last executing test programs:

11.375804585s ago: executing program 1 (id=25):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0xff58) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x700}) (async)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x1000000}, 0xc) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001880)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async, rerun: 32)
r7 = socket$rxrpc(0x21, 0x2, 0xa) (rerun: 32)
setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, 0x0, 0x45)
setsockopt$packet_int(r6, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x8}}}}}}, 0x0)

10.045209634s ago: executing program 1 (id=30):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={<r2=>0x0, @in6={{0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}, &(0x7f00000001c0)=0x84)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000200)={r2, 0x5}, 0x8)
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0db7)
fchown(r3, 0x0, 0xee01)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
fchown(r0, 0xffffffffffffffff, 0xee01)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r3, 0x4)

9.870662808s ago: executing program 0 (id=31):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000004000), &(0x7f0000000300)}, 0x20)
r2 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10100, 0x1}) (async)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10100, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10)
socketpair(0x1d, 0x80000, 0x7, &(0x7f0000000000)) (async)
socketpair(0x1d, 0x80000, 0x7, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0x378, &(0x7f00000001c0)=ANY=[@ANYBLOB="b000004e461bf8513f642b7378947430d76d192e4c158412921bbbd958a738c424ea4db191374bafa88a638fe3d432a6fc39226d299134b3cb1f456ec4ce6836e5952c8bfd9425788af7656f4feeebf86446a6b9315d597cc2c16749d0d81dc722c442e9bd2e1c8bf68a0b50ef997cc71926bb4caf98a46dc709fa4be2813044aa4686d3921fe412da50987a87770f0b80ca528f834208e99c58884e97c191f2c94807e3f9b4b2a53d48a36944adf03ed04bd8c231ff004efe"]) (async)
syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0x378, &(0x7f00000001c0)=ANY=[@ANYBLOB="b000004e461bf8513f642b7378947430d76d192e4c158412921bbbd958a738c424ea4db191374bafa88a638fe3d432a6fc39226d299134b3cb1f456ec4ce6836e5952c8bfd9425788af7656f4feeebf86446a6b9315d597cc2c16749d0d81dc722c442e9bd2e1c8bf68a0b50ef997cc71926bb4caf98a46dc709fa4be2813044aa4686d3921fe412da50987a87770f0b80ca528f834208e99c58884e97c191f2c94807e3f9b4b2a53d48a36944adf03ed04bd8c231ff004efe"])
ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000040)=0x32f41c4b)
syz_usb_connect_ath9k(0x3, 0x7d, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async)
syz_usb_connect_ath9k(0x3, 0x7d, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x48}}]}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000027000/0x4000)=nil, &(0x7f000076a000/0x2000)=nil], 0x0, &(0x7f0000000080), 0x2) (async)
move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000027000/0x4000)=nil, &(0x7f000076a000/0x2000)=nil], 0x0, &(0x7f0000000080), 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r9 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r9, &(0x7f0000002700)=""/102392, 0x18ff8) (async)
read$msr(r9, &(0x7f0000002700)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='proc\x00', 0x4045, 0x0)
chroot(&(0x7f0000000b80)='./file0\x00')
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/profiling', 0x40, 0x8) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/profiling', 0x40, 0x8)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48)
connect$vsock_stream(r7, &(0x7f0000000180)={0x28, 0x0, 0xffffffff}, 0x10) (async)
connect$vsock_stream(r7, &(0x7f0000000180)={0x28, 0x0, 0xffffffff}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r10}, 0x38)

7.701133423s ago: executing program 4 (id=37):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0xffffffffffffffc7, 0x1, 0x7}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}}, 0x8840)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0)
syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000000c0)={0x40, 0x17, 0x11, "0a248c0291390e000000005e9ccddd623b"}, 0x0, 0x0, 0x0, 0x0, 0x0})

7.445242517s ago: executing program 2 (id=38):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x0)
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f00000000c0)={0x10, 0x1})
socket$inet6(0xa, 0xa, 0xd)

7.28914373s ago: executing program 3 (id=39):
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8000, '\x00', @string=&(0x7f0000000200)=0x7d}})

7.104728881s ago: executing program 1 (id=40):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00')
r1 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200))
pselect6(0x40, &(0x7f0000002d00)={0x7, 0x9, 0x4, 0x40, 0x1, 0x4800, 0x7, 0x3}, 0x0, &(0x7f0000002d80)={0xb, 0x401, 0x9fe6, 0x7, 0x7fffffff, 0x4, 0x8001, 0xc}, 0x0, 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0)
io_uring_enter(r1, 0x2e6f, 0x8555, 0x2, 0x0, 0x0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f00000042c0)=""/4100, 0x1004}], 0x1, 0x8, 0x8d3a)

6.409265147s ago: executing program 2 (id=41):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x880000, 0x0)
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001e80)=ANY=[@ANYRES64=r1], 0x0, 0x60}, 0x28)

6.221062751s ago: executing program 2 (id=42):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = timerfd_create(0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r7 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r8 = socket$unix(0x1, 0x2, 0x0)
r9 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r9, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000300)=[{r9, 0x3328}, {r8, 0x4236}], 0x2, 0x0, 0x0, 0x0)
recvmmsg$unix(r9, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0)
close(r7)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000240)={{0x32, @loopback, 0x4e22, 0x2, 'dh\x00', 0x20, 0xd049, 0x55}, {@broadcast, 0x4e23, 0x2004, 0x8, 0x8, 0x374}}, 0x44)

5.613083962s ago: executing program 0 (id=43):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000034000)=""/102392, 0x18ff8)
socket(0x10, 0x803, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = syz_io_uring_setup(0x1179, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000), &(0x7f0000000100))
io_uring_enter(r3, 0x7a98, 0x20000000, 0x0, 0x0, 0xfffffffffffffc76)
syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x377}, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000029000b00ffffffff000000000500"], 0x2c}}, 0x0)
ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0x1)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x2d7}], 0x1}}], 0x2, 0x0)

