last executing test programs:

10.20279758s ago: executing program 3 (id=56):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x7d, &(0x7f0000019340), 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r2, &(0x7f0000000200), 0x10)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x7ffff}, &(0x7f0000019300), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
pipe2(&(0x7f0000000240), 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000840)='io\x00')
read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2100)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}})
readv(r3, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}})
mount$9p_fd(0x0, &(0x7f00000005c0)='./file0/file0/file0/file0/file0\x00', 0x0, 0x800040, 0x0)
umount2(&(0x7f0000000180)='./file0/file0/file0/file0/file0\x00', 0x0)
read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0x2020)
syz_fuse_handle_req(r6, 0x0, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)

7.949023048s ago: executing program 1 (id=59):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = syz_clone3(&(0x7f0000000500)={0x800, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340)=<r2=>0x0, {0x3}, &(0x7f0000000380)=""/33, 0x21, &(0x7f00000003c0)=""/145, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58)
prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x100048b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
getresgid(&(0x7f00000004c0), 0x0, &(0x7f00000005c0)=<r7=>0x0)
setregid(r6, r7)
syz_clone3(&(0x7f0000000800)={0x40000, &(0x7f0000000580), &(0x7f00000005c0)=<r8=>0x0, &(0x7f0000000640), {0x28}, &(0x7f0000000680)=""/211, 0xd3, &(0x7f0000000780)=""/19, &(0x7f00000007c0)=[r2, r1, 0xffffffffffffffff, r1, r1, r3], 0x6}, 0x58)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000880)={{0x2, 0x0, 0x0, r5, r6, 0x121, 0xb}, 0x0, 0x0, 0x80000, 0x40, 0x4, 0xa, 0xe, 0x5, 0x48, 0x2a58, r3, r8})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r9)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x50}}, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r10 = inotify_init1(0x800)
fcntl$setown(r10, 0x8, 0xffffffffffffffff)
fcntl$getownex(r10, 0x10, &(0x7f0000000140)={0x0, <r11=>0x0})
r12 = syz_open_procfs(r11, &(0x7f0000000600)='fd/4\x00')
ioctl$EXT4_IOC_GROUP_EXTEND(r12, 0x40305839, &(0x7f0000000240)=0x28084)

7.944303527s ago: executing program 3 (id=60):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x7d, &(0x7f0000019340), 0x8)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r2, &(0x7f0000000200), 0x10)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x7ffff}, &(0x7f0000019300), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
pipe2(&(0x7f0000000240), 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000840)='io\x00')
read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2100)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}})
readv(r3, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}})
mount$9p_fd(0x0, &(0x7f00000005c0)='./file0/file0/file0/file0/file0\x00', 0x0, 0x800040, 0x0)
umount2(&(0x7f0000000180)='./file0/file0/file0/file0/file0\x00', 0x0)
read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0x2020)
syz_fuse_handle_req(r6, 0x0, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)

7.719593049s ago: executing program 1 (id=62):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0)
close(r1)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00'})
sendmsg$nl_route(r0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x1}}, './file0\x00'})
ioctl$SNDCTL_DSP_GETCAPS(r3, 0x8004500f, &(0x7f0000000100))
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x690a, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100))
io_uring_setup(0x7058, &(0x7f0000000040))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x8001, 0x1, &(0x7f00000005c0)="161a1c999e82ee641a5be85d4fad33a898eaf64afb59089fb97729c7fc53d886b3d22461770c8096a7a169d8077712c1152d02dd767b03e0a9d32692ba9c76c82a369e4fbed6e7f0bfb7b68183dc2c96adae37fe36484190fa6941a725c0e406a05a3867d803ac747cac8e2149921efae823f92b2a16dd5825927166f3baf856fb470d006d04a9fd80a300d0a5a8c47e916138725d932ef748b8079a0c69f4835fc27629b50dd5000000fce5f4930d8105ded73ac1ac968c2271e8b3989d13f25f8b215e55106709df92e63f4217fe9caf8caf", 0x94eb, 0x0, 0x0, {0x3}})
pread64(0xffffffffffffffff, &(0x7f0000000040)=""/172, 0xac, 0x0)
getdents(0xffffffffffffffff, &(0x7f00000019c0)=""/252, 0xfc)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r7}, 0x38)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x3, 0x0, @empty}}, 0xfffffffc, 0x3, 0x989, 0x0, 0x10}, 0x9c)
sendmmsg$inet6(r4, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket(0x10, 0x3, 0x0)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r9}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x40}}, 0x0)

6.739805853s ago: executing program 2 (id=64):
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaadaf6cd9a270f88d11ca5e420f318bb0caaaabb86dd6012000800103afffe8000000000000084000000000000bbff020000000000000000907800000200000000db89a30df93b0000000000"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x20, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = gettid()
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3, 0x8b7a, 0x8000009, 0x2, 0xc0000000000, r1})
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
getresuid(&(0x7f0000000380), 0x0, &(0x7f0000000340)=<r2=>0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000ac0)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, [{0x6, 0x3, 0xf}, {0x2, 0x6c, 0x3}]})
ioprio_get$uid(0x3, r2)
socket(0x2c, 0x2, 0x800005)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r6, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')
linkat(r5, 0x0, r6, &(0x7f0000000180)='./bus\x00', 0x0)

6.642583567s ago: executing program 1 (id=65):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x0, 0x0, 0x8007, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
pipe(&(0x7f0000000040))
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f3ffffffff21e8ae50d0cf0dc0248fc51c340008000800000000000000005a1d2edab32de6d900000000000000db00"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x8000000003ff}, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000076e000/0x4000)=nil, 0x400000, 0x0, 0x2})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x14, 0xf, 0x1, 0x1, 0x2, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000017000000400006803c0004"], 0x54}}, 0x0)

5.707377676s ago: executing program 1 (id=66):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00'}, 0x18)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xf, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
msgsnd(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="000000000000000079e721320dbde265f68437ee4a98c9b810d18b95bad539a02b9f75bc6e8a403cfb865542394a99ff0f45791c02bbb9b9f74410ab8e072d75c033f52f870727dba1626b8b29edf33964e3bcba"], 0x54, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x60000, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x6100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff43)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$clear(0x11, 0xfffffffffffffffd)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000001600)={{0x1, 0x0, 0x80, {0x3000, 0x2000, 0x1}}, "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", "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"})
ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000100)={0xcbb9, 0x0, 0x5, 0xe, 0x93, 0xff})
r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0)
ioctl$I2C_PEC(r7, 0x708, 0x2)
ioctl$I2C_SMBUS(r7, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x3, &(0x7f0000000080)={0x0, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}})

