SG_IO(r0, 0x2285, 0x0)

5m23.848609022s ago: executing program 1 (id=733):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000002300)='./file0\x00')
rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00')
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
io_setup(0x23, &(0x7f00000001c0)=<r1=>0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
r3 = dup(r2)
io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x3, 0x0, 0x0, r3}])
ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
r5 = dup3(r4, r0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={<r9=>0x0, 0x38, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x4, @private0, 0x3}, @in6={0xa, 0x4e21, 0xc1c0, @empty, 0x1}]}, &(0x7f0000000440)=0xc)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x74, &(0x7f0000000080)={r9, 0x4, 0x20, 0x3}, &(0x7f0000000840)=0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r7, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000019c0)=ANY=[@ANYBLOB="9feb010018000000000000007b0000007b000000030000000c000000000000010000000850005d070d0000000000000905000000020000000000000a000000000c00000001000006040000000c0000000f0000000c00000001000005ff0700000e00000002000000ffffffff0d0000000000000c03000000080000000100000f030000000500000008000000010000003a7b9f000030006aeec80720f6b87b9c79d0e6807daf881c0fd8f86ecec84a2abf414a"], &(0x7f0000003400)=""/4096, 0x97, 0x1000, 0x1, 0x7e1dc5d5, 0x10000, @value=r3}, 0x28)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50)
write$P9_RLINK(r11, &(0x7f0000000180)={0x7, 0x47, 0x1}, 0x7)
ioctl$KVM_CAP_MAX_VCPU_ID(r11, 0x4068aea3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001900)=@bpf_tracing={0x1a, 0x1a, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x0, 0x4, 0x4, 0x7, 0x4}, @map_fd={0x18, 0x5, 0x1, 0x0, r5}, @alu={0x4, 0x0, 0xd, 0xa, 0x0, 0x0, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @generic={0x48, 0x7, 0x2, 0x0, 0xabc0}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x1000, &(0x7f0000000880)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x1c, r10, 0x8, &(0x7f0000000380)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xc13c, r11, 0x5, 0x0, &(0x7f0000001880)=[{0x5, 0x5, 0xa}, {0x3, 0x5, 0x10, 0xb}, {0x5, 0x5, 0x10, 0xb}, {0x2, 0x4, 0x10, 0x1}, {0x5, 0x5, 0xc, 0xe}], 0x10, 0xc}, 0x94)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000001c0))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f00000004c0)="e0"})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

5m23.518207523s ago: executing program 1 (id=736):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_io_uring_setup(0x61d1, &(0x7f0000000380)={0x0, 0x1ffffb, 0x2, 0x3, 0x1c1}, &(0x7f0000000140)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0x2)
mmap(&(0x7f00005b9000/0x1000)=nil, 0x1000, 0x1000003, 0x11012, r5, 0x68255000)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x2, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}]}, 0x20}}, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SMI(r8, 0xaeb7)
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)
ptrace$getregset(0x4205, r9, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "01a600", 0x8, 0x11, 0x0, @local, @mcast2, {[], {0x4e23, 0x4e20, 0x8}}}}}}, 0x0)
socket$netlink(0x10, 0x3, 0x5)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'macvtap0\x00', <r10=>0x0})
setsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000000000)={@mcast2, r10}, 0x14)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r10, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840)
close(r7)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r0, 0x0, 0x0, 0x0, 0x80800})
io_uring_enter(r1, 0x708, 0x41e3, 0x0, 0x0, 0x0)

5m22.898688027s ago: executing program 1 (id=738):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8923, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter\x00')
r2 = socket$inet6(0xa, 0x3, 0x3c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x1d, 0x2, 0x6)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={0x0, 0x20c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) (fail_nth: 1)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[])
read$FUSE(r4, 0x0, 0x0)
write$FUSE_INIT(r4, 0x0, 0x0)
add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000180), 0x0, 0xffffffffffffffff)
syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0xffffffffffffffff, 0x1, 0xfffffffffffffff3, 0xfffffffffffffffd, 0x9, 0x0, {0x2, 0x80000808000080, 0x3, 0x6, 0x800000000003, 0x100000000000008, 0x80000000, 0x4, 0x6, 0x2000, 0x7fffffff, 0x0, 0x0, 0x0, 0xcc}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

5m22.756064601s ago: executing program 1 (id=739):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
write$binfmt_elf32(r0, &(0x7f0000001600)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x9, 0x92, 0x3, 0x6, 0x2, 0x3, 0x80000001, 0x1b, 0x34, 0x46, 0x10000, 0x1, 0x20, 0x1, 0x5, 0x8, 0x40}, [{0x7, 0x6, 0xd, 0x3, 0x9, 0x9, 0x6, 0x1}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1554)
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
r1 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r1, 0x0)
setpgid(0x0, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002400000000308000140000000120800034000000000080003400000000a"], 0x122}, 0x1, 0x0, 0x0, 0x40000}, 0x80d0)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
sched_setparam(r1, &(0x7f0000000180)=0x9)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200))
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x0, 0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0xfffffffffffffd5c}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)

5m22.637417266s ago: executing program 1 (id=740):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffff6, 0xc03, 0x1ff, 0x5, 0x7, 0x6, 0x0, 0x4, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd2c, 0x25dfdbf7, {0x0, 0x0, 0x0, r5, {0xb, 0x19}, {0x0, 0xfff1}, {0xe, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x6701e622}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000003e00)={&(0x7f0000003d40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d80)={0x24, 0x7, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)

5m22.508218214s ago: executing program 1 (id=742):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
capget(0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0xfffffffffffffe8e, 0x0, 0x1, [{0x0, 0x0}]})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000140)='9', 0x1}], 0x1)

5m22.390785268s ago: executing program 33 (id=742):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
capget(0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0xfffffffffffffe8e, 0x0, 0x1, [{0x0, 0x0}]})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000140)='9', 0x1}], 0x1)

2m40.931467395s ago: executing program 5 (id=1429):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0)

2m40.877269457s ago: executing program 5 (id=1432):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0xba, &(0x7f0000000100)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x6d, 0x0, [{0x5, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0xe, "73bc2300ad9d19a300000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0)

2m40.817815441s ago: executing program 5 (id=1433):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
setuid(0xee01)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x10916af4, @empty, 0xa}, 0x20)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280))
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe0}}, 0x4)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r5, 0x2ded, 0xad96, 0x24, 0x0, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSACTIVE(r8, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
read(r8, 0x0, 0x5d)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x200001ab, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000800000095000000"], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r9}, 0x18)
r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMSET(r10, 0x5418, &(0x7f0000000140)=0xffffbdfb)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000040601020000000000000000020000090500010007000000c63fee356319293aac62cd2337130d7caf73da8b6b03e0341bd224a57d8d559bda0cdb295833b8603412"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)

2m40.734708733s ago: executing program 5 (id=1435):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0xf8, 0x30, 0x10, 0x0, 0x25dfdc01, {}, [{0xe4, 0x1, [@m_ct={0x98, 0x102, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x56, 0x6, "f5f19b4e51b1b5de02fcc6d9242bc97628c73b83e09dd10b945e5fff429eb54d4237a44c97694a606126b1115d8af0983f8d0beeb8695bd3f63abd001a4d3f12245cf96493c5b53a9b08881b95d12f4ac477"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x5, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2, 0x80000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1facac7a4c254962, 0x2}}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r2 = socket(0x28, 0x1, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(r2, 0x0, 0x4000840)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10)
syz_usb_connect$hid(0x28b299f2f22b916, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x6161, 0x4d15, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0xc0, 0xeb, [{{0x9, 0x4, 0x0, 0xca, 0x1, 0x3, 0x1, 0x3, 0x8, {0x9, 0x21, 0x400, 0x4, 0x1, {0x22, 0x712}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x2, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xb, 0x70, 0x5}}]}}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x5, &(0x7f0000000480)={0x5, 0xf, 0x5}, 0x8, [{0x0, 0x0}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x401}}, {0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="020d"]}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x810}}, {0x7c, &(0x7f0000000700)=@string={0x7c, 0x3, "5c4063f36202a1c63632c92c4a533092490883a86939fb3f4a3fd7dad64beb9b48bd2ef55ca48d0b23f06920357f2a06f621d2c90c78c9d69577879c85a53bb1daefbc17009968be4020bc7188e6073a48e67f5de0572bbe72c6db1467decc05eb49972fd5f972acf4e7bdb54b4287d7ef6ecfe197bc6f1ebc35"}}, {0x8c, &(0x7f0000000800)=@string={0x8c, 0x3, "929cb9e84cb0e5ec0c3ba6a7c6617739af0824f0da408e30f7c266548df45075d8f9d479855fae49561dfab1e46e44420653c0d851d34e8042773498b1d3dbd2b0e72977a278aee62bdaea167e28a337782e3f7ea91f98a3c4de06e5ef942bb716b206bbeec5102c297d272d43463dc2f7d5e6bd0aa90ae43afc92e76afabfff02baf11030fe95bb0e6e"}}, {0x0, 0x0}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x41e}}]})
syz_emit_ethernet(0x46, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000280), 0x47b, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240))
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)

2m37.365655251s ago: executing program 5 (id=1451):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r5, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x24044080) (async)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r5, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x30}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x303}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c084}, 0x24000040)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) (async)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) (async)
r8 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) (async)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0x0, 0x7}}}, 0x24}}, 0x0)

2m37.297206826s ago: executing program 5 (id=1453):
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
socket$phonet_pipe(0x23, 0x5, 0x2)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$rtc(0xffffff9c, &(0x7f0000000080), 0x4000, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
unshare(0x400)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0xe3b81, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000140)={0xffffffffffff7c04, 0x0, 0x8})
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}, 0x300}], 0x1, 0x20008000)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m26.88738696s ago: executing program 2 (id=1477):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
io_setup(0x7ff, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003d68c5ee17688a2003208030300c7ccd43f3bb0d1ec973a40895aea2922ecff3f0000000300000a0000000098fc5ad9485b0000880000d6a6f4605fa9ef4609ad392e72c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff", 0x90)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
inotify_init1(0x80000)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0xfffffffe}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
sendmmsg$inet(r2, &(0x7f0000001b40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f00000005c0)="ae14", 0x2}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)="4f022231cdff7e2f7ce4c0fd08e5d198868e1eaf7ed0a2ffd17cb33a1871e1d3840e8293c38c25df53809aa66c9e1bf43ca65c5b86b66beda98adbf353314f6389188610178b6349bee9d4d494c01648a0b05bc382cf48e0a8f9f85f6f57d510d759a6a3239c1194224e872a5028abd6605e9fdff4e188027da2040dd9d8a8eabb84b80bcbac0df41a63e1", 0x8b}, {&(0x7f0000000180)}, {&(0x7f0000000300)="7229c49e9fdd78fc80d755c036b817097f29485240c4a4a226fd61d463a40568f751914efb132b1651a1bca2d4b9b6cab931fbb3b910fd169b2a2776dd462a5714c48253a9c25eb577d8e59ac7f7285cf5fc6ca1c2bd96886063c9d3349bbd9329d5eb5b27df04a07f41f1b717d3605d4af668a433d91acd117ccaebed68100728d900e469414a58", 0x88}, {&(0x7f00000003c0)="9610819759cc5ac239bca3040f4419ac76ff9d63ce0f533f9f84a8c938d5c8cb251ace622b13df9385707c4b3afe9f7c055604aadc92034bd5aeb637ca66e1951cd0f6f90506ecc60c2c6e212f12b10df61769ea45b2a8b12a7cf45cbf136784d82b7186887de062bea38c46c8fb7457c2a28ba5dece8e6925d194e3d6d4c8c6964b6686580cd9f0bae263145444e636eec1fdc140100396da6b85dba96ef192c6bf3da46071b5ea7549c3106275e88f0421d04f6301a29e2d9c093d4fc14cc5", 0xc0}, {&(0x7f0000000600)="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", 0x1000}], 0x5, &(0x7f00000004c0)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x4d}}, @ip_ttl={{0x10, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xfffffff8}}], 0x30}}, {{&(0x7f0000000500)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000540)="ddac2e80ca7178d19a590d17512321b06572f28752d9d1ab0277a15157032bf22f4ee43ee264fa80d7d67de11ff0aeb096d61e0cee80a07c", 0x38}, {&(0x7f0000001600)="e0722798d7df6693bbd474e6893e2e898ff7a5b9cea8182ddaf64a2e64a5b61343a3841ddabd9bce15fd13374bfd1734f4d28ca2044bf366ace6f374a817508de2892d869d0c5dfae70f6f3e7d120ef9d843e42afed5e62c2831be139e4ce293a99064a6c03ac6219e1af1c3beefbfc4ffd7e8d420b41a9417b6fc536dbbe86ba7311755d9dc789579b585dd57b7a24ba43ca374967f0f7c173a975dfe4efacfd09f72486a751169214281250ce24b2a5f8e80a0a182742f5a0cccda4285", 0xbe}, {&(0x7f00000016c0)="a88073f46fa61a22c810ac9b88e21b177b4422a6a8d8d20153ae29e4e43e760351756c02abe24a649881efd751f907aeae2bdfb92c35c692115e9dbd7e0f6a4e9133935a9a924cd1b1d7f3756230074018f4b0efd248b1025de91285e2f0b854733172aff58b27ea0cb29b69d898c7f011c7db52928cc65a49487ff11371bab56ff378e0c044de04c856a18c39fc18cf035dd4161727e6dd1480a2b529a752b6eab77e42b4c6262741b15b7c6690d01253a0a1b2f17d3c4974f3dcb84fffe7b755bc49b05b765b4ad89e30dd035056aa5dfb269f729dce", 0xd7}, {&(0x7f00000017c0)="eb13cc8870f6a9cd40b59be97c7a82b8ebde7bac5d00e36e86ae98af6517f3ee87ba58c69966e66a07a6ec179419a808135e554831eeef2d0e38c1c66d94c9d503ccdedebdafbaa37b46e0722970a7c5b977f680d5b6606b63104903df260b72a5b9381945f394117e545d7915695033316a2ae61bfd3c4526a1690d0b76a8bd26190ed2fc4078c42c8d9b00c87b73d6baaddfef070a7795e1d722e7127ac4dd5d", 0xa1}], 0x4, &(0x7f0000001880)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x99, [@empty, @broadcast, @private=0xa010100, @empty]}, @timestamp_addr={0x44, 0x4c, 0xc5, 0x1, 0xe, [{@loopback, 0xfffff001}, {@broadcast, 0xfffffff8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@loopback, 0x1}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0xaff0000}, {@multicast2, 0xfffffff2}, {@multicast2, 0x10001}, {@rand_addr=0x64010101, 0x7fffffff}]}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @private=0xa010101, @broadcast}}}, @ip_ttl={{0x10}}], 0x94}}, {{&(0x7f0000001940)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001ac0)=[{&(0x7f0000001980)="522e39fb555c89640705c30871c5517428a9d5d921b22521a8317f88046279d47434b200c88cd321362a76b7a4e4bec37daf3a96488430d4875558aefc2aea77849a6ad5656e011b2a9dba9eeb55f2587fe4988db96c4caafbb3b5af97e828984ad2f5e6406809dc075c01486632dee30e3a783ea003b002a578de35079f38f47fa78b07fc2ead40a46581ecd19b07aa7bce547bb282ccadcf0dd9ef99f969e63a72c30deb1519dc82dd9d524a8a3963adbbd881d983c5eb98deda7f444660363dacf9b059e24a995f68a548a4737b4c6b591580dbc2f0535f9412bdc89022a98e063c1f3eb104c273e56ffb7662d41a2d996be5321ccc07e846", 0xfa}, {&(0x7f0000000180)="9d6b4d5e2de478887fadf1c404b9f943df202cc792e4d5e4d1d60c1cf3e3", 0x1e}], 0x2, &(0x7f0000001b00)=[@ip_retopts={{0x30, 0x0, 0x7, {[@ssrr={0x89, 0x23, 0xc0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @local, @remote, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xd}}], 0x40}}], 0x4, 0x20008000)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x19, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000030a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0xcdc}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000001cc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x80, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x15}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_emit_ethernet(0x103e, &(0x7f0000002c00)={@random="dddbbcaac827", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x1008, 0x3a, 0xff, @remote, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x3, 0x5e, "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"}}}}}}, 0x0)
recvfrom$inet(r2, &(0x7f0000000040)=""/190, 0xbe, 0x0, 0x0, 0x0)

2m26.522911114s ago: executing program 2 (id=1478):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1}, 0x94)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000003340), 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000540)={<r6=>0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0xffff, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}]}, &(0x7f0000000240)=0xc)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r6, @in={{0x2, 0x4e22, @private=0xa010102}}}, &(0x7f0000000040)=0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000240)="7c773d39aeef000000006dcffe32d6e49f")
ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000500)="d7")
ioctl$sock_bt_hci(r7, 0x400448e7, &(0x7f0000000080))
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x11, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}, {0x0, 0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x2000000)

2m25.347588146s ago: executing program 2 (id=1480):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x0)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x4, {0x4, 0xfffffffd, 0x2, 0x9}})
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x4a)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = getpid()
socket$key(0xf, 0x3, 0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
getrlimit(0x5, &(0x7f0000000000))
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002900), r4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000003200)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100000000000000}}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40c4)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x1)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x1f, 0x1, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x2, 0x1, 0x1, 0x6, 0x2, 0xe1cb, 0x0, 0x1a449, 0x3, 0x1ff, 0x80000089, 0xfffffffd, 0x0, 0xffffffff, 0xfffffffc, 0x3, 0x3c, 0x8, 0x4, 0x1, 0xdffffffa]})

2m21.483008989s ago: executing program 34 (id=1453):
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
socket$phonet_pipe(0x23, 0x5, 0x2)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$rtc(0xffffff9c, &(0x7f0000000080), 0x4000, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
unshare(0x400)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0xe3b81, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000140)={0xffffffffffff7c04, 0x0, 0x8})
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}, 0x300}], 0x1, 0x20008000)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m20.850295883s ago: executing program 2 (id=1486):
r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040))
writev(r0, &(0x7f0000002900)=[{&(0x7f0000000640)="369f4f7adcc110d3059742c374844c7815ce344723bcea03099bc3265a9cfa674ca3f03f3e9ee935632c0a496aa04fa775eb3d39f7a4d9e0f8ddc9f2ed80338110f8751816a4100cee8890f4e19230ea0cbc061aac310501fc8f387c68362f4e34dea684", 0x64}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f00000026c0)="f7f0b6b35cf1bf5861e52913eaf2f04b4f972fadfe0148d4123e15ae71aed98b8cbcd67240db4c90e1c58b1af7400b5f2130e952f29cf796715357e7dd4feef07955ceb3e7f6d417103cedfaf581641ed4229e20f33f71040fd6391b9cb7f96b39a9b4a760f1acd1e30bdd602738945ebbfed36d5edca273d3", 0x79}, {&(0x7f0000002740)="b225ee01aa806352ea5f5e876f8fdda5160a3ff27709fb9688717bb707f1ff094cb27c496dcbfdd85caa76cf8990ebf55d704630447a20fbf1d286e8ef69e1dbc3826e1898128053173f620c735b8afe91e58ce4d648026b01ebd94f7eabfd3639c9444bcbb3c68e860fa8b3e53ec2940bf71c0c9415e51496bdf988c913bb5d26659e705fd0e0cc4e42bd62fec4fb2e556d582d6c8d1ab18226cda6ec7e8f40adf8f2227cb209a2a3979f20e946f1d0e5c4b4d280c8fff87340422eafdc58e6419474581e3ac06fbcce55e65440c436f00a49cb200c1dda5645", 0xda}, {&(0x7f0000002840)="d547f4ad91a66c9b37238daaf90e9176fb33e193f16e97eec1d91e97219b26bbd2428fd571c311e7bdd0acf7c83f1e556d246a21c2fc99adcb916b8ea9dc256763fec155fc31a05ffeae68121a0b133359b8c1ffc6193d00eaf443bedb8b9a9e00eed20731e67e19c3f8fc66f86657c18ff985b639cb0ae040deaa21dcb05232d21f237f956d33540caffea2753d2e76857196", 0x93}], 0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x95, 0x95, 0xc, [@int={0x5, 0x0, 0x0, 0x1, 0x0, 0x21, 0x0, 0xd, 0x1}, @datasec={0x10, 0x9, 0x0, 0xf, 0x1, [{0x1, 0x4}, {0x5, 0x8, 0x101}, {0x1, 0x2, 0x9}, {0x3, 0x4, 0x7ff}, {0x2, 0x9, 0x7fff}, {0x2, 0x0, 0x7}, {0x4, 0xd8c, 0x8}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x8}], '<'}, @func={0x8, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x30, 0x2e, 0x0, 0x0, 0x0, 0x61, 0x61, 0x61, 0x61, 0x30]}}, &(0x7f0000000100)=""/79, 0xbc, 0x4f, 0x1, 0x3, 0x10000}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000004000000000000000900000095000000000000000fba0200920e000018001000050000000000000000000000950000000000000087d7f7b2cfea48519592953d307c57fccdfe6e6ed43b991e55dc31470cf52c13f4fdcdb8a3629943cbff1f23ecb73d9cd964241693ca31b2b423a4c593427ece8f03614cdaa942a095187a0997d3f80e8568dbef19c757d0155a35081dba2a56123721412710c6acd055b82f0f158a04fc765940515017985bed5c487dce23b874062f1450b2c337e177fe78b48f1822dbcf338f1b273f2d660852aea1fff397602c314b"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc4, &(0x7f00000001c0)=""/196, 0x41100, 0x2, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0xb, 0x4, 0x1ff}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000440)=[{0x4, 0x3, 0x10, 0x6}, {0x1, 0x4, 0x1, 0xc}, {0x3, 0x4, 0x8, 0xa}], 0x10, 0x7ff}, 0x94)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
socket$inet6(0xa, 0xa, 0x3)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$read(0xb, r3, &(0x7f0000000080), 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = getpgid(0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
io_setup(0x5, &(0x7f0000000240)=<r6=>0x0)
r7 = inotify_init()
io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}])
inotify_add_watch(r7, &(0x7f0000000340)='.\x00', 0xa50003d1)
readv(r7, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x0, 0x0)
r8 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r11 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r8, &(0x7f0000000000)={0xa0000001})

2m16.314346584s ago: executing program 2 (id=1494):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
r3 = socket(0x10, 0x3, 0x0)
close(r2)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRESHEX], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x421, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x10000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=@ipv6_getaddrlabel={0x4c, 0x4a, 0x10, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x40, 0x0, r5, 0x5}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1d}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x810)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8512}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r3)
sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x9c, r8, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5831}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000840}, 0x40000)
syz_open_dev$video4linux(0x0, 0x5d7, 0x0)
r9 = socket(0x200000000000011, 0x2, 0xd)
ioctl$sock_inet_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000040)={'bridge_slave_1\x00', {0x2, 0x9, @broadcast}})
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)

2m14.76232958s ago: executing program 2 (id=1498):
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x15)
writev(r4, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f301f11e35f22", 0x21}], 0x2)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xffffffffffffff2b)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f", @ANYBLOB="96f0ba0c", @ANYRES32=r5], 0x74}}, 0x0)
bind$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xd}}, 0x24)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000027000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x0, 0xe, 0x0, &(0x7f00000000c0)="ff07000000000000ab5becdc7da9", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000300))
syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x28b}, &(0x7f0000000140), &(0x7f0000000200))

