last executing test programs:

2m23.947235379s ago: executing program 32 (id=1235):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x200002dc, @empty, 0x1}, 0x1c)
syz_emit_ethernet(0x9a, &(0x7f0000000540)={@random="5b685c7e778f", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x64, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "2e46c1c5274bfad707406bd51cb60bf33c125f4cf999196aa6cefa7be0886490", "2bea6a9d710cbcec5e65a090c11d7317", {"0e8016d6bdca858c164744fb8b6005b5", "bc30e337b7acddad3b22de49438a1f39"}}}}}}}}, 0x0)

2m18.974217881s ago: executing program 33 (id=1188):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8eceb2e30985c02b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f00000009c0)={0x10, 0x0, "6c99df9579b4fd0343e1894f944911e9"})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x8, 0x1, 0x4, 0x1000, 0x0, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x79, "0100"}})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x8, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0xffffffff, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x2, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x15, 0x3e, 0x18e, 0x200006, 0x4, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x2, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x9, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x84, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x4, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x8, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x5, 0x5, 0x1, 0x40006, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x3, 0x2000, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x3, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m19.163774245s ago: executing program 4 (id=1483):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8eceb2e30985c02b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f00000009c0)={0x10, 0x0, "6c99df9579b4fd0343e1894f944911e9"})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x8, 0x1, 0x4, 0x1000, 0x0, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x79, "0100"}})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x8, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0xffffffff, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x2, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x15, 0x3e, 0x18e, 0x200006, 0x4, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x2, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x9, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x84, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x4, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x8, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x5, 0x5, 0x1, 0x40006, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x3, 0x2000, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x3, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m18.223417365s ago: executing program 4 (id=1489):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_newroute={0x54, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x5}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x4, 0x2, 0x4, 0x1, 0x80, 0x30, 0xb9, [@loopback]}}}}}]}, 0x54}}, 0x0)

1m18.133518223s ago: executing program 4 (id=1491):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x34, 0x41, 0x107, 0x70bd28, 0xfffffff6, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\n\x00'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0x9, 0x14, 0x0, 0x1, [@nested={0x4, 0x2}, @generic='v']}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={<r6=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x80, @local}, 0xfffffffffffffc3b)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
mount(0x0, 0x0, 0x0, 0x8, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0)

1m16.490044727s ago: executing program 4 (id=1503):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20)
ioctl$TUNSETOFFLOAD(r0, 0x80047456, 0x0)

1m16.242229162s ago: executing program 4 (id=1506):
unshare(0x28000400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
epoll_create(0x567)
socketpair(0x21, 0x3, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
read$FUSE(r1, &(0x7f0000001a80)={0x2020}, 0x2020)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="972fd1ebe125a60ab6d6b3fdf725be36", 0x10}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}], 0x1, 0x200080d0)
syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190)
syz_emit_ethernet(0x4e, &(0x7f0000001600)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x0, 0x0, @dev}}}}}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000740)=@newtaction={0x1c8, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd, {}, [{0x1b4, 0x1, [@m_mirred={0x1b0, 0x1e, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x2182, 0x8, 0x8, 0x1}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4, 0xfffffffffffffffd, 0x7, 0xc}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x4cfc64c5, 0x2, 0x1, 0xd}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3a, 0x1, 0x2, 0x3dfc}, 0x1}}, @TCA_MIRRED_PARMS={0xffffffffffffff23, 0x2, {{0x10, 0x4, 0x2, 0x2, 0xc}, 0x2}}, @TCA_MIRRED_PARMS={0xfffffffffffffda6, 0x2, {{0x5, 0x1, 0x3, 0x5, 0xb}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x55, 0x4010001, 0x3, 0xab5a, 0xfe04}}}]}, {0xa3, 0x6, "6cb9686a42b9d40de158508f0a2b5355d08ec3d0d3dc25d34487172fe6db64e5a1f79ec708388bd9841c50b3cbcb5c03ff3f0ab1c2c05cd0ad12668a202078ab1a03491374e4ccc619a712885fdeace45e330117d10cf7b75e01dc6399a38cb5ff366e3a64b15f58529bbfacf195ec9fdbe2624543094dde96d6a30ccb6bac556f4c2e414be832fafb25cc8bc11f36fac3e3e62fc3b5d34b16813d7fbd1bf0"}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40c0}, 0x0)