5.610122487s ago: executing program 3 (id=67):
r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0)
socket$inet(0x2, 0x80002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x682e}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x4008800)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000000))
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f00000045c0)={0x2020}, 0x2020)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x9, @pix_mp={0x0, 0x0, 0x0, 0x8, 0x0, [{}, {}, {0x0, 0x20}], 0x0, 0x0, 0x8}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00', <r6=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r7 = io_uring_setup(0x5091, &(0x7f0000000040)={0x0, 0x2, 0x2})
r8 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$TCFLSH(r9, 0x5608, 0x1)
io_uring_register$IORING_UNREGISTER_FILES(r7, 0x3, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000008a00000000000000002500"], 0x48)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000d00)=ANY=[@ANYBLOB="eaaaaaaa00aaffffffffffe708004500001c00"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)

5.371292061s ago: executing program 0 (id=68):
ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet(r1, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4)
close(r1)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0408572356714e"], 0x7)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r2, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
write$tun(0xffffffffffffffff, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)
r3 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0)
ftruncate(r3, 0x51a9497)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r4, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r5, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48)
close(r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x3c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}}, 0x0)
tee(r5, r6, 0x6, 0x4)

4.472725572s ago: executing program 2 (id=69):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={0x0, 0x4c}}, 0x0)
add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "cb96a945ab526fe377145584b62491050e011fd59d1396798a98902d3fafc9e09a29e6671ad9f5f25693b12e5d0ac30e15fd59e58f7200", 0x1d}, 0x48, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000fcdbdf25010000000000000002410000711000137564703a73797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20044841)
open_tree(0xffffffffffffff9c, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000500)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregset(0x3, r4, 0x11c, 0x0)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073"], 0xec}}, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000140))
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000180)=0x100)
r7 = getgid()
setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, r6, r7}, 0xc)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "0400", "0d07080d7f4fcf0000e8ffffff00", '\x00', "8657e2b7e43b34e4"}, 0x28)
sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)

3.569720216s ago: executing program 2 (id=70):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000600))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, &(0x7f0000000080))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
process_vm_readv(r2, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000000340)=""/103, 0x67}], 0x1, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB="28010000160001040000004000000010ac1414aa000000000000000000000000ff0100000000000000000000000000010000000000000002020000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000000000000000000330000000000000000000000000000000000000100000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010100000000000000000000000000000000000000000000000800000000000000000000060000000004000000000000023500000a0000ff9400000000000000ad04000008001f00000000000c000f00ee0000000000000014000e00fe8000000000000000000000000000000c0015000000000029f3ffff"], 0x128}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4020801)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
io_uring_setup(0xc8e, &(0x7f0000000040))
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000040)='squashfs\x00', 0x8200, 0x0)
dup(0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r5 = inotify_init1(0x0)
fcntl$setown(r5, 0x8, 0xffffffffffffffff)
fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, <r6=>0x0})
r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00')
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0x4004662b, &(0x7f0000000180)={@desc={0x1, 0x2000000, @desc3}})
lseek(r7, 0x86, 0x4)

3.51930376s ago: executing program 3 (id=71):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={0x0, 0x4c}}, 0x0)
add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "cb96a945ab526fe377145584b62491050e011fd59d1396798a98902d3fafc9e09a29e6671ad9f5f25693b12e5d0ac30e15fd59e58f7200", 0x1d}, 0x48, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000fcdbdf25010000000000000002410000711000137564703a73797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20044841)
open_tree(0xffffffffffffff9c, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000500)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregset(0x3, r4, 0x11c, 0x0)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000140))
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000180)=0x100)
r7 = getgid()
setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, r6, r7}, 0xc)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "0400", "0d07080d7f4fcf0000e8ffffff00", '\x00', "8657e2b7e43b34e4"}, 0x28)
sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)

3.486393624s ago: executing program 0 (id=72):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x14d700, 0x0)
readahead(r0, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
syz_open_dev$dri(0x0, 0x20, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001140)={0x2c, r2, 0x1, 0x70bd2a, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x2c}}, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102377, 0x1902c}], 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0xffffffffffffffff, 0x4)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_emit_vhci(0x0, 0x7)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb001f280c0000000c0000000700000005000000000000060400000000000000006100"], 0x0, 0x2b, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20)
r6 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x0, @multicast2}], 0x10)
sendmmsg$inet6(r6, &(0x7f0000000840)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000380)="d0", 0x1}], 0x1}}], 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0b000000060000fc03000000a703000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000000100"/28], 0x48)
socket$inet6(0xa, 0x800000000000002, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0xa, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ptrace(0x10, 0x0)

3.287221545s ago: executing program 2 (id=73):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x3e}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r0 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r3}, 0x10)
ioctl$KVM_HYPERV_EVENTFD(r2, 0xc048aec8, &(0x7f0000000080)={0x6})
keyctl$restrict_keyring(0xa, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)='dn:')
r4 = socket(0x2c, 0x803, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f2, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x0, 0x8ee0eb3cdda6df32, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
r6 = openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0xac3)
write$sndseq(r6, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x20, 0x800, 0x30, 0x384, 0xc0000001, 0xb1, 0x1, 0x0, {0x80000000, 0x81}, {0x0, 0xb2bf, 0x1}, {0x6, 0xb}, {0x6, 0x3, 0x1}, 0x1, 0x0, 0x1, 0x6, 0x1, 0xf2ab, 0x0, 0x5, 0x1, 0x8, 0x2, 0x0, 0x0, 0x200, 0x3, 0x9})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000000)={0xffffffff, 0x3147504d, 0x1, @discrete={0xffffff9f, 0x2}})
r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00')
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r12=>0x0})
r13 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r14 = openat$ndctl0(0xffffff9c, &(0x7f0000000480), 0x18800, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)={0x24, r11, 0x22af6f5a04337dcd, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x48824)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r13, 0x10001, &(0x7f0000000340)=""/229)
fsync(r9)

3.072639323s ago: executing program 0 (id=74):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
stat(&(0x7f0000000500)='./file1\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
chown(&(0x7f00000004c0)='./file0\x00', 0x0, r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001040)={<r3=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080), r3, 0x0, 0x3, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000005c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000800), r3, 0x2}}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r4=>0x0})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000006c0)={0x20, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @multicast2}}}, 0x104)
getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000340)=""/225, 0x0)
getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, &(0x7f0000000440)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000480)=0x28)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r7, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @empty}, @ib={0x1b, 0x0, 0x0, {"0e000000000000000000000004000001"}}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r7}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r7}}, 0x18)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@private0, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000080)=0xe4)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x4e22, 0x1, 0x4e22, 0x8ba5, 0xa, 0x0, 0xa0, 0x2b, r4, r8}, {0x6, 0x6, 0x400, 0x100, 0x4, 0x9, 0x0, 0xfb}, {0x80, 0x6, 0x4, 0x4}, 0x4, 0x6e6bbb, 0x1, 0x1, 0x3, 0x2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x32}, 0xa, @in=@remote, 0x0, 0x1, 0x3, 0xc3, 0x9, 0x0, 0x5}}, 0xe4)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@loopback, @in6=@dev}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in=@multicast2}}, &(0x7f0000000600)=0xe4)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1)
r9 = openat$vicodec1(0xffffff9c, &(0x7f0000000200), 0x2, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000005c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f200011800e000100636f6e6e6c696d69740000000c00028008000140000000003c0000000c0a01020000000000000000010000000900020073797a3200000000100103800c00008008000340000000020900010073797a30000000001400000010000100000000000098282720504a7c506ba0f50000000000000a"], 0xe0}}, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r9, 0xc0185649, &(0x7f0000000180)={0xa10000, 0x3ff, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x9a0901, 0x1, '\x00', @ptr=0x7fffffff}})