1m59.543960025s ago: executing program 35 (id=1498):
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x15)
writev(r4, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f301f11e35f22", 0x21}], 0x2)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xffffffffffffff2b)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f", @ANYBLOB="96f0ba0c", @ANYRES32=r5], 0x74}}, 0x0)
bind$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xd}}, 0x24)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000027000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x0, 0xe, 0x0, &(0x7f00000000c0)="ff07000000000000ab5becdc7da9", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000300))
syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x28b}, &(0x7f0000000140), &(0x7f0000000200))

1m46.769662272s ago: executing program 0 (id=1516):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0xba, &(0x7f0000000100)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x70, 0x0, [{0x5, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0x9, "6580a5e97612fe"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0)

1m46.725510418s ago: executing program 0 (id=1517):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
io_setup(0x7ff, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003d68c5ee17688a2003208030300c7ccd43f3bb0d1ec973a40895aea2922ecff3f0000000300000a0000000098fc5ad9485b0000880000d6a6f4605fa9ef4609ad392e72c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79", 0x8d)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
inotify_init1(0x80000)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0xfffffffe}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
sendmmsg$inet(r2, &(0x7f0000001b40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f00000005c0)="ae14", 0x2}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)="4f022231cdff7e2f7ce4c0fd08e5d198868e1eaf7ed0a2ffd17cb33a1871e1d3840e8293c38c25df53809aa66c9e1bf43ca65c5b86b66beda98adbf353314f6389188610178b6349bee9d4d494c01648a0b05bc382cf48e0a8f9f85f6f57d510d759a6a3239c1194224e872a5028abd6605e9fdff4e188027da2040dd9d8a8eabb84b80bcbac0df41a63e1", 0x8b}, {&(0x7f0000000180)}, {&(0x7f0000000300)="7229c49e9fdd78fc80d755c036b817097f29485240c4a4a226fd61d463a40568f751914efb132b1651a1bca2d4b9b6cab931fbb3b910fd169b2a2776dd462a5714c48253a9c25eb577d8e59ac7f7285cf5fc6ca1c2bd96886063c9d3349bbd9329d5eb5b27df04a07f41f1b717d3605d4af668a433d91acd117ccaebed68100728d900e469414a58", 0x88}, {&(0x7f00000003c0)="9610819759cc5ac239bca3040f4419ac76ff9d63ce0f533f9f84a8c938d5c8cb251ace622b13df9385707c4b3afe9f7c055604aadc92034bd5aeb637ca66e1951cd0f6f90506ecc60c2c6e212f12b10df61769ea45b2a8b12a7cf45cbf136784d82b7186887de062bea38c46c8fb7457c2a28ba5dece8e6925d194e3d6d4c8c6964b6686580cd9f0bae263145444e636eec1fdc140100396da6b85dba96ef192c6bf3da46071b5ea7549c3106275e88f0421d04f6301a29e2d9c093d4fc14cc5", 0xc0}, {&(0x7f0000000600)="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", 0x1000}], 0x5, &(0x7f00000004c0)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x4d}}, @ip_ttl={{0x10, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xfffffff8}}], 0x30}}, {{&(0x7f0000000500)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000540)="ddac2e80ca7178d19a590d17512321b06572f28752d9d1ab0277a15157032bf22f4ee43ee264fa80d7d67de11ff0aeb096d61e0cee80a07c", 0x38}, {&(0x7f0000001600)="e0722798d7df6693bbd474e6893e2e898ff7a5b9cea8182ddaf64a2e64a5b61343a3841ddabd9bce15fd13374bfd1734f4d28ca2044bf366ace6f374a817508de2892d869d0c5dfae70f6f3e7d120ef9d843e42afed5e62c2831be139e4ce293a99064a6c03ac6219e1af1c3beefbfc4ffd7e8d420b41a9417b6fc536dbbe86ba7311755d9dc789579b585dd57b7a24ba43ca374967f0f7c173a975dfe4efacfd09f72486a751169214281250ce24b2a5f8e80a0a182742f5a0cccda4285", 0xbe}, {&(0x7f00000016c0)="a88073f46fa61a22c810ac9b88e21b177b4422a6a8d8d20153ae29e4e43e760351756c02abe24a649881efd751f907aeae2bdfb92c35c692115e9dbd7e0f6a4e9133935a9a924cd1b1d7f3756230074018f4b0efd248b1025de91285e2f0b854733172aff58b27ea0cb29b69d898c7f011c7db52928cc65a49487ff11371bab56ff378e0c044de04c856a18c39fc18cf035dd4161727e6dd1480a2b529a752b6eab77e42b4c6262741b15b7c6690d01253a0a1b2f17d3c4974f3dcb84fffe7b755bc49b05b765b4ad89e30dd035056aa5dfb269f729dce", 0xd7}, {&(0x7f00000017c0)="eb13cc8870f6a9cd40b59be97c7a82b8ebde7bac5d00e36e86ae98af6517f3ee87ba58c69966e66a07a6ec179419a808135e554831eeef2d0e38c1c66d94c9d503ccdedebdafbaa37b46e0722970a7c5b977f680d5b6606b63104903df260b72a5b9381945f394117e545d7915695033316a2ae61bfd3c4526a1690d0b76a8bd26190ed2fc4078c42c8d9b00c87b73d6baaddfef070a7795e1d722e7127ac4dd5d", 0xa1}], 0x4, &(0x7f0000001880)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x99, [@empty, @broadcast, @private=0xa010100, @empty]}, @timestamp_addr={0x44, 0x4c, 0xc5, 0x1, 0xe, [{@loopback, 0xfffff001}, {@broadcast, 0xfffffff8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@loopback, 0x1}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0xaff0000}, {@multicast2, 0xfffffff2}, {@multicast2, 0x10001}, {@rand_addr=0x64010101, 0x7fffffff}]}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @private=0xa010101, @broadcast}}}, @ip_ttl={{0x10}}], 0x94}}, {{&(0x7f0000001940)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001ac0)=[{&(0x7f0000001980)="522e39fb555c89640705c30871c5517428a9d5d921b22521a8317f88046279d47434b200c88cd321362a76b7a4e4bec37daf3a96488430d4875558aefc2aea77849a6ad5656e011b2a9dba9eeb55f2587fe4988db96c4caafbb3b5af97e828984ad2f5e6406809dc075c01486632dee30e3a783ea003b002a578de35079f38f47fa78b07fc2ead40a46581ecd19b07aa7bce547bb282ccadcf0dd9ef99f969e63a72c30deb1519dc82dd9d524a8a3963adbbd881d983c5eb98deda7f444660363dacf9b059e24a995f68a548a4737b4c6b591580dbc2f0535f9412bdc89022a98e063c1f3eb104c273e56ffb7662d41a2d996be5321ccc07e846", 0xfa}, {&(0x7f0000000180)="9d6b4d5e2de478887fadf1c404b9f943df202cc792e4d5e4d1d60c1cf3e3", 0x1e}], 0x2, &(0x7f0000001b00)=[@ip_retopts={{0x30, 0x0, 0x7, {[@ssrr={0x89, 0x23, 0xc0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @local, @remote, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xd}}], 0x40}}], 0x4, 0x20008000)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x19, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000030a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0xcdc}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000001cc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x80, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x15}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_emit_ethernet(0x103e, &(0x7f0000002c00)={@random="dddbbcaac827", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x1008, 0x3a, 0xff, @remote, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x3, 0x5e, "21175f1260dcd8a67f3f5ca67663c4fd908b2cacba6984185c22f47e6483b6bed8204b3465e29c64df8151ca90602a514a546bb5727721d057d27260775b3c9d9c94694989fbdabdd7f1f28070627cde62c2769445369d04b91a09658bdfd1ea616eb2be3f7f6b1c1812ee2e10a7555e0a542f8f060a517d4330f75fe1e50c5e74e1e301dbbea593fb0094a7809ef67f0fa3732ba44f0bbc2bbf1171cd29d707d3cfbca666f4140e191aca389c2146a8bc779f17d08cf038d9f3f77799539cda32a0d746906011b32bd355fb35a7d1f3e6aea5ec8676713634fd9abc1794b5bb3c8a9c29715042b14ff15dc8efdf3377078486f06b10ed45adca64cb24667c8102ad187a8e17f27b644b23819b9409e0d5bfd2fdfeb6cf312664d8e960e3b06ff84440db43a2921c622f18dabfcc8d92c63421939a98c080731afa8f6b94102cf6c232a1bd12b0164fff5d795ca5097d420115561a25038438a6456e32f32e29ae709c652e3e9f833f2cdd1750a0f9ad6d3e0b0409c9b8cecad4ea7008936c41f7e82fafd34c6b87bbf02aa7b9c32fa5bedc872ca64f3af1ff54161483428e49dea3b630f33571b44a32fc31b07e2d9a7ab83eb81dc9c92e3bb385b06bb9ed4d91024f19366ef73d9607d770ff19018e9f3659d08a70813e7bbeb72be0077ede0fda92e5a1543ca619e45509469e5ececb6b7674780e19a1f0cbcdfce04d85afa0510d51f141e39c3639b36028db7f762c8ecf4f0847f09696652b6ec92a73b3c2b9d4821dc0c222f50959b97af976088c9ab12ea4207e4fc72a566b3a159ee6a1fffc4dc21cc8dbaaa8f6dcdb170f69ecc2541fa9c0f260cffc34848121502a95a1147633f3cb82c4954cbbd1f7f0bfb5da1c56cfb257fca633aa429a075fd1ceb97371e6a62e98501b9e7bd032e4b795639ea226f51dc35a2d51a103f661cc3a27261028800c12e3f2d587770021f10b5438fb6691392acf5498871181698f082c777d3888e6e1412ae19557c118f7a2c092552388ec3a6e8d66b8550c7875708338358f2f037c3e106537c9d6868d8282053734ac1168652b5523321da5329d8812dd698c1d33bbbb04691e26f541264069dedee179bd902eb14db4c5b5b11603d45fb01afb1c69ec6061159a1e5a6167a65af98ef7f72090c6704e30b4b29229c4237fe7d2cd4124f3464b6d8ca66b28f0675db06275a60e731b4358991117043de2379b3b57abf27dcf198b0226ea679f132d0224f1e69c7eac9f8266e904f5b660f962cfb92cbf0e690f28992506ef4d0d09a727a1b24aab090fe15eda79c8055cb4d60b6dc2b7a6ad470c74a4cd507e41352b0545b82860087aa52acf61a8ba663a06157956ad6be9270a2fd7ce14318047f056b0b52c9aea29c4020fe0d17065a28f0fa72a9835207c85b23652f7afdf84c92103d15524e97a581f653138b2f86ca5615b9b615d05a260b720eadc402fa633bb59e6416b6f230c7386447659a04cd51e10c4679eb066b55455e870d45ecf315877da2117406993792d34f44c48af353411db76990c0fadfe7f1e099e3c329988c3990e21d393d11c2df7787ae1a8414d99af596f9cf6c2cec5a0e65445292832d2bcd76046fa8c3ec4dfbee9bcd4ef251afa4056f9a6158af284b6245b8077b196e4832b487ead0e3b25023d0f2ad282d149a92786211e4b4a9ccde8ae1ca737db69f73b27cf97370945e2c6b13400aec9da05e432ff6b65dfaa7efe8a199103bbac01f006f087dbfd90418618267589a7cc54a76b1c0d7b98737f73975bbf5269d47b393817de51ec5e7807d85f91db04f5a6dc9be99c492ab96934198aa6d030af33e86e870befc04d625a78b88c14fc83c8d7c3303b031547d6cc7d28380f8c9d2b20f4bddf2bc4d821a5638ed3ad97874058e116f021fbb0392b81f4c09e9a3d3099cc2ab4df9c0731e607c94fcc447e9d773ff98913436d615658c222feddc760a62362ac74e4c87446055f25449cbf1d3976e118e7a02b8618e34bcbe745aac1b0a5295ac81d1c48d9a3425345f2bad7c976b60b547963156a9bc08c4728e0bdc46adeba2f634fd9af1f4a58fee3cde6c754b3d1bd2170e5f5f3b358f1946659b183b466556ad561def7ece84b2f7abb6bff2e89ace2eddd4f8fbf4d173cf1775eb64c7ae8f46079db286e662c15217b2981448b821e3cdcb93c0465d6942d55af5741146cabd374d06e209f1f27de1b1c1078b6e3bdd47ee2a1690f3dca291db20087324be4e7b73c6e0c38e03a25d24c9d796f157dbb88002a2dafd67eecac29d3393555523463329827561c39fc9a363b2ce1d5ca7948618d3b84a8b385e90d9b4c6d1058b9c701a32de132c24566110dd9b6015c559dd31536b89d1fbdd65ea20a5a461b9478cec81880ddc3bb44cdc05228dae727ba850b3ccb16de00dcab5d48d3384bf2ddf613dc0d25f6824f5aba2cad80d049a41fd9477d2bbbbb2e2dc2e1f1969ddf5aa1c9e3d973ebd5bd5258993f59d920f9bd5f6f9d7e2fb2a503eaad3dc4d1e42bed7961411f61e518fe7fd498c584c24927f8cfa542950c5da3f9187c94c800038eee3cb22fb1991188afc2a7f3162ad1fee900235acc29ce210d9754b473ff5a960917f3b6091fd088cf0d03cabe645a4e972e5fa2b5b65f0b637bca5c74f6c36060bc09b3cc25c948136f83600fbc687dbc3ff787cc6ce409bd471ba1222cd3c1191950812c7b5cac3dd64f83572e854429dc3d6ed0ee655aceec047bda7efb0062e8e44f245f16b775922c56f755c0f9c388b61a1af45510f77532c5e2180dc24e5b080f957c781ca4e65b16a5ac4936b935daebed572972bc67a191484590a97fff8c19ead8f4a40edac892c124f83ded95cb1e1dac86627cb2625c7522f99cffb2b48f39077c1cbaf501b728e64fc6ad05a96aff1faa83dd3a04fb155e71687251cd890f7cd4b156cbd69d04adf6f642472e47950b4b953c151811c97808c9ead14b53d58794cd4f974437a1504eea55562e30a8817d86d54af5f82b373f83bdfe5a74c330e0e050eefde99951b0ff64c5929de122d4208a28db2f34838cd69d5c5e1f65e789f581732ad976a00f742b28561aaa492e5d346f21346a0f6bf45162bc7893a33a02d33e028237627e252d11bf633cd189eaf1abe77e8a5b8859201aa5f016b42a913cd94afd3e2a799afdd304bb957e89136812f6b3d06caeed639a679d305368364b7368fde7e518a5e0389cabd7c13697af6921e4263af3c0556d728eda617a46b5a58d49832fa705d9cbc9929015b2d9648d2d4ca906dd62a2bb2ba0ec4e7964b08abad445ba7e4bb0ef7c88453ea996934761747d5e4fc0da1bba191c525da32f7b6ef132c235683888507b067b8b7e7b8c5b161ccc3ec74c97759015c080fd5b6d0f7aba745f38526340f08020d3d9f9cc82c5e99cdf9e3c16f44436f3aa84e3311cf259058275d7c1b72b483408978dd6289ed8d137188c1edf603a7bd2fd6a373ae098c55e0322b004712ff3ae9d7d9e9a7779fac2dfe136c58c8906199d5a750cf63af3d8459818a1715dfbbde7d8587b6c2a11ec93b44d553037f22bc7e9b8954ee255b1d8c9a109388b95ae372350ee437ce2e67a8ec488c10bee79ab2adbc0193ae733b7480c888c82307272bbe76a6f6191f1f661e2da5e0f083157c0c0a4d3f9f33c96987ca618f715c136cc511c0319d563fd4a3c09676139e3b7705cd92298759b3c55a53ad7c6a2b5da5691d8e4132c5f341aed188982829745747c4384fc6b92eccdf50175afc0445d375f6825d92cddd28920ec506d54d229a4cf6a8772e09322e56a5e8a4f8288e799fb43e56a62cf6c4622158cb2dd02582ed10dc9ef26bb8d6ebb4e87e2b701a84760306618d8481b017c24c8a20fd3fe8b7b8733c82afa27a474d4a6ae5d26a3c536a4407ac7ca76a1f7370758e7f13f5b0331f20d398617bc0b68ff7a654f60370becff5d4d4a023a86199ddbc598827526d325a5fb07148c4e28c49295d86a56125a4a74c24054d1edfc9f41acc1af4b05e4a89adb2ceec9659e70dd991c9969b6737440a8e0a030001ad66c604c0da9354e03e9327a4436e6e7e12897d192219240005d8c35f1aac834153941e86a80e4da5c13bb3138ffe380a89f345cfcd2a1c9ed8ad9ce35a7f895eec42925f4e8f234addf57778dc205a9318e16ea65710544e7e6c1a06e3da0847addad25b76208ed75a7a0ca08f5969e1c083e5b7de58ae729962dee0724e44b644862b45d1557dbeadb78119b7e426da5e875e9cccb0e4171cfa8c8373d99b90a9959e109d5e128fe45fc3ca13858227f3b617e7e1683a10ac3445112359b6ca27a4d62ba9871eb85c5bc506cb33ff7489089631620109d4c2068dae94a51dab1cbac3233df6209943d4c07d86c725f599aff949a07c7720fba866fe13c1f95d56209600651fe0555caf180aa413a38a56c1a98705e9878cbe5cfad0908bea8f3d0a143fb6de1ab7ae890437efe3254b645acb3a451ea533cee05b1931bda428fb1d08b1cbc7675c2e1c77066b24e118d04865ff14504f54e824355c1c9cc6c0a6b71ce5bc14b28dc5c82fef61378774b1c92887c483bec00a107d5e5f50d20209e9f83d0f9280ee4952919bbfd265afb248cbfecbc7e7cb417b84a9abb6b92dafabb9f8e9b3596b35163caaea19c24088d22407b0519c69360156983c44de5d55c3eb9ac50234d90317ed1c0cd84224e597cf5aa1ac8d8035e0dd752e9d8079a586388ee91a84366761a8f7f5e1ef8890ff150f86984a2835c08c3a8cfa47ab8418c3ef09d39b97f48419d2beda41e103bb26997113efe63a314f4bb305bd7136b049d0d9731bd1dc6ede4395731833a88a90c9a0dc72c1f3d28e5146cfbd19663065bffa93693ee171bf47bf8b94b1f29cd6af5d330ebb56bc267a166cc257eee519309269408df80fd878ba8b1ae95a23d04f0ee024c85689274a8be488db18c05fc0860239700bcd33fd5c975b6bf54fb9c5672c21699be635ec1b493141f244980a7def12c5c0b8e460da0649c21f1e5211193df1c7c75f2d1084f261601b6b2daa383f28f6e332b1e5e1a6269ed13b8bb9e37384de4be1f86f6a519e86ab00ed90b01f5b3b37c6fa95695567df010412f53fdd219130f3f51cd18172992e2f1fb26da9282e87f98a9fb01f224b619bf0b54733f447cc49a54d3c65946995d9e6c0209fcc3c31ff480a8fa28a4679dce1abd1e357ede86a0d72e8b31e24ee7bbdcecfd165c6a6c44015187cb556c95f8a063c61b454e7486fc309a8e8fad2889d3bcf3d986b5a7eb6ca9db9f71919986c1f2a19e5feeaf2d06904950a47e36e63871d1997d3416ac1072da13fed25d40a94ef2b45f85056e665baf0b056790e01859cde785f8602ec9100fc52119a5843ac5acd43fae9f615010d90d6f0893c041e35cbcbc78ff74e9e580c67133933e2f22de70f330750810136b3b82088d9689b5c7461ce20dd7da841c00140df670fa96897daaca6cc60964c1283178abafcfcb8893866b77daeef3693c1fb6b4236c013fa125e3fee81c6d49e6c781f4d36c5b78c1cf75fb965a2257e9a7a016524887cae10021d1f747698001c2fdca25bdac65629bf4f8151f354d83baf24037b44570a09ab87230edd1f5018496f9d3e83e9c7f9b8e8f12b2e9d4b99fca609220e5fbf23c29ca9ca69c05b2b2dd96369458235fbc25dc93675dc1cd8b2d2742804639feb9ba5dfbc07c6dacaa62d8b93f538586a277a1faea5f14fa2b2e35fbd5ec89b89df0ba"}}}}}}, 0x0)
recvfrom$inet(r2, &(0x7f0000000040)=""/190, 0xbe, 0x0, 0x0, 0x0)

1m46.661730414s ago: executing program 6 (id=1519):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xc8601, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", <r2=>0xffffffffffffffff})
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x2, 0x0, 0xfe)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100), 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_usb_connect(0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r2, <r5=>0xffffffffffffffff})
ppoll(&(0x7f0000000100)=[{r5, 0x2}, {r1, 0x894}, {r2, 0x8042}], 0x3, 0x0, 0x0, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtaction={0x58, 0x30, 0x100, 0x0, 0x0, {0x9}, [{0x44, 0x1, [@m_sample={0x40, 0x1, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffffffa}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}]}, {0x4}, {0xc}, {0xc, 0x4, {0x2}}}}]}]}, 0x58}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="0d4201f3951384e3", 0x8}], 0x1}}], 0x1, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
sendfile(r8, r8, 0x0, 0x40000f63c)

1m46.119175508s ago: executing program 0 (id=1520):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x40, 0x0, 0x0, 0x8000000000000b49, 0x9, 0x3, 0x1, 0xffffffff}, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
r3 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x40000002})
write$P9_RSTATu(r2, &(0x7f0000000580)=ANY=[], 0x21e)
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x4004510d, &(0x7f0000000000))
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r4, &(0x7f0000002c00), 0x0, 0x40000000, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0)
timer_create(0x2, 0x0, 0x0)
sendfile(r6, r5, 0x0, 0x21c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = socket$inet6(0xa, 0x80002, 0xa)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000010401000000000000000000070000020500010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8045}, 0x40000)

1m32.853358025s ago: executing program 0 (id=1523):
r0 = syz_io_uring_setup(0x34b7, 0x0, 0x0, &(0x7f0000000500))
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0xf0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd223}, 0x94)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0)
r4 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x88081)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xf7}, 'port1\x00', 0x3ab, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x3fc, 0x0, 0x7, 0xfd})
openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
shutdown(r7, 0x1)

1m32.797213885s ago: executing program 6 (id=1524):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003f00)='ns/net\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f0000000040), 0x1002, 0x2)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0xfffffffe}]}})
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019540)=""/102392, 0x18ff8)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4040)
r2 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0x2cc96, 0x400, 0x2, 0x40200333}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x6000, @fd_index=0x2, 0x9, 0x0, 0x0, 0x10, 0x1})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a6a00040900010073797a310000000008000540000000020900020073797a320000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r6, &(0x7f0000000040)=0x1f00, 0x12)
syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002001190"], 0x0)
ioctl$CDROMSTART(r6, 0x5308)

1m31.779955118s ago: executing program 0 (id=1527):
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18)
sendmmsg$sock(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4040800}, 0x800)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000002c0)={0x0, @dev, @remote}, &(0x7f0000000300)=0xc)
socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
r4 = getpid()
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0)
syz_pidfd_open(r4, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_SEQ_NRSYNTHS(r6, 0x40045109, &(0x7f0000000080))
bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = inotify_init1(0x0)
fcntl$getownex(r7, 0x10, &(0x7f0000000140))
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r8, &(0x7f0000000040), 0x8)
socket$pppoe(0x18, 0x1, 0x0)