1m15.953044572s ago: executing program 4 (id=1507):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8eceb2e30985c02b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f00000009c0)={0x10, 0x0, "6c99df9579b4fd0343e1894f944911e9"})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x8, 0x1, 0x4, 0x1000, 0x0, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x79, "0100"}})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x8, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0xffffffff, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x2, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x15, 0x3e, 0x18e, 0x200006, 0x4, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x2, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x9, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x84, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x4, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x8, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x5, 0x5, 0x1, 0x40006, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x3, 0x2000, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x3, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m15.069692433s ago: executing program 0 (id=1509):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x6, 0x204031, 0xffffffffffffffff, 0xec772000)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xbc})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
setns(0xc9, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce05562}]}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14}}, 0xa4}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
pipe2$9p(&(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x0)
tee(r3, r2, 0x9, 0x8)
write$FUSE_ATTR(r2, &(0x7f00000003c0)={0x78, 0x0, 0x0, {0x1, 0x9, 0x0, {0x1, 0x0, 0x87ac, 0x1, 0xffffffff, 0x4, 0xfffffcd8, 0x4, 0x7, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x6}}}, 0xfdef)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0)
r4 = socket(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f0000000140)="01154e0001000011221e445588fbca0100011606", 0x1c, 0x4044015, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x14)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x51efc45ed88f1b04)
mmap$binder(&(0x7f0000202000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0xe04)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0xc)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}}}]}, 0x38}}, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000010300)={r6, @in={{0x2, 0x4e24, @loopback}}}, &(0x7f00000103c0)=0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r8=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r8, 0x89b0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_channels={0x1, 0x5, 0xfffffffe, 0xffd, 0x3, 0xffffdffc, 0x3, 0x0, 0x200}})

1m14.236992169s ago: executing program 0 (id=1514):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x6)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0x1, 0xfffffff2, 0x2, 0x4f, "0d418107050088b791e15b34f96ff88c6b00", 0x9, 0x140220})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xd)

1m14.124937313s ago: executing program 0 (id=1515):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mysys/bus/usb-serial/drivers/sierra/new_id\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='11', 0x2)

1m14.102011691s ago: executing program 0 (id=1516):
r0 = socket(0x11, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000500)=0x68e, 0x4)
sendmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x4, 0x4)
recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2002, 0x0)

1m14.041744893s ago: executing program 0 (id=1517):
unshare(0x28000400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
epoll_create(0x567)
socketpair(0x21, 0x3, 0x5, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
read$FUSE(r2, &(0x7f0000001a80)={0x2020}, 0x2020)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="972fd1ebe125a60ab6d6b3fdf725be36", 0x10}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}], 0x1, 0x200080d0)
syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190)
syz_emit_ethernet(0x4e, &(0x7f0000001600)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x0, 0x0, @dev}}}}}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000740)=@newtaction={0x1c8, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd, {}, [{0x1b4, 0x1, [@m_mirred={0x1b0, 0x1e, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x2182, 0x8, 0x8, 0x1}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4, 0xfffffffffffffffd, 0x7, 0xc}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x4cfc64c5, 0x2, 0x1, 0xd}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3a, 0x1, 0x2, 0x3dfc}, 0x1}}, @TCA_MIRRED_PARMS={0xffffffffffffff23, 0x2, {{0x10, 0x4, 0x2, 0x2, 0xc}, 0x2}}, @TCA_MIRRED_PARMS={0xfffffffffffffda6, 0x2, {{0x5, 0x1, 0x3, 0x5, 0xb}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x55, 0x4010001, 0x3, 0xab5a, 0xfe04}}}]}, {0xa3, 0x6, "6cb9686a42b9d40de158508f0a2b5355d08ec3d0d3dc25d34487172fe6db64e5a1f79ec708388bd9841c50b3cbcb5c03ff3f0ab1c2c05cd0ad12668a202078ab1a03491374e4ccc619a712885fdeace45e330117d10cf7b75e01dc6399a38cb5ff366e3a64b15f58529bbfacf195ec9fdbe2624543094dde96d6a30ccb6bac556f4c2e414be832fafb25cc8bc11f36fac3e3e62fc3b5d34b16813d7fbd1bf0"}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40c0}, 0x0)

