last executing test programs:

44.251458241s ago: executing program 1 (id=54):
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x20048064)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {<r3=>r0}}, './file0\x00'})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x48c1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c00000003"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x48}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0)
write(r6, &(0x7f0000000300)='\x00\x00', 0x2)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1})
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r8, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x2000000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000540)={r7, r3}, 0xc)

42.267488993s ago: executing program 1 (id=58):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0)
setreuid(0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
epoll_create(0x567)
socketpair(0x1a, 0x2, 0x80000001, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a30000000002402800800014000008e020c0001800800014000000000080008400000001005000500"], 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$alg(0x26, 0x5, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

40.668575943s ago: executing program 1 (id=61):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = epoll_create1(0x0)
r4 = epoll_create1(0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r5)
sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000bc0)={0x29c, r6, 0xe701ac47a3d23ccd, 0x0, 0x2, {}, [@NLBL_MGMT_A_DOMAIN={0x277, 0x1, 'C\xec\xf8\xa0w\x15|:\xac\r\xab\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x95K]\xce,\xd1\xeb\x17]\xd5\xd0\xa7D!_\xa9$\x94\x02\v\x10od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*s6\xec\x06\xc7\x1dO\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xdak\x1a\x13\xe9\tc\x85\xb4\xcb\x815\x87\xd5\x97C\x1cM\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd2\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\xb4\v[\xdc@5\xbe\x9f\xccz\x81\x1f\xb4A|\x1a2p\xd1\x95\xb0i\"g\xd1\xf7t\xa4\xb3\x94\xe9\x01\xce\x82`\x17n\f\x05\xaa:\x03\x8cJs\x92\x81\xb0\\\xa5\xc7eB\xa5\a\xb6\x814\x05\xd1$3\x15/\xfcwNV\xeaif\xeb\x0f6\x94{5Se\xe9o\x86\a!\xf0\x9b\x80\x95\x84\xa6E\x90\xc9 \t \x04\xb1\xe7\xec\xf4\xe6 \x91\xfa\xd01<\xbcc\xd1\xac?V\xe2b3\xdelP[I\xae\x18Z\xa6K\xf2~\x19\x0f\xe7\x90\xb0\x84M)\x8e\x1av\xc2\a\xb4{\xb1(\b\xb5uh\x12k\xe2R?\x8boI\t\x87\xab\x80{\x8a\x1e\x85\xd6\x8c8vx\xeeTF\x1f&\x1fmaCc;Q\x9e\xd2\x9e\xcb\xa4\xb5M\xb1I\xfe%ukl\x18\xf7\xa5`\xaa\xed\xd7\xb1\xbf\xa0S?8\xb3Z\xb3\x1c\xb7FI7\xac\xdb\xa8\x1aF\xe5\x99\xc1\xa8\x9d\x84\x80]\x96\x0f\x0e\xd3\x00\xc91\xf1\x99\x02\xce\x01\x00\x00\x00\x00\x00\x00\x00;\xc5\b\x95\x1e\xff\xfc\xc8\x8e\x82\xb1\x8b_E\xc1\xb9AVN\v\xdf\xc1\x7f\x8f\xe9\xac\xab/\x85\xb3\xe8\xde\r\x04\xe7`\xb2\x1a\xcb;\xd8)\xac\x96\x1b\xd6K\x94z\xf7\xb8l0e\xed\x7f\xbb]\xdb\x1e\xff\xe8\xe8\x03V\x0e/\xc5K\x1e\x99\x9d\x11\xfe\x85c\x8a\x98|}\v\xb6\xaak\xc9p\xa0j\xe5!\r3\xd3I|\x1e]\xc8\xc4x\x92\xf3UE\xbcr\xbe\x0fI\xcfj\xdeB\x90\xa1\xe2Q\fD\xda_p\x87\x1b\xcd\x04\x94\xd67\xbe\xa2\xcaW\x12c{RzZ\x06\xf9\x95Pj\x06\x04\xbdz\x89o\x83N\x1ez\x10\xda\xdeK\xbaf\xcbDq\x97'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x29c}, 0x1, 0x0, 0x0, 0x20084880}, 0x80)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd3, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1f4, r3, &(0x7f0000000000)={0xa0000001})
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
fcntl$dupfd(r2, 0x406, r2)
socket$inet6_udp(0xa, 0x2, 0x0)

39.187525777s ago: executing program 1 (id=65):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"])
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
ftruncate(r1, 0x4a8e)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$FUSE_INTERRUPT(r1, &(0x7f00000028c0)={0x10, 0xfffffffffffffff5}, 0x8e4a)
mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r3 = accept4(r1, &(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000340)=0x80, 0x80800)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2c}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {}, {0x0, @usage, <r5=>0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000a80)={r5, 0x4, 0x9})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r6, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x0, 0x0, 0x0, @broadcast}]})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8db20200211a0008140003006e65756465082fa1fc3000000000009114001680100001800c000300810000008b0f0000"], 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x48880)

37.587051359s ago: executing program 1 (id=70):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80a4d1, 0x2)
close(0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0)
syz_emit_ethernet(0xa6, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000000702c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x4, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x2, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x8, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

36.884460323s ago: executing program 1 (id=74):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = open(0x0, 0x42000, 0x18)
ftruncate(r0, 0x2007ffb)
bpf$MAP_CREATE(0x0, 0x0, 0x1658356475ec8287)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, &(0x7f00000004c0))
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r2, 0x114, 0x271d, 0x0, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
bind$802154_raw(r0, &(0x7f00000001c0)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x14)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xa0)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xb3)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0xfffffffdffffffff)
r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x280)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r7, 0xc1205531, &(0x7f0000000040)={0x10, 0x57, 0x8, 0xa, '\x00', '\x00', '\x00', 0x7, 0x3, 0x17db, 0x9, "dfa9cc3414c5544321f5a6987d880933"})
lsm_get_self_attr(0x0, 0x0, 0x0, 0x0)

36.884159888s ago: executing program 32 (id=74):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = open(0x0, 0x42000, 0x18)
ftruncate(r0, 0x2007ffb)
bpf$MAP_CREATE(0x0, 0x0, 0x1658356475ec8287)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, &(0x7f00000004c0))
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r2, 0x114, 0x271d, 0x0, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
bind$802154_raw(r0, &(0x7f00000001c0)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x14)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xa0)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xb3)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0xfffffffdffffffff)
r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x280)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r7, 0xc1205531, &(0x7f0000000040)={0x10, 0x57, 0x8, 0xa, '\x00', '\x00', '\x00', 0x7, 0x3, 0x17db, 0x9, "dfa9cc3414c5544321f5a6987d880933"})
lsm_get_self_attr(0x0, 0x0, 0x0, 0x0)

9.526443604s ago: executing program 2 (id=131):
mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0xa40, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000100)=@echo=0x8)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0)
write(r4, &(0x7f0000000200)='bfq', 0x3)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0)
write(r5, &(0x7f0000000280)='1\n', 0x2)
pread64(r0, &(0x7f0000000400), 0x8, 0x1000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000007060500000000e1ffffff000100000505000100070000022884"], 0x1c}, 0x1, 0x0, 0x0, 0x4000814}, 0x48810)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]})
close_range(r7, 0xffffffffffffffff, 0x0)
pread64(r0, &(0x7f00000002c0)=""/7, 0x7, 0x9)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc)
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x40505330, &(0x7f00000001c0)={0x800103, 0x103, 0x6, 0xe1d9, 0x6})

8.932633096s ago: executing program 2 (id=135):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(0x0, r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x80)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18)
sendto$inet6(r4, 0x0, 0x0, 0x400c0, &(0x7f0000000040)={0xa, 0x4e24, 0xffffff7c, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x9}, 0x1c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100001040000", @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r5, @ANYBLOB="080004007f"], 0x50}}, 0x0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140)=r7, 0x4)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)

8.157958553s ago: executing program 2 (id=137):
r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000380)=""/131, 0x83)
r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x0)
syz_usb_connect$uac3(0x0, 0xb5, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000000)=@base={0xa, 0x8, 0x4932, 0x7f, 0x0, 0x1}, 0x50)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
r5 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1})
io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x64)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
read$char_usb(r1, 0x0, 0x0)
syz_usb_disconnect(r0)

7.914477526s ago: executing program 4 (id=138):
r0 = gettid()
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000fd1414000000000000000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000c9cb8c463843f41976dfe9fe674d72b1fd3f90a3d417b1043a198ee752902e387d77b0c946c68cf54ed8ac16eb829e0150961673ca881301d3a9ec003e233673d83a2061ad18146cc39c5e59cd1910912dd907bf2251dd5d78fd7354b5f19448"], 0x50}}, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="bed200099400000005140000ffaf966cabd08f"], 0x10}}, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x2)
fsopen(0x0, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2c41, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x8, 0x1, 0x2}, 0x20)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000000400)='\n', 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)

7.785105895s ago: executing program 0 (id=139):
r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000180), 0x129000, 0x0)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
syz_open_dev$vcsu(&(0x7f00000001c0), 0x83d5, 0x800)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_CANCEL(r1, 0x6407)
openat$uhid(0xffffff9c, &(0x7f00000002c0), 0x802, 0x0)
pselect6(0x40, &(0x7f0000000680)={0x8, 0x7, 0x0, 0xfffffffffffffff9, 0x916, 0xae3, 0x7, 0x8}, 0x0, 0x0, &(0x7f0000000740), 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r2, 0x0, 0x30, 0x0, @void}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000040)={0xffe9, 0x0, 0x1, 0xa, 0x4})
rseq(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044010)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_open_dev$audion(0x0, 0x2, 0x422001)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2)
close(0xffffffffffffffff)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
kexec_load(0x80, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x40000000, 0x2000000}], 0xa0000)

6.937658877s ago: executing program 3 (id=140):
syz_io_uring_setup(0x6c1d, 0x0, &(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a40))
r0 = syz_ublk_setup_io_uring(0x25da, 0x0, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000500))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000080)=[0x7, 0xfffffa87], 0x2)
r1 = msgget$private(0x0, 0x2)
r2 = syz_open_dev$sg(0x0, 0x508d48d4, 0x40902)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r6}, 0x94)
syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x9}, 0x94)
ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5)
socket$netlink(0x10, 0x3, 0x14)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0xd, 0x10, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@ldst={0x2, 0x1, 0x4, 0xa, 0xa, 0x18, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00'}, 0x94)
msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000140)=""/149)

6.550092205s ago: executing program 4 (id=141):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket(0x2, 0x80805, 0x0)
recvmsg$kcm(r0, &(0x7f0000002840)={&(0x7f0000000200)=@pppol2tp, 0x80, 0x0, 0x0, &(0x7f0000002740)=""/243, 0xf3}, 0x3dfdbfbdd7a869e0)
r1 = socket(0xa, 0x3, 0x3a)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d)
r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4)
renameat(r3, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000180)='./file1\x00')
mkdir(&(0x7f0000000240)='./file1\x00', 0x8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002880)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x10004017}, 0x81)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000406030000000000000000000000000005000100070000008b434b420557e3bc2663192cab715837"], 0x1c}}, 0x40000)
mount(0x0, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)='tmpfs\x00', 0x2000008, &(0x7f0000000300)='usrquota')

6.391454674s ago: executing program 0 (id=142):
r0 = socket(0x10, 0x3, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfb, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f00000000c0))
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f", 0x7)
r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xc, 0x80)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bind$can_raw(r3, &(0x7f0000000100), 0x10)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
process_madvise(r5, 0x0, 0x0, 0x67, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
splice(r6, 0x0, r7, 0x0, 0x4ffe6, 0x0)
socket$packet(0x11, 0x3, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000000c0))

5.248221679s ago: executing program 3 (id=143):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/187], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
socket$can_bcm(0x1d, 0x2, 0x2)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x400011)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef)
sendmmsg(r1, 0x0, 0x0, 0x88c3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66)