1m31.686788977s ago: executing program 6 (id=1528):
r0 = syz_io_uring_setup(0x34b7, 0x0, 0x0, &(0x7f0000000500))
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0xf0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd223}, 0x94)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0)
r4 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x88081)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xf7}, 'port1\x00', 0x3ab, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x3fc, 0x0, 0x7, 0xfd})
openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
shutdown(r7, 0x1)

1m30.525438574s ago: executing program 0 (id=1529):
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000540)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0xfffffffe}]}})
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x2, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0)
read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
writev(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = getegid()
fchown(r0, 0x0, r4)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r6=>0x0})
r7 = socket(0x10, 0x80002, 0x0)
connect$inet6(r7, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000891)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xff2e)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100))
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x9}}}, 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)

1m30.491238012s ago: executing program 6 (id=1530):
r0 = syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0), &(0x7f0000000500))
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0xf0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd223}, 0x94)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0)
r4 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x88081)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xf7}, 'port1\x00', 0x3ab, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x3fc, 0x0, 0x7, 0xfd})
openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
shutdown(r7, 0x1)

1m28.715751439s ago: executing program 6 (id=1532):
r0 = syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0), &(0x7f0000000500))
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0xf0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0)
r4 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x88081)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xf7}, 'port1\x00', 0x3ab, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x3fc, 0x0, 0x7, 0xfd})
openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
shutdown(r7, 0x1)

1m25.736442132s ago: executing program 6 (id=1535):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f00000003c0)={0x268, 0x0, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [{{0x254, 0x1, {{0x3, 0x1000}, 0xb, 0x9, 0x6, 0xd17, 0x16, 'syz1\x00', "c2d339616fb4720b95e6130f6b004de717a6c81c2ad79eb41e15d7eb27b859e2", "34d57a1514b58851465fce0a4b42026806ad5c8d8d321e2d3872976b35541f48", [{0xfff, 0x1ff, {0x1, 0x1}}, {0xc31, 0x100, {0x2, 0x9}}, {0x2, 0x1, {0x2, 0x6}}, {0xb, 0x7, {0x1, 0x6}}, {0x2, 0xd, {0x0, 0x5}}, {0x9, 0xbe, {0x3}}, {0xf001, 0x9, {0x3, 0x5}}, {0xffff, 0x200, {0x1, 0xffffffff}}, {0x3, 0x2, {0x1, 0xfffff001}}, {0x4, 0x3ff, {0x2}}, {0x7, 0xf, {0x1, 0x7}}, {0x8, 0x5, {0x1, 0xc2}}, {0xffff, 0x400, {0x3, 0x8001}}, {0x8, 0x7ff, {0x0, 0xa9}}, {0xd8, 0x7, {0x2}}, {0x1, 0x5, {0x2, 0x2}}, {0x4, 0x2ebb, {0x2, 0x2}}, {0x6, 0x3, {0x2, 0x7}}, {0x5, 0x0, {0x3, 0x9}}, {0xa09, 0xce7, {0x2, 0x7fffffff}}, {0x8000, 0x7ca6, {0x1, 0x9}}, {0x9, 0x80, {0x0, 0xa28}}, {0x2, 0x8000, {0x1, 0x1}}, {0x3, 0xfff5, {0x2, 0x1}}, {0x401, 0x2d0b, {0x1, 0xffff}}, {0x2a, 0x6, {0x1, 0xffffffff}}, {0x4aa, 0x8001, {0x2, 0xffffffff}}, {0xe, 0x8}, {0x1574, 0x5e2f, {0x0, 0x9b67}}, {0x0, 0x678, {0x2, 0xfffffff3}}, {0x7, 0xce9, {0x3, 0x3}}, {0x1ff, 0x2, {0x3, 0x3}}, {0xf18b, 0x5, {0x3, 0x1}}, {0x2, 0xe, {0x3, 0x9}}, {0x6c, 0x5, {0x1, 0xffffffff}}, {0x9, 0x3, {0x0, 0x9}}, {0x2, 0x8001, {0x2, 0x8}}, {0x6, 0x5, {0x3, 0x1}}, {0x80, 0x4, {0x2, 0x27}}, {0x7, 0x0, {0x1, 0x9}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x2081}, 0x18014)
setresgid(0xee01, 0x0, 0xee01)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8)
fsopen(&(0x7f00000000c0)='hfs\x00', 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x1e, 0xa01, 0x2, 0x0, {0xa}}, 0x14}}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
inotify_init1(0x80000)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=<r4=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setrlimit(0x5, &(0x7f0000000240)={0x6, 0xffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000003f9f0000000000008000000085000000fd0000001801f1ff1f756c2500000000002020207b1a77a8faf8d68e9492a9d643f38cb254bfeb29ef5b4765f2a457b4b69f38dd049b9ddacd28d328b4e269cdb801001f5eeb5ae65fb092e9c93a2d306d4805948c4d9dea0059b75c57135c99d1d168d906b1fed0bd68d95a49928efc8cf421dae8b67d2dc5d0c7fb7d6becdc506360c817", @ANYRES32=r4, @ANYRES16=r4], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r5}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0x7}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)

1m14.880063862s ago: executing program 36 (id=1529):
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000540)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0xfffffffe}]}})
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x2, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0)
read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
writev(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = getegid()
fchown(r0, 0x0, r4)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r6=>0x0})
r7 = socket(0x10, 0x80002, 0x0)
connect$inet6(r7, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000891)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xff2e)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100))
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x9}}}, 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)

1m10.38465149s ago: executing program 37 (id=1535):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f00000003c0)={0x268, 0x0, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [{{0x254, 0x1, {{0x3, 0x1000}, 0xb, 0x9, 0x6, 0xd17, 0x16, 'syz1\x00', "c2d339616fb4720b95e6130f6b004de717a6c81c2ad79eb41e15d7eb27b859e2", "34d57a1514b58851465fce0a4b42026806ad5c8d8d321e2d3872976b35541f48", [{0xfff, 0x1ff, {0x1, 0x1}}, {0xc31, 0x100, {0x2, 0x9}}, {0x2, 0x1, {0x2, 0x6}}, {0xb, 0x7, {0x1, 0x6}}, {0x2, 0xd, {0x0, 0x5}}, {0x9, 0xbe, {0x3}}, {0xf001, 0x9, {0x3, 0x5}}, {0xffff, 0x200, {0x1, 0xffffffff}}, {0x3, 0x2, {0x1, 0xfffff001}}, {0x4, 0x3ff, {0x2}}, {0x7, 0xf, {0x1, 0x7}}, {0x8, 0x5, {0x1, 0xc2}}, {0xffff, 0x400, {0x3, 0x8001}}, {0x8, 0x7ff, {0x0, 0xa9}}, {0xd8, 0x7, {0x2}}, {0x1, 0x5, {0x2, 0x2}}, {0x4, 0x2ebb, {0x2, 0x2}}, {0x6, 0x3, {0x2, 0x7}}, {0x5, 0x0, {0x3, 0x9}}, {0xa09, 0xce7, {0x2, 0x7fffffff}}, {0x8000, 0x7ca6, {0x1, 0x9}}, {0x9, 0x80, {0x0, 0xa28}}, {0x2, 0x8000, {0x1, 0x1}}, {0x3, 0xfff5, {0x2, 0x1}}, {0x401, 0x2d0b, {0x1, 0xffff}}, {0x2a, 0x6, {0x1, 0xffffffff}}, {0x4aa, 0x8001, {0x2, 0xffffffff}}, {0xe, 0x8}, {0x1574, 0x5e2f, {0x0, 0x9b67}}, {0x0, 0x678, {0x2, 0xfffffff3}}, {0x7, 0xce9, {0x3, 0x3}}, {0x1ff, 0x2, {0x3, 0x3}}, {0xf18b, 0x5, {0x3, 0x1}}, {0x2, 0xe, {0x3, 0x9}}, {0x6c, 0x5, {0x1, 0xffffffff}}, {0x9, 0x3, {0x0, 0x9}}, {0x2, 0x8001, {0x2, 0x8}}, {0x6, 0x5, {0x3, 0x1}}, {0x80, 0x4, {0x2, 0x27}}, {0x7, 0x0, {0x1, 0x9}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x2081}, 0x18014)
setresgid(0xee01, 0x0, 0xee01)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8)
fsopen(&(0x7f00000000c0)='hfs\x00', 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x1e, 0xa01, 0x2, 0x0, {0xa}}, 0x14}}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
inotify_init1(0x80000)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=<r4=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setrlimit(0x5, &(0x7f0000000240)={0x6, 0xffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000003f9f0000000000008000000085000000fd0000001801f1ff1f756c2500000000002020207b1a77a8faf8d68e9492a9d643f38cb254bfeb29ef5b4765f2a457b4b69f38dd049b9ddacd28d328b4e269cdb801001f5eeb5ae65fb092e9c93a2d306d4805948c4d9dea0059b75c57135c99d1d168d906b1fed0bd68d95a49928efc8cf421dae8b67d2dc5d0c7fb7d6becdc506360c817", @ANYRES32=r4, @ANYRES16=r4], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r5}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0x7}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)

1m0.495196925s ago: executing program 8 (id=1563):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[<r3=>0x0], &(0x7f0000000280), 0x1, r2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x601, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000200), &(0x7f0000000300)=[r3], &(0x7f0000000580)})
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r5=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000040)={0x0, &(0x7f0000000040), 0x0, r6, 0xcccccccc})

1m0.427486507s ago: executing program 8 (id=1564):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'veth0_to_batadv\x00', 0x10})
r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
syz_open_dev$sndpcmp(&(0x7f0000000080), 0x6, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x4000)
syz_usb_disconnect(r1)
socket$kcm(0x2, 0xa, 0x2)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='io\x00')
preadv(r3, &(0x7f0000000680)=[{&(0x7f0000000080)=""/96, 0x60}], 0x1, 0x0, 0x0)
sendmsg$AUDIT_SET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2040008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x3e9, 0x10, 0x70bd26, 0x25dfdbfd, {0x20, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff, 0xffe00000, 0x6, 0x8, 0x0, 0xf264, 0x1}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x1081}, 0x40000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket(0x15, 0x5, 0x0)
syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2)
syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1})
r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009})
pread64(r8, 0x0, 0x0, 0x378e)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000000080)='./file0\x00')
r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000040)={0x100f8, 0x0, 0x601})

51.175962278s ago: executing program 8 (id=1570):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x2c, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
r4 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0)
recvmmsg(r7, 0x0, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r3, 0x0, 0x0, 0x0, 0x80800})
io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0)
r8 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r8, 0x2, &(0x7f0000000040)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x5885, 0x0, 0x1, 0xfffffffe}, &(0x7f0000000340), &(0x7f0000000280))

39.985796038s ago: executing program 8 (id=1575):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x0, 0x1}, 0x6)
syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000002380)={0xc, &(0x7f00000001c0)={0x20, 0x6, 0x9, {0x9, 0x4d, "054ceae3ea3f41"}}, &(0x7f0000002340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}}, &(0x7f0000002640)={0x1c, &(0x7f00000023c0)={0x0, 0x2e, 0xd6, "62ede6fd6a14083b448f0b9d12fb3ba855a325f3bdb475f5552b75edfb95d7dd9c41d54d99a1c217bd084039d7ecace0c9a6e1beea1de8ed15a1921fc4a5dfe6e9c10632198404b79c96fc2992d84858f250e1a18c7c1660e3e4dc2082de4ff681b40443dce1cd256ddfc8813b94b91365aadefe3965cb8895f407dc2708922e952c068a56a69041a39b344b1edcd41cd37453a73237bba1b04e19765b53c290dab32d7b53adaac5180a6f849cdbf084be8e4b3f06d9a9fd86b4dbfcaa444b12cf659b41bc30cc15c4c3541418608429046f92cedf7f"}, 0x0, &(0x7f0000002540)={0x0, 0x8, 0x1, 0xfe}, 0x0, 0x0, 0x0})
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_open_procfs(0x0, 0x0)
lseek(r6, 0x6be5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r8, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0)
pread64(r7, &(0x7f0000002240)=""/237, 0xed, 0x4eb)

38.397508562s ago: executing program 8 (id=1578):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
r3 = dup(r2)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800010000000000"], 0x1c}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}})
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

37.439168877s ago: executing program 8 (id=1580):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
io_setup(0x7ff, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003d68c5ee17688a2003208030300c7ccd43f3bb0d1ec973a40895aea2922ecff3f0000000300000a0000000098fc5ad9485b0000880000d6a6f4605fa9ef4609ad392e72c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff", 0x90)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
inotify_init1(0x80000)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0xfffffffe}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
sendmmsg$inet(r2, &(0x7f0000001b40), 0x0, 0x20008000)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x19, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000030a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0xcdc}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000001cc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x80, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x15}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_emit_ethernet(0x103e, &(0x7f0000002c00)={@random="dddbbcaac827", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x1008, 0x3a, 0xff, @remote, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x3, 0x5e, "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"}}}}}}, 0x0)
recvfrom$inet(r2, &(0x7f0000000040)=""/190, 0xbe, 0x0, 0x0, 0x0)

29.180419653s ago: executing program 9 (id=1592):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x0, 0x1}, 0x6)
syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000002380)={0xc, &(0x7f00000001c0)={0x20, 0x6, 0x9, {0x9, 0x4d, "054ceae3ea3f41"}}, &(0x7f0000002340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}}, &(0x7f0000002640)={0x1c, &(0x7f00000023c0)={0x0, 0x2e, 0xed, "62ede6fd6a14083b448f0b9d12fb3ba855a325f3bdb475f5552b75edfb95d7dd9c41d54d99a1c217bd084039d7ecace0c9a6e1beea1de8ed15a1921fc4a5dfe6e9c10632198404b79c96fc2992d84858f250e1a18c7c1660e3e4dc2082de4ff681b40443dce1cd256ddfc8813b94b91365aadefe3965cb8895f407dc2708922e952c068a56a69041a39b344b1edcd41cd37453a73237bba1b04e19765b53c290dab32d7b53adaac5180a6f849cdbf084be8e4b3f06d9a9fd86b4dbfcaa444b12cf659b41bc30cc15c4c3541418608429046f92cedf7fadecdf77bf021685c7725b4cf7d409abb8d911dad60ded"}, 0x0, &(0x7f0000002540)={0x0, 0x8, 0x1, 0xfe}, 0x0, 0x0, 0x0})
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_open_procfs(0x0, 0x0)
lseek(r6, 0x6be5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r8, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0)
pread64(r7, &(0x7f0000002240)=""/237, 0xed, 0x4eb)

22.356358499s ago: executing program 38 (id=1580):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
io_setup(0x7ff, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003d68c5ee17688a2003208030300c7ccd43f3bb0d1ec973a40895aea2922ecff3f0000000300000a0000000098fc5ad9485b0000880000d6a6f4605fa9ef4609ad392e72c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff", 0x90)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
inotify_init1(0x80000)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0xfffffffe}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
sendmmsg$inet(r2, &(0x7f0000001b40), 0x0, 0x20008000)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x19, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000030a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0xcdc}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000001cc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x80, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x15}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_emit_ethernet(0x103e, &(0x7f0000002c00)={@random="dddbbcaac827", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x1008, 0x3a, 0xff, @remote, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x3, 0x5e, "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"}}}}}}, 0x0)
recvfrom$inet(r2, &(0x7f0000000040)=""/190, 0xbe, 0x0, 0x0, 0x0)

22.1667986s ago: executing program 9 (id=1596):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x2bc}, 0x1, 0x0, 0x0, 0x20048020}, 0x20000080)
open(0x0, 0x143c62, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x11c, 0x30, 0x1, 0x1, 0x25dfdc01, {}, [{0x108, 0x1, [@m_bpf={0xbc, 0x12, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x88, 0x6, "757ad76519a0bb5b53730447e2221f060d7494ab97734eafb27d364dfaf532b2a9349e1132f269b705f77ae3b6be94343fd73ee58bc1f8820162472306c049f8c8a7a35438b9790ba3e10c87dfaca8f45c72e2f50c97a5cea9eb04e44f6ba1e45aa5e38ed22ad660caae1ec56950d27c8aaf42416a5fcb0f9be7de81fdd7c8c168884853"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x60000000}, 0x200}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x4)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x4)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$fb1(0xffffffffffffff9c, 0x0, 0xa0000, 0x0)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c8})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18)
mmap(&(0x7f0000402000/0x2000)=nil, 0x2000, 0x3, 0x32, 0x0, 0xffffd000)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbaba}, 0x1c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [], {0x14}}, 0x28}}, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_vs_stats_percpu\x00')

20.984728789s ago: executing program 9 (id=1599):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f00000003c0)={0x268, 0x0, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [{{0x254, 0x1, {{0x3, 0x1000}, 0xb, 0x9, 0x6, 0xd17, 0x16, 'syz1\x00', "c2d339616fb4720b95e6130f6b004de717a6c81c2ad79eb41e15d7eb27b859e2", "34d57a1514b58851465fce0a4b42026806ad5c8d8d321e2d3872976b35541f48", [{0xfff, 0x1ff, {0x1, 0x1}}, {0xc31, 0x100, {0x2, 0x9}}, {0x2, 0x1, {0x2, 0x6}}, {0xb, 0x7, {0x1, 0x6}}, {0x2, 0xd, {0x0, 0x5}}, {0x9, 0xbe, {0x3}}, {0xf001, 0x9, {0x3, 0x5}}, {0xffff, 0x200, {0x1, 0xffffffff}}, {0x3, 0x2, {0x1, 0xfffff001}}, {0x4, 0x3ff, {0x2}}, {0x7, 0xf, {0x1, 0x7}}, {0x8, 0x5, {0x1, 0xc2}}, {0xffff, 0x400, {0x3, 0x8001}}, {0x8, 0x7ff, {0x0, 0xa9}}, {0xd8, 0x7, {0x2}}, {0x1, 0x5, {0x2, 0x2}}, {0x4, 0x2ebb, {0x2, 0x2}}, {0x6, 0x3, {0x2, 0x7}}, {0x5, 0x0, {0x3, 0x9}}, {0xa09, 0xce7, {0x2, 0x7fffffff}}, {0x8000, 0x7ca6, {0x1, 0x9}}, {0x9, 0x80, {0x0, 0xa28}}, {0x2, 0x8000, {0x1, 0x1}}, {0x3, 0xfff5, {0x2, 0x1}}, {0x401, 0x2d0b, {0x1, 0xffff}}, {0x2a, 0x6, {0x1, 0xffffffff}}, {0x4aa, 0x8001, {0x2, 0xffffffff}}, {0xe, 0x8}, {0x1574, 0x5e2f, {0x0, 0x9b67}}, {0x0, 0x678, {0x2, 0xfffffff3}}, {0x7, 0xce9, {0x3, 0x3}}, {0x1ff, 0x2, {0x3, 0x3}}, {0xf18b, 0x5, {0x3, 0x1}}, {0x2, 0xe, {0x3, 0x9}}, {0x6c, 0x5, {0x1, 0xffffffff}}, {0x9, 0x3, {0x0, 0x9}}, {0x2, 0x8001, {0x2, 0x8}}, {0x6, 0x5, {0x3, 0x1}}, {0x80, 0x4, {0x2, 0x27}}, {0x7, 0x0, {0x1, 0x9}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x2081}, 0x18014)
setresgid(0xee01, 0x0, 0xee01)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8)
fsopen(&(0x7f00000000c0)='hfs\x00', 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x1e, 0xa01, 0x2, 0x0, {0xa}}, 0x14}}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
inotify_init1(0x80000)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setrlimit(0x5, &(0x7f0000000240)={0x6, 0xffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0x7}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)

12.384578672s ago: executing program 3 (id=1594):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$proc_mixer(0xffffff9c, &(0x7f00000001c0)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0)
write$proc_mixer(r2, &(0x7f0000000200)=[{'BASS', @val={' \'', 'CD Capture Switch'}}, {'SYNTH', @void}], 0x34)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0x9, 0x7, 0x0, 0x0, 0x5, 0x3, 0xfffffffffffffffc, 0x800000]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1100000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000000000000000000f7f3345cacc6d69838df0e36206fbe4816503ff5f85270feb043000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b8970000000f23c80f21f866350c00a0000f23f89d0f326635000400000f302e8dcc0f23742e3b5753baf80466b8f494f78e66efbafc0c66b83ac80000666fda6509", 0x46}], 0x1, 0x1a, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

12.326494897s ago: executing program 7 (id=1612):
r0 = syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000500))
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0xf0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd223}, 0x94)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{0x0}], 0x1)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0)
r5 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x88081)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xf7}, 'port1\x00', 0x3ab, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x3fc, 0x0, 0x7, 0xfd})
openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r7 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r8, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
shutdown(r8, 0x1)

12.080152327s ago: executing program 7 (id=1613):
socket$netlink(0x10, 0x3, 0x10)
syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)={0x9, 0xfffffffffffffff9, 0x200})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0xa0301)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregset(0x4205, r1, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4})
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000003c0)={{0x8004, 0x0, 0xe09, 0x8, 'syz1\x00', 0x7f}, 0x6, 0x10, 0x99f, r1, 0x9, 0x2, 'syz1\x00', &(0x7f0000000640)=['', '\x00\x00\x02\x89\r\x002\xd4\rU\x91\xffy\xd9\xf4\xeb\x89\x8bSK\x91b\xe7\xa5L\a\xd9\xeeb3\'\x9dicN\xabDu\xce\xcc\xeb\x1aC\x1d\xf3e\xfa_Cs\xd4U\xd5\xd1\x8e\xa4\x9c).A\x88\x90 ]\x94\x122\x15\x8ey\x88\xdc\x92Y\x8e\xde\\\xcc\x9b\xb4\xc1?*\xe7\xca\x10\xd8\xdc\xd2\xd0\xf4<b6K\x14\xb8Xbx\x9csnA]@\xe4??\x9b\xfb\xd4\xe7\x93Q\x0e7h\x10W\x0f\xed#6\xb1\n\x8d\xb0\x86\xbc\xe6W7U(?T\xa7\x01\x12', '/dev/snd/mw\xd6\x13idiC#D#\x00', '+\x03Sk\xd4=\xb7\xddb\xdc\x05\xa8\x8a\xca\x1b\xd9', ' \xfc\xd1\xf5\xb9\x9d\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\xa9\xd2B.Kj\x90eY?\x99K$\xea \x01a\xc4Y\xc8\xf3\r\x90\xe9A:\x99\xd9\xadG\x1a\xf7\xb6F\xea\xd2', '/dev/sequencer\x00', '*!%-\x00', './binderfs/binder0\x00\xb8\x9aO]\xce\xe7\x05\xb5;cS2H0=P\x82\x89\f\x86\x10\xf9\f\xac\xca\x86i1\xdd!\xa7\x18\x1b\x8e\x95qg\xa2\x1b\a\xef\xda\xfa\x9eG\xe1i\xce[\x87x\xbc?HI\xdfVE\x12|\x17\xb6\tOo\xd9XB\xdff\x03\b', '\x00'], 0x156})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})
write(r2, &(0x7f00000008c0)="aa65acdade5df9efdb24af9bcf8652292ed6df55b18367fa8684a0f6ef7b0ca02b9fe702e289dc722ab7f5fb40e778c81d7bd359846e0579ed87467531ea8b688081d0bba46a5f389b21dfd4bb5853e718cb363df503837af395ff1dcc7c700afd590700000000000000c35b9dc3e26014be8a08f2230137d07bc7bb1927104abd02b9551424e8de81185c8641d44bfa55437c63b034e9a952db860772e029c7e9a5aee7519025278dd5467e8f7179d61e3c1ef8a7de88cdf604ce7099b24e94d8d6b0e6fb6556fdd2891c44a3963993226eb540078d2429e3990d456e09d5a6b01fdc5b77325c795f91faf5e032de5e95ce5cb47b7a61540b5ed92433a648d1218395fc5f3b6fa9b2b8e7f9b0c344cd3aea8b8d1a060e1055ac334d4a9c13c0a0ed18995f18cd71574fa56b8bd214a2b54669d6dc226c22799eddeca943d5abe7f73272e643b77aedb01257c7f32884fa0a6e068c12af251066bcf6f1def6617080bcf342882873083681f245a60c7c055d2d7c216150525b4fd03aba062d91c9366341bda38dc4e15a2d42f87b102cedac7a9f3aeddc782c2d99e4e4d24768", 0xfffffffffffffe77)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x9, 0x60200)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
writev(0xffffffffffffffff, 0x0, 0x0)
setrlimit(0x6, &(0x7f0000000080)={0x4, 0x9})
r4 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x80380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/crypto\x00', 0x0, 0x0)
preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000001800)=""/250, 0xfa}], 0x1, 0x40000004, 0x0)
capset(0x0, &(0x7f0000000880)={0x0, 0xdd1, 0xffffffb3, 0x0, 0x88fd, 0x10})