5.515319836s ago: executing program 1 (id=44):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x20008040)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
pipe2(&(0x7f0000000700)={<r4=>0xffffffffffffffff}, 0x2480)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000740)={r3, r4, 0x5, 0x0, @val=@perf_event={0x2}}, 0x18)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000100"/28, @ANYBLOB="323eef4988"])
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001a0069ae26bf7000000000001c000000ff00000400000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r9 = dup(r8)
write$FUSE_BMAP(r9, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r9, &(0x7f0000000480)={0x18}, 0x18)
write$FUSE_INIT(r9, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}})
r10 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r10, 0x75e7f000)
write$FUSE_INIT(r10, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1282, 0x400c6001, 0x5, 0x8, 0x10, 0xc40b, 0x0, 0x0, 0x40, 0x6}}, 0x50)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='mountinfo\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r9)
sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="5aba1618f7f24a067e2a13ee362d0e6d", 0x10}, {&(0x7f0000000140)="c7d8130b4f0dc7ed658d2c566d8bf4ef6e25185f25906d3fc2f1cedaab91123efbe71b3ccc86af3258c8f938115a0b280ede0314bc06fcbb3ca59d070140806adb6198bbd007db2790c0adaebde36b7853a4a8e8d466d1adf6798974560ea296d9e422988bfdd59881dfc70c5545756b6b70598622d6ace495a7fdf192dc7a20d331d927f58cde919e6ce0788035282eaa17f495fe4c6ce0f4ac0f4a39f13d34ff", 0xa1}, {&(0x7f0000000280)="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", 0xfa}, {&(0x7f0000000380)="aad36126105714b720247aa552562c62ce0a3b73a96c2e3330db716ec9a5fe93834f58993dc666fcd1f3ad27c42fc575fad290f0cac173d2c447528e4ee3b4a751f9c5c298f06ff152c0e28543b37ec2b0df0b9ff1daf7eb0649", 0x5a}, {&(0x7f0000000040)="e09d35fb976d31478243c22ae069e94c534cdee813784b877b7f5f8d5daea1adbea9f5b3d9a531625d9f555e1562cb06", 0x30}, {&(0x7f0000000400)="83f6996f89a2a94b56a2f0ff24f784fa3b611ff02e97f300388b4b77d8fd158968fe5b3c0c56d160d41d69c2c47234e20a38de719ba20a39438e3c0eb489d738fa8779c5397c3205658325e5be95e59ce6c717f56b17baa1694d4decc8560d411d145f913942f07958c91a7b505d991448c7daafbe972d184f136c400e10b3270293a8c7f7be4e8d41947b8848e92f10846795394842ee0dfa3c30b7e334106eed09712e45215b0d", 0xa8}, {&(0x7f00000004c0)="8aa2e403f64e21c81ccf5b5fe0b23dc788b77d8ecc9be6f7112e78e41c009df9d3c278b33450aa470aa2ed26af0dd4e437594780ac7195549c603f7c744bf51b0fe80b8b6769325f4bda04aee13b09acf4070ba145df0026ac1cdfd0bdf525010c659ab6c9439110b28139b5c52eba49d998041a57b2eb46ac499ddd67ecaca692c9dbe05fc7", 0x86}], 0x7, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}, 0x4004000)

5.222967231s ago: executing program 2 (id=45):
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000200)=0xe, 0x4)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x4, 0x8})
r3 = socket(0x10, 0x2, 0x0)
write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

4.732867906s ago: executing program 4 (id=46):
r0 = request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffb) (async)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)={0x2, 0x0, @c}, 0x29, r0)
r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x3, 0x80080)
ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000001c0)=[0x3, 0xc2]) (async)
r2 = request_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='syz', r0)
keyctl$get_keyring_id(0x0, r2, 0x9)
r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00')
mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r3, 0x7fe00000000) (async)
io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f0000006740)=[{0x4, 0x1, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000300)=""/178, 0xb2}, {&(0x7f00000003c0)=""/244, 0xf4}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/4096, 0x1000}], &(0x7f0000002500)=[0xffffffffffff70b4, 0xd38c]}, {0x2, 0x1, 0x0, &(0x7f0000002600)=[{&(0x7f0000002540)=""/86, 0x56}, {&(0x7f00000025c0)=""/15, 0xf}], &(0x7f0000002640)=[0x8, 0x6, 0x400, 0x200, 0x1, 0x2f]}, {0x7, 0x1, 0x0, &(0x7f0000004b00)=[{&(0x7f0000002680)=""/191, 0xbf}, {&(0x7f0000002740)=""/238, 0xee}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/153, 0x99}, {&(0x7f0000003a00)=""/197, 0xc5}, {&(0x7f0000003b00)=""/4096, 0x1000}], &(0x7f0000004b80)=[0xfffffffffffffff9]}, {0xa, 0x0, 0x0, &(0x7f0000005280)=[{&(0x7f0000004bc0)=""/9, 0x9}, {&(0x7f0000004c00)=""/161, 0xa1}, {&(0x7f0000004cc0)=""/188, 0xbc}, {&(0x7f0000004d80)=""/180, 0xb4}, {&(0x7f0000004e40)=""/73, 0x49}, {&(0x7f0000004ec0)=""/196, 0xc4}, {&(0x7f0000004fc0)=""/218, 0xda}, {&(0x7f00000050c0)=""/10, 0xa}, {&(0x7f0000005100)=""/174, 0xae}, {&(0x7f00000051c0)=""/160, 0xa0}], &(0x7f0000005340)=[0x7]}, {0x5, 0x0, 0x0, &(0x7f0000006680)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/112, 0x70}, {&(0x7f0000006400)=""/244, 0xf4}, {&(0x7f0000006500)=""/90, 0x5a}, {&(0x7f0000006580)=""/229, 0xe5}], &(0x7f0000006700)=[0x54e6, 0x9, 0x4, 0x3ff]}], 0x5) (async)
bind$netrom(r3, &(0x7f0000006800)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async)
ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000006880))
quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000068c0)={{{@in6=@private0, @in6}}, {{@in6=@mcast2}, 0x0, @in6=@private0}}, &(0x7f00000069c0)=0xe8) (async)
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000006b00)={0x60, 0x2, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x9, &(0x7f0000006a00)=[{0x0, 0x4, 0x2}, {0x401, 0x38f6, 0x2}, {0x7, 0x9, 0x80}, {0xb0ae, 0x7, 0x8}, {0x100, 0x2, 0x7}, {0xc, 0x200, 0x1000}, {0x9, 0x80000001, 0x5}, {0x6, 0x5, 0xc4}, {0x0, 0x0, 0x37}, {0x0, 0x2, 0x6}], 0xa, 0xfffffffffffeffff, 0x20, 0x0, 0x4, 0x50})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000006b80)=0x3, 0x4) (async)
ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000006bc0)={r0, r2, r0}, &(0x7f0000006c00)=""/170, 0xaa, &(0x7f0000006dc0)={&(0x7f0000006cc0)={'blake2s-224\x00'}, &(0x7f0000006d00)="f99f1b0e7b74ad5d9b067d1f12ffaa6099b17d91a30865494a46e6d949c37279bf8287363f6b6b9bf69ca14d02a92cacdf1e839637560fa27c76a7ba846b33d8cef13b8060161ddf801ef4ecaeccb9181d5ddfad1948ad57861cf2a9b1e5aa78176df6fbaeeccd7a35623eb359c263797546f837c664f519d8c5c24fdb92385fc7a12d411d6e93d94c37c6ad6062513604b79bccfbaa373d1d66f01e8f", 0x9d})
rt_sigaction(0x3e, &(0x7f0000006ec0)={&(0x7f0000006e00)="f30f1efdc42179c482d8000000008fc978c6ed0fed0d92653f7e2699360f0f5900a4c4c3354aae967eff3700670faebcbef94b00008f6838cdeb659d", 0x8000004, &(0x7f0000006e40)="c44139fd25000060ffc4a11f7d1433660f6837450ff35abb41a10000000100200000c401f85b39400f3809aaeb00000044df7500660fae7e8cc421ad59ad00c00000", {[0x80]}}, &(0x7f0000006f80)={&(0x7f0000006f00)="66440f2c4cb00266410f3824f73e400f1c7c9d233e3e0f12fc0f13a40000000081f20f4140a70f833c000000c4c2c9f74900c42187d0800d000000660f71f100", 0x0, &(0x7f0000006f40)="3666410f3835f5c461796f418444deeb883fc403496feb5cf2af8f4978d64200c461d9da89000000003666f70fd8a32666430f380baf0c000000"}, 0x8, &(0x7f0000006fc0)) (async)
r5 = syz_open_dev$sg(&(0x7f0000007000), 0xfffffffffffffff9, 0xa0001)
ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000007040)) (async)
r6 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000007080), 0x2, 0x0) (async)
r7 = socket$pptp(0x18, 0x1, 0x2)
ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f00000070c0)={r7}) (async)
keyctl$restrict_keyring(0x1d, r2, &(0x7f0000007100)='ceph\x00', &(0x7f0000007140)='blake2s-224\x00') (async)
fallocate(r6, 0x10, 0x9, 0x4) (async)
signalfd4(r5, &(0x7f0000007180)={[0x6]}, 0x8, 0x800)
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000071c0)={{0x1, 0x1, 0x18, <r8=>r7, {0x9}}, './file0\x00'})
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000007200)={0x5, 0x2, 0x4, 0x2000, &(0x7f0000ffe000/0x2000)=nil})