4.867490017s ago: executing program 4 (id=144):
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, <r0=>0xffffffffffffffff})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008814)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000640)={{0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x16, 0x8}, 0x6, 0x40, 0x9, 0xfffffffffffffffb, 0x0, 0x0, 0xd382})
connect$unix(0xffffffffffffffff, 0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x200)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r2, &(0x7f00000021c0), 0x5b, 0x40, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000c140)={&(0x7f000000bf80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x100000001}, [{0x8000000000000000, 0x4}, {0x9, 0x8000000000000001}, {0xb7, 0x6}, {0xffffffff, 0x3}, {0x2f4, 0x40}, {0x1000, 0x98e}, {0x1, 0x6}, {0x2, 0x2}, {0x7}, {0xc, 0xffffffff80000000}, {0x800000000000, 0x1c}, {0xffffffffffffffff, 0x4}, {0x9, 0x9}, {0xe8b0, 0x3aac00000000000}, {0x69b7, 0x5f}, {0x0, 0x5}, {0xa, 0x2}, {0x7fff}, {0x7, 0x4}, {0x7ff, 0x3}, {0x1ff, 0x100000001}, {0xa2e, 0xe}, {0x30fe, 0x1}, {0x8, 0x4}, {0xff, 0x2}, {0xfb9, 0x1}, {0x6, 0x8}, {0x1, 0xfffffffffffffffc}, {0x7, 0x5}, {0x2, 0xffffffffffff7fff}, {0x9, 0x8}, {0x59f, 0x5ff5}, {0x7fff, 0x7}, {0x8, 0x3}, {0xc1d, 0x4077d962}, {0x139b, 0x1089}, {0x5, 0x81}, {0x0, 0x3}, {0x8, 0xb}, {0x5, 0x1}, {0x4a82, 0xb}, {0x200, 0x405}, {0x1c508f61, 0x1a5b5e17}, {0xc, 0x7fffffff}, {0xff, 0x7d71}, {0x8000000000000001}, {0x10, 0x6}, {0x7, 0x8}, {0x5, 0x200}, {0xfffffffffffffffb, 0x6}, {0x7f, 0x6}, {0x80000001, 0x1}, {0x70, 0x9}, {0x1, 0x1}, {0x3, 0x2}, {0x81, 0x5}, {0x5, 0x9}, {0x8, 0x101}, {0x3, 0x7}, {0x9, 0x3}, {0x180, 0x59f}, {0xffff, 0x2}, {0x5}, {0x7, 0x80000000}, {0x10, 0x7fffffff}, {0x9, 0x9}, {0x1, 0x6}, {0x76, 0xfffffffffffffffc}, {0x40, 0x6}, {0x100000000, 0x200}, {0x4, 0x8}, {0x0, 0xf}, {0xd9, 0x63da50e0}, {0x2, 0xa987}, {0xf, 0xf800000000000000}, {0x8, 0xf405}, {0x2, 0x4}, {0x0, 0x80000001}, {0x2, 0x9}, {0x0, 0x2}, {0x5, 0x4}, {0x5, 0x7}, {0x2, 0x80000000}, {0x400000000000, 0xdb6}, {0x34c0}, {0x94, 0xfffffffffffffffa}, {0x0, 0xead5}, {0x7ff, 0x8001}, {0x5, 0x2}, {0xffffffffffff7fff}, {0xa, 0x1}, {0x0, 0x99}, {0xb9, 0x8001}, {0x7, 0x6de}, {0x2}, {0xfffffffffffffff7, 0x99b1}, {0x6, 0x4}, {0xda, 0x5}, {0x2, 0x8}, {0xd8, 0x4}, {0x8, 0xb6ea}, {0x4, 0xc27}, {0x2, 0x8000000000000000}, {0x3, 0x1}, {0x4, 0x6}, {0x2125, 0xffffffffffffff14}, {0x0, 0x7}, {0x0, 0x80}, {0x2, 0xfffffc0000000000}, {0x4e9a, 0x7}, {0x10001, 0x8}, {0x7fff, 0x200}, {0x5, 0x3}, {0x7, 0x3}, {0x100, 0x3}, {0x8, 0x5}, {0x3, 0x8000000000000000}, {0x4, 0x200}, {0x5, 0x5}, {0x2, 0x6}, {0x9, 0x9}, {0xa, 0x5}, {0x7, 0xd97}, {0xff, 0x5173}, {0x2}, {0x1, 0x81}, {0x6, 0x1ff}, {0x0, 0x6}, {0x9, 0x140000000000}, {0x26, 0x7}, {0x4, 0x6}, {0x0, 0xa}, {0x3}, {0xb, 0x5}, {0x9, 0x7}, {0x7, 0x1}, {0x1, 0x1}, {0x1e12, 0x5}, {0x5, 0x4}, {0x3, 0x6}, {0x5, 0x3}, {0x4003, 0xffffffff}, {0x1, 0x5}, {0x100000000, 0x3}, {0x90a6, 0x9}, {0x9, 0x107}, {0xf, 0x80000000}, {0x9, 0x101}, {0x9, 0x7fff}, {0x0, 0x1}, {0x6, 0x40}, {0x2, 0x10001}, {0x7, 0x6}, {0x200}, {0x3, 0xffff}, {0x5, 0x793}, {0x6, 0x100000000}, {0x3, 0xda}, {0xb0, 0xffffffff}, {0x6, 0x2}, {0x6, 0x2}, {0x4, 0x1}, {0x6, 0xa}, {0x5d, 0x8001}, {0x38, 0x5f0}, {0x4, 0x7}, {0xffffffff, 0x5a2}, {0x1, 0x2}, {0x8, 0x1}, {0xe9, 0xfffffffffffff7b6}, {0x8e, 0x7fff}, {0x80000000, 0x8000000000000001}, {0xffffffff, 0xfda9}, {0xe5, 0xffffffffffffff41}, {0x24, 0x8}, {0x5, 0x4}, {0x187, 0xa2}, {0xd6, 0xffffffffffffffa3}, {0x1, 0xa807}, {0x3723, 0x6}, {0xfffffffffffff801, 0xa9}, {}, {0x2, 0xfffffffffffffffa}, {0x10001, 0x8000000000}, {0xfffffffffffff000, 0x3}, {0x3, 0xf9e}, {0x2321, 0x8}, {0x7ff}, {0x10001, 0xffffffff}, {0x5, 0x3}, {0x7ff, 0x9}, {0x4, 0x3e}, {0x3bd14045, 0x8001}, {0xff, 0x7}, {0x8, 0xffff}, {0x575, 0x2}, {0x3, 0x2}, {0x1, 0xe}, {0x5, 0xe}, {0x7, 0x9c}, {0x3ff, 0x8001}, {0x8, 0xffffffffffff0001}, {0x0, 0x7}, {0x3, 0x1}, {0xfffffffffffffffb, 0x4}, {0x7, 0x9}, {0x7, 0x1649}, {0x3ff, 0x7}, {0xf, 0xe6a}, {0x8, 0x1}, {0x10000, 0x5}, {0x7, 0x6}, {0x1, 0xb5}, {0x7, 0xdd1}, {0xffff, 0x66e}, {0x0, 0x4}, {0x3, 0x30580c97}, {0x8001, 0xf6}, {0x6, 0x800}, {0xcaa, 0x5}, {0x9, 0xb}, {0x0, 0xb12}, {0x7, 0x8}, {0xfaa, 0x6}, {0x8, 0x5}, {0xfffffffffffff801, 0x951}, {0x7, 0x101}, {0x7, 0x910000}, {0x2, 0x5b}, {0xa8, 0x8}, {0x619, 0x1}, {0x8, 0xfffffffffffff775}, {0x3, 0x3}, {0x1ff, 0x8}, {0x2000000000000, 0x80000000}, {0xfff, 0x1}, {0x2, 0x868}, {0x2ef, 0x2}, {0x0, 0x8000000000000000}, {0x3, 0xfffffffffffffffc}, {0x1, 0x1}, {0x7, 0x7}, {0x57, 0x7}, {0x401, 0x6}, {0x5, 0x73}, {0x80000001, 0xc91}, {0x800, 0x7ff}, {0x777b, 0x9}, {0xb3, 0x8}, {0x4, 0x1}, {0x7, 0x6}, {0xd5}, {0x3, 0x401}, {0x1, 0x2}, {0x2, 0xfffffffffffff27a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32})
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r4, 0x10c, 0x4, &(0x7f0000000000), 0x0)
capset(&(0x7f0000000040)={0x19980330, r0}, &(0x7f0000000080)={0x0, 0xc, 0x4, 0x2, 0x330d, 0x6})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000300)={0x0, 'vlan1\x00'})

3.883449587s ago: executing program 0 (id=145):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
recvfrom$inet(r1, &(0x7f0000000780)=""/123, 0x7b, 0x10000, &(0x7f0000000800)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fsopen(&(0x7f0000000140)='cifs\x00', 0x0)
sched_setattr(0x0, 0x0, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
unshare(0x24020400)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=<r3=>0x0)
r4 = dup(0xffffffffffffffff)
syz_ublk_setup_queues(r4, r3, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000005, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x3, 0x401f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x400, 0x0, 0x367}}], 0x1, &(0x7f0000000880)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
shutdown(r1, 0x1)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x6801, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)

3.883251972s ago: executing program 4 (id=146):
r0 = gettid()
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000fd1414000000000000000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000c9cb8c463843f41976dfe9fe674d72b1fd3f90a3d417b1043a198ee752902e387d77b0c946c68cf54ed8ac16eb829e0150961673ca881301d3a9ec003e233673d83a2061ad18146cc39c5e59cd1910912dd907bf2251dd5d78fd7354b5f19448"], 0x50}}, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="bed200099400000005140000ffaf966cabd08f"], 0x10}}, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x2)
fsopen(0x0, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2c41, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x8, 0x1, 0x2}, 0x20)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000000400)='\n', 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)

3.49222807s ago: executing program 3 (id=147):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r5 = dup(r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
pipe(0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x88000cc, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100004)
write$eventfd(0xffffffffffffffff, &(0x7f0000000240), 0xffffff14)
write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0xf8d}}, 0x96d)

2.919877711s ago: executing program 4 (id=148):
socket$packet(0x11, 0x2, 0x300)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00')
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000080)={0x19, 0x10, 0x19, 0x10, 0x3, 0x2, 0x2, 0xac, 0xffffffffffffffff})
readv(r0, &(0x7f0000000000), 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
socket$inet_smc(0x2b, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
timer_create(0xb3b54c18e0590239, 0x0, 0x0)
openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
setns(0xc9, 0x0)
socket$packet(0x11, 0x2, 0x300)

2.777356592s ago: executing program 0 (id=149):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/187], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
socket$can_bcm(0x1d, 0x2, 0x2)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x400011)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef)
sendmmsg(r1, 0x0, 0x0, 0x88c3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66)

2.481797674s ago: executing program 3 (id=150):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r5 = dup(r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000340)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
splice(r6, 0x0, r8, 0x0, 0x88000cc, 0x0)
fcntl$setpipe(r7, 0x407, 0x100004)
write$eventfd(r7, 0x0, 0x0)
write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0xf8d}}, 0x96d)

1.931275484s ago: executing program 2 (id=151):
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008814)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000640)={{0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x16, 0x8}, 0x6, 0x40, 0x9, 0xfffffffffffffffb, 0x0, 0x0, 0xd382})
connect$unix(0xffffffffffffffff, 0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x200)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x40, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000c140)={&(0x7f000000bf80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x100000001}, [{0x8000000000000000, 0x4}, {0x9, 0x8000000000000001}, {0xb7, 0x6}, {0xffffffff, 0x3}, {0x2f4, 0x40}, {0x1000, 0x98e}, {0x1, 0x6}, {0x2, 0x2}, {0x7}, {0xc, 0xffffffff80000000}, {0x800000000000, 0x1c}, {0xffffffffffffffff, 0x4}, {0x9, 0x9}, {0xe8b0, 0x3aac00000000000}, {0x69b7, 0x5f}, {0x0, 0x5}, {0xa, 0x2}, {0x7fff}, {0x7, 0x4}, {0x7ff, 0x3}, {0x1ff, 0x100000001}, {0xa2e, 0xe}, {0x30fe, 0x1}, {0x8, 0x4}, {0xff, 0x2}, {0xfb9, 0x1}, {0x6, 0x8}, {0x1, 0xfffffffffffffffc}, {0x7, 0x5}, {0x2, 0xffffffffffff7fff}, {0x9, 0x8}, {0x59f, 0x5ff5}, {0x7fff, 0x7}, {0x8, 0x3}, {0xc1d, 0x4077d962}, {0x139b, 0x1089}, {0x5, 0x81}, {0x0, 0x3}, {0x8, 0xb}, {0x5, 0x1}, {0x4a82, 0xb}, {0x200, 0x405}, {0x1c508f61, 0x1a5b5e17}, {0xc, 0x7fffffff}, {0xff, 0x7d71}, {0x8000000000000001}, {0x10, 0x6}, {0x7, 0x8}, {0x5, 0x200}, {0xfffffffffffffffb, 0x6}, {0x7f, 0x6}, {0x80000001, 0x1}, {0x70, 0x9}, {0x1, 0x1}, {0x3, 0x2}, {0x81, 0x5}, {0x5, 0x9}, {0x8, 0x101}, {0x3, 0x7}, {0x9, 0x3}, {0x180, 0x59f}, {0xffff, 0x2}, {0x5}, {0x7, 0x80000000}, {0x10, 0x7fffffff}, {0x9, 0x9}, {0x1, 0x6}, {0x76, 0xfffffffffffffffc}, {0x40, 0x6}, {0x100000000, 0x200}, {0x4, 0x8}, {0x0, 0xf}, {0xd9, 0x63da50e0}, {0x2, 0xa987}, {0xf, 0xf800000000000000}, {0x8, 0xf405}, {0x2, 0x4}, {0x0, 0x80000001}, {0x2, 0x9}, {0x0, 0x2}, {0x5, 0x4}, {0x5, 0x7}, {0x2, 0x80000000}, {0x400000000000, 0xdb6}, {0x34c0}, {0x94, 0xfffffffffffffffa}, {0x0, 0xead5}, {0x7ff, 0x8001}, {0x5, 0x2}, {0xffffffffffff7fff}, {0xa, 0x1}, {0x0, 0x99}, {0xb9, 0x8001}, {0x7, 0x6de}, {0x2}, {0xfffffffffffffff7, 0x99b1}, {0x6, 0x4}, {0xda, 0x5}, {0x2, 0x8}, {0xd8, 0x4}, {0x8, 0xb6ea}, {0x4, 0xc27}, {0x2, 0x8000000000000000}, {0x3, 0x1}, {0x4, 0x6}, {0x2125, 0xffffffffffffff14}, {0x0, 0x7}, {0x0, 0x80}, {0x2, 0xfffffc0000000000}, {0x4e9a, 0x7}, {0x10001, 0x8}, {0x7fff, 0x200}, {0x5, 0x3}, {0x7, 0x3}, {0x100, 0x3}, {0x8, 0x5}, {0x3, 0x8000000000000000}, {0x4, 0x200}, {0x5, 0x5}, {0x2, 0x6}, {0x9, 0x9}, {0xa, 0x5}, {0x7, 0xd97}, {0xff, 0x5173}, {0x2}, {0x1, 0x81}, {0x6, 0x1ff}, {0x0, 0x6}, {0x9, 0x140000000000}, {0x26, 0x7}, {0x4, 0x6}, {0x0, 0xa}, {0x3}, {0xb, 0x5}, {0x9, 0x7}, {0x7, 0x1}, {0x1, 0x1}, {0x1e12, 0x5}, {0x5, 0x4}, {0x3, 0x6}, {0x5, 0x3}, {0x4003, 0xffffffff}, {0x1, 0x5}, {0x100000000, 0x3}, {0x90a6, 0x9}, {0x9, 0x107}, {0xf, 0x80000000}, {0x9, 0x101}, {0x9, 0x7fff}, {0x0, 0x1}, {0x6, 0x40}, {0x2, 0x10001}, {0x7, 0x6}, {0x200}, {0x3, 0xffff}, {0x5, 0x793}, {0x6, 0x100000000}, {0x3, 0xda}, {0xb0, 0xffffffff}, {0x6, 0x2}, {0x6, 0x2}, {0x4, 0x1}, {0x6, 0xa}, {0x5d, 0x8001}, {0x38, 0x5f0}, {0x4, 0x7}, {0xffffffff, 0x5a2}, {0x1, 0x2}, {0x8, 0x1}, {0xe9, 0xfffffffffffff7b6}, {0x8e, 0x7fff}, {0x80000000, 0x8000000000000001}, {0xffffffff, 0xfda9}, {0xe5, 0xffffffffffffff41}, {0x24, 0x8}, {0x5, 0x4}, {0x187, 0xa2}, {0xd6, 0xffffffffffffffa3}, {0x1, 0xa807}, {0x3723, 0x6}, {0xfffffffffffff801, 0xa9}, {}, {0x2, 0xfffffffffffffffa}, {0x10001, 0x8000000000}, {0xfffffffffffff000, 0x3}, {0x3, 0xf9e}, {0x2321, 0x8}, {0x7ff}, {0x10001, 0xffffffff}, {0x5, 0x3}, {0x7ff, 0x9}, {0x4, 0x3e}, {0x3bd14045, 0x8001}, {0xff, 0x7}, {0x8, 0xffff}, {0x575, 0x2}, {0x3, 0x2}, {0x1, 0xe}, {0x5, 0xe}, {0x7, 0x9c}, {0x3ff, 0x8001}, {0x8, 0xffffffffffff0001}, {0x0, 0x7}, {0x3, 0x1}, {0xfffffffffffffffb, 0x4}, {0x7, 0x9}, {0x7, 0x1649}, {0x3ff, 0x7}, {0xf, 0xe6a}, {0x8, 0x1}, {0x10000, 0x5}, {0x7, 0x6}, {0x1, 0xb5}, {0x7, 0xdd1}, {0xffff, 0x66e}, {0x0, 0x4}, {0x3, 0x30580c97}, {0x8001, 0xf6}, {0x6, 0x800}, {0xcaa, 0x5}, {0x9, 0xb}, {0x0, 0xb12}, {0x7, 0x8}, {0xfaa, 0x6}, {0x8, 0x5}, {0xfffffffffffff801, 0x951}, {0x7, 0x101}, {0x7, 0x910000}, {0x2, 0x5b}, {0xa8, 0x8}, {0x619, 0x1}, {0x8, 0xfffffffffffff775}, {0x3, 0x3}, {0x1ff, 0x8}, {0x2000000000000, 0x80000000}, {0xfff, 0x1}, {0x2, 0x868}, {0x2ef, 0x2}, {0x0, 0x8000000000000000}, {0x3, 0xfffffffffffffffc}, {0x1, 0x1}, {0x7, 0x7}, {0x57, 0x7}, {0x401, 0x6}, {0x5, 0x73}, {0x80000001, 0xc91}, {0x800, 0x7ff}, {0x777b, 0x9}, {0xb3, 0x8}, {0x4, 0x1}, {0x7, 0x6}, {0xd5}, {0x3, 0x401}, {0x1, 0x2}, {0x2, 0xfffffffffffff27a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32})
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r3, 0x10c, 0x4, &(0x7f0000000000), 0x0)
capset(0x0, &(0x7f0000000080)={0x0, 0xc, 0x4, 0x2, 0x330d, 0x6})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000300)={0x0, 'vlan1\x00'})