11.172832508s ago: executing program 7 (id=1614):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x1e0, 0x30, 0x10, 0x0, 0x25dfdbfd, {}, [{0x1cc, 0x1, [@m_ct={0x44, 0x102, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0x184, 0x3, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x7, 0x7, 0x4, 0x8}, 0x3f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x3, 0x2, 0xf, 0x1}, 0x15}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x0, 0xffffffffffffffff, 0x1}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x71, 0x7, 0x20000004, 0xfffffff7, 0x84}, 0x5e}}]}, {0xe8, 0x6, "35cb4701ba2e65483c9dbddfab2508735cf4132eb8503c017676b176f32c891a3046df9dff1955aa42eb337bc76a21969dd4a278422f89c3a456be82a1cb0a3ae237960a847f07264647f11d571c6d084f3a4545d6cf9dfa5eefa9e34e028e2629b50c5f3394969bf834bb6b289bb96518ef8604464d51472a9d55e7b039cbbc7f1fc97922dc2d8e071f8fd3dd5076b918373a71e34294884ea14c558e31e6f3e7d296517fca535b2ea03e30b6e92fa3e61e554c9991917164cdf4e88e599119dd753b0f144e9e5c6fdabeccf5c45e2554ba53d6264b620385f0d03273cf17db1f4a194a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x6, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x18)
pipe(&(0x7f00000001c0)={<r4=>0xffffffffffffffff})
r5 = landlock_create_ruleset(&(0x7f0000000140)={0x510, 0x2, 0x2}, 0x18, 0x0)
landlock_create_ruleset(&(0x7f0000000000)={0x77, 0x1, 0x3}, 0x18, 0x2)
landlock_restrict_self(r5, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000280)={r0})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000400)=ANY=[@ANYRES16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="2f0082969f81a198f83e034348b9af2e000000000000ff88ffe3", @ANYRES32=r8, @ANYBLOB, @ANYRES64=0x0], 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, <r10=>0x0}, 0x0)
r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280)=r10, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={r11, r9, 0x4, r7}, 0x10)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r12, 0x147, 0x0, 0x1, {{}, {}, {0x14}}}, 0x30}}, 0x0)

11.048285958s ago: executing program 3 (id=1615):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x181800)
ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x8, 0x1ff, "2178d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00\x00\x00\b', "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "f6380000000000000000a93c"]})
ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0xc, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x4063, "5700ed00", 0x0, 0x0, 0x0, 0x0, 0x5, 0x2})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ppoll(&(0x7f0000000000)=[{r1, 0x2484}, {r3, 0x4}, {r3, 0x1001}, {r0, 0x12}, {r2, 0x500}, {r1}, {r2, 0x80}], 0x7, &(0x7f0000000040), &(0x7f0000000100)={[0x1, 0x100]}, 0x8)
write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaa8aaaaaabb86dd6d002000001011ff00000000000000000000000010000000ff0200000000000000000000000000014f194e20001090"], 0x4a)

9.040801641s ago: executing program 3 (id=1617):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x94}, 0xe)
r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRES64=r4])
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001f40)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)

8.979120305s ago: executing program 3 (id=1618):
r0 = syz_io_uring_setup(0x34b7, 0x0, 0x0, &(0x7f0000000500))
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0xf0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd223}, 0x94)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0)
r4 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x88081)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xf7}, 'port1\x00', 0x3ab, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x3fc, 0x0, 0x7, 0xfd})
openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
shutdown(r7, 0x1)

8.606123473s ago: executing program 4 (id=1619):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000001fc0)={0x45, 0x6, 0x0, {0x0, 0x0, 0x1c, 0x0, '/sys/kernel/debug/sync/info\x00'}}, 0x45)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r2, &(0x7f00000002c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)
connect$rose(r2, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40)

7.970830927s ago: executing program 3 (id=1620):
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000040), 0x2)
sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x11000)
write$binfmt_misc(r2, &(0x7f0000000180)='5', 0x1)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, 0x0, 0x0)
write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x123)
sendmsg$inet(r0, &(0x7f0000000f80)={&(0x7f0000000800)={0x2, 0x1, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000000)="0f", 0x1}], 0x1}, 0x4000)

7.712788526s ago: executing program 4 (id=1621):
r0 = syz_io_uring_setup(0x34b7, 0x0, 0x0, &(0x7f0000000500))
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0xf0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd223}, 0x94)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0)
r4 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x88081)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xf7}, 'port1\x00', 0x3ab, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x3fc, 0x0, 0x7, 0xfd})
openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
shutdown(r6, 0x1)

6.90699777s ago: executing program 7 (id=1622):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x400}, 0x14}, 0x1, 0x0, 0x0, 0x404}, 0x0)
r0 = getpgrp(0xffffffffffffffff)
getpgid(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$packet(0x11, 0x3, 0x300)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffff9]}, 0x0, 0x8)
setpriority(0x0, 0x0, 0x1)
shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff6000/0x2000)=nil)
r3 = dup(r1)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/cgroup', 0x0, 0x0)
getdents64(r5, &(0x7f0000000080)=""/47, 0x2f)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r4}, 0x38)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r6, 0x1)
connect$bt_rfcomm(r6, &(0x7f0000000000)={0x1f, @any, 0x15}, 0xa)
openat$procfs(0xffffff9c, &(0x7f0000000380)='/proc/vmallocinfo\x00', 0x0, 0x0)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xe27, 0xec0, 0x0, {0x0, 0x0, 0x0, r8, {0xffe0, 0xfff1}, {}, {0x4, 0x8}}}, 0x24}}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1b, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

6.757684737s ago: executing program 4 (id=1623):
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xfffe, 0x0, 0xa40}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socket$kcm(0x10, 0x2, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000300)={0x0, "10f8b00f37651afa3619457e9e16eb9a2732bd7ca767a320c4c57e2370e6e4ac36d5cd133c26f88778b60974c73dc649dc65676cea8fc6ebfe50a657648e37bd", 0x20}, 0x48, 0xfffffffffffffffa)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000280)='asymmetric\x00', &(0x7f0000000380))
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)={[{0x2b, 'cpu'}, {0x2b, 'net_prio'}, {0x2b, 'cpuacct'}, {0x2d, 'perf_event'}]}, 0x24)
ioctl$sock_netdev_private(r5, 0x8949, &(0x7f0000000000))
rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x400000000, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}}, 0x20000000)

5.992531318s ago: executing program 9 (id=1624):
r0 = syz_io_uring_setup(0x34b7, 0x0, 0x0, &(0x7f0000000500))
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0xf0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd223}, 0x94)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0)
r4 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x88081)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xf7}, 'port1\x00', 0x3ab, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x3fc, 0x0, 0x7, 0xfd})
openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
shutdown(r7, 0x1)

708.589137ms ago: executing program 3 (id=1625):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410eb)
openat$full(0xffffff9c, 0x0, 0x49c000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000100)='GPL\x00'}, 0x90)
io_uring_enter(r3, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2, 0x0)
open(0x0, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup3(r6, 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009})
pread64(r7, 0x0, 0x0, 0x378e)
r8 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io(r8, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x2})
socket$igmp(0x2, 0x3, 0x2)

684.862117ms ago: executing program 7 (id=1626):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = getpid()
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
migrate_pages(r1, 0x5, &(0x7f00000008c0)=0x8, &(0x7f0000000900)=0xfffffffffffff6ce)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r2 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r2, &(0x7f0000000200)={0xc, &(0x7f0000000180)={0x0, 0x31, 0x51, {0x51, 0x22, "d016f307bf83139a91e1c2915acfcc4931c5e210c4c6d38f4b646350dbd6b1dcc92367670440fae260b153b4d1b33f51690642be57a644e99a4a03f995231f5e635132e7fa144de8271d4b656dc3bc"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x429}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000580)={0x20, 0x17, 0xbf, "42b5ec89d54a79e4ee21c7660f5ab40e28aec31583b3ec6ba0faccc673d1eec1545d9f6ce5aed2eebf54cf71034676ccbc61aad4c80d6ef3ae9294558a0e4f006652112ae194535fe51ea3ed8aafd763bd263ead64e465fcd11200f83a237be32e0c59d2e6612bc648bfd400c845dca796639a247a2285c7c78f9f44ea5b8674bbdfabbe1e5df21eb161c5eddd209aec6ecb3045c529953383f896e0a994abce601080db4efd989bd88a570327f42373fb90347a478bf593124f0ce1c42b22"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f00000004c0)={0x40, 0xa0, 0x4, 0x2}, &(0x7f0000000500)={0xc0, 0xa2, 0x2f, "8ca9bdbc4698067d08714369fadbe2efd44e7d474a8fb55c0e2f634f907b986501444bc7f7f942a6e0c9805b92e6b6"}})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000940)={0x0, r3}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0xfffffffffffffe8b)
openat$cuse(0xffffff9c, &(0x7f0000000980), 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
syz_usb_control_io(r0, &(0x7f00000006c0)={0x18, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="a603020000000283"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000700)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x88, 0x5ac, 0x340, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x10, 0x10, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0xa0, 0x9, 0x1, {0x22, 0x2f4}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xed, 0x5, 0x7}}]}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x201, 0x81, 0x0, 0x8, 0x20, 0x3}, 0x2b, &(0x7f0000000780)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x2, 0x6, 0x5e0, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x15, 0x9, 0xe, 0xac}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "658e5d25550a84ee98ed03f21f943b52"}]}, 0x2, [{0x8, &(0x7f00000007c0)=@string={0x8, 0x3, "1122d667324b"}}, {0x59, &(0x7f0000000800)=@string={0x59, 0x3, "08797014e4bee2c28d12983adb68c45a238ba140281a7276c9adcb9e05ed4cdb730793d5e448b8d131b6e1c80fcb27220b7e6b03e05a183699259343b558b2cac4ceedcec4e9c66f15921296565f686f75adcf2e31e02d"}}]})
r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r5, 0x81044804, &(0x7f0000000400)={0x1})

660.890792ms ago: executing program 4 (id=1627):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000000000000000002000000000000001a00000005"], 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x4000050)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffff6, 0xc03, 0x1ff, 0x5, 0x7, 0x6, 0x0, 0x4, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd2c, 0x25dfdbf7, {0x0, 0x0, 0x0, r5, {0xb, 0x19}, {0x0, 0xfff1}, {0xe, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x6701e622}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

627.729726ms ago: executing program 9 (id=1628):
r0 = syz_io_uring_setup(0x34b7, 0x0, 0x0, &(0x7f0000000500))
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0xf0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd223}, 0x94)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0)
r4 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x88081)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xf7}, 'port1\x00', 0x3ab, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x3fc, 0x0, 0x7, 0xfd})
openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
shutdown(r6, 0x1)

614.529375ms ago: executing program 4 (id=1629):
r0 = syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000500))
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0xf0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd223}, 0x94)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0)
r5 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x88081)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xf7}, 'port1\x00', 0x3ab, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x3fc, 0x0, 0x7, 0xfd})
openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r7 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r8, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
shutdown(r8, 0x1)

587.086378ms ago: executing program 4 (id=1630):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffff9]}, 0x0, 0x8)
r2 = dup(r0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r4, &(0x7f0000000000)=""/188, 0xbc)
syz_usb_disconnect(r3)

513.660022ms ago: executing program 9 (id=1631):
r0 = syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000500))
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0xf0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd223}, 0x94)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0)
r5 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x88081)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xf7}, 'port1\x00', 0x3ab, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x3fc, 0x0, 0x7, 0xfd})
openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r7 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r8, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
shutdown(r8, 0x1)

0s ago: executing program 7 (id=1632):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x2bc}, 0x1, 0x0, 0x0, 0x20048020}, 0x20000080)
open(0x0, 0x143c62, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x11c, 0x30, 0x1, 0x1, 0x25dfdc01, {}, [{0x108, 0x1, [@m_bpf={0xbc, 0x12, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x88, 0x6, "757ad76519a0bb5b53730447e2221f060d7494ab97734eafb27d364dfaf532b2a9349e1132f269b705f77ae3b6be94343fd73ee58bc1f8820162472306c049f8c8a7a35438b9790ba3e10c87dfaca8f45c72e2f50c97a5cea9eb04e44f6ba1e45aa5e38ed22ad660caae1ec56950d27c8aaf42416a5fcb0f9be7de81fdd7c8c168884853"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x60000000}, 0x200}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x4)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x4)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$fb1(0xffffffffffffff9c, 0x0, 0xa0000, 0x0)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c8})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18)
mmap(&(0x7f0000402000/0x2000)=nil, 0x2000, 0x3, 0x32, 0x0, 0xffffd000)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbaba}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [], {0x14}}, 0x28}}, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000003e000701ecffffff00000000017c0000040042800c00018006000600800a1f00200002801c001480180003801400770000000000000000000000ffd6e0141430def998349985272d6b95b5158ea57e957a771f7e523619b2b98e374e35358eb3e080091b26349a7aad2e69b6d22f18d782b99c617973450b7de413fdfc50a628edbbf6493d4106206e5c8d356a1a55921706033e6c7b7934b2b70c0f4c5e08537a4f0584fe65748c454049095750d95482f39a45e44ef8c78c5e6d80696b335f70"], 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_vs_stats_percpu\x00')

0s ago: executing program 3 (id=1637):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = syz_io_uring_setup(0xcad, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x1, 0x3a6}, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffff7c00, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r2, 0x0, 0x0, 0x0, 0x2011})
io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00')
preadv(r6, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0)

kernel console output (not intermixed with test programs):