2.939836578s ago: executing program 1 (id=75):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x7d, &(0x7f0000019340), 0x8)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r2, &(0x7f0000000200), 0x10)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x7ffff}, &(0x7f0000019300), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
pipe2(&(0x7f0000000240), 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000840)='io\x00')
read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2100)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}})
readv(r3, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}})
mount$9p_fd(0x0, &(0x7f00000005c0)='./file0/file0/file0/file0/file0\x00', 0x0, 0x800040, 0x0)
umount2(&(0x7f0000000180)='./file0/file0/file0/file0/file0\x00', 0x0)
read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0x2020)
syz_fuse_handle_req(r6, 0x0, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)

2.490080557s ago: executing program 3 (id=76):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x7d, &(0x7f0000019340), 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r2, &(0x7f0000000200), 0x10)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x7ffff}, &(0x7f0000019300), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
pipe2(&(0x7f0000000240), 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000840)='io\x00')
read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2100)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}})
readv(r3, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}})
mount$9p_fd(0x0, &(0x7f00000005c0)='./file0/file0/file0/file0/file0\x00', 0x0, 0x800040, 0x0)
umount2(&(0x7f0000000180)='./file0/file0/file0/file0/file0\x00', 0x0)
read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0x2020)
syz_fuse_handle_req(r6, 0x0, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)

2.303858698s ago: executing program 2 (id=77):
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = getpid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
syz_open_dev$usbfs(0x0, 0x5, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x9801)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
r5 = socket(0x15, 0x5, 0x0)
getsockopt(r5, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x2a)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_type(r6, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r7, &(0x7f0000000280), 0x9)
r8 = openat$cgroup_procs(r6, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000c40), 0x12)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)

2.069745604s ago: executing program 0 (id=78):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={0x0, 0x4c}}, 0x0)
add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "cb96a945ab526fe377145584b62491050e011fd59d1396798a98902d3fafc9e09a29e6671ad9f5f25693b12e5d0ac30e15fd59e58f7200", 0x1d}, 0x48, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000fcdbdf25010000000000000002410000711000137564703a73797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20044841)
open_tree(0xffffffffffffff9c, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000500)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregset(0x3, r4, 0x11c, 0x0)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073"], 0xec}}, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000140))
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000180)=0x100)
r7 = getgid()
setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, r6, r7}, 0xc)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "0400", "0d07080d7f4fcf0000e8ffffff00", '\x00', "8657e2b7e43b34e4"}, 0x28)
sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)

1.679396114s ago: executing program 0 (id=79):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
pipe(&(0x7f0000000100))
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0x5509, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002980)=ANY=[@ANYBLOB="ac0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000840012800e00010069703665727370616e0000007000028014000700"/48, @ANYRES32, @ANYBLOB], 0xac}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl2\x00', <r3=>0x0, 0x29, 0xf2, 0x4, 0x80000001, 0x10, @private2, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8, 0x8000, 0x7, 0x3}})
socket$kcm(0xa, 0x3, 0x11)
r4 = getpid()
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206010100000000000000000000000005000100070000000900020073797a30000000000500050002000000050004000000000012000300686173683a6e65740000000000000000"], 0x4c}}, 0x0)
r7 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r7, &(0x7f0000000240)={0x23, 0x2, 0x9, 0x7}, 0x10)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvfrom$packet(0xffffffffffffffff, &(0x7f00000002c0)=""/251, 0xfb, 0x100, &(0x7f0000000240)={0x11, 0x5, r3, 0x1, 0x2, 0x6, @multicast}, 0x14)

1.099940621s ago: executing program 1 (id=80):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x40, 0x800000000004, @thr={&(0x7f0000000040)="3307c7ecd75623c9ab635b3740a0b3f215b71cf404f8ca6b5cb1eec15e6b0cb2c4f3f4065bcf783dc1b806d68e273bb1807f3575dba9f4326684878adbcf386be7ecb40871b223ea7c27d188fc6a5410bbf0ed187a15aafc2b3415d856be9a89f3a72dc31c40710043cba3c05f39dcdb410716a50bcb864cab23d3d441c91306d1a652f15655b613c52b84b7db09b94197c3fb1048d93521ed64b846ad490a1c953639c295f0d1c260e010d01d1d475a902caf2bbe0a499385fe3002bbfea89fdbacffe72dd891eca32efb9642ce70e30c4404a644f1090cedcfbefc", &(0x7f0000000140)="422d92d237cc23e4c84c3764fa98a501c5a5d5ca77c61b050fcdceb2adb07812ea9ad07649cbb6fa4f62b7e9415f878f8c5df44b6c54aad2a93c4c8b2b12e049b07412bc05731ece4a46cc991b3af2b4d7f7dc6a7cc9eb3e5256a3956a170905bee351ef63858ebd0d2e6f530b0b883380bc18b0d35911d1552115ac288a935fa88590d1e884c8bdf2895169de993ec787427f5a25799d6e5cb8be3acf8a234deb30027a120f6be707b3f1c6ef9ef5412250ca8cde293eaeb928f3c511ebfbcb2e1d71f64e71e705ec9a096d66eaa7ed6eff7d0428c5aa0c042e6bd546c129b83d9e32b0331b0ee2905d6ede77826b1537bbf76b5d66a34702"}}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6)
fstatfs(r1, &(0x7f0000000480)=""/31)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000540))
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200))
ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000200))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$vim2m(&(0x7f0000000240), 0x0, 0x2)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r5=>0x0})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = add_key$fscrypt_v1(&(0x7f0000000140), 0x0, &(0x7f00000002c0)={0x0, "2655dc2c0a95d95e8e56ee24fc2e59456a8ae9b7381abe399291b32894be5a035eaf8c55317f2a0768d96a85c7991b959171574bc1ccedef5ccb103607c652a5", 0x40}, 0x48, 0xfffffffffffffff8)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @auto=[0xc, 0x65, 0x66, 0x0, 0x36, 0x33, 0x33, 0x38, 0xed6e71d9b3563ad9, 0x65, 0x64, 0x37, 0x61, 0x61, 0x31, 0x33]}, &(0x7f00000000c0)={0x0, "b72fb9495eb36d960b31fdcb1425b839e4d134b18cf5fd9beced3de2778075f4bd45e77a023badd36c079fe78432f009c01b7b3473085a35f645cb2eae68ab0d", 0x21}, 0x48, r7)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r8=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)}, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0xfffffffa, 0x39, 0x0, 0x0})
write(0xffffffffffffffff, &(0x7f0000000240)="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", 0x141)