1.497734746s ago: executing program 4 (id=152):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c)
r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB])
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000002640)={0x2020}, 0x2020)
setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ed8755b5dc4e0e000c58ea00000000000600", 0x0, 0xfffffffe, 0x2, 0x2}, 0x3c)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f6, &(0x7f0000000340)="b2d311af94b883a7c917af570ae7b1e843a0a788f69d7891ade96769393efc8056a6f002e30c8d84568d737b56856a562c77400d2763599c42c39c2c346641f570afdc53d009685de5793fa1d5eece360b7f7647069f8c0e53a28126b06a6b5e797d92fc70f0bbf7cf41ac7523191c55decb8e836ebd8eba368cc270864fb703f797122b8690d189cd617620b20d0a9b8796")
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2})
write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x185b2000)
r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80100, 0x9c)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x54)
setsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002280), 0xffffffffffffffff)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000002e00090027bd700000000000040000004500118031f9e05e2f826cfc31dc2af824704f63dac994ce01dc7224e5479795b50d9015743a8b755e02e490bdfc3da898257de5b8996dbc932b5009df63b75f105c53ead0000000acc652da811ec41bc62fcd1ece064007233e937838ec6dd310243bb25df3f3da4035c973b36db7eee41680503e9a85319b6cde33bdcbed0f57b013b4c015dd521107a0df866951fe5769bce047be17f072233a9eb9244fd8d9ecd9ec5c3acf4bf2d9cd7209000000c3eb0e5d2c2ae6227b44019352854167792e"], 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

1.49228708s ago: executing program 3 (id=153):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/187], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
socket$can_bcm(0x1d, 0x2, 0x2)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x400011)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef)
sendmmsg(r1, 0x0, 0x0, 0x88c3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)}], 0x1}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66)

1.031597903s ago: executing program 0 (id=154):
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, <r0=>0xffffffffffffffff})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008814)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000640)={{0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x16, 0x8}, 0x6, 0x40, 0x9, 0xfffffffffffffffb, 0x0, 0x0, 0xd382})
connect$unix(0xffffffffffffffff, 0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x200)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r2, &(0x7f00000021c0), 0x5b, 0x40, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000c140)={&(0x7f000000bf80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x100000001}, [{0x8000000000000000, 0x4}, {0x9, 0x8000000000000001}, {0xb7, 0x6}, {0xffffffff, 0x3}, {0x2f4, 0x40}, {0x1000, 0x98e}, {0x1, 0x6}, {0x2, 0x2}, {0x7}, {0xc, 0xffffffff80000000}, {0x800000000000, 0x1c}, {0xffffffffffffffff, 0x4}, {0x9, 0x9}, {0xe8b0, 0x3aac00000000000}, {0x69b7, 0x5f}, {0x0, 0x5}, {0xa, 0x2}, {0x7fff}, {0x7, 0x4}, {0x7ff, 0x3}, {0x1ff, 0x100000001}, {0xa2e, 0xe}, {0x30fe, 0x1}, {0x8, 0x4}, {0xff, 0x2}, {0xfb9, 0x1}, {0x6, 0x8}, {0x1, 0xfffffffffffffffc}, {0x7, 0x5}, {0x2, 0xffffffffffff7fff}, {0x9, 0x8}, {0x59f, 0x5ff5}, {0x7fff, 0x7}, {0x8, 0x3}, {0xc1d, 0x4077d962}, {0x139b, 0x1089}, {0x5, 0x81}, {0x0, 0x3}, {0x8, 0xb}, {0x5, 0x1}, {0x4a82, 0xb}, {0x200, 0x405}, {0x1c508f61, 0x1a5b5e17}, {0xc, 0x7fffffff}, {0xff, 0x7d71}, {0x8000000000000001}, {0x10, 0x6}, {0x7, 0x8}, {0x5, 0x200}, {0xfffffffffffffffb, 0x6}, {0x7f, 0x6}, {0x80000001, 0x1}, {0x70, 0x9}, {0x1, 0x1}, {0x3, 0x2}, {0x81, 0x5}, {0x5, 0x9}, {0x8, 0x101}, {0x3, 0x7}, {0x9, 0x3}, {0x180, 0x59f}, {0xffff, 0x2}, {0x5}, {0x7, 0x80000000}, {0x10, 0x7fffffff}, {0x9, 0x9}, {0x1, 0x6}, {0x76, 0xfffffffffffffffc}, {0x40, 0x6}, {0x100000000, 0x200}, {0x4, 0x8}, {0x0, 0xf}, {0xd9, 0x63da50e0}, {0x2, 0xa987}, {0xf, 0xf800000000000000}, {0x8, 0xf405}, {0x2, 0x4}, {0x0, 0x80000001}, {0x2, 0x9}, {0x0, 0x2}, {0x5, 0x4}, {0x5, 0x7}, {0x2, 0x80000000}, {0x400000000000, 0xdb6}, {0x34c0}, {0x94, 0xfffffffffffffffa}, {0x0, 0xead5}, {0x7ff, 0x8001}, {0x5, 0x2}, {0xffffffffffff7fff}, {0xa, 0x1}, {0x0, 0x99}, {0xb9, 0x8001}, {0x7, 0x6de}, {0x2}, {0xfffffffffffffff7, 0x99b1}, {0x6, 0x4}, {0xda, 0x5}, {0x2, 0x8}, {0xd8, 0x4}, {0x8, 0xb6ea}, {0x4, 0xc27}, {0x2, 0x8000000000000000}, {0x3, 0x1}, {0x4, 0x6}, {0x2125, 0xffffffffffffff14}, {0x0, 0x7}, {0x0, 0x80}, {0x2, 0xfffffc0000000000}, {0x4e9a, 0x7}, {0x10001, 0x8}, {0x7fff, 0x200}, {0x5, 0x3}, {0x7, 0x3}, {0x100, 0x3}, {0x8, 0x5}, {0x3, 0x8000000000000000}, {0x4, 0x200}, {0x5, 0x5}, {0x2, 0x6}, {0x9, 0x9}, {0xa, 0x5}, {0x7, 0xd97}, {0xff, 0x5173}, {0x2}, {0x1, 0x81}, {0x6, 0x1ff}, {0x0, 0x6}, {0x9, 0x140000000000}, {0x26, 0x7}, {0x4, 0x6}, {0x0, 0xa}, {0x3}, {0xb, 0x5}, {0x9, 0x7}, {0x7, 0x1}, {0x1, 0x1}, {0x1e12, 0x5}, {0x5, 0x4}, {0x3, 0x6}, {0x5, 0x3}, {0x4003, 0xffffffff}, {0x1, 0x5}, {0x100000000, 0x3}, {0x90a6, 0x9}, {0x9, 0x107}, {0xf, 0x80000000}, {0x9, 0x101}, {0x9, 0x7fff}, {0x0, 0x1}, {0x6, 0x40}, {0x2, 0x10001}, {0x7, 0x6}, {0x200}, {0x3, 0xffff}, {0x5, 0x793}, {0x6, 0x100000000}, {0x3, 0xda}, {0xb0, 0xffffffff}, {0x6, 0x2}, {0x6, 0x2}, {0x4, 0x1}, {0x6, 0xa}, {0x5d, 0x8001}, {0x38, 0x5f0}, {0x4, 0x7}, {0xffffffff, 0x5a2}, {0x1, 0x2}, {0x8, 0x1}, {0xe9, 0xfffffffffffff7b6}, {0x8e, 0x7fff}, {0x80000000, 0x8000000000000001}, {0xffffffff, 0xfda9}, {0xe5, 0xffffffffffffff41}, {0x24, 0x8}, {0x5, 0x4}, {0x187, 0xa2}, {0xd6, 0xffffffffffffffa3}, {0x1, 0xa807}, {0x3723, 0x6}, {0xfffffffffffff801, 0xa9}, {}, {0x2, 0xfffffffffffffffa}, {0x10001, 0x8000000000}, {0xfffffffffffff000, 0x3}, {0x3, 0xf9e}, {0x2321, 0x8}, {0x7ff}, {0x10001, 0xffffffff}, {0x5, 0x3}, {0x7ff, 0x9}, {0x4, 0x3e}, {0x3bd14045, 0x8001}, {0xff, 0x7}, {0x8, 0xffff}, {0x575, 0x2}, {0x3, 0x2}, {0x1, 0xe}, {0x5, 0xe}, {0x7, 0x9c}, {0x3ff, 0x8001}, {0x8, 0xffffffffffff0001}, {0x0, 0x7}, {0x3, 0x1}, {0xfffffffffffffffb, 0x4}, {0x7, 0x9}, {0x7, 0x1649}, {0x3ff, 0x7}, {0xf, 0xe6a}, {0x8, 0x1}, {0x10000, 0x5}, {0x7, 0x6}, {0x1, 0xb5}, {0x7, 0xdd1}, {0xffff, 0x66e}, {0x0, 0x4}, {0x3, 0x30580c97}, {0x8001, 0xf6}, {0x6, 0x800}, {0xcaa, 0x5}, {0x9, 0xb}, {0x0, 0xb12}, {0x7, 0x8}, {0xfaa, 0x6}, {0x8, 0x5}, {0xfffffffffffff801, 0x951}, {0x7, 0x101}, {0x7, 0x910000}, {0x2, 0x5b}, {0xa8, 0x8}, {0x619, 0x1}, {0x8, 0xfffffffffffff775}, {0x3, 0x3}, {0x1ff, 0x8}, {0x2000000000000, 0x80000000}, {0xfff, 0x1}, {0x2, 0x868}, {0x2ef, 0x2}, {0x0, 0x8000000000000000}, {0x3, 0xfffffffffffffffc}, {0x1, 0x1}, {0x7, 0x7}, {0x57, 0x7}, {0x401, 0x6}, {0x5, 0x73}, {0x80000001, 0xc91}, {0x800, 0x7ff}, {0x777b, 0x9}, {0xb3, 0x8}, {0x4, 0x1}, {0x7, 0x6}, {0xd5}, {0x3, 0x401}, {0x1, 0x2}, {0x2, 0xfffffffffffff27a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32})
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r4, 0x10c, 0x4, &(0x7f0000000000), 0x0)
capset(&(0x7f0000000040)={0x19980330, r0}, &(0x7f0000000080)={0x0, 0xc, 0x4, 0x2, 0x330d, 0x6})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000300)={0x0, 'vlan1\x00'})

