last executing test programs:

26m57.321903448s ago: executing program 2 (id=555):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xb, 0x1, 'nfacct\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
dup(r1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r8, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x3, 0xb2, 0xa8}, 0x10}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2)
close(r6)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c10200000006125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005)

26m54.190939358s ago: executing program 2 (id=566):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x50a202, 0x100)
r4 = fanotify_init(0x1, 0x101000)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, r5, 0x2)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x441, 0x0)
fanotify_mark(r4, 0x1, 0x800002b, r6, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x2e6634e92533c4ad)

26m53.710869358s ago: executing program 2 (id=568):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0xa, 0x0, 0x0)

26m53.585777788s ago: executing program 2 (id=569):
socket$alg(0x26, 0x5, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
readv(r0, &(0x7f0000000340)=[{&(0x7f0000000500)=""/223, 0xdf}], 0x1)
chdir(&(0x7f0000000140)='./file1\x00')
r1 = open(&(0x7f0000000000)='.\x00', 0x80000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x4c, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0x30, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '!)*,-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x4c}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180))

26m53.499113432s ago: executing program 2 (id=570):
r0 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000210001000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000b500000008001f000000000050001100fe80000800000000000000000000000000000000000000000000002000000000ff200000000000000000000000007b8d41fa9e1c4e20880a3f69285b000164010100020000000000000000000000000000000000000000000a00bc056e557a0ac0ac"], 0xa8}}, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x80000, 0x28c)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000080)=0x1d6f4194, 0xb, 0x3)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f0000008900)=[{{&(0x7f0000000880)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0x0, &(0x7f0000000a40)=""/163, 0xa3}, 0xf8}, {{&(0x7f0000000b00)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, 0x0}, 0x6}, {{&(0x7f0000002000)=@phonet, 0x80, &(0x7f0000002300)=[{&(0x7f0000002080)}, {&(0x7f00000020c0)=""/38, 0x26}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/3, 0x3}, {&(0x7f0000002240)=""/171, 0xab}], 0x5, &(0x7f00000047c0)=""/4096, 0x1000}, 0x3}, {{&(0x7f00000057c0)=@l2tp, 0x80, &(0x7f0000005b40)=[{&(0x7f0000005840)=""/54, 0x36}, {&(0x7f0000005900)=""/190, 0xbe}, {&(0x7f0000005a00)=""/190, 0xbe}, {&(0x7f0000005ac0)=""/73, 0x49}], 0x4, &(0x7f0000005b80)}, 0x1}, {{&(0x7f0000005bc0)=@tipc, 0x80, &(0x7f0000005d40)=[{&(0x7f0000005c40)=""/108, 0x6c}], 0x1, &(0x7f0000005d80)=""/182, 0xb6}, 0x10}, {{&(0x7f0000007300)=@x25={0x9, @remote}, 0x80, &(0x7f0000007640)=[{0x0}, {0x0}], 0x2, &(0x7f0000007680)=""/114, 0x72}, 0x7}], 0x6, 0x1, &(0x7f0000008a80))
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
read$FUSE(r1, &(0x7f0000002340)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000004380)={0x50, 0xffffffffffffffda, r3, {0x7, 0x2d, 0x311, 0x240000, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}}, 0x50)
r4 = socket$kcm(0x10, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000e80)=ANY=[@ANYBLOB="229b0014210000"], 0x7)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a36510a84c9f4d4938037e70e4509c5bb00", 0x50}, {&(0x7f0000000000)="44cbd04f93aac475e6636e8e71cd79a686c093a9a88c92e85c38f5337969e55a97f91c0f99df9a8b369e36fca9123311335aeefc2c6f91d710b7b527d2c714285828ac8813b9c9e8fab17ed8c9", 0x4d}, {&(0x7f00000003c0)="4bf186804a8f016bb7517086d7d7d8127b8e81927ff67e3a5109ce9099d69ebaff307cb93dd068e7c9373f73faea9a299bd6746679b13eb7ef8cc846c41efdfb441b377bc9f7e1a55c080000004682e8c3eb8d59de80733c103f88972488f8c2d53fbd63a8c87acb62b5367eb797f858b7bcd3d32dedd9909e9d08710b4038bca9c087cb800ab5a3834bc729dcd8871d0b4dce4fee97cc5e6d62b4d731f19763c9d253af101f8b81c5673164de9f7971b8dbc731ccd4d5be9015acef77724a4e021505819d28142568d010236b35a4927b54376469ebe3b663272485c9cb44329204be97bbd34a5be42229c3c6", 0xed}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd0, &(0x7f00000002c0)=0x1, 0x4)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
write$cgroup_int(r7, &(0x7f0000000080)=0x3, 0x12)

26m52.991282142s ago: executing program 2 (id=572):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"2ec10aa5992b91b6bfae9b11c90b3a3c35eabd3340f61383d1e349ae8d47b212b6e535b968c4fc68dc9bdfd492f152d92ef81765678e093cc6b9b7694beffdbaee78a1bc8ac8501813b59755c857291e22b0f90e3bcd7f5b88bdd8832e93ff6ca9964c8851a1c5dae64080a9f19607841876eb117cd3016d54f3e6653fbe5a69876614b7bedbbb38b7ee548372c53e1935e9eb3e83db9f15f42e387f6d13a3c5eef91944fc218f1114276acd66e6600f556f51dcce67e07973eb73a79406d2cd4cbe5d31fb3eb71c24b802783db9b9a3f76e8163ec00bf0d667cb0df7cd44d1faeea6d2b7a70d8351e31cc1541830f1253334647f07b34b785901b1831a087ff9e57c436f96cdedb1e49a2240a3ae8c64157cf3bebb9cb9aa14844b79bf6458d7f71f32d3e41b996bc5e16981a8b589958f6c51a632f636ce4850b169cee088037033cd1b431144f25725b416d3cdd991fd910791d7be123e7e59148e836902ffa2030b94c514a0b816cf99682d852042e089dba297a223d1c345524d8fd0db91aa35835966184938bf708a5cc4f081d6d8b9b8c3202928ef79dfae77b72df5717453e8791d23957023694b038fdfbdf9f821008277936164119770a94143c9d459391b04e9a8c2d6787bbca497ee4cc695711b0f682fa3d707afbd0f1d0bfa796dc98a25fdd3be8a4380d313a4eee8067a40b019e4367ed800ed3151327694b9909753554c578ea113d4e6fa4a35f3841c643e4a6808a982234066731c8b2dd657a20980b6de8dd69aadd3f338d06ec7f1eff0edab8e32bfd856a767a3ee12b7e52a7ec401057b5e54c840310dddaa604059fdaae53b19822197ac723e8c50c5a297eaaa4ae31a1d183f65a542273c61ab75470b060d41cefca1b86de34eb09e963c1057f25e2ffd8fb08e7152bd73cb13208bfc49f9e4b4c42615495c90af7960e482654821ba5438ef2c33fa590010710537a54112dc215dab9c3433869a475eb0a62aaec531c56c1c269a09b98551431a50e835007e1204dedfa89a4e86b327e0ed08bb1bbb12cc5fe6d952feaf591821a1b7efff33016dcb77a45dd14dc7980e808232e557c15eadc39fc7437bebbebe5439c343eebd684e5e2767671abf79ff73f235d9cae5024ac4320eb6baa4be6de0c99cb7a4f5a1a8a5a1481acb5d7ed497a7eb2ed015cc99bacf98951355ec49a986875c7dc460165b5a498dd78fdc83c99468d2ed0e1c43e84010cae066329656a636f49d2e9163a915199b0f2380ee492b16af6917a0562351236cd43ffae7e2535e291c685e311a5d51eab0e40ee03bdf0d8eec4bda884cf9073632ad0a68765a136a5028ad5d7dbfacfd48a2237ca9fcc9e1dae2e0e713b9c963c97ac13a633dccd2a6f50abe69b66ae54b3f96c673b6f08e393d929f3b94991c255f7cd0a41d31d3fb24f27ac79df748601"})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3f, 0x1, 0xc, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x40000, 0xfffffff8, 0x0, 0xff, 0xff})

26m52.90326084s ago: executing program 32 (id=572):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3f, 0x1, 0xc, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x40000, 0xfffffff8, 0x0, 0xff, 0xff})

26m48.83164022s ago: executing program 1 (id=585):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x4, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x342056})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x4000000)

26m48.670325121s ago: executing program 1 (id=586):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000040)=0xb4, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$audio(0xffffff9c, 0x0, 0x48100, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})

26m47.096177903s ago: executing program 1 (id=588):
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async)
read(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="32dbf6d08b0836bfd8fac7bdf34f24420a175260042478cf9fee1c0fe5c857784aef07ca75a3194e77550e00d4b4661e53e240e870f200"/66, 0x42}], 0x1, 0x0, 0xfffffffffffffe3a, 0xc00e}, 0x2001c0d5)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x80, 0x4, 0xd8f9}) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000480)={0x4, 0x0, [{0x9d5, 0xed, 0x4}, {0xdc6, 0x0, 0x1}, {0x911, 0x0, 0x9}, {0x243, 0x0, 0x7f}]})
r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x88800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) (async)
poll(0x0, 0x0, 0x9e7)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) (async)
r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x4d0, 0x0, 0xffffffffffffffff}]})
syz_open_dev$sndmidi(&(0x7f0000000080), 0x3022, 0x40) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) (async)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000100))

26m46.880798594s ago: executing program 1 (id=589):
landlock_create_ruleset(&(0x7f0000000000)={0x1814, 0x2, 0x2}, 0x18, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="fffbffff", @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf650900000008000300", @ANYRES32=r3, @ANYBLOB="08003700010000000800090000d607000800090001ac0f00"], 0x34}, 0x1, 0x0, 0x0, 0x4044045}, 0x20000080)
getpgid(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xff, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffc}, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f)
r6 = socket$inet6(0xa, 0x3, 0x3c)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x20, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000)

26m45.990838381s ago: executing program 1 (id=594):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
openat$ptmx(0xffffff9c, &(0x7f0000000100), 0x200842, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})

26m38.589089091s ago: executing program 1 (id=599):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x50a202, 0x100)
r4 = fanotify_init(0x1, 0x101000)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, r5, 0x2)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x441, 0x0)
fanotify_mark(r4, 0x1, 0x800002b, r6, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x2e6634e92533c4ad)

26m29.254507034s ago: executing program 33 (id=599):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x50a202, 0x100)
r4 = fanotify_init(0x1, 0x101000)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, r5, 0x2)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x441, 0x0)
fanotify_mark(r4, 0x1, 0x800002b, r6, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x2e6634e92533c4ad)

13m18.707718919s ago: executing program 4 (id=2901):
r0 = socket$key(0xf, 0x3, 0x2)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
socketpair(0x6, 0x2, 0xfffffffc, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={<r3=>0x0}, &(0x7f0000000240)=0xfe04)
sendmsg$nl_netfilter(r2, &(0x7f0000002940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002900)={&(0x7f0000002980)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="080040800400210000"], 0x343c}, 0x1, 0x0, 0x0, 0x80}, 0x440c0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0x8, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(r3, 0x1, &(0x7f0000000480)=0x880c4f)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TCSETSF2(0xffffffffffffffff, 0x40305828, 0x0)
r6 = socket(0x15, 0x5, 0x0)
getsockopt(r6, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x140, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pwritev2(r4, &(0x7f0000000740)=[{&(0x7f0000000100)}, {0x0}, {0x0}], 0x3, 0x9, 0x1, 0x1c)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX])

13m17.688578143s ago: executing program 4 (id=2903):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xe, 0x0, &(0x7f0000000b00)="e097566f5bec64466cf0925782dd", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f00000001c0)={<r1=>r0, 0x4, 0x1, 0x8001})
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000280)={0x1, 0x3, 0x4, 0x0, 0xffff4c37})
lsetxattr$security_ima(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), &(0x7f0000000180)=@v2={0x6, 0x3, 0xc, 0x4, 0x2, "b253"}, 0xb, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
openat2$dir(0xffffff9c, 0x0, &(0x7f0000000880)={0x200000, 0x2, 0xd03c3e2c6fb86782}, 0x18)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4c0000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4200000021200000240012800c0001006d6163766c616e00140002800800030002000000080001001000000008000500", @ANYRES32=r9], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc04c5609, &(0x7f0000000200)=@multiplanar_mmap={0x6, 0x3, 0x4, 0xe000, 0x1, {0x0, 0xea60}, {0x3, 0xc, 0x80, 0x2, 0x8, 0xff, "364fa2df"}, 0x81, 0x1, {&(0x7f00000000c0)=[{0x38, 0x5, {0x9}, 0x5}, {0x5, 0x80000000, {0x7}, 0x7ceb}]}, 0x3ff, 0x0, r1})
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x0, 0xa, [0xd, 0xd, 0xff, 0x2, 0x7, 0xbe, 0x3ff, 0x4, 0x3, 0x6]}, &(0x7f0000000340)=0x1c)

13m17.599546087s ago: executing program 4 (id=2906):
r0 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xbf84}, 0x50)
r3 = epoll_create1(0x0)
r4 = fcntl$dupfd(r3, 0x406, r3)
r5 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0x20000002})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x20000001})
close_range(r1, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r6, <r8=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000000700000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = openat$cachefiles(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
r10 = accept4(r0, 0x0, 0x0, 0x80800)
r11 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f00000002c0)={0xc0000008})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="a17337bd7000ffdbdf2516000000"], 0x14}}, 0x4000004)
getsockopt$ARPT_SO_GET_ENTRIES(r10, 0x0, 0x61, &(0x7f0000000780)=ANY=[@ANYBLOB="66696c7465720000000000000000f7000000000000000000000000000000000096000000f66a2ef478b8411ba4f57bc7887d37d870e203eabe89185cd297963548983c68cfc39dff88e17c136861d976fe22019e9944b6974056890aba79598a90e909e457a94ef27500ea4f2f7de4fc91eafbb683e43a7f7c819ee90e11c649df83ce5a95475edd0a59a97bdc87843bfa7d4451321e3f88dc1445b64058d4ffde638ac8e8557aa3eb903f8ceb01a02bd4c60f750c6a623f94490608b03a09cdc639ebe1b2fadb94d4ebbbcd8dd459149dae0681738d5b5a4b3c6557a291f952221c0a97c8b3138ebac9a81db682557028c8fa25895959a311b4550255fb99fa016eece82d51dcf32cbd6b501bad2afed708cdd9cf549d34e4b9b405da590fd98f1b289f4ce68d67b582af098bf6fc6016a55e83d565fe6185679268dc73b7ed68b3db9b3bf9b6ab886f2925bebd77933b8460885a3a7fcf60bf5217e3610cb8038bdc8210132e951b0c81e35f3ae1880f0c397c948c33f5e61d247d"], &(0x7f0000000100)=0xba)
r12 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x1404, 0x1, 0x70bdad, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDCTL_MIDI_INFO(r9, 0xc074510c, &(0x7f0000000340)={"e20a9c9bc4c9e4d4e37fc003934a37cbae8ff32b9371f3b9fb637d928bf6", 0x8, 0x6, 0x2, [0xbf, 0xe5, 0x42108fb7, 0x5, 0xb, 0xa7e, 0x6, 0x4, 0x1, 0x10, 0x80000001, 0xc, 0x2, 0x2, 0x5, 0x2, 0x80, 0x10000]})
ioctl$sock_SIOCGIFCONF(r13, 0x8940, &(0x7f00000002c0)=@buf={0x3a, &(0x7f0000000000)="c0cac5c6c85abcf06bf2b7d83ee84a79847f29a3ec06c24c1bbf2d5607004800949c00"/48})
socket$igmp6(0xa, 0x3, 0x2)

13m17.429655973s ago: executing program 4 (id=2908):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@host})
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000240)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@local, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000100)={{@local, 0x81}, 0x1})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000001440)={&(0x7f0000000440)=[0x10000, 0xd7, 0x9, 0x4, 0x2, 0x3, 0x10001, 0x29f, 0x800, 0x0, 0xf, 0x1, 0x2, 0x4, 0x7ff, 0x6, 0x1ff, 0x274, 0x8000, 0xb15, 0x0, 0x1c, 0x4, 0xfffffd99, 0x2, 0x6, 0x7fff, 0x2, 0x7fff, 0x3, 0x1, 0x941, 0x0, 0x3ff, 0x9, 0x8, 0x0, 0x3ff, 0x7f, 0x3ff, 0xffff, 0x3, 0x176, 0x80000000, 0x7, 0xfef, 0x2, 0x1000, 0x7fffffff, 0x5, 0xfffffffb, 0x15e1, 0x6, 0x6, 0x0, 0x4, 0x8, 0x2, 0xfffffffc, 0x3, 0x9, 0x3, 0x5c4f, 0x43d, 0x4, 0x0, 0x800, 0x5, 0x9, 0x8, 0x100, 0x1ff, 0xb3a, 0x9, 0x2eb090b7, 0x1, 0xef48, 0x1, 0x1, 0x8, 0x8, 0x7, 0x2, 0x2, 0x2, 0x94, 0x12e, 0x0, 0x1, 0x27d7, 0x7, 0x9, 0x6, 0x7f, 0xffffff29, 0x4, 0x573, 0xd, 0x2, 0x5, 0x0, 0x7, 0x0, 0x1ddf, 0x9, 0x7, 0x5, 0x1, 0x8, 0x401, 0xf9fc, 0x0, 0x36e, 0x5, 0x8ac, 0xa, 0x3, 0x4, 0x4, 0x0, 0xb, 0xfffffff7, 0x6, 0x5000, 0x0, 0x53f9, 0x7e4735fe, 0x2, 0xfffffffd, 0xa, 0xfffffffe, 0x3, 0x3ff, 0x4, 0x6, 0x0, 0x5, 0x7, 0xffffffff, 0x8, 0x4, 0x4, 0x6, 0xe, 0x5, 0xe43, 0xa47f, 0xfbde, 0x5, 0x7, 0x40, 0x2, 0xffffffff, 0x1000, 0xf, 0x9, 0x3, 0x1, 0x2, 0xad, 0x968, 0x5a, 0x10fc, 0x88c9, 0x20000000, 0xc9b, 0x8, 0x2, 0xa9, 0x7, 0xa25d, 0x400, 0xffffffff, 0xffff640c, 0x0, 0x800000, 0x80, 0x3, 0x3, 0x10001, 0x8, 0x4, 0x7, 0x80000000, 0x6, 0x5, 0x4c9, 0x4, 0xcf, 0x45fe, 0x7, 0x3, 0xffffffff, 0x1, 0xfffffffe, 0x9, 0x8001, 0x4, 0x0, 0x7, 0x1ff, 0x3, 0x0, 0x2, 0xf47, 0x0, 0x1, 0x0, 0xb9, 0xfffffffa, 0xfff, 0xa, 0x0, 0xffffffff, 0x200000, 0x9, 0x0, 0x37, 0x8, 0xcc, 0x5, 0xffffffa1, 0x4, 0xf439, 0x1fa, 0x2, 0x401, 0x5, 0x1000, 0x6, 0xa, 0x1, 0x401, 0xf93, 0x8, 0xa, 0x6, 0x83, 0x10, 0x80000001, 0x7, 0x2, 0x5, 0xeaf1, 0x4, 0x6bca, 0x3, 0x800, 0xf0d8, 0x41, 0x7, 0xfffffffc, 0x6b06, 0xfffffff2, 0x9, 0x4, 0xffff, 0xffff, 0x4, 0x4, 0x5, 0x7382, 0xffffff81, 0x7, 0x1, 0x80000001, 0x4, 0x1, 0x0, 0x400, 0x7, 0x200, 0x0, 0x3, 0xdac, 0x8000, 0x80000000, 0x4, 0x0, 0xfffffffd, 0x80000000, 0x10, 0x1, 0x80000001, 0x9, 0x40e037e1, 0x5, 0x740, 0x80000001, 0xfff, 0x1000, 0x6, 0x101, 0xd4f6, 0x0, 0x6, 0x81, 0x151, 0x3ff, 0x7fffffff, 0x9, 0xfffffff6, 0x387, 0x7f, 0x4, 0x1, 0x400, 0x1d, 0x8, 0x3ff, 0xffffaa18, 0x2, 0x5, 0x0, 0x6, 0x8, 0xb, 0xfffffff8, 0x1, 0x4, 0xa, 0x9, 0x2, 0x4, 0x3, 0x7fffffff, 0x6, 0x6, 0x0, 0x0, 0x3, 0xe, 0x3, 0x7, 0x8, 0x7, 0xb, 0xf4c, 0x401, 0x4, 0x3, 0x5, 0x2, 0x7f, 0x5, 0x11, 0x8, 0x9, 0x3, 0x1, 0x7, 0x0, 0x2, 0x1, 0x7, 0x6, 0x3ff, 0x3, 0x80000001, 0xf45, 0x0, 0x80000000, 0x4, 0x0, 0x180000, 0x401, 0x4, 0xf89e648f, 0x1, 0x4, 0x3, 0x1, 0x8, 0xc5c, 0x4, 0x589, 0x1ff, 0x7, 0x1, 0x449, 0xfff, 0x1, 0x3, 0x9d4, 0x964, 0x7, 0x400000, 0x3, 0x94, 0x80000001, 0x101, 0x6, 0x4, 0x0, 0xd, 0x8, 0x8, 0xffffffff, 0x4, 0x9, 0x4, 0x1, 0x3, 0x192, 0x5, 0xab, 0x1, 0x4, 0x7, 0x400, 0x8, 0x8, 0x3ff, 0xd, 0x0, 0x6, 0x87, 0xfffffff8, 0x8, 0x17a3, 0x1, 0x98f, 0x100, 0x6, 0xb88, 0x9, 0x7, 0x0, 0x7, 0x6, 0xb, 0x2, 0x3, 0x8001, 0x6, 0x687, 0x0, 0x3, 0x2, 0xdc, 0x24, 0x3, 0x6, 0x1, 0x5, 0x8, 0x4, 0x2, 0x74, 0x0, 0x0, 0x4, 0x3ed51548, 0x0, 0x5, 0x0, 0x7fff, 0x4, 0x4, 0x5, 0x2, 0xff, 0xf, 0x6, 0x5, 0x101, 0xf7, 0x3, 0x2, 0x6, 0x1, 0x0, 0x2, 0x6, 0x0, 0x5, 0x3, 0x3, 0x9, 0xffffffff, 0x40, 0x2, 0xf, 0x8, 0x1, 0x401, 0x955, 0x200, 0x81, 0xfff, 0x7, 0x1, 0x0, 0x3, 0x2, 0x6, 0x5, 0x2, 0xe, 0x3, 0x9, 0x6, 0x9, 0x0, 0x2, 0x7, 0x4, 0xa, 0x6, 0x2, 0xc, 0xfffeffff, 0x9, 0xffff, 0x80, 0x2, 0x6, 0x2, 0x2, 0x2db2, 0x91, 0x10000, 0x1, 0x115a, 0x9, 0x0, 0x8, 0x5, 0xc66d, 0x32c3, 0x7, 0x4, 0xffffffff, 0xffff9747, 0x33, 0x4be2, 0x0, 0xb5, 0x4, 0x1, 0x4330, 0x0, 0x0, 0x7fff, 0x4, 0x1ff, 0x101, 0x9, 0xb4, 0x100, 0xb, 0x5, 0x40, 0x40, 0x8, 0xd2c8, 0x6, 0x4b0, 0xb70, 0x7, 0x4, 0x1d, 0xffffffff, 0x8, 0x7ff, 0x5, 0x4, 0x6, 0x9, 0x9, 0x7, 0x1, 0xd5, 0x8, 0x1ff, 0x6, 0xd48, 0x2, 0xd3d, 0x5, 0x8c1, 0x73b, 0x10000, 0x2, 0xae3e, 0x4, 0xfffffff8, 0x3, 0xffffffff, 0x0, 0x9, 0xe342, 0x5, 0x0, 0x7, 0x80000000, 0x4, 0xffff8000, 0xfffffffe, 0x9, 0x7fffffff, 0xb, 0x639, 0x2, 0x7, 0x1000, 0x200, 0x10, 0xd02, 0x5, 0x39297818, 0x5, 0x80, 0x400, 0x8000, 0x9, 0x6, 0x7f, 0xfffff410, 0x4, 0x8, 0x9, 0x9c0, 0xc, 0x4, 0x44000000, 0x7, 0xd, 0x7fffffff, 0x5, 0x7f, 0xfffffff8, 0x41, 0x1, 0x0, 0x1, 0x401, 0x7, 0x9, 0x8001, 0x8, 0x12, 0x1, 0x4, 0x2, 0x0, 0x9c, 0x0, 0x480, 0x9, 0x10, 0xe98, 0x9, 0x5, 0x4, 0x7f, 0x1ff, 0xb, 0x2, 0x5, 0x6, 0xc, 0x0, 0x5, 0x2, 0x4, 0x4, 0x88, 0x3, 0xb, 0x80, 0x7, 0x2, 0x1a7, 0x5, 0x9, 0x6, 0x1, 0x8, 0x10000, 0x5, 0xf, 0x5, 0xfffffffb, 0x67d, 0x3, 0x8, 0x1, 0x0, 0x8000, 0xfffffffe, 0x7, 0x2, 0x8000, 0x6, 0x80000001, 0x3, 0x3, 0x1, 0x401, 0x4, 0xfffffffb, 0x5, 0x81, 0x3, 0x8, 0x42, 0x5, 0x7e, 0x3, 0xffffffff, 0xa6fa, 0x72, 0x1, 0x0, 0xff7, 0xffffb07d, 0x4, 0x4, 0x7fffffff, 0x1, 0x8, 0x9, 0x5, 0xfa8, 0x4, 0x1, 0x80000000, 0x1, 0x4, 0x3, 0x4, 0xd0ad, 0x1000, 0x10, 0x1ff, 0x8, 0x4, 0x800, 0x2, 0x5, 0x1e0, 0xb, 0x0, 0x3, 0x1800, 0xf03e, 0xfffffe01, 0x8, 0xc0, 0x9, 0x80000000, 0x1, 0x200, 0x6, 0x3, 0x7, 0x10000, 0xfffffe00, 0x65, 0x1, 0x3, 0x4, 0x6, 0xfffffff9, 0x1, 0xb0, 0x5, 0xfffffff9, 0x6, 0x0, 0x5, 0x5, 0x8, 0x0, 0xff, 0xda, 0x8, 0x7ff, 0x7, 0x81, 0x1, 0x7, 0xe97105de, 0x4, 0x9, 0x8, 0x1ff, 0x80c, 0x4, 0x8, 0x40, 0x9, 0xa, 0x2, 0x0, 0x5, 0x6, 0xd2, 0x5, 0x2, 0xf47, 0x380, 0x7a, 0xc2, 0x0, 0x9, 0x3, 0x80000000, 0x4, 0x6, 0xa3, 0x0, 0x4, 0x6, 0xf, 0x3, 0x2, 0x200, 0xe68f, 0x96, 0x9, 0x7, 0x40, 0x10000, 0x1ff, 0x7, 0x99d, 0x80000000, 0x5, 0x400, 0x3c131f75, 0xe5, 0x8f, 0x3, 0x3, 0x3, 0x7f, 0x2, 0x7, 0x7, 0x3, 0x8001, 0x3f26, 0x6, 0x6, 0xfe5, 0x5, 0x1c, 0xc, 0x3c, 0x3, 0x5, 0x7, 0x6, 0x0, 0x1560, 0x4, 0xe, 0x1, 0xda4, 0x24, 0x7, 0x1, 0x38, 0x2, 0x100, 0x7e, 0x9, 0x55, 0x80, 0x9, 0xa9b, 0x9, 0xc6, 0x4, 0x8001, 0x6, 0x0, 0x9, 0x3, 0x4, 0x80000000, 0x2, 0x232, 0x6, 0x6, 0x5, 0x5, 0x401, 0x7cf, 0x8, 0x2, 0x1, 0x8, 0x6a7918b, 0xffffffff, 0x7ff, 0x0, 0x0, 0x2, 0x84, 0x5, 0x1, 0xc0, 0x400, 0x10001, 0x8, 0x97, 0x80000000, 0x40, 0x34f9, 0x7, 0x2, 0x200, 0x4, 0x7ff, 0xfff, 0x3, 0x8, 0x2, 0x6, 0x0, 0xfffffffb, 0x0, 0xf6, 0xfff, 0x6, 0x100, 0xffff, 0x7fff, 0x5a, 0x8, 0x3, 0x7, 0x2, 0x1000, 0xd0, 0x3ff, 0x5109, 0x39, 0x80, 0x8001, 0xce, 0x5, 0x0, 0x1, 0x6, 0x5, 0x0, 0x6, 0x6, 0xffffffff, 0xfffffffa, 0x1, 0x3, 0x3, 0x43, 0x5, 0x8, 0x100, 0xd, 0x5, 0x2, 0x1, 0xc4, 0x1, 0x5, 0x3, 0x401, 0x6, 0x6, 0x26, 0x4, 0x2924, 0x6, 0x8, 0xfffffff8, 0x1, 0x3, 0x3, 0xc97, 0x463, 0xf7, 0x3, 0x8000, 0x3, 0x7fd3, 0x9, 0xe, 0x7, 0x7, 0xbd1, 0x4, 0xce74, 0x756, 0x4, 0x0, 0x1243, 0xfffffe00, 0x9, 0x9, 0x5, 0x4, 0x10, 0x1, 0x2, 0x5, 0x2, 0x8, 0x6, 0xd2e, 0x9, 0x4, 0x5, 0x2, 0x4, 0x1ff, 0x3, 0x3a, 0xb, 0x5b6, 0x80, 0x4], 0x4, 0x400, 0x7})
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r3=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa12, {0x0, {0xa, 0x4e23, 0xfffffffd, @loopback, 0x4}, r3}}, 0x30)