4.724407168s ago: executing program 0 (id=47):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
semop(0x0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={0x0, 0xfffffff7}, 0x8)
setresuid(0xee01, 0xee01, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7)

4.281488495s ago: executing program 1 (id=48):
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="d9620bb35df5a66a86e792bb95c26b1d77ca91a98aee8188776186a5e1b4ea4c95bfa044c6d0a0b0825516bbb9d3927a42b09c8a27765673f4f074"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='spmi_cmd\x00', r8, 0x0, 0xfffffffffffffffe}, 0x18)
syslog(0x9, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_emit_vhci(0x0, 0x16)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c084}, 0x8c080)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x1)

4.228935205s ago: executing program 4 (id=49):
r0 = socket$nl_route(0x10, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@delneigh={0x1c, 0x1d, 0x1, 0x8a, 0x0, {0x7, 0x0, 0x0, r5, 0x8, 0x12}}, 0x1c}}, 0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0x4, 0x4, 0x448, 0xffffffff, 0x2a8, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0xb, 0x3, 0x18}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x2, 'system_u:object_r:lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
munlockall()
sendmsg$nl_route(r0, 0x0, 0x0)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r1)
syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r10, 0x80, 0x7e, 0xa}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
syz_io_uring_submit(r7, r8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94)

4.227629316s ago: executing program 0 (id=50):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r4=>0x0})
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000002c0)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x12a06, 0x409}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xca, 0xca, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x52}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x8}}, @typedef={0xe, 0x0, 0x0, 0x8, 0x2}, @var={0xf, 0x0, 0x0, 0xe, 0x1, 0x2}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xa, 0x4}, {0x7, 0x1}, {}, {0x7, 0x3}, {0x10, 0x4}, {0xb, 0x5}, {0x4, 0x1}, {0xb}]}, @fwd={0x9}, @datasec={0x9, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x1, 0x4}, {0x1, 0xfc, 0xdb5}], '[d'}]}, {0x0, [0x0, 0x6f, 0x30, 0x5f]}}, &(0x7f0000000440)=""/213, 0xea, 0xd5, 0x1, 0x14}, 0x28)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000700)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000640)='GPL\x00', 0x101, 0xa6, &(0x7f0000000780)=""/166, 0x41100, 0x8, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x0, 0x3, 0x1}, 0x10, 0x2d78a, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000008c0)=[{0x1, 0x4, 0x9, 0x4}, {0x5, 0x2, 0xc, 0x6}, {0x4, 0x2, 0x10, 0x6}, {0x3, 0x4, 0x5, 0x6}, {0x3, 0x5, 0xe, 0x5}, {0x4, 0x2, 0xc, 0x4}, {0x0, 0x2, 0xc, 0x9}], 0x10, 0x4}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000240)=@raw=[@map_idx={0x18, 0x3, 0x5, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x4, 0x0, 0x3, 0x0, 0xa, 0x40, 0x4f8e4659e0b1d557}, @ldst={0x0, 0x3, 0x3, 0x0, 0xb, 0x30, 0x1}, @alu={0x7, 0x1, 0x9, 0x3, 0xb, 0xee, 0xffffffffffffffff}], &(0x7f00000002c0)='GPL\x00', 0xc, 0x0, 0x0, 0x40f00, 0x46, '\x00', r4, 0x18, r7, 0x8, &(0x7f0000000580)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0xf, 0xfffffffb, 0x7000}, 0x10, 0x1c158, r8, 0xa, &(0x7f0000000940)=[r1, r1, r1, r1, r1, r1, r1], &(0x7f0000000b00)=[{0x2, 0x5, 0x2, 0x4}, {0x1, 0x2, 0xb, 0x5}, {0x0, 0x4, 0x2, 0x2}, {0x4, 0x5, 0x10, 0x5}, {0x1, 0x1, 0x9, 0x9}, {0x0, 0x5, 0x9, 0x4}, {0x1, 0x1, 0xa, 0x4}, {0x4, 0x3, 0xc, 0x7}, {0x1, 0x3, 0x4, 0x1}, {0x5, 0x3, 0xb, 0x4}], 0x10, 0x3ff}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@ifindex, 0xffffffffffffffff, 0x11, 0x11}, 0x20)
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000680)=@fd={0x6, 0x1, 0x4, 0x40, 0xc6b, {0x77359400}, {0x0, 0x8, 0x40, 0x10, 0x3, 0xff, "f2abd125"}, 0x3, 0x4, {}, 0x7})
r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r9, 0xc0189375, &(0x7f00000030c0)={{0x1, 0x1, 0x71}, './file1\x00'})
sched_setscheduler(0x0, 0x2, 0x0)
unshare(0x24020400)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x4, 0x0, 0x2, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x7, 0x8001, 0xb9c2}})
r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r11 = dup(r10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
ioctl$PTP_EXTTS_REQUEST2(r11, 0xc0603d0f, &(0x7f0000000040))
syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xc8, 0x54, 0x9b, 0x40, 0x2c7c, 0x30e, 0x8128, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x18, 0xd4}}]}}]}}, 0x0)

3.11315139s ago: executing program 4 (id=51):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) (async)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000040)={'dvmrp0\x00', 0x2}) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x12, r1, 0x8000000) (async)
syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00032a0000002a0322e5e5a617dce5dd9fc0b9f480ed31ebd022e0df00"]}, 0x0)

2.889646008s ago: executing program 3 (id=52):
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
fcntl$setsig(r0, 0xa, 0x2d) (async)
fcntl$setsig(r0, 0xa, 0x2d)
fcntl$getflags(r0, 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) (async)
mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x200, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
linkat(r1, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000180)='./bus\x00', 0x0) (async)
linkat(r1, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000180)='./bus\x00', 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101802, 0x0) (async)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101802, 0x0)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e24, 0x8d31, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb8}, 0x1c)
ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f00000001c0))
execve(&(0x7f0000000380)='./bus\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xe)

2.353294915s ago: executing program 3 (id=53):
socket$unix(0x1, 0x5, 0x0)
r0 = socket$kcm(0x10, 0x100000000002, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x3, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x7, 0x6, 0x200000}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)
sendmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900619375e285af0100d41f8d8b3f31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x24}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)

2.141670261s ago: executing program 1 (id=54):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000240))
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0)
r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000000)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48)
readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000140)="e403402e6d69aa1cef9ef9a6a8a811114a73730561f86ec24fbd20a031516af10645443ba1ea91a31e618c729fb36241fc852cf7795cc3c0d78ae4de1e5110eafba42f764d048680", 0x0, 0x48)
ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f00000002c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000})
syz_usb_control_io(r3, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="40158d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.028593716s ago: executing program 3 (id=55):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002d00)=@newtfilter={0x1118, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x10e8, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffff, 0xfff2}}, @TCA_FLOW_EMATCHES={0x10d4, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x64}}, @TCA_EMATCH_TREE_LIST={0x10a0}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd0}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8c30}]}}]}, 0x1118}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})