699.737363ms ago: executing program 2 (id=155):
r0 = openat$cdrom(0xffffff9c, 0x0, 0x8000, 0x0)
r1 = openat$dlm_monitor(0xffffff9c, 0x0, 0x129000, 0x0)
ioctl$BLKTRACESTART(r1, 0x1274, 0x0)
syz_open_dev$vcsu(&(0x7f00000001c0), 0x83d5, 0x800)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_CANCEL(r2, 0x6407)
openat$uhid(0xffffff9c, &(0x7f00000002c0), 0x802, 0x0)
pselect6(0x40, &(0x7f0000000680)={0x8, 0x7, 0x0, 0xfffffffffffffff9, 0x916, 0xae3, 0x7, 0x8}, 0x0, 0x0, &(0x7f0000000740), 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, 0x0, 0x30, 0x0, @void}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000040)={0xffe9, 0x0, 0x1, 0xa, 0x4})
rseq(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044010)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_open_dev$audion(0x0, 0x2, 0x422001)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2)
close(r0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
kexec_load(0x80, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x40000000, 0x2000000}], 0xa0000)

59.555916ms ago: executing program 0 (id=156):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r5 = dup(r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000340)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
splice(r6, 0x0, r8, 0x0, 0x88000cc, 0x0)
fcntl$setpipe(r7, 0x407, 0x100004)
write$eventfd(r7, &(0x7f0000000240), 0xffffff14)
write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0xf8d}}, 0x96d)

1.895914ms ago: executing program 2 (id=157):
r0 = gettid()
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000fd1414000000000000000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000c9cb8c463843f41976dfe9fe674d72b1fd3f90a3d417b1043a198ee752902e387d77b0c946c68cf54ed8ac16eb829e0150961673ca881301d3a9ec003e233673d83a2061ad18146cc39c5e59cd1910912dd907bf2251dd5d78fd7354b5f19448"], 0x50}}, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="bed200099400000005140000ffaf966cabd08f"], 0x10}}, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x2)
fsopen(0x0, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2c41, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x8, 0x1, 0x2}, 0x20)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000000400)='\n', 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)