749.767801ms ago: executing program 3 (id=81):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = open(0x0, 0x121342, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$char_usb(r0, &(0x7f00000004c0)="bed86048bc099836532569410ea8e9b16123dc201b259d8f275d5367eade61630b290dbc2eceea6419ac593da02cdd7e18e90955ab374b03e597c54e7b8b3e0810e1a1e9a717c5fa467b01a66ef798798863483460c191ca8e16ff82cedb23bb2e042e459739999c7b3b7f0f46cb69a5a9beaf5b0b0e29f7da7743f32101a79bea39fbaea63ba4082d8db62fd3b02aa6e24d0726e7d0975f2ff19bfb4aaf8194f80adc66580630c4e36053abf1bba28f780ca6841c", 0xb5)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0c0088fb"], 0xfce)
r4 = getpid()
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000001080)='net/protocols\x00')
preadv(r6, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/158, 0x9e}], 0x1, 0x2, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c26d26c6b70d9cb515718f85eac", @ANYRESDEC, @ANYRESHEX=r5, @ANYRES16])
mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='devpts\x00', 0x0, &(0x7f0000000400))
capget(&(0x7f00000000c0)={0x0, r4}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000001880)={'wg1\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r10, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r10, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}]}, 0x40}}, 0x0)
write$tcp_mem(r0, &(0x7f00000006c0)={0x5, 0x2d, 0x0, 0xa, 0x0, 0x2c}, 0x48)

153.654037ms ago: executing program 2 (id=82):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"])
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000080)={0x1})
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x2})
close_range(r1, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
ftruncate(r3, 0xc17c)
sendmsg$nl_route_sched(r3, &(0x7f0000008f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14850}, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x42000000)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001439)
unshare(0x44000000)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r5, 0xffffffffffffffff, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0xb, 0x101000)
ioctl$USBDEVFS_REAPURB(r6, 0x4004550c, &(0x7f0000000140))
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_TABLE(r7, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4)
r8 = getpid()
process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
write$FUSE_LK(r3, &(0x7f00000002c0)={0x28, 0x0, 0x0, {{0x0, 0x400000, 0x0, r8}}}, 0x28)