13m17.368469059s ago: executing program 4 (id=2910):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xfff1, 0xf}, {}, {0x3, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0x4}}, @TCA_FW_MASK={0x8, 0x5, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES64=r4, @ANYRES32=0x0], 0x18}}, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
r6 = socket$xdp(0x2c, 0x3, 0x0)
mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x20)
sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, r5)

13m12.814550348s ago: executing program 4 (id=2918):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x1, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
socket$netlink(0x10, 0x3, 0x4)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x40, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2f, 0x2020, 0x4}, 0x20)
recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SSUBSCRIP(r6, 0x89e1, &(0x7f00000001c0)={'veth1_to_bridge\x00', 0xec6, 0x6})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$sock(r7, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
recvfrom(r8, &(0x7f0000000040)=""/58, 0x3a, 0x2001, 0x0, 0x0)

12m57.288592094s ago: executing program 34 (id=2918):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x1, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
socket$netlink(0x10, 0x3, 0x4)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x40, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2f, 0x2020, 0x4}, 0x20)
recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SSUBSCRIP(r6, 0x89e1, &(0x7f00000001c0)={'veth1_to_bridge\x00', 0xec6, 0x6})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$sock(r7, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
recvfrom(r8, &(0x7f0000000040)=""/58, 0x3a, 0x2001, 0x0, 0x0)

12m45.759126911s ago: executing program 3 (id=2978):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
mknodat(0xffffffffffffffff, 0x0, 0x40, 0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981)
openat$cdrom(0xffffff9c, &(0x7f00000003c0), 0x80100, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4002}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv4_getrule={0x1c, 0x22, 0x10, 0x70bd2b, 0x25dfdbfe, {0x2, 0x20, 0x80, 0x46, 0x6, 0x0, 0x0, 0x3, 0x11}, [""]}, 0x1c}}, 0x4000001)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000002e00090027bd7000000000000400000006000b007b0000009bf0d0500b86a8094449abf6f0e6435ffc978d7bec04d01abeb472dcab7f45b3404d619866783d1ffaf029b24ab24108f0e456a1983a7664bd179e872d10df639e2d2193c667cf4d143e34d4397e334d94533d0661bc449a03c6c4216931138a07c7fb2d176d01e95258d8bb49164f74afad036f64bfb4559688d32e727368b75bfa629c5ecf80e2e010b8087f5e3a3c6b560b4da0a7a6e9da524630a298fad50bfb4c759a77839fc2848a178cb0a703e816e35dbad828a774bc2fab19f5d8"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
shmctl$SHM_INFO(0x0, 0xe, 0x0)

12m44.517165526s ago: executing program 3 (id=2985):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008aec1, &(0x7f0000000500)={0xa, 0x0, [{0x2, 0x10001, 0x5, 0x5, 0x0, 0x6, 0xff}, {0x2, 0x8cb, 0xc, 0x424, 0x10, 0x0, 0x7fffffff}, {0xa, 0x4, 0xa, 0x2, 0x36e3, 0x4, 0x7f}, {0xc0000000, 0x10, 0x1, 0x5, 0x0, 0x7, 0x7}, {0x40000001, 0x7ff, 0x1, 0xa93c, 0x0, 0x1, 0x8}, {0x80000000, 0x5, 0x3, 0xf4, 0x7, 0x3, 0x3}, {0x40000015, 0x9, 0x2, 0x5, 0x7, 0xc, 0x4}, {0xa, 0xae, 0xf, 0x3, 0x10001, 0x9, 0x2}, {0x80000000, 0x5, 0x5, 0x7, 0x6, 0x7e860d53, 0x7}, {0x6, 0x1, 0x7, 0x4, 0x7, 0xfffffff8, 0x3}]})
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r4 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000440)=<r6=>0x0, &(0x7f0000000180))
syz_io_uring_modify_offsets$generic(r5, r6, 0x2c, 0x10000)
io_uring_enter(r4, 0x2883, 0xf1bd, 0x0, 0x0, 0x0)
io_uring_enter(r4, 0x7fffffe, 0x5, 0x5, 0x0, 0x0)
io_uring_enter(r4, 0x788, 0x6a29, 0x1, 0x0, 0xfffffffffffffd04)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x20008000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sysfs$1(0x1, &(0x7f0000001840)='mqueue\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))

12m43.50601096s ago: executing program 3 (id=2992):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x3, 0xd, 0x53030, 0x1, 0x2}, 0x50)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1})
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000003340)={0x100, 0x4}, &(0x7f0000003380))
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a11820fffff5bab4e210fff000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000002100001000a0c10000000e6ff224e0000", 0x58}], 0x1)

12m42.509372476s ago: executing program 3 (id=2994):
socket$inet_udp(0x2, 0x2, 0x0)
setfsgid(0xee00)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00')
fchdir(r0)
r1 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000000c0)='wchan\x00')
pread64(r2, &(0x7f0000000100)=""/15, 0xf, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a", @ANYRESHEX=r0, @ANYRESHEX=r2], 0x7c}}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe)
shutdown(r4, 0x1)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4)
recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
shutdown(0xffffffffffffffff, 0x0)
r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

12m41.398972845s ago: executing program 3 (id=3001):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = openat$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r4 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)={0x1c, r3, 0xe09, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200c044}, 0x400c880)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4048895)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
read(0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000100)='./file0\x00')
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.time\x00', 0x275a, 0x0)
pwritev2(r8, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14)
read$qrtrtun(r8, 0x0, 0x0)
r9 = openat$vcs(0xffffff9c, &(0x7f0000000240), 0x20601, 0x0)
mount_setattr(r1, &(0x7f00000001c0)='./file0\x00', 0x100, &(0x7f0000000280)={0x0, 0xf8, 0x20000, {r9}}, 0x20)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x80000000}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x2649}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_LOG_PREFIX={0x10, 0x2, 0x1, 0x0, '!}*\xdb!/\xc9#.-*\x00'}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xd8}}, 0x0)

12m40.429206696s ago: executing program 3 (id=3005):
memfd_create(&(0x7f0000001780)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xc7\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xbd`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x9d\x83\xcd\b\xd1\x02R\x9b7\xaf\xb7o\x01\xf9\x15\xb8KB\x04\x06\xa5\xea\x0ft\xbb\x1er\x14\xdb\xd1\xcd\xfd\x00'/146, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0x37}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid() (async)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0) (async)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
unshare(0x6a040000) (async)
unshare(0x6a040000)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240), 0x111, 0x1}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={<r4=>0xffffffffffffffff}, 0x111, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, r4}}, 0x30)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
write$cgroup_int(r5, &(0x7f0000000300)=0x7f, 0xfdef) (async)
write$cgroup_int(r5, &(0x7f0000000300)=0x7f, 0xfdef)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0) (async)
close_range(r6, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x9)

12m25.194136845s ago: executing program 35 (id=3005):
memfd_create(&(0x7f0000001780)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xc7\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xbd`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x9d\x83\xcd\b\xd1\x02R\x9b7\xaf\xb7o\x01\xf9\x15\xb8KB\x04\x06\xa5\xea\x0ft\xbb\x1er\x14\xdb\xd1\xcd\xfd\x00'/146, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0x37}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid() (async)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0) (async)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
unshare(0x6a040000) (async)
unshare(0x6a040000)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240), 0x111, 0x1}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={<r4=>0xffffffffffffffff}, 0x111, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, r4}}, 0x30)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
write$cgroup_int(r5, &(0x7f0000000300)=0x7f, 0xfdef) (async)
write$cgroup_int(r5, &(0x7f0000000300)=0x7f, 0xfdef)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0) (async)
close_range(r6, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x9)

8m2.819511078s ago: executing program 7 (id=4695):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x6, 0x2, 0x80000000, 0x0, 0x10001, 0x2, 0x0, 0x86b}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)

8m2.114837065s ago: executing program 7 (id=4699):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000000bca30000000000002403000020feffff620a00fef8ffffff71a4f0ff000000001f03000000000000e5000600000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6"], 0x0, 0x2}, 0x94)
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[], 0xdd12}], 0x1}, 0x200400d1)

8m2.045256608s ago: executing program 7 (id=4700):
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b01"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4000089}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)

8m1.965200005s ago: executing program 7 (id=4701):
socket$kcm(0x10, 0x2, 0x0)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001280)=@newsa={0x178, 0x10, 0x713, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@private}, {@in6=@remote, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x84, 0x2, {{'ecb(cipher_null)\x00'}, 0x1e0, "c2c1aa3dfb24a039186e6a44aa15ab19ab76f0f5c6789b1ba1b60ae9b42e205640e97f76f868c68ca1737d0a0dd4e05ba10363dfbb4143765170f546"}}, @tfcpad={0x8, 0x16, 0x7}]}, 0x178}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x6}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000140)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x41}], 0x2)
r2 = gettid()
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000280)={0x4, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(r5, 0xae78, &(0x7f0000000000)=0x1)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0002, 0xc, 0x1, 0x81, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xff}, {0x10000, 0x5000, 0x3, 0xfc, 0x8, 0x0, 0x0, 0x64, 0xd, 0x0, 0x5, 0xfc}, {0x3000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x21, 0x4, 0x2}, {0xffff1000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x3, 0x7}, {0x6000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x6, 0xfd}, {0x4000, 0x1000, 0x0, 0x3, 0x9b, 0xfd, 0xfc, 0x4, 0x0, 0x5, 0xc0, 0x10}, {0x3000, 0x100000, 0x10, 0x0, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0x2, 0x6f, 0x1, 0xfd, 0x0, 0x9, 0x3, 0x5}, {0x2000, 0xb}, {0x70000}, 0x9df9ffdf, 0x0, 0x2, 0x20, 0xe, 0x9000, 0x2000, [0xdd41, 0x0, 0x2]})
ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50})
listen(r3, 0x2)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483)
ioctl$VIDIOC_DQEVENT(r7, 0x80885659, 0x0)

8m1.014377799s ago: executing program 7 (id=4703):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0xfa43}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004040}, 0x20000000)
unlink(&(0x7f0000000180)='./file1\x00')
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000000906010200000000000000000900020073797ab10000000005000100070000003400078df3e7f397dd1df9801800018014000240fe8000020000000000000000000000aa0500030009000000060004404e1e00000500fcffbc0000009bdac3ef04ba491fc230b582709acdbf869c022f8c959763f087f5e9b8b1f52542b038ef9e113fff101493521d6a8731d3beac6b2e122a2561a727b78b77dfff0b25a1553d232a1db51b7405a934d3aa", @ANYRES8=r5], 0x5c}, 0x1, 0x0, 0x0, 0x10040003}, 0x10)

7m50.421679814s ago: executing program 7 (id=4716):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = openat$ttyS3(0xffffff9c, 0x0, 0x210100, 0x0)
syz_open_pts(r2, 0x81)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket(0xa, 0x1, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'lo\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c2bbd70000000000002000000", @ANYRES32=r6, @ANYBLOB="4000100a14000100009a"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000080)={0xffffffff, "5e5c3446aa0ecd604c893eba3198600b1891109654fe9676d14574be70b6225c", <r9=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe", r9})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/binder0\x00', 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', <r10=>r6, 0x7, 0x7800, 0x67a, 0x7, {{0x6, 0x4, 0x2, 0x29, 0x18, 0x64, 0x0, 0x6, 0x2f, 0x0, @remote, @remote, {[@ra={0x94, 0x4}]}}}}})
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x41000, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080)
bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000000800)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x80200000}, 0x0, 0x0, 0xfffffffffffffff8, 0xff, 0x9, 0xffffffffffffffff, 0x40, 0x4}}], 0x58, 0x4044004}, 0x40)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb8100000000000000380000003800000003000000020000000000001104000000ffffffff00000000000000020000000002000000000000130200000002000000e7ffff0d03000000000000000061000000"], 0x0, 0x53}, 0x28)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000030427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000232000002000128008000100677470001400028008000200f44f1f1716e59fc3c8b23361ba88466b7e6d4ee238e02a4c145d804f692672386efb2f855834d1b908a544a7ac2eb5b9b369c9db04e8ca60f759973681f001000000a43863623cd75245e0f53f", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB], 0x40}, 0x1, 0xba01}, 0x0)

7m32.318622401s ago: executing program 36 (id=4716):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = openat$ttyS3(0xffffff9c, 0x0, 0x210100, 0x0)
syz_open_pts(r2, 0x81)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket(0xa, 0x1, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'lo\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c2bbd70000000000002000000", @ANYRES32=r6, @ANYBLOB="4000100a14000100009a"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000080)={0xffffffff, "5e5c3446aa0ecd604c893eba3198600b1891109654fe9676d14574be70b6225c", <r9=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe", r9})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/binder0\x00', 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', <r10=>r6, 0x7, 0x7800, 0x67a, 0x7, {{0x6, 0x4, 0x2, 0x29, 0x18, 0x64, 0x0, 0x6, 0x2f, 0x0, @remote, @remote, {[@ra={0x94, 0x4}]}}}}})
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x41000, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080)
bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000000800)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x80200000}, 0x0, 0x0, 0xfffffffffffffff8, 0xff, 0x9, 0xffffffffffffffff, 0x40, 0x4}}], 0x58, 0x4044004}, 0x40)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb8100000000000000380000003800000003000000020000000000001104000000ffffffff00000000000000020000000002000000000000130200000002000000e7ffff0d03000000000000000061000000"], 0x0, 0x53}, 0x28)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000030427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000232000002000128008000100677470001400028008000200f44f1f1716e59fc3c8b23361ba88466b7e6d4ee238e02a4c145d804f692672386efb2f855834d1b908a544a7ac2eb5b9b369c9db04e8ca60f759973681f001000000a43863623cd75245e0f53f", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB], 0x40}, 0x1, 0xba01}, 0x0)

6.834987508s ago: executing program 0 (id=6103):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'xfrm0\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, &(0x7f0000000340)={0x0, 0x3}, 0x10}, 0x94)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @private1, 0x4}, 0x1c)
ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
ioctl$sock_netdev_private(r2, 0x8949, &(0x7f0000000000))
r3 = openat$vsock(0xffffff9c, 0x0, 0x80, 0x0)
read$FUSE(r3, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000240)=ANY=[@ANYBLOB="10df2500"/16, @ANYRESOCT=r1], 0x10}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0900000004000000080000000000030000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000140)={<r4=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {0x0, 0x0, 0x0, 0x1}]})
r5 = openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0)
ioctl$BLKTRACESETUP(r4, 0xc0401273, &(0x7f00000001c0)={'\x00', 0xfffb, 0x2, 0x80000001, 0x80, 0xc, <r6=>0xffffffffffffffff})
fcntl$setownex(r5, 0xf, &(0x7f0000000200)={0x2, r6})
r7 = socket(0x21, 0x2, 0xa)
r8 = io_uring_setup(0x177e, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x0, 0x2b4})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
close_range(r7, r8, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff4)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
close(0xffffffffffffffff)
write$cgroup_type(r9, &(0x7f0000000280), 0x9)

6.76288692s ago: executing program 0 (id=6109):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x4000)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000640), r1)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x4008011)
socket(0x1, 0x803, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x20, 0x4)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(streebog512-generic,ecb-twofish-avx)\x00'}, 0x58)
r8 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
statx(0xffffffffffffff9c, 0x0, 0x1000, 0x56159817211d7953, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}}, 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x840)

6.675116449s ago: executing program 8 (id=6112):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d30000000000200140014006e657464657673696d3000000000000034001680300001802c000c8014"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x40f, 0x8000003d)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c00058005"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x7800, 0x7, 0x4, 0x6, {{0x1a, 0x4, 0x1, 0xc, 0x68, 0x65, 0x0, 0xb, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @generic={0x7, 0x2}, @rr={0x7, 0x7, 0x45, [@multicast1]}, @lsrr={0x83, 0xf, 0xef, [@multicast2, @broadcast, @multicast2]}, @lsrr={0x83, 0xf, 0x80, [@empty, @remote, @broadcast]}, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x24, 0x0, [{0x7, 0x4, "f14a"}, {0x6, 0x9, "8568e56bde1c2f"}, {0x0, 0x11, "439872b2d629ef7cef86e6a0f0baa0"}]}]}}}}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'netpci0\x00'})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000003080101000000000000000000000009040004800600024088630000050003007f04aafc76e34812942102406388000000"], 0x28}, 0x1, 0x0, 0x0, 0x24040011}, 0x4000058)
r7 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x20280, 0x0)
ioctl$BSG_SET_RESERVED_SIZE(r7, 0x2275, &(0x7f0000000040)=0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x124)
r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x3000, 0x3})
write$P9_RSTATu(r8, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x237)

5.948625146s ago: executing program 6 (id=6113):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d30000000000200140014006e657464657673696d3000000000000034001680300001802c000c8014"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x40f, 0x8000003d)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c00058005"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x7800, 0x7, 0x4, 0x6, {{0x1a, 0x4, 0x1, 0xc, 0x68, 0x65, 0x0, 0xb, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @generic={0x7, 0x2}, @rr={0x7, 0x7, 0x45, [@multicast1]}, @lsrr={0x83, 0xf, 0xef, [@multicast2, @broadcast, @multicast2]}, @lsrr={0x83, 0xf, 0x80, [@empty, @remote, @broadcast]}, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x24, 0x0, [{0x7, 0x4, "f14a"}, {0x6, 0x9, "8568e56bde1c2f"}, {0x0, 0x11, "439872b2d629ef7cef86e6a0f0baa0"}]}]}}}}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'netpci0\x00'})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000003080101000000000000000000000009040004800600024088630000050003007f04aafc76e34812942102406388000000"], 0x28}, 0x1, 0x0, 0x0, 0x24040011}, 0x4000058)
r7 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x20280, 0x0)
ioctl$BSG_SET_RESERVED_SIZE(r7, 0x2275, &(0x7f0000000040)=0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x124)
r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x3000, 0x3})
write$P9_RSTATu(r8, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x237)

5.781287539s ago: executing program 0 (id=6114):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x9, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x2, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$packet(0x11, 0x2, 0x300)
r9 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r11, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8001, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x40000)
setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000000c0)=0x2080e0, 0x4)
sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

5.656465537s ago: executing program 5 (id=6115):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x4000)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000640), r1)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x4008011)
socket(0x1, 0x803, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x20, 0x4)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(streebog512-generic,ecb-twofish-avx)\x00'}, 0x58)
r8 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
statx(0xffffffffffffff9c, 0x0, 0x1000, 0x56159817211d7953, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x840)

5.312980022s ago: executing program 5 (id=6116):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x5}]}, &(0x7f0000000140)=0x10)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000000)={0x7f6e, 0x1}, 0x18, 0x0)
landlock_restrict_self(r3, 0xe)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}}, "341517c1b7df60c7"}}}}}, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x54, r7, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x54}}, 0x4)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)

5.071652654s ago: executing program 0 (id=6117):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xfff1, 0xf}, {}, {0x3, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0x4}}, @TCA_FW_MASK={0x8, 0x5, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES64=r4, @ANYRES32=0x0], 0x18}}, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
r6 = socket$xdp(0x2c, 0x3, 0x0)
mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x20)
sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x0)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, r5)

4.50323941s ago: executing program 6 (id=6118):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket(0x15, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000))
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x0, 0x20, 0x40, {0x8, 0xb, 0x2, 0x1, 0x1, 0x21, 0x30, 0xc6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x2a, 0xfff}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x100, 0x2, 0x6, 0x2, 0x8002, 0x7, 0x10, 0x2}, @processing_unit={0xd, 0x24, 0x9, 0x2, 0x2, [0x0, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0xd, 0xb, {0xa, 0x25, 0x25, 0x401, 0xe, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3df, 0x2, 0xff, 0x0, {0xa, 0x25, 0x25, 0x5, 0x7, 0x8}}}}}}}}]}}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00')
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0)
pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x10000c)

4.448178484s ago: executing program 8 (id=6119):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x14, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x5}]}, &(0x7f0000000140)=0x10)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000000)={0x7f6e, 0x1}, 0x18, 0x0)
landlock_restrict_self(r4, 0xe)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}}, "341517c1b7df60c7"}}}}}, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x54, r8, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x54}}, 0x4)

4.318760147s ago: executing program 5 (id=6120):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2)
r3 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYRESHEX=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x21, 0x1}, 0x50)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000180)={r5, 0x58, &(0x7f0000000240)}, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040))
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1c, r6, 0x701, 0x70bd2c, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20008000)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r9 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, 0x0, 0x0)
setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)

3.297670875s ago: executing program 5 (id=6121):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d30000000000200140014006e657464657673696d3000000000000034001680300001802c000c8014"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x40f, 0x8000003d)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c00058005"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x7800, 0x7, 0x4, 0x6, {{0x19, 0x4, 0x1, 0xc, 0x64, 0x65, 0x0, 0xb, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @generic={0x7, 0x4, '6\n'}, @rr={0x7, 0x3, 0x45}, @lsrr={0x83, 0xf, 0xef, [@multicast2, @broadcast, @multicast2]}, @lsrr={0x83, 0xf, 0x80, [@empty, @remote, @broadcast]}, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x24, 0x0, [{0x7, 0x4, "f14a"}, {0x6, 0x9, "8568e56bde1c2f"}, {0x0, 0x11, "439872b2d629ef7cef86e6a0f0baa0"}]}]}}}}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'netpci0\x00'})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000003080101000000000000000000000009040004800600024088630000050003007f04aafc76e34812942102406388000000"], 0x28}, 0x1, 0x0, 0x0, 0x24040011}, 0x4000058)
r7 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x20280, 0x0)
ioctl$BSG_SET_RESERVED_SIZE(r7, 0x2275, &(0x7f0000000040)=0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x124)
r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x3000, 0x3})
write$P9_RSTATu(r8, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x237)