0s ago: executing program 3 (id=165):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
symlinkat(&(0x7f0000001900)='./file0\x00', r0, &(0x7f0000001940)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480))
bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd67da7120001868e37d9c080cf76cc666cfa6c9c61101fc02000000000000000000000000000100000000000000000000ffff000000004e23080000ff0700"/92], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x7, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x6000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000180), 0x4)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
r6 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x10}, 0x4e20, 0x3, 'lblc\x00', 0x1a, 0x40c, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000200)={{0x84, @empty, 0x4e21, 0x3, 'rr\x00', 0xc, 0x5, 0x63}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4623, 0x3, 0x100000cd, 0x12d5f, 0x3}}, 0x44)
sendmmsg$sock(r5, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:62565' (ED25519) to the list of known hosts.
[   42.760358][ T5727] cgroup: Unknown subsys name 'net'
[   42.947904][ T5727] cgroup: Unknown subsys name 'cpuset'
[   42.952948][ T5727] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   44.119386][ T5727] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   48.443804][ T5751] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   48.444795][ T5751] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   48.445517][ T5751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   48.445698][ T5751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   48.446542][ T5751] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   48.447897][ T5751] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   48.448140][ T5751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   48.448661][ T5751] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   48.448780][ T5751] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   48.449644][ T5751] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   48.450396][ T5751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   48.450888][ T5751] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   48.451042][ T5751] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   48.451363][ T5751] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   48.452271][ T5751] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   48.452411][ T5751] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   48.452457][ T5751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   48.453185][ T5751] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   48.454798][ T5754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   48.455521][ T5755] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   49.167990][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.168264][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.168409][ T5746] bridge_slave_0: entered allmulticast mode
[   49.169817][ T5746] bridge_slave_0: entered promiscuous mode
[   49.197160][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.197278][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.197415][ T5746] bridge_slave_1: entered allmulticast mode
[   49.198727][ T5746] bridge_slave_1: entered promiscuous mode
[   49.279112][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   49.329680][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   49.355952][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.356121][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.356214][ T5747] bridge_slave_0: entered allmulticast mode
[   49.357844][ T5747] bridge_slave_0: entered promiscuous mode
[   49.360090][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.360162][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.360253][ T5747] bridge_slave_1: entered allmulticast mode
[   49.361577][ T5747] bridge_slave_1: entered promiscuous mode
[   49.362518][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.362591][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.362675][ T5740] bridge_slave_0: entered allmulticast mode
[   49.364297][ T5740] bridge_slave_0: entered promiscuous mode
[   49.393341][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.393495][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.393593][ T5739] bridge_slave_0: entered allmulticast mode
[   49.394935][ T5739] bridge_slave_0: entered promiscuous mode
[   49.396946][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.397007][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.397085][ T5740] bridge_slave_1: entered allmulticast mode
[   49.398181][ T5740] bridge_slave_1: entered promiscuous mode
[   49.409476][ T5746] team0: Port device team_slave_0 added
[   49.426391][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.426538][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.426632][ T5739] bridge_slave_1: entered allmulticast mode
[   49.427941][ T5739] bridge_slave_1: entered promiscuous mode
[   49.432512][ T5746] team0: Port device team_slave_1 added
[   49.444973][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   49.447109][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   49.468273][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   49.468969][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0
[   49.468980][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.468997][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   49.471795][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   49.501794][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   49.502442][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1
[   49.502455][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.502475][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   49.505143][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   49.529457][ T5747] team0: Port device team_slave_0 added
[   49.535716][ T5740] team0: Port device team_slave_0 added
[   49.536721][ T5739] team0: Port device team_slave_0 added
[   49.537551][ T5747] team0: Port device team_slave_1 added
[   49.544415][ T5740] team0: Port device team_slave_1 added
[   49.553025][ T5739] team0: Port device team_slave_1 added
[   49.573757][ T5746] hsr_slave_0: entered promiscuous mode
[   49.574497][ T5746] hsr_slave_1: entered promiscuous mode
[   49.587148][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0
[   49.587209][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.587663][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   49.588702][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1
[   49.588709][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.588722][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   49.603699][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0
[   49.603711][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.603724][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   49.612649][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0
[   49.612664][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.612681][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   49.613382][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1
[   49.613394][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.613413][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   49.638154][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1
[   49.638170][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.638189][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   49.667770][ T5739] hsr_slave_0: entered promiscuous mode
[   49.668440][ T5739] hsr_slave_1: entered promiscuous mode
[   49.668969][ T5739] debugfs: 'hsr0' already exists in 'hsr'
[   49.669034][ T5739] Cannot create hsr debugfs directory
[   49.692689][ T5747] hsr_slave_0: entered promiscuous mode
[   49.693152][ T5747] hsr_slave_1: entered promiscuous mode
[   49.693441][ T5747] debugfs: 'hsr0' already exists in 'hsr'
[   49.693452][ T5747] Cannot create hsr debugfs directory
[   49.720240][ T5740] hsr_slave_0: entered promiscuous mode
[   49.723537][ T5740] hsr_slave_1: entered promiscuous mode
[   49.723910][ T5740] debugfs: 'hsr0' already exists in 'hsr'
[   49.723922][ T5740] Cannot create hsr debugfs directory
[   49.995227][ T5746] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   50.003124][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   50.004517][ T5746] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   50.009668][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   50.010828][ T5746] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   50.015374][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   50.023961][ T5746] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   50.029009][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   50.071415][ T5747] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   50.076793][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   50.079389][ T5747] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   50.081635][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   50.085255][ T5747] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   50.090097][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   50.091823][ T5747] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   50.095072][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   50.151641][ T5740] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   50.158883][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   50.159594][ T5740] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   50.166121][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   50.169097][ T5740] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   50.175005][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   50.192655][ T5740] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   50.198974][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3
qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xb9000)
[   50.277537][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.286323][ T5739] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   50.292786][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   50.295422][ T5739] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   50.297045][ T1131] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[   50.297061][ T1131] ata1: failed to read log page 10h (errno=-5)
[   50.297077][ T1131] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0
[   50.297092][ T1131] ata1.00: irq_stat 0x40000008
[   50.297107][ T1131] ata1.00: failed command: WRITE FPDMA QUEUED
[   50.297116][ T1131] ata1.00: cmd 61/c8:70:3e:11:08/05:00:00:00:00/40 tag 14 ncq dma 757760 out
[   50.297116][ T1131]          res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[   50.297162][ T1131] ata1.00: status: { DRDY }
[   50.297173][ T1131] ata1.00: error: { ABRT }
[   50.297187][ T1131] ata1.00: failed command: WRITE FPDMA QUEUED
[   50.297197][ T1131] ata1.00: cmd 61/c0:78:06:17:08/02:00:00:00:00/40 tag 15 ncq dma 360448 out
[   50.297197][ T1131]          res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[   50.297244][ T1131] ata1.00: status: { DRDY }
[   50.297255][ T1131] ata1.00: error: { ABRT }
[   50.298136][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   50.298217][ T1131] ata1.00: configured for UDMA/100
[   50.298987][ T5739] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   50.300081][ T1131] ata1: EH complete
[   50.302958][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   50.326529][ T5739] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   50.337717][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   50.353870][ T5746] 8021q: adding VLAN 0 to HW filter on device team0
[   50.381331][  T357] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.381470][  T357] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.404624][  T357] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.404753][  T357] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.415596][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.450256][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.468860][ T5747] 8021q: adding VLAN 0 to HW filter on device team0
[   50.477539][ T5746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   50.488435][  T357] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.488633][  T357] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.499468][  T357] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.499561][  T357] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.501946][ T5740] 8021q: adding VLAN 0 to HW filter on device team0
[   50.514476][ T5749] Bluetooth: hci2: command tx timeout
[   50.514482][ T5755] Bluetooth: hci0: command tx timeout
[   50.514791][ T5749] Bluetooth: hci1: command tx timeout
[   50.514948][ T5742] Bluetooth: hci3: command tx timeout
[   50.518479][  T357] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.518555][  T357] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.520699][  T357] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.520773][  T357] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.579533][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.600238][ T5739] 8021q: adding VLAN 0 to HW filter on device team0
[   50.604895][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.604950][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.619489][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.619582][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.886775][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.893513][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.915740][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.974763][ T5746] veth0_vlan: entered promiscuous mode
[   50.975998][ T5740] veth0_vlan: entered promiscuous mode
[   50.996798][ T5740] veth1_vlan: entered promiscuous mode
[   51.001423][ T5746] veth1_vlan: entered promiscuous mode
[   51.003272][ T5747] veth0_vlan: entered promiscuous mode
[   51.016665][ T5747] veth1_vlan: entered promiscuous mode
[   51.030846][ T5746] veth0_macvtap: entered promiscuous mode
[   51.045734][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.047295][ T5746] veth1_macvtap: entered promiscuous mode
[   51.066648][ T5740] veth0_macvtap: entered promiscuous mode
[   51.070902][ T5747] veth0_macvtap: entered promiscuous mode
[   51.076361][ T5740] veth1_macvtap: entered promiscuous mode
[   51.079432][ T5747] veth1_macvtap: entered promiscuous mode
[   51.094902][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.111639][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.115031][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.120646][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.144118][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.158861][ T5739] veth0_vlan: entered promiscuous mode
[   51.163035][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.210676][ T5739] veth1_vlan: entered promiscuous mode
[   51.252274][ T1680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.252339][ T1680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.289561][ T1680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.289629][ T1680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.296317][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.296333][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.313889][ T5739] veth0_macvtap: entered promiscuous mode
[   51.342527][ T1680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.342607][ T1680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.348130][ T5739] veth1_macvtap: entered promiscuous mode
[   51.366793][ T5740] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   51.372535][ T1680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.372608][ T1680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.374847][ T5740] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   51.381508][ T5740] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   51.384210][ T5740] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   51.400122][ T5740] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   51.403251][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.432249][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.465641][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.465677][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.525064][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.525132][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.525173][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.525205][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.525237][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.525269][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.525301][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.525333][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.525372][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.525404][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.525436][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.525468][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.525486][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.525503][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.525520][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.525536][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.551194][ T1680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.551207][ T1680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.597645][  T357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.597689][  T357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.950342][ T5900] syz_tun: entered allmulticast mode
[   51.970425][   T50] hid-generic 0000:0008:4000001.0002: unknown main item tag 0x0
[   51.970484][   T50] hid-generic 0000:0008:4000001.0002: unknown main item tag 0x0
[   51.970535][   T50] hid-generic 0000:0008:4000001.0002: unknown main item tag 0x0
[   51.970573][   T50] hid-generic 0000:0008:4000001.0002: unknown main item tag 0x0
[   51.970609][   T50] hid-generic 0000:0008:4000001.0002: unknown main item tag 0x0
[   51.970647][   T50] hid-generic 0000:0008:4000001.0002: unknown main item tag 0x0
[   51.970684][   T50] hid-generic 0000:0008:4000001.0002: unknown main item tag 0x0
[   51.970721][   T50] hid-generic 0000:0008:4000001.0002: unknown main item tag 0x0
[   52.328474][   T43] audit: type=1800 audit(1787695840.336:2): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5" name="zoned" dev="configfs" ino=9181 res=0 errno=0
[   52.337235][   T43] audit: type=1800 audit(1787695840.346:3): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5" name="zone_nr_conv" dev="configfs" ino=5961 res=0 errno=0
[   52.605837][ T5742] Bluetooth: hci0: command tx timeout
[   52.605896][ T5742] Bluetooth: hci2: command tx timeout
[   52.605942][ T5742] Bluetooth: hci3: command tx timeout
[   52.605975][ T5742] Bluetooth: hci1: command tx timeout
[   52.735413][   T43] audit: type=1800 audit(1787695840.686:4): pid=5908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5" name="zoned" dev="configfs" ino=5972 res=0 errno=0
[   52.746133][   T43] audit: type=1800 audit(1787695840.746:5): pid=5908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5" name="power" dev="configfs" ino=5973 res=0 errno=0
[   53.199421][   T50] hid-generic 0000:0008:4000001.0002: hidraw1: <UNKNOWN> HID v0.10 Device [syz0] on syz1
[   53.234186][ T5896] syz_tun: left allmulticast mode
[   53.641390][ T5914] fido_id[5914]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   54.713847][ T5749] Bluetooth: hci3: command tx timeout
[   54.713895][ T5749] Bluetooth: hci0: command tx timeout
[   54.713932][ T5749] Bluetooth: hci1: command tx timeout
[   54.713959][ T5749] Bluetooth: hci2: command tx timeout
[   55.493322][ T5942] lo speed is unknown, defaulting to 1000
[   55.521126][ T5942] lo speed is unknown, defaulting to 1000
[   55.608412][ T5942] lo speed is unknown, defaulting to 1000
[   55.730575][ T5953] bridge1: entered promiscuous mode
[   55.732474][ T5953] bridge1: entered allmulticast mode
[   55.903708][  T357] IPVS: starting estimator thread 0...
[   56.014209][ T5961] IPVS: using max 43 ests per chain, 103200 per kthread
[   56.288731][ T5942] infiniband syz1: set active
[   56.291633][ T5942] infiniband syz1: added lo
[   56.295360][ T1042] lo speed is unknown, defaulting to 1000