0s ago: executing program 0 (id=83):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000067000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = dup(r2)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000001380)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@hyper, 0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000000c0)={{@hyper}, @any, 0x0, 0x0, 0x3})
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper}, @host, 0x0, 0x2})
sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d40)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4020801)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x0)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000040)='xfs\x00', 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xd, 0x1, 0x200, &(0x7f0000000cc0)="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"})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r7 = gettid()
process_vm_writev(r7, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/217, 0xd9}], 0x1, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:18490' (ED25519) to the list of known hosts.
[   42.283721][ T5334] cgroup: Unknown subsys name 'net'
[   42.412513][ T5334] cgroup: Unknown subsys name 'cpuset'
[   42.417119][ T5334] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.447925][ T5334] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.933725][ T5359] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.935526][ T5360] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.936767][ T5359] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   46.938557][ T5361] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.939988][ T5360] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.940301][ T5360] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.940491][ T5360] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.941139][ T5360] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.942305][ T5359] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   46.942618][ T5359] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   46.943830][ T5359] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   46.945061][ T5361] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.945413][ T5361] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.946078][ T5360] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.946450][ T5360] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.946561][ T5360] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   46.947196][ T5360] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.947364][ T5360] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   46.947565][ T5360] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.948972][ T5359] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   46.950800][ T5361] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.952633][ T5359] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   46.954407][ T5361] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   46.978566][ T5361] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   47.149857][ T5347] chnl_net:caif_netlink_parms(): no params data found
[   47.155904][ T5355] chnl_net:caif_netlink_parms(): no params data found
[   47.162849][ T5351] chnl_net:caif_netlink_parms(): no params data found
[   47.275568][ T5354] chnl_net:caif_netlink_parms(): no params data found
[   47.366857][ T5347] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.369288][ T5347] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.371283][ T5347] bridge_slave_0: entered allmulticast mode
[   47.373331][ T5347] bridge_slave_0: entered promiscuous mode
[   47.439166][ T5355] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.441626][ T5355] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.444063][ T5355] bridge_slave_0: entered allmulticast mode
[   47.446502][ T5355] bridge_slave_0: entered promiscuous mode
[   47.449103][ T5347] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.451026][ T5347] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.452930][ T5347] bridge_slave_1: entered allmulticast mode
[   47.455132][ T5347] bridge_slave_1: entered promiscuous mode
[   47.457774][ T5351] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.459808][ T5351] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.462398][ T5351] bridge_slave_0: entered allmulticast mode
[   47.465125][ T5351] bridge_slave_0: entered promiscuous mode
[   47.467587][ T5351] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.469862][ T5351] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.472491][ T5351] bridge_slave_1: entered allmulticast mode
[   47.475230][ T5351] bridge_slave_1: entered promiscuous mode
[   47.482684][ T5355] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.484605][ T5355] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.486468][ T5355] bridge_slave_1: entered allmulticast mode
[   47.489141][ T5355] bridge_slave_1: entered promiscuous mode
[   47.582684][ T5347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.588678][ T5351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.607772][ T5355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.611998][ T5347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.617371][ T5351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.627382][ T5354] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.630747][ T5354] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.632702][ T5354] bridge_slave_0: entered allmulticast mode
[   47.635107][ T5354] bridge_slave_0: entered promiscuous mode
[   47.639568][ T5355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.665160][ T5351] team0: Port device team_slave_0 added
[   47.666926][ T5354] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.668992][ T5354] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.670945][ T5354] bridge_slave_1: entered allmulticast mode
[   47.672995][ T5354] bridge_slave_1: entered promiscuous mode
[   47.700632][ T5351] team0: Port device team_slave_1 added
[   47.747028][ T5347] team0: Port device team_slave_0 added
[   47.753792][ T5351] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.755794][ T5351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.762827][ T5351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.779615][ T5355] team0: Port device team_slave_0 added
[   47.782945][ T5347] team0: Port device team_slave_1 added
[   47.785858][ T5351] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.787824][ T5351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.796694][ T5351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.805307][ T5354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.809807][ T5355] team0: Port device team_slave_1 added
[   47.841499][ T5354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.863864][ T5355] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.866298][ T5355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.873481][ T5355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.876995][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.879521][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.888566][ T5347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.924636][ T5355] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.926486][ T5355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.934240][ T5355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.939850][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.942336][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.951405][ T5347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.958388][ T5354] team0: Port device team_slave_0 added
[   47.971907][ T5351] hsr_slave_0: entered promiscuous mode
[   47.974629][ T5351] hsr_slave_1: entered promiscuous mode
[   47.982107][ T5354] team0: Port device team_slave_1 added
[   48.039388][ T5355] hsr_slave_0: entered promiscuous mode
[   48.042282][ T5355] hsr_slave_1: entered promiscuous mode
[   48.044643][ T5355] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   48.046790][ T5355] Cannot create hsr debugfs directory
[   48.059850][ T5354] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.062376][ T5354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.069184][ T5354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.109978][ T5354] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.112182][ T5354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.119761][ T5354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.125871][ T5347] hsr_slave_0: entered promiscuous mode
[   48.127811][ T5347] hsr_slave_1: entered promiscuous mode
[   48.131694][ T5347] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   48.134396][ T5347] Cannot create hsr debugfs directory
[   48.182800][ T5354] hsr_slave_0: entered promiscuous mode
[   48.185100][ T5354] hsr_slave_1: entered promiscuous mode
[   48.187540][ T5354] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   48.190653][ T5354] Cannot create hsr debugfs directory
[   48.399913][ T5351] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.405761][ T5351] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.411006][ T5351] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.415734][ T5351] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.434608][ T5355] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.437747][ T5355] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.441405][ T5355] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.451548][ T5355] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.469902][ T5354] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   48.479954][ T5354] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   48.483899][ T5354] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   48.490319][ T5354] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   48.516455][ T5347] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.526603][ T5347] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.532262][ T5347] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.536743][ T5347] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.568277][ T5351] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.589353][ T5351] 8021q: adding VLAN 0 to HW filter on device team0
[   48.604772][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.607126][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.621415][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.623224][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.630518][ T5355] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.654042][ T5354] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.658484][ T5355] 8021q: adding VLAN 0 to HW filter on device team0
[   48.663189][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.665516][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.679301][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.681767][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.691009][ T5354] 8021q: adding VLAN 0 to HW filter on device team0
[   48.699536][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.701549][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.714310][ T5347] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.721455][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.723582][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.746794][ T5347] 8021q: adding VLAN 0 to HW filter on device team0
[   48.766361][  T217] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.769240][  T217] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.793290][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.795880][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.831929][ T5347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.894785][ T5355] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.904879][ T5354] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.920207][ T5351] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.953570][ T5355] veth0_vlan: entered promiscuous mode
[   48.959881][ T5354] veth0_vlan: entered promiscuous mode
[   48.970016][ T5355] veth1_vlan: entered promiscuous mode
[   48.974014][ T5354] veth1_vlan: entered promiscuous mode