3.025558841s ago: executing program 8 (id=6122):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x14, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x5}]}, &(0x7f0000000140)=0x10)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000000)={0x7f6e, 0x1}, 0x18, 0x0)
landlock_restrict_self(r4, 0xe)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}}, "341517c1b7df60c7"}}}}}, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x54, r8, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x54}}, 0x4)

2.599913366s ago: executing program 6 (id=6123):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x14, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x5}]}, &(0x7f0000000140)=0x10)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000000)={0x7f6e, 0x1}, 0x18, 0x0)
landlock_restrict_self(r4, 0xe)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}}, "341517c1b7df60c7"}}}}}, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x54, r8, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x54}}, 0x4)

2.314390264s ago: executing program 5 (id=6124):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d30000000000200140014006e657464657673696d3000000000000034001680300001802c000c8014"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x40f, 0x8000003d)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c00058005"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x7800, 0x7, 0x4, 0x6, {{0x19, 0x4, 0x1, 0xc, 0x64, 0x65, 0x0, 0xb, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @generic={0x7, 0x4, '6\n'}, @rr={0x7, 0x3, 0x45}, @lsrr={0x83, 0xf, 0xef, [@multicast2, @broadcast, @multicast2]}, @lsrr={0x83, 0xf, 0x80, [@empty, @remote, @broadcast]}, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x24, 0x0, [{0x7, 0x4, "f14a"}, {0x6, 0x9, "8568e56bde1c2f"}, {0x0, 0x11, "439872b2d629ef7cef86e6a0f0baa0"}]}]}}}}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'netpci0\x00'})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000003080101000000000000000000000009040004800600024088630000050003007f04aafc76e34812942102406388000000"], 0x28}, 0x1, 0x0, 0x0, 0x24040011}, 0x4000058)
r7 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x20280, 0x0)
ioctl$BSG_SET_RESERVED_SIZE(r7, 0x2275, &(0x7f0000000040)=0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x124)
r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x3000, 0x3})
write$P9_RSTATu(r8, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x237)

1.996898291s ago: executing program 8 (id=6125):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x14, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x5}]}, &(0x7f0000000140)=0x10)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000000)={0x7f6e, 0x1}, 0x18, 0x0)
landlock_restrict_self(r5, 0xe)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}}, "341517c1b7df60c7"}}}}}, 0x0)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x54, r9, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x54}}, 0x4)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)

1.722890753s ago: executing program 6 (id=6126):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$pppoe(0x18, 0x1, 0x0)
setresuid(0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
fchdir(r0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x900, 0x12)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f0000000800)={{}, 0xfd})
bind$netlink(r1, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffe, 0x1, 0x4, 0x100000000, 0x5, 0x0, 0xe}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x1, 0x1, 0x0, 0x6}, {{@in=@loopback, 0x4, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0x7, 0xfffffffe}}, 0xe4)
sendmmsg(r4, &(0x7f000000b740)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="d33caf5b23b8932ea60b878ad7c12ce40efa25180abaf9022b754ac420260e14c6919b518a0ceb008a0753eb5e", 0x2d}, {&(0x7f0000000100)="8ae8769579c73582a8e30a60d3dd1f353d32c2c7e09ecf26189c0f0b245e69869610086b01e2c547f242c5208e0e0558b1a24bae9de1baf5c6442ff3a68df3f44deea00d7eefe97912c10393e7fd83ede3e0", 0x52}, {&(0x7f0000000240)="0690e1933392ea776ec573e35a605ed6bb99a60052635e2d4eab0c97788212e8a49a10403df5bc2d5653fb9101d8ac136c3155e0740229944229200f339a8b5b6fdf29537156873e3a4c2d28d3ba66c7161738eb6e14838ff5f2236b7fb187a27c9b83814b0bc0dbb8", 0x69}, {&(0x7f00000003c0)="f7d4760248513dfa383db10e8d2ff725cc65c86f89f072f5dda0a3e0198e4a34aabecfc0c769f6ba5960f5faacc42171e526cabd3ac64304d46b907a92cb2aa7a64b6874dace2835583258dd4e41d1dfdb4beaad0ef56ff892ef04877aeab12e908ec39df0a1e607f964baa793e2897bcfb4572d0e67783b9d0a978e24db", 0x7e}, {&(0x7f0000000440)="3ca76621e12f13128b8df9a99e67eac5b18426dc424eee2b3a7fbba010fa3d2035d9ab02acfd6c58d25f4c", 0x2b}], 0x5, &(0x7f000000b800)=ANY=[@ANYBLOB="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"], 0x1108}}, {{&(0x7f00000019c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x1, 0x4, 0x1, {0xa, 0x4e20, 0x0, @empty, 0x3}}}, 0x80, &(0x7f0000001c00), 0x0, &(0x7f0000007980)=[{0x68, 0x29, 0x40, "40b76bfd3d44d28fc475556166c8b82f409c09dc080d0df0891816ce61a10d17de6c6f9944247312e3674a8c2d6fd03cfdbafc54c00dec8e7a56c1adaa0585f5a5f05996db5d2d2d01fbc25161393b6ad1ebf684319ff5554005eb"}, {0xfdc, 0x10a, 0x2, "7298e1d10a7f1f66ad10246836b4ca45d75e4211d67d9ab61557d716037f15d8a93e6d473cf2bef90d54e2a82af0606feadf3adabc3ecdec15235d6e01cfbcf003fd24737a923fc04a6a9cf7ba9537628294a0789641d773a9c457eecaca7d0291f13c9f61196ab5db2aea556f0f359561bc5f0a0409d7b856b2eb1e5408933cca021404f527cbe99f0e03298f2e0ee064fb91f657f55390cba8eab597a308b74d8a0dae0664402eabcbb111d100cca5c3c60af4b71da6dd1d21f133987e258f9927fa75574ff5f8ff4f994394392f313c7e23433c70e38bb06eedfcf63e459d4b3a3e88a2c4e1c6b832c6305edd1e0fb0deb28bc7597e96ef908293edcf5d07f9ba1df340d7fdecee4fd63a97a4d7c1a32e6549cafa6da98348c435bd5648943f6fd175f625ca062c0eea13d91675bc5aca336f44e437e91edb18f67fe2c34b2454fe5aaf1098da1ca2fbaba030b4b14892daeb28ab69bdb1dde71c6e8b2a89fc501f4bbead576dc4d573b42b8426ff5f825b8a115b5c8cce27c49d7d01504b753d5c7df68a36314c9658f9d56627afe30efd590c9fa730f55de3c7085c25417373abd73957eff1c1a92fafed701263af85f116ee8133b240a86ac692ee7930418f0f81095613e0485f4c00cddacff074fafecba38034bc25103676eff22140925825ac098627ce937f15cad7b0c8cf4823fbd733c2e6395014727d9b5b1b63e140a328e028c0464f1ed11e9dc9d86a15ea4335090e399efa062d43a931e8fc35b611cd945627dd79bf467f3211175581cdea2837a3cfcf8c21b3db6d70f1d3ea87cc2e319646712588ad04ec041463417994034673f11f017d2efa5394a1264a2964e46a471216ced5461dd039d101e83e62f6c858636dc59bec7733415dcf3dcdca987dd0556ae1b0cfef8dde703b2bb01719bcc4764b55aa055ac992562aad078278ec4c5ff29b91549d5d40bea8d514eb421910ca99b51898f97a6b72a355ec24533059370edd2afedad5c883daeca19a148ae10f6992347ea009601799f389fff4f36f69d4ca293ac6a5fdd2863b234e7ca25c16f3777d35ad6ee068155955d2023b74f191050125437d6701df29ec345a468705dd6841516a9dc2587292105f9b85fe0638ee944ac27cd863257a58fa4e3e77e2d84b67bc3dbe77ae628fc0568dec186a8701525112b98c7fa2b19d129388af2d3501a71c9ad44a0c0d1d5e6cd4da4360e06ed8b7c69f2a564454af732edfd8f1955f920b037418ce1070b9b4581b925f907bb0afc68da9feb79a713c0e7db4ba7346faa74fd15029948f2a0bc729549e92ee5155a68b7d449fbd87f3ab24550910cf82aec32888cabaf8f45fa9ef717e8e6e29cdc47ea06bd126b17736af8de60535a1c87bdb2514f917491e919ec1135b00eb2d5406300ffba8f1e20b939a9f5f31aef14222cb3e46f9e7fb88d3914dd79ca62d231d8044189b4b6cc1836f26323a70c7b831f798426f386d3eb159684e3db4411f446cb3cd6c91dc031bbabb2c49240b39b59e18f57d9f0503d465467558613294ed8747f6868b978950d252ba9c73d0ed6dd5ef60e255c5f3bb48f67c54d2c6b963adb421f8609476e313e25be79c1b61f787268bfb667d078507b56a55a6123d148b6e4fde5be1ebfbea62ebb12f8c1c367f7ce83f669f6da4c325dffcf3ff9454e6b46a0e242d513b1b73a0101c4ca83a2ca48ec8226c5ef3366cd7e516a07efcf989b2f95bea280153de442a5aa00005db6fa99ef049f40604f7c7b60590565a4c603faa2f62da56140d68050646f7e75d5bbd032a69ce58f28c3af0864b4f82e073145be42914999e2b03f035a0a78f90249a04bf9e9d1aba7d045d394a9c81b5d185e3094df81fc1c3fa82bc554a7f5c05a6566b85cf72858e865583eab03787245418cc1ca760ea58bdf38d0ea074569da14c598ed3fe416457bbc2b64e556fb4194d16af0c7ac1255fbda63c637cbb1f473157fb1975ea4cd0f0315e983a5bada1e3f5b4bb7f67df01d212e3d0b5c2eefd0f34e8ce046572633d034145a8b5212e8552f9271dd1f92786188dd4de60f4d1c97bf908959cfce278c7e2ebd39171f93e3c514b36e4cccc6af0191497ca0afa6badb306bb60e35af4d9212eaa03930a1adbffc6a9c0783ec25d5562a783e0f06ab5f78b2ff4a7fbba5bacd1752bfc1944f6d68d2362035cbc9e4a74d74c9b6c09bb8d1885172c992cbdf91e47fa614b4b7bf64d2a00c0b3a525b526c295aee9ce019bebba321dc3e6b0105c7a8f57ad973877196a12e5bf3447c50c7b75ce1d3b1354ef39adc2f56420b12c21b96e38ecb91a114224749fc7837be845edb12351bb546166e20f6313fec581cf2f888cd80d5b17d3301695f4fb6a133752502b41e9f88921c6dd386304a6d158fcb97489a7be38a0561f0ed70ef1af1b981603834b45b56f144e4dfa4cd1f1819382ec325df1dc1c77f7e37e9429da73fa1c6d60bb44d753ec4f21737d2e2d9f051ae8554d99aef01d4b958980f657ad26ecd270b949a48acf9f7431c2f2aa495bedef14970733a7a295b7180604e7fe1abac53bb154c9c4903ae8725c1d466e60ff95c7f4e38f6c635c56f4cdbefffab7a4003c9470fc5222c876b9367c0f7222d4581930dcf100c79b22c92ca7f7b9d64c5bd80106d00bf74cd546809648edef8a29026428ed8d64b0b32a04c840bc465372f88b5634ccbf29d1d81220fc9d1773942d9eb3742329dd911f694844ded5d6dff75dddcd9d61b76c19deaba19b5ba769f75d9158747984d1c672a51b28f59e06ce177abc7a05aedbd18e5c461ecfb1631a3358c07695730bf337b04dada1dab4442d7767c66947e714dd2d6335209b00621477c33f33ee2134564ee3f08e032a1d3e1b9d1463818999cbc69f0dce5572246ae1667583f6268dbf96d10a3d2cb76a0da09ccfa3850e7ffbf2d7787013f8018dfd8bad905da4d98c71b511785b6a437afa9fef4fbe503015fb69028dc1bedc3b5b19bdcb608bd40f99239253123e0e11bc0be6a7c3557e76fe1c23b6ef9051af8f2a320f54097490f46e95895b93e5907cae05bafedd7124220f3b1e919eeeeed880358c73cff78d38e3914c014196c88a6da640edc34130c5c3d336836e176f7647df8221ebb3dfeb27176a79e27d4c4dca06376fe8f2779ec6d4962d8abfe829bce1eea4765f4c76a234d0f2031f6f94bea385f98709b9b9807d362db3c29f454a97dcfe3ce37ff164b6864cdce95b9e988a1d6b5125da28a6e0a9038dd1db77bcf4347258978b7be13723d2d8be6a1f517bc3d1f0735eb118658d295e145ce9bd14c68704a2a9d565d194dd73b445645077fcb2d02207b911bb2c61b0b8dc29ebbd3be548d1266da98fee5f327825dfe5e85d3f924dc6b9e27e804227d6154464ae7b5fdc5c825dfd36dd7b2b41a67853bb6cf7c76692d763cf941e2387c91fe8126111f2aa30231cc7e01fcd335eeb2ba3fe032d05739caa0566a51a7273b98a354263b7f0e9277f9920915c6f1e3f823f2c58676b4a27d917a2947c46a53adb2fb7ea99ecbab85b0d28092515151df57c0ac07c89804814baa86520a2d2e3b7e8811719f052fd9755531525109f6ce3ac4f49181b8e218dc05def443a7ab412120eee32c3cbf6509c7eafd1a44b98f2c2a31043e7f4d19ab1e887ec0b162a95e6eecfc52823ac5eb940416d8c8cc3af265cae9ce2cf0c0b866d943f882b09a383651de62770ebaa9fbf567eefd47a3d4e3ec57e1498c67a77e561849c5a8c5569df83cc51e498c41fab37ad3477b213073489dfd74e5ad66d4ad57db83f3126e41811d153d848e9db2aff619e82680f38d0b24108a69925a9889ffb098e78a8f60389d73c9f962efe18a5b42b2f7e9f32f998e12eee064a3688b0e30bfe4971919336cdf860b9bd627335790cc3543f952d955cbd0ecaf4799fc6f814ee965382f0d9b709c263d961bbe9fbe82c408af7d6445949b615d1ced9c22d9487e74c65cd3afcf706b639f839406d908745ba4981f6e0aa6292cae7c9096fbace0879e1661a708f5e97066aa4eca65ca0d5ce1be076d87ee1a32a94e6f3030cd2d65b8c2598911bd334c291d24a7e9b26c494c0efb643c14f17cc54a24c275a67906e72c1975d098f7afd9e4abd1feebbab07193ad0f72b02fcfd51490a4c0a1e35c7da8f382c88adb32c6a4bbe89c31d8fa82297e833d90de903153ddbb73ec76d254b1e188468754f291409ba1720e87461063695d69ef68215af40407cca70932d1a92d5f4648beb3c27b2b4f289845204de895a9d5fcfc388518196bd422bac66a1a7203f8ce12b91d4986df956ff1a3951851ddf2ba56d693f06d65c6ea1b776cc5b8e34427136aff15f36314bd40a2679be35a6471fe0cddb8cb58713ca627472341be29b62bd9ff2f0ef1e84d7c38483a1e3a3f0d77252aecfc48e794058be4f32f9662b7c79f97daa0c04a279b582aad53db4203d61f420811684f84f39d6a2af217a0fb7a0b34b0473f173f259521182047f51db2a2be62537c836195092f6e800f81ad861b53d93b796d8cece5c23892b1afb95b83a9aff8b46b5cdc0130e407d10a4c4b788c26bbcca8bb805bc64109d2c1c2eefc70e768d5771ac3ede408a03e7ba36baa2c1e6ed74f37c839b61a471ad43bf615987fd2f6c31baaa371def5bae75a7b89fb351e23440ab3ae53653e828e52507d51a73947688cfa8113dda5d5a7ec2d46b82e4ba028ced41e96f653cbc2348bc6c38a242423095469cb9b08b2d0701dc42401006c24b670af8a20790d9f16557363eb9e8040d1a2a46745d59ed6554b1d30d98cbacbabaca5095948c421d414e47d23fd8a08c8ac61b50e5d235bad776592e61efa70c3d0a8258998fcbdca182877d54732dbf7b6c3ab92bf293dde9e294d0d2cc93690be86b726cc17edabd02f69c3096c469af295b82bb1a47ee2f584a0ce47d266d79618103c5843f60bc910c2b0f9316311c26777dfc6da7bc972c8d11cb957c121db4571910812feab7340cebcb33f89329435e2a9ad0fa5af7ebcca54587f38ac163cdce052334bb5eabcddd8e0821fbaed085034ed8519d344f1bded58bb45ffd30ae47d3b1fb5101d783abc26084721f1b5c7b455aa0480f85e41eec95cbc683992426144deafccb892ec3d7ce49edf8cdac9fc2471cba1df62ccfabb23f0327547ccb923c8493d3bdf1d9e4f53a4e713097ab23c9ceb353f040a60871247597b040d9868c1a549aa551e6e3e802716fb27db7737c2b2e9a4074786d73f7058300f0dc9dcfe36b4f3b9164946145d3c1ca379e6bd3ecfb53b680a1a835393e1e32d430bf6f3b854f2478cb23697575a6500431243f93f6006fdc109e0007098b6f38f9827bbf82e6c213b34894cb9563afaa3f19099b074c6c719fa2620cc6618567e756b4cc8f123186cb308c3cc04bd5710d4b16c7f973e76d39995994d9016a3596a07bf4808cfc5e926c2cfd619ddb70384bba6c320ca3986a99375401f6bb7d00edf39d60aa690de14d58c78671bab71481c2c292b56a3c7fa60b0ef428dd040088ea2d42c1f211a063213b0eac39915728edbb47673e3fd594e68128905ba0fde7e0ec1770bf28e2e94ba2b9bc336af064b3931b30dde562eda6336a7c675484474d6e9086d17f2e6071811230c9754d358a35371c22492930411b009e115fcb2aaef02e499a89c07949c1"}, {0x18, 0x10d, 0x5, "4209a23667cbbbf0bc"}, {0xc, 0x103, 0x4}, {0xc8, 0x111, 0x101, "d1fd3dfd88fd20580fa203155ea5071afd9ab4b30e97b85edaa180582dd43d2fc9d05deb724f13843512930b7f9035200c6e49ccf7efb15899ea2ecc8a3e71bce3facb4092dba01920695b253d95b00e5a156d6031a622033fac010f2f41a2d3b08397caf64b6bd899156732f5be11b857079082f7a23ad721320b14423830a35da96cdc312588132b0a21c7baba2c21f168ca8ef825bea43999889fd83c2fcda5bbfe92a23009d7e1fe5ecdbcc07afecd5d55a43595e75365"}, {0xa4, 0x10a, 0x0, "544dcc354426834823e7117674ebeb3d021eedf28166e2a1e1e331ed75befa7cefe4035537259e9d46909db2c6f55f937cc9d1b2ed5adc0657eaad635e8a293a5b2d13e3c81bd984b129d40c0f8f3f31e3da24c9bc1fd5ba0d7f40ff91b830b171eea007e6135c7399ed340a5ef581ddd2b9231ae08a0cfea4edb4beb32010f69f05a8ddb33f017013ae7017eab095a4cd11b4801bda31"}, {0x34, 0x112, 0x80, "850b1dab1f48fb9f95a0a69fbcacd785b6386780dc3c12448dc8c1cd1aa35dcc658714a98af2"}, {0x30, 0x107, 0x4, "ecd254c367851c7e654b62732eb4e5c6932539f41d365739a05f850fec976ccc3e0646"}, {0xc, 0xff, 0xffffff63}], 0x1244}}, {{&(0x7f0000005480)=@l2tp6={0xa, 0x0, 0x9, @loopback, 0x5, 0x1}, 0x80, 0x0, 0x0, &(0x7f000000cbc0)=[{0xd0, 0x10d, 0x375, "e778f78d97478951ac76ad1c92ae3e1d5adf08b06c602e3aa1e824ace06857971026b0d35924b0f0b3deeedb4565fc64cf25f293b4fd1dfcdb601d46c4a2c8fc271042aeb68b742fbcc17423bd95c7ea8489f925140dd35470e3a9a580e898e4e1f4c524eb292af775f936784861d048abea18cc29ec106139f0fbbe8c0160e9a43ad1612795576fb47c3b9e7929ffc5c6c9abf1ccb9a26a4bccffc9253a2693ca6998838dfe4fde15781cd96367a373332c10da25f4d6d76eb1f6905ac1ee53fcd17c36"}, {0x100c, 0xff, 0x6, "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"}, {0x38, 0x1, 0x7, "d7d91eec46c9e4c476367672724bcef7d6aa0ecc77aab88788e4c30627e656aec9fcd8b86b308ce69156"}, {0xc, 0x0, 0x200}, {0x8c, 0x84, 0x1, "63daf58ed0c95ba75ff30fdeb65b4d408514d84d2629ab2640c3474afea875750dbeb6a59ccbec4f11824a2620f8ced0395454bac98ddee687684602494b79261c8fe7f6bf580aeb35fbbf29ccd8d753765035e0873a5e3b3ad3de8256fc31ba17d22a21cc41ff870cef70e3fb3fc6782824d34f013fb497e58f2c0d17178557"}, {0xa4, 0x6, 0x791b327b, "f6d7fa3313d6cf103dbd76bfeaa5a70b120ee1528244bed591bf3526329f017bdf616ef6dc6dd839a2f854734a78170514fb96ef2ceb9bace9f3608bb19cdf9d741798401f4742ef2fd7a29da48edd833663ad14ab54d4abeca1a673c4d7575d885f874dbb33c3e37988dc9394b9791898ee5b5947e41b34c815fa24a97ee46d189063d73b25187e1ff3073f55fa2165eaa6ed5189047688"}, {0x74, 0x12e, 0x4, "dcb7a918d9fabf7ed4d7135e3f7389409567daaaa2d5bdb0066a31642966d62f58add3604f55ae518282afce1473d8689360e3398a4ba51aea5a501379e28e58ba790d00f24a071d74cda808054d0700000000000000000000b5d08895492aef303f880ef000"}, {0x44, 0x101, 0x9, "6e6a9e23169b016d20297cc596175a195f18ccae76ba5fe08549bfc0ad0d86331b8bbde54be619f4b753280f1ba6091683873e15b3c9"}], 0x1308}}, {{0x0, 0x0, &(0x7f0000009e40)=[{&(0x7f0000009d80)="1126579f12eb63c5126a2b8b56b757c713dbe46eba4897ef955c451e357ec176473d98abb7949f98d170dad1280271d66aa7db799d59ab042546c638dd9b6e39a0b3ef74a9a680ddc2ab90369781eccf68c45e0affc4", 0x56}], 0x1, &(0x7f0000009e80)}}], 0x4, 0x1c)
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, 0x0)

1.082546149s ago: executing program 0 (id=6127):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x3f92a000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x54, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x2, 0x7, 0x0, 0x3b604f5b}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001140), 0x101000)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000001180)={0x4, 0x4dfe, 0xfffffffc})
sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)="a6", 0x1}], 0x1}}], 0x1, 0x4010)

895.155276ms ago: executing program 5 (id=6128):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xfff1, 0xf}, {}, {0x3, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0x4}}, @TCA_FW_MASK={0x8, 0x5, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES64=r4, @ANYRES32=0x0], 0x18}}, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
r6 = socket$xdp(0x2c, 0x3, 0x0)
mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x20)
sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x0)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, r5)

600.698804ms ago: executing program 0 (id=6129):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'xfrm0\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, &(0x7f0000000340)={0x0, 0x3}, 0x10}, 0x94)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @private1, 0x4}, 0x1c)
ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
ioctl$sock_netdev_private(r2, 0x8949, &(0x7f0000000000))
r3 = openat$vsock(0xffffff9c, 0x0, 0x80, 0x0)
read$FUSE(r3, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000240)=ANY=[@ANYBLOB="10df2500"/16, @ANYRESOCT=r1], 0x10}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0900000004000000080000000000030000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000140)={<r4=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {0x0, 0x0, 0x0, 0x1}]})
r5 = openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0)
ioctl$BLKTRACESETUP(r4, 0xc0401273, &(0x7f00000001c0)={'\x00', 0xfffb, 0x2, 0x80000001, 0x80, 0xc, <r6=>0xffffffffffffffff})
fcntl$setownex(r5, 0xf, &(0x7f0000000200)={0x2, r6})
r7 = socket(0x21, 0x2, 0xa)
r8 = io_uring_setup(0x177e, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x0, 0x2b4})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
close_range(r7, r8, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff4)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
close(0xffffffffffffffff)
write$cgroup_type(r9, &(0x7f0000000280), 0x9)

578.854829ms ago: executing program 6 (id=6130):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x42, 0x100)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000000), 0xd)

434.572193ms ago: executing program 8 (id=6131):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5a)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB])
chdir(&(0x7f0000000000)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)

233.382246ms ago: executing program 6 (id=6132):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1800}], 0x0, 0x0, 0x0})

0s ago: executing program 8 (id=6133):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b07, &(0x7f0000000240)={'wlan1\x00', @random="8dffffffebff"})