[   56.533428][ T5942] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   56.533598][ T5942] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   56.533622][ T5942] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   56.753802][ T5742] Bluetooth: hci2: command tx timeout
[   56.753845][ T5742] Bluetooth: hci1: command tx timeout
[   56.753879][ T5742] Bluetooth: hci0: command tx timeout
[   56.753905][ T5742] Bluetooth: hci3: command tx timeout
[   56.778239][ T5942] RDS/IB: syz1: added
[   56.779067][ T5942] smc: adding ib device syz1 with port count 1
[   56.779107][ T5942] smc:    ib device syz1 port 1 has no pnetid
[   56.779864][   T50] lo speed is unknown, defaulting to 1000
[   56.781158][ T5942] lo speed is unknown, defaulting to 1000
[   56.988353][ T5942] lo speed is unknown, defaulting to 1000
[   57.087500][ T5967] input: syz1 as /devices/virtual/input/input5
[   57.249499][ T5942] lo speed is unknown, defaulting to 1000
[   59.589908][ T5983] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   59.600368][ T5983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20'.
[   59.617949][ T5942] lo speed is unknown, defaulting to 1000
[   59.836601][ T5942] lo speed is unknown, defaulting to 1000
[   59.886368][ T5996] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   59.890043][ T5996] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   59.951805][ T5996] ntfs3(sr0): Primary boot signature is not NTFS.
[   59.961014][ T5996] ntfs3(sr0): try to read out of volume at offset 0xf800
[   60.243251][   T43] audit: type=1326 audit(1787695848.246:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.2.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[   60.243613][   T43] audit: type=1326 audit(1787695848.246:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.2.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[   60.261229][   T43] audit: type=1326 audit(1787695848.266:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.2.23" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707efec code=0x7ffc0000
[   60.261571][   T43] audit: type=1326 audit(1787695848.266:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.2.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[   60.261839][   T43] audit: type=1326 audit(1787695848.266:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.2.23" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf707efec code=0x7ffc0000
[   60.262048][   T43] audit: type=1326 audit(1787695848.266:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.2.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[   60.262258][   T43] audit: type=1326 audit(1787695848.266:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.2.23" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707efec code=0x7ffc0000
[   60.262517][   T43] audit: type=1326 audit(1787695848.266:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.2.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[   60.262623][   T43] audit: type=1326 audit(1787695848.266:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.2.23" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf707efec code=0x7ffc0000
[   60.288825][   T43] audit: type=1326 audit(1787695848.296:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.2.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[   60.893973][ T5938] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   61.012772][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'.
[   61.016012][ T6013] bridge_slave_1: left allmulticast mode
[   61.017169][ T6013] bridge_slave_1: left promiscuous mode
[   61.019483][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.129721][ T6013] bridge_slave_0: left allmulticast mode
[   61.129795][ T6013] bridge_slave_0: left promiscuous mode
[   61.130015][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.266260][ T6018] netlink: 'syz.1.24': attribute type 10 has an invalid length.
[   61.945929][ T6030] =======================================================
[   61.945929][ T6030] WARNING: The mand mount option has been deprecated and
[   61.945929][ T6030]          and is ignored by this kernel. Remove the mand
[   61.945929][ T6030]          option from the mount to silence this warning.
[   61.945929][ T6030] =======================================================
[   63.424146][ T6037] netlink: 'syz.3.31': attribute type 11 has an invalid length.
[   63.425812][ T6035] Zero length message leads to an empty skb
[   63.453518][ T5938] usb 6-1: unable to get BOS descriptor or descriptor too short
[   63.453603][ T5938] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[   63.456830][ T5938] usb 6-1: unable to read config index 0 descriptor/start: -71
[   63.456861][ T5938] usb 6-1: can't read configurations, error -71
[   63.539910][ T6041] input: syz0 as /devices/virtual/input/input6
[   63.629499][ T6043] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   63.629565][ T6043] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   63.711713][ T6037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.31'.
[   63.720313][ T6037] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   63.962284][ T6049] syzkaller0: entered promiscuous mode
[   63.962326][ T6049] syzkaller0: entered allmulticast mode
[   63.964886][ T6049] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[   64.073905][ T5938] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   64.303051][ T6058] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[   64.466438][ T6061] 9p: Bad value for 'rfdno'
[   64.469341][ T6061] jffs2: notice: (6061) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   64.805264][ T6069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.39'.
[   64.922839][  T875] Process accounting resumed
[   65.160689][ T6069] batman_adv: batadv0: Adding interface: ip6gretap1
[   65.165048][ T6069] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.177852][ T6069] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active
[   66.406497][ T6091] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 4, id = 0
[   67.760214][ T6101] pim6reg: entered allmulticast mode
[   67.840481][ T6100] loop5: detected capacity change from 0 to 6
[   67.872009][ T6096] pim6reg: left allmulticast mode
[   67.878326][ T6100] Dev loop5: unable to read RDB block 6
[   67.879141][ T6100]  loop5: unable to read partition table
[   67.880217][ T6100] loop5: partition table beyond EOD, truncated
[   67.880403][ T6100] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[   68.569362][ T6108] netlink: 104 bytes leftover after parsing attributes in process `syz.3.48'.
[   68.731113][ T6112] process 'syz.1.49' launched '/dev/fd/12' with NULL argv: empty string added
[   69.539353][ T6116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.51'.
[   70.037965][   T35] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   70.214554][   T35] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[   70.220693][   T35] usb 8-1: config 0 has no interfaces?
[   70.226258][   T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.254838][   T35] usb 8-1: config 0 descriptor??
[   70.312866][ T6125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.53'.
[   70.319663][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'.
[   70.545237][   T63] usb 8-1: USB disconnect, device number 2
[   70.913749][   T35] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   71.063736][   T35] usb 5-1: Using ep0 maxpacket: 32
[   71.066815][   T35] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40
[   71.075011][   T35] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   71.079448][   T35] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   71.086833][   T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.090278][   T35] usb 5-1: Product: syz
[   71.090293][   T35] usb 5-1: Manufacturer: syz
[   71.090306][   T35] usb 5-1: SerialNumber: syz
[   71.156820][ T1437] ieee802154 phy0 wpan0: encryption failed: -22
[   71.156908][ T1437] ieee802154 phy1 wpan1: encryption failed: -22
[   71.312687][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'.
[   71.951902][ T6142] netlink: 52 bytes leftover after parsing attributes in process `syz.1.58'.
[   72.111471][   T35] usb 5-1: USB disconnect, device number 2
[   72.786590][ T6146] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[   72.786626][ T6146] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   72.788375][ T6146] vhci_hcd vhci_hcd.0: Device attached
[   73.011367][ T6146] wg2 speed is unknown, defaulting to 1000
[   73.032598][ T6146] wg2 speed is unknown, defaulting to 1000
[   73.173932][ T5741] usb 42-1: SetAddress Request (2) to port 0
[   73.174034][ T5741] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd
[   73.212509][ T6146] wg2 speed is unknown, defaulting to 1000
[   73.665880][ T6157] vhci_hcd: connection reset by peer
[   73.675383][   T12] vhci_hcd vhci_hcd.2: stop threads
[   73.675773][   T12] vhci_hcd vhci_hcd.2: release socket
[   73.676511][   T12] vhci_hcd vhci_hcd.2: disconnect device
[   73.734323][   T30] wg2 speed is unknown, defaulting to 1000
[   73.738069][ T6146] infiniband syz2: set active
[   73.740599][ T6146] infiniband syz2: added wg2
[   73.757579][ T6146] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   73.764990][ T6146] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   73.772900][ T6146] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   73.901523][ T6146] RDS/IB: syz2: added
[   73.907421][ T6146] smc: adding ib device syz2 with port count 1
[   73.910559][ T6146] smc:    ib device syz2 port 1 has no pnetid
[   73.913812][   T30] wg2 speed is unknown, defaulting to 1000
[   73.919104][ T6146] wg2 speed is unknown, defaulting to 1000
[   74.269010][ T6166] netlink: 'syz.3.62': attribute type 1 has an invalid length.
[   74.269056][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'.
[   74.421632][ T6146] wg2 speed is unknown, defaulting to 1000
[   74.725507][ T6146] wg2 speed is unknown, defaulting to 1000
[   74.835591][ T6146] wg2 speed is unknown, defaulting to 1000
[   75.096798][   T50] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   75.266455][   T43] kauditd_printk_skb: 30 callbacks suppressed
[   75.266529][   T43] audit: type=1326 audit(1787695863.276:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6178 comm="syz.0.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[   75.266771][   T43] audit: type=1326 audit(1787695863.276:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6178 comm="syz.0.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[   75.268326][   T43] audit: type=1326 audit(1787695863.276:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6178 comm="syz.0.67" exe="/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf6feefec code=0x7ffc0000
[   75.268513][   T43] audit: type=1326 audit(1787695863.276:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6178 comm="syz.0.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[   75.268640][   T43] audit: type=1326 audit(1787695863.276:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6178 comm="syz.0.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[   75.269225][   T43] audit: type=1326 audit(1787695863.276:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6178 comm="syz.0.67" exe="/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf6feefec code=0x7ffc0000
[   75.269550][   T43] audit: type=1326 audit(1787695863.276:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6178 comm="syz.0.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[   75.269698][   T43] audit: type=1326 audit(1787695863.276:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6178 comm="syz.0.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[   75.270545][   T43] audit: type=1326 audit(1787695863.276:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6178 comm="syz.0.67" exe="/syz-executor" sig=0 arch=40000003 syscall=247 compat=1 ip=0xf6feefec code=0x7ffc0000
[   75.283749][   T50] usb 8-1: Using ep0 maxpacket: 8
[   75.284496][   T50] usb 8-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[   75.285661][   T50] usb 8-1: config 0 has an invalid interface number: 186 but max is 0
[   75.285703][   T50] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   75.285761][   T50] usb 8-1: config 0 has no interface number 0
[   75.285811][   T50] usb 8-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   75.285847][   T50] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   75.285886][   T50] usb 8-1: config 0 interface 186 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   75.288266][   T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.288305][   T50] usb 8-1: Product: syz
[   75.288366][   T50] usb 8-1: Manufacturer: syz
[   75.288396][   T50] usb 8-1: SerialNumber: syz
[   75.294322][   T50] usb 8-1: config 0 descriptor??
[   75.298002][   T50] iowarrior 8-1:0.186: no interrupt-in endpoint found
[   75.328190][   T43] audit: type=1326 audit(1787695863.336:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6178 comm="syz.0.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details.
[   75.861283][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'.
[   75.867527][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'.
[   75.873577][ T6187] sctp: [Deprecated]: syz.3.64 (pid 6187) Use of int in max_burst socket option.
[   75.873577][ T6187] Use struct sctp_assoc_value instead
[   76.132252][ T6182] 9pnet_virtio: no channels available for device syz
[   76.132691][ T6175] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[   76.323109][    T9] cfg80211: failed to load regulatory.db
[   76.983296][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.098676][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.274337][ T6205] binder: 6201:6205 ioctl 400c620e 0 returned -14
[   77.327508][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.399979][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.452331][ T5742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   77.460579][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   77.464708][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   77.478993][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   77.485937][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   77.500957][ T6211] CIFS: Attempting to mount //127.0.0.1/share
[   77.546784][ T6211] CIFS: VFS: Error connecting to socket. Aborting operation.
[   77.549663][ T6211] CIFS: VFS: cifs_mount failed w/return code = -111
[   77.942650][  T875] usb 8-1: USB disconnect, device number 4
[   78.273945][ T5741] usb 42-1: device descriptor read/8, error -110
[   78.401090][ T6224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.740648][ T5741] usb usb42-port1: attempt power cycle
[   78.865298][ T6209] lo speed is unknown, defaulting to 1000
[   79.451484][ T5741] usb usb42-port1: unable to enumerate USB device
[   79.565236][ T5742] Bluetooth: hci0: command tx timeout
[   79.761820][   T12] bridge_slave_1: left allmulticast mode
[   79.761869][   T12] bridge_slave_1: left promiscuous mode
[   79.763168][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.789032][   T12] bridge_slave_0: left allmulticast mode
[   79.796571][   T12] bridge_slave_0: left promiscuous mode
[   79.800203][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.375300][ T6244] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   80.442169][ T6244] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[   80.443279][ T6244] overlayfs: failed to look up (tracing) for ino (-66)
[   80.936213][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.955083][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.962424][   T12] bond0 (unregistering): Released all slaves
[   81.044907][ T6209] wg2 speed is unknown, defaulting to 1000
[   81.118868][   T12] IPVS: stopping master sync thread 6091 ...
[   81.322526][ T5453] 8021q: adding VLAN 0 to HW filter on device eth2
[   81.633809][ T5742] Bluetooth: hci0: command tx timeout
[   81.638584][ T5453] 8021q: adding VLAN 0 to HW filter on device eth3
[   81.644205][ T6209] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.647186][ T6209] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.650282][ T6209] bridge_slave_0: entered allmulticast mode
[   81.655917][ T6209] bridge_slave_0: entered promiscuous mode
[   81.661466][ T6209] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.664216][ T6209] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.666564][ T6209] bridge_slave_1: entered allmulticast mode
[   81.671545][ T6209] bridge_slave_1: entered promiscuous mode
[   81.777727][ T6209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.805164][ T6209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.851853][   T43] kauditd_printk_skb: 65 callbacks suppressed
[   81.851950][   T43] audit: type=1326 audit(1787695868.851:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.0.84" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[   81.852009][   T43] audit: type=1326 audit(1787695868.851:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.0.84" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[   81.852074][   T43] audit: type=1326 audit(1787695868.851:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.0.84" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf6feefec code=0x7ffc0000
[   81.919679][ T6209] team0: Port device team_slave_0 added
[   81.940623][ T6209] team0: Port device team_slave_1 added
[   82.204361][   T35] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   82.297705][   T12] hsr_slave_0: left promiscuous mode
[   82.299447][   T43] audit: type=1326 audit(1787695869.311:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.0.84" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fef008 code=0x7ffc0000
[   82.299507][   T43] audit: type=1326 audit(1787695869.311:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.0.84" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[   82.299667][   T43] audit: type=1326 audit(1787695869.311:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.0.84" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[   82.300584][   T12] hsr_slave_1: left promiscuous mode
[   82.302927][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.302955][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.304542][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.304557][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.372091][   T12] veth1_macvtap: left promiscuous mode
[   82.372185][   T12] veth0_macvtap: left promiscuous mode
[   82.372348][   T12] veth1_vlan: left promiscuous mode
[   82.372510][   T12] veth0_vlan: left promiscuous mode
[   82.387085][   T35] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   82.396330][   T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.396349][   T35] usb 5-1: Product: syz
[   82.396357][   T35] usb 5-1: Manufacturer: syz
[   82.396365][   T35] usb 5-1: SerialNumber: syz
[   82.812791][ T6245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.818431][ T5840] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   83.057531][   T12] team0 (unregistering): Port device team_slave_1 removed
[   83.078713][   T12] team0 (unregistering): Port device team_slave_0 removed
[   83.223149][ T6209] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.223191][ T6209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.223237][ T6209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.241530][   T43] audit: type=1326 audit(1787695870.251:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.0.84" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6feefec code=0x7ffc0000
[   83.244494][   T43] audit: type=1326 audit(1787695870.261:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.0.84" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71274eb code=0x7ffc0000
[   83.268370][ T5453] 8021q: adding VLAN 0 to HW filter on device eth4
[   83.289950][ T6209] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.289997][ T6209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.290060][ T6209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.396052][ T6209] hsr_slave_0: entered promiscuous mode
[   83.399311][ T6209] hsr_slave_1: entered promiscuous mode
[   83.400294][ T6209] debugfs: 'hsr0' already exists in 'hsr'
[   83.400311][ T6209] Cannot create hsr debugfs directory