[   48.979966][ T5361] Bluetooth: hci2: command tx timeout
[   48.979971][ T5359] Bluetooth: hci0: command tx timeout
[   48.981770][ T5350] Bluetooth: hci3: command tx timeout
[   49.003815][ T5351] veth0_vlan: entered promiscuous mode
[   49.010343][ T5354] veth0_macvtap: entered promiscuous mode
[   49.013613][ T5351] veth1_vlan: entered promiscuous mode
[   49.018880][ T5354] veth1_macvtap: entered promiscuous mode
[   49.026970][ T5347] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.052095][ T5354] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.056381][ T5355] veth0_macvtap: entered promiscuous mode
[   49.058341][ T5350] Bluetooth: hci1: command tx timeout
[   49.069755][ T5354] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.073376][ T5351] veth0_macvtap: entered promiscuous mode
[   49.078888][ T5351] veth1_macvtap: entered promiscuous mode
[   49.083371][ T5355] veth1_macvtap: entered promiscuous mode
[   49.086744][ T5354] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.090077][ T5354] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.092605][ T5354] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.094938][ T5354] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.110380][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.113556][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.116968][ T5351] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.123031][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.126284][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.130997][ T5351] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.143856][ T5347] veth0_vlan: entered promiscuous mode
[   49.147913][ T5351] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.150615][ T5351] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.153564][ T5351] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.155839][ T5351] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.176999][ T5347] veth1_vlan: entered promiscuous mode
[   49.180923][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.184579][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.187782][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.191565][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.196053][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.201067][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.204185][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.206816][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.210077][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.213801][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.223852][ T5355] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.226902][ T5355] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.230701][ T5355] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.236504][ T5355] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.268156][  T217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.268350][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.270357][  T217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.272187][ T5347] veth0_macvtap: entered promiscuous mode
[   49.273051][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.274159][ T5347] veth1_macvtap: entered promiscuous mode
[   49.280096][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.285768][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.289610][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.293222][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.296187][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.299816][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.303106][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.315563][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.318660][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.321846][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.325526][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.328309][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.331079][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.335840][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.351321][   T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.352503][ T5347] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.354043][   T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.356081][ T5347] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.360916][ T5347] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.363233][ T5347] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.375725][  T217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.377842][  T217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.400557][ T5354] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.412029][   T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.414910][   T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.427165][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.433617][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.441671][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.443723][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.463260][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.465513][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.573575][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   49.573686][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   49.573734][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   49.578532][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   49.618081][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   49.708141][ T5431] xt_CHECKSUM: unsupported CHECKSUM operation f4
[   49.926502][ T5437] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0
[   49.930167][ T5436] IPVS: stopping backup sync thread 5437 ...
[   50.067651][ T5432] random: crng reseeded on system resumption
[   50.699880][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   50.802244][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   51.011973][ T5442] block device autoloading is deprecated and will be removed.
[   51.069132][ T5350] Bluetooth: hci3: command tx timeout
[   51.069166][ T5359] Bluetooth: hci2: command tx timeout
[   51.070876][ T5361] Bluetooth: hci0: command tx timeout
[   51.148204][ T5350] Bluetooth: hci1: command tx timeout
[   51.288232][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   51.388655][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   51.391588][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   51.415132][ T5449] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9'.
[   51.455689][ T5451] process 'syz.3.8' launched './file0' with NULL argv: empty string added
[   51.478604][ T5450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7'.
[   51.614624][ T5449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   52.290850][ T5456] Bluetooth: MGMT ver 1.23
[   52.387825][    T8] cfg80211: failed to load regulatory.db
[   53.148199][ T5361] Bluetooth: hci2: command tx timeout
[   53.148227][ T5359] Bluetooth: hci0: command tx timeout
[   53.150021][ T5350] Bluetooth: hci3: command tx timeout
[   53.191234][ T5461] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11'.
[   53.228053][ T5350] Bluetooth: hci1: command tx timeout
[   53.342555][ T5461] netlink: 'syz.1.11': attribute type 10 has an invalid length.
[   53.345106][ T5461] bridge0: port 3(team0) entered blocking state
[   53.355752][ T5461] bridge0: port 3(team0) entered disabled state
[   53.362553][ T5461] team0: entered allmulticast mode
[   53.366560][ T5461] team_slave_0: entered allmulticast mode
[   53.369561][ T5461] team_slave_1: entered allmulticast mode
[   53.377700][ T5461] team0: entered promiscuous mode
[   53.379860][ T5461] team_slave_0: entered promiscuous mode
[   53.382718][ T5461] team_slave_1: entered promiscuous mode
[   53.386696][ T5461] bridge0: port 3(team0) entered blocking state
[   53.389144][ T5461] bridge0: port 3(team0) entered forwarding state
[   53.451176][ T5464] syz.3.12 (5464): /proc/5462/oom_adj is deprecated, please use /proc/5462/oom_score_adj instead.
[   54.599057][   T39] audit: type=1326 audit(1727919887.748:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5474 comm="syz.0.15" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x0
[   55.218335][ T5350] Bluetooth: hci3: command tx timeout
[   55.219880][ T5350] Bluetooth: hci0: command tx timeout
[   55.221349][ T5350] Bluetooth: hci2: command tx timeout
[   55.298054][ T5359] Bluetooth: hci1: command tx timeout
[   55.666931][ T5490] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   55.857833][ T5492] syz.2.17: attempt to access beyond end of device
[   55.857833][ T5492] loop2: rw=4096, sector=2, nr_sectors = 2 limit=0
[   55.862361][ T5492] EXT4-fs (loop2): unable to read superblock
[   55.871381][ T5492] usb 2-1: USB disconnect, device number 2
[   56.336548][ T5502] netlink: 288 bytes leftover after parsing attributes in process `syz.3.19'.
[   56.355893][ T5503] hub 2-0:1.0: USB hub found
[   56.369554][ T5503] hub 2-0:1.0: 6 ports detected
[   56.396432][ T5503] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18'.
[   56.548085][ T1291] usb 2-1: new high-speed USB device number 3 using ehci-pci
[   56.732595][ T1291] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[   56.741398][ T1291] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[   56.748362][ T1291] usb 2-1: Product: QEMU USB Tablet
[   56.752572][ T1291] usb 2-1: Manufacturer: QEMU
[   56.756931][ T1291] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[   56.824717][ T1291] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0002/input/input5
[   56.854872][ T1291] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0
[   58.005036][ T5517] syz.3.22 uses obsolete (PF_INET,SOCK_PACKET)
[   59.088946][ T5528] random: crng reseeded on system resumption
[   59.716080][ T5535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'.
[   59.723569][ T5535] overlayfs: failed to clone lowerpath
[   59.862954][ T5543] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.503161][ T5547] mkiss: ax0: crc mode is auto.
[   60.644093][ T5550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.29'.
[   61.003009][ T5555] hub 9-0:1.0: USB hub found
[   61.004883][ T5555] hub 9-0:1.0: 1 port detected
[   61.443137][ T5575] QAT: failed to copy from user cfg_data.
[   62.500996][ T5599] veth1_macvtap: entered allmulticast mode
[   63.495873][ T5602] capability: warning: `syz.3.35' uses 32-bit capabilities (legacy support in use)
[   64.408216][ T5611] netlink: 40 bytes leftover after parsing attributes in process `syz.3.38'.
[   64.578866][ T5611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38'.
[   64.585833][ T5611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.38'.
[   65.009304][ T5620] tipc: Started in network mode
[   65.011349][ T5620] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   65.016128][ T5620] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   65.095534][ T5620] tipc: Enabled bearer <udp:syz1>, priority 10
[   65.604355][ T5626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.40'.
[   65.941077][ T5642] netlink: 'syz.3.42': attribute type 21 has an invalid length.
[   66.089367][  T978] tipc: Node number set to 1
[   68.520180][ T5663] mkiss: ax0: crc mode is auto.
[   70.019921][ T5359] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   70.023183][ T5359] Bluetooth: hci2: Injecting HCI hardware error event
[   70.028727][ T5350] Bluetooth: hci2: hardware error 0x00
[   70.252903][ T5674] tipc: Started in network mode
[   70.254339][ T5674] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   70.257110][ T5674] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   70.261186][ T5674] tipc: Enabled bearer <udp:syz1>, priority 10
[   70.678658][ T5679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.52'.
[   70.749396][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[   70.751907][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[   70.872233][ T5691] ISOFS: Unable to identify CD-ROM format.
[   71.178061][ T5396] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   71.258146][ T5352] tipc: Node number set to 1