0s ago: executing program 8 (id=6135):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x5}]}, &(0x7f0000000140)=0x10)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000000)={0x7f6e, 0x1}, 0x18, 0x0)
landlock_restrict_self(r3, 0xe)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}}, "341517c1b7df60c7"}}}}}, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x54, r7, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x54}}, 0x4)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)

kernel console output (not intermixed with test programs):

tomoyo_socket_sendmsg_permission+0x14e/0x3c0
[ 1540.018160][T28089]  ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10
[ 1540.018177][T28089]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 1540.018192][T28089]  ? __might_fault+0xc5/0x140
[ 1540.018209][T28089]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1540.018228][T28089]  ____sys_sendmsg+0x9e1/0xb70
[ 1540.018245][T28089]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 1540.018259][T28089]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1540.018278][T28089]  ? rcu_is_watching+0x12/0xc0
[ 1540.018291][T28089]  ? ___sys_sendmsg+0x19d/0x1e0
[ 1540.018301][T28089]  ? kfree+0x1dd/0x6c0
[ 1540.018315][T28089]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[ 1540.018330][T28089]  ___sys_sendmsg+0x190/0x1e0
[ 1540.018342][T28089]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1540.018352][T28089]  ? do_user_addr_fault+0x7de/0x12f0
[ 1540.018370][T28089]  ? lockdep_hardirqs_on+0x78/0x100
[ 1540.018382][T28089]  ? irqentry_exit+0x24d/0x7e0
[ 1540.018397][T28089]  ? __pfx___might_resched+0x10/0x10
[ 1540.018411][T28089]  ? __sys_sendmmsg+0x313/0x430
[ 1540.018427][T28089]  __sys_sendmmsg+0x2ff/0x430
[ 1540.018442][T28089]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1540.018461][T28089]  ? __fget_files+0x215/0x3d0
[ 1540.018480][T28089]  ? fput+0x79/0x100
[ 1540.018510][T28089]  ? ksys_write+0x1ac/0x250
[ 1540.018526][T28089]  __ia32_compat_sys_sendmmsg+0x9d/0x100
[ 1540.018565][T28089]  ? lockdep_hardirqs_on+0x78/0x100
[ 1540.018575][T28089]  __do_fast_syscall_32+0xe7/0x950
[ 1540.018587][T28089]  ? lockdep_hardirqs_on+0x78/0x100
[ 1540.018598][T28089]  do_fast_syscall_32+0x32/0x70
[ 1540.018610][T28089]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1540.018625][T28089] RIP: 0023:0xf6feef7c
[ 1540.018644][T28089] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1540.018662][T28089] RSP: 002b:00000000f53bc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159
[ 1540.018674][T28089] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800bd000
[ 1540.018681][T28089] RDX: 0000000000000318 RSI: 0000000000000000 RDI: 0000000000000000
[ 1540.018688][T28089] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1540.018695][T28089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1540.018702][T28089] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1540.018715][T28089]  </TASK>
[ 1540.216105][T27837] Bluetooth: hci3: ACL packet for unknown connection handle 200
[ 1540.216771][T28092] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5496'.
[ 1540.221325][T28092] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5496'.
[ 1540.228818][T28092] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[ 1540.367379][T28102] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5499'.
[ 1540.430963][T28103] QAT: Device 253 not found
[ 1540.433796][T28104] IPVS: stopping master sync thread 27200 ...
[ 1541.414566][T28120] kAFS: unable to lookup cell 'Þ({^ú@'
[ 1541.418433][T28120] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5504'.
[ 1541.422198][T28120] netlink: 'syz.6.5504': attribute type 1 has an invalid length.
[ 1541.435606][T28120] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1541.452421][T28120] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5504'.
[ 1541.590653][T28120] syz.6.5504 (28120): drop_caches: 2
[ 1542.313528][T28131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1542.403114][T28144] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1542.405935][T28144] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1544.207180][T19500] usb 10-1: new high-speed USB device number 68 using dummy_hcd
[ 1544.350405][T28184] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5526'.
[ 1544.358421][T28186] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5527'.
[ 1544.368831][T19500] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1544.374985][T19500] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1544.381940][T19500] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1544.387340][T19500] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1544.393081][T19500] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1544.398364][T19500] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1544.408598][T19500] usb 10-1: config 0 descriptor??
[ 1544.414089][T28176] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1544.683268][T28196] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5528'.
[ 1545.051142][T19500] usbhid 10-1:0.0: can't add hid device: -71
[ 1545.053096][T19500] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1545.060670][T19500] usb 10-1: USB disconnect, device number 68
[ 1545.126767][    C0] Unknown status report in ack skb
[ 1545.133004][T28206] syzkaller0: entered promiscuous mode
[ 1545.138770][T28206] syzkaller0: entered allmulticast mode
[ 1545.376481][T20965] kernel write not supported for file /dsp1 (pid: 20965 comm: kworker/0:3)
[ 1545.893778][T14792] usb 10-1: new high-speed USB device number 69 using dummy_hcd
[ 1546.043929][T14792] usb 10-1: Using ep0 maxpacket: 32
[ 1546.046884][T14792] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1546.052815][T14792] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1546.057750][T14792] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1546.060475][T14792] usb 10-1: Product: syz
[ 1546.062263][T14792] usb 10-1: Manufacturer: syz
[ 1546.066423][T14792] usb 10-1: SerialNumber: syz
[ 1546.072758][T14792] usb 10-1: config 0 descriptor??
[ 1546.077071][T28216] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1546.081921][T14792] hub 10-1:0.0: bad descriptor, ignoring hub
[ 1546.084181][T14792] hub 10-1:0.0: probe with driver hub failed with error -5
[ 1546.938041][T28219] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5535'.
[ 1546.941927][T28219] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5535'.
[ 1546.955125][T28219] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[ 1546.989935][T28216] usb 10-1: reset high-speed USB device number 69 using dummy_hcd
[ 1546.998856][T28216] usb 10-1: device reset changed ep0 maxpacket size!
[ 1547.009386][T19501] usb 10-1: USB disconnect, device number 69
[ 1547.142358][T19501] usb 10-1: new high-speed USB device number 70 using dummy_hcd
[ 1547.292207][T19501] usb 10-1: Using ep0 maxpacket: 16
[ 1548.297469][T28221] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5536'.
[ 1548.312996][T28221] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[ 1548.443667][T28230] input: syz0 as /devices/virtual/input/input48
[ 1549.210556][T28225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1551.285002][T19501] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1551.292152][T19501] usb 10-1: unable to read config index 0 descriptor/start: -71
[ 1551.294884][T19501] usb 10-1: can't read configurations, error -71
[ 1551.391221][T28239] tmpfs: Bad value for 'usrquota_block_hardlimit'
[ 1552.380660][T28247] netlink: 'syz.6.5544': attribute type 1 has an invalid length.
[ 1552.402300][T28247] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1552.413683][T28247] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5544'.
[ 1552.503749][T28247] vlan2: entered allmulticast mode
[ 1552.568439][T28245] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5540'.
[ 1552.619300][T28256] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5546'.
[ 1552.874421][T28266] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5550'.
[ 1553.063599][T28268] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5551'.
[ 1553.250084][ T5828] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 1553.467470][T28279] random: crng reseeded on system resumption
[ 1553.481966][T28286] QAT: Device 253 not found
[ 1553.527287][T28273] IPVS: Error connecting to the multicast addr
[ 1553.811120][T28264] lo speed is unknown, defaulting to 1000
[ 1555.897962][T28322] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5563'.
[ 1555.916055][T28320] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5564'.
[ 1555.920295][T28320] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5564'.
[ 1555.927404][T28320] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[ 1556.027083][    C2] hpet: Lost 1 RTC interrupts
[ 1556.159729][   T54] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 1556.234285][T28330] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[ 1556.256558][T28327] IPVS: stopping master sync thread 28330 ...
[ 1556.813760][T28344] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1557.209365][T25189] usb 11-1: new high-speed USB device number 35 using dummy_hcd
[ 1557.372826][T25189] usb 11-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1557.375950][T25189] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1557.378583][T25189] usb 11-1: Product: syz
[ 1557.382015][T25189] usb 11-1: Manufacturer: syz
[ 1557.383647][T25189] usb 11-1: SerialNumber: syz
[ 1557.617639][T28351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1557.645649][T28351] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1557.672800][T25189] lan78xx 11-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[ 1557.678613][T25189] lan78xx 11-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[ 1557.682387][T25189] lan78xx 11-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1557.693176][T25189] lan78xx 11-1:1.0: probe with driver lan78xx failed with error -71
[ 1557.710125][T25189] usb 11-1: USB disconnect, device number 35
[ 1558.129902][T28363] syzkaller0: entered promiscuous mode
[ 1558.137433][T28363] syzkaller0: entered allmulticast mode
[ 1558.390567][T28373] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5573'.
[ 1566.460880][T28395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5574'.
[ 1566.464032][T28395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5574'.
[ 1566.471567][T28395] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[ 1566.561370][T28407] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5576'.
[ 1566.565615][   T40] audit: type=1326 audit(1780269834.904:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28398 comm="syz.6.5576" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f7c code=0x7ffc0000
[ 1566.575452][   T40] audit: type=1326 audit(1780269834.914:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28398 comm="syz.6.5576" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f7c code=0x7ffc0000
[ 1566.584033][   T40] audit: type=1326 audit(1780269834.914:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28398 comm="syz.6.5576" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f56f7c code=0x7ffc0000
[ 1566.592732][   T40] audit: type=1326 audit(1780269834.914:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28398 comm="syz.6.5576" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f7c code=0x7ffc0000
[ 1566.605855][   T40] audit: type=1326 audit(1780269834.924:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28398 comm="syz.6.5576" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f7c code=0x7ffc0000
[ 1566.614504][   T40] audit: type=1326 audit(1780269834.924:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28398 comm="syz.6.5576" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f56f7c code=0x7ffc0000
[ 1566.622464][   T40] audit: type=1326 audit(1780269834.944:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28398 comm="syz.6.5576" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f7c code=0x7ffc0000
[ 1566.630651][   T40] audit: type=1326 audit(1780269834.954:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28398 comm="syz.6.5576" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f7c code=0x7ffc0000
[ 1566.646194][   T40] audit: type=1326 audit(1780269834.984:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28398 comm="syz.6.5576" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f56f7c code=0x7ffc0000
[ 1566.683128][   T40] audit: type=1326 audit(1780269834.984:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28398 comm="syz.6.5576" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f7c code=0x7ffc0000
[ 1567.603149][ T5887] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 1567.603226][T28417] syzkaller0: entered promiscuous mode
[ 1567.609022][T28417] syzkaller0: entered allmulticast mode
[ 1567.616515][T28421] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[ 1567.624890][T28416] IPVS: stopping master sync thread 28421 ...
[ 1567.784195][T28426] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1568.188779][T28444] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5582'.
[ 1569.029607][T28463] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5587'.
[ 1577.499593][T28484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1577.506777][T28490] netlink: 'syz.0.5589': attribute type 1 has an invalid length.
[ 1577.520778][T28490] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1577.524635][T28412] Bluetooth: hci3: ACL packet for unknown connection handle 200
[ 1577.529543][T28488] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5591'.
[ 1577.532766][T28488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5591'.
[ 1577.540622][T28488] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[ 1577.543691][T28490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5589'.
[ 1577.750619][T28490] vlan2: entered allmulticast mode
[ 1577.752405][T28490] bond0: entered allmulticast mode
[ 1577.754069][T28490] bond_slave_0: entered allmulticast mode
[ 1577.756030][T28490] bond_slave_1: entered allmulticast mode
[ 1577.765525][T28504] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5594'.
[ 1577.772116][T28504] bond0: (slave bond_slave_0): Releasing backup interface
[ 1577.775040][T28504] bond_slave_0: left allmulticast mode
[ 1577.891470][T28504] bond_slave_0: entered promiscuous mode
[ 1577.894021][T28504] bond_slave_0: entered allmulticast mode
[ 1578.657798][T28520] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[ 1578.690716][T28520] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1579.288019][T28541] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5600'.
[ 1579.304935][T28541] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5600'.
[ 1579.310058][T28541] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5600'.
[ 1579.315788][T28542] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5600'.
[ 1579.582170][T28546] netlink: 'syz.6.5601': attribute type 3 has an invalid length.
[ 1579.666305][T28412] Bluetooth: hci3: ACL packet for unknown connection handle 200
[ 1579.675878][T28548] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5602'.
[ 1579.682376][T28548] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5602'.
[ 1579.700319][T28548] 8021q: adding VLAN 0 to HW filter on device ipvlan4
[ 1580.710111][ T5887] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 1580.717449][T28556] autofs: Bad value for 'fd'
[ 1580.873599][T28558] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[ 1580.883308][T28558] Bluetooth: hci0: unsupported parameter 255
[ 1580.885663][T28558] Bluetooth: hci0: unsupported parameter 255
[ 1580.909085][T25214] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[ 1581.100154][T25214] usb 5-1: Using ep0 maxpacket: 16
[ 1581.106543][T25214] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[ 1581.113830][T25214] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[ 1581.118073][T25214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1581.125331][T25214] usb 5-1: Product: syz
[ 1581.126669][T25214] usb 5-1: Manufacturer: syz
[ 1581.130047][T25214] usb 5-1: SerialNumber: syz
[ 1581.133872][T25214] usb 5-1: config 0 descriptor??
[ 1581.140571][T25214] hub 5-1:0.0: bad descriptor, ignoring hub
[ 1581.142499][T25214] hub 5-1:0.0: probe with driver hub failed with error -5
[ 1581.146553][T25214] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1581.146725][T28565] 9p: Bad value for 'rfdno'
[ 1581.692780][   T54] usb 5-1: USB disconnect, device number 73
[ 1581.821976][T28577] FAULT_INJECTION: forcing a failure.
[ 1581.821976][T28577] name failslab, interval 1, probability 0, space 0, times 0
[ 1581.827147][T28577] CPU: 0 UID: 0 PID: 28577 Comm: syz.6.5611 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1581.827175][T28577] Tainted: [L]=SOFTLOCKUP
[ 1581.827183][T28577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1581.827193][T28577] Call Trace:
[ 1581.827201][T28577]  <TASK>
[ 1581.827209][T28577]  dump_stack_lvl+0x100/0x190
[ 1581.827238][T28577]  should_fail_ex.cold+0x5/0xa
[ 1581.827258][T28577]  should_failslab+0xc2/0x120
[ 1581.827276][T28577]  __kvmalloc_node_noprof+0xfa/0xa00
[ 1581.827296][T28577]  ? bucket_table_alloc.isra.0+0x88/0x460
[ 1581.827362][T28577]  bucket_table_alloc.isra.0+0x88/0x460
[ 1581.827391][T28577]  rhashtable_init_noprof+0x43b/0x890
[ 1581.827424][T28577]  rhltable_init_noprof+0x20/0x60
[ 1581.827452][T28577]  nf_tables_newtable+0xf1b/0x19f0
[ 1581.827508][T28577]  ? __pfx_nf_tables_newtable+0x10/0x10
[ 1581.827536][T28577]  ? __nla_parse+0x40/0x60
[ 1581.827592][T28577]  nfnetlink_rcv_batch+0x1410/0x2880
[ 1581.827631][T28577]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[ 1581.827656][T28577]  ? __dev_queue_xmit+0x9ef/0x4950
[ 1581.827678][T28577]  ? __local_bh_enable_ip+0x9e/0x120
[ 1581.827702][T28577]  ? lockdep_hardirqs_on+0x78/0x100
[ 1581.827718][T28577]  ? __dev_queue_xmit+0x9ef/0x4950
[ 1581.827767][T28577]  ? __nla_parse+0x40/0x60
[ 1581.827798][T28577]  nfnetlink_rcv+0x3bd/0x440
[ 1581.827821][T28577]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1581.827855][T28577]  netlink_unicast+0x585/0x850
[ 1581.827888][T28577]  ? __pfx_netlink_unicast+0x10/0x10
[ 1581.827924][T28577]  netlink_sendmsg+0x8b0/0xda0
[ 1581.827985][T28577]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1581.828011][T28577]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1581.828045][T28577]  ____sys_sendmsg+0x9e1/0xb70
[ 1581.828074][T28577]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1581.828105][T28577]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1581.828137][T28577]  ? finish_task_switch.isra.0+0x2c6/0x1010
[ 1581.828180][T28577]  ? finish_task_switch.isra.0+0x2cb/0x1010
[ 1581.828205][T28577]  ? lockdep_hardirqs_on+0x78/0x100
[ 1581.828223][T28577]  ? finish_task_switch.isra.0+0x2cb/0x1010
[ 1581.828250][T28577]  ___sys_sendmsg+0x190/0x1e0
[ 1581.828268][T28577]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1581.828290][T28577]  ? find_held_lock+0x2b/0x80
[ 1581.828330][T28577]  __sys_sendmsg+0x170/0x220
[ 1581.828355][T28577]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1581.828387][T28577]  ? rcu_is_watching+0x12/0xc0
[ 1581.828413][T28577]  __do_fast_syscall_32+0xe7/0x950
[ 1581.828431][T28577]  ? lockdep_hardirqs_on+0x78/0x100
[ 1581.828450][T28577]  do_fast_syscall_32+0x32/0x70
[ 1581.828471][T28577]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1581.828493][T28577] RIP: 0023:0xf7f56f7c
[ 1581.828509][T28577] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1581.828526][T28577] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1581.828542][T28577] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[ 1581.828552][T28577] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1581.828563][T28577] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1581.828573][T28577] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1581.828584][T28577] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1581.828606][T28577]  </TASK>
[ 1581.983272][T28565] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1581.992023][T28565] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1581.997039][T28565] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1581.999264][T28565] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1582.002168][T28565] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1582.004028][T28565] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1582.007510][T28565] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1582.063978][ T5814] IPVS: starting estimator thread 0...
[ 1582.169003][T28584] IPVS: using max 44 ests per chain, 105600 per kthread
[ 1582.277734][T28591] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20004
[ 1582.281070][T28591] IPVS: wrr: FWM 3 0x00000003 - no destination available
[ 1582.350780][T28594] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[ 1582.389222][T28573] Bluetooth: hci4: ACL packet for unknown connection handle 200
[ 1582.713855][T28598] syzkaller0: entered promiscuous mode
[ 1582.716403][T28598] syzkaller0: entered allmulticast mode
[ 1583.261688][T28602] Bluetooth: hci3: command 0x0406 tx timeout
[ 1584.059277][T28602] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1584.062541][T28601] Bluetooth: hci4: command 0x0406 tx timeout
[ 1584.934356][T28620] __nla_validate_parse: 5 callbacks suppressed
[ 1584.934372][T28620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5623'.
[ 1585.254578][T28624] veth3: entered allmulticast mode
[ 1585.338964][T28601] Bluetooth: hci3: command 0x0406 tx timeout
[ 1585.374915][T28624] bond2: (slave veth3): Enslaving as an active interface with an up link
[ 1585.379442][T28642] QAT: Device 253 not found
[ 1585.436744][T28620] bond2 (unregistering): (slave veth3): Releasing backup interface
[ 1585.445597][T28620] bond2 (unregistering): Released all slaves
[ 1585.505163][T28636] syzkaller0: entered promiscuous mode
[ 1585.507673][T28636] syzkaller0: entered allmulticast mode
[ 1585.643644][T28644] loop7: detected capacity change from 0 to 16384
[ 1585.797473][T28646] netlink: 13 bytes leftover after parsing attributes in process `syz.0.5627'.
[ 1586.040840][T28645] loop7: detected capacity change from 16384 to 0
[ 1586.138972][T28601] Bluetooth: hci4: command 0x0406 tx timeout
[ 1586.139075][T28615] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1586.180235][T20965] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[ 1586.512768][T28648] /dev/nullb0: Can't open blockdev
[ 1586.708368][T28651] netlink: 'syz.6.5629': attribute type 1 has an invalid length.
[ 1586.714626][T28651] netlink: 368 bytes leftover after parsing attributes in process `syz.6.5629'.
[ 1586.765445][T20965] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1586.786859][T20965] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 1586.789878][T20965] usb 5-1: can't read configurations, error -71
[ 1586.903603][    C2] hpet_rtc_timer_reinit: 28 callbacks suppressed
[ 1586.903625][    C2] hpet: Lost 1 RTC interrupts
[ 1586.915630][T28653] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5630'.
[ 1587.544076][    C2] hpet: Lost 1 RTC interrupts
[ 1587.621316][    C2] hpet: Lost 1 RTC interrupts
[ 1587.699238][    C2] hpet: Lost 1 RTC interrupts
[ 1587.746242][    C2] hpet: Lost 1 RTC interrupts
[ 1588.228966][T28615] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1589.996222][T28664] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[ 1590.078556][T28670] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5632'.
[ 1590.257733][T28676] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1590.272772][T28676] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1590.276852][T28676] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1590.288678][T28676] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1590.386640][T28695] QAT: Device 253 not found
[ 1591.179200][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1592.521612][T28615] Bluetooth: hci4: ACL packet for unknown connection handle 200
[ 1592.530533][T28719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5643'.
[ 1592.534418][T28719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5643'.
[ 1592.544714][T28719] 8021q: adding VLAN 0 to HW filter on device ipvlan4
[ 1592.713141][T28726] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5645'.
[ 1592.750110][T28728] tc_dump_action: action bad kind
[ 1593.180008][T28741] lo speed is unknown, defaulting to 1000
[ 1593.566124][T28754] FAULT_INJECTION: forcing a failure.
[ 1593.566124][T28754] name failslab, interval 1, probability 0, space 0, times 0
[ 1593.571511][T28754] CPU: 2 UID: 0 PID: 28754 Comm: syz.0.5651 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1593.571544][T28754] Tainted: [L]=SOFTLOCKUP
[ 1593.571550][T28754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1593.571561][T28754] Call Trace:
[ 1593.571568][T28754]  <TASK>
[ 1593.571576][T28754]  dump_stack_lvl+0x100/0x190
[ 1593.571602][T28754]  should_fail_ex.cold+0x5/0xa
[ 1593.571625][T28754]  should_failslab+0xc2/0x120
[ 1593.571646][T28754]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1593.571663][T28754]  ? do_getname+0x35/0x390
[ 1593.571688][T28754]  ? rcu_is_watching+0x12/0xc0
[ 1593.571714][T28754]  do_getname+0x35/0x390
[ 1593.571742][T28754]  do_sys_openat2+0xc5/0x1e0
[ 1593.571769][T28754]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1593.571822][T28754]  ? __pfx___seccomp_filter+0x10/0x10
[ 1593.571846][T28754]  __ia32_sys_creat+0xcb/0x120
[ 1593.571864][T28754]  ? __pfx___ia32_sys_creat+0x10/0x10
[ 1593.571885][T28754]  ? __secure_computing+0x1e4/0x2c0
[ 1593.571908][T28754]  __do_fast_syscall_32+0xe7/0x950
[ 1593.571928][T28754]  ? lockdep_hardirqs_on+0x78/0x100
[ 1593.571947][T28754]  do_fast_syscall_32+0x32/0x70
[ 1593.571966][T28754]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1593.571987][T28754] RIP: 0023:0xf6ffef7c
[ 1593.572001][T28754] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1593.572018][T28754] RSP: 002b:00000000f53cc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000008
[ 1593.572037][T28754] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 000000002533c4ad
[ 1593.572047][T28754] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1593.572056][T28754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1593.572065][T28754] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1593.572076][T28754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1593.572099][T28754]  </TASK>
[ 1593.657389][    C2] hpet: Lost 4 RTC interrupts
[ 1594.235244][T28760] loop5: detected capacity change from 0 to 7
[ 1594.242072][T28760] Dev loop5: unable to read RDB block 7
[ 1594.247653][T28760]  loop5: unable to read partition table
[ 1594.250406][T28760] loop5: partition table beyond EOD, truncated
[ 1594.255392][T28760] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1594.688664][   T40] audit: type=1326 audit(1780269862.994:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28755 comm="syz.5.5652" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7fc00000
[ 1594.759903][T28772] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5656'.
[ 1594.960320][T28772] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5656'.
[ 1595.418984][T28601] Bluetooth: hci1: command 0x1003 tx timeout
[ 1595.423846][T28615] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1595.660344][T28785] netlink: 68 bytes leftover after parsing attributes in process `syz.8.5658'.
[ 1596.198967][   T54] usb 11-1: new high-speed USB device number 36 using dummy_hcd
[ 1596.279016][T25214] usb 10-1: new full-speed USB device number 72 using dummy_hcd
[ 1596.348979][   T54] usb 11-1: Using ep0 maxpacket: 32
[ 1596.394990][   T54] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[ 1596.402927][   T54] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[ 1596.412177][   T54] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 110, changing to 10
[ 1596.421917][   T54] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 58582, setting to 1024
[ 1596.434264][   T54] usb 11-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[ 1596.438613][   T54] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1596.445071][   T54] usb 11-1: Product: syz
[ 1596.446923][   T54] usb 11-1: Manufacturer: syz
[ 1596.450041][   T54] usb 11-1: SerialNumber: syz
[ 1596.466801][T25214] usb 10-1: config 0 has an invalid interface number: 205 but max is 0
[ 1596.472985][T25214] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1596.480308][T25214] usb 10-1: config 0 has no interface number 0
[ 1596.483005][T25214] usb 10-1: config 0 interface 205 has no altsetting 0
[ 1596.492981][T25214] usb 10-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[ 1596.497886][T25214] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1596.501689][   T54] usb 11-1: config 0 descriptor??
[ 1596.508438][T28798] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1596.512821][T25214] usb 10-1: Product: syz
[ 1596.519046][T25214] usb 10-1: Manufacturer: syz
[ 1596.521654][T25214] usb 10-1: SerialNumber: syz
[ 1596.524301][   T54] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input50
[ 1596.539956][T25214] usb 10-1: config 0 descriptor??
[ 1596.581167][    C2] xpad 11-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1
[ 1596.651824][T25214] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[ 1596.658359][T25214] dvb-usb: bulk message failed: -22 (3/0)
[ 1596.706299][T25214] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1596.716202][T25214] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[ 1596.730159][T25214] usb 10-1: media controller created
[ 1596.741368][T25214] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1596.787667][T25214] dvb-usb: bulk message failed: -22 (6/0)
[ 1596.803559][T25214] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[ 1596.811368][T25214] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input51
[ 1596.819993][T25214] dvb-usb: schedule remote query interval to 150 msecs.
[ 1596.822439][T25214] dvb-usb: bulk message failed: -22 (3/0)
[ 1596.849117][T25214] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[ 1596.864433][T20965] usb 11-1: USB disconnect, device number 36
[ 1596.864494][    C2] xpad 11-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19
[ 1596.877683][T28805] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5665'.
[ 1596.904578][T28805] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5665'.
[ 1596.992479][T25214] dvb-usb: bulk message failed: -22 (1/0)
[ 1596.994647][T25214] dvb-usb: error while querying for an remote control event.
[ 1597.149072][T25214] dvb-usb: bulk message failed: -22 (1/0)
[ 1597.160450][T25214] dvb-usb: error while querying for an remote control event.
[ 1597.344072][T25214] dvb-usb: bulk message failed: -22 (1/0)
[ 1597.345924][T25214] dvb-usb: error while querying for an remote control event.
[ 1597.509104][T25214] dvb-usb: bulk message failed: -22 (1/0)
[ 1597.511083][T25214] dvb-usb: error while querying for an remote control event.
[ 1597.669674][   T34] dvb-usb: bulk message failed: -22 (1/0)
[ 1597.672935][   T34] dvb-usb: error while querying for an remote control event.
[ 1597.819770][   T54] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 1597.839013][   T34] dvb-usb: bulk message failed: -22 (1/0)
[ 1597.844751][   T34] dvb-usb: error while querying for an remote control event.
[ 1597.859229][T25214] usb 13-1: new high-speed USB device number 14 using dummy_hcd
[ 1597.999282][T25214] usb 13-1: device descriptor read/64, error -71
[ 1598.019813][   T34] dvb-usb: bulk message failed: -22 (1/0)
[ 1598.028796][   T34] dvb-usb: error while querying for an remote control event.
[ 1598.198976][   T34] dvb-usb: bulk message failed: -22 (1/0)
[ 1598.207375][   T34] dvb-usb: error while querying for an remote control event.
[ 1598.219003][T13045] usb 11-1: new high-speed USB device number 37 using dummy_hcd
[ 1598.249066][T25214] usb 13-1: new high-speed USB device number 15 using dummy_hcd
[ 1598.369055][T13045] usb 11-1: Using ep0 maxpacket: 16
[ 1598.369922][   T34] dvb-usb: bulk message failed: -22 (1/0)