.318116][T10443] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  307.318125][T10443] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  307.318134][T10443] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  307.318155][T10443]  </TASK>
[  307.318162][T10443] ERROR: Out of memory at tomoyo_realpath_from_path.
[  308.494115][ T7913] usb 48-1: device descriptor read/8, error -110
[  308.895243][ T7913] usb usb48-port1: attempt power cycle
[  309.287087][T10467] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  309.357563][T10470] netlink: zone id is out of range
[  309.359754][T10470] netlink: zone id is out of range
[  309.361412][T10470] netlink: zone id is out of range
[  309.363005][T10470] netlink: zone id is out of range
[  309.374661][T10470] netlink: zone id is out of range
[  309.376869][T10470] netlink: zone id is out of range
[  309.379100][T10470] netlink: zone id is out of range
[  309.381302][T10470] netlink: zone id is out of range
[  309.383435][T10470] netlink: zone id is out of range
[  309.496820][ T7913] usb usb48-port1: unable to enumerate USB device
[  309.584291][   T40] audit: type=1800 audit(1757036396.069:288): pid=10465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1171" name="cgroup.controllers" dev="tmpfs" ino=553 res=0 errno=0
[  309.752181][T10476] netlink: 'syz.5.1173': attribute type 32 has an invalid length.
[  309.756694][T10476] netlink: 25 bytes leftover after parsing attributes in process `syz.5.1173'.
[  310.012131][T10485] vlan0: entered promiscuous mode
[  310.015589][T10485] vlan0: entered allmulticast mode
[  310.017421][T10485] hsr_slave_1: entered allmulticast mode
[  310.091020][T10492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1176'.
[  310.256640][T10488] hub 4-0:1.0: USB hub found
[  310.258289][T10488] hub 4-0:1.0: 2 ports detected
[  310.444115][ T5975] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  310.474709][ T6679] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  310.614127][ T5975] usb 9-1: Using ep0 maxpacket: 32
[  310.625131][ T5975] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  310.625701][ T6679] usb 10-1: too many configurations: 9, using maximum allowed: 8
[  310.636722][ T5975] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  310.644183][ T5975] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  310.646759][ T5975] usb 9-1: Product: syz
[  310.648519][ T5975] usb 9-1: Manufacturer: syz
[  310.659417][ T5975] usb 9-1: SerialNumber: syz
[  310.664954][ T6679] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  310.668645][ T6679] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  310.670780][ T5975] usb 9-1: config 0 descriptor??
[  310.680627][T10496] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  310.706322][ T6679] usb 10-1: config 0 interface 0 has no altsetting 0
[  310.731651][ T6679] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  310.747053][ T6679] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  310.762175][ T6679] usb 10-1: config 0 interface 0 has no altsetting 0
[  310.795185][ T6679] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  310.798280][ T6679] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  310.801708][ T6679] usb 10-1: config 0 interface 0 has no altsetting 0
[  310.825694][ T6679] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  310.828997][ T6679] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  310.833606][ T6679] usb 10-1: config 0 interface 0 has no altsetting 0
[  310.875331][ T6679] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  310.878668][ T6679] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  310.882435][ T6679] usb 10-1: config 0 interface 0 has no altsetting 0
[  310.887443][ T6679] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  310.890602][ T6679] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  310.906047][ T6679] usb 10-1: config 0 interface 0 has no altsetting 0
[  310.909361][ T6679] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  310.912374][ T6679] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  310.924574][ T6679] usb 10-1: config 0 interface 0 has no altsetting 0
[  310.935395][ T6679] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  310.938418][ T6679] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  310.942121][ T6679] usb 10-1: config 0 interface 0 has no altsetting 0
[  310.956254][ T6679] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  310.959147][ T6679] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  310.962007][ T6679] usb 10-1: Product: syz
[  310.963892][ T6679] usb 10-1: Manufacturer: syz
[  310.973643][ T5975] usb 9-1: USB disconnect, device number 17
[  310.975120][ T6679] usb 10-1: SerialNumber: syz
[  310.983462][ T6679] usb 10-1: config 0 descriptor??
[  310.999041][ T6679] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0
[  311.530835][T10498] usb 1-1: USB disconnect, device number 2
[  311.751644][ T7913] usb 10-1: USB disconnect, device number 9
[  311.758661][ T7913] yurex 10-1:0.0: USB YUREX #0 now disconnected
[  312.716343][T10519] netlink: 'syz.5.1187': attribute type 11 has an invalid length.
[  312.734425][T10519] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1187'.
[  313.304670][ T6679] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  313.487940][T10535] syz.4.1191 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  313.511641][T10537] comedi comedi0: Minor 7 could not be opened
[  313.935470][ T6679] usb 10-1: Using ep0 maxpacket: 16
[  313.939188][ T6679] usb 10-1: config 0 has an invalid interface number: 8 but max is 0
[  313.942441][ T6679] usb 10-1: config 0 has no interface number 0
[  313.946039][ T6679] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  313.950460][ T6679] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  313.956947][ T6679] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  313.960558][ T6679] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  313.963830][ T6679] usb 10-1: Product: syz
[  313.966485][ T6679] usb 10-1: SerialNumber: syz
[  313.970595][ T6679] usb 10-1: config 0 descriptor??
[  313.981081][ T6679] cm109 10-1:0.8: invalid payload size 0, expected 4
[  313.986307][ T6679] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.8/input/input16
[  314.164138][ T5975] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  314.181010][    C3] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71
[  314.185011][   T24] usb 10-1: USB disconnect, device number 10
[  314.185360][    C3] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71
[  314.189135][    C3] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  314.193137][   T24] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  314.234537][T10544] lo speed is unknown, defaulting to 1000
[  314.344060][ T5975] usb 7-1: Using ep0 maxpacket: 8
[  314.347091][ T5975] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  314.354221][ T5975] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  314.358101][ T5975] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  314.361358][ T5975] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  314.365590][ T5975] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  314.368477][ T5975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.504219][   T63] Bluetooth: hci2: command 0x0401 tx timeout
[  314.504285][ T5973] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  314.544133][    T9] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  314.580535][ T5975] usb 7-1: GET_CAPABILITIES returned 0
[  314.582369][ T5975] usbtmc 7-1:16.0: can't read capabilities
[  314.706228][    T9] usb 9-1: config 0 has no interfaces?
[  314.709775][    T9] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  314.712617][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.715170][    T9] usb 9-1: Product: syz
[  314.716495][    T9] usb 9-1: Manufacturer: syz
[  314.717991][    T9] usb 9-1: SerialNumber: syz
[  314.721178][    T9] usb 9-1: config 0 descriptor??
[  314.782597][ T3241] usb 7-1: USB disconnect, device number 27
[  314.980993][ T6679] usb 9-1: USB disconnect, device number 18
[  315.115282][T10562] dummy0: entered allmulticast mode
[  315.119593][T10562] dummy0: left allmulticast mode
[  315.236004][T10565] overlayfs: missing 'lowerdir'
[  316.401857][   T40] audit: type=1326 audit(1757036402.889:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10580 comm="syz.2.1205" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f38579 code=0x0
[  316.885287][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  317.395444][T10603] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1214'.
[  318.203824][T10622] : entered promiscuous mode
[  319.163349][T10644] FAULT_INJECTION: forcing a failure.
[  319.163349][T10644] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  319.167814][T10644] CPU: 1 UID: 0 PID: 10644 Comm: syz.0.1224 Not tainted syzkaller #0 PREEMPT(full) 
[  319.167829][T10644] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  319.167836][T10644] Call Trace:
[  319.167840][T10644]  <TASK>
[  319.167844][T10644]  dump_stack_lvl+0x16c/0x1f0
[  319.167862][T10644]  should_fail_ex+0x512/0x640
[  319.167881][T10644]  _copy_from_user+0x2e/0xd0
[  319.167898][T10644]  io_submit_one+0xbb/0x1df0
[  319.167913][T10644]  ? __lock_acquire+0xb97/0x1ce0
[  319.167929][T10644]  ? __pfx_io_submit_one+0x10/0x10
[  319.167946][T10644]  ? __might_fault+0xe3/0x190
[  319.167958][T10644]  ? __might_fault+0x13b/0x190
[  319.167973][T10644]  ? __ia32_compat_sys_io_submit+0x1ad/0x3a0
[  319.167985][T10644]  __ia32_compat_sys_io_submit+0x1ad/0x3a0
[  319.168000][T10644]  ? __pfx___ia32_compat_sys_io_submit+0x10/0x10
[  319.168012][T10644]  ? fput+0x9b/0xd0
[  319.168029][T10644]  ? rcu_is_watching+0x12/0xc0
[  319.168040][T10644]  ? syscall_enter_from_user_mode_prepare+0x68/0xe0
[  319.168057][T10644]  __do_fast_syscall_32+0x7c/0x3a0
[  319.168073][T10644]  do_fast_syscall_32+0x32/0x80
[  319.168086][T10644]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  319.168099][T10644] RIP: 0023:0xf70be579
[  319.168108][T10644] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  319.168118][T10644] RSP: 002b:00000000f54ae55c EFLAGS: 00000296 ORIG_RAX: 00000000000000f8
[  319.168128][T10644] RAX: ffffffffffffffda RBX: 00000000f743f000 RCX: 0000000000000001
[  319.168134][T10644] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000
[  319.168140][T10644] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  319.168145][T10644] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  319.168151][T10644] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  319.168163][T10644]  </TASK>
[  319.231431][    C1] vkms_vblank_simulate: vblank timer overrun
[  319.389854][T10653] input: syz1 as /devices/virtual/input/input17
[  319.758872][T10663] syzkaller0: entered promiscuous mode
[  319.760668][T10663] syzkaller0: entered allmulticast mode
[  320.225391][ T6679] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  320.375116][ T6679] usb 9-1: Using ep0 maxpacket: 32
[  320.385281][ T6679] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  320.399712][ T6679] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  320.406520][ T6679] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  320.409450][ T6679] usb 9-1: Product: syz
[  320.410878][ T6679] usb 9-1: Manufacturer: syz
[  320.412831][ T6679] usb 9-1: SerialNumber: syz
[  320.418140][T10680] FAULT_INJECTION: forcing a failure.
[  320.418140][T10680] name failslab, interval 1, probability 0, space 0, times 0
[  320.418506][ T6679] usb 9-1: config 0 descriptor??
[  320.422317][T10680] CPU: 1 UID: 0 PID: 10680 Comm: syz.5.1236 Not tainted syzkaller #0 PREEMPT(full) 
[  320.422332][T10680] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  320.422338][T10680] Call Trace:
[  320.422343][T10680]  <TASK>
[  320.422347][T10680]  dump_stack_lvl+0x16c/0x1f0
[  320.422364][T10680]  should_fail_ex+0x512/0x640
[  320.422379][T10680]  ? fs_reclaim_acquire+0xae/0x150
[  320.422396][T10680]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  320.422410][T10680]  should_failslab+0xc2/0x120
[  320.422424][T10680]  __kmalloc_noprof+0xd2/0x510
[  320.422440][T10680]  tomoyo_realpath_from_path+0xc2/0x6e0
[  320.422455][T10680]  ? tomoyo_profile+0x47/0x60
[  320.422466][T10680]  tomoyo_path_number_perm+0x245/0x580
[  320.422477][T10680]  ? tomoyo_path_number_perm+0x237/0x580
[  320.422491][T10680]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  320.422517][T10680]  ? find_held_lock+0x2b/0x80
[  320.422528][T10680]  ? hook_file_ioctl_common+0x145/0x410
[  320.422544][T10680]  ? __fget_files+0x20e/0x3c0
[  320.422558][T10680]  security_file_ioctl_compat+0x9b/0x240
[  320.422572][T10680]  __ia32_compat_sys_ioctl+0xc3/0x370
[  320.422590][T10680]  __do_fast_syscall_32+0x7c/0x3a0
[  320.422605][T10680]  do_fast_syscall_32+0x32/0x80
[  320.422619][T10680]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  320.422632][T10680] RIP: 0023:0xf704e579
[  320.422640][T10680] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  320.422650][T10680] RSP: 002b:00000000f543e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  320.422660][T10680] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004008ae6a
[  320.422667][T10680] RDX: 00000000800005c0 RSI: 0000000000000000 RDI: 0000000000000000
[  320.422673][T10680] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  320.422678][T10680] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  320.422684][T10680] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  320.422697][T10680]  </TASK>
[  320.422701][T10680] ERROR: Out of memory at tomoyo_realpath_from_path.
[  320.428835][T10676] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  320.762779][ T3241] usb 9-1: USB disconnect, device number 19
[  321.909880][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1245'.
[  321.918898][T10713] bridge_slave_1: left allmulticast mode
[  321.924721][T10713] bridge_slave_1: left promiscuous mode
[  321.934912][T10713] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.958302][T10713] bridge_slave_0: left allmulticast mode
[  321.960437][T10713] bridge_slave_0: left promiscuous mode
[  321.962668][T10713] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.818030][ T3241] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  324.982200][   T40] audit: type=1326 audit(1757036411.419:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.4.1253" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf710e579 code=0x0
[  325.094066][ T3241] usb 7-1: Using ep0 maxpacket: 32
[  325.164729][ T3241] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  325.169321][ T3241] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  325.172102][ T3241] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  325.174685][ T3241] usb 7-1: Product: syz
[  325.176005][ T3241] usb 7-1: Manufacturer: syz
[  325.177514][ T3241] usb 7-1: SerialNumber: syz
[  325.180093][ T3241] usb 7-1: config 0 descriptor??
[  325.182214][T10741] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  325.443472][ T3241] usb 7-1: USB disconnect, device number 28
[  325.630829][T10754] FAULT_INJECTION: forcing a failure.
[  325.630829][T10754] name failslab, interval 1, probability 0, space 0, times 0
[  325.635409][T10754] CPU: 0 UID: 0 PID: 10754 Comm: syz.4.1257 Not tainted syzkaller #0 PREEMPT(full) 
[  325.635431][T10754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  325.635442][T10754] Call Trace:
[  325.635447][T10754]  <TASK>
[  325.635454][T10754]  dump_stack_lvl+0x16c/0x1f0
[  325.635481][T10754]  should_fail_ex+0x512/0x640
[  325.635502][T10754]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  325.635521][T10754]  should_failslab+0xc2/0x120
[  325.635540][T10754]  __kmalloc_cache_noprof+0x6a/0x3e0
[  325.635557][T10754]  ? media_pipeline_add_pad+0xf3/0x990
[  325.635584][T10754]  media_pipeline_add_pad+0xf3/0x990
[  325.635612][T10754]  __media_pipeline_start+0x915/0x2030
[  325.635646][T10754]  ? __mutex_trylock_common+0xe9/0x250
[  325.635676][T10754]  ? __pfx___media_pipeline_start+0x10/0x10
[  325.635704][T10754]  ? rcu_is_watching+0x12/0xc0
[  325.635725][T10754]  media_pipeline_start+0x49/0x70
[  325.635751][T10754]  video_device_pipeline_start+0x79/0xa0
[  325.635783][T10754]  vimc_capture_start_streaming+0x7d/0x130
[  325.635821][T10754]  ? __pfx_vimc_capture_start_streaming+0x10/0x10
[  325.635840][T10754]  vb2_start_streaming+0x15f/0x5a0
[  325.635856][T10754]  ? __bitmap_weight+0xd7/0x110
[  325.635879][T10754]  vb2_core_streamon+0x2a7/0x450
[  325.635898][T10754]  vb2_ioctl_streamon+0xf4/0x170
[  325.635915][T10754]  __video_do_ioctl+0xb3d/0xfc0
[  325.635940][T10754]  ? __might_fault+0xe3/0x190
[  325.635966][T10754]  ? __pfx___video_do_ioctl+0x10/0x10
[  325.635998][T10754]  video_usercopy+0x47c/0x1440
[  325.636023][T10754]  ? __pfx___video_do_ioctl+0x10/0x10
[  325.636046][T10754]  ? __pfx_video_usercopy+0x10/0x10
[  325.636079][T10754]  ? hook_file_ioctl_common+0x145/0x410
[  325.636108][T10754]  v4l2_ioctl+0x1ba/0x250
[  325.636132][T10754]  v4l2_compat_ioctl32+0x214/0x2c0
[  325.636151][T10754]  ? __pfx_v4l2_compat_ioctl32+0x10/0x10
[  325.636171][T10754]  __ia32_compat_sys_ioctl+0x23f/0x370
[  325.636203][T10754]  __do_fast_syscall_32+0x7c/0x3a0
[  325.636229][T10754]  do_fast_syscall_32+0x32/0x80
[  325.636252][T10754]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  325.636272][T10754] RIP: 0023:0xf710e579
[  325.636286][T10754] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  325.636302][T10754] RSP: 002b:00000000f54fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  325.636318][T10754] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040045612
[  325.636328][T10754] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000
[  325.636337][T10754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  325.636346][T10754] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  325.636356][T10754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  325.636378][T10754]  </TASK>
[  328.194690][ T6679] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  328.305975][T10805] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1273'.
[  328.344492][ T6679] usb 9-1: Using ep0 maxpacket: 16
[  328.361848][ T6679] usb 9-1: config 0 has an invalid interface number: 8 but max is 0
[  328.365613][ T6679] usb 9-1: config 0 has no interface number 0
[  328.367636][ T6679] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  328.371178][ T6679] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  328.376012][ T6679] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  328.378914][ T6679] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  328.381507][ T6679] usb 9-1: Product: syz
[  328.382815][ T6679] usb 9-1: SerialNumber: syz
[  328.386664][ T6679] usb 9-1: config 0 descriptor??
[  328.390558][ T6679] cm109 9-1:0.8: invalid payload size 0, expected 4
[  328.394741][ T6679] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input18
[  328.599739][    C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  328.602097][    C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  328.604831][    C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  328.607196][    C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  328.609445][   T34] usb 9-1: USB disconnect, device number 20
[  328.611325][    C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  328.611336][    C3] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  328.618064][   T34] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  328.714071][ T6679] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  328.808158][   T40] audit: type=1326 audit(1757036415.299:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10796 comm="syz.4.1270" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000
[  328.816316][   T40] audit: type=1326 audit(1757036415.299:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10796 comm="syz.4.1270" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000
[  328.823094][   T40] audit: type=1326 audit(1757036415.299:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10796 comm="syz.4.1270" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf710e579 code=0x7ffc0000
[  328.830028][   T40] audit: type=1326 audit(1757036415.299:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10796 comm="syz.4.1270" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000
[  328.836765][   T40] audit: type=1326 audit(1757036415.299:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10796 comm="syz.4.1270" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000
[  328.843613][   T40] audit: type=1326 audit(1757036415.299:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10796 comm="syz.4.1270" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000
[  328.850420][   T40] audit: type=1326 audit(1757036415.299:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10796 comm="syz.4.1270" exe="/syz-executor" sig=0 arch=40000003 syscall=170 compat=1 ip=0xf710e579 code=0x7ffc0000
[  328.857202][   T40] audit: type=1326 audit(1757036415.299:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10796 comm="syz.4.1270" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000
[  328.863915][   T40] audit: type=1326 audit(1757036415.299:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10796 comm="syz.4.1270" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000
[  328.864434][ T6679] usb 10-1: Using ep0 maxpacket: 8
[  328.875706][ T6679] usb 10-1: config 0 interface 0 has no altsetting 0
[  328.878002][ T6679] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  328.881417][ T6679] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.895173][ T6679] usb 10-1: config 0 descriptor??
[  329.320815][ T6679] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  329.522473][T10811] i2c i2c-2: unsupported multi-msg i2c transaction
[  329.533229][ T6679] usb 10-1: USB disconnect, device number 11
[  329.592933][T10829] ptrace attach of "/syz-executor exec"[7278] was attempted by "/syz-executor exec"[10829]
[  329.699210][T10829] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  329.744409][T10829] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  329.764461][T10829] kvm: requested 41904 ns i8254 timer period limited to 200000 ns
[  329.777060][T10830] net_ratelimit: 166 callbacks suppressed
[  329.777070][T10830] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  329.796169][ T3241] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  330.014173][ T3241] usb 7-1: Using ep0 maxpacket: 32
[  330.046590][ T3241] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  330.051935][ T3241] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  330.064173][ T3241] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  330.066760][ T3241] usb 7-1: Product: syz
[  330.074536][ T3241] usb 7-1: Manufacturer: syz
[  330.076403][ T3241] usb 7-1: SerialNumber: syz
[  330.086713][ T3241] usb 7-1: config 0 descriptor??
[  330.095166][T10827] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  330.632448][T10849] cgroup2: Unknown parameter 'memory_hugetlb_accoundpng'
[  330.964356][ T3241] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  331.129106][ T3241] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84
[  331.134161][ T3241] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023
[  331.138466][ T3241] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  331.154195][ T3241] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  331.162313][ T3241] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  331.166471][ T3241] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.176679][ T3241] usb 10-1: Product: syz
[  331.178563][ T3241] usb 10-1: Manufacturer: syz
[  331.187032][ T3241] usb 10-1: SerialNumber: syz
[  331.204731][ T3241] usb 10-1: config 0 descriptor??
[  331.213240][T10849] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  331.240900][ T3241] usb 10-1: ucan: probing device on interface #0
[  331.251693][ T3241] usb 10-1: ucan: invalid endpoint configuration
[  331.265911][ T3241] usb 10-1: ucan: probe failed; try to update the device firmware
[  332.591215][ T5975] usb 7-1: USB disconnect, device number 29
[  333.164912][    T9] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  333.314198][    T9] usb 9-1: Using ep0 maxpacket: 16
[  333.324494][    T9] usb 9-1: config 0 has an invalid interface number: 8 but max is 0
[  333.327313][    T9] usb 9-1: config 0 has no interface number 0
[  333.329890][    T9] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  333.333767][    T9] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  333.338598][    T9] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  333.341412][    T9] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  333.343825][    T9] usb 9-1: Product: syz
[  333.345476][    T9] usb 9-1: SerialNumber: syz
[  333.348045][    T9] usb 9-1: config 0 descriptor??
[  333.351231][    T9] cm109 9-1:0.8: invalid payload size 0, expected 4
[  333.354499][    T9] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input19
[  333.558082][    C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  333.558458][   T24] usb 9-1: USB disconnect, device number 21
[  333.560734][    C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  333.578680][T10873] netlink: 'syz.2.1295': attribute type 1 has an invalid length.
[  333.581460][T10873] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.823920][   T40] audit: type=1326 audit(1757036420.309:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10866 comm="syz.4.1293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000
[  333.831629][   T40] audit: type=1326 audit(1757036420.319:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10866 comm="syz.4.1293" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf710e579 code=0x7ffc0000
[  333.851567][   T40] audit: type=1326 audit(1757036420.319:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10866 comm="syz.4.1293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000
[  333.853087][    T9] usb 10-1: USB disconnect, device number 12
[  333.899547][   T40] audit: type=1326 audit(1757036420.319:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10866 comm="syz.4.1293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000
[  333.908790][   T40] audit: type=1326 audit(1757036420.319:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10866 comm="syz.4.1293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000
[  333.915411][   T24] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  333.916517][   T40] audit: type=1326 audit(1757036420.319:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10866 comm="syz.4.1293" exe="/syz-executor" sig=0 arch=40000003 syscall=170 compat=1 ip=0xf710e579 code=0x7ffc0000
[  333.927533][   T40] audit: type=1326 audit(1757036420.319:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10866 comm="syz.4.1293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000
[  333.936698][   T40] audit: type=1326 audit(1757036420.319:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10866 comm="syz.4.1293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000
[  334.074933][T10880] bridge0: the hash_elasticity option has been deprecated and is always 16
[  334.080047][T10880] bridge0: entered allmulticast mode
[  334.732785][T10885] syz.0.1298 (10885): drop_caches: 2
[  334.734741][ T6679] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  334.739313][T10885] syz.0.1298 (10885): drop_caches: 2
[  334.773186][T10887] ceph: No mds server is up or the cluster is laggy
[  334.944486][ T6679] usb 7-1: Using ep0 maxpacket: 32
[  334.954641][ T6679] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  334.970863][ T6679] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  334.973699][ T6679] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  334.994851][ T6679] usb 7-1: Product: syz
[  334.996207][ T6679] usb 7-1: Manufacturer: syz
[  334.997718][ T6679] usb 7-1: SerialNumber: syz
[  335.014831][ T6679] usb 7-1: config 0 descriptor??
[  335.017272][T10889] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  335.176362][T10898] block nbd0: server does not support multiple connections per device.
[  335.181696][T10898] block nbd0: shutting down sockets
[  336.534630][   T40] audit: type=1326 audit(1757036423.019:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10928 comm="syz.5.1310" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000
[  336.550836][   T40] audit: type=1326 audit(1757036423.029:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10928 comm="syz.5.1310" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000
[  337.643332][   T34] usb 7-1: USB disconnect, device number 30
[  338.314110][ T7913] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[  338.472778][T10970] FAULT_INJECTION: forcing a failure.
[  338.472778][T10970] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  338.479860][T10970] CPU: 0 UID: 0 PID: 10970 Comm: syz.5.1322 Not tainted syzkaller #0 PREEMPT(full) 
[  338.479884][T10970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  338.479895][T10970] Call Trace:
[  338.479901][T10970]  <TASK>
[  338.479908][T10970]  dump_stack_lvl+0x16c/0x1f0
[  338.479936][T10970]  should_fail_ex+0x512/0x640
[  338.479964][T10970]  _copy_from_user+0x2e/0xd0
[  338.479993][T10970]  do_compat_sigaltstack+0xf6/0x310
[  338.480018][T10970]  ? __pfx_do_compat_sigaltstack+0x10/0x10
[  338.480042][T10970]  ? ia32_restore_sigcontext+0x451/0x630
[  338.480069][T10970]  ? __pfx_ia32_restore_sigcontext+0x10/0x10
[  338.480102][T10970]  ? rcu_is_watching+0x12/0xc0
[  338.480135][T10970]  ? _raw_spin_unlock_irq+0x23/0x50
[  338.480156][T10970]  ? lockdep_hardirqs_on+0x7c/0x110
[  338.480181][T10970]  compat_restore_altstack+0x17/0x40
[  338.480205][T10970]  __do_compat_sys_rt_sigreturn+0x195/0x1f0
[  338.480232][T10970]  ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10
[  338.480262][T10970]  ? rcu_is_watching+0x12/0xc0
[  338.480283][T10970]  do_int80_emulation+0x104/0x460
[  338.480308][T10970]  asm_int80_emulation+0x1a/0x20
[  338.480322][T10970] RIP: 0023:0xf704e577
[  338.480335][T10970] Code: 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 <cd> 80 5d 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00
[  338.480352][T10970] RSP: 002b:00000000f541d55c EFLAGS: 00000296
[  338.480366][T10970] RAX: 0000000000000139 RBX: 0000000000000006 RCX: 0000000000000000
[  338.480377][T10970] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000004
[  338.480386][T10970] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  338.480396][T10970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  338.480406][T10970] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  338.480428][T10970]  </TASK>
[  338.484174][ T7913] usb 9-1: Using ep0 maxpacket: 16
[  338.555527][ T7913] usb 9-1: config 0 has an invalid interface number: 8 but max is 0
[  338.558561][ T7913] usb 9-1: config 0 has no interface number 0
[  338.560620][ T7913] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  338.564032][ T7913] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  338.568637][ T7913] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  338.571476][ T7913] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  338.574891][ T7913] usb 9-1: Product: syz
[  338.609933][ T7913] usb 9-1: SerialNumber: syz
[  338.613790][ T7913] usb 9-1: config 0 descriptor??
[  338.618754][ T7913] cm109 9-1:0.8: invalid payload size 0, expected 4
[  338.622069][ T7913] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input20
[  338.820168][    C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  338.823021][    C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  338.825809][    C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  338.828797][    C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  338.831083][ T7913] usb 9-1: USB disconnect, device number 22
[  338.832994][    C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  338.833005][    C1] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  338.845270][ T7913] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  339.202073][T10984] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1327'.
[  339.305768][T10989] erspan0: left allmulticast mode
[  339.307430][T10989] erspan0: left promiscuous mode
[  339.309107][T10989] bridge0: port 1(erspan0) entered disabled state
[  339.327520][T10989] bond0: (slave bond_slave_0): Releasing backup interface
[  339.332982][T10989] bond0: (slave bond_slave_1): Releasing backup interface
[  339.340244][T10989] team0: Port device team_slave_0 removed
[  339.347055][T10989] team0: Port device team_slave_1 removed
[  339.378645][T10989] team0: Mode changed to "loadbalance"
[  339.382702][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'.
[  339.514184][ T7913] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  339.545144][T10994] 9pnet_fd: Insufficient options for proto=fd
[  339.559149][T10994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1329'.
[  339.607526][T10996] FAULT_INJECTION: forcing a failure.
[  339.607526][T10996] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  339.611657][T10996] CPU: 3 UID: 0 PID: 10996 Comm: syz.4.1330 Not tainted syzkaller #0 PREEMPT(full) 
[  339.611671][T10996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  339.611677][T10996] Call Trace:
[  339.611681][T10996]  <TASK>
[  339.611686][T10996]  dump_stack_lvl+0x16c/0x1f0
[  339.611704][T10996]  should_fail_ex+0x512/0x640
[  339.611721][T10996]  _copy_to_user+0x32/0xd0
[  339.611731][T10996]  snd_pcm_oss_read2+0x294/0x410
[  339.611745][T10996]  ? __pfx_snd_pcm_oss_read2+0x10/0x10
[  339.611754][T10996]  ? snd_pcm_kernel_ioctl+0x267/0x2e0
[  339.611770][T10996]  snd_pcm_oss_read+0x5d3/0x760
[  339.611783][T10996]  ? __pfx_snd_pcm_oss_read+0x10/0x10
[  339.611794][T10996]  vfs_read+0x1e4/0xcf0
[  339.611823][T10996]  ? __pfx_vfs_read+0x10/0x10
[  339.611833][T10996]  ? find_held_lock+0x2b/0x80
[  339.611844][T10996]  ? __fget_files+0x204/0x3c0
[  339.611857][T10996]  ? __fget_files+0x20e/0x3c0
[  339.611867][T10996]  ? handle_mm_fault+0x1c0/0xd10
[  339.611881][T10996]  ksys_read+0x12a/0x250
[  339.611892][T10996]  ? __pfx_ksys_read+0x10/0x10
[  339.611905][T10996]  ? rcu_is_watching+0x12/0xc0
[  339.611918][T10996]  __do_fast_syscall_32+0x7c/0x3a0
[  339.611933][T10996]  do_fast_syscall_32+0x32/0x80
[  339.611947][T10996]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  339.611960][T10996] RIP: 0023:0xf710e579
[  339.611969][T10996] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  339.611979][T10996] RSP: 002b:00000000f54fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000003
[  339.611989][T10996] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800011c0
[  339.611996][T10996] RDX: 00000000200021d5 RSI: 0000000000000000 RDI: 0000000000000000
[  339.612002][T10996] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  339.612007][T10996] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  339.612013][T10996] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  339.612026][T10996]  </TASK>
[  339.744058][ T7913] usb 7-1: Using ep0 maxpacket: 16
[  339.747104][ T7913] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[  339.749887][ T7913] usb 7-1: config 0 has no interface number 0
[  339.751823][ T7913] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  339.755891][ T7913] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  339.760454][ T7913] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  339.763543][ T7913] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  339.766078][ T7913] usb 7-1: Product: syz
[  339.767696][ T7913] usb 7-1: SerialNumber: syz
[  339.770707][ T7913] usb 7-1: config 0 descriptor??
[  339.775839][ T7913] cm109 7-1:0.8: invalid payload size 0, expected 4
[  339.779467][ T7913] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input21
[  339.964237][   T24] usb 9-1: new full-speed USB device number 23 using dummy_hcd
[  339.978934][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  339.981140][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  339.983823][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  339.986166][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  339.988328][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  339.990374][ T7913] usb 7-1: USB disconnect, device number 31
[  339.992144][    C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  339.996496][ T7913] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  340.145517][   T24] usb 9-1: too many configurations: 109, using maximum allowed: 8
[  340.149457][   T24] usb 9-1: unable to read config index 0 descriptor/start: -61
[  340.152769][   T24] usb 9-1: can't read configurations, error -61
[  340.167058][T11003] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  340.169902][T11003] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  340.175302][T11003] vhci_hcd vhci_hcd.0: Device attached
[  340.177686][T11006] vhci_hcd: connection closed
[  340.177946][   T74] vhci_hcd: stop threads
[  340.181856][   T74] vhci_hcd: release socket
[  340.184090][   T74] vhci_hcd: disconnect device
[  340.294124][   T24] usb 9-1: new full-speed USB device number 24 using dummy_hcd
[  340.445447][   T24] usb 9-1: too many configurations: 109, using maximum allowed: 8
[  340.449045][   T24] usb 9-1: unable to read config index 0 descriptor/start: -61
[  340.451840][   T24] usb 9-1: can't read configurations, error -61
[  340.455592][   T24] usb usb9-port1: attempt power cycle
[  340.804349][   T24] usb 9-1: new full-speed USB device number 25 using dummy_hcd
[  340.839557][   T24] usb 9-1: too many configurations: 109, using maximum allowed: 8
[  340.857494][   T24] usb 9-1: unable to read config index 0 descriptor/start: -61
[  340.862851][   T24] usb 9-1: can't read configurations, error -61
[  341.004631][   T24] usb 9-1: new full-speed USB device number 26 using dummy_hcd
[  341.023596][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1337'.
[  341.028851][   T24] usb 9-1: too many configurations: 109, using maximum allowed: 8
[  341.030852][T11020] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1337'.
[  341.043403][   T24] usb 9-1: unable to read config index 0 descriptor/start: -61
[  341.051656][   T24] usb 9-1: can't read configurations, error -61
[  341.062467][   T24] usb usb9-port1: unable to enumerate USB device
[  341.324518][T11020] Invalid ELF header len 8
[  342.064982][ T5975] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  342.225926][ T5975] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  342.230033][ T5975] usb 10-1: config 0 interface 0 has no altsetting 0