[   71.328033][ T5396] usb 7-1: Using ep0 maxpacket: 8
[   71.332875][ T5396] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   71.335520][ T5396] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   71.340311][ T5396] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   71.343107][ T5396] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   71.346676][ T5396] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   71.349659][ T5396] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.581311][ T5396] usb 7-1: usb_control_msg returned -32
[   71.585052][ T5396] usbtmc 7-1:16.0: can't read capabilities
[   72.098085][ T5350] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   73.923851][  T978] usb 7-1: USB disconnect, device number 2
[   74.220339][ T5725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.63'.
[   74.790465][ T5732] tipc: Started in network mode
[   74.792779][ T5732] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   74.797260][ T5732] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   74.804494][ T5732] tipc: Enabled bearer <udp:syz1>, priority 10
[   75.557399][ T5740] mkiss: ax0: crc mode is auto.
[   75.918768][    T9] tipc: Node number set to 1
[   76.761548][ T5751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.69'.
[   78.216794][ T5772] netlink: 28 bytes leftover after parsing attributes in process `syz.0.74'.
[   79.280542][ T5787] Zero length message leads to an empty skb
[   79.708420][ T5794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'.
[   79.713332][ T5794] netlink: 88 bytes leftover after parsing attributes in process `syz.0.79'.
[   81.205873][ T5803] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2059c pfn:0x4c9c0
[   81.212473][ T5803] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[   81.215696][ T5803] raw: 04fff00000000000 ffffea00012ff3c8 ffffea0001327048 0000000000000000
[   81.219204][ T5803] raw: 000000000002059c 0000000000000000 00000000ffffffff 0000000000000000
[   81.222802][ T5803] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u))
[   81.226917][ T5803] page_owner tracks the page as freed
[   81.232368][ T5803] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 5785, tgid 5782 (syz.2.77), ts 79429152882, free_ts 80904887575
[   81.240262][ T5803]  post_alloc_hook+0x2d1/0x350
[   81.241974][ T5803]  get_page_from_freelist+0x101e/0x3070
[   81.243915][ T5803]  __alloc_pages_noprof+0x223/0x25c0
[   81.245763][ T5803]  alloc_pages_mpol_noprof+0x2c9/0x610
[   81.247657][ T5803]  folio_alloc_mpol_noprof+0x36/0xd0
[   81.254479][ T5803]  vma_alloc_folio_noprof+0xee/0x1b0
[   81.256349][ T5803]  do_wp_page+0x10d1/0x4930
[   81.257927][ T5803]  __handle_mm_fault+0x1a93/0x2a10
[   81.260153][ T5803]  handle_mm_fault+0x3fa/0xaa0
[   81.261812][ T5803]  do_user_addr_fault+0x7a3/0x13f0
[   81.263882][ T5803]  exc_page_fault+0x5c/0xc0
[   81.265596][ T5803]  asm_exc_page_fault+0x26/0x30
[   81.267300][ T5803] page last free pid 5783 tgid 5782 stack trace:
[   81.272999][ T5803]  free_unref_folios+0x956/0x1310
[   81.274934][ T5803]  folios_put_refs+0x551/0x750
[   81.276694][ T5803]  free_pages_and_swap_cache+0x36d/0x510
[   81.279074][ T5803]  __tlb_batch_free_encoded_pages+0xf9/0x290
[   81.281185][ T5803]  tlb_flush_mmu+0xe9/0x590
[   81.282813][ T5803]  unmap_page_range+0x1bf4/0x3ce0
[   81.284597][ T5803]  unmap_single_vma+0x194/0x2b0
[   81.286493][ T5803]  unmap_vmas+0x22f/0x490
[   81.290994][ T5803]  exit_mmap+0x1c6/0xb30
[   81.292512][ T5803]  __mmput+0x12a/0x480
[   81.294001][ T5803]  mmput+0x62/0x70
[   81.295321][ T5803]  do_exit+0x9bf/0x2d70
[   81.297562][ T5803]  do_group_exit+0xd3/0x2a0
[   81.299691][ T5803]  get_signal+0x2658/0x26d0
[   81.301712][ T5803]  arch_do_signal_or_restart+0x90/0x7e0
[   81.303663][ T5803]  syscall_exit_to_user_mode+0x150/0x2a0
[   81.307144][ T5803] ------------[ cut here ]------------
[   81.309230][ T5803] kernel BUG at include/linux/mm.h:1444!
[   81.315190][ T5803] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI
[   81.318033][ T5803] CPU: 3 UID: 0 PID: 5803 Comm: syz.2.82 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0
[   81.321600][ T5803] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   81.325276][ T5803] RIP: 0010:__iov_iter_get_pages_alloc+0x1d10/0x2230
[   81.327565][ T5803] Code: b0 8b 48 89 df e8 d0 23 4b fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 20 75 05 fd 48 c7 c6 60 c6 b0 8b 4c 89 e7 e8 b1 23 4b fd 90 <0f> 0b e8 09 75 05 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c
[   81.334156][ T5803] RSP: 0018:ffffc900227befa8 EFLAGS: 00010293
[   81.336246][ T5803] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000
[   81.336258][ T5803] RDX: ffff888028278000 RSI: ffffffff84873a5f RDI: ffff888028278444
[   81.336269][ T5803] RBP: ffffea0001327034 R08: 0000000000000001 R09: fffffbfff2d315b6
[   81.336279][ T5803] R10: ffffffff9698adb7 R11: ffff88802b628a40 R12: ffffea0001327000
[   81.336290][ T5803] R13: ffff88806098b400 R14: 0000000000001000 R15: 0000000000001000
[   81.336300][ T5803] FS:  0000000000000000(0000) GS:ffff88802b700000(0063) knlGS:0000000057486440
[   81.336328][ T5803] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[   81.336341][ T5803] CR2: 0000000057bb0448 CR3: 00000000646b8000 CR4: 0000000000352ef0
[   81.336351][ T5803] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   81.336361][ T5803] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   81.336372][ T5803] Call Trace:
[   81.336378][ T5803]  <TASK>
[   81.336384][ T5803]  ? die+0x31/0x80
[   81.336403][ T5803]  ? do_trap+0x232/0x430
[   81.336424][ T5803]  ? __iov_iter_get_pages_alloc+0x1d10/0x2230
[   81.336444][ T5803]  ? __iov_iter_get_pages_alloc+0x1d10/0x2230
[   81.336461][ T5803]  ? do_error_trap+0xf4/0x230
[   81.336481][ T5803]  ? __iov_iter_get_pages_alloc+0x1d10/0x2230
[   81.336500][ T5803]  ? handle_invalid_op+0x34/0x40
[   81.336521][ T5803]  ? __iov_iter_get_pages_alloc+0x1d10/0x2230
[   81.336537][ T5803]  ? exc_invalid_op+0x2e/0x50
[   81.336559][ T5803]  ? asm_exc_invalid_op+0x1a/0x20
[   81.336579][ T5803]  ? __iov_iter_get_pages_alloc+0x1d0f/0x2230
[   81.336595][ T5803]  ? __iov_iter_get_pages_alloc+0x1d10/0x2230
[   81.336612][ T5803]  ? __iov_iter_get_pages_alloc+0x1d0f/0x2230
[   81.336631][ T5803]  ? __pfx___iov_iter_get_pages_alloc+0x10/0x10
[   81.336648][ T5803]  ? delete_node+0x207/0x8e0
[   81.336669][ T5803]  iov_iter_get_pages_alloc2+0x53/0xf0
[   81.336686][ T5803]  p9_get_mapped_pages.part.0.constprop.0+0x4ca/0x7d0
[   81.336710][ T5803]  ? p9pdu_vwritef+0x368/0x21d0
[   81.336727][ T5803]  ? __pfx_p9_get_mapped_pages.part.0.constprop.0+0x10/0x10
[   81.336750][ T5803]  ? __pfx_p9pdu_vwritef+0x10/0x10
[   81.336768][ T5803]  ? __pfx_p9pdu_vwritef+0x10/0x10
[   81.336784][ T5803]  ? p9_tag_alloc+0x4cc/0x870
[   81.336798][ T5803]  ? reacquire_held_locks+0x464/0x4c0
[   81.379852][ T5809] syz.0.83: attempt to access beyond end of device
[   81.379852][ T5809] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0
[   81.381071][ T5803]  p9_virtio_zc_request+0x991/0x1460
[   81.392397][ T5809] XFS (nbd0): SB validate failed with error -5.
[   81.392708][ T5803]  ? p9pdu_writef+0xc4/0x100
[   81.418499][ T5803]  ? __pfx_p9pdu_writef+0x10/0x10
[   81.418530][ T5803]  ? __pfx_p9pdu_vwritef+0x10/0x10
[   81.418550][ T5803]  ? __pfx_p9_virtio_zc_request+0x10/0x10
[   81.418572][ T5803]  ? rcu_is_watching+0x12/0xc0
[   81.418591][ T5803]  ? trace_9p_protocol_dump+0x192/0x220
[   81.418611][ T5803]  ? rcu_is_watching+0x12/0xc0
[   81.418628][ T5803]  ? p9_client_prepare_req+0x111/0x4d0
[   81.418645][ T5803]  ? __pfx_p9_client_prepare_req+0x10/0x10
[   81.418663][ T5803]  p9_client_zc_rpc.constprop.0+0x29a/0x880
[   81.418685][ T5803]  ? __pfx_p9_client_zc_rpc.constprop.0+0x10/0x10
[   81.418706][ T5803]  ? p9_req_put+0x1c6/0x250
[   81.418731][ T5803]  ? __pfx_p9_virtio_zc_request+0x10/0x10
[   81.418752][ T5803]  p9_client_read_once+0x443/0x820
[   81.418772][ T5803]  ? __pfx_p9_client_read_once+0x10/0x10
[   81.418790][ T5803]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   81.418809][ T5803]  ? lockdep_hardirqs_on+0x7c/0x110
[   81.418836][ T5803]  p9_client_read+0x13f/0x1b0
[   81.418855][ T5803]  v9fs_issue_read+0x115/0x310
[   81.418876][ T5803]  ? __pfx_v9fs_issue_read+0x10/0x10
[   81.418895][ T5803]  ? __local_bh_enable_ip+0xa4/0x120
[   81.418916][ T5803]  netfs_read_to_pagecache+0x5c9/0x9a0
[   81.418942][ T5803]  netfs_readahead+0x7fa/0xaa0
[   81.418960][ T5803]  ? __pfx_netfs_readahead+0x10/0x10
[   81.418979][ T5803]  read_pages+0x1a8/0xd80
[   81.419000][ T5803]  ? xas_load+0x49/0x5b0
[   81.419022][ T5803]  ? xa_load+0xc8/0x2c0
[   81.419045][ T5803]  ? __pfx_read_pages+0x10/0x10
[   81.419064][ T5803]  ? __pfx_xa_load+0x10/0x10
[   81.419090][ T5803]  ? maybe_unlock_mmap_for_io.part.0+0x111/0x390
[   81.419112][ T5803]  ? reacquire_held_locks+0x20b/0x4c0
[   81.419138][ T5803]  page_cache_ra_unbounded+0x543/0x6c0
[   81.419162][ T5803]  page_cache_ra_order+0x7d9/0xc90
[   81.419187][ T5803]  filemap_fault+0x148d/0x2820
[   81.419212][ T5803]  ? __pfx_filemap_fault+0x10/0x10
[   81.419238][ T5803]  ? lock_acquire+0x2f/0xb0
[   81.419260][ T5803]  ? __pte_offset_map+0x42/0x540
[   81.419279][ T5803]  ? __pfx_filemap_map_pages+0x10/0x10
[   81.419299][ T5803]  __do_fault+0x10a/0x490
[   81.419316][ T5803]  ? __pfx_filemap_map_pages+0x10/0x10
[   81.419336][ T5803]  do_pte_missing+0x1a8/0x3e50
[   81.419360][ T5803]  ? lock_vma_under_rcu+0x13e/0x980
[   81.419382][ T5803]  __handle_mm_fault+0x100a/0x2a10
[   81.419405][ T5803]  ? __pfx_lock_release+0x10/0x10
[   81.419426][ T5803]  ? lock_vma_under_rcu+0x13e/0x980
[   81.419445][ T5803]  ? __pfx___handle_mm_fault+0x10/0x10
[   81.419474][ T5803]  handle_mm_fault+0x3fa/0xaa0
[   81.419497][ T5803]  do_user_addr_fault+0x60d/0x13f0
[   81.419524][ T5803]  exc_page_fault+0x5c/0xc0
[   81.419543][ T5803]  asm_exc_page_fault+0x26/0x30
[   81.419563][ T5803] RIP: 0023:0xf725243a
[   81.419577][ T5803] Code: 0c a4 49 f7 c6 03 00 00 00 74 02 a4 49 50 89 c8 c1 e9 02 83 e0 03 f3 a5 89 c1 f3 a4 58 89 c7 89 d6 8b 44 24 04 c3 d1 e9 73 01 <a4> d1 e9 73 02 66 a5 f3 a5 eb e8 66 90 66 90 66 90 66 90 66 90 90
[   81.419592][ T5803] RSP: 002b:00000000ff89a79c EFLAGS: 00010203
[   81.419607][ T5803] RAX: 0000000000000000 RBX: 00000000f740bff4 RCX: 0000000000000004
[   81.419618][ T5803] RDX: 0000000000000009 RSI: 00000000f6d10416 RDI: 0000000020000080
[   81.419628][ T5803] RBP: 00000000ff89aa18 R08: 0000000000000000 R09: 0000000000000000
[   81.419639][ T5803] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[   81.419649][ T5803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   81.419663][ T5803]  </TASK>
[   81.419668][ T5803] Modules linked in:
[   81.420195][ T5803] ---[ end trace 0000000000000000 ]---
[   81.421313][ T5803] RIP: 0010:__iov_iter_get_pages_alloc+0x1d10/0x2230
[   81.421342][ T5803] Code: b0 8b 48 89 df e8 d0 23 4b fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 20 75 05 fd 48 c7 c6 60 c6 b0 8b 4c 89 e7 e8 b1 23 4b fd 90 <0f> 0b e8 09 75 05 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c
[   81.421358][ T5803] RSP: 0018:ffffc900227befa8 EFLAGS: 00010293
[   81.421373][ T5803] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000
[   81.421383][ T5803] RDX: ffff888028278000 RSI: ffffffff84873a5f RDI: ffff888028278444
[   81.421395][ T5803] RBP: ffffea0001327034 R08: 0000000000000001 R09: fffffbfff2d315b6
[   81.421406][ T5803] R10: ffffffff9698adb7 R11: ffff88802b628a40 R12: ffffea0001327000
[   81.421418][ T5803] R13: ffff88806098b400 R14: 0000000000001000 R15: 0000000000001000
[   81.421430][ T5803] FS:  0000000000000000(0000) GS:ffff88802b700000(0063) knlGS:0000000057486440
[   81.421470][ T5803] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[   81.421485][ T5803] CR2: 00000000ff87bb30 CR3: 00000000646b8000 CR4: 0000000000352ef0
[   81.421496][ T5803] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   81.421506][ T5803] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   81.421519][ T5803] Kernel panic - not syncing: Fatal exception
[   81.425568][ T5803] Kernel Offset: disabled