[ 1598.373215][T13045] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[ 1598.377624][   T34] dvb-usb: error while querying for an remote control event.
[ 1598.381424][T13045] usb 11-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[ 1598.381452][T13045] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1598.381471][T13045] usb 11-1: Product: syz
[ 1598.381485][T13045] usb 11-1: Manufacturer: syz
[ 1598.381500][T13045] usb 11-1: SerialNumber: syz
[ 1598.383981][T13045] usb 11-1: config 0 descriptor??
[ 1598.389724][T25214] usb 13-1: device descriptor read/64, error -71
[ 1598.407769][T13045] hub 11-1:0.0: bad descriptor, ignoring hub
[ 1598.410178][T13045] hub 11-1:0.0: probe with driver hub failed with error -5
[ 1598.414357][T13045] usb 11-1: Quirk or no altset; falling back to MIDI 1.0
[ 1598.520038][T25214] usb usb13-port1: attempt power cycle
[ 1598.571018][   T34] dvb-usb: bulk message failed: -22 (1/0)
[ 1598.583912][   T34] dvb-usb: error while querying for an remote control event.
[ 1598.758982][   T34] dvb-usb: bulk message failed: -22 (1/0)
[ 1598.760922][   T34] dvb-usb: error while querying for an remote control event.
[ 1598.889123][T25214] usb 13-1: new high-speed USB device number 16 using dummy_hcd
[ 1598.909573][T25214] usb 13-1: device descriptor read/8, error -71
[ 1598.929013][T19500] dvb-usb: bulk message failed: -22 (1/0)
[ 1598.930752][T19500] dvb-usb: error while querying for an remote control event.
[ 1598.991337][   T54] usb 10-1: USB disconnect, device number 72
[ 1599.012063][   T54] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[ 1599.155465][T28843] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5669'.
[ 1599.159045][T25214] usb 13-1: new high-speed USB device number 17 using dummy_hcd
[ 1599.180279][T25214] usb 13-1: device descriptor read/8, error -71
[ 1599.195959][ T5887] usb 11-1: USB disconnect, device number 37
[ 1599.289780][T25214] usb usb13-port1: unable to enumerate USB device
[ 1599.558989][T25214] usb 10-1: new high-speed USB device number 73 using dummy_hcd
[ 1599.719007][T25214] usb 10-1: Using ep0 maxpacket: 8
[ 1599.726100][T25214] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[ 1599.730003][T25214] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1599.733928][T25214] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1599.738046][T25214] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1599.742785][T25214] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1599.748346][T25214] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1599.752372][T25214] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1599.949264][T19500] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[ 1599.966980][T25214] usb 10-1: usb_control_msg returned -32
[ 1599.968811][T25214] usbtmc 10-1:16.0: can't read capabilities
[ 1600.017568][T28853] Bluetooth: hci0: load_link_keys: too big key_count value 5122
[ 1600.101329][   T40] audit: type=1326 audit(1780269868.444:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28856 comm="syz.6.5675" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f56f7c code=0x0
[ 1600.112423][T19500] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1600.116449][T19500] usb 5-1: config 129 has an invalid interface number: 135 but max is 0
[ 1600.120815][T19500] usb 5-1: config 129 has an invalid interface number: 5 but max is 0
[ 1600.124040][T19500] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[ 1600.127567][T19500] usb 5-1: config 129 has no interface number 0
[ 1600.130185][T19500] usb 5-1: config 129 has no interface number 1
[ 1600.132692][T19500] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1600.137834][T19500] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[ 1600.142693][T19500] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[ 1600.150854][T19500] usb 5-1: config 129 interface 135 has no altsetting 0
[ 1600.153674][T19500] usb 5-1: config 129 interface 5 has no altsetting 0
[ 1600.158516][T19500] usb 5-1: string descriptor 0 read error: -22
[ 1600.161761][T19500] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[ 1600.165585][T19500] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1600.185142][T19500] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1600.190523][T19500] usb 5-1: MIDIStreaming interface descriptor not found
[ 1600.336706][T25189] usb 10-1: USB disconnect, device number 73
[ 1600.337572][T28845] usbtmc 10-1:16.0: usb_control_msg returned -71
[ 1600.341612][T28862] usbtmc 10-1:16.0: send_request_dev_dep_msg_in returned -19
[ 1600.376467][ T1039] usb 5-1: USB disconnect, device number 76
[ 1605.881705][T28886] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5680'.
[ 1605.987919][T28891] overlayfs: failed to resolve './file0': -2
[ 1606.109279][ T1039] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[ 1606.319002][ T1039] usb 5-1: Using ep0 maxpacket: 8
[ 1606.326217][ T1039] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[ 1606.331638][ T1039] usb 5-1: config 179 has no interface number 0
[ 1606.333986][ T1039] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1606.337448][ T1039] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1606.343537][ T1039] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1606.347057][ T1039] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1606.351607][ T1039] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1606.356934][ T1039] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1606.361049][ T1039] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1606.378778][T28886] syzkaller0: create flow: hash 794824034 index 1
[ 1606.382530][T28881] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1606.440164][ T5828] syzkaller0: tun_net_xmit 76
[ 1606.527300][T28886] syzkaller0: delete flow: hash 794824034 index 1
[ 1607.301828][   T50] usb 5-1: USB disconnect, device number 77
[ 1607.301828][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1607.301863][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1607.349789][ T1039] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input52
[ 1609.048218][T28918] 9p: Bad value for 'rfdno'
[ 1609.059781][T28918] input: syz1 as /devices/virtual/input/input53
[ 1609.531609][T28929] overlayfs: overlapping lowerdir path
[ 1610.108006][   T50] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[ 1610.269007][   T50] usb 5-1: Using ep0 maxpacket: 8
[ 1610.273744][   T50] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1610.277380][   T50] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1610.281410][   T50] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1610.285393][   T50] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1610.290713][   T50] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1610.294492][   T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1610.511432][   T50] usb 5-1: GET_CAPABILITIES returned 0
[ 1610.513909][   T50] usbtmc 5-1:16.0: can't read capabilities
[ 1610.655276][T28934] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[ 1610.718126][T28910] lo speed is unknown, defaulting to 1000
[ 1610.792507][    C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1610.796744][    C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1610.800567][    C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1610.805667][    C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1610.809172][    C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1610.812066][    C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1610.814897][    C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1610.820972][    C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1610.823833][    C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1610.826637][    C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1610.829436][    C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1610.832210][    C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1610.835008][    C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1610.837932][    C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1610.840966][    C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1610.844162][    C2] hpet: Lost 1 RTC interrupts
[ 1610.851370][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1610.866505][ T5848] usb 5-1: USB disconnect, device number 78
[ 1610.971265][T28945] wireguard0: entered promiscuous mode
[ 1610.973454][T28945] wireguard0: entered allmulticast mode
[ 1611.089961][T28950] fuse: fd is not a fuse device
[ 1611.615691][T28958] syzkaller0: entered promiscuous mode
[ 1611.617852][T28958] syzkaller0: entered allmulticast mode
[ 1611.632134][T28958] FAULT_INJECTION: forcing a failure.
[ 1611.632134][T28958] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1611.636199][T28958] CPU: 3 UID: 0 PID: 28958 Comm: syz.6.5697 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1611.636217][T28958] Tainted: [L]=SOFTLOCKUP
[ 1611.636222][T28958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1611.636229][T28958] Call Trace:
[ 1611.636233][T28958]  <TASK>
[ 1611.636238][T28958]  dump_stack_lvl+0x100/0x190
[ 1611.636255][T28958]  should_fail_ex.cold+0x5/0xa
[ 1611.636270][T28958]  _copy_from_iter+0x43a/0x1690
[ 1611.636287][T28958]  ? __pfx__copy_from_iter+0x10/0x10
[ 1611.636299][T28958]  ? _copy_from_iter+0x270/0x1690
[ 1611.636315][T28958]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[ 1611.636330][T28958]  skb_copy_datagram_from_iter+0x11f/0x720
[ 1611.636347][T28958]  packet_sendmsg+0x227e/0x5100
[ 1611.636366][T28958]  ? __pfx___might_resched+0x10/0x10
[ 1611.636379][T28958]  ? __lock_acquire+0x4a5/0x2630
[ 1611.636393][T28958]  ? aa_sk_perm+0x309/0xaa0
[ 1611.636409][T28958]  ? __pfx_packet_sendmsg+0x10/0x10
[ 1611.636419][T28958]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1611.636441][T28958]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1611.636462][T28958]  ____sys_sendmsg+0x9e1/0xb70
[ 1611.636479][T28958]  ? __pfx_packet_sendmsg+0x10/0x10
[ 1611.636491][T28958]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1611.636514][T28958]  ___sys_sendmsg+0x190/0x1e0
[ 1611.636526][T28958]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1611.636543][T28958]  ? find_held_lock+0x2b/0x80
[ 1611.636567][T28958]  __sys_sendmsg+0x170/0x220
[ 1611.636582][T28958]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1611.636595][T28958]  ? __fget_files+0x21f/0x3d0
[ 1611.636612][T28958]  ? ksys_write+0x1ac/0x250
[ 1611.636627][T28958]  ? rcu_is_watching+0x12/0xc0
[ 1611.636643][T28958]  __do_fast_syscall_32+0xe7/0x950
[ 1611.636656][T28958]  ? lockdep_hardirqs_on+0x78/0x100
[ 1611.636668][T28958]  do_fast_syscall_32+0x32/0x70
[ 1611.636680][T28958]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1611.636695][T28958] RIP: 0023:0xf7f56f7c
[ 1611.636704][T28958] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1611.636715][T28958] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1611.636727][T28958] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0
[ 1611.636734][T28958] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1611.636741][T28958] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1611.636748][T28958] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1611.636754][T28958] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1611.636768][T28958]  </TASK>
[ 1611.749259][ T5828] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[ 1611.899656][ T5828] usb 5-1: device descriptor read/64, error -71
[ 1612.108534][T28615] Bluetooth: hci2: ACL packet for unknown connection handle 200
[ 1612.150097][ T5828] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[ 1612.171730][T28969] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5701'.
[ 1612.240274][T28972] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1612.300584][ T5828] usb 5-1: device descriptor read/64, error -71
[ 1612.423157][ T5828] usb usb5-port1: attempt power cycle
[ 1612.840510][ T5828] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[ 1612.873400][ T5828] usb 5-1: device descriptor read/8, error -71
[ 1613.140551][ T5828] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[ 1613.163164][ T5828] usb 5-1: device descriptor read/8, error -71
[ 1613.270147][ T5828] usb usb5-port1: unable to enumerate USB device
[ 1613.374678][T28983] o2cb: This node has not been configured.
[ 1613.378718][T28983] o2cb: Cluster check failed. Fix errors before retrying.
[ 1613.384184][T28983] (syz.8.5704,28983,2):user_dlm_register:674 ERROR: status = -22
[ 1613.387150][T28983] (syz.8.5704,28983,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0"
[ 1613.440030][T28987] binder: 28984:28987 ioctl f507 0 returned -22
[ 1613.790447][T19501] usb 13-1: new full-speed USB device number 18 using dummy_hcd
[ 1613.950702][T19501] usb 13-1: config 5 has an invalid interface number: 123 but max is 0
[ 1613.957773][T19501] usb 13-1: config 5 has no interface number 0
[ 1613.961909][T19501] usb 13-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[ 1613.966983][T19501] usb 13-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1613.971533][T19501] usb 13-1: config 5 interface 123 has no altsetting 0
[ 1613.976588][T19501] usb 13-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[ 1613.980918][T19501] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1613.984398][T19501] usb 13-1: Product: syz
[ 1613.986196][T19501] usb 13-1: Manufacturer: syz
[ 1613.988193][T19501] usb 13-1: SerialNumber: syz
[ 1614.148756][T29021] syzkaller0: entered promiscuous mode
[ 1614.150989][T29021] syzkaller0: entered allmulticast mode
[ 1614.229898][T28993] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5706'.
[ 1614.377335][T29029] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1614.395131][T29029] netlink: 'syz.5.5709': attribute type 64 has an invalid length.
[ 1614.397816][T29029] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5709'.
[ 1614.401576][T29029] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1614.526083][T19501] ni6501 13-1:5.123: driver 'ni6501' failed to auto-configure device.
[ 1614.555595][T19501] usb 13-1: USB disconnect, device number 18
[ 1614.873547][T29044] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5714'.
[ 1614.909857][T29044] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5714'.
[ 1615.072786][T29054] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1615.202610][T29060] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[ 1615.207193][T29060] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[ 1615.210617][T29060] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[ 1615.213570][T29060] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[ 1615.216517][T29060] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[ 1615.220436][T29060] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[ 1615.223342][T29060] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[ 1615.226370][T29060] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[ 1615.229576][T29060] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[ 1615.232529][T29060] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[ 1615.236960][T29060] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5720'.
[ 1615.343964][T29072] QAT: Device 253 not found
[ 1616.177352][T29092] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5727'.
[ 1616.326961][T29102] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5731'.
[ 1616.477525][T29119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5735'.
[ 1616.630195][T29123] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5736'.
[ 1616.675183][T29125] FAULT_INJECTION: forcing a failure.
[ 1616.675183][T29125] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1616.679786][T29125] CPU: 0 UID: 0 PID: 29125 Comm: syz.5.5737 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1616.679804][T29125] Tainted: [L]=SOFTLOCKUP
[ 1616.679809][T29125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1616.679816][T29125] Call Trace:
[ 1616.679820][T29125]  <TASK>
[ 1616.679825][T29125]  dump_stack_lvl+0x100/0x190
[ 1616.679843][T29125]  should_fail_ex.cold+0x5/0xa
[ 1616.679858][T29125]  _copy_from_user+0x2e/0xd0
[ 1616.679871][T29125]  get_compat_msghdr+0xb3/0x4b0
[ 1616.679889][T29125]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 1616.679905][T29125]  ? rcu_is_watching+0x12/0xc0
[ 1616.679919][T29125]  ? ___sys_recvmsg+0x177/0x1a0
[ 1616.679929][T29125]  ? kfree+0x1dd/0x6c0
[ 1616.679947][T29125]  ___sys_recvmsg+0x193/0x1a0
[ 1616.679958][T29125]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1616.679976][T29125]  ? __pfx___might_resched+0x10/0x10
[ 1616.679992][T29125]  do_recvmmsg+0x563/0x760
[ 1616.680005][T29125]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1616.680017][T29125]  ? ksys_write+0x190/0x250
[ 1616.680030][T29125]  ? ksys_write+0x190/0x250
[ 1616.680049][T29125]  ? __fget_files+0x215/0x3d0
[ 1616.680063][T29125]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1616.680079][T29125]  __sys_recvmmsg+0x21f/0x270
[ 1616.680095][T29125]  ? __pfx___sys_recvmmsg+0x10/0x10
[ 1616.680111][T29125]  ? ksys_write+0x1ac/0x250
[ 1616.680125][T29125]  __ia32_compat_sys_recvmmsg_time32+0xc4/0x160
[ 1616.680142][T29125]  ? __do_fast_syscall_32+0x98/0x950
[ 1616.680158][T29125]  ? lockdep_hardirqs_on+0x78/0x100
[ 1616.680173][T29125]  __do_fast_syscall_32+0xe7/0x950
[ 1616.680189][T29125]  ? lockdep_hardirqs_on+0x78/0x100
[ 1616.680206][T29125]  do_fast_syscall_32+0x32/0x70
[ 1616.680223][T29125]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1616.680243][T29125] RIP: 0023:0xf6feef7c
[ 1616.680257][T29125] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1616.680270][T29125] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151
[ 1616.680282][T29125] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800048c0
[ 1616.680290][T29125] RDX: 0000000000001003 RSI: 0000000000010122 RDI: 0000000000000000
[ 1616.680296][T29125] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1616.680303][T29125] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1616.680310][T29125] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1616.680323][T29125]  </TASK>
[ 1617.171224][T29135] sctp: [Deprecated]: syz.8.5741 (pid 29135) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1617.171224][T29135] Use struct sctp_sack_info instead
[ 1617.257644][T29137] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1617.425086][T29142] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5743'.
[ 1617.595693][T29148] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1617.818514][T29155] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5745'.
[ 1618.908582][T29173] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1618.912473][T29173] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1619.167738][T29182] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5752'.
[ 1619.556807][T29192] openvswitch: netlink: push_nsh: missing base or metadata attributes
[ 1619.560567][T29192] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1619.688472][T29194] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1620.096525][T29207] netlink: 244 bytes leftover after parsing attributes in process `syz.8.5758'.
[ 1620.514134][T29215] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5762'.
[ 1620.540076][T29217] QAT: Device 253 not found
[ 1620.708131][T29222] FAULT_INJECTION: forcing a failure.
[ 1620.708131][T29222] name failslab, interval 1, probability 0, space 0, times 0
[ 1620.717093][T29222] CPU: 0 UID: 0 PID: 29222 Comm: syz.8.5760 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1620.717114][T29222] Tainted: [L]=SOFTLOCKUP
[ 1620.717119][T29222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1620.717126][T29222] Call Trace:
[ 1620.717131][T29222]  <TASK>
[ 1620.717136][T29222]  dump_stack_lvl+0x100/0x190
[ 1620.717153][T29222]  should_fail_ex.cold+0x5/0xa
[ 1620.717168][T29222]  should_failslab+0xc2/0x120
[ 1620.717182][T29222]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[ 1620.717195][T29222]  ? __alloc_skb+0x140/0x710
[ 1620.717208][T29222]  ? __alloc_skb+0x5b7/0x710
[ 1620.717222][T29222]  __alloc_skb+0x140/0x710
[ 1620.717234][T29222]  ? __alloc_skb+0x5b7/0x710
[ 1620.717246][T29222]  ? __pfx___alloc_skb+0x10/0x10
[ 1620.717263][T29222]  netlink_alloc_large_skb+0x69/0x150
[ 1620.717283][T29222]  netlink_sendmsg+0x680/0xda0
[ 1620.717303][T29222]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1620.717322][T29222]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1620.717343][T29222]  ____sys_sendmsg+0x9e1/0xb70
[ 1620.717360][T29222]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1620.717379][T29222]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1620.717402][T29222]  ___sys_sendmsg+0x190/0x1e0
[ 1620.717414][T29222]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1620.717431][T29222]  ? find_held_lock+0x2b/0x80
[ 1620.717458][T29222]  __sys_sendmsg+0x170/0x220
[ 1620.717473][T29222]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1620.717487][T29222]  ? __fget_files+0x21f/0x3d0
[ 1620.717504][T29222]  ? ksys_write+0x1ac/0x250
[ 1620.717518][T29222]  ? rcu_is_watching+0x12/0xc0
[ 1620.717534][T29222]  __do_fast_syscall_32+0xe7/0x950
[ 1620.717547][T29222]  ? lockdep_hardirqs_on+0x78/0x100
[ 1620.717559][T29222]  do_fast_syscall_32+0x32/0x70
[ 1620.717571][T29222]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1620.717603][T29222] RIP: 0023:0xf7ff6f7c
[ 1620.717614][T29222] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1620.717625][T29222] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1620.717637][T29222] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140
[ 1620.717645][T29222] RDX: 0000000000000c00 RSI: 0000000000000000 RDI: 0000000000000000
[ 1620.717652][T29222] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1620.717658][T29222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1620.717665][T29222] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1620.717678][T29222]  </TASK>
[ 1620.947847][T29234] FAULT_INJECTION: forcing a failure.
[ 1620.947847][T29234] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1620.952825][T29234] CPU: 0 UID: 0 PID: 29234 Comm: syz.8.5766 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1620.952844][T29234] Tainted: [L]=SOFTLOCKUP
[ 1620.952848][T29234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1620.952855][T29234] Call Trace:
[ 1620.952860][T29234]  <TASK>
[ 1620.952865][T29234]  dump_stack_lvl+0x100/0x190
[ 1620.952881][T29234]  should_fail_ex.cold+0x5/0xa
[ 1620.952897][T29234]  _copy_from_user+0x2e/0xd0
[ 1620.952910][T29234]  move_addr_to_kernel+0x65/0x170
[ 1620.952932][T29234]  __sys_connect+0xb5/0x170
[ 1620.952944][T29234]  ? __pfx___sys_connect+0x10/0x10
[ 1620.952962][T29234]  ? ksys_write+0x1ac/0x250
[ 1620.952978][T29234]  __ia32_sys_connect+0x71/0xb0
[ 1620.952990][T29234]  ? lockdep_hardirqs_on+0x78/0x100
[ 1620.953002][T29234]  __do_fast_syscall_32+0xe7/0x950
[ 1620.953014][T29234]  ? lockdep_hardirqs_on+0x78/0x100
[ 1620.953026][T29234]  do_fast_syscall_32+0x32/0x70
[ 1620.953038][T29234]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1620.953052][T29234] RIP: 0023:0xf7ff6f7c
[ 1620.953062][T29234] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1620.953074][T29234] RSP: 002b:00000000f549550c EFLAGS: 00000292 ORIG_RAX: 000000000000016a
[ 1620.953086][T29234] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080
[ 1620.953093][T29234] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000
[ 1620.953100][T29234] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1620.953107][T29234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1620.953113][T29234] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1620.953128][T29234]  </TASK>
[ 1621.267286][T29243] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5768'.
[ 1621.518948][T29249] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1621.662184][T29255] bridge0: port 3(erspan0) entered blocking state
[ 1621.665180][T29255] bridge0: port 3(erspan0) entered disabled state
[ 1621.668804][T29255] erspan0: entered allmulticast mode
[ 1621.675700][T29255] erspan0: entered promiscuous mode
[ 1621.677714][T29255] bridge0: port 3(erspan0) entered blocking state
[ 1621.679921][T29255] bridge0: port 3(erspan0) entered forwarding state
[ 1622.122334][T29263] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5773'.
[ 1622.292301][T29271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1622.503070][T29281] QAT: Device 253 not found
[ 1623.406122][T29291] tls_set_device_offload: netdev not found
[ 1623.551170][T29289] fuse: Bad value for 'user_id'
[ 1623.553353][T29289] fuse: Bad value for 'user_id'
[ 1624.043372][T29319] 9p: Bad value for 'wfdno'
[ 1624.274299][T29330] QAT: Device 253 not found
[ 1624.277835][T25189] usb 10-1: new high-speed USB device number 74 using dummy_hcd
[ 1624.444472][T25189] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1624.450430][T25189] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1624.454541][T25189] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1624.484933][T25189] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[ 1624.489747][T25189] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1624.493337][T25189] usb 10-1: Product: syz
[ 1624.495304][T25189] usb 10-1: Manufacturer: syz
[ 1624.496875][T25189] usb 10-1: SerialNumber: syz
[ 1624.898182][T25189] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 74 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1625.014585][T29318] tipc: Started in network mode
[ 1625.016782][T29318] tipc: Node identity ac1414aa, cluster identity 4711
[ 1625.027069][T29318] tipc: Enabled bearer <udp:s>, priority 10
[ 1625.031439][T29318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1625.038336][T29318] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1625.047540][T25189] usb 10-1: USB disconnect, device number 74
[ 1625.058180][T25189] usblp0: removed
[ 1625.208993][T24866] usb 11-1: new high-speed USB device number 38 using dummy_hcd
[ 1625.254227][T29352] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5799'.
[ 1625.313849][T29356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5801'.
[ 1625.329433][T29356] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1625.332886][T29356] team0: Device macvlan2 is up. Set it down before adding it as a team port
[ 1625.382868][T24866] usb 11-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1625.386020][T24866] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1625.388644][T24866] usb 11-1: Product: syz
[ 1625.390169][T24866] usb 11-1: Manufacturer: syz
[ 1625.391768][T24866] usb 11-1: SerialNumber: syz
[ 1625.395648][T24866] usb 11-1: config 0 descriptor??
[ 1625.539039][T19500] usb 13-1: new low-speed USB device number 19 using dummy_hcd
[ 1625.602004][T24866] usb 11-1: USB disconnect, device number 38
[ 1625.701134][T19500] usb 13-1: No LPM exit latency info found, disabling LPM.
[ 1625.704818][T19500] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 16, setting to 8
[ 1625.711545][T19500] usb 13-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[ 1625.715346][T19500] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1625.718556][T19500] usb 13-1: Product: 매虎欷閄簬ꖫꫪ쎷㕎炀뺇㰤ӱ蕋罆�죭�澰
[ 1625.723960][T19500] usb 13-1: Manufacturer: 枭舗香鞉�鞡ꕚ쬕ච椄괲迉뵰�区啉�뎼ꨕ�浠騡ᯠ̨���檗�핵뱄�ꆤ䆴ઇ瑬ᤖ伕亶᥎콀鯆괩ᩰ᛬康㷖♷�
[ 1625.731389][T19500] usb 13-1: SerialNumber: 녃鷰뎹䰲듴삲˙죂◲ᘫ圧䦋队값匙���蚅�壘죓�噜㛥��ᦺ��ퟞꛜ�幟�窑뻦儗ￛ�౑ꨅ韽趽沃꜔㠓꾘ｉ將춱嫼鰀��肃蚢娓䎬�顄�︬ᨆ�ආꢮ�箔ꨌ뾺膔ꥑ䆯苋ꪳ�⯀瀔䋲꼇佹ͥ篫艼⟿隦▰�瑩�䛾驓›껽펑鯢횉໎
[ 1625.748402][T29354] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1625.760982][T29368] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1626.039354][T25189] tipc: Node number set to 2886997162
[ 1626.174981][T19500] usb 13-1: Quirk or no altset; falling back to MIDI 1.0
[ 1626.405071][T29377] QAT: Device 253 not found
[ 1626.840813][T29382] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5808'.
[ 1627.152119][T29391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1627.185492][T29391] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1627.235724][T29394] QAT: failed to copy from user cfg_data.
[ 1627.449520][T29404] FAULT_INJECTION: forcing a failure.
[ 1627.449520][T29404] name failslab, interval 1, probability 0, space 0, times 0
[ 1627.453676][T29404] CPU: 0 UID: 0 PID: 29404 Comm: syz.5.5813 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1627.453703][T29404] Tainted: [L]=SOFTLOCKUP
[ 1627.453711][T29404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1627.453721][T29404] Call Trace:
[ 1627.453728][T29404]  <TASK>
[ 1627.453735][T29404]  dump_stack_lvl+0x100/0x190
[ 1627.453761][T29404]  should_fail_ex.cold+0x5/0xa
[ 1627.453785][T29404]  should_failslab+0xc2/0x120
[ 1627.453836][T29404]  __kvmalloc_node_noprof+0xfa/0xa00
[ 1627.453854][T29404]  ? __kvm_mmu_topup_memory_cache+0x455/0x5f0
[ 1627.453880][T29404]  __kvm_mmu_topup_memory_cache+0x455/0x5f0
[ 1627.453905][T29404]  ? find_held_lock+0x2b/0x80
[ 1627.453930][T29404]  mmu_topup_memory_caches+0x25/0x170
[ 1627.453954][T29404]  kvm_mmu_load+0xd6/0x23e0
[ 1627.453976][T29404]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[ 1627.454002][T29404]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[ 1627.454034][T29404]  ? __pfx_kvm_mmu_load+0x10/0x10
[ 1627.454053][T29404]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[ 1627.454073][T29404]  ? kvm_check_and_inject_events+0x961/0x1070
[ 1627.454103][T29404]  vcpu_run+0x39f4/0x5ca0
[ 1627.454123][T29404]  ? vmx_vcpu_load_vmcs+0x21d/0x760
[ 1627.454159][T29404]  ? __pfx_vcpu_run+0x10/0x10
[ 1627.454192][T29404]  ? rcu_is_watching+0x12/0xc0
[ 1627.454218][T29404]  ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890
[ 1627.454241][T29404]  kvm_arch_vcpu_ioctl_run+0x5b6/0x1890
[ 1627.454279][T29404]  kvm_vcpu_ioctl+0x730/0x1720
[ 1627.454299][T29404]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1627.454317][T29404]  ? tomoyo_path_number_perm+0x188/0x580
[ 1627.454344][T29404]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1627.454366][T29404]  ? get_pid_task+0x106/0x250
[ 1627.454399][T29404]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1627.454429][T29404]  ? do_vfs_ioctl+0x226/0x13e0
[ 1627.454449][T29404]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1627.454479][T29404]  kvm_vcpu_compat_ioctl+0x20f/0x3c0
[ 1627.454498][T29404]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[ 1627.454517][T29404]  ? __fget_files+0x21f/0x3d0
[ 1627.454543][T29404]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[ 1627.454562][T29404]  __ia32_compat_sys_ioctl+0x2cf/0x360
[ 1627.454584][T29404]  __do_fast_syscall_32+0xe7/0x950
[ 1627.454604][T29404]  ? lockdep_hardirqs_on+0x78/0x100
[ 1627.454623][T29404]  do_fast_syscall_32+0x32/0x70
[ 1627.454643][T29404]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1627.454668][T29404] RIP: 0023:0xf6feef7c
[ 1627.454684][T29404] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1627.454700][T29404] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[ 1627.454719][T29404] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80
[ 1627.454730][T29404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1627.454740][T29404] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1627.454750][T29404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1627.454760][T29404] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1627.454785][T29404]  </TASK>
[ 1628.689985][T25189] usb 13-1: USB disconnect, device number 19
[ 1629.682380][    C2] hpet: Lost 1 RTC interrupts
[ 1629.809918][T29425] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5818'.
[ 1629.863360][T29427] netlink: 'syz.6.5818': attribute type 5 has an invalid length.
[ 1629.866259][T29427] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5818'.
[ 1632.458562][T29446] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5823'.
[ 1632.473778][T29446] netlink: 90 bytes leftover after parsing attributes in process `syz.8.5823'.
[ 1632.491103][T29446] netlink: 90 bytes leftover after parsing attributes in process `syz.8.5823'.
[ 1632.511969][T29446] ptrace attach of "/syz-executor exec"[25163] was attempted by "/syz-executor exec"[29446]
[ 1632.554625][T29447] QAT: Device 253 not found