[   83.450903][   T43] audit: type=1326 audit(1787695870.461:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.0.84" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[   83.453411][   T43] audit: type=1326 audit(1787695870.461:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.0.84" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6feefec code=0x7ffc0000
[   83.684110][ T5453] 8021q: adding VLAN 0 to HW filter on device eth5
[   83.713820][ T5742] Bluetooth: hci0: command tx timeout
[   83.745375][ T6209] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   83.869083][ T6209] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   83.869564][ T6209] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   83.875839][ T6269] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   83.885002][ T6269] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   83.901315][ T6209] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   83.942650][ T6209] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   83.955536][ T5840] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[   83.956464][ T5840] ath9k_htc: Failed to initialize the device
[   83.959261][ T6209] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   83.961232][ T6209] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   83.977973][ T6209] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   84.056638][ T6209] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.068182][ T6209] 8021q: adding VLAN 0 to HW filter on device team0
[   84.072945][   T76] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.073025][   T76] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.083206][   T76] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.083334][   T76] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.146942][ T6269] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   84.151589][ T6269] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   84.151707][ T6269] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   84.157499][ T6269] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   84.162198][ T6269] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   84.163316][ T6269] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   84.174440][ T6269] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   84.236149][ T6269] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   84.236283][ T6269] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   84.248338][ T6269] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   84.483609][ T6209] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.505069][ T5840] usb 5-1: ath9k_htc: USB layer deinitialized
[   84.510161][   T30] usb 5-1: USB disconnect, device number 3
[   84.876867][ T6209] veth0_vlan: entered promiscuous mode
[   84.992973][ T6209] veth1_vlan: entered promiscuous mode
[   85.205974][ T6209] veth0_macvtap: entered promiscuous mode
[   85.229426][ T6209] veth1_macvtap: entered promiscuous mode
[   85.281095][ T6209] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.286458][ T6209] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.294746][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.303742][    T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   85.324105][ T5609] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.445124][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.445735][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.484600][    T9] usb 7-1: Using ep0 maxpacket: 32
[   85.488838][    T9] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   85.496317][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   85.500941][    T9] usb 7-1: config 0 has no interfaces?
[   85.512075][    T9] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   85.515501][    T9] usb 7-1: Product: syz
[   85.517898][    T9] usb 7-1: Manufacturer: syz
[   85.520258][    T9] usb 7-1: SerialNumber: syz
[   85.570300][    T9] usb 7-1: config 0 descriptor??
[   85.871565][ T6371] netlink: 'syz.3.89': attribute type 29 has an invalid length.
[   85.958358][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout
[   85.985478][   T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.993577][   T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.998229][   T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   86.003712][   T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   86.194943][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout
[   86.200178][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout
[   86.284766][ T5742] Bluetooth: hci0: command 0x0c1a tx timeout
[   86.906341][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.907406][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.702704][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.702743][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.765354][ T1042] usb 7-1: USB disconnect, device number 2
[   88.043721][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout
[   88.101738][ T6401] netlink: 'syz.3.90': attribute type 10 has an invalid length.
[   88.165748][ T6401] team0 (unregistering): Port device team_slave_0 removed
[   88.274741][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout
[   88.275181][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout
[   88.286547][ T6401] team0 (unregistering): Port device team_slave_1 removed
[   88.362319][ T6407] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.91'.
[   88.362411][ T6407] openvswitch: netlink: Message has 512 unknown bytes.
[   88.365451][ T5742] Bluetooth: hci0: command 0x0c1a tx timeout
[   88.656635][ T6406] netlink: 'syz.4.91': attribute type 3 has an invalid length.
[   88.656742][ T6406] netlink: 'syz.4.91': attribute type 3 has an invalid length.
[   88.664412][ T6406] netlink: 'syz.4.91': attribute type 3 has an invalid length.
[   88.664490][ T6406] netlink: 'syz.4.91': attribute type 3 has an invalid length.
[   88.664540][ T6406] netlink: 'syz.4.91': attribute type 3 has an invalid length.
[   88.664590][ T6406] netlink: 'syz.4.91': attribute type 3 has an invalid length.
[   88.664639][ T6406] netlink: 'syz.4.91': attribute type 3 has an invalid length.
[   88.664687][ T6406] netlink: 'syz.4.91': attribute type 3 has an invalid length.
[   89.067524][   T35] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[   89.224632][   T35] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[   89.229560][   T35] usb 5-1: config 0 has an invalid interface number: 205 but max is 0
[   89.234212][   T35] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   89.234288][   T35] usb 5-1: config 0 has no interface number 0
[   89.234331][   T35] usb 5-1: config 0 interface 205 has no altsetting 0
[   89.244816][   T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.244881][   T35] usb 5-1: Product: syz
[   89.245069][   T35] usb 5-1: Manufacturer: syz
[   89.245083][   T35] usb 5-1: SerialNumber: syz
[   89.250007][   T35] usb 5-1: config 0 descriptor??
[   89.258314][   T35] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[   89.258602][   T35] dvb-usb: bulk message failed: -22 (3/0)
[   89.294410][   T35] dvb-usb: will use the device's hardware PID filter (table count: 16).
[   89.295794][   T35] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[   89.295821][   T35] usb 5-1: media controller created
[   89.298339][   T35] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   89.307660][   T35] dvb-usb: bulk message failed: -22 (6/0)
[   89.307749][   T35] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[   89.313075][   T35] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input7
[   89.321121][   T43] kauditd_printk_skb: 21 callbacks suppressed
[   89.321135][   T43] audit: type=1800 audit(1787695876.331:152): pid=6419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.94" name="blkio.bfq.time_recursive" dev="tmpfs" ino=169 res=0 errno=0
[   89.325978][   T35] dvb-usb: schedule remote query interval to 150 msecs.
[   89.326019][   T35] dvb-usb: bulk message failed: -22 (3/0)
[   89.326479][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'.
[   89.343838][   T35] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[   89.575610][   T50] dvb-usb: bulk message failed: -22 (1/0)
[   89.575748][   T50] dvb-usb: error while querying for an remote control event.
[   89.983765][ T1042] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   90.114066][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout
[   90.133968][ T1042] usb 7-1: Using ep0 maxpacket: 8
[   90.134423][ T1042] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[   90.138291][ T1042] usb 7-1: config index 0 descriptor too short (expected 30, got 18)
[   90.140270][ T1042] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.140283][ T1042] usb 7-1: Product: syz
[   90.140290][ T1042] usb 7-1: Manufacturer: syz
[   90.140297][ T1042] usb 7-1: SerialNumber: syz
[   90.141536][ T1042] usb 7-1: config 0 descriptor??
[   90.161556][ T1042] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[   90.170992][ T1042] usb 7-1: setting power ON
[   90.181931][ T1042] dvb-usb: bulk message failed: -22 (2/0)
[   90.344697][   T50] dvb-usb: bulk message failed: -22 (1/0)
[   90.352794][ T1042] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   90.359785][ T1042] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[   90.359830][ T1042] usb 7-1: media controller created
[   90.360362][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout
[   90.363761][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout
[   90.433761][ T5742] Bluetooth: hci0: command 0x0c1a tx timeout
[   90.653267][   T50] dvb-usb: error while querying for an remote control event.
[   90.917519][ T1042] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   91.058931][ T1042] usb 7-1: selecting invalid altsetting 6
[   91.059059][ T1042] usb 7-1: digital interface selection failed (-22)
[   91.059088][ T1042] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[   91.066507][ T1042] usb 7-1: setting power OFF
[   91.068420][ T1042] dvb-usb: bulk message failed: -22 (2/0)
[   91.073305][ T1042] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[   91.073365][ T1042] (NULL device *): no alternate interface
[   91.673352][ T1042] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[   91.679082][ T1042] usb 7-1: USB disconnect, device number 3
[   91.770793][   T35] dvb-usb: bulk message failed: -22 (1/0)
[   91.770905][   T35] dvb-usb: error while querying for an remote control event.
[   91.812775][ T6443] lo speed is unknown, defaulting to 1000
[   91.891614][  T856] usb 5-1: USB disconnect, device number 4
[   92.082768][   T35] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0
[   92.082852][   T35] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0
[   92.096798][   T35] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0
[   92.096881][   T35] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0
[   92.096917][   T35] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0
[   92.096937][   T35] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0
[   92.096954][   T35] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0
[   92.096972][   T35] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0
[   92.162166][   T35] hid-generic 0000:0000:0001.0003: hidraw1: <UNKNOWN> HID v0.10 Device [syz0] on syz1
[   92.223042][   T42] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   92.471609][ T6465] fido_id[6465]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   92.796296][   T42] usb 9-1: Using ep0 maxpacket: 32
[   92.883028][  T856] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[   93.015759][   T42] usb 9-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40
[   93.017839][   T42] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   93.017858][   T42] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[   93.021343][   T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.021356][   T42] usb 9-1: Product: syz
[   93.021363][   T42] usb 9-1: Manufacturer: syz
[   93.021370][   T42] usb 9-1: SerialNumber: syz
[   93.123786][    T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   93.210989][ T6470] jffs2: notice: (6470) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   93.566457][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.99'.
[   93.624759][    T9] usb 7-1: Using ep0 maxpacket: 32
[   93.627058][    T9] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   93.630651][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   93.630681][    T9] usb 7-1: config 0 has no interfaces?
[   93.639926][    T9] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   93.639961][    T9] usb 7-1: Product: syz
[   93.640002][    T9] usb 7-1: Manufacturer: syz
[   93.640022][    T9] usb 7-1: SerialNumber: syz
[   93.647914][    T9] usb 7-1: config 0 descriptor??
[   93.672602][ T6477] Console: switching to colour dummy device 80x25
[   93.719551][ T6478] program syz.0.104 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   94.202968][   T30] usb 7-1: USB disconnect, device number 4
[   94.233509][   T42] usb 9-1: USB disconnect, device number 2
[   94.312537][ T6478] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   94.334664][ T6478] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref]
[   94.334846][ T6478] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff]
[   94.335099][ T6478] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   94.335742][ T6478] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   94.394154][ T6478] pci 0000:00:01.0: Adding to iommu group 1
[   94.407042][ T6478] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   94.407078][ T6478] pci 0000:00:01.0: vgaarb: bridge control possible
[   94.407091][ T6478] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   94.431117][ T6478] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   94.447664][ T6478] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   94.452101][ T6478] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   94.488425][ T6478] [drm] Found bochs VGA, ID 0xb0c5.
[   94.488514][ T6478] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   94.613230][ T6478] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[   94.921659][ T6478] Console: switching to colour frame buffer device 160x50
[   94.956682][ T6478] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[   95.071832][ T6443] wg2 speed is unknown, defaulting to 1000
[   96.645474][ T6517] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[   96.655720][ T6517] validate_nla: 46 callbacks suppressed
[   96.655796][ T6517] netlink: 'syz.0.107': attribute type 29 has an invalid length.
[   96.659873][ T6517] netlink: 'syz.0.107': attribute type 1 has an invalid length.
[   96.659889][ T6517] netlink: 756 bytes leftover after parsing attributes in process `syz.0.107'.
[   96.906494][ T6523] random: crng reseeded on system resumption
[   97.958696][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.110'.
[   97.965673][ T6533] batadv0: entered promiscuous mode
[   97.966516][ T6533] macsec1: entered promiscuous mode
[   97.967846][ T6533] macsec1: entered allmulticast mode
[   97.967857][ T6533] batadv0: entered allmulticast mode
[   97.968444][ T6533] 8021q: adding VLAN 0 to HW filter on device macsec1
[   97.973215][ T6533] batadv0: left allmulticast mode
[   97.973359][ T6533] batadv0: left promiscuous mode
[   98.091792][ T6540] kernel profiling enabled (shift: 7)
[   98.147455][ T6540] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   98.373763][   T43] audit: type=1800 audit(1787695885.311:153): pid=6547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.114" name="file0" dev="overlay" ino=198 res=0 errno=0
[   98.678128][ T6553] lo: entered allmulticast mode
[   98.715263][ T6553] nvme_fabrics: missing parameter 'traddr=%s'
[   98.816660][ T6553] lo: left allmulticast mode
[   98.920606][ T6559] hpfs: hpfs_map_sector(): read error
[   99.241797][ T6562] XFS (nullb0): Invalid superblock magic number
[  100.036991][ T6581] netlink: 'syz.4.120': attribute type 2 has an invalid length.
[  101.742251][ T6581] : entered promiscuous mode
[  101.837731][ T6570] lo speed is unknown, defaulting to 1000
[  101.989011][ T6592] hub 8-0:1.0: USB hub found
[  101.989308][ T6592] hub 8-0:1.0: 1 port detected
[  102.282815][ T6570] wg2 speed is unknown, defaulting to 1000
[  102.358583][ T6598] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  103.318857][ T6621] input: syz1 as /devices/virtual/input/input8
[  103.319438][ T6621] input: failed to attach handler leds to device input8, error: -6
[  104.884578][ T6639] syz_tun: entered allmulticast mode
[  105.017260][   T43] audit: type=1326 audit(1787695892.031:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.3.132" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x0
[  105.219944][ T6639] syz_tun: left allmulticast mode
[  105.461219][ T6657] netlink: 48 bytes leftover after parsing attributes in process `syz.2.135'.
[  106.078658][ T6661] 9p: Bad value for 'rfdno'
[  106.118487][ T6661] Console: switching to colour dummy device 80x25
[  106.355189][ T5892] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  106.508048][ T6664] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  106.517629][ T5892] usb 7-1: Using ep0 maxpacket: 8
[  106.530273][ T5892] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  106.542831][ T5892] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  106.542984][ T5892] usb 7-1: config 0 has no interface number 0
[  106.547271][ T5892] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  106.547501][ T5892] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  106.547520][ T5892] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  106.547537][ T5892] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  106.547774][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.579136][ T6664] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  106.582680][ T6664] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  106.582919][ T6664] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  106.583417][ T6664] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  106.638207][ T5892] usb 7-1: config 0 descriptor??
[  106.789790][ T5892] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  107.013660][ T6664] pci 0000:00:01.0: Adding to iommu group 1
[  107.015747][ T6664] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  107.015758][ T6664] pci 0000:00:01.0: vgaarb: bridge control possible
[  107.015766][ T6664] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  107.022616][ T6664] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  107.022724][ T6664] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  107.023759][ T6664] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  107.028776][ T6664] [drm] Found bochs VGA, ID 0xb0c5.
[  107.028785][ T6664] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  107.032050][ T6664] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4
[  107.305039][ T6676] lo speed is unknown, defaulting to 1000
[  108.390802][ T6682] pim6reg: entered allmulticast mode
[  108.423287][ T5938] usb 7-1: USB disconnect, device number 5
[  108.423423][    C2] ldusb 7-1:0.55: usb_submit_urb failed (-19)
[  108.467771][ T5938] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  108.478495][ T6663] ldusb: No device or device unplugged -19
[  108.705097][ T6681] pim6reg: left allmulticast mode
[  109.218074][ T6676] wg2 speed is unknown, defaulting to 1000
[  109.467284][ T6695] netlink: zone id is out of range
[  109.467446][ T6695] netlink: zone id is out of range
[  109.467622][ T6695] netlink: zone id is out of range
[  109.467754][ T6695] netlink: zone id is out of range
[  109.467966][ T6695] netlink: zone id is out of range
[  109.468193][ T6695] netlink: zone id is out of range
[  109.468216][ T6695] netlink: zone id is out of range
[  109.468725][ T6695] netlink: zone id is out of range
[  109.468952][ T6695] netlink: zone id is out of range
[  109.469489][ T6695] netlink: zone id is out of range
[  109.492271][ T6695] capability: warning: `syz.4.144' uses 32-bit capabilities (legacy support in use)
[  112.775049][ T6731] netlink: 6208 bytes leftover after parsing attributes in process `syz.2.151'.
[  112.994916][ T5892] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  113.153742][ T5892] usb 9-1: Using ep0 maxpacket: 8
[  113.154278][ T5892] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  113.155495][ T5892] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[  113.155508][ T5892] usb 9-1: config 179 has no interface number 0