1m13.71380917s ago: executing program 0 (id=1518):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8eceb2e30985c02b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f00000009c0)={0x10, 0x0, "6c99df9579b4fd0343e1894f944911e9"})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x8, 0x1, 0x4, 0x1000, 0x0, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x79, "0100"}})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x8, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0xffffffff, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x2, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x15, 0x3e, 0x18e, 0x200006, 0x4, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x2, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x9, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x84, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x4, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x8, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x5, 0x5, 0x1, 0x40006, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x3, 0x2000, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x3, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000042000000b700000000000010950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836801ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d09a0a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a504a0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m11.947586725s ago: executing program 1 (id=1521):
r0 = socket(0x400000000010, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3}, [@CTA_SYNPROXY={0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1404}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x800)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffefffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x55b1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}]}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

1m9.695253397s ago: executing program 1 (id=1522):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x1}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xc1f5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

1m8.127119362s ago: executing program 1 (id=1523):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r0, &(0x7f00000000c0)="822a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)

1m6.21967584s ago: executing program 1 (id=1524):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
iopl(0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipe\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000140)='nfsd\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0)
mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000380)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp\x00')
mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00')
mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000080))
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, 0x0})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r4, 0x4068aea3, &(0x7f0000000140)={0xcc, 0x0, 0x1})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1m1.983192271s ago: executing program 34 (id=1498):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1m1.606595046s ago: executing program 1 (id=1526):
unshare(0x28000400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
epoll_create(0x567)
socketpair(0x21, 0x3, 0x5, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
read$FUSE(r2, &(0x7f0000001a80)={0x2020}, 0x2020)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="972fd1ebe125a60ab6d6b3fdf725be36", 0x10}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}], 0x1, 0x200080d0)
syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190)
syz_emit_ethernet(0x4e, &(0x7f0000001600)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x0, 0x0, @dev}}}}}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000740)=@newtaction={0x1c8, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd, {}, [{0x1b4, 0x1, [@m_mirred={0x1b0, 0x1e, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x2182, 0x8, 0x8, 0x1}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4, 0xfffffffffffffffd, 0x7, 0xc}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x4cfc64c5, 0x2, 0x1, 0xd}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3a, 0x1, 0x2, 0x3dfc}, 0x1}}, @TCA_MIRRED_PARMS={0xffffffffffffff23, 0x2, {{0x10, 0x4, 0x2, 0x2, 0xc}, 0x2}}, @TCA_MIRRED_PARMS={0xfffffffffffffda6, 0x2, {{0x5, 0x1, 0x3, 0x5, 0xb}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x55, 0x4010001, 0x3, 0xab5a, 0xfe04}}}]}, {0xa3, 0x6, "6cb9686a42b9d40de158508f0a2b5355d08ec3d0d3dc25d34487172fe6db64e5a1f79ec708388bd9841c50b3cbcb5c03ff3f0ab1c2c05cd0ad12668a202078ab1a03491374e4ccc619a712885fdeace45e330117d10cf7b75e01dc6399a38cb5ff366e3a64b15f58529bbfacf195ec9fdbe2624543094dde96d6a30ccb6bac556f4c2e414be832fafb25cc8bc11f36fac3e3e62fc3b5d34b16813d7fbd1bf0"}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40c0}, 0x0)

1m1.064807456s ago: executing program 1 (id=1527):
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="2e00330020180600080211000000080211000001ffffffffffff64000002080008021100000000060101010101010000080057"], 0x54}, 0x1, 0x0, 0x0, 0x4018010}, 0x804)

1m0.532244479s ago: executing program 35 (id=1507):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8eceb2e30985c02b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f00000009c0)={0x10, 0x0, "6c99df9579b4fd0343e1894f944911e9"})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x8, 0x1, 0x4, 0x1000, 0x0, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x79, "0100"}})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x8, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0xffffffff, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x2, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x15, 0x3e, 0x18e, 0x200006, 0x4, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x2, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x9, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x84, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x4, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x8, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x5, 0x5, 0x1, 0x40006, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x3, 0x2000, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x3, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