1.706310552s ago: executing program 2 (id=56):
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r2, 0x0, 0x0, 0x1001f0)
lseek(r2, 0x1fd, 0x3) (async, rerun: 32)
shutdown(r1, 0x0) (rerun: 32)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000001c0)="b87848", 0x3}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}], 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x2, 0x5, 0x4, 0x8, 0x1, 0x5, 0x3, 0x2, 0x96, 0xff, 0x8, 0x4, 0x1, 0x3}, 0xe) (async)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x6}) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001080)={r5, 0x1}, &(0x7f00000010c0)=0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000ea0000"], 0x48)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x84aa5000)
mbind(&(0x7f0000188000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x1, 0x1) (async)
syz_usb_connect(0x3, 0x3d, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002a91d21402577a8b046070102030109022b00010000000009045f00020103df000905050008000200e50905010208000100000725"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x60000000, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) (async, rerun: 64)
setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) (async, rerun: 64)
sendmmsg$inet6(r6, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) (async, rerun: 64)
recvmmsg(r6, &(0x7f0000000800), 0x62, 0x12141, 0x0) (async, rerun: 64)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="38d31eeef64e53c949dbbce1559010395989e08b289acb01faca25a08cd499e101b6db821ea3532ffae4eaf70e30262b68bc6ed9b6aa9d5b13b8ac543fb8c222822907cbfd5da9979923bb6d9d89420c6818c9eb086079649677f429f72211e5f9cba9b40d4b4ad5509537ff99afd4a5fb3f59bc36cca402ad7e3bf4abca9f87ddd0192396c48a5c53aba20e6bd966fe4a3361cd7993a367aa1b4f252f76d61bb906e30cc2128913681a357340b2413bef9b8db78c4d631537a0e25431d4fa28e62445ff7eddc6c92a7d1cd36cf4cdabe7512449c0029634e7fe83bcc022d45c0bdabb3c703b793edfb489166d3abb81d9c9da31a0d024ee2453052a4fa28d22", @ANYRES16=r8, @ANYBLOB="01002cbd7000fddbdf2508000000180004801300010062726f6164636173742d6c696e6b0000"], 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x4008011) (async, rerun: 32)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async, rerun: 32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (rerun: 32)

1.053209724s ago: executing program 0 (id=57):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000034000)=""/102392, 0x18ff8)
socket(0x10, 0x803, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = syz_io_uring_setup(0x1179, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000), &(0x7f0000000100))
io_uring_enter(r3, 0x7a98, 0x20000000, 0x0, 0x0, 0xfffffffffffffc76)
syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x377}, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000029000b00ffffffff000000000500"], 0x2c}}, 0x0)
ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0x1)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7a88b3241a338ca7411cda28aa167b5628b79e8a7d588efb69636181b9c54f6d296386c95f8a08e27d5792dcb20fa3b5b4f60c71f310b31bb1ab4a825c2dc10fac150a17d92bb51849d9eea53c78d427d8d1036dc906084046fcae09499c220ef50c2c7c475f392bc288eb5efb8032d1ade92e88e50a05a95dd5c6cbbdfb086fa53bca14d40c8c3f7149b39b16b7c7370978389366174db5fbc99dbe958f8c1690cd695dfbe6c384162a412c8d3cfd7cf223f9df4c67b92514111891f53d4e19826797302e1a87e7a627c52740bb3bd311771a68d349c0a68ef6f2a765f8220323add67b2b6695ca41adcda387a4264bcd94c8578a9ccca3b55ebcda45369b56068cfeec34abc2cbd94b9b12d057fa9d4328d57073f40e5ae64443e4a10ed400575bbd1168a170a0134b9ad28735dbd9603a9e417cce864f2141a92f57e1fdfcff4776f94a794d6db8d3e9e0ecc783956c7ab15a8d5639d3df1ac9da6057af913a563bd55b657f37cbf4cae2919aea6ff8a7490b4c036361b8866cc062bbad019f43d02b0c38bd6309f2baa53924466203ab8d00daaac4c9da846e645d64c10e47c32e9824e79ade4eeee7cbf71b1bb48f760800b04334745ab553dea12a85f0671eb07a4cc67ceaffa8269e0b052f25136cfb8a6b9327a2d165c42933642d3171ad00ebf0be485f5ed319021600a94072f251c8905a2451eba3ba7db", 0x2d7}], 0x1}}], 0x2, 0x0)

1.052938659s ago: executing program 4 (id=58):
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb)
shutdown(r0, 0x2) (async)
shutdown(r0, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

1.040744298s ago: executing program 3 (id=59):
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000080), 0x0, 0x835, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="8b251853e0c8764d148aafefed39cdb21f113281088b936c67e78bac7b7f77a554", 0x21}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x6004081)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) (async)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="bafe394ebb0a", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0xf4ff, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x1f}}}}}, 0x0)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
socketpair(0x2, 0xa, 0x2850, &(0x7f0000000240))
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async, rerun: 32)
r2 = gettid() (rerun: 32)
waitid(0x1, r2, 0x0, 0x8, 0x0)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

336.450466ms ago: executing program 4 (id=60):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000000000104000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c6090a292ae658019c743d91bb03019a2c9b708a1ab2e4f1a0dc22c677c231dd7238fbf232dc5342899a3c87c963abcef2dcaf452663595b4204f348da452c022c231c95e3d2aa91f405b1929a38e17978e55fb2fe6627a8eb56c1db0e8cf0c83ac5cdd0ca325a7da61b1edfd757cc83b1cc5bd6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x4, 0x20000e695, 0x9, 0x400, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000200d1, 0xfffffffffffffffc, 0x6, 0x4, 0x0, 0xfffffffffffffe], 0x0, 0x8340})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
preadv(r3, &(0x7f0000001700)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000380)=""/111, 0x6f}, {&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000580)=""/203, 0xcb}], 0x6, 0x2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="66baf80cb83cecb78cef66bafc0ced66ba400066b8ffff66ef0f78d164646565470fc77d9fb9240b0000b809000000ba000000000f3048b805000000000000000f23c00f21f835010004000f23f80f005300364b0fc729360fc77c8ffd0f20c035000000400f22c0", 0x68}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0xeeee8000}}, "cb31455c9e9d288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97af85a08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d03ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e50100cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

197.234424ms ago: executing program 2 (id=61):
syz_usb_connect(0x4, 0xf5, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0xf1, 0x62, 0x20, 0xeb1a, 0x8179, 0x1e73, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3d, 0x0, 0x3, 0xf9, 0xca, 0xb4, 0x0, [], [{{0x9, 0x5, 0xc, 0x10, 0x40, 0x4, 0x2, 0xde, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xc}, @generic={0x75, 0x21, "d92dc6d1c32e6aef20e42b80634656d887340dd570238e18e0ad19b34f0cd6160529793fb0a2694157fe9c05499aa4dcb0145acd36641c4867b47fb36d35778f75c08fdb7d39093d0a754dc4dfe19f9e4164e42a778c2dbc9edb0a0097bda2917e86908e943bd349452f888cda38cc94ab4fb0"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x6e, 0xff}}, {{0x9, 0x5, 0x3, 0x8, 0x10, 0x5, 0xcc, 0x3, [@generic={0x3a, 0x24, "8a14fe79fbcfaf694654197e1f50c420000c1c0872821becd425efbafe5700c3ec846ac0c56596aa72db2ae938fc8e7612a4c1b1af8cbea5"}]}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000080), 0x5, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x66666666666680e, 0x0, &(0x7f0000000fc0)=[{}, {}]})
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f00000000c0)=ANY=[])