[ 1633.701665][T29471] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5829'.
[ 1633.789223][ T5828] usb 11-1: new high-speed USB device number 39 using dummy_hcd
[ 1633.828846][T29474] netlink: 'syz.0.5829': attribute type 5 has an invalid length.
[ 1633.831530][T29474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5829'.
[ 1633.939595][ T5828] usb 11-1: Using ep0 maxpacket: 32
[ 1633.945660][ T5828] usb 11-1: config 0 has an invalid interface number: 119 but max is 0
[ 1633.949984][ T5828] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1633.954164][ T5828] usb 11-1: config 0 has no interface number 0
[ 1633.956853][ T5828] usb 11-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1633.965262][ T5828] usb 11-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[ 1633.969540][ T5828] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1633.972940][ T5828] usb 11-1: Product: syz
[ 1633.974754][ T5828] usb 11-1: Manufacturer: syz
[ 1633.976742][ T5828] usb 11-1: SerialNumber: syz
[ 1633.985539][ T5828] usb 11-1: config 0 descriptor??
[ 1634.014268][ T5828] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.119/input/input54
[ 1634.288100][T29466] hugetlbfs: syz.6.5827 (29466): Using mlock ulimits for SHM_HUGETLB is obsolete
[ 1634.294479][ T5828] usb 11-1: USB disconnect, device number 39
[ 1635.176738][T20795] Bluetooth: Error in BCSP hdr checksum
[ 1635.437031][ T9301] Bluetooth: Error in BCSP hdr checksum
[ 1635.720210][T29497] QAT: Device 253 not found
[ 1636.879770][T29479] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1638.200476][T29483] lo speed is unknown, defaulting to 1000
[ 1638.309379][T29519] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1638.327017][T29520] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5837'.
[ 1639.554424][T29546] QAT: Device 253 not found
[ 1640.239229][   T40] audit: type=1804 audit(1780269908.524:1532): pid=29552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5845" name="/newroot/154/file0" dev="tmpfs" ino=822 res=1 errno=0
[ 1641.359680][T26469] Bluetooth: Error in BCSP hdr checksum
[ 1641.869567][    C2] hpet: Lost 1 RTC interrupts
[ 1642.169030][ T1039] usb 10-1: new high-speed USB device number 75 using dummy_hcd
[ 1642.342685][ T1039] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1642.347250][ T1039] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1642.351784][ T1039] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1642.357189][ T1039] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1642.360929][ T1039] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1642.365862][ T1039] usb 10-1: config 0 descriptor??
[ 1642.593709][    C2] hpet: Lost 1 RTC interrupts
[ 1642.792124][ T1039] usbhid 10-1:0.0: can't add hid device: -71
[ 1642.794364][ T1039] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1642.798306][ T1039] usb 10-1: USB disconnect, device number 75
[ 1643.106151][T29538] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1644.271749][T29560] lo speed is unknown, defaulting to 1000
[ 1644.572034][T29588] netlink: 'syz.8.5854': attribute type 1 has an invalid length.
[ 1644.626302][T29588] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1644.631769][T29592] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5854'.
[ 1644.934764][T29588] vlan0: entered allmulticast mode
[ 1645.786580][T29621] lo speed is unknown, defaulting to 1000
[ 1647.460268][T29659] FAULT_INJECTION: forcing a failure.
[ 1647.460268][T29659] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1647.465796][T29659] CPU: 3 UID: 0 PID: 29659 Comm: syz.8.5873 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1647.465827][T29659] Tainted: [L]=SOFTLOCKUP
[ 1647.465833][T29659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1647.465845][T29659] Call Trace:
[ 1647.465853][T29659]  <TASK>
[ 1647.465860][T29659]  dump_stack_lvl+0x100/0x190
[ 1647.465886][T29659]  should_fail_ex.cold+0x5/0xa
[ 1647.465910][T29659]  _copy_from_user+0x2e/0xd0
[ 1647.465932][T29659]  get_compat_msghdr+0xb3/0x4b0
[ 1647.465957][T29659]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 1647.465991][T29659]  ___sys_sendmsg+0x1b6/0x1e0
[ 1647.466012][T29659]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1647.466042][T29659]  ? find_held_lock+0x2b/0x80
[ 1647.466082][T29659]  __sys_sendmsg+0x170/0x220
[ 1647.466106][T29659]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1647.466127][T29659]  ? __fget_files+0x21f/0x3d0
[ 1647.466161][T29659]  ? ksys_write+0x1ac/0x250
[ 1647.466184][T29659]  ? rcu_is_watching+0x12/0xc0
[ 1647.466209][T29659]  __do_fast_syscall_32+0xe7/0x950
[ 1647.466229][T29659]  ? lockdep_hardirqs_on+0x78/0x100
[ 1647.466249][T29659]  do_fast_syscall_32+0x32/0x70
[ 1647.466267][T29659]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1647.466290][T29659] RIP: 0023:0xf7ff6f7c
[ 1647.466305][T29659] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1647.466323][T29659] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1647.466342][T29659] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400
[ 1647.466354][T29659] RDX: 0000000000040800 RSI: 0000000000000000 RDI: 0000000000000000
[ 1647.466364][T29659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1647.466375][T29659] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1647.466385][T29659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1647.466409][T29659]  </TASK>
[ 1647.665246][T29666] dlm: Unknown command passed to DLM device : 3
[ 1647.665246][T29666] 
[ 1647.733629][T29668] random: crng reseeded on system resumption
[ 1647.983027][T29538] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1648.011828][    C2] hpet: Lost 1 RTC interrupts
[ 1648.819696][T28887] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[ 1649.553611][T29709] netlink: 'syz.8.5882': attribute type 1 has an invalid length.
[ 1649.590565][T29709] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1649.610162][T29709] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5882'.
[ 1649.670887][T29712] lo speed is unknown, defaulting to 1000
[ 1649.710157][T29709] vlan0: entered allmulticast mode
[ 1649.896232][T29725] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1650.151518][T29731] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1650.355314][T29737] netdevsim netdevsim8 netdevsim0: left promiscuous mode
[ 1650.358762][T29737] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1650.869951][T29742] Bluetooth: hci0: unsupported parameter 255
[ 1650.884599][T29742] Bluetooth: hci0: unsupported parameter 255
[ 1651.478277][   T50] hid-generic 0004:FFFFFFFF:0000.0010: unknown main item tag 0x0
[ 1651.483384][   T50] hid-generic 0004:FFFFFFFF:0000.0010: unknown main item tag 0x0
[ 1651.486676][   T50] hid-generic 0004:FFFFFFFF:0000.0010: unknown main item tag 0x0
[ 1651.490218][   T50] hid-generic 0004:FFFFFFFF:0000.0010: unknown main item tag 0x0
[ 1651.493612][   T50] hid-generic 0004:FFFFFFFF:0000.0010: unknown main item tag 0x0
[ 1651.496870][   T50] hid-generic 0004:FFFFFFFF:0000.0010: unknown main item tag 0x0
[ 1651.501468][   T50] hid-generic 0004:FFFFFFFF:0000.0010: unknown main item tag 0x0
[ 1651.507300][   T50] hid-generic 0004:FFFFFFFF:0000.0010: unknown main item tag 0x0
[ 1651.513198][   T50] hid-generic 0004:FFFFFFFF:0000.0010: unknown main item tag 0x0
[ 1651.518854][   T50] hid-generic 0004:FFFFFFFF:0000.0010: unknown main item tag 0x0
[ 1651.540328][   T50] hid-generic 0004:FFFFFFFF:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[ 1651.665052][T29755] lo speed is unknown, defaulting to 1000
[ 1651.719328][T19501] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[ 1651.819415][T29722] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1651.873153][T19501] usb 5-1: config 0 has no interfaces?
[ 1651.876003][T19501] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[ 1651.880615][T19501] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1651.890495][T19501] usb 5-1: config 0 descriptor??
[ 1651.918819][T29759] netlink: 'syz.6.5893': attribute type 1 has an invalid length.
[ 1651.974235][T29761] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5893'.
[ 1651.991781][T29759] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1652.042532][T29759] vlan2: entered allmulticast mode
[ 1652.182927][T29769] netdevsim netdevsim8 netdevsim0: entered promiscuous mode
[ 1652.187252][T29769] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1652.279448][T29778] netlink: 'syz.6.5895': attribute type 1 has an invalid length.
[ 1652.288296][ T5828] usb 5-1: USB disconnect, device number 83
[ 1652.323511][T29773] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5895'.
[ 1652.403850][T29773] bond5: (slave bridge4): making interface the new active one
[ 1652.408274][T29773] bond5: (slave bridge4): Enslaving as an active interface with an up link
[ 1652.417986][T29777] macvlan2: entered promiscuous mode
[ 1652.421690][T29777] macvlan2: entered allmulticast mode
[ 1652.424791][T29777] bond5: entered promiscuous mode
[ 1652.427089][T29777] bridge4: entered promiscuous mode
[ 1652.431654][T29777] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1652.436049][T29777] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1652.443471][T29777] bond5: left promiscuous mode
[ 1652.445695][T29777] bridge4: left promiscuous mode
[ 1652.797116][T29789] binder: 29783:29789 ioctl c0285840 80000000 returned -22
[ 1652.811567][T29788] loop5: detected capacity change from 0 to 7
[ 1652.835572][T29788] Dev loop5: unable to read RDB block 7
[ 1652.838222][T29788]  loop5: unable to read partition table
[ 1652.841683][T29788] loop5: partition table beyond EOD, truncated
[ 1652.844474][T29788] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1653.494606][T29794] Bluetooth: hci0: unsupported parameter 255
[ 1653.496707][T29794] Bluetooth: hci0: unsupported parameter 255
[ 1653.717051][T29808] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5900'.
[ 1653.720826][T29809] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5900'.
[ 1653.731281][T29804] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1653.733333][T29804] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1653.741731][T29804] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1654.097156][T25189] kernel write not supported for file /ppp (pid: 25189 comm: kworker/2:2)
[ 1654.510447][T29843] IPVS: Error connecting to the multicast addr
[ 1654.524527][T25189] e1000 0000:00:06.0 eth0: Reset adapter
[ 1654.733856][T29855] QAT: Device 253 not found
[ 1655.504968][T29872] netlink: 'syz.8.5908': attribute type 1 has an invalid length.
[ 1655.535496][T29872] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1655.542473][T29872] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5908'.
[ 1655.554580][T29872] vlan0: entered allmulticast mode
[ 1655.741445][T29868] Bluetooth: hci4: command 0x0406 tx timeout
[ 1655.743430][T29868] Bluetooth: hci3: command 0x0406 tx timeout
[ 1655.759658][T29875] lo speed is unknown, defaulting to 1000
[ 1655.819523][T29877] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1655.872781][T29879] lo speed is unknown, defaulting to 1000
[ 1656.129824][T29891] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1657.348672][ T5828] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[ 1658.075601][    C2] hpet: Lost 1 RTC interrupts
[ 1665.197116][T29940] IPVS: Error connecting to the multicast addr
[ 1665.203641][T25189] e1000 0000:00:06.0 eth0: Reset adapter
[ 1665.318375][T29951] netlink: 'syz.6.5919': attribute type 1 has an invalid length.
[ 1665.376265][T29951] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1665.383676][T29958] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5919'.
[ 1665.383740][T29943] lo speed is unknown, defaulting to 1000
[ 1665.501328][T29958] vlan2: entered allmulticast mode
[ 1665.521727][T29964] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1667.421197][   T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[ 1674.542925][T30011] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5925'.
[ 1674.751976][   T40] audit: type=1326 audit(1780269943.094:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30014 comm="syz.6.5927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f7c code=0x7ffc0000
[ 1674.769657][   T40] audit: type=1326 audit(1780269943.094:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30014 comm="syz.6.5927" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f56f7c code=0x7ffc0000
[ 1674.777320][   T40] audit: type=1326 audit(1780269943.094:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30014 comm="syz.6.5927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f7c code=0x7ffc0000
[ 1674.810327][   T40] audit: type=1326 audit(1780269943.094:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30014 comm="syz.6.5927" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f56f7c code=0x7ffc0000
[ 1674.825389][T30033] netlink: 'syz.6.5927': attribute type 1 has an invalid length.
[ 1674.886687][T30024] lo speed is unknown, defaulting to 1000
[ 1674.920028][T30025] IPVS: stopping master sync thread 28664 ...
[ 1675.023579][T30033] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1675.045516][T30042] binder: 30041:30042 ioctl c0306201 80000080 returned -14
[ 1675.057211][T30042] binder: 30041:30042 ioctl c0306201 800003c0 returned -14
[ 1675.106081][T30034] bond7: (slave veth3): Enslaving as an active interface with a down link
[ 1675.167142][T30046] netlink: 'syz.0.5932': attribute type 1 has an invalid length.
[ 1675.217648][T30046] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1675.234525][T30046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5932'.
[ 1675.358327][T30046] vlan2: entered allmulticast mode
[ 1675.374104][T30052] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1675.469304][   T40] audit: type=1326 audit(1780269943.814:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30014 comm="syz.6.5927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f7c code=0x7ffc0000
[ 1675.510723][   T40] audit: type=1326 audit(1780269943.814:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30014 comm="syz.6.5927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f7c code=0x7ffc0000
[ 1676.940497][   T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[ 1677.035225][T30088] QAT: Device 253 not found
[ 1678.206196][T30092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5938'.
[ 1685.811898][T30115] Invalid logical block size (1280)
[ 1685.820344][T30115] binder: 30112:30115 ioctl c0285840 80000000 returned -22
[ 1686.807537][T30111] lo speed is unknown, defaulting to 1000
[ 1687.144617][ T9316] Bluetooth: Error in BCSP hdr checksum
[ 1687.257751][T20965] usb 10-1: new high-speed USB device number 76 using dummy_hcd
[ 1687.478269][T20965] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1687.481483][T20965] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1687.484236][T20965] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1687.498607][T20965] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1687.501939][T20965] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1687.508202][T20965] usb 10-1: SerialNumber: syz
[ 1687.569923][ T7290] Bluetooth: Error in BCSP hdr checksum
[ 1687.816195][ T7290] Bluetooth: Error in BCSP hdr checksum
[ 1688.106287][T20795] Bluetooth: Error in BCSP hdr checksum
[ 1688.306199][T30111] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5940'.
[ 1688.330110][ T9301] Bluetooth: Error in BCSP hdr checksum
[ 1688.338161][T20965] usb 10-1: 0:2 : does not exist
[ 1688.340933][T20965] usb 10-1: unit 5 not found!
[ 1688.394668][T20965] usb 10-1: USB disconnect, device number 76
[ 1688.702419][T30119] udevd[30119]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1688.869846][T30089] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1688.926512][T30147] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1689.037498][T30152] QAT: Device 253 not found
[ 1690.239261][   T24] e1000 0000:00:06.0 eth0: Reset adapter
[ 1690.279376][T30166] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[ 1690.406359][T30168] lo speed is unknown, defaulting to 1000
[ 1690.414383][T30158] IPVS: stopping master sync thread 30166 ...
[ 1690.599136][T30184] input input55: cannot allocate more than FF_MAX_EFFECTS effects
[ 1690.628193][T30072] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15
[ 1690.630693][T30072] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x6d
[ 1692.462177][ T5828] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[ 1700.067367][T30238] netlink: 'syz.6.5961': attribute type 16 has an invalid length.
[ 1700.070249][T30238] netlink: 'syz.6.5961': attribute type 3 has an invalid length.
[ 1700.072813][T30238] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5961'.
[ 1700.105145][T30236] syzkaller0: entered promiscuous mode
[ 1700.106932][T30236] syzkaller0: entered allmulticast mode
[ 1700.174453][T30244] netlink: 'syz.0.5964': attribute type 1 has an invalid length.
[ 1700.233280][T30249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5964'.
[ 1700.262363][T30244] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1700.419292][T30252] vlan2: entered allmulticast mode
[ 1701.232188][T18899] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 1701.379153][T24867] usb 11-1: new high-speed USB device number 40 using dummy_hcd
[ 1701.401815][T30269] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1701.568962][T24867] usb 11-1: Using ep0 maxpacket: 32
[ 1701.574610][T24867] usb 11-1: config 0 has an invalid interface number: 119 but max is 0
[ 1701.580967][T24867] usb 11-1: config 0 has no interface number 0
[ 1701.583639][T24867] usb 11-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1701.588106][T24867] usb 11-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1701.593168][T24867] usb 11-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27
[ 1701.597358][T24867] usb 11-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1701.606101][T24867] usb 11-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[ 1701.610666][T24867] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1701.614047][T24867] usb 11-1: Product: syz
[ 1701.615813][T24867] usb 11-1: Manufacturer: syz
[ 1701.617919][T24867] usb 11-1: SerialNumber: syz
[ 1701.622648][T24867] usb 11-1: config 0 descriptor??
[ 1701.625756][T30265] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1701.633707][T24867] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.119/input/input58
[ 1701.719165][T20965] usb 10-1: new high-speed USB device number 77 using dummy_hcd
[ 1701.900402][T20965] usb 10-1: Using ep0 maxpacket: 16
[ 1701.905135][T20965] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[ 1701.923233][T20965] usb 10-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[ 1701.931891][T20965] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1701.939091][T20965] usb 10-1: Product: syz
[ 1701.944453][T20965] usb 10-1: Manufacturer: syz
[ 1701.946607][T20965] usb 10-1: SerialNumber: syz
[ 1701.959844][T20965] usb 10-1: config 0 descriptor??
[ 1701.971478][T20965] hub 10-1:0.0: bad descriptor, ignoring hub
[ 1701.976275][T20965] hub 10-1:0.0: probe with driver hub failed with error -5
[ 1701.980751][T20965] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[ 1702.301292][T30290] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[ 1702.319340][T18899] e1000 0000:00:06.0 eth0: Reset adapter
[ 1702.396198][T20965] usb 10-1: USB disconnect, device number 77
[ 1702.433121][T30280] IPVS: stopping master sync thread 30290 ...
[ 1702.552809][T24867] usb 11-1: USB disconnect, device number 40
[ 1703.061731][T30306] binder: 30302:30306 unknown command 1078485781
[ 1703.063837][T30306] binder: 30302:30306 ioctl c0306201 800001c0 returned -22
[ 1704.470421][ T5887] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[ 1710.116298][T30349] 9p: Bad value for 'rfdno'
[ 1710.220559][ T5887] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[ 1710.297610][T30355] IPVS: Error connecting to the multicast addr
[ 1710.305539][T30357] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1710.309522][   T54] e1000: eth0 NIC Link is Down
[ 1710.312366][   T54] e1000 0000:00:06.0 eth0: Reset adapter
[ 1710.429613][   T54] e1000 0000:00:06.0 eth0: Reset adapter
[ 1710.469488][T19500] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[ 1710.520283][ T5887] usb 10-1: new high-speed USB device number 78 using dummy_hcd
[ 1710.539350][   T54] e1000 0000:00:06.0 eth0: Reset adapter
[ 1710.641896][T19500] usb 5-1: Using ep0 maxpacket: 16
[ 1710.644152][T30363] lo speed is unknown, defaulting to 1000
[ 1710.649787][T19500] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 1710.654818][T19500] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1710.659300][T19500] usb 5-1: Product: syz
[ 1710.660664][T19500] usb 5-1: Manufacturer: syz
[ 1710.663686][T19500] usb 5-1: SerialNumber: syz
[ 1710.670823][T19500] usb 5-1: config 0 descriptor??
[ 1710.679002][ T5887] usb 10-1: Using ep0 maxpacket: 16
[ 1710.691611][ T5887] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[ 1710.697640][ T5887] usb 10-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[ 1710.703150][ T5887] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1710.708981][ T5887] usb 10-1: Product: syz
[ 1710.710576][ T5887] usb 10-1: Manufacturer: syz
[ 1710.715764][ T5887] usb 10-1: SerialNumber: syz
[ 1710.723268][ T5887] usb 10-1: config 0 descriptor??
[ 1710.727007][ T5887] hub 10-1:0.0: bad descriptor, ignoring hub
[ 1710.731574][ T5887] hub 10-1:0.0: probe with driver hub failed with error -5
[ 1710.737217][ T5887] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[ 1711.150994][T19500] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71
[ 1711.164899][T19500] usb 5-1: USB disconnect, device number 84
[ 1711.175003][ T5887] usb 10-1: USB disconnect, device number 78
[ 1711.381851][T30381] udevd[30381]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1711.667517][T30406] Bluetooth: hci3: unexpected event for opcode 0x0c20
[ 1712.710147][ T5887] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[ 1720.909424][ T5828] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 1721.265218][T30442] syzkaller0: entered promiscuous mode
[ 1721.282748][T30442] syzkaller0: entered allmulticast mode
[ 1721.424351][T30432] syzkaller0: entered promiscuous mode
[ 1721.426343][T30432] syzkaller0: entered allmulticast mode
[ 1721.540673][T24867] usb 13-1: new high-speed USB device number 20 using dummy_hcd
[ 1721.602649][    C2] hpet: Lost 1 RTC interrupts
[ 1721.818956][T24867] usb 13-1: Using ep0 maxpacket: 16
[ 1721.821944][T24867] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[ 1721.841249][T24867] usb 13-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[ 1721.843980][T24867] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1721.846954][T24867] usb 13-1: Product: syz
[ 1721.848644][T24867] usb 13-1: Manufacturer: syz
[ 1721.850671][T24867] usb 13-1: SerialNumber: syz
[ 1721.854824][T24867] usb 13-1: config 0 descriptor??
[ 1721.870406][T24867] hub 13-1:0.0: bad descriptor, ignoring hub
[ 1721.879249][T24867] hub 13-1:0.0: probe with driver hub failed with error -5
[ 1721.884114][T24867] usb 13-1: Quirk or no altset; falling back to MIDI 1.0
[ 1722.138602][    C2] hpet: Lost 1 RTC interrupts
[ 1722.230802][T25189] usb 13-1: USB disconnect, device number 20
[ 1722.341540][T30465] udevd[30465]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1723.528670][T30471] netlink: 'syz.5.5994': attribute type 1 has an invalid length.
[ 1723.584123][T30472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5994'.
[ 1724.368216][ T1039] usb 13-1: new high-speed USB device number 21 using dummy_hcd
[ 1724.520497][ T1039] usb 13-1: Using ep0 maxpacket: 16
[ 1724.524860][ T1039] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[ 1724.531539][ T1039] usb 13-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[ 1724.535397][ T1039] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1724.538757][ T1039] usb 13-1: Product: syz
[ 1724.540571][ T1039] usb 13-1: Manufacturer: syz
[ 1724.542596][ T1039] usb 13-1: SerialNumber: syz
[ 1724.546899][ T1039] usb 13-1: config 0 descriptor??
[ 1724.552677][ T1039] hub 13-1:0.0: bad descriptor, ignoring hub
[ 1724.555480][ T1039] hub 13-1:0.0: probe with driver hub failed with error -5
[ 1724.572425][ T1039] usb 13-1: Quirk or no altset; falling back to MIDI 1.0
[ 1724.809542][ T1039] usb 13-1: USB disconnect, device number 21
[ 1724.879618][T30471] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1724.908039][T30474] vlan0: entered allmulticast mode
[ 1724.914569][T30474] bond0: entered allmulticast mode
[ 1724.919187][T30474] bond_slave_0: entered allmulticast mode
[ 1724.923314][T30474] bond_slave_1: entered allmulticast mode
[ 1725.039400][T25189] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 1725.486686][T30496] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[ 1725.530508][T30487] IPVS: stopping master sync thread 30496 ...
[ 1726.926351][T30524] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1727.001369][T30526] FAULT_INJECTION: forcing a failure.
[ 1727.001369][T30526] name failslab, interval 1, probability 0, space 0, times 0
[ 1727.007243][T30526] CPU: 0 UID: 0 PID: 30526 Comm: syz.5.6002 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1727.007273][T30526] Tainted: [L]=SOFTLOCKUP
[ 1727.007280][T30526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1727.007292][T30526] Call Trace:
[ 1727.007299][T30526]  <TASK>
[ 1727.007308][T30526]  dump_stack_lvl+0x100/0x190
[ 1727.007336][T30526]  should_fail_ex.cold+0x5/0xa
[ 1727.007355][T30526]  ? radix_tree_node_alloc.constprop.0+0x1a2/0x340
[ 1727.007384][T30526]  ? virtqueue_add_split+0x25c/0x1d30
[ 1727.007438][T30526]  should_failslab+0xc2/0x120
[ 1727.007461][T30526]  __kmalloc_noprof+0xe0/0x850
[ 1727.007478][T30526]  ? __pfx_p9pdu_vwritef+0x10/0x10
[ 1727.007527][T30526]  virtqueue_add_split+0x25c/0x1d30
[ 1727.007565][T30526]  ? __pfx_virtqueue_add_split+0x10/0x10
[ 1727.007591][T30526]  ? lock_acquire+0x1b1/0x370
[ 1727.007610][T30526]  ? find_held_lock+0x2b/0x80
[ 1727.007632][T30526]  ? __virt_addr_valid+0x22a/0x430
[ 1727.007659][T30526]  ? __virt_addr_valid+0x22a/0x430
[ 1727.007690][T30526]  virtqueue_add_sgs+0x207/0x2b0
[ 1727.007725][T30526]  p9_virtio_request+0x26d/0x6d0
[ 1727.007769][T30526]  ? __pfx_p9_virtio_request+0x10/0x10
[ 1727.007795][T30526]  ? p9_client_prepare_req+0x112/0x4e0
[ 1727.007817][T30526]  ? __pfx_p9_client_prepare_req+0x10/0x10
[ 1727.007836][T30526]  ? alloc_bprm+0x2d/0x710
[ 1727.007857][T30526]  ? __lock_acquire+0x4a5/0x2630
[ 1727.007880][T30526]  p9_client_rpc+0x359/0xc80
[ 1727.007903][T30526]  ? __pfx_p9_client_rpc+0x10/0x10
[ 1727.007923][T30526]  ? idr_alloc_u32+0x22b/0x320
[ 1727.007954][T30526]  ? __pfx_idr_alloc_u32+0x10/0x10
[ 1727.007982][T30526]  ? find_held_lock+0x2b/0x80
[ 1727.008005][T30526]  ? p9_fid_create+0x26d/0x460
[ 1727.008024][T30526]  ? rcu_is_watching+0x12/0xc0
[ 1727.008046][T30526]  ? trace_9p_fid_ref+0x74/0x200
[ 1727.008068][T30526]  p9_client_walk+0x1ab/0x530
[ 1727.008092][T30526]  ? __pfx_p9_client_walk+0x10/0x10
[ 1727.008114][T30526]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1727.008137][T30526]  ? v9fs_fid_lookup+0xec/0xec0
[ 1727.008188][T30526]  v9fs_vfs_lookup+0x206/0x5b0
[ 1727.008217][T30526]  ? __pfx_v9fs_vfs_lookup+0x10/0x10
[ 1727.008254][T30526]  v9fs_vfs_atomic_open_dotl+0x87e/0xd90
[ 1727.008273][T30526]  ? d_alloc_parallel+0xb4e/0x14e0
[ 1727.008296][T30526]  ? __pfx_v9fs_vfs_atomic_open_dotl+0x10/0x10
[ 1727.008317][T30526]  ? finish_dput+0x270/0x480
[ 1727.008352][T30526]  ? find_held_lock+0x2b/0x80
[ 1727.008374][T30526]  ? __d_lookup+0x25c/0x4a0
[ 1727.008393][T30526]  ? __pfx_d_alloc_parallel+0x10/0x10
[ 1727.008419][T30526]  atomic_open+0x179/0x430
[ 1727.008445][T30526]  ? __pfx_v9fs_vfs_atomic_open_dotl+0x10/0x10
[ 1727.008468][T30526]  lookup_open.isra.0+0x46b/0x11b0
[ 1727.008493][T30526]  ? __pfx_lookup_open.isra.0+0x10/0x10
[ 1727.008530][T30526]  ? lookup_fast+0x2da/0x600
[ 1727.008552][T30526]  path_openat+0xa98/0x31a0
[ 1727.008585][T30526]  ? __pfx_path_openat+0x10/0x10
[ 1727.008612][T30526]  ? stack_trace_save+0x8e/0xc0
[ 1727.008637][T30526]  ? __pfx_stack_trace_save+0x10/0x10
[ 1727.008665][T30526]  do_file_open+0x20e/0x430
[ 1727.008691][T30526]  ? __pfx_do_file_open+0x10/0x10
[ 1727.008713][T30526]  ? kasan_save_stack+0x30/0x50
[ 1727.008731][T30526]  ? kasan_save_track+0x14/0x30
[ 1727.008752][T30526]  ? __kasan_slab_alloc+0x89/0x90
[ 1727.008800][T30526]  do_open_execat+0xd1/0x360
[ 1727.008820][T30526]  ? __pfx_do_open_execat+0x10/0x10
[ 1727.008841][T30526]  ? __might_fault+0xc5/0x140
[ 1727.008887][T30526]  ? __might_fault+0xc5/0x140
[ 1727.008921][T30526]  alloc_bprm+0x2d/0x710
[ 1727.008944][T30526]  do_execveat_common.isra.0+0x19c/0x580
[ 1727.008966][T30526]  ? do_getname+0x191/0x390
[ 1727.008994][T30526]  __ia32_compat_sys_execve+0x9c/0xd0
[ 1727.009018][T30526]  __do_fast_syscall_32+0xe7/0x950
[ 1727.009038][T30526]  ? lockdep_hardirqs_on+0x78/0x100
[ 1727.009058][T30526]  do_fast_syscall_32+0x32/0x70
[ 1727.009078][T30526]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1727.009101][T30526] RIP: 0023:0xf6feef7c
[ 1727.009118][T30526] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1727.009135][T30526] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 000000000000000b
[ 1727.009154][T30526] RAX: ffffffffffffffda RBX: 0000000080000740 RCX: 0000000000000000
[ 1727.009166][T30526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1727.009177][T30526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1727.009188][T30526] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1727.009198][T30526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1727.009222][T30526]  </TASK>
[ 1727.350012][ T5828] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[ 1735.205657][T30550] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1735.309910][T30552] syzkaller0: entered promiscuous mode
[ 1735.311933][T30552] syzkaller0: entered allmulticast mode
[ 1735.408483][T30551] netlink: 'syz.0.6004': attribute type 1 has an invalid length.
[ 1735.421603][T30551] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1735.443456][T30551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6004'.
[ 1735.891771][T30568] lo speed is unknown, defaulting to 1000
[ 1736.757301][T30585] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[ 1736.916322][T30594] binder: BINDER_SET_CONTEXT_MGR already set
[ 1736.918284][T30594] binder: 30592:30594 ioctl 4018620d 80000040 returned -16
[ 1736.929298][T12731] usb 11-1: new high-speed USB device number 41 using dummy_hcd
[ 1737.035023][T30600] netlink: 'syz.5.6016': attribute type 1 has an invalid length.
[ 1737.078582][T30600] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1737.092431][T12731] usb 11-1: Using ep0 maxpacket: 16
[ 1737.096781][T12731] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[ 1737.120781][T12731] usb 11-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[ 1737.122572][T30605] netlink: 'syz.0.6015': attribute type 1 has an invalid length.
[ 1737.123785][T30600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6016'.
[ 1737.124859][T12731] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1737.124947][T12731] usb 11-1: Product: syz
[ 1737.124957][T12731] usb 11-1: Manufacturer: syz
[ 1737.124965][T12731] usb 11-1: SerialNumber: syz
[ 1737.147429][T12731] usb 11-1: config 0 descriptor??
[ 1737.158626][T12731] hub 11-1:0.0: bad descriptor, ignoring hub
[ 1737.164187][T12731] hub 11-1:0.0: probe with driver hub failed with error -5
[ 1737.166079][T30605] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6015'.
[ 1737.167557][T12731] usb 11-1: Quirk or no altset; falling back to MIDI 1.0
[ 1737.479834][T12731] usb 11-1: USB disconnect, device number 41
[ 1738.782109][   T54] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[ 1739.056909][T30626] udevd[30626]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1739.135538][T30631] lo speed is unknown, defaulting to 1000
[ 1750.613114][T30651] netlink: 'syz.0.6021': attribute type 1 has an invalid length.