[  113.155526][ T5892] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  113.155538][ T5892] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  113.155551][ T5892] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  113.155564][ T5892] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  113.155577][ T5892] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  113.155597][ T5892] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.159713][ T6734] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  113.735103][ T6734] syzkaller1: entered promiscuous mode
[  113.735243][ T6734] syzkaller1: entered allmulticast mode
[  113.880270][ T6734] lo speed is unknown, defaulting to 1000
[  114.342149][ T6734] wg2 speed is unknown, defaulting to 1000
[  114.391175][ T1173] IPVS: starting estimator thread 0...
[  114.473838][ T6758] IPVS: using max 28 ests per chain, 67200 per kthread
[  114.728350][ T1042] usb 9-1: USB disconnect, device number 3
[  114.730595][    C2] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  114.730630][    C2] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  114.732208][    C2] ==================================================================
[  114.732219][    C2] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23a/0x260
[  114.732327][    C2] Read of size 4 at addr ffff888013eb385c by task pr/ttyS0/16
[  114.732341][    C2] 
[  114.732349][    C2] CPU: 2 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) 
[  114.732368][    C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  114.732379][    C2] Call Trace:
[  114.732385][    C2]  <IRQ>
[  114.732393][    C2]  dump_stack_lvl+0x100/0x190
[  114.732417][    C2]  print_report+0x13d/0x4b0
[  114.732441][    C2]  ? __virt_addr_valid+0x239/0x430
[  114.732467][    C2]  ? do_raw_spin_lock+0x23a/0x260
[  114.732488][    C2]  kasan_report+0xdf/0x1c0
[  114.732528][    C2]  ? do_raw_spin_lock+0x23a/0x260
[  114.732544][    C2]  do_raw_spin_lock+0x23a/0x260
[  114.732560][    C2]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  114.732574][    C2]  ? kcov_remote_stop+0x27d/0x560
[  114.732588][    C2]  ? kcov_remote_stop+0x27d/0x560
[  114.732601][    C2]  _raw_spin_lock_irqsave+0x42/0x60
[  114.732635][    C2]  ? __wake_up+0x1c/0x60
[  114.732646][    C2]  __wake_up+0x1c/0x60
[  114.732658][    C2]  usb_anchor_resume_wakeups+0xc7/0xf0
[  114.732692][    C2]  __usb_hcd_giveback_urb+0x3d8/0x610
[  114.732705][    C2]  usb_hcd_giveback_urb+0x3ca/0x4a0
[  114.732719][    C2]  dummy_timer+0xdb2/0x3700
[  114.732737][    C2]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  114.732751][    C2]  ? debug_object_deactivate+0x2e4/0x3b0
[  114.732769][    C2]  ? __pfx_dummy_timer+0x10/0x10
[  114.732782][    C2]  ? rcu_is_watching+0x13/0xc0
[  114.732792][    C2]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  114.732806][    C2]  ? __pfx_dummy_timer+0x10/0x10
[  114.732819][    C2]  __hrtimer_run_queues+0x462/0x9c0
[  114.732832][    C2]  hrtimer_run_softirq+0x1ca/0x360
[  114.732844][    C2]  handle_softirqs+0x1e6/0x9d0
[  114.732860][    C2]  ? __pfx_handle_softirqs+0x10/0x10
[  114.732874][    C2]  ? _raw_spin_unlock+0x28/0x50
[  114.732887][    C2]  ? __hrtimer_rearm_deferred+0x9b/0x7b0
[  114.732899][    C2]  __irq_exit_rcu+0x194/0x210
[  114.732913][    C2]  irq_exit_rcu+0x9/0x30
[  114.732928][    C2]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  114.732944][    C2]  </IRQ>
[  114.732947][    C2]  <TASK>
[  114.732951][    C2]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  114.732963][    C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  114.732978][    C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 86 bf 18 f6 48 89 df e8 9e 15 19 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 85 1f 08 f6 65 48 83 3d 64 e5 bc 08 00 74 16 5b
[  114.732988][    C2] RSP: 0000:ffffc9000042fca8 EFLAGS: 00000246
[  114.732997][    C2] RAX: 0000000000000006 RBX: ffffffff9bc41180 RCX: 0000000000000000
[  114.733004][    C2] RDX: 0000000000000001 RSI: ffffffff8e3e64a5 RDI: ffffffff8c61e280
[  114.733010][    C2] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000
[  114.733017][    C2] R10: 0000000000000001 R11: 3a312d3920627375 R12: 1ffff92000085f98
[  114.733023][    C2] R13: ffffffff8fbd16a0 R14: 0000000000000001 R15: 0000000000000002
[  114.733033][    C2]  nbcon_emit_one+0x15c/0x2b0
[  114.733045][    C2]  ? __pfx_nbcon_emit_one+0x10/0x10
[  114.733059][    C2]  nbcon_kthread_func+0x613/0x7d0
[  114.733072][    C2]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  114.733086][    C2]  ? __kthread_parkme+0x18f/0x230
[  114.733102][    C2]  ? kthread+0x13a/0x450
[  114.733112][    C2]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  114.733124][    C2]  kthread+0x373/0x450
[  114.733134][    C2]  ? __pfx_kthread+0x10/0x10
[  114.733145][    C2]  ret_from_fork+0x730/0xd60
[  114.733161][    C2]  ? __pfx_ret_from_fork+0x10/0x10
[  114.733177][    C2]  ? __switch_to+0x800/0x10f0
[  114.733189][    C2]  ? __pfx_kthread+0x10/0x10
[  114.733200][    C2]  ret_from_fork_asm+0x1a/0x30
[  114.733212][    C2]  </TASK>
[  114.733216][    C2] 
[  114.733218][    C2] Allocated by task 5892:
[  114.733224][    C2]  kasan_save_stack+0x30/0x50
[  114.733234][    C2]  kasan_save_track+0x14/0x30
[  114.733246][    C2]  __kasan_kmalloc+0xaa/0xb0
[  114.733255][    C2]  __kmalloc_cache_noprof+0x2f8/0x6d0
[  114.733269][    C2]  xpad_probe+0x28e/0x1f60
[  114.733283][    C2]  usb_probe_interface+0x386/0x9b0
[  114.733295][    C2]  really_probe+0x241/0xa60
[  114.733315][    C2]  __driver_probe_device+0x210/0x460
[  114.733329][    C2]  driver_probe_device+0x4a/0x140
[  114.733342][    C2]  __device_attach_driver+0x1df/0x320
[  114.733356][    C2]  bus_for_each_drv+0x159/0x1e0
[  114.733380][    C2]  __device_attach+0x1e4/0x4d0
[  114.733394][    C2]  device_initial_probe+0xaf/0xd0
[  114.733408][    C2]  bus_probe_device+0x64/0x160
[  114.733420][    C2]  device_add+0x121d/0x1970
[  114.733428][    C2]  usb_set_configuration+0xd97/0x1c60
[  114.733438][    C2]  usb_generic_driver_probe+0xa1/0xe0
[  114.733452][    C2]  usb_probe_device+0xef/0x400
[  114.733461][    C2]  really_probe+0x241/0xa60
[  114.733474][    C2]  __driver_probe_device+0x210/0x460
[  114.733488][    C2]  driver_probe_device+0x4a/0x140
[  114.733501][    C2]  __device_attach_driver+0x1df/0x320
[  114.733515][    C2]  bus_for_each_drv+0x159/0x1e0
[  114.733525][    C2]  __device_attach+0x1e4/0x4d0
[  114.733539][    C2]  device_initial_probe+0xaf/0xd0
[  114.733553][    C2]  bus_probe_device+0x64/0x160
[  114.733565][    C2]  device_add+0x121d/0x1970
[  114.733573][    C2]  usb_new_device.part.0+0xcc2/0x1686
[  114.733586][    C2]  hub_event.cold+0x1e3/0xe90
[  114.733597][    C2]  process_one_work+0xac7/0x1b10
[  114.733608][    C2]  worker_thread+0x5ef/0xe50
[  114.733618][    C2]  kthread+0x373/0x450
[  114.733627][    C2]  ret_from_fork+0x730/0xd60
[  114.733641][    C2]  ret_from_fork_asm+0x1a/0x30
[  114.733649][    C2] 
[  114.733651][    C2] Freed by task 1042:
[  114.733655][    C2]  kasan_save_stack+0x30/0x50
[  114.733665][    C2]  kasan_save_track+0x14/0x30
[  114.733674][    C2]  kasan_save_free_info+0x3b/0x70
[  114.733687][    C2]  __kasan_slab_free+0x5f/0x80
[  114.733697][    C2]  kfree+0x22b/0x6d0
[  114.733709][    C2]  xpad_disconnect+0x1cf/0x530
[  114.733723][    C2]  usb_unbind_interface+0x1dd/0x9e0
[  114.733733][    C2]  device_remove+0x12a/0x180
[  114.733746][    C2]  device_release_driver_internal+0x44e/0x620
[  114.733761][    C2]  bus_remove_device+0x2bc/0x560
[  114.733773][    C2]  device_del+0x376/0x9b0
[  114.733785][    C2]  usb_disable_device+0x367/0x810
[  114.733794][    C2]  usb_disconnect+0x2e2/0x9a0
[  114.733803][    C2]  hub_event+0x1bb1/0x4420
[  114.733812][    C2]  process_one_work+0xac7/0x1b10
[  114.733822][    C2]  worker_thread+0x5ef/0xe50
[  114.733832][    C2]  kthread+0x373/0x450
[  114.733841][    C2]  ret_from_fork+0x730/0xd60
[  114.733855][    C2]  ret_from_fork_asm+0x1a/0x30
[  114.733863][    C2] 
[  114.733865][    C2] The buggy address belongs to the object at ffff888013eb3800
[  114.733865][    C2]  which belongs to the cache kmalloc-1k of size 1024
[  114.733873][    C2] The buggy address is located 92 bytes inside of
[  114.733873][    C2]  freed 1024-byte region [ffff888013eb3800, ffff888013eb3c00)
[  114.733882][    C2] 
[  114.733885][    C2] The buggy address belongs to the physical page:
[  114.733889][    C2] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13eb0
[  114.733899][    C2] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  114.733907][    C2] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  114.733916][    C2] page_type: f5(slab)
[  114.733925][    C2] raw: 00fff00000000040 ffff88801c042dc0 dead000000000100 dead000000000122
[  114.733934][    C2] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  114.733943][    C2] head: 00fff00000000040 ffff88801c042dc0 dead000000000100 dead000000000122
[  114.733951][    C2] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  114.733960][    C2] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  114.733968][    C2] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  114.733974][    C2] page dumped because: kasan: bad access detected
[  114.733978][    C2] page_owner tracks the page as allocated
[  114.733982][    C2] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12, tgid 12 (kworker/u32:0), ts 50563544473
[  114.733998][    C2]  post_alloc_hook+0xfd/0x120
[  114.734011][    C2]  get_page_from_freelist+0x110d/0x35b0
[  114.734025][    C2]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  114.734039][    C2]  new_slab+0xa9/0x6e0
[  114.734052][    C2]  refill_objects+0xe3/0x410
[  114.734065][    C2]  __pcs_replace_empty_main+0x35e/0x650
[  114.734078][    C2]  __kmalloc_noprof+0x67c/0x840
[  114.734087][    C2]  ___neigh_create+0x1532/0x2940
[  114.734098][    C2]  ip6_finish_output2+0x1052/0x1d50
[  114.734112][    C2]  __ip6_finish_output+0x357/0xdf0
[  114.734124][    C2]  ip6_output+0x2aa/0xa60
[  114.734136][    C2]  ndisc_send_skb+0xa85/0x1bf0
[  114.734150][    C2]  ndisc_send_rs+0x129/0x680
[  114.734163][    C2]  addrconf_dad_completed+0x47f/0xff0
[  114.734175][    C2]  addrconf_dad_work+0xb1e/0x1360
[  114.734187][    C2]  process_one_work+0xac7/0x1b10
[  114.734197][    C2] page last free pid 110 tgid 110 ts 49561839759 stack trace:
[  114.734204][    C2]  free_unref_folios+0xa4a/0x1790
[  114.734218][    C2]  shrink_folio_list+0x45c4/0x5f10
[  114.734229][    C2]  evict_folios+0x31d/0x17b0
[  114.734240][    C2]  try_to_shrink_lruvec+0x366/0x830
[  114.734252][    C2]  shrink_one+0x307/0x850
[  114.734262][    C2]  shrink_node+0x2721/0x3e90
[  114.734274][    C2]  balance_pgdat+0xb20/0x1f00
[  114.734287][    C2]  kswapd+0x556/0xb50
[  114.734302][    C2]  kthread+0x373/0x450
[  114.734311][    C2]  ret_from_fork+0x730/0xd60
[  114.734324][    C2]  ret_from_fork_asm+0x1a/0x30
[  114.734333][    C2] 
[  114.734335][    C2] Memory state around the buggy address:
[  114.734340][    C2]  ffff888013eb3700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  114.734346][    C2]  ffff888013eb3780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  114.734353][    C2] >ffff888013eb3800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.734358][    C2]                                                     ^
[  114.734363][    C2]  ffff888013eb3880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.734369][    C2]  ffff888013eb3900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.734374][    C2] ==================================================================
[  114.734380][    C2] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  115.064598][    C2] CPU: 2 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) 
[  115.067253][    C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  115.070250][    C2] Call Trace:
[  115.071352][    C2]  <IRQ>
[  115.072288][    C2]  dump_stack_lvl+0x100/0x190
[  115.073769][    C2]  vpanic+0x553/0x970
[  115.075039][    C2]  ? __pfx_vpanic+0x10/0x10
[  115.076475][    C2]  ? __pfx_vprintk_emit+0x10/0x10
[  115.078055][    C2]  ? do_raw_spin_lock+0x23a/0x260
[  115.079649][    C2]  panic+0xd1/0xe0
[  115.080835][    C2]  ? __pfx_panic+0x10/0x10
[  115.082132][    C2]  ? end_report.part.0+0x23/0x90
[  115.083556][    C2]  ? rcu_is_watching+0x13/0xc0
[  115.084980][    C2]  ? end_report.part.0+0x23/0x90
[  115.086570][    C2]  check_panic_on_warn.cold+0x19/0x34
[  115.088252][    C2]  end_report.part.0+0x3a/0x90
[  115.089749][    C2]  kasan_report.cold+0xe/0x18
[  115.091295][    C2]  ? do_raw_spin_lock+0x23a/0x260
[  115.092920][    C2]  do_raw_spin_lock+0x23a/0x260
[  115.094457][    C2]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  115.096146][    C2]  ? kcov_remote_stop+0x27d/0x560
[  115.097694][    C2]  ? kcov_remote_stop+0x27d/0x560
[  115.099195][    C2]  _raw_spin_lock_irqsave+0x42/0x60
[  115.101106][    C2]  ? __wake_up+0x1c/0x60
[  115.102676][    C2]  __wake_up+0x1c/0x60
[  115.103989][    C2]  usb_anchor_resume_wakeups+0xc7/0xf0
[  115.105669][    C2]  __usb_hcd_giveback_urb+0x3d8/0x610
[  115.107392][    C2]  usb_hcd_giveback_urb+0x3ca/0x4a0
[  115.109028][    C2]  dummy_timer+0xdb2/0x3700
[  115.110489][    C2]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  115.112420][    C2]  ? debug_object_deactivate+0x2e4/0x3b0
[  115.114244][    C2]  ? __pfx_dummy_timer+0x10/0x10
[  115.115816][    C2]  ? rcu_is_watching+0x13/0xc0
[  115.117350][    C2]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  115.119595][    C2]  ? __pfx_dummy_timer+0x10/0x10
[  115.121607][    C2]  __hrtimer_run_queues+0x462/0x9c0
[  115.123318][    C2]  hrtimer_run_softirq+0x1ca/0x360
[  115.124984][    C2]  handle_softirqs+0x1e6/0x9d0
[  115.126509][    C2]  ? __pfx_handle_softirqs+0x10/0x10
[  115.128181][    C2]  ? _raw_spin_unlock+0x28/0x50
[  115.129716][    C2]  ? __hrtimer_rearm_deferred+0x9b/0x7b0
[  115.131494][    C2]  __irq_exit_rcu+0x194/0x210
[  115.133120][    C2]  irq_exit_rcu+0x9/0x30
[  115.134887][    C2]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  115.137264][    C2]  </IRQ>
[  115.138242][    C2]  <TASK>
[  115.139355][    C2]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  115.141378][    C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  115.143513][    C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 86 bf 18 f6 48 89 df e8 9e 15 19 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 85 1f 08 f6 65 48 83 3d 64 e5 bc 08 00 74 16 5b
[  115.149501][    C2] RSP: 0000:ffffc9000042fca8 EFLAGS: 00000246
[  115.151447][    C2] RAX: 0000000000000006 RBX: ffffffff9bc41180 RCX: 0000000000000000
[  115.154169][    C2] RDX: 0000000000000001 RSI: ffffffff8e3e64a5 RDI: ffffffff8c61e280
[  115.157061][    C2] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000
[  115.159535][    C2] R10: 0000000000000001 R11: 3a312d3920627375 R12: 1ffff92000085f98
[  115.162109][    C2] R13: ffffffff8fbd16a0 R14: 0000000000000001 R15: 0000000000000002
[  115.164636][    C2]  nbcon_emit_one+0x15c/0x2b0
[  115.166153][    C2]  ? __pfx_nbcon_emit_one+0x10/0x10
[  115.167789][    C2]  nbcon_kthread_func+0x613/0x7d0
[  115.169371][    C2]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  115.171150][    C2]  ? __kthread_parkme+0x18f/0x230
[  115.172765][    C2]  ? kthread+0x13a/0x450
[  115.174080][    C2]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  115.175838][    C2]  kthread+0x373/0x450
[  115.177126][    C2]  ? __pfx_kthread+0x10/0x10
[  115.178593][    C2]  ret_from_fork+0x730/0xd60
[  115.180056][    C2]  ? __pfx_ret_from_fork+0x10/0x10
[  115.181711][    C2]  ? __switch_to+0x800/0x10f0
[  115.183288][    C2]  ? __pfx_kthread+0x10/0x10
[  115.184797][    C2]  ret_from_fork_asm+0x1a/0x30
[  115.186316][    C2]  </TASK>
[  115.187876][    C2] Kernel Offset: disabled
[  115.189228][    C2] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:11:42  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000083 RBX=0000000000000001 RCX=ffffffff91f5cbf2 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000001 RBP=ffffc9000041f868 RSP=ffffc9000041f7b0
R8 =ffffffff91f5cbf6 R9 =0000000000000007 R10=0000000000000200 R11=00000000000170fa
R12=ffffc9000041f870 R13=ffffc9000041f820 R14=ffffc9000041fc10 R15=ffffc9000041f854
RIP=ffffffff81b92ea6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096976000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f548d50c CR3=000000004d981000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=000000000607f600 Opmask01=0000000000000fff Opmask02=00000000013fefff Opmask03=0000000000000000
Opmask04=00000000ffffffdf Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559dc60236d0 0000559dc60236d0
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559dc5f59980
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6f147f1b20
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6f147f1b20
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6f14752c80
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 00006364755f796d 6d75643d454d414e 5f4344555f425355
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 00005e59485f4450 50485900454d414e 5f4344555f425355
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000181 0000000000000050 33706f0032706f6f 6c2f0035362e3937
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7766736c6d61722c 4142312c4339312c 3739312c3539312c 3339312c3239312c
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3139312c3039312c 4638312c4538312c 4238312c3938312c 3838312c3538312c
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3438312c3138312c 3937312c3737312c 3437312c4436312c 4336312c3636312c
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3336312c3136312c 3036312c30462c46 442c30442c46432c 38412c37412c4639
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=8000000000000000 RBX=ffff888025132a80 RCX=ffffffff898f4e75 RDX=0000000000000001
RSI=0000000000000002 RDI=0000000000000004 RBP=0000000000000001 RSP=ffffc90027a479d0
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000002 R11=0000000000000001
R12=0000000000000002 R13=ffff888025132d24 R14=0000000000000000 R15=ffffffff8a6d7fe0
RIP=ffffffff820b18f8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f23de403c80 ffffffff 00c00000
GS =0000 ffff888096a76000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f23de5bdad0 CR3=000000002631e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000005000001 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=00000000fffeffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc7becc02b 00007ffc7becc02b
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc7becc530 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc7becc530 0000003000000018
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4e5f5046475f5f 7c4e5241574f4e5f 5046475f5f7c4349 4d4f54415f504647
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3337343434353336 353035207374202c 29303a3233752f72 656b726f776b2820
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3231206469677420 2c32312064697020 2c29434f4c4c414d 454d4f4e5f504647
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f5f7c504d4f435f 5046475f5f7c5952 5445524f4e5f5046 475f5f7c4e524157
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4e5f5046475f5f 7c43494d4f54415f 5046472830323832 647830206b73616d
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=000000000000006b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85ac18c5 RDI=ffffffff9bc411c0 RBP=ffffffff9bc41180 RSP=ffffc90000548280
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552
R12=0000000000000000 R13=000000000000006b R14=0000000000000005 R15=ffffc90000548598
RIP=ffffffff85ac18ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096b76000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000008008c018 CR3=000000007565b000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000021c00000000 0000000700000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=000000000019faef RBX=ffff88801cbf8000 RCX=ffffffff8bcad115 RDX=0000000000000001
RSI=ffffffff8e3e64a5 RDI=ffffffff8c61e280 RBP=ffffed100397f000 RSP=ffffc9000049fe00
R8 =0000000000000001 R9 =ffffed10056a67bd R10=ffff88802b533deb R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000093fc4 R15=dffffc0000000000
RIP=ffffffff8bcab6bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096c76000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000800f1018 CR3=000000007565b000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000