189.936831ms ago: executing program 0 (id=62):
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8000, '\x00', @string=&(0x7f0000000200)=0x7d}})

0s ago: executing program 3 (id=63):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfc}, 0x6d}, 0x1, 0x0, 0x0, 0x4004045}, 0x20000044)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts.
[   74.153221][ T5824] cgroup: Unknown subsys name 'net'
[   74.280097][ T5824] cgroup: Unknown subsys name 'cpuset'
[   74.289087][ T5824] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   75.706987][ T5824] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   78.270806][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.279186][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   78.286909][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   78.295281][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.302883][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   78.310735][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.318312][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   78.322458][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.326798][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.335311][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   78.340693][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   78.351127][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   78.355586][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   78.361579][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   78.375470][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   78.418968][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.429607][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   78.429939][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   78.438030][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   78.444246][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   78.459912][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.470262][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   78.493186][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.501079][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   78.510324][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.888028][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   79.157249][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   79.170421][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.178588][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.186028][ T5835] bridge_slave_0: entered allmulticast mode
[   79.193589][ T5835] bridge_slave_0: entered promiscuous mode
[   79.229211][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.236592][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.243806][ T5835] bridge_slave_1: entered allmulticast mode
[   79.251450][ T5835] bridge_slave_1: entered promiscuous mode
[   79.322577][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   79.401350][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   79.461143][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.502278][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.516167][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   79.665057][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.672365][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.679734][ T5851] bridge_slave_0: entered allmulticast mode
[   79.687103][ T5851] bridge_slave_0: entered promiscuous mode
[   79.698283][ T5835] team0: Port device team_slave_0 added
[   79.716747][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.723900][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.731719][ T5836] bridge_slave_0: entered allmulticast mode
[   79.738952][ T5836] bridge_slave_0: entered promiscuous mode
[   79.760691][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.768558][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.775718][ T5851] bridge_slave_1: entered allmulticast mode
[   79.782993][ T5851] bridge_slave_1: entered promiscuous mode
[   79.791912][ T5835] team0: Port device team_slave_1 added
[   79.802933][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.810313][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.817550][ T5836] bridge_slave_1: entered allmulticast mode
[   79.824650][ T5836] bridge_slave_1: entered promiscuous mode
[   79.834880][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.842062][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.849294][ T5834] bridge_slave_0: entered allmulticast mode
[   79.856764][ T5834] bridge_slave_0: entered promiscuous mode
[   79.866002][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.873415][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.880680][ T5834] bridge_slave_1: entered allmulticast mode
[   79.888463][ T5834] bridge_slave_1: entered promiscuous mode
[   79.996683][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.020165][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.032401][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.039428][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.065682][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.093610][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.117109][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.129603][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.139444][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.147371][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.173626][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.210591][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.265794][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.273452][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.281347][ T5838] bridge_slave_0: entered allmulticast mode
[   80.288865][ T5838] bridge_slave_0: entered promiscuous mode
[   80.299858][ T5836] team0: Port device team_slave_0 added
[   80.306075][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.313372][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.320612][ T5838] bridge_slave_1: entered allmulticast mode
[   80.328820][ T5838] bridge_slave_1: entered promiscuous mode
[   80.351849][ T5851] team0: Port device team_slave_0 added
[   80.360017][ T5836] team0: Port device team_slave_1 added
[   80.392817][ T5834] team0: Port device team_slave_0 added
[   80.401592][ T5851] team0: Port device team_slave_1 added
[   80.435194][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.448806][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.458279][ T5840] Bluetooth: hci0: command tx timeout
[   80.466154][ T5834] team0: Port device team_slave_1 added
[   80.537035][   T52] Bluetooth: hci2: command tx timeout
[   80.537067][ T5850] Bluetooth: hci4: command tx timeout
[   80.548904][ T5840] Bluetooth: hci3: command tx timeout
[   80.558847][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.565818][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.592292][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.604533][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.612010][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.638038][ T5840] Bluetooth: hci1: command tx timeout
[   80.643579][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.661362][ T5835] hsr_slave_0: entered promiscuous mode
[   80.667914][ T5835] hsr_slave_1: entered promiscuous mode
[   80.699345][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.706324][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.732569][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.745197][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.752879][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.779030][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.790579][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.797863][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.823919][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.845188][ T5838] team0: Port device team_slave_0 added
[   80.854350][ T5838] team0: Port device team_slave_1 added
[   80.861301][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.868460][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.894790][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.994232][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.002306][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.029334][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.079091][ T5836] hsr_slave_0: entered promiscuous mode
[   81.085721][ T5836] hsr_slave_1: entered promiscuous mode
[   81.092623][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.100859][ T5836] Cannot create hsr debugfs directory
[   81.108009][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.115001][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.141115][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.183835][ T5851] hsr_slave_0: entered promiscuous mode
[   81.190781][ T5851] hsr_slave_1: entered promiscuous mode
[   81.197241][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.204810][ T5851] Cannot create hsr debugfs directory
[   81.280628][ T5834] hsr_slave_0: entered promiscuous mode
[   81.287192][ T5834] hsr_slave_1: entered promiscuous mode
[   81.293228][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.300889][ T5834] Cannot create hsr debugfs directory
[   81.400131][ T5838] hsr_slave_0: entered promiscuous mode
[   81.406600][ T5838] hsr_slave_1: entered promiscuous mode
[   81.412636][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.420763][ T5838] Cannot create hsr debugfs directory