[  342.245810][ T5975] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  342.249638][ T5975] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  342.253065][ T5975] usb 10-1: Product: syz
[  342.264153][ T5975] usb 10-1: Manufacturer: syz
[  342.274146][ T5975] usb 10-1: SerialNumber: syz
[  342.279116][ T5975] usb 10-1: config 0 descriptor??
[  342.286990][ T5975] usb 10-1: selecting invalid altsetting 0
[  342.497788][ T6679] usb 10-1: USB disconnect, device number 13
[  342.723561][T11049] lo speed is unknown, defaulting to 1000
[  343.863088][T11070] input: syz1 as /devices/virtual/input/input22
[  343.897762][T11068] can: request_module (can-proto-0) failed.
[  344.154108][   T24] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  344.304341][   T24] usb 7-1: Using ep0 maxpacket: 16
[  344.307294][   T24] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[  344.309807][   T24] usb 7-1: config 0 has no interface number 0
[  344.334125][   T24] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  344.338711][   T24] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  344.364651][   T24] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  344.367483][   T24] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  344.369944][   T24] usb 7-1: Product: syz
[  344.371263][   T24] usb 7-1: SerialNumber: syz
[  344.379001][   T24] usb 7-1: config 0 descriptor??
[  344.384366][   T24] cm109 7-1:0.8: invalid payload size 0, expected 4
[  344.388215][   T24] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input23
[  344.588619][    C2] cm109_urb_ctl_callback: 1 callbacks suppressed
[  344.588634][    C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  344.597903][    C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  344.600598][    C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  344.602842][   T24] usb 7-1: USB disconnect, device number 32
[  344.605474][    C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  344.605487][    C2] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  344.617907][   T24] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  344.690707][T11099] netlink: 'syz.0.1354': attribute type 39 has an invalid length.
[  344.696734][T11099] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1354'.
[  344.703016][T11099] random: crng reseeded on system resumption
[  344.903580][T11096] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  345.386238][ T7913] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  345.536887][T11109] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1359'.
[  345.574145][ T7913] usb 7-1: Using ep0 maxpacket: 32
[  345.583454][ T7913] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  345.590800][ T3241] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  345.620452][ T7913] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  345.634267][ T7913] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  345.636946][ T7913] usb 7-1: Product: syz
[  345.638384][ T7913] usb 7-1: Manufacturer: syz
[  345.639965][ T7913] usb 7-1: SerialNumber: syz
[  345.646641][ T7913] usb 7-1: config 0 descriptor??
[  345.652017][T11104] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  345.764091][ T3241] usb 10-1: Using ep0 maxpacket: 8
[  345.776100][ T3241] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  345.781036][ T3241] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  345.789177][ T3241] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  345.804093][ T3241] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  345.807700][ T3241] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  345.816709][ T3241] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  345.822744][ T3241] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  345.832038][ T3241] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  345.841805][ T3241] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  345.849864][ T3241] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  345.864924][ T3241] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  345.870809][ T3241] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  345.881217][ T3241] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  345.890698][ T3241] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  345.899921][ T3241] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  345.913807][ T3241] usb 10-1: string descriptor 0 read error: -22
[  345.916050][ T3241] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  345.919308][ T3241] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.928300][ T3241] adutux 10-1:168.0: ADU100  now attached to /dev/usb/adutux1
[  345.939837][ T3241] usb 7-1: USB disconnect, device number 33
[  345.944711][ T5973] Bluetooth: hci2: command 0x0401 tx timeout
[  345.947223][   T34] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  345.949453][   T34] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  345.956614][ T5386] udevd[5386]: worker [9940] terminated by signal 33 (Unknown signal 33)
[  345.959214][ T5386] udevd[5386]: worker [9940] failed while handling '/devices/platform/dummy_hcd.5/usb10/10-1'
[  345.970615][ T5386] udevd[5386]: worker [10221] terminated by signal 33 (Unknown signal 33)
[  345.973496][ T5386] udevd[5386]: worker [10221] failed while handling '/devices/virtual/mac80211_hwsim/hwsim12/ieee80211/phy15/rfkill19'
[  345.978906][ T5386] udevd[5386]: worker [9906] terminated by signal 33 (Unknown signal 33)
[  345.981628][ T5386] udevd[5386]: worker [9906] failed while handling '/devices/platform/dummy_hcd.5/usb10/10-1/10-1:168.0'
[  346.138280][ T5975] usb 10-1: USB disconnect, device number 14
[  347.044112][   T24] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  347.194104][   T24] usb 7-1: Using ep0 maxpacket: 32
[  347.199913][   T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  347.206781][   T24] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  347.210600][   T24] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  347.214199][   T24] usb 7-1: Product: syz
[  347.216127][   T24] usb 7-1: Manufacturer: syz
[  347.218250][   T24] usb 7-1: SerialNumber: syz
[  347.223200][   T24] usb 7-1: config 0 descriptor??
[  347.226141][T11127] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  347.532045][ T1340] usb 7-1: USB disconnect, device number 34
[  347.550552][T11134] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1368'.
[  347.557825][   T55] IPVS: starting estimator thread 0...
[  347.559584][T11134] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  347.626010][ T5973] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  347.644117][T11135] IPVS: using max 29 ests per chain, 69600 per kthread
[  348.014925][ T5973] Bluetooth: hci3: command 0x0c1a tx timeout
[  348.015009][   T34] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[  348.015056][   T24] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  348.022248][   T34] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[  348.164107][   T24] usb 10-1: Using ep0 maxpacket: 16
[  348.171254][   T24] usb 10-1: config 0 has no interfaces?
[  348.173626][   T24] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  348.177995][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.183285][   T24] usb 10-1: config 0 descriptor??
[  348.399732][ T1340] usb 10-1: USB disconnect, device number 15
[  349.100611][T11163] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.1375'.
[  350.105345][   T34] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  350.105805][ T5973] Bluetooth: hci1: command 0x0c1a tx timeout
[  350.107995][   T34] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  350.396349][T11184] netlink: 'syz.5.1381': attribute type 16 has an invalid length.
[  350.404312][   T24] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[  350.524078][ T5975] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  350.554122][   T24] usb 9-1: Using ep0 maxpacket: 8
[  350.558626][   T24] usb 9-1: config 0 interface 0 has no altsetting 0
[  350.561523][   T24] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  350.565572][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.571801][   T24] usb 9-1: config 0 descriptor??
[  350.658596][ T5975] usb 7-1: device descriptor read/64, error -71
[  350.894415][ T5975] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  350.980270][   T24] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  351.024135][ T5975] usb 7-1: device descriptor read/64, error -71
[  351.139368][ T5975] usb usb7-port1: attempt power cycle
[  351.182852][T11178] i2c i2c-2: unsupported multi-msg i2c transaction
[  351.188860][   T24] usb 9-1: USB disconnect, device number 27
[  351.484120][ T5975] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  351.514491][ T5975] usb 7-1: device descriptor read/8, error -71
[  351.764507][ T5975] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  351.784635][ T5975] usb 7-1: device descriptor read/8, error -71
[  351.922373][ T5975] usb usb7-port1: unable to enumerate USB device
[  354.264663][   T34] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  354.414759][   T34] usb 7-1: Using ep0 maxpacket: 8
[  354.416086][   T34] usb 7-1: config 0 interface 0 has no altsetting 0
[  354.419615][   T34] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  354.419636][   T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.421506][   T34] usb 7-1: config 0 descriptor??
[  354.842270][   T34] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  355.038001][T11220] i2c i2c-2: unsupported multi-msg i2c transaction
[  355.041432][   T24] usb 7-1: USB disconnect, device number 39
[  359.394556][ T6679] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[  359.572986][ T6679] usb 9-1: Using ep0 maxpacket: 32
[  359.597089][ T6679] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  359.655165][ T6679] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  359.658171][ T6679] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  359.660715][ T6679] usb 9-1: Product: syz
[  359.662079][ T6679] usb 9-1: Manufacturer: syz
[  359.663531][ T6679] usb 9-1: SerialNumber: syz
[  359.667478][ T6679] usb 9-1: config 0 descriptor??
[  359.670159][T11271] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  359.956820][ T6679] usb 9-1: USB disconnect, device number 28
[  360.904175][   T24] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  361.066752][   T24] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  361.071403][   T24] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  361.093267][   T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  361.124758][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.145648][T11278] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  361.153812][   T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  361.362904][ T6679] usb 7-1: USB disconnect, device number 40
[  361.422043][T11288] udevd[11288]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  362.706155][T11300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1417'.
[  362.709834][T11300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1417'.
[  362.713778][T11300] netlink: 'syz.4.1417': attribute type 18 has an invalid length.
[  362.935653][T11307] FAULT_INJECTION: forcing a failure.
[  362.935653][T11307] name failslab, interval 1, probability 0, space 0, times 0
[  362.945132][T11307] CPU: 3 UID: 0 PID: 11307 Comm: syz.4.1419 Not tainted syzkaller #0 PREEMPT(full) 
[  362.945149][T11307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  362.945155][T11307] Call Trace:
[  362.945159][T11307]  <TASK>
[  362.945163][T11307]  dump_stack_lvl+0x16c/0x1f0
[  362.945196][T11307]  should_fail_ex+0x512/0x640
[  362.945216][T11307]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  362.945230][T11307]  should_failslab+0xc2/0x120
[  362.945244][T11307]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  362.945256][T11307]  ? __alloc_skb+0x2b2/0x380
[  362.945272][T11307]  __alloc_skb+0x2b2/0x380
[  362.945284][T11307]  ? __pfx___alloc_skb+0x10/0x10
[  362.945298][T11307]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  362.945315][T11307]  netlink_alloc_large_skb+0x69/0x130
[  362.945330][T11307]  netlink_sendmsg+0x6a1/0xdd0
[  362.945347][T11307]  ? __pfx_netlink_sendmsg+0x10/0x10
[  362.945363][T11307]  ? aa_sock_msg_perm.constprop.0+0x100/0x1d0
[  362.945377][T11307]  ____sys_sendmsg+0xa95/0xc70
[  362.945388][T11307]  ? __pfx_____sys_sendmsg+0x10/0x10
[  362.945397][T11307]  ? get_compat_msghdr+0x11a/0x170
[  362.945416][T11307]  ___sys_sendmsg+0x134/0x1d0
[  362.945432][T11307]  ? __pfx____sys_sendmsg+0x10/0x10
[  362.945452][T11307]  ? find_held_lock+0x2b/0x80
[  362.945471][T11307]  __sys_sendmsg+0x16d/0x220
[  362.945485][T11307]  ? __pfx___sys_sendmsg+0x10/0x10
[  362.945498][T11307]  ? __pfx_bpf_trace_run2+0x10/0x10
[  362.945515][T11307]  ? syscall_trace_enter+0x1cb/0x240
[  362.945533][T11307]  ? rcu_is_watching+0x12/0xc0
[  362.945545][T11307]  __do_fast_syscall_32+0x7c/0x3a0
[  362.945560][T11307]  do_fast_syscall_32+0x32/0x80
[  362.945574][T11307]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  362.945587][T11307] RIP: 0023:0xf710e579
[  362.945596][T11307] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  362.945606][T11307] RSP: 002b:00000000f54fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  362.945616][T11307] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280
[  362.945622][T11307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  362.945628][T11307] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  362.945634][T11307] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  362.945640][T11307] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  362.945652][T11307]  </TASK>
[  363.564092][   T24] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[  363.727934][   T24] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  363.731074][   T24] usb 9-1: config 0 interface 0 has no altsetting 0
[  363.764797][   T24] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  363.767825][   T24] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  363.770455][   T24] usb 9-1: Product: syz
[  363.794114][   T24] usb 9-1: Manufacturer: syz
[  363.796205][   T24] usb 9-1: SerialNumber: syz
[  363.802477][   T24] usb 9-1: config 0 descriptor??
[  363.807834][   T24] usb 9-1: selecting invalid altsetting 0
[  364.053789][   T24] usb 9-1: USB disconnect, device number 29
[  365.006546][T11342] FAULT_INJECTION: forcing a failure.
[  365.006546][T11342] name failslab, interval 1, probability 0, space 0, times 0
[  365.011346][T11342] CPU: 0 UID: 0 PID: 11342 Comm: syz.2.1430 Not tainted syzkaller #0 PREEMPT(full) 
[  365.011368][T11342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  365.011379][T11342] Call Trace:
[  365.011385][T11342]  <TASK>
[  365.011392][T11342]  dump_stack_lvl+0x16c/0x1f0
[  365.011419][T11342]  should_fail_ex+0x512/0x640
[  365.011443][T11342]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  365.011467][T11342]  should_failslab+0xc2/0x120
[  365.011490][T11342]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  365.011510][T11342]  ? __alloc_skb+0x2b2/0x380
[  365.011536][T11342]  __alloc_skb+0x2b2/0x380
[  365.011556][T11342]  ? __pfx___alloc_skb+0x10/0x10
[  365.011580][T11342]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  365.011604][T11342]  netlink_alloc_large_skb+0x69/0x130
[  365.011627][T11342]  netlink_sendmsg+0x6a1/0xdd0
[  365.011652][T11342]  ? __pfx_netlink_sendmsg+0x10/0x10
[  365.011676][T11342]  ? aa_sock_msg_perm.constprop.0+0x100/0x1d0
[  365.011697][T11342]  ____sys_sendmsg+0xa95/0xc70
[  365.011716][T11342]  ? __pfx_____sys_sendmsg+0x10/0x10
[  365.011729][T11342]  ? get_compat_msghdr+0x11a/0x170
[  365.011760][T11342]  ___sys_sendmsg+0x134/0x1d0
[  365.011782][T11342]  ? __pfx____sys_sendmsg+0x10/0x10
[  365.011815][T11342]  ? find_held_lock+0x2b/0x80
[  365.011845][T11342]  __sys_sendmsg+0x16d/0x220
[  365.011867][T11342]  ? __pfx___sys_sendmsg+0x10/0x10
[  365.011897][T11342]  ? rcu_is_watching+0x12/0xc0
[  365.011917][T11342]  __do_fast_syscall_32+0x7c/0x3a0
[  365.011941][T11342]  do_fast_syscall_32+0x32/0x80
[  365.011963][T11342]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  365.011983][T11342] RIP: 0023:0xf7f38579
[  365.011996][T11342] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  365.012011][T11342] RSP: 002b:00000000f544655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  365.012042][T11342] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280
[  365.012052][T11342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  365.012060][T11342] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  365.012069][T11342] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  365.012078][T11342] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  365.012102][T11342]  </TASK>
[  366.109625][T11371] netlink: 14528 bytes leftover after parsing attributes in process `syz.2.1439'.
[  366.252721][T11378] netlink: 'syz.2.1442': attribute type 1 has an invalid length.
[  366.259794][T11378] netlink: 'syz.2.1442': attribute type 4 has an invalid length.
[  366.271869][T11378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1442'.
[  366.307196][T11378] syzkaller1: entered allmulticast mode
[  367.692986][T11392] FAULT_INJECTION: forcing a failure.
[  367.692986][T11392] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  367.699515][T11392] CPU: 0 UID: 0 PID: 11392 Comm: syz.4.1446 Not tainted syzkaller #0 PREEMPT(full) 
[  367.699538][T11392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  367.699548][T11392] Call Trace:
[  367.699554][T11392]  <TASK>
[  367.699563][T11392]  dump_stack_lvl+0x16c/0x1f0
[  367.699590][T11392]  should_fail_ex+0x512/0x640
[  367.699617][T11392]  _copy_from_user+0x2e/0xd0
[  367.699644][T11392]  move_addr_to_kernel+0x65/0x170
[  367.699663][T11392]  __sys_bind+0x11b/0x260
[  367.699681][T11392]  ? __pfx___sys_bind+0x10/0x10
[  367.699697][T11392]  ? __fget_files+0x20e/0x3c0
[  367.699724][T11392]  ? __pfx_ksys_write+0x10/0x10
[  367.699749][T11392]  __ia32_sys_bind+0x71/0xb0
[  367.699765][T11392]  ? syscall_enter_from_user_mode_prepare+0x68/0xe0
[  367.699789][T11392]  __do_fast_syscall_32+0x7c/0x3a0
[  367.699814][T11392]  do_fast_syscall_32+0x32/0x80
[  367.699837][T11392]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  367.699858][T11392] RIP: 0023:0xf710e579
[  367.699871][T11392] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  367.699886][T11392] RSP: 002b:00000000f54fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000169
[  367.699902][T11392] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140
[  367.699912][T11392] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000
[  367.699921][T11392] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  367.699930][T11392] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  367.699939][T11392] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  367.699960][T11392]  </TASK>
[  368.531124][T11403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1451'.
[  368.855121][ T1340] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  369.004415][ T1340] usb 7-1: Using ep0 maxpacket: 32
[  369.008908][ T1340] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  369.020441][ T1340] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  369.025190][ T1340] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  369.034541][ T1340] usb 7-1: Product: syz
[  369.038141][ T1340] usb 7-1: Manufacturer: syz
[  369.045276][ T1340] usb 7-1: SerialNumber: syz
[  369.051320][ T1340] usb 7-1: config 0 descriptor??
[  369.058375][T11411] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  370.777756][   T10] IPVS: starting estimator thread 0...
[  370.894570][T11424] IPVS: using max 46 ests per chain, 110400 per kthread
[  371.324433][ T1340] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[  371.474166][ T1340] usb 9-1: Using ep0 maxpacket: 16
[  371.477412][ T1340] usb 9-1: config 0 has an invalid interface number: 8 but max is 0
[  371.480093][ T1340] usb 9-1: config 0 has no interface number 0
[  371.482274][ T1340] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  371.492708][ T1340] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  371.506406][ T1340] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  371.514562][ T1340] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  371.523686][ T1340] usb 9-1: Product: syz
[  371.532035][ T1340] usb 9-1: SerialNumber: syz
[  371.539419][ T1340] usb 9-1: config 0 descriptor??
[  371.554907][ T1340] cm109 9-1:0.8: invalid payload size 0, expected 4
[  371.558211][ T1340] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input25
[  371.731110][T11431] FAULT_INJECTION: forcing a failure.
[  371.731110][T11431] name failslab, interval 1, probability 0, space 0, times 0
[  371.737601][T11431] CPU: 0 UID: 0 PID: 11431 Comm: syz.0.1458 Not tainted syzkaller #0 PREEMPT(full) 
[  371.737623][T11431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  371.737633][T11431] Call Trace:
[  371.737640][T11431]  <TASK>
[  371.737646][T11431]  dump_stack_lvl+0x16c/0x1f0
[  371.737672][T11431]  should_fail_ex+0x512/0x640
[  371.737693][T11431]  ? __kmalloc_noprof+0xbf/0x510
[  371.737710][T11431]  ? __vb2_queue_alloc+0x23e/0x1280
[  371.737729][T11431]  should_failslab+0xc2/0x120
[  371.737743][T11431]  __kmalloc_noprof+0xd2/0x510
[  371.737754][T11431]  ? bitmap_find_next_zero_area_off+0xb4/0xd0
[  371.737769][T11431]  __vb2_queue_alloc+0x23e/0x1280
[  371.737792][T11431]  vb2_core_reqbufs+0xa90/0xfe0
[  371.737805][T11431]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[  371.737823][T11431]  __vb2_init_fileio+0x3f1/0x1100
[  371.737833][T11431]  ? __mutex_lock+0x1c5/0x1060
[  371.737859][T11431]  __vb2_perform_fileio+0x9c2/0x1660
[  371.737873][T11431]  ? __pfx___vb2_perform_fileio+0x10/0x10
[  371.737884][T11431]  ? import_ubuf+0x1b6/0x220
[  371.737901][T11431]  vb2_fop_write+0x207/0x3f0
[  371.737918][T11431]  v4l2_write+0x229/0x360
[  371.737932][T11431]  ? __pfx_v4l2_write+0x10/0x10
[  371.737943][T11431]  vfs_writev+0x5df/0xde0
[  371.737960][T11431]  ? __pfx_vfs_writev+0x10/0x10
[  371.737972][T11431]  ? find_held_lock+0x2b/0x80
[  371.737991][T11431]  ? __fget_files+0x20e/0x3c0
[  371.738006][T11431]  ? do_pwritev+0x1a6/0x270
[  371.738016][T11431]  do_pwritev+0x1a6/0x270
[  371.738027][T11431]  ? __pfx_do_pwritev+0x10/0x10
[  371.738041][T11431]  ? rcu_is_watching+0x12/0xc0
[  371.738053][T11431]  __do_fast_syscall_32+0x7c/0x3a0
[  371.738069][T11431]  do_fast_syscall_32+0x32/0x80
[  371.738082][T11431]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  371.738095][T11431] RIP: 0023:0xf70be579
[  371.738104][T11431] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  371.738114][T11431] RSP: 002b:00000000f54ae55c EFLAGS: 00000296 ORIG_RAX: 000000000000014e
[  371.738124][T11431] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240
[  371.738131][T11431] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000d4bd
[  371.738137][T11431] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  371.738142][T11431] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  371.738148][T11431] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  371.738161][T11431]  </TASK>
[  371.754262][   T24] usb 7-1: USB disconnect, device number 41
[  371.769511][    C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  371.845680][    C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  371.848823][    C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  371.851936][ T1340] usb 9-1: USB disconnect, device number 30
[  371.855103][    C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  371.855124][    C3] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  371.863118][T11433] tmpfs: Bad value for 'mpol'
[  371.871655][ T1340] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  372.238497][T11444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1463'.
[  372.245337][T11444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1463'.
[  374.039432][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1468'.
[  375.703733][T11465] lo speed is unknown, defaulting to 1000
[  377.464096][   T24] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  377.624191][   T24] usb 7-1: Using ep0 maxpacket: 8
[  377.640898][   T24] usb 7-1: config 0 interface 0 has no altsetting 0
[  377.643717][   T24] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  377.647747][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.664994][   T24] usb 7-1: config 0 descriptor??
[  377.686267][T11476] ata1.00: invalid multi_count 128 ignored
[  377.745542][T11476] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1473'.
[  377.752710][T11476] xt_socket: unknown flags 0x50
[  378.085030][   T24] mcp2221 0003:04D8:00DD.000A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  378.096234][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  378.287531][T11473] i2c i2c-2: unsupported multi-msg i2c transaction
[  378.290863][ T6679] usb 7-1: USB disconnect, device number 42
[  380.794767][T11507] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  380.797410][T11507] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  380.802202][T11507] vhci_hcd vhci_hcd.0: Device attached
[  381.034104][ T5975] usb 37-1: new high-speed USB device number 2 using vhci_hcd
[  382.226507][T11509] vhci_hcd: connection closed
[  382.229379][   T13] vhci_hcd: stop threads
[  382.233316][   T13] vhci_hcd: release socket
[  382.241648][   T13] vhci_hcd: disconnect device
[  384.679991][   T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  384.684603][   T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  384.688070][   T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  384.691227][   T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  384.694046][   T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  384.709927][ T5973] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  384.714422][ T5973] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  384.720570][ T5973] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  384.727199][ T5973] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  384.731291][ T5973] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  384.765832][T11524] lo speed is unknown, defaulting to 1000
[  384.915607][T11524] chnl_net:caif_netlink_parms(): no params data found
[  385.317767][T11543] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1487'.
[  385.340707][T11524] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.343120][T11524] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.345804][T11524] bridge_slave_0: entered allmulticast mode
[  385.348480][T11524] bridge_slave_0: entered promiscuous mode
[  385.351653][T11524] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.355390][T11524] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.357951][T11524] bridge_slave_1: entered allmulticast mode
[  385.360734][T11524] bridge_slave_1: entered promiscuous mode
[  385.424493][   T24] usb 7-1: new full-speed USB device number 43 using dummy_hcd
[  385.587297][   T24] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[  385.590742][   T24] usb 7-1: config 0 has no interface number 0
[  385.593434][   T24] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  385.598587][   T24] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 29793, setting to 64
[  385.605146][   T24] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  385.608900][   T24] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  385.612250][   T24] usb 7-1: Product: syz
[  385.615184][   T24] usb 7-1: SerialNumber: syz
[  385.624868][   T24] usb 7-1: config 0 descriptor??
[  385.634808][T11537] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  385.640080][   T24] cm109 7-1:0.8: invalid payload size 64, expected 4
[  385.650799][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1488'.
[  385.654604][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1488'.
[  385.660581][   T24] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input26
[  385.848705][    C2] cm109 7-1:0.8: cm109_urb_irq_callback: urb status -71
[  385.931514][T11524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  386.814176][   T63] Bluetooth: hci4: command tx timeout
[  387.106421][ T5975] vhci_hcd: vhci_device speed not set
[  388.885320][T11563] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  388.894195][ T5973] Bluetooth: hci4: command tx timeout
[  389.394396][    C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  389.397481][    C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  389.400594][    C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  389.403577][    C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  389.406848][    C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  389.410002][    C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  389.413161][    C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  389.416265][    C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  389.419385][    C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  389.422452][    C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  389.430982][   T24] usb 7-1: USB disconnect, device number 43
[  389.433616][    C2] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  389.475820][   T24] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  389.863504][T11524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  389.894712][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1494'.
[  389.937389][T11524] team0: Port device team_slave_0 added
[  389.942656][T11524] team0: Port device team_slave_1 added
[  390.021067][T11524] batman_adv: batadv0: Adding interface: batadv_slave_0
[  390.024331][T11524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  390.057337][T11524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  390.078913][T11524] batman_adv: batadv0: Adding interface: batadv_slave_1
[  390.081709][T11524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  390.103485][T11524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  390.199762][T11524] hsr_slave_0: entered promiscuous mode
[  390.202741][T11524] hsr_slave_1: entered promiscuous mode
[  390.205628][T11524] debugfs: 'hsr0' already exists in 'hsr'
[  390.207875][T11524] Cannot create hsr debugfs directory
[  390.598358][T11524] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  390.991409][ T5973] Bluetooth: hci4: command 0x040f tx timeout
[  391.225531][T11524] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  391.940805][T11524] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  392.117694][T11577] lo speed is unknown, defaulting to 1000
[  392.127606][T11524] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  392.776160][T11524] 8021q: adding VLAN 0 to HW filter on device bond0
[  392.794291][T11524] 8021q: adding VLAN 0 to HW filter on device team0
[  392.830281][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state
[  392.833353][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state
[  392.897964][T11524] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  392.905241][T11524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  392.996985][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state
[  392.999835][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  393.054178][ T5973] Bluetooth: hci4: command 0x040f tx timeout
[  393.491534][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1498'.
[  393.495497][T11586] netlink: 'syz.2.1498': attribute type 5 has an invalid length.
[  393.500260][T11586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1498'.
[  393.512874][T11586] geneve2: entered promiscuous mode
[  393.515266][T11586] geneve2: entered allmulticast mode
[  393.522179][  T225] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  393.565617][  T225] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  393.569732][  T225] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  393.574979][  T225] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  393.666673][T11524] 8021q: adding VLAN 0 to HW filter on device batadv0
[  394.011819][T11524] veth0_vlan: entered promiscuous mode
[  394.051003][T11524] veth1_vlan: entered promiscuous mode
[  394.086433][T11524] veth0_macvtap: entered promiscuous mode
[  394.092589][T11524] veth1_macvtap: entered promiscuous mode
[  394.110160][T11524] batman_adv: batadv0: Interface activated: batadv_slave_0
[  394.122603][T11524] batman_adv: batadv0: Interface activated: batadv_slave_1
[  394.137130][ T1142] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  394.140836][ T1142] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  394.148500][ T1142] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  394.152175][ T1142] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  394.192731][T11609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1500'.
[  394.271125][  T225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.275092][  T225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.313079][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.316811][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  395.134268][ T5973] Bluetooth: hci4: command 0x040f tx timeout
[  397.934522][   T24] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[  398.224148][   T24] usb 9-1: Using ep0 maxpacket: 32
[  398.276072][   T24] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  398.454500][   T24] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  398.509603][   T24] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  398.513101][   T24] usb 9-1: Product: syz
[  398.515065][   T24] usb 9-1: Manufacturer: syz
[  398.517036][   T24] usb 9-1: SerialNumber: syz
[  398.536389][   T24] usb 9-1: config 0 descriptor??
[  398.539556][T11626] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  400.538575][ T6149] usb 9-1: USB disconnect, device number 31
[  401.650884][T11657] block nbd4: Attempted send on invalid socket
[  401.653533][T11657] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  401.657718][T11657] vxfs: unable to read disk superblock at 1
[  401.666109][T11657] block nbd4: Attempted send on invalid socket
[  401.668716][T11657] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  401.672458][T11657] vxfs: unable to read disk superblock at 8
[  401.675161][T11657] vxfs: can't find superblock.
[  406.546126][   T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  406.549722][   T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  406.553963][   T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  406.557851][   T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  406.562151][   T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  408.664174][   T63] Bluetooth: hci1: command tx timeout
[  410.441161][T11669] lo speed is unknown, defaulting to 1000
[  410.746562][   T63] Bluetooth: hci1: command tx timeout
[  410.804072][   T10] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[  411.043336][   T10] usb 9-1: Using ep0 maxpacket: 32
[  411.064977][   T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  411.070283][   T10] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  411.073099][   T10] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  411.088808][   T10] usb 9-1: Product: syz
[  411.090240][   T10] usb 9-1: Manufacturer: syz
[  411.092186][   T10] usb 9-1: SerialNumber: syz
[  411.165285][   T10] usb 9-1: config 0 descriptor??
[  411.168069][T11676] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  411.665466][   T10] usb 9-1: USB disconnect, device number 32
[  412.170710][T11686] cgroup: Bad value for 'name'
[  412.245154][T11686] netlink: 'syz.6.1514': attribute type 4 has an invalid length.
[  412.256239][   T13] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.814364][   T63] Bluetooth: hci1: command tx timeout
[  414.894119][   T63] Bluetooth: hci1: command tx timeout
[  419.209800][   T13] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.595426][   T13] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.679509][T11669] chnl_net:caif_netlink_parms(): no params data found
[  419.932080][   T13] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.751993][T11669] bridge0: port 1(bridge_slave_0) entered blocking state
[  433.764699][T11669] bridge0: port 1(bridge_slave_0) entered disabled state
[  433.768025][T11669] bridge_slave_0: entered allmulticast mode
[  433.773748][T11669] bridge_slave_0: entered promiscuous mode
[  433.797897][T11669] bridge0: port 2(bridge_slave_1) entered blocking state
[  433.802179][T11669] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.809160][T11669] bridge_slave_1: entered allmulticast mode
[  433.813289][T11669] bridge_slave_1: entered promiscuous mode
[  434.345280][ T6679] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[  434.535372][ T6679] usb 9-1: Using ep0 maxpacket: 32
[  434.574037][ T6679] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  434.579044][ T6679] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  434.581868][ T6679] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  434.591462][ T6679] usb 9-1: Product: syz
[  434.592870][ T6679] usb 9-1: Manufacturer: syz
[  434.595321][ T6679] usb 9-1: SerialNumber: syz
[  434.605724][ T6679] usb 9-1: config 0 descriptor??
[  434.612892][T11759] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  434.692204][   T13] dvmrp0 (unregistering): left allmulticast mode
[  435.209794][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  435.229389][   T13] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  435.257726][   T13] bond0 (unregistering): Released all slaves
[  435.318371][T11669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  435.323859][T11669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  435.472923][T11669] team0: Port device team_slave_0 added
[  435.553864][T11669] team0: Port device team_slave_1 added
[  435.567007][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1529'.
[  436.984614][  T841] usb 9-1: USB disconnect, device number 33
[  436.990566][   T13] hsr_slave_0: left promiscuous mode
[  437.036398][   T13] hsr_slave_1: left promiscuous mode
[  437.038746][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  437.043634][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  437.138344][   T13] veth1_macvtap: left promiscuous mode
[  437.141878][   T13] veth0_macvtap: left promiscuous mode
[  437.146271][   T13] veth1_vlan: left promiscuous mode
[  437.148040][   T13] veth0_vlan: left promiscuous mode