58.513559535s ago: executing program 36 (id=1518):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8eceb2e30985c02b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f00000009c0)={0x10, 0x0, "6c99df9579b4fd0343e1894f944911e9"})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x8, 0x1, 0x4, 0x1000, 0x0, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x79, "0100"}})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x8, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0xffffffff, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x2, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x15, 0x3e, 0x18e, 0x200006, 0x4, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x2, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x9, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x84, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x4, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x8, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x5, 0x5, 0x1, 0x40006, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x3, 0x2000, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x3, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000042000000b700000000000010950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836801ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d09a0a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a504a0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

50.434093614s ago: executing program 6 (id=1558):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xba)
write$char_usb(r1, 0x0, 0x0)
syz_usb_disconnect(r0)

50.148453576s ago: executing program 8 (id=1560):
setresgid(0x0, 0xee01, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0xee00, 0x0)

50.107525212s ago: executing program 8 (id=1561):
openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r0, 0x40140921, &(0x7f0000000440))

49.997831337s ago: executing program 8 (id=1562):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x20000000}, 0x1c)
write(r0, &(0x7f0000000200)="89", 0xffe3)

49.935386739s ago: executing program 8 (id=1563):
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_}ug$\bo-\x03Q`\\H\xe94\b,H\xbf\x00'/48, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040))
read$FUSE(r0, &(0x7f0000004140)={0x2020}, 0x2020)

49.870353009s ago: executing program 8 (id=1565):
unshare(0x28000400)
epoll_create(0x567)
socketpair(0x21, 0x3, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
read$FUSE(r2, &(0x7f0000001a80)={0x2020}, 0x2020)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="972fd1ebe125a60ab6d6b3fdf725be36", 0x10}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}], 0x1, 0x200080d0)
syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190)
syz_emit_ethernet(0x4e, &(0x7f0000001600)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x0, 0x0, @dev}}}}}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000740)=@newtaction={0x1c8, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd, {}, [{0x1b4, 0x1, [@m_mirred={0x1b0, 0x1e, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x2182, 0x8, 0x8, 0x1}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4, 0xfffffffffffffffd, 0x7, 0xc}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x4cfc64c5, 0x2, 0x1, 0xd}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3a, 0x1, 0x2, 0x3dfc}, 0x1}}, @TCA_MIRRED_PARMS={0xffffffffffffff23, 0x2, {{0x10, 0x4, 0x2, 0x2, 0xc}, 0x2}}, @TCA_MIRRED_PARMS={0xfffffffffffffda6, 0x2, {{0x5, 0x1, 0x3, 0x5, 0xb}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x55, 0x4010001, 0x3, 0xab5a, 0xfe04}}}]}, {0xa3, 0x6, "6cb9686a42b9d40de158508f0a2b5355d08ec3d0d3dc25d34487172fe6db64e5a1f79ec708388bd9841c50b3cbcb5c03ff3f0ab1c2c05cd0ad12668a202078ab1a03491374e4ccc619a712885fdeace45e330117d10cf7b75e01dc6399a38cb5ff366e3a64b15f58529bbfacf195ec9fdbe2624543094dde96d6a30ccb6bac556f4c2e414be832fafb25cc8bc11f36fac3e3e62fc3b5d34b16813d7fbd1bf0"}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40c0}, 0x0)

49.540259568s ago: executing program 8 (id=1570):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e63, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x46, &(0x7f0000000300)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0)

48.971946851s ago: executing program 6 (id=1574):
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone(0x20240200, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00')
pread64(r0, &(0x7f0000000680)=""/253, 0xfd, 0x8)

48.853254219s ago: executing program 6 (id=1575):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0xb00}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c)