[   81.953086][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   81.974884][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   82.015604][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   82.039743][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   82.118648][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   82.168285][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   82.181094][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   82.192267][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   82.286334][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   82.301879][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   82.311790][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   82.322716][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   82.437188][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   82.459171][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.477141][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   82.491310][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   82.540458][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   82.547429][ T5840] Bluetooth: hci0: command tx timeout
[   82.566993][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   82.615392][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.622685][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.629952][ T5850] Bluetooth: hci4: command tx timeout
[   82.633650][   T52] Bluetooth: hci2: command tx timeout
[   82.635417][ T5840] Bluetooth: hci3: command tx timeout
[   82.650836][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.658135][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.683282][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   82.702393][ T5840] Bluetooth: hci1: command tx timeout
[   82.734256][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.746230][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   82.765401][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   82.777687][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   82.797943][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.851143][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   82.899573][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   82.911879][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.919079][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.935714][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.942850][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.001139][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.008304][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.033255][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.040486][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.281953][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.304502][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.364713][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   83.425220][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   83.441855][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.449091][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.493464][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.500682][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.539548][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.546761][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.569228][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.609252][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.616479][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.830253][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.952929][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.109724][ T5851] veth0_vlan: entered promiscuous mode
[   84.167965][ T5851] veth1_vlan: entered promiscuous mode
[   84.215616][ T5836] veth0_vlan: entered promiscuous mode
[   84.312809][ T5836] veth1_vlan: entered promiscuous mode
[   84.358951][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.429610][ T5835] veth0_vlan: entered promiscuous mode
[   84.441950][ T5851] veth0_macvtap: entered promiscuous mode
[   84.461583][ T5851] veth1_macvtap: entered promiscuous mode
[   84.474985][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.485037][ T5836] veth0_macvtap: entered promiscuous mode
[   84.505733][ T5835] veth1_vlan: entered promiscuous mode
[   84.515109][ T5836] veth1_macvtap: entered promiscuous mode
[   84.534104][ T5834] veth0_vlan: entered promiscuous mode
[   84.561050][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.572990][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.600714][ T5834] veth1_vlan: entered promiscuous mode
[   84.613998][ T5851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.623115][ T5840] Bluetooth: hci0: command tx timeout
[   84.630078][ T5851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.639943][ T5851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.648954][ T5851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.672169][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.698433][ T5840] Bluetooth: hci3: command tx timeout
[   84.698456][   T52] Bluetooth: hci4: command tx timeout
[   84.703843][ T5850] Bluetooth: hci2: command tx timeout
[   84.720086][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.770524][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.782470][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.793285][ T5850] Bluetooth: hci1: command tx timeout
[   84.798485][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.807561][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.822164][ T5834] veth0_macvtap: entered promiscuous mode
[   84.830567][ T5835] veth0_macvtap: entered promiscuous mode
[   84.846143][ T5834] veth1_macvtap: entered promiscuous mode
[   84.862908][ T5835] veth1_macvtap: entered promiscuous mode
[   84.919164][ T5838] veth0_vlan: entered promiscuous mode
[   84.993843][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.009430][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.024721][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.040164][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.046943][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.071293][ T5838] veth1_vlan: entered promiscuous mode
[   85.085340][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.086095][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.104992][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.114038][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.115273][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.123491][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.181464][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.201749][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.210580][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.226834][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.235575][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.245870][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.255221][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.323692][ T1317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.332679][ T1317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.370683][ T5838] veth0_macvtap: entered promiscuous mode
[   85.371253][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   85.382954][ T5838] veth1_macvtap: entered promiscuous mode
[   85.548684][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.578017][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.605714][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.769718][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.787986][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.795849][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.811575][ T5965] Zero length message leads to an empty skb
[   85.873501][ T5105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.889110][ T5105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.921497][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.941231][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.961597][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.986651][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.064058][ T5105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.096882][ T5105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.264020][ T5974] x_tables: duplicate underflow at hook 3
[   86.380981][ T5976] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   86.411793][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.432798][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.447063][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.451615][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.576823][   T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   86.714187][ T5850] Bluetooth: hci0: command tx timeout
[   86.862041][ T5850] Bluetooth: hci2: command tx timeout
[   86.881504][ T5850] Bluetooth: hci3: command tx timeout
[   86.891251][ T5850] Bluetooth: hci4: command tx timeout
[   86.901778][ T5840] Bluetooth: hci1: command tx timeout
[   86.936749][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.988423][  T121] cfg80211: failed to load regulatory.db
[   87.162717][ T5979] sp0: Synchronizing with TNC
[   87.226562][   T24] usb 3-1: Using ep0 maxpacket: 16
[   87.232619][ T5984] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   87.247831][   T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[   87.279512][   T24] usb 3-1: config 0 has no interface number 0
[   87.339462][   T24] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d
[   87.360702][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.371132][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.376967][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.539236][   T24] usb 3-1: Product: syz