[  439.192634][   T13] team0 (unregistering): Port device team_slave_1 removed
[  439.329159][   T13] team0 (unregistering): Port device team_slave_0 removed
[  439.548699][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  440.056198][T11669] batman_adv: batadv0: Adding interface: batadv_slave_0
[  440.059050][T11669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  440.069521][T11669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  440.084406][T11669] batman_adv: batadv0: Adding interface: batadv_slave_1
[  440.087383][T11669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  440.101019][T11669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.252749][T11669] hsr_slave_0: entered promiscuous mode
[  440.266299][T11669] hsr_slave_1: entered promiscuous mode
[  440.269172][T11669] debugfs: 'hsr0' already exists in 'hsr'
[  440.271650][T11669] Cannot create hsr debugfs directory
[  440.334529][T11810] netlink: 'syz.6.1535': attribute type 16 has an invalid length.
[  440.552169][T11669] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  440.561815][T11669] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  440.587277][T11669] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  440.604223][T11669] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  440.826394][T11669] 8021q: adding VLAN 0 to HW filter on device bond0
[  440.843252][T11669] 8021q: adding VLAN 0 to HW filter on device team0
[  440.868418][T11729] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.871480][T11729] bridge0: port 1(bridge_slave_0) entered forwarding state
[  440.900292][T11729] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.903018][T11729] bridge0: port 2(bridge_slave_1) entered forwarding state
[  440.989888][   T13] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  441.129818][   T13] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  441.248146][   T13] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  441.325972][   T13] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  441.341305][T11669] 8021q: adding VLAN 0 to HW filter on device batadv0
[  441.450069][   T13] bridge_slave_1: left allmulticast mode
[  441.451882][   T13] bridge_slave_1: left promiscuous mode
[  441.453851][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.488540][   T13] bridge_slave_0: left allmulticast mode
[  441.490439][   T13] bridge_slave_0: left promiscuous mode
[  441.492864][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.704678][   T24] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[  441.867778][   T24] usb 9-1: Using ep0 maxpacket: 32
[  441.872317][   T24] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  441.877813][   T24] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  441.880617][   T24] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  441.884205][   T24] usb 9-1: Product: syz
[  441.887044][   T24] usb 9-1: Manufacturer: syz
[  441.888523][   T24] usb 9-1: SerialNumber: syz
[  441.891434][   T24] usb 9-1: config 0 descriptor??
[  441.896154][T11855] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  442.199753][   T24] usb 9-1: USB disconnect, device number 34
[  442.274602][   T13] bond0 (unregistering): left promiscuous mode
[  442.276683][   T13] bond_slave_0: left promiscuous mode
[  442.278792][   T13] bond_slave_1: left promiscuous mode
[  442.284282][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  442.288797][   T13] bond_slave_0: left allmulticast mode
[  442.293561][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  442.298452][   T13] bond_slave_1: left allmulticast mode
[  442.300373][   T13] bond0 (unregistering): Released all slaves
[  442.395989][T11669] veth0_vlan: entered promiscuous mode
[  442.403447][T11669] veth1_vlan: entered promiscuous mode
[  442.421745][   T13] : left promiscuous mode
[  442.465922][T11669] veth0_macvtap: entered promiscuous mode
[  442.471724][T11669] veth1_macvtap: entered promiscuous mode
[  442.499499][   T13] tipc: Left network mode
[  442.506876][T11669] batman_adv: batadv0: Interface activated: batadv_slave_0
[  442.516062][T11669] batman_adv: batadv0: Interface activated: batadv_slave_1
[  442.529000][   T61] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  442.546427][   T61] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  442.573875][   T61] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  442.590083][   T61] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  442.657657][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  442.663056][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  442.687653][  T225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  442.690924][  T225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  443.264603][ T6679] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[  443.271977][   T13] batadv0: left promiscuous mode
[  443.293065][   T13] hsr_slave_0: left promiscuous mode
[  443.297779][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  443.300899][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  443.304738][   T13] batman_adv: batadv0: Interface deactivated: dummy0
[  443.306935][   T13] batman_adv: batadv0: Removing interface: dummy0
[  443.414078][ T6679] usb 9-1: Using ep0 maxpacket: 8
[  443.422997][ T6679] usb 9-1: config 0 interface 0 has no altsetting 0
[  443.426295][ T6679] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  443.429239][ T6679] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.441163][ T6679] usb 9-1: config 0 descriptor??
[  443.857077][ T6679] mcp2221 0003:04D8:00DD.000B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  444.066022][T11885] i2c i2c-2: unsupported multi-msg i2c transaction
[  444.069634][   T24] usb 9-1: USB disconnect, device number 35
[  444.099314][   T13] team0 (unregistering): Port device team_slave_1 removed
[  444.230541][   T13] team0 (unregistering): Port device team_slave_0 removed
[  444.712345][T11901] kAFS: No cell specified
[  444.882263][T11901] siw: device registration error -23
[  445.703037][T11907] befs: (nbd4): No write support. Marking filesystem read-only
[  445.707478][T11907] block nbd4: Attempted send on invalid socket
[  445.709946][T11907] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  445.713654][T11907] befs: (nbd4): unable to read superblock
[  446.421549][ T6149] lo speed is unknown, defaulting to 1000
[  446.431658][ T6149] syz2: Port: 1 Link DOWN
[  447.358521][   T13] IPVS: stop unused estimator thread 0...
[  447.685762][T11923] team0: left allmulticast mode
[  447.688417][T11923] team_slave_0: left allmulticast mode
[  447.691435][T11923] team_slave_1: left allmulticast mode
[  447.695059][T11923] team0: left promiscuous mode
[  447.697380][T11923] team_slave_0: left promiscuous mode
[  447.705594][T11923] team_slave_1: left promiscuous mode
[  447.716024][T11923] bridge0: port 3(team0) entered disabled state
[  447.780425][T11923] bridge_slave_1: left allmulticast mode
[  447.783855][T11923] bridge_slave_1: left promiscuous mode
[  447.791725][T11923] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.824770][T11923] bridge_slave_0: left allmulticast mode
[  447.827379][T11923] bridge_slave_0: left promiscuous mode
[  447.834506][T11923] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.969874][T11938] /dev/sr0: Can't open blockdev
[  451.088173][T11957] program syz.4.1553 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  451.379092][ T5973] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  451.385506][ T5973] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  451.389682][ T5973] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  451.393949][ T5973] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  451.394363][ T5975] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[  451.400504][ T5973] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  451.549207][T11963] chnl_net:caif_netlink_parms(): no params data found
[  451.564068][ T5975] usb 9-1: Using ep0 maxpacket: 16
[  451.566840][ T5975] usb 9-1: too many configurations: 207, using maximum allowed: 8
[  451.575979][ T5975] usb 9-1: unable to read config index 0 descriptor/start: -61
[  451.583409][ T5975] usb 9-1: can't read configurations, error -61
[  451.724124][ T5975] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[  451.750548][T11963] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.753552][T11963] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.757249][T11963] bridge_slave_0: entered allmulticast mode
[  451.761077][T11963] bridge_slave_0: entered promiscuous mode
[  451.766945][T11963] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.769963][T11963] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.772925][T11963] bridge_slave_1: entered allmulticast mode
[  451.779954][T11963] bridge_slave_1: entered promiscuous mode
[  451.860222][T11963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  451.867447][T11963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  451.884181][ T5975] usb 9-1: Using ep0 maxpacket: 16
[  451.890457][ T5975] usb 9-1: too many configurations: 207, using maximum allowed: 8
[  451.894264][ T5975] usb 9-1: unable to read config index 0 descriptor/start: -61
[  451.896686][ T5975] usb 9-1: can't read configurations, error -61
[  451.899722][ T5975] usb usb9-port1: attempt power cycle
[  451.985573][T11963] team0: Port device team_slave_0 added
[  451.990554][T11963] team0: Port device team_slave_1 added
[  452.087742][T11963] batman_adv: batadv0: Adding interface: batadv_slave_0
[  452.090651][T11963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  452.114753][T11963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  452.121191][T11963] batman_adv: batadv0: Adding interface: batadv_slave_1
[  452.125029][T11963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  452.139847][T11963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  452.229987][T11963] hsr_slave_0: entered promiscuous mode
[  452.233315][T11963] hsr_slave_1: entered promiscuous mode
[  452.241207][ T5975] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[  452.243348][T11963] debugfs: 'hsr0' already exists in 'hsr'
[  452.247066][T11963] Cannot create hsr debugfs directory
[  452.264802][ T5975] usb 9-1: Using ep0 maxpacket: 16
[  452.268346][ T5975] usb 9-1: too many configurations: 207, using maximum allowed: 8
[  452.272537][ T5975] usb 9-1: unable to read config index 0 descriptor/start: -61
[  452.276992][ T5975] usb 9-1: can't read configurations, error -61
[  452.414302][ T5975] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[  452.436137][ T5975] usb 9-1: Using ep0 maxpacket: 16
[  452.438770][ T5975] usb 9-1: too many configurations: 207, using maximum allowed: 8
[  452.443814][ T5975] usb 9-1: unable to read config index 0 descriptor/start: -61
[  452.450169][ T5975] usb 9-1: can't read configurations, error -61
[  452.453164][ T5975] usb usb9-port1: unable to enumerate USB device
[  452.629320][T11963] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  452.637114][T11963] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  452.644408][T11963] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  452.652404][T11963] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  452.739668][T11963] 8021q: adding VLAN 0 to HW filter on device bond0
[  452.757077][T11963] 8021q: adding VLAN 0 to HW filter on device team0
[  452.769102][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.772329][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  452.790279][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.793224][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  452.874421][ T5975] usb 12-1: new high-speed USB device number 2 using dummy_hcd
[  453.104551][ T5975] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  453.113003][ T5975] usb 12-1: config 0 interface 0 has no altsetting 0
[  453.123224][ T5975] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  453.141154][ T5975] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  453.144985][ T5975] usb 12-1: Product: syz
[  453.146818][ T5975] usb 12-1: Manufacturer: syz
[  453.149006][ T5975] usb 12-1: SerialNumber: syz
[  453.165144][ T5975] usb 12-1: config 0 descriptor??
[  453.223841][T11963] 8021q: adding VLAN 0 to HW filter on device batadv0
[  453.258763][ T5975] usb 12-1: selecting invalid altsetting 0
[  453.401760][T11963] veth0_vlan: entered promiscuous mode
[  453.408803][T11963] veth1_vlan: entered promiscuous mode
[  453.425911][T11963] veth0_macvtap: entered promiscuous mode
[  453.429640][T11963] veth1_macvtap: entered promiscuous mode
[  453.439754][T11963] batman_adv: batadv0: Interface activated: batadv_slave_0
[  453.448642][T11963] batman_adv: batadv0: Interface activated: batadv_slave_1
[  453.453147][ T5975] usb 12-1: USB disconnect, device number 2
[  453.457538][T11734] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  453.461139][T11734] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  453.468984][ T5973] Bluetooth: hci0: command tx timeout
[  453.471963][T11734] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  453.489428][T11734] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  453.589373][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.607086][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  453.629430][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.632023][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  455.546457][ T5973] Bluetooth: hci0: command tx timeout
[  456.791597][ T5975] usb 13-1: new high-speed USB device number 2 using dummy_hcd
[  457.171246][ T5975] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  457.176055][ T5975] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  457.179595][ T5975] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  457.194155][ T5975] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  457.211250][ T5975] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  457.226391][ T5975] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.230577][ T5975] usb 13-1: config 0 descriptor??
[  457.627105][   T63] Bluetooth: hci0: command tx timeout
[  457.629034][   T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  457.635847][   T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  457.641003][   T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  457.643956][   T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  457.668403][   T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  457.923202][ T5975] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  459.087809][ T6679] kernel read not supported for file /dsp (pid: 6679 comm: kworker/3:4)
[  459.696570][ T5973] Bluetooth: hci0: command tx timeout
[  459.698711][   T63] Bluetooth: hci2: command tx timeout
[  459.716407][ T6679] usb 13-1: reset high-speed USB device number 2 using dummy_hcd
[  461.774674][   T63] Bluetooth: hci2: command tx timeout
[  463.854536][   T63] Bluetooth: hci2: command tx timeout
[  464.034176][   T34] usb 13-1: USB disconnect, device number 2
[  465.645117][T12070] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1565'.
[  465.746630][   T55] usb 13-1: new high-speed USB device number 3 using dummy_hcd
[  465.936889][   T63] Bluetooth: hci2: command tx timeout
[  465.998005][   T55] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  466.001638][   T55] usb 13-1: config 0 interface 0 has no altsetting 0
[  466.005863][   T55] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  466.009815][   T55] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  466.012478][   T55] usb 13-1: Product: syz
[  466.013862][   T55] usb 13-1: Manufacturer: syz
[  466.016300][   T55] usb 13-1: SerialNumber: syz
[  466.020440][   T55] usb 13-1: config 0 descriptor??
[  466.028661][   T55] usb 13-1: selecting invalid altsetting 0
[  466.243395][   T55] usb 13-1: USB disconnect, device number 3
[  474.853185][   T40] kauditd_printk_skb: 42 callbacks suppressed
[  474.853246][   T40] audit: type=1400 audit(1757036561.229:352): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=12091 comm="syz.4.1569"
[  475.824045][    C2] sched: DL replenish lagged too much
[  477.050610][   T24] usb 12-1: new high-speed USB device number 3 using dummy_hcd
[  477.725575][   T24] usb 12-1: Using ep0 maxpacket: 32
[  479.015555][   T24] usb 12-1: device descriptor read/all, error -71
[  485.802118][T12032] chnl_net:caif_netlink_parms(): no params data found
[  486.055794][T12032] bridge0: port 1(bridge_slave_0) entered blocking state
[  486.058622][T12032] bridge0: port 1(bridge_slave_0) entered disabled state
[  486.063592][T12032] bridge_slave_0: entered allmulticast mode
[  486.109583][T12032] bridge_slave_0: entered promiscuous mode
[  486.119871][T12032] bridge0: port 2(bridge_slave_1) entered blocking state
[  486.122814][T12032] bridge0: port 2(bridge_slave_1) entered disabled state
[  486.126711][T12032] bridge_slave_1: entered allmulticast mode
[  486.129759][T12032] bridge_slave_1: entered promiscuous mode
[  486.561535][   T74] bond0 (unregistering): Released all slaves
[  486.596749][T12032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  486.609895][T12032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  486.650963][   T74] : left promiscuous mode
[  486.675130][T12032] team0: Port device team_slave_0 added
[  486.678404][T12032] team0: Port device team_slave_1 added
[  486.720073][   T74] tipc: Left network mode
[  486.721353][T12032] batman_adv: batadv0: Adding interface: batadv_slave_0
[  486.723902][T12032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  486.732309][T12032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  486.738488][T12032] batman_adv: batadv0: Adding interface: batadv_slave_1
[  486.740934][T12032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  486.749618][T12032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  486.804129][T12032] hsr_slave_0: entered promiscuous mode
[  486.806438][T12032] hsr_slave_1: entered promiscuous mode
[  486.808554][T12032] debugfs: 'hsr0' already exists in 'hsr'
[  486.810507][T12032] Cannot create hsr debugfs directory
[  487.231236][   T74] hsr_slave_0: left promiscuous mode
[  487.235885][   T74] hsr_slave_1: left promiscuous mode
[  487.245677][ T6262] usb 12-1: new high-speed USB device number 5 using dummy_hcd
[  487.494180][ T6262] usb 12-1: Using ep0 maxpacket: 32
[  487.499208][ T6262] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  487.538561][ T6262] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  487.542543][ T6262] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  487.546439][ T6262] usb 12-1: Product: syz
[  487.548558][ T6262] usb 12-1: Manufacturer: syz
[  487.550443][ T6262] usb 12-1: SerialNumber: syz
[  487.555327][ T6262] usb 12-1: config 0 descriptor??
[  487.561833][T12157] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  488.684304][ T6262] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[  488.856273][ T6262] usb 9-1: config index 0 descriptor too short (expected 45, got 36)
[  488.865405][ T6262] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  488.878941][ T6262] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  488.891199][ T6262] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.909549][ T6262] usb 9-1: config 0 descriptor??
[  489.908926][T11965] usb 12-1: USB disconnect, device number 5
[  490.462528][T12032] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  490.479517][T12032] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  490.484892][T12032] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  490.491465][T12032] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  490.502137][T11965] usb 9-1: USB disconnect, device number 40
[  490.737881][T12032] 8021q: adding VLAN 0 to HW filter on device bond0
[  490.762210][T12032] 8021q: adding VLAN 0 to HW filter on device team0
[  490.819872][   T74] IPVS: stop unused estimator thread 0...
[  490.827216][T11734] bridge0: port 1(bridge_slave_0) entered blocking state
[  490.829585][T11734] bridge0: port 1(bridge_slave_0) entered forwarding state
[  490.839924][T11734] bridge0: port 2(bridge_slave_1) entered blocking state
[  490.842316][T11734] bridge0: port 2(bridge_slave_1) entered forwarding state
[  490.917857][   T74] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.040113][   T74] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.114793][T12032] 8021q: adding VLAN 0 to HW filter on device batadv0
[  491.181129][   T74] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.285121][   T74] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.309205][T12032] veth0_vlan: entered promiscuous mode
[  491.314223][T12032] veth1_vlan: entered promiscuous mode
[  491.331649][T12032] veth0_macvtap: entered promiscuous mode
[  491.342261][T12032] veth1_macvtap: entered promiscuous mode
[  491.362962][T12032] batman_adv: batadv0: Interface activated: batadv_slave_0
[  491.375379][T12032] batman_adv: batadv0: Interface activated: batadv_slave_1
[  491.404198][T11965] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[  491.459058][T11734] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  491.463014][T11734] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  491.472035][T11734] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  491.475779][T11734] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  491.513569][   T74] bridge_slave_1: left allmulticast mode
[  491.516579][   T74] bridge_slave_1: left promiscuous mode
[  491.518672][   T74] bridge0: port 2(bridge_slave_1) entered disabled state
[  491.525656][   T74] bridge_slave_0: left allmulticast mode
[  491.527821][   T74] bridge_slave_0: left promiscuous mode
[  491.529696][   T74] bridge0: port 1(bridge_slave_0) entered disabled state
[  491.566155][T11965] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  491.570334][T11965] usb 9-1: config 0 interface 0 has no altsetting 0
[  491.577263][T11965] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  491.581261][T11965] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  491.584835][T11965] usb 9-1: Product: syz
[  491.586681][T11965] usb 9-1: Manufacturer: syz
[  491.588652][T11965] usb 9-1: SerialNumber: syz
[  491.600798][T11965] usb 9-1: config 0 descriptor??
[  491.607668][T11965] usb 9-1: selecting invalid altsetting 0
[  491.871240][   T55] usb 9-1: USB disconnect, device number 41
[  491.887323][   T74] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  491.896921][   T74] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  491.906748][   T74] bond0 (unregistering): Released all slaves
[  491.944752][T11729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  491.947965][T11729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.982528][T11729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  491.987689][T11729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  492.478107][   T74] hsr_slave_0: left promiscuous mode
[  492.484569][   T74] hsr_slave_1: left promiscuous mode
[  492.499510][   T74] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  492.501843][   T74] batman_adv: batadv0: Removing interface: batadv_slave_0
[  492.505495][   T74] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  492.508610][   T74] batman_adv: batadv0: Removing interface: batadv_slave_1
[  492.567010][   T74] veth1_macvtap: left promiscuous mode
[  492.569423][   T74] veth0_macvtap: left promiscuous mode
[  492.571900][   T74] veth1_vlan: left promiscuous mode
[  492.574754][   T74] veth0_vlan: left promiscuous mode
[  492.757866][T12249] netlink: 25 bytes leftover after parsing attributes in process `syz.9.1557'.
[  492.850001][T12258] netlink: 'syz.9.1557': attribute type 4 has an invalid length.
[  492.937306][T12257] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  493.801667][   T74] team0 (unregistering): Port device team_slave_1 removed
[  493.885200][   T74] team0 (unregistering): Port device team_slave_0 removed
[  494.794773][   T55] usb 12-1: new high-speed USB device number 6 using dummy_hcd
[  494.944672][   T55] usb 12-1: Using ep0 maxpacket: 8
[  494.948739][   T55] usb 12-1: config 0 interface 0 has no altsetting 0
[  494.951732][   T55] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  494.956931][   T55] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.965142][   T55] usb 12-1: config 0 descriptor??
[  495.082438][T12279] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  495.380835][   T55] mcp2221 0003:04D8:00DD.000D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0
[  495.464423][   T34] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[  495.580506][T12265] i2c i2c-2: unsupported multi-msg i2c transaction
[  495.583706][   T55] usb 12-1: USB disconnect, device number 6
[  495.617592][   T34] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  495.620560][   T34] usb 9-1: config 0 interface 0 has no altsetting 0
[  495.624432][   T34] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  495.627179][   T34] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  495.629858][   T34] usb 9-1: Product: syz
[  495.631151][   T34] usb 9-1: Manufacturer: syz
[  495.632557][   T34] usb 9-1: SerialNumber: syz
[  495.635989][   T34] usb 9-1: config 0 descriptor??
[  495.640275][   T34] usb 9-1: selecting invalid altsetting 0
[  495.849450][ T6107] usb 9-1: USB disconnect, device number 42
[  496.326266][T12295] macsec0: entered promiscuous mode
[  496.346399][T12295] macsec0: entered allmulticast mode
[  496.351510][T12295] veth1_macvtap: entered allmulticast mode
[  496.494722][T12295] nfs: Unknown parameter '	"'
[  496.784483][T12309] random: crng reseeded on system resumption
[  497.138888][T12306] netlink: 'syz.7.1591': attribute type 4 has an invalid length.
[  500.988876][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  503.877496][ T5973] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  503.881429][ T5973] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  503.885024][ T5973] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  503.888019][ T5973] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  503.890881][ T5973] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  504.066434][T12345] chnl_net:caif_netlink_parms(): no params data found
[  504.200105][ T1232] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.369855][ T1232] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.386218][T12345] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.389333][T12345] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.392382][T12345] bridge_slave_0: entered allmulticast mode
[  504.400251][T12345] bridge_slave_0: entered promiscuous mode
[  504.407033][T12345] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.413426][T12345] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.416211][T12345] bridge_slave_1: entered allmulticast mode
[  504.418895][T12345] bridge_slave_1: entered promiscuous mode
[  504.580470][ T1232] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.680448][T12345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  504.689163][T12345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  504.821176][ T1232] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.831010][T12365] fuse: Bad value for 'fd'
[  504.865104][T12345] team0: Port device team_slave_0 added
[  504.879371][T12345] team0: Port device team_slave_1 added
[  505.032117][T12345] batman_adv: batadv0: Adding interface: batadv_slave_0
[  505.036661][T12345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.038373][T12368] netlink: 'syz.9.1599': attribute type 16 has an invalid length.
[  505.048229][T12345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  505.055905][T12345] batman_adv: batadv0: Adding interface: batadv_slave_1
[  505.070117][T12345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.092706][T12345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  505.242782][T12345] hsr_slave_0: entered promiscuous mode
[  505.246372][T12345] hsr_slave_1: entered promiscuous mode
[  505.249278][T12345] debugfs: 'hsr0' already exists in 'hsr'
[  505.251824][T12345] Cannot create hsr debugfs directory
[  505.356409][ T1232] bridge_slave_1: left allmulticast mode
[  505.358603][ T1232] bridge_slave_1: left promiscuous mode
[  505.360911][ T1232] bridge0: port 2(bridge_slave_1) entered disabled state
[  505.385773][ T1232] bridge_slave_0: left allmulticast mode
[  505.389610][ T1232] bridge_slave_0: left promiscuous mode
[  505.392196][ T1232] bridge0: port 1(bridge_slave_0) entered disabled state
[  505.948958][ T5973] Bluetooth: hci0: command tx timeout
[  506.088306][ T1232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  506.104630][ T1232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  506.113861][ T1232] bond0 (unregistering): Released all slaves
[  506.331930][T12382] netlink: 'syz.7.1602': attribute type 10 has an invalid length.
[  506.355562][T12382] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  506.366523][T12382] batman_adv: batadv0: Removing interface: batadv_slave_0
[  506.382302][T12382] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  506.736026][T12390] overlayfs: failed to resolve '/ÿÿ': -2
[  506.898954][ T1232] hsr_slave_0: left promiscuous mode
[  506.907189][ T1232] hsr_slave_1: left promiscuous mode
[  506.910529][ T1232] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  506.917908][ T1232] batman_adv: batadv0: Removing interface: batadv_slave_0
[  506.924068][ T1232] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  506.927919][ T1232] batman_adv: batadv0: Removing interface: batadv_slave_1
[  506.934175][T12307] IPVS: starting estimator thread 0...
[  506.993787][ T1232] veth1_macvtap: left promiscuous mode
[  507.002421][ T1232] veth0_macvtap: left promiscuous mode
[  507.006343][ T1232] veth1_vlan: left promiscuous mode
[  507.012843][ T1232] veth0_vlan: left promiscuous mode
[  507.036154][T12402] IPVS: using max 46 ests per chain, 110400 per kthread
[  507.386217][T12408] netlink: 'syz.4.1605': attribute type 16 has an invalid length.
[  507.905623][   T34] usb 12-1: new high-speed USB device number 7 using dummy_hcd
[  508.018624][ T5973] Bluetooth: hci0: command tx timeout
[  508.054691][   T34] usb 12-1: Using ep0 maxpacket: 32
[  508.061066][   T34] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  508.070633][   T34] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  508.077254][   T34] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  508.081680][   T34] usb 12-1: Product: syz
[  508.085538][   T34] usb 12-1: Manufacturer: syz
[  508.087562][   T34] usb 12-1: SerialNumber: syz
[  508.091739][   T34] usb 12-1: config 0 descriptor??
[  508.098948][T12412] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  508.409662][   T34] usb 12-1: USB disconnect, device number 7
[  508.571862][ T1232] team0 (unregistering): Port device team_slave_1 removed
[  508.687695][ T1232] team0 (unregistering): Port device team_slave_0 removed
[  510.094204][ T5973] Bluetooth: hci0: command tx timeout
[  511.866738][T12425] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  512.175153][ T5973] Bluetooth: hci0: command tx timeout
[  512.452618][T12345] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  512.495253][T12345] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  512.575043][T12345] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  512.604536][T12345] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  512.858584][T12345] 8021q: adding VLAN 0 to HW filter on device bond0
[  512.877290][T12345] 8021q: adding VLAN 0 to HW filter on device team0
[  512.912062][ T1232] bridge0: port 1(bridge_slave_0) entered blocking state
[  512.914415][ T1232] bridge0: port 1(bridge_slave_0) entered forwarding state
[  512.918078][ T1232] bridge0: port 2(bridge_slave_1) entered blocking state
[  512.920350][ T1232] bridge0: port 2(bridge_slave_1) entered forwarding state
[  513.089446][T12345] 8021q: adding VLAN 0 to HW filter on device batadv0
[  513.125543][T12345] veth0_vlan: entered promiscuous mode
[  513.131869][T12345] veth1_vlan: entered promiscuous mode
[  513.151608][T12345] veth0_macvtap: entered promiscuous mode
[  513.157784][T12345] veth1_macvtap: entered promiscuous mode
[  513.168302][T12345] batman_adv: batadv0: Interface activated: batadv_slave_0
[  513.187437][T12345] batman_adv: batadv0: Interface activated: batadv_slave_1
[  513.233586][ T1232] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  513.242779][ T1232] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  513.253784][ T1232] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  513.263073][ T1232] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  513.374434][T11727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  513.376970][T11727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  513.424249][ T5975] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[  513.427211][ T1232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  513.430245][ T1232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  513.452863][T12442] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  514.861087][ T5975] usb 9-1: Using ep0 maxpacket: 32
[  515.220656][ T5975] usb 9-1: device descriptor read/all, error -71
[  515.717183][T12494] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  517.339043][T12556] 8021q: adding VLAN 0 to HW filter on device bond0
[  517.369294][T12556] bond0: (slave rose0): Enslaving as an active interface with an up link
[  520.574126][   T34] usb 12-1: new high-speed USB device number 8 using dummy_hcd
[  520.747518][   T34] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  520.750890][   T34] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  520.756231][   T34] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  520.759390][   T34] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  520.765066][   T34] usb 12-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  520.768225][   T34] usb 12-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  520.770774][   T34] usb 12-1: Manufacturer: syz
[  520.779722][   T34] usb 12-1: config 0 descriptor??
[  521.366931][   T34] appleir 0003:05AC:8243.000E: unknown main item tag 0x0
[  521.383336][   T34] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0
[  522.370404][T12626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  522.373717][T12626] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  523.124652][  T841] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  523.867468][T12661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  523.888102][T12661] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  524.396695][T12242] usb 9-1: new high-speed USB device number 45 using dummy_hcd
[  525.179082][T12242] usb 9-1: Using ep0 maxpacket: 32
[  525.242329][T12242] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  525.365092][T12242] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  525.367925][T12242] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  525.378301][T12242] usb 9-1: Product: syz
[  525.379648][T12242] usb 9-1: Manufacturer: syz
[  525.381103][T12242] usb 9-1: SerialNumber: syz
[  525.396336][T12242] usb 9-1: config 0 descriptor??
[  525.791662][T12666] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  525.996567][ T7913] usb 12-1: USB disconnect, device number 8
[  526.183506][T12242] usb 9-1: USB disconnect, device number 45
[  526.449904][T12686] netlink: 'syz.9.1633': attribute type 16 has an invalid length.
[  526.576372][T12687] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  527.604934][T12697] netlink: 'syz.4.1635': attribute type 16 has an invalid length.
[  529.414545][T12705] BUG: sleeping function called from invalid context at mm/vmalloc.c:3409
[  529.417921][T12705] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 12705, name: syz.3.1637
[  529.423029][T12705] preempt_count: 1, expected: 0
[  529.431668][T12705] RCU nest depth: 0, expected: 0
[  529.433760][T12705] no locks held by syz.3.1637/12705.
[  529.441885][T12705] Preemption disabled at:
[  529.441895][T12705] [<ffffffff82292bdc>] refill_obj_stock+0x2c/0x6d0
[  529.452710][T12705] CPU: 2 UID: 0 PID: 12705 Comm: syz.3.1637 Not tainted syzkaller #0 PREEMPT(full) 
[  529.452732][T12705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  529.452743][T12705] Call Trace:
[  529.452749][T12705]  <TASK>
[  529.452757][T12705]  dump_stack_lvl+0x16c/0x1f0
[  529.452794][T12705]  __might_resched+0x3c0/0x5e0
[  529.452814][T12705]  ? __pfx___might_resched+0x10/0x10
[  529.452830][T12705]  ? pcpu_block_update+0x562/0x660
[  529.452856][T12705]  ? find_held_lock+0x2b/0x80
[  529.452876][T12705]  vfree+0x75/0xb50
[  529.452903][T12705]  ? rcu_is_watching+0x12/0xc0
[  529.452920][T12705]  ? kfree+0x24f/0x4d0
[  529.452936][T12705]  ? free_percpu+0x6db/0x13c0
[  529.452960][T12705]  futex_hash_free+0x98/0xc0
[  529.452981][T12705]  __mmdrop+0x33f/0x580
[  529.453000][T12705]  ? rcu_is_watching+0x12/0xc0
[  529.453020][T12705]  finish_task_switch.isra.0+0x7a4/0xc10
[  529.453044][T12705]  schedule_tail+0xe/0xe0
[  529.453065][T12705]  ret_from_fork+0x25/0x6f0
[  529.453093][T12705]  ret_from_fork_asm+0x1a/0x30
[  529.453124][T12705]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  537.112378][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.201057][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.283064][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.389813][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.539931][   T13] bridge_slave_1: left allmulticast mode
[  537.542356][   T13] bridge_slave_1: left promiscuous mode
[  537.545299][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.557677][   T13] bridge_slave_0: left allmulticast mode
[  537.560227][   T13] bridge_slave_0: left promiscuous mode
[  537.562780][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.151989][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  538.162238][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  538.171674][   T13] bond0 (unregistering): Released all slaves
[  538.867994][   T13] hsr_slave_0: left promiscuous mode
[  538.877302][   T13] hsr_slave_1: left promiscuous mode
[  538.882021][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  538.887161][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  538.900830][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  538.904653][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  538.954736][   T13] veth1_macvtap: left promiscuous mode
[  538.957099][   T13] veth0_macvtap: left promiscuous mode
[  538.959516][   T13] veth1_vlan: left promiscuous mode
[  538.964715][   T13] veth0_vlan: left promiscuous mode