48.747223582s ago: executing program 6 (id=1576):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r0 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
statx(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x400, 0x144, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
ioprio_set$uid(0x3, r3, 0x4007)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x7ff, 0x9, 0x2, 0x7ff}]})
r4 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000})
io_uring_enter(r4, 0x0, 0x200002, 0xf, &(0x7f0000000000)={[0x0, 0x4]}, 0x8)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0xa068}}, './file0\x00'})
connect$inet(r5, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700))
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000002500)={0x0}, 0x1, 0x0, 0x0, 0x4000401}, 0x48d0)
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f0000000000)={0x89, 0xa5}, 0x2)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x81}}]}, 0x20}, 0x1, 0x0, 0x0, 0x200060c0}, 0x4)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000023c0)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f2c51e82825f9d9762cd3241cca51e9757f3ad1179cba8dd428d591c1f2dcc599111dc4c57418cbc99c078a3d10c19e0cd944f19212daba5dd27c2552f5dd06d4c63b11aed7135a941eb7e8176b3314508de2130b60ddfb90ef4bcc594c2c2b63531329b48f79af2343614b69b17ddfae682299aebf82f24222193faab85c84e21b2938a025984cf72bbccecb74234c6916a789aba88c052c5643ca18f01a100c0e12ed4fd2d997f8cb05bf2ede0b7e2120f9a3ddd79388df129e91aedcb1de1d87a56b12ad5f577512fd1aa307eea4a11de5b706c654abe806851a636a55a24404851834f94816797d40dbd17a", 0x11b}], 0x1}, 0x8000)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

47.708793002s ago: executing program 6 (id=1578):
unshare(0x28000400)
epoll_create(0x567)
socketpair(0x21, 0x3, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
read$FUSE(r2, &(0x7f0000001a80)={0x2020}, 0x2020)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="972fd1ebe125a60ab6d6b3fdf725be36", 0x10}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}], 0x1, 0x200080d0)
syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190)
syz_emit_ethernet(0x4e, &(0x7f0000001600)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x0, 0x0, @dev}}}}}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000740)=@newtaction={0x1c8, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd, {}, [{0x1b4, 0x1, [@m_mirred={0x1b0, 0x1e, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x2182, 0x8, 0x8, 0x1}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4, 0xfffffffffffffffd, 0x7, 0xc}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x4cfc64c5, 0x2, 0x1, 0xd}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3a, 0x1, 0x2, 0x3dfc}, 0x1}}, @TCA_MIRRED_PARMS={0xffffffffffffff23, 0x2, {{0x10, 0x4, 0x2, 0x2, 0xc}, 0x2}}, @TCA_MIRRED_PARMS={0xfffffffffffffda6, 0x2, {{0x5, 0x1, 0x3, 0x5, 0xb}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x55, 0x4010001, 0x3, 0xab5a, 0xfe04}}}]}, {0xa3, 0x6, "6cb9686a42b9d40de158508f0a2b5355d08ec3d0d3dc25d34487172fe6db64e5a1f79ec708388bd9841c50b3cbcb5c03ff3f0ab1c2c05cd0ad12668a202078ab1a03491374e4ccc619a712885fdeace45e330117d10cf7b75e01dc6399a38cb5ff366e3a64b15f58529bbfacf195ec9fdbe2624543094dde96d6a30ccb6bac556f4c2e414be832fafb25cc8bc11f36fac3e3e62fc3b5d34b16813d7fbd1bf0"}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40c0}, 0x0)

47.414754263s ago: executing program 6 (id=1579):
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x100004, 0x220104, 0xe2a3, 0x1}, 0x50)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffd, 0x1000, 0x0, 0xfffffffe}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x1bd, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1}}}, &(0x7f00000004c0))

45.98394375s ago: executing program 37 (id=1527):
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="2e00330020180600080211000000080211000001ffffffffffff64000002080008021100000000060101010101010000080057"], 0x54}, 0x1, 0x0, 0x0, 0x4018010}, 0x804)

34.517735536s ago: executing program 38 (id=1570):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e63, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x46, &(0x7f0000000300)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0)

32.222400445s ago: executing program 39 (id=1579):
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x100004, 0x220104, 0xe2a3, 0x1}, 0x50)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffd, 0x1000, 0x0, 0xfffffffe}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x1bd, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1}}}, &(0x7f00000004c0))

31.472128594s ago: executing program 7 (id=1652):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
write(r0, &(0x7f0000000940)='2', 0x1)

31.401166364s ago: executing program 7 (id=1653):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='mtd0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/f1\x00', 0x42, 0x1ff)
close(r0)
umount2(&(0x7f0000000200)='./mnt\x00', 0x0)