[ 1750.645600][T30651] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1750.835222][T30651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6021'.
[ 1750.950215][T30665] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[ 1751.273014][T30652] IPVS: stopping master sync thread 30665 ...
[ 1751.354717][T30671] binder: BINDER_SET_CONTEXT_MGR already set
[ 1751.357545][T30671] binder: 30670:30671 ioctl 4018620d 80000040 returned -16
[ 1751.499588][T18899] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 1751.722993][T30685] lo speed is unknown, defaulting to 1000
[ 1751.859042][T20965] usb 11-1: new high-speed USB device number 42 using dummy_hcd
[ 1752.029017][T20965] usb 11-1: Using ep0 maxpacket: 16
[ 1752.032031][T20965] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[ 1752.037558][T20965] usb 11-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[ 1752.050036][T20965] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1752.055172][T20965] usb 11-1: Product: syz
[ 1752.056661][T20965] usb 11-1: Manufacturer: syz
[ 1752.060931][T20965] usb 11-1: SerialNumber: syz
[ 1752.066752][T20965] usb 11-1: config 0 descriptor??
[ 1752.072047][T20965] hub 11-1:0.0: bad descriptor, ignoring hub
[ 1752.076141][T20965] hub 11-1:0.0: probe with driver hub failed with error -5
[ 1752.083070][T20965] usb 11-1: Quirk or no altset; falling back to MIDI 1.0
[ 1752.385639][T20965] usb 11-1: USB disconnect, device number 42
[ 1752.849237][ T5848] usb 5-1: new low-speed USB device number 85 using dummy_hcd
[ 1752.982696][T30708] IPVS: Error connecting to the multicast addr
[ 1753.011878][ T5848] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1753.016986][ T5848] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1753.025090][ T5848] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1753.033500][ T5848] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1753.041438][ T5848] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1753.057506][ T5848] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1753.063196][ T5848] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1753.070648][ T5848] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1753.077504][ T5848] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1753.083473][ T5848] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1753.092348][ T5848] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1753.095743][ T5848] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1753.103578][ T5848] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1753.111894][ T5848] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1753.117102][ T5848] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1753.130339][ T5848] usb 5-1: string descriptor 0 read error: -22
[ 1753.134629][ T5848] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1753.137576][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1753.153871][ T5848] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1753.777308][T30724] netlink: 'syz.5.6036': attribute type 1 has an invalid length.
[ 1753.806155][T30724] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1753.822741][T30724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6036'.
[ 1754.122161][T30699] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1755.006710][T30744] lo speed is unknown, defaulting to 1000
[ 1755.034868][T25189] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[ 1755.091590][T30750] binder: BINDER_SET_CONTEXT_MGR already set
[ 1755.099288][T30750] binder: 30749:30750 ioctl 4018620d 80000040 returned -16
[ 1757.179975][ T5848] usb 5-1: USB disconnect, device number 85
[ 1761.622442][T30777] binder: 30774:30777 ioctl c0306201 80000080 returned -14
[ 1762.858967][T30793] binder: 30780:30793 ioctl 400454ce 0 returned -22
[ 1762.882587][T30793] binder_alloc: 30780: pid 30780 spamming oneway? 1 buffers allocated for a total size of 4096
[ 1762.967852][T30793] binder_alloc: 30780: pid 30780 spamming oneway? 2 buffers allocated for a total size of 5120
[ 1762.980455][T30793] binder: 30780:30793 ioctl 530e 80000b80 returned -22
[ 1763.117524][T30789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6049'.
[ 1763.590120][ T5887] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[ 1763.719871][ T5887] usb 11-1: new high-speed USB device number 43 using dummy_hcd
[ 1763.842884][T30804] IPVS: stopping master sync thread 30585 ...
[ 1763.879223][ T5887] usb 11-1: Using ep0 maxpacket: 16
[ 1763.884686][ T5887] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[ 1763.893054][ T5887] usb 11-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[ 1763.896999][ T5887] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1763.901481][T30815] netlink: 'syz.8.6053': attribute type 1 has an invalid length.
[ 1763.904163][ T5887] usb 11-1: Product: syz
[ 1763.905849][ T5887] usb 11-1: Manufacturer: syz
[ 1763.910398][ T5887] usb 11-1: SerialNumber: syz
[ 1763.916848][ T5887] usb 11-1: config 0 descriptor??
[ 1763.922713][ T5887] hub 11-1:0.0: bad descriptor, ignoring hub
[ 1763.925060][ T5887] hub 11-1:0.0: probe with driver hub failed with error -5
[ 1763.929585][ T5887] usb 11-1: Quirk or no altset; falling back to MIDI 1.0
[ 1763.963285][T30815] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1764.004166][T30815] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6053'.
[ 1764.267316][ T5887] usb 11-1: USB disconnect, device number 43
[ 1764.597212][T30831] udevd[30831]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1764.683567][    C2] hpet: Lost 1 RTC interrupts
[ 1765.031949][T30847] FAULT_INJECTION: forcing a failure.
[ 1765.031949][T30847] name failslab, interval 1, probability 0, space 0, times 0
[ 1765.036144][T30847] CPU: 0 UID: 0 PID: 30847 Comm: syz.5.6059 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1765.036177][T30847] Tainted: [L]=SOFTLOCKUP
[ 1765.036182][T30847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1765.036190][T30847] Call Trace:
[ 1765.036194][T30847]  <TASK>
[ 1765.036199][T30847]  dump_stack_lvl+0x100/0x190
[ 1765.036227][T30847]  should_fail_ex.cold+0x5/0xa
[ 1765.036244][T30847]  ? constrain_params_by_rules+0x175/0xcc0
[ 1765.036287][T30847]  should_failslab+0xc2/0x120
[ 1765.036301][T30847]  __kmalloc_noprof+0xe0/0x850
[ 1765.036315][T30847]  constrain_params_by_rules+0x175/0xcc0
[ 1765.036332][T30847]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1765.036350][T30847]  ? lockdep_hardirqs_on+0x78/0x100
[ 1765.036363][T30847]  ? __pfx_constrain_params_by_rules+0x10/0x10
[ 1765.036379][T30847]  ? __kasan_kmalloc+0xaa/0xb0
[ 1765.036390][T30847]  ? snd_pcm_oss_change_params_locked+0x247/0x39f0
[ 1765.036410][T30847]  ? snd_pcm_oss_make_ready_locked+0xb7/0x130
[ 1765.036432][T30847]  ? snd_pcm_oss_read+0x3d4/0x730
[ 1765.036453][T30847]  ? rcu_is_watching+0x12/0xc0
[ 1765.036473][T30847]  ? snd_interval_refine+0x2d0/0x580
[ 1765.036491][T30847]  snd_pcm_hw_refine+0x7e7/0xad0
[ 1765.036507][T30847]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[ 1765.036524][T30847]  ? __asan_memset+0x23/0x50
[ 1765.036541][T30847]  ? _snd_pcm_hw_param_min+0x1ea/0x670
[ 1765.036561][T30847]  snd_pcm_oss_change_params_locked+0x2594/0x39f0
[ 1765.036585][T30847]  ? snd_pcm_oss_read+0x3b2/0x730
[ 1765.036596][T30847]  ? _kstrtoull+0x13c/0x1f0
[ 1765.036612][T30847]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[ 1765.036632][T30847]  ? __pfx___mutex_lock+0x10/0x10
[ 1765.036648][T30847]  ? import_ubuf+0x1b6/0x220
[ 1765.036663][T30847]  snd_pcm_oss_make_ready_locked+0xb7/0x130
[ 1765.036682][T30847]  ? __pfx_snd_pcm_oss_read+0x10/0x10
[ 1765.036693][T30847]  snd_pcm_oss_read+0x3d4/0x730
[ 1765.036707][T30847]  ? __pfx_snd_pcm_oss_read+0x10/0x10
[ 1765.036718][T30847]  vfs_readv+0x5d8/0x8d0
[ 1765.036735][T30847]  ? __pfx_vfs_readv+0x10/0x10
[ 1765.036756][T30847]  ? __fget_files+0x21f/0x3d0
[ 1765.036773][T30847]  ? do_readv+0x13e/0x340
[ 1765.036784][T30847]  do_readv+0x13e/0x340
[ 1765.036796][T30847]  ? __pfx_do_readv+0x10/0x10
[ 1765.036807][T30847]  ? ksys_write+0x1ac/0x250
[ 1765.036821][T30847]  ? rcu_is_watching+0x12/0xc0
[ 1765.036836][T30847]  __do_fast_syscall_32+0xe7/0x950
[ 1765.036848][T30847]  ? lockdep_hardirqs_on+0x78/0x100
[ 1765.036860][T30847]  do_fast_syscall_32+0x32/0x70
[ 1765.036872][T30847]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1765.036886][T30847] RIP: 0023:0xf6feef7c
[ 1765.036896][T30847] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1765.036911][T30847] RSP: 002b:00000000f53bc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000091
[ 1765.036929][T30847] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800001c0
[ 1765.036938][T30847] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[ 1765.036945][T30847] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1765.036952][T30847] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1765.036959][T30847] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1765.036973][T30847]  </TASK>
[ 1765.820121][T25189] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[ 1773.788859][T30869] binder_alloc: 30867: pid 30867 spamming oneway? 1 buffers allocated for a total size of 4096
[ 1774.343648][T30872] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6063'.
[ 1775.140225][T30885] syzkaller0: entered promiscuous mode
[ 1775.142016][T30885] syzkaller0: entered allmulticast mode
[ 1775.180613][    C2] hpet: Lost 1 RTC interrupts
[ 1775.198782][T30889] netlink: 'syz.6.6067': attribute type 1 has an invalid length.
[ 1775.250402][T30889] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1775.310053][T30889] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6067'.
[ 1775.837279][T30854] Bluetooth: hci3: unexpected event for opcode 0x204e
[ 1775.859578][   T24] e1000 0000:00:06.0 eth0: Reset adapter
[ 1775.995737][T30903] bridge0: port 4(syz_tun) entered blocking state
[ 1775.997833][T30903] bridge0: port 4(syz_tun) entered disabled state
[ 1776.014244][T30903] syz_tun: entered allmulticast mode
[ 1776.022885][T30903] syz_tun: entered promiscuous mode
[ 1776.031046][T30903] bridge0: port 4(syz_tun) entered blocking state
[ 1776.033170][T30903] bridge0: port 4(syz_tun) entered forwarding state
[ 1776.041821][T30904] IPVS: Error connecting to the multicast addr
[ 1776.128997][T15745] usb 10-1: new high-speed USB device number 79 using dummy_hcd
[ 1776.161955][   T24] e1000 0000:00:06.0 eth0: Reset adapter
[ 1776.310036][   T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[ 1776.319006][T15745] usb 10-1: Using ep0 maxpacket: 16
[ 1776.322891][T15745] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[ 1776.328053][T15745] usb 10-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[ 1776.331062][T15745] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1776.333682][T15745] usb 10-1: Product: syz
[ 1776.335074][T15745] usb 10-1: Manufacturer: syz
[ 1776.336679][T15745] usb 10-1: SerialNumber: syz
[ 1776.344174][T15745] usb 10-1: config 0 descriptor??
[ 1776.350477][T15745] hub 10-1:0.0: bad descriptor, ignoring hub
[ 1776.352631][T15745] hub 10-1:0.0: probe with driver hub failed with error -5
[ 1776.356159][T15745] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[ 1777.114372][T15745] usb 10-1: USB disconnect, device number 79
[ 1777.740961][T30936] binder: BINDER_SET_CONTEXT_MGR already set
[ 1777.742902][T30936] binder: 30935:30936 ioctl 4018620d 80000040 returned -16
[ 1780.788289][T30967] binder: BINDER_SET_CONTEXT_MGR already set
[ 1780.799122][T30967] binder: 30966:30967 ioctl 4018620d 80000040 returned -16
[ 1780.979497][   T24] e1000 0000:00:06.0 eth0: Reset adapter
[ 1781.150725][T30983] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[ 1781.256450][   T24] e1000 0000:00:06.0 eth0: Reset adapter
[ 1781.289178][T19484] usb 13-1: new high-speed USB device number 22 using dummy_hcd
[ 1781.316904][T30980] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6089'.
[ 1781.449069][T19484] usb 13-1: Using ep0 maxpacket: 16
[ 1781.458398][T19484] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[ 1781.468284][T19484] usb 13-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[ 1781.475716][T19484] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1781.485207][T19484] usb 13-1: Product: syz
[ 1781.486548][T19484] usb 13-1: Manufacturer: syz
[ 1781.493071][T19484] usb 13-1: SerialNumber: syz
[ 1781.500422][T19484] usb 13-1: config 0 descriptor??
[ 1781.515329][T19484] hub 13-1:0.0: bad descriptor, ignoring hub
[ 1781.524166][T19484] hub 13-1:0.0: probe with driver hub failed with error -5
[ 1781.531096][T19484] usb 13-1: Quirk or no altset; falling back to MIDI 1.0
[ 1781.663842][T30989] genirq: Flags mismatch irq 19. 00200000 (pcmmio) vs. 00200080 (ehci_hcd:usb1)
[ 1782.214381][T30993] lo speed is unknown, defaulting to 1000
[ 1782.349207][   T24] usb 13-1: USB disconnect, device number 22
[ 1783.419989][ T5828] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[ 1783.563259][T30993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6091'.
[ 1783.617472][T30996] lo: Caught tx_queue_len zero misconfig
[ 1791.401635][T31040] netlink: 'syz.6.6097': attribute type 1 has an invalid length.
[ 1791.417801][T31040] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1791.631755][T31040] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6097'.
[ 1792.239817][T31036] block nbd44: shutting down sockets
[ 1792.471628][T31061] binder: 31059:31061 ioctl c0306201 0 returned -14
[ 1792.598671][T31063] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[ 1792.605194][   T54] e1000 0000:00:06.0 eth0: Reset adapter
[ 1792.624461][T31058] IPVS: stopping master sync thread 31063 ...
[ 1793.540823][T24867] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[ 1793.723455][T24867] usb 5-1: Using ep0 maxpacket: 16
[ 1793.728379][T24867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[ 1793.765343][T24867] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[ 1793.769156][T24867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1793.772417][T24867] usb 5-1: Product: syz
[ 1793.774191][T24867] usb 5-1: Manufacturer: syz
[ 1793.776138][T24867] usb 5-1: SerialNumber: syz
[ 1794.038152][T24867] usb 5-1: config 0 descriptor??
[ 1794.042795][T24867] hub 5-1:0.0: bad descriptor, ignoring hub
[ 1794.045916][T24867] hub 5-1:0.0: probe with driver hub failed with error -5
[ 1794.050379][T24867] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1794.251835][T31106] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6107'.
[ 1794.295292][T31102] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6)
[ 1794.297371][T31102] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1794.330883][T24867] usb 5-1: USB disconnect, device number 86
[ 1794.341984][T31102] vhci_hcd vhci_hcd.0: Device attached
[ 1794.362428][T31106] EXT4-fs (sr0): VFS: Can't find ext4 filesystem
[ 1794.496615][T31106] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[ 1794.619333][ T5848] usb 54-1: SetAddress Request (6) to port 0
[ 1794.621513][ T5848] usb 54-1: new SuperSpeed USB device number 6 using vhci_hcd
[ 1794.995746][T31107] vhci_hcd: connection reset by peer
[ 1795.013751][ T9291] vhci_hcd vhci_hcd.8: stop threads
[ 1795.015743][ T9291] vhci_hcd vhci_hcd.8: release socket
[ 1795.017728][ T9291] vhci_hcd vhci_hcd.8: disconnect device
[ 1795.113119][   T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[ 1799.659031][ T5848] usb 54-1: device descriptor read/8, error -110
[ 1800.050909][ T5848] usb usb54-port1: attempt power cycle
[ 1800.620499][ T5848] usb usb54-port1: unable to enumerate USB device
[ 1806.485153][T31136] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1806.548439][T31130] netlink: 'syz.0.6109': attribute type 1 has an invalid length.
[ 1806.576250][T31130] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1806.605388][T31130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6109'.
[ 1807.163094][T31151] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1807.506468][T31158] netlink: 'syz.5.6115': attribute type 1 has an invalid length.
[ 1807.533947][T31158] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1807.565175][T31158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6115'.
[ 1807.742468][T31160] syzkaller0: entered promiscuous mode
[ 1807.744221][T31160] syzkaller0: entered allmulticast mode
[ 1808.958417][T31185] syz_tun: entered allmulticast mode
[ 1808.960566][T19500] usb 11-1: new high-speed USB device number 44 using dummy_hcd
[ 1809.750005][T31182] syz_tun: left allmulticast mode
[ 1809.813180][T19500] usb 11-1: unable to get BOS descriptor or descriptor too short
[ 1809.818510][T19500] usb 11-1: unable to read config index 0 descriptor/start: -71
[ 1809.823064][T19500] usb 11-1: can't read configurations, error -71
[ 1809.839297][T31190] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1810.759048][T31209] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1811.484148][T31224] QAT: Device 253 not found
[ 1812.897816][T31243] kAFS: No cell specified
[ 1812.918703][T31246] binder: 31244:31246 ioctl c0306201 0 returned -14
[ 1813.090042][   T54] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 1813.354150][ T5814] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[ 1813.499224][ T5814] usb 5-1: Using ep0 maxpacket: 16
[ 1813.502638][ T5814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[ 1813.514054][ T5814] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[ 1813.518652][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1813.523502][ T5814] usb 5-1: Product: syz
[ 1813.525194][ T5814] usb 5-1: Manufacturer: syz
[ 1813.527150][ T5814] usb 5-1: SerialNumber: syz
[ 1813.547737][ T5814] usb 5-1: config 0 descriptor??
[ 1813.633281][ T5814] hub 5-1:0.0: bad descriptor, ignoring hub
[ 1813.635453][ T5814] hub 5-1:0.0: probe with driver hub failed with error -5
[ 1813.647320][ T5814] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1813.726859][T31254] ==================================================================
[ 1813.729622][T31254] BUG: KASAN: slab-out-of-bounds in blk_mq_free_rqs+0x6e2/0x760
[ 1813.732035][T31254] Read of size 8 at addr ffff8880743bf928 by task syz.8.6135/31254
[ 1813.735289][T31254] 
[ 1813.736725][T31254] CPU: 2 UID: 0 PID: 31254 Comm: syz.8.6135 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1813.736743][T31254] Tainted: [L]=SOFTLOCKUP
[ 1813.736748][T31254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1813.736756][T31254] Call Trace:
[ 1813.736761][T31254]  <TASK>
[ 1813.736766][T31254]  dump_stack_lvl+0x100/0x190
[ 1813.736780][T31254]  print_report+0x13d/0x4b0
[ 1813.736797][T31254]  ? __virt_addr_valid+0x239/0x430
[ 1813.736819][T31254]  ? blk_mq_free_rqs+0x6e2/0x760
[ 1813.736833][T31254]  kasan_report+0xdf/0x1d0
[ 1813.736847][T31254]  ? blk_mq_free_rqs+0x6e2/0x760
[ 1813.736863][T31254]  blk_mq_free_rqs+0x6e2/0x760
[ 1813.736879][T31254]  blk_mq_free_map_and_rqs+0x30/0x120
[ 1813.736895][T31254]  blk_mq_alloc_sched_tags+0x259/0x350
[ 1813.736910][T31254]  blk_mq_alloc_sched_res+0x8e/0x250
[ 1813.736924][T31254]  blk_mq_alloc_sched_res_batch+0xfc/0x4f0
[ 1813.736939][T31254]  blk_mq_update_nr_hw_queues+0x263/0x15f0
[ 1813.736955][T31254]  ? nbd_start_device+0x19b/0xbd0
[ 1813.737005][T31254]  ? __mutex_unlock_slowpath+0x15d/0x8a0
[ 1813.737018][T31254]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[ 1813.737036][T31254]  ? __pfx_sysfs_create_file_ns+0x10/0x10
[ 1813.737049][T31254]  nbd_start_device+0x1a6/0xbd0
[ 1813.737066][T31254]  nbd_genl_connect+0xff2/0x1a40
[ 1813.737082][T31254]  ? __pfx_nbd_genl_connect+0x10/0x10
[ 1813.737097][T31254]  ? __nla_parse+0x40/0x60
[ 1813.737118][T31254]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0
[ 1813.737133][T31254]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[ 1813.737147][T31254]  genl_family_rcv_msg_doit+0x214/0x300
[ 1813.737159][T31254]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1813.737171][T31254]  ? genl_get_cmd+0x3e7/0x760
[ 1813.737183][T31254]  ? __alloc_skb+0x185/0x710
[ 1813.737197][T31254]  ? netlink_alloc_large_skb+0x69/0x150
[ 1813.737214][T31254]  ? __radix_tree_lookup+0x217/0x2b0
[ 1813.737230][T31254]  genl_rcv_msg+0x560/0x800
[ 1813.737243][T31254]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1813.737254][T31254]  ? __pfx_nbd_genl_connect+0x10/0x10
[ 1813.737270][T31254]  ? __lock_acquire+0x4a5/0x2630
[ 1813.737282][T31254]  netlink_rcv_skb+0x159/0x420
[ 1813.737299][T31254]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1813.737310][T31254]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1813.737329][T31254]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1813.737346][T31254]  genl_rcv+0x28/0x40
[ 1813.737356][T31254]  netlink_unicast+0x585/0x850
[ 1813.737373][T31254]  ? __pfx_netlink_unicast+0x10/0x10
[ 1813.737392][T31254]  netlink_sendmsg+0x8b0/0xda0
[ 1813.737410][T31254]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1813.737427][T31254]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1813.737446][T31254]  ____sys_sendmsg+0x9e1/0xb70
[ 1813.737463][T31254]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1813.737480][T31254]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1813.737496][T31254]  ? __pfx___futex_wait+0x10/0x10
[ 1813.737512][T31254]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1813.737527][T31254]  ___sys_sendmsg+0x190/0x1e0
[ 1813.737538][T31254]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1813.737551][T31254]  ? find_held_lock+0x2b/0x80
[ 1813.737568][T31254]  __sys_sendmsg+0x170/0x220
[ 1813.737582][T31254]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1813.737595][T31254]  ? __ia32_sys_futex_time32+0x2f4/0x470
[ 1813.737612][T31254]  ? rcu_is_watching+0x12/0xc0
[ 1813.737626][T31254]  __do_fast_syscall_32+0xe7/0x950
[ 1813.737638][T31254]  ? lockdep_hardirqs_on+0x78/0x100
[ 1813.737649][T31254]  do_fast_syscall_32+0x32/0x70
[ 1813.737660][T31254]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1813.737675][T31254] RIP: 0023:0xf7ff6f7c
[ 1813.737684][T31254] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1813.737696][T31254] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1813.737709][T31254] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080001ac0
[ 1813.737716][T31254] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000
[ 1813.737723][T31254] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1813.737730][T31254] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1813.737737][T31254] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1813.737747][T31254]  </TASK>
[ 1813.737752][T31254] 
[ 1813.866256][T31254] Allocated by task 31254:
[ 1813.867647][T31254]  kasan_save_stack+0x30/0x50
[ 1813.869168][T31254]  kasan_save_track+0x14/0x30
[ 1813.870632][T31254]  __kasan_kmalloc+0xaa/0xb0
[ 1813.872081][T31254]  __kmalloc_node_noprof+0x307/0x850
[ 1813.873730][T31254]  blk_mq_alloc_tag_set+0x477/0x1330
[ 1813.875419][T31254]  nbd_dev_add+0x342/0xb10
[ 1813.876817][T31254]  nbd_genl_connect+0xb8d/0x1a40
[ 1813.878374][T31254]  genl_family_rcv_msg_doit+0x214/0x300
[ 1813.880093][T31254]  genl_rcv_msg+0x560/0x800
[ 1813.881529][T31254]  netlink_rcv_skb+0x159/0x420
[ 1813.883048][T31254]  genl_rcv+0x28/0x40
[ 1813.884314][T31254]  netlink_unicast+0x585/0x850
[ 1813.885851][T31254]  netlink_sendmsg+0x8b0/0xda0
[ 1813.887346][T31254]  ____sys_sendmsg+0x9e1/0xb70
[ 1813.888849][T31254]  ___sys_sendmsg+0x190/0x1e0
[ 1813.890317][T31254]  __sys_sendmsg+0x170/0x220
[ 1813.891757][T31254]  __do_fast_syscall_32+0xe7/0x950
[ 1813.893357][T31254]  do_fast_syscall_32+0x32/0x70
[ 1813.894868][T31254]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1813.896896][T31254] 
[ 1813.897678][T31254] The buggy address belongs to the object at ffff8880743bf920
[ 1813.897678][T31254]  which belongs to the cache kmalloc-8 of size 8
[ 1813.901830][T31254] The buggy address is located 0 bytes to the right of
[ 1813.901830][T31254]  allocated 8-byte region [ffff8880743bf920, ffff8880743bf928)
[ 1813.906193][T31254] 
[ 1813.906954][T31254] The buggy address belongs to the physical page:
[ 1813.908931][T31254] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880743bfd60 pfn:0x743bf
[ 1813.912018][T31254] flags: 0x4fff00000000200(workingset|node=1|zone=1|lastcpupid=0x7ff)
[ 1813.914509][T31254] page_type: f5(slab)
[ 1813.915833][T31254] raw: 04fff00000000200 ffff88801b842500 ffffea0001a9b1d0 ffffea0001d52d50
[ 1813.918500][T31254] raw: ffff8880743bfd60 000000080080007f 00000000f5000000 0000000000000000
[ 1813.921123][T31254] page dumped because: kasan: bad access detected
[ 1813.923096][T31254] page_owner tracks the page as allocated
[ 1813.924863][T31254] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 26167, tgid 26167 (syz-executor), ts 1776184437507, free_ts 1776184428391
[ 1813.931238][T31254]  post_alloc_hook+0xfd/0x120
[ 1813.932723][T31254]  get_page_from_freelist+0x11a6/0x33b0
[ 1813.934438][T31254]  __alloc_frozen_pages_noprof+0x632/0x2bc0
[ 1813.936307][T31254]  new_slab+0xa6/0x6c0
[ 1813.937621][T31254]  refill_objects+0x277/0x420
[ 1813.939088][T31254]  __pcs_replace_empty_main+0x375/0x650
[ 1813.940801][T31254]  __kmalloc_node_noprof+0x69a/0x850
[ 1813.942452][T31254]  __vmalloc_node_range_noprof+0x409/0x1630
[ 1813.944287][T31254]  __vmalloc_node_noprof+0xad/0xf0
[ 1813.945919][T31254]  xt_compat_init_offsets+0xe2/0x1f0
[ 1813.947532][T31254]  compat_table_info+0xc5/0x640
[ 1813.949055][T31254]  get_info+0x25c/0x5d0
[ 1813.950359][T31254]  do_ip6t_get_ctl+0x169/0xa50
[ 1813.951846][T31254]  nf_getsockopt+0x7c/0xe0
[ 1813.953251][T31254]  ipv6_getsockopt+0x207/0x2a0
[ 1813.954895][T31254]  tcp_getsockopt+0xa1/0x110
[ 1813.956420][T31254] page last free pid 26167 tgid 26167 stack trace:
[ 1813.958388][T31254]  __free_frozen_pages+0x747/0x1040
[ 1813.959996][T31254]  __kasan_populate_vmalloc+0x1ea/0x210
[ 1813.961768][T31254]  alloc_vmap_area+0x95d/0x2b70
[ 1813.963305][T31254]  __get_vm_area_node+0x1ca/0x330
[ 1813.964885][T31254]  __vmalloc_node_range_noprof+0x228/0x1630
[ 1813.966758][T31254]  __vmalloc_node_noprof+0xad/0xf0
[ 1813.968352][T31254]  xt_compat_init_offsets+0xe2/0x1f0
[ 1813.969996][T31254]  compat_table_info+0xc5/0x640
[ 1813.971515][T31254]  get_info+0x25c/0x5d0
[ 1813.972847][T31254]  do_ip6t_get_ctl+0x169/0xa50
[ 1813.974342][T31254]  nf_getsockopt+0x7c/0xe0
[ 1813.975820][T31254]  ipv6_getsockopt+0x207/0x2a0
[ 1813.977388][T31254]  tcp_getsockopt+0xa1/0x110
[ 1813.978830][T31254]  do_sock_getsockopt+0x50a/0x6e0
[ 1813.980396][T31254]  __sys_getsockopt+0x133/0x1d0
[ 1813.981917][T31254]  __ia32_compat_sys_socketcall+0x6af/0x770
[ 1813.983759][T31254] 
[ 1813.984532][T31254] Memory state around the buggy address:
[ 1813.986311][T31254]  ffff8880743bf800: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[ 1813.988764][T31254]  ffff8880743bf880: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[ 1813.991212][T31254] >ffff8880743bf900: 00 fc fc fc 00 fc fc fc 00 fc fc fc fa fc fc fc
[ 1813.993684][T31254]                                   ^
[ 1813.995365][T31254]  ffff8880743bf980: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[ 1813.997818][T31254]  ffff8880743bfa00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[ 1814.000262][T31254] ==================================================================
[ 1814.023598][T31254] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1814.025978][T31254] CPU: 2 UID: 0 PID: 31254 Comm: syz.8.6135 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1814.029311][T31254] Tainted: [L]=SOFTLOCKUP
[ 1814.030649][T31254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1814.033763][T31254] Call Trace:
[ 1814.034810][T31254]  <TASK>
[ 1814.035772][T31254]  dump_stack_lvl+0x100/0x190
[ 1814.037255][T31254]  vpanic+0x552/0x970
[ 1814.038638][T31254]  ? __pfx_vpanic+0x10/0x10
[ 1814.040169][T31254]  ? blk_mq_free_rqs+0x6e2/0x760
[ 1814.041710][T31254]  panic+0xd1/0xe0
[ 1814.042940][T31254]  ? __pfx_panic+0x10/0x10
[ 1814.044402][T31254]  ? blk_mq_free_rqs+0x6e2/0x760
[ 1814.045975][T31254]  ? preempt_schedule_common+0x42/0xc0
[ 1814.047672][T31254]  check_panic_on_warn.cold+0x19/0x34
[ 1814.049340][T31254]  end_report.part.0+0x3a/0x90
[ 1814.050835][T31254]  kasan_report.cold+0xe/0x18
[ 1814.052324][T31254]  ? blk_mq_free_rqs+0x6e2/0x760
[ 1814.053871][T31254]  blk_mq_free_rqs+0x6e2/0x760
[ 1814.055408][T31254]  blk_mq_free_map_and_rqs+0x30/0x120
[ 1814.057082][T31254]  blk_mq_alloc_sched_tags+0x259/0x350
[ 1814.058770][T31254]  blk_mq_alloc_sched_res+0x8e/0x250
[ 1814.060412][T31254]  blk_mq_alloc_sched_res_batch+0xfc/0x4f0
[ 1814.062240][T31254]  blk_mq_update_nr_hw_queues+0x263/0x15f0
[ 1814.064056][T31254]  ? nbd_start_device+0x19b/0xbd0
[ 1814.065662][T31254]  ? __mutex_unlock_slowpath+0x15d/0x8a0
[ 1814.067395][T31254]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[ 1814.069335][T31254]  ? __pfx_sysfs_create_file_ns+0x10/0x10
[ 1814.071092][T31254]  nbd_start_device+0x1a6/0xbd0
[ 1814.072635][T31254]  nbd_genl_connect+0xff2/0x1a40
[ 1814.074182][T31254]  ? __pfx_nbd_genl_connect+0x10/0x10
[ 1814.075886][T31254]  ? __nla_parse+0x40/0x60
[ 1814.077294][T31254]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0
[ 1814.079412][T31254]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[ 1814.081528][T31254]  genl_family_rcv_msg_doit+0x214/0x300
[ 1814.083258][T31254]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1814.085205][T31254]  ? genl_get_cmd+0x3e7/0x760
[ 1814.086671][T31254]  ? __alloc_skb+0x185/0x710
[ 1814.088130][T31254]  ? netlink_alloc_large_skb+0x69/0x150
[ 1814.089853][T31254]  ? __radix_tree_lookup+0x217/0x2b0
[ 1814.091494][T31254]  genl_rcv_msg+0x560/0x800
[ 1814.092914][T31254]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1814.094476][T31254]  ? __pfx_nbd_genl_connect+0x10/0x10
[ 1814.096238][T31254]  ? __lock_acquire+0x4a5/0x2630
[ 1814.097822][T31254]  netlink_rcv_skb+0x159/0x420
[ 1814.099322][T31254]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1814.100896][T31254]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1814.102546][T31254]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1814.104188][T31254]  genl_rcv+0x28/0x40
[ 1814.105474][T31254]  netlink_unicast+0x585/0x850
[ 1814.106970][T31254]  ? __pfx_netlink_unicast+0x10/0x10
[ 1814.108648][T31254]  netlink_sendmsg+0x8b0/0xda0
[ 1814.110149][T31254]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1814.111793][T31254]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1814.113547][T31254]  ____sys_sendmsg+0x9e1/0xb70
[ 1814.115078][T31254]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1814.116729][T31254]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1814.118370][T31254]  ? __pfx___futex_wait+0x10/0x10
[ 1814.119937][T31254]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1814.121584][T31254]  ___sys_sendmsg+0x190/0x1e0
[ 1814.123080][T31254]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1814.124719][T31254]  ? find_held_lock+0x2b/0x80
[ 1814.126222][T31254]  __sys_sendmsg+0x170/0x220
[ 1814.127665][T31254]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1814.129264][T31254]  ? __ia32_sys_futex_time32+0x2f4/0x470
[ 1814.131001][T31254]  ? rcu_is_watching+0x12/0xc0
[ 1814.132528][T31254]  __do_fast_syscall_32+0xe7/0x950
[ 1814.134123][T31254]  ? lockdep_hardirqs_on+0x78/0x100
[ 1814.135759][T31254]  do_fast_syscall_32+0x32/0x70
[ 1814.137287][T31254]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1814.139237][T31254] RIP: 0023:0xf7ff6f7c
[ 1814.140514][T31254] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1814.146475][T31254] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1814.149037][T31254] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080001ac0
[ 1814.151461][T31254] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000
[ 1814.153905][T31254] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1814.156487][T31254] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1814.158979][T31254] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1814.161422][T31254]  </TASK>
[ 1814.163151][T31254] Kernel Offset: disabled
[ 1814.164521][T31254] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:49:52  Registers:
info registers vcpu 0