VM DIAGNOSIS:
01:35:07  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000afa8cf RBX=0000000000000000 RCX=ffffffff8b90fbf9 RDX=0000000000000000
RSI=ffffffff8de4dc69 RDI=ffffffff8c162f00 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08
R8 =0000000000000001 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000000
R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab9290 R15=0000000000000000
RIP=ffffffff8b90e75f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880974c0000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7446288 CR3=000000004ec5d000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff91d993a0 RDX=0000000000000005
RSI=0000000000000001 RDI=ffffffff91226b40 RBP=ffffc90000566fb0 RSP=ffffc90000566ef8
R8 =ffffffff91d993a4 R9 =0000000000000000 R10=0000000000000003 R11=000000000008c74f
R12=ffffc90000566fb8 R13=ffffc90000566f68 R14=ffffc90000566f9d R15=0000000000000000
RIP=ffffffff816aba65 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880975c0000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000008001f000 CR3=0000000056d57000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85617a75 RDI=ffffffff9b0fc700 RBP=ffffffff9b0fc6c0 RSP=ffffc900035d7898
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=0000000000000037 R14=ffffffff9b0fc6c0 R15=ffffffff85617a10
RIP=ffffffff85617a9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff8880976c0000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f71d3b20 CR3=000000005fa6f000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fffcfec0 Opmask01=0000000000008000 Opmask02=00000000d711000f Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f4d62cbf4da3a05f
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6cecc860d080f45c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000c0fe
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 92ccf6d4ca1144f7 56dc08aed8d0146e
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c6ee5841f5035703 09aed9ff4003a4b5
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 706f682f30687465 2f666e6f632f3676 70692f74656e2f73 79732f636f72702f
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0074696d696c5f70 6f682f306874652f 666e6f632f367670 692f74656e2f7379
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 550a005642444943 5f4b50510a56000a 51404b0a56564449 460a565c560a000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3701013563538263 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c3001000100a01c 0c7eff133dd00502 39773b3a3633211c 1a0f0c060379010e
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff 0101910101740050 fa7dfa4607f2d5f8 4c3001000100a01c
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c7eff133dd00502 39773b3a3633211c 1a0f0c060379010e 3701013563538263
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000642000000002
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=00000000000035e2 RBX=1ffff920006b8fbc RCX=ffffc90033a4f000 RDX=0000000000000001
RSI=0000000000800000 RDI=0000000080800000 RBP=0000000080800000 RSP=ffffc900035c7da8
R8 =0000000000000007 R9 =0000000000000000 R10=0000000000800000 R11=0000000000000000
R12=0000000000800000 R13=0000000003000009 R14=ffff888024f560c0 R15=ffffc900035c7e40
RIP=ffffffff82040870 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff8880977c0000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000002e621ffc CR3=00000000644ff000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000