[   87.544344][   T24] usb 3-1: Manufacturer: syz
[   87.549717][   T24] usb 3-1: SerialNumber: syz
[   87.563076][   T24] usb 3-1: config 0 descriptor??
[   87.579058][   T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   88.010877][ T6001] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20001
[   88.037724][ T6001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'.
[   88.212136][ T6008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'.
[   88.346755][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   88.391111][ T6008] netlink: 96 bytes leftover after parsing attributes in process `syz.0.12'.
[   89.503453][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   89.576805][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   89.605794][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   89.708270][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   89.978101][ T6014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.000993][ T6014] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.015986][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   90.228405][ T6014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.617028][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   90.770430][ T6032] netlink: 88 bytes leftover after parsing attributes in process `syz.4.19'.
[   90.796904][ T6014] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.848065][ T6033] ceph: No mds server is up or the cluster is laggy
[   90.852068][ T5974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.858317][ T5902] libceph: connect (1)[c::]:6789 error -101
[   90.872726][ T5974] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.909770][ T5902] libceph: mon0 (1)[c::]:6789 connect error
[   91.383946][ T6039] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20'.
[   91.387587][ T6043] tmpfs: Bad value for 'mpol'
[   91.398029][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   91.504069][ T6041] netlink: 'syz.1.20': attribute type 10 has an invalid length.
[   91.544282][ T5956] usb 3-1: USB disconnect, device number 2
[   91.581151][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[   91.591304][ T6037] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18'.
[   91.645130][    T9] usb 5-1: config 1 interface 0 altsetting 210 bulk endpoint 0x1 has invalid maxpacket 1024
[   91.687580][    T9] usb 5-1: config 1 interface 0 altsetting 210 bulk endpoint 0x82 has invalid maxpacket 16
[   91.708497][    T9] usb 5-1: config 1 interface 0 has no altsetting 0
[   91.711833][ T6041] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   91.729211][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   91.756986][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.810275][    T9] usb 5-1: Product: syz
[   91.814491][    T9] usb 5-1: Manufacturer: syz
[   91.832453][    T9] usb 5-1: SerialNumber: syz
[   93.245912][ T6051] delete_channel: no stack
[   93.342582][    T9] usb 5-1: can't set config #1, error -71
[   93.364648][    T9] usb 5-1: USB disconnect, device number 2
[   95.028025][ T6085] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   95.093956][ T6095] netlink: 24 bytes leftover after parsing attributes in process `syz.3.32'.
[   95.787034][ T5949] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   96.266886][ T5949] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   96.275989][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.288277][ T5949] usb 1-1: Product: syz
[   96.297400][ T5949] usb 1-1: Manufacturer: syz
[   96.302869][ T5949] usb 1-1: SerialNumber: syz
[   96.564572][ T5949] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   96.637410][   T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   96.780747][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37'.
[   96.850861][    C0] usb 1-1: ath9k_htc: invalid pkt_len (ff31)
[   96.974118][ T6123] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[   97.059812][ T6094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.099098][ T6096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.154992][ T6094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.157309][ T6096] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.272656][ T6097] =======================================================
[   97.272656][ T6097] WARNING: The mand mount option has been deprecated and
[   97.272656][ T6097]          and is ignored by this kernel. Remove the mand
[   97.272656][ T6097]          option from the mount to silence this warning.
[   97.272656][ T6097] =======================================================
[   97.307541][    C1] vkms_vblank_simulate: vblank timer overrun
[   97.325342][ T5949] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   97.774874][   T43] usb 1-1: USB disconnect, device number 2
[   97.784530][   T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[   97.800721][   T10] ath9k_htc: Failed to initialize the device
[   97.813828][   T43] usb 1-1: ath9k_htc: USB layer deinitialized
[   97.863011][ T5949] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[   97.892722][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.913057][ T5949] usb 5-1: Product: syz
[   97.923200][ T5949] usb 5-1: Manufacturer: syz
[   97.939059][ T5949] usb 5-1: SerialNumber: syz
[   97.962456][ T5949] usb 5-1: config 0 descriptor??
[   98.235932][ T5949] hso 5-1:0.0: Failed to find BULK IN ep
[   98.251976][ T5949] usb-storage 5-1:0.0: USB Mass Storage device detected
[   98.519449][   T43] usb 5-1: USB disconnect, device number 3
[   99.062236][ T6150] netlink: 24 bytes leftover after parsing attributes in process `syz.0.43'.
[   99.487289][ T6149] netfs: Couldn't get user pages (rc=-14)
[  100.478097][ T6169] xt_SECMARK: invalid mode: 2
[  101.298919][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'.
[  101.309918][ T6172] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.319536][ T6172] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.658874][ T6172] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.681268][ T6172] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.901230][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.909365][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.957254][   T43] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  101.976626][ T5902] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  101.980662][ T6171] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.991482][ T6171] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.999732][ T6171] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.006925][ T6171] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.051546][ T6171] team0: Port device bridge0 added
[  102.206463][   T43] usb 5-1: Using ep0 maxpacket: 16
[  102.224419][ T5902] usb 1-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28
[  102.246995][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.259639][ T5902] usb 1-1: Product: syz
[  102.265109][ T5902] usb 1-1: Manufacturer: syz
[  102.272886][ T5902] usb 1-1: SerialNumber: syz
[  102.277835][   T43] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  102.288808][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.297270][   T43] usb 5-1: Product: syz
[  102.336314][   T43] usb 5-1: Manufacturer: syz
[  102.341611][   T43] usb 5-1: SerialNumber: syz
[  102.347588][ T5902] usb 1-1: config 0 descriptor??
[  102.367873][   T43] usb 5-1: config 0 descriptor??
[  102.378732][ T5902] option 1-1:0.0: GSM modem (1-port) converter detected
[  102.571086][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'.
[  102.582670][ T6192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.55'.
[  102.593195][   T43] speedtch 5-1:0.0: speedtch_bind: data interface not found!
[  102.622796][   T43] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19!
[  102.634431][   T43] usb 5-1: USB disconnect, device number 4
[  102.677624][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  102.856495][    T9] usb 2-1: Using ep0 maxpacket: 8
[  102.865978][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  102.876744][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  102.888747][    T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  102.898232][   T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  102.905736][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.914669][    T9] usb 2-1: Product: syz
[  102.919507][    T9] usb 2-1: Manufacturer: syz
[  102.924127][    T9] usb 2-1: SerialNumber: syz
[  102.931289][    T9] usb 2-1: config 0 descriptor??
[  103.060994][   T10] usb 3-1: config 0 has an invalid interface number: 95 but max is 0
[  103.069909][   T10] usb 3-1: config 0 has no interface number 0
[  103.076804][   T10] usb 3-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8
[  103.076989][   T43] usb 1-1: USB disconnect, device number 3
[  103.093019][   T10] usb 3-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46
[  103.120637][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.125450][   T43] option 1-1:0.0: device disconnected
[  103.179920][   T10] usb 3-1: Product: syz
[  103.184204][   T10] usb 3-1: Manufacturer: syz
[  103.218144][   T10] usb 3-1: SerialNumber: syz
[  103.244373][   T10] usb 3-1: config 0 descriptor??
[  103.280551][ T6198] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  103.310605][ T6206] syz.3.59 uses obsolete (PF_INET,SOCK_PACKET)
[  103.937307][ T6207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.57'.
[  103.993641][   T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  104.013947][   T10] usb 3-1: MIDIStreaming interface descriptor not found