CPU#0
RAX=0000000002cda23d RBX=ffffffff8e4955c0 RCX=ffffffff8b88c0b5 RDX=0000000000000000
RSI=ffffffff8df2076a RDI=ffffffff8c1c4400 RBP=0000000000000000 RSP=ffffffff8e407e00
R8 =0000000000000001 R9 =ffffed10056467b5 R10=ffff88802b233dab R11=0000000000000000
R12=0000000000000000 R13=fffffbfff1c92ab8 R14=0000000000000000 R15=ffffffff90d81750
RIP=ffffffff8b88a89f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888097171000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fc6fc2ce120 CR3=000000004bc7a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=000000000534c002 Opmask01=0000000004000000 Opmask02=00000000ffffffcc Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556590a33c50 0000556590a33c50
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd7336870 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 206f6e20726f206b 72697551203a312d 3520627375205d34 31383554205b5d30
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e6b636568632065 7361656c70202c6e 6f69746172756769 666e6f6320746e65
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 747369736e6f636e 69206e6120687469 77207466656c206e 6565622065766168
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2079616d20306d69 7376656474656e20 656361667265746e 49202e7964616572
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c61206465747469 6d6d6f6320736567 6e61686320656d6f 7320687469772064
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 574f5ec32b585ea1 a3a944d77e44de20 2020202020c49120 2020202020202045
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000080000000 RBX=0000000000000001 RCX=ffffffff824e4fde RDX=0000000000000001
RSI=0000000000000000 RDI=ffff8880224c0000 RBP=ffffc900046561b8 RSP=ffffc90004656070
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=0000000000000006 R13=0000000000000001 R14=0000000000000021 R15=ffff888000125d00
RIP=ffffffff820806ea RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888097271000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000055c5abe140e0 CR3=000000004bc7a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a900000000 0000000200000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff857c75e5 RDI=ffffffff9b468820 RBP=ffffffff9b4687e0 RSP=ffffc90004696b10
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3730383838666666
R12=0000000000000000 R13=0000000000000031 R14=0000000000000010 R15=ffffffff857c7580
RIP=ffffffff857c760f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888097371000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000055c5abe0f4e0 CR3=000000004bf73000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000003 RBX=ffffffff940c2da8 RCX=0000000000000003 RDX=ffffffff827d737f
RSI=ffffffff8c1c4380 RDI=ffffffff8e1d0938 RBP=0000000000000003 RSP=ffffc900021071d8
R8 =00000000aa5b8b02 R9 =0000000000000007 R10=0000000000000000 R11=0000000000000000
R12=0000000000000003 R13=ffff88807ffd6100 R14=0000000000000001 R15=0000000000000001
RIP=ffffffff81ec6e2c RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888097471000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000556954367208 CR3=000000004d296000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000