VM DIAGNOSIS:
01:45:14  Registers:
info registers vcpu 0

CPU#0
RAX=000000326ce03356 RBX=ffff88802b4283c0 RCX=00000000000006e0 RDX=0000000000000032
RSI=ffff88802b4283c0 RDI=000000000013cb43 RBP=000000000013cb43 RSP=ffffc90000007ec0
R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000000
R12=0000000000000000 R13=0000000000000019 R14=0000000000000000 R15=00000012e872281b
RIP=ffffffff813a68e5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000565291f838c8 CR3=00000000646e6000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73cbff4
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000286ba9 RBX=0000000000000001 RCX=ffffffff8b12e739 RDX=0000000000000000
RSI=ffffffff8b4cc8e0 RDI=ffffffff8bb12020 RBP=ffffed1003771910 RSP=ffffc90000477e08
R8 =0000000000000001 R9 =ffffed10056a7025 R10=ffff88802b53812b R11=ffffffff8b4f7c60
R12=0000000000000001 R13=ffff88801bb8c880 R14=ffffffff901cc548 R15=0000000000000000
RIP=ffffffff8b12fb1f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b500000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000f740b90c CR3=0000000060ee8000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000022800000000 0000000400000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000080000000 RBX=0000000000000002 RCX=0000000000000002 RDX=0000000000000000
RSI=ffffffff8b4ccba0 RDI=ffffffff8bb12020 RBP=0000000000000246 RSP=ffffc90000edf4e0
R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff901cc54f R11=0000000000000000
R12=0000000000000000 R13=ffffffff8ddb7800 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8b12eeed RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7fb5584 CR3=000000000db7c000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000022800000000 0000000400000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85035a15 RDI=ffffffff9a63a260 RBP=ffffffff9a63a220 RSP=ffffc900227be908
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f
R12=0000000000000000 R13=0000000000000031 R14=ffffffff850359b0 R15=0000000000000000
RIP=ffffffff85035a3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000057bb0448 CR3=00000000646b8000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001cc00000000 0000000400000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000