[  104.201621][   T10] usb 3-1: USB disconnect, device number 3
[  104.364063][ T6081] udevd[6081]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  104.402817][ T6223] ------------[ cut here ]------------
[  104.408906][ T6223] WARNING: CPU: 0 PID: 6223 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310
[  104.418797][ T6223] Modules linked in:
[  104.422927][ T6223] CPU: 0 UID: 0 PID: 6223 Comm: syz.4.60 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  104.432736][ T6223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  104.443051][ T6223] RIP: 0010:folio_memcg+0x1a8/0x310
[  104.448450][ T6223] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff
[  104.468632][ T6223] RSP: 0018:ffffc9000b89f250 EFLAGS: 00010283
[  104.474764][ T6223] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000
[  104.483314][ T6223] RDX: ffffc9000cc2b000 RSI: 000000000000196f RDI: 0000000000001970
[  104.491532][ T6223] RBP: 0000000000000000 R08: ffffea0000ad4a87 R09: 1ffffd400015a950
[  104.499748][ T6223] R10: dffffc0000000000 R11: fffff9400015a951 R12: ffffea0000ad4ab0
[  104.507817][ T6223] R13: dffffc0000000000 R14: ffff888031c01f00 R15: 0000000000000002
[  104.515859][ T6223] FS:  00007f9f733276c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000
[  104.524911][ T6223] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  104.531692][ T6223] CR2: 0000000000000000 CR3: 0000000032b3e000 CR4: 00000000003526f0
[  104.539914][ T6223] Call Trace:
[  104.543257][ T6223]  <TASK>
[  104.546228][ T6223]  workingset_activation+0x5f/0x4a0
[  104.551576][ T6223]  ? folio_mark_accessed+0x361/0x4a0
[  104.557350][ T6223]  folio_mark_accessed+0x3b5/0x4a0
[  104.562518][ T6223]  kvm_release_page_clean+0x9a/0xe0
[  104.568197][ T6223]  kvm_tdp_page_fault+0x2dd/0x370
[  104.573268][ T6223]  kvm_mmu_do_page_fault+0x2c5/0x640
[  104.578640][ T6223]  ? vmx_vcpu_run+0xd8b/0x25d0
[  104.583444][ T6223]  ? __pfx_kvm_mmu_do_page_fault+0x10/0x10
[  104.589399][ T6223]  ? vmx_handle_exit_irqoff+0x29e/0xad0
[  104.594980][ T6223]  kvm_mmu_page_fault+0x22f/0xb70
[  104.600203][ T6223]  ? __pfx_handle_ept_violation+0x10/0x10
[  104.605965][ T6223]  vmx_handle_exit+0x1090/0x18a0
[  104.610998][ T6223]  ? vcpu_run+0x361c/0x6f70
[  104.615578][ T6223]  ? rcu_is_watching+0x15/0xb0
[  104.620791][ T6223]  vcpu_run+0x432e/0x6f70
[  104.625193][ T6223]  ? vcpu_run+0x361c/0x6f70
[  104.629857][ T6223]  ? __pfx_vcpu_run+0x10/0x10
[  104.634578][ T6223]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  104.640398][ T6223]  ? rcu_is_watching+0x15/0xb0
[  104.645200][ T6223]  kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[  104.650878][ T6223]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  104.656686][ T6223]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  104.663139][ T6223]  ? rcu_is_watching+0x15/0xb0
[  104.668348][ T6223]  ? look_up_lock_class+0x74/0x170
[  104.673508][ T6223]  ? register_lock_class+0x51/0x320
[  104.678823][ T6223]  ? __lock_acquire+0xab9/0xd20
[  104.683749][ T6223]  kvm_vcpu_ioctl+0x95c/0xe90
[  104.688552][ T6223]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  104.693784][ T6223]  ? __lock_acquire+0xab9/0xd20
[  104.698741][ T6223]  ? __asan_memset+0x22/0x50
[  104.703366][ T6223]  ? smack_file_ioctl+0x302/0x340
[  104.708515][ T6223]  ? __pfx_smack_file_ioctl+0x10/0x10
[  104.713969][ T6223]  ? __fget_files+0x2a/0x420
[  104.718672][ T6223]  ? __fget_files+0x3a0/0x420
[  104.723382][ T6223]  ? __fget_files+0x2a/0x420
[  104.728115][ T6223]  ? bpf_lsm_file_ioctl+0x9/0x20
[  104.733093][ T6223]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  104.738398][ T6223]  __se_sys_ioctl+0xfc/0x170
[  104.743036][ T6223]  do_syscall_64+0xfa/0x3b0
[  104.747735][ T6223]  ? lockdep_hardirqs_on+0x9c/0x150
[  104.752966][ T6223]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.759129][ T6223]  ? clear_bhb_loop+0x60/0xb0
[  104.764266][ T6223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.770649][ T6223] RIP: 0033:0x7f9f7258ebe9
[  104.775112][ T6223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.794794][ T6223] RSP: 002b:00007f9f73327038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  104.803301][ T6223] RAX: ffffffffffffffda RBX: 00007f9f727b5fa0 RCX: 00007f9f7258ebe9
[  104.811348][ T6223] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[  104.819386][ T6223] RBP: 00007f9f72611e19 R08: 0000000000000000 R09: 0000000000000000
[  104.827464][ T6223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  104.835468][ T6223] R13: 00007f9f727b6038 R14: 00007f9f727b5fa0 R15: 00007ffe21d325f8
[  104.843566][ T6223]  </TASK>
[  104.846680][ T6223] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  104.853981][ T6223] CPU: 0 UID: 0 PID: 6223 Comm: syz.4.60 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  104.863733][ T6223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  104.873819][ T6223] Call Trace:
[  104.877105][ T6223]  <TASK>
[  104.880042][ T6223]  dump_stack_lvl+0x99/0x250
[  104.884638][ T6223]  ? __asan_memcpy+0x40/0x70
[  104.889238][ T6223]  ? __pfx_dump_stack_lvl+0x10/0x10
[  104.894441][ T6223]  ? __pfx__printk+0x10/0x10
[  104.899048][ T6223]  panic+0x2db/0x790
[  104.902949][ T6223]  ? __pfx_panic+0x10/0x10
[  104.907383][ T6223]  __warn+0x31b/0x4b0
[  104.911378][ T6223]  ? folio_memcg+0x1a8/0x310
[  104.915976][ T6223]  ? folio_memcg+0x1a8/0x310
[  104.920571][ T6223]  report_bug+0x2be/0x4f0
[  104.924900][ T6223]  ? folio_memcg+0x1a8/0x310
[  104.929501][ T6223]  ? folio_memcg+0x1a8/0x310
[  104.934182][ T6223]  ? folio_memcg+0x1aa/0x310
[  104.938779][ T6223]  handle_bug+0x84/0x160
[  104.943029][ T6223]  exc_invalid_op+0x1a/0x50
[  104.947535][ T6223]  asm_exc_invalid_op+0x1a/0x20
[  104.952385][ T6223] RIP: 0010:folio_memcg+0x1a8/0x310
[  104.957591][ T6223] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff
[  104.977208][ T6223] RSP: 0018:ffffc9000b89f250 EFLAGS: 00010283
[  104.983302][ T6223] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000
[  104.991362][ T6223] RDX: ffffc9000cc2b000 RSI: 000000000000196f RDI: 0000000000001970
[  104.999335][ T6223] RBP: 0000000000000000 R08: ffffea0000ad4a87 R09: 1ffffd400015a950
[  105.007329][ T6223] R10: dffffc0000000000 R11: fffff9400015a951 R12: ffffea0000ad4ab0
[  105.015303][ T6223] R13: dffffc0000000000 R14: ffff888031c01f00 R15: 0000000000000002
[  105.023286][ T6223]  ? folio_memcg+0x1a7/0x310
[  105.027899][ T6223]  workingset_activation+0x5f/0x4a0
[  105.033107][ T6223]  ? folio_mark_accessed+0x361/0x4a0
[  105.038407][ T6223]  folio_mark_accessed+0x3b5/0x4a0
[  105.043531][ T6223]  kvm_release_page_clean+0x9a/0xe0
[  105.048738][ T6223]  kvm_tdp_page_fault+0x2dd/0x370
[  105.053777][ T6223]  kvm_mmu_do_page_fault+0x2c5/0x640
[  105.059071][ T6223]  ? vmx_vcpu_run+0xd8b/0x25d0
[  105.063846][ T6223]  ? __pfx_kvm_mmu_do_page_fault+0x10/0x10
[  105.069676][ T6223]  ? vmx_handle_exit_irqoff+0x29e/0xad0
[  105.075230][ T6223]  kvm_mmu_page_fault+0x22f/0xb70
[  105.080275][ T6223]  ? __pfx_handle_ept_violation+0x10/0x10
[  105.086016][ T6223]  vmx_handle_exit+0x1090/0x18a0
[  105.090956][ T6223]  ? vcpu_run+0x361c/0x6f70
[  105.095466][ T6223]  ? rcu_is_watching+0x15/0xb0
[  105.100239][ T6223]  vcpu_run+0x432e/0x6f70
[  105.104589][ T6223]  ? vcpu_run+0x361c/0x6f70
[  105.109141][ T6223]  ? __pfx_vcpu_run+0x10/0x10
[  105.113832][ T6223]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  105.119562][ T6223]  ? rcu_is_watching+0x15/0xb0
[  105.124329][ T6223]  kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[  105.129890][ T6223]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  105.135616][ T6223]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  105.141604][ T6223]  ? rcu_is_watching+0x15/0xb0
[  105.146370][ T6223]  ? look_up_lock_class+0x74/0x170
[  105.151488][ T6223]  ? register_lock_class+0x51/0x320
[  105.156701][ T6223]  ? __lock_acquire+0xab9/0xd20
[  105.161576][ T6223]  kvm_vcpu_ioctl+0x95c/0xe90
[  105.166270][ T6223]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  105.171471][ T6223]  ? __lock_acquire+0xab9/0xd20
[  105.176320][ T6223]  ? __asan_memset+0x22/0x50
[  105.180921][ T6223]  ? smack_file_ioctl+0x302/0x340
[  105.185947][ T6223]  ? __pfx_smack_file_ioctl+0x10/0x10
[  105.191330][ T6223]  ? __fget_files+0x2a/0x420
[  105.195923][ T6223]  ? __fget_files+0x3a0/0x420
[  105.200598][ T6223]  ? __fget_files+0x2a/0x420
[  105.205189][ T6223]  ? bpf_lsm_file_ioctl+0x9/0x20
[  105.210132][ T6223]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  105.215335][ T6223]  __se_sys_ioctl+0xfc/0x170
[  105.220020][ T6223]  do_syscall_64+0xfa/0x3b0
[  105.224522][ T6223]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.229728][ T6223]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.235793][ T6223]  ? clear_bhb_loop+0x60/0xb0
[  105.240475][ T6223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.246383][ T6223] RIP: 0033:0x7f9f7258ebe9
[  105.250820][ T6223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  105.270449][ T6223] RSP: 002b:00007f9f73327038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  105.278884][ T6223] RAX: ffffffffffffffda RBX: 00007f9f727b5fa0 RCX: 00007f9f7258ebe9
[  105.286868][ T6223] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[  105.294857][ T6223] RBP: 00007f9f72611e19 R08: 0000000000000000 R09: 0000000000000000
[  105.302844][ T6223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  105.310863][ T6223] R13: 00007f9f727b6038 R14: 00007f9f727b5fa0 R15: 00007ffe21d325f8
[  105.318854][ T6223]  </TASK>
[  105.322135][ T6223] Kernel Offset: disabled
[  105.326453][ T6223] Rebooting in 86400 seconds..