31.362574818s ago: executing program 7 (id=1654):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x34, 0x41, 0x107, 0x70bd28, 0xfffffff6, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\n\x00'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0x9, 0x14, 0x0, 0x1, [@nested={0x4, 0x2}, @generic='v']}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b}, 0x94)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={<r6=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x80, @local}, 0xfffffffffffffc3b)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
mount(0x0, 0x0, 0x0, 0x8, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0)

30.420418137s ago: executing program 7 (id=1656):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0)
umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8)

30.384715107s ago: executing program 7 (id=1657):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
socket(0xa, 0x3, 0xff)
syz_emit_ethernet(0x6e, &(0x7f0000000280)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4007fd, {0x2, 0x6, "bfe431", 0x3f6f, 0xff, 0x1, @mcast1, @loopback, [@fragment={0x84, 0x0, 0xa, 0x0, 0x0, 0x7, 0x65}]}}}}}}}, 0x0)

29.945787686s ago: executing program 7 (id=1660):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x22)

29.858061594s ago: executing program 40 (id=1660):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x22)

27.609993542s ago: executing program 9 (id=1667):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d)
umount2(&(0x7f00000001c0)='./file0\x00', 0x1)
statfs(&(0x7f0000000000)='./file0\x00', 0x0)

27.539749212s ago: executing program 9 (id=1668):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, r1, 0x3, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x2c, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000)

27.2852078s ago: executing program 9 (id=1669):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
flistxattr(r0, &(0x7f0000000080)=""/214, 0xd6)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0005007e0500000603000003000000fcffffff05010905a10105091901290a150025017501950a8102950175068103c0"], 0x135)
write$UHID_INPUT2(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\f\x00\x00\x00g\x00 '], 0xc)

17.463376784s ago: executing program 9 (id=1738):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r0, &(0x7f0000010480)="703a732f70202e2f66696c65303a300c24fed0849287cddd1218bf84bfffd25dd05a7c036beac8bce2c54fc7c1618e9d8e21fa8d119612ee2c553a6a1affd2e77d47693875a618a68f2a92cbd7db8fbd317736e38d8ca1", 0x57)

17.413068198s ago: executing program 9 (id=1739):
unshare(0x28000400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
epoll_create(0x567)
socketpair(0x21, 0x3, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
read$FUSE(r2, &(0x7f0000001a80)={0x2020}, 0x2020)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="972fd1ebe125a60ab6d6b3fdf725be36", 0x10}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}], 0x1, 0x200080d0)
syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190)
syz_emit_ethernet(0x4e, &(0x7f0000001600)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x0, 0x0, @dev}}}}}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000740)=@newtaction={0x1c8, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd, {}, [{0x1b4, 0x1, [@m_mirred={0x1b0, 0x1e, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x2182, 0x8, 0x8, 0x1}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4, 0xfffffffffffffffd, 0x7, 0xc}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x4cfc64c5, 0x2, 0x1, 0xd}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3a, 0x1, 0x2, 0x3dfc}, 0x1}}, @TCA_MIRRED_PARMS={0xffffffffffffff23, 0x2, {{0x10, 0x4, 0x2, 0x2, 0xc}, 0x2}}, @TCA_MIRRED_PARMS={0xfffffffffffffda6, 0x2, {{0x5, 0x1, 0x3, 0x5, 0xb}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x55, 0x4010001, 0x3, 0xab5a, 0xfe04}}}]}, {0xa3, 0x6, "6cb9686a42b9d40de158508f0a2b5355d08ec3d0d3dc25d34487172fe6db64e5a1f79ec708388bd9841c50b3cbcb5c03ff3f0ab1c2c05cd0ad12668a202078ab1a03491374e4ccc619a712885fdeace45e330117d10cf7b75e01dc6399a38cb5ff366e3a64b15f58529bbfacf195ec9fdbe2624543094dde96d6a30ccb6bac556f4c2e414be832fafb25cc8bc11f36fac3e3e62fc3b5d34b16813d7fbd1bf0"}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40c0}, 0x0)

17.159249899s ago: executing program 9 (id=1740):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]})

15.510000287s ago: executing program 5 (id=1758):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan0\x00', <r2=>0x0})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x4048080)

15.430608848s ago: executing program 5 (id=1760):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
eventfd2(0x0, 0x0)

15.291758491s ago: executing program 5 (id=1764):
r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_normal', 0x82802, 0x8)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x71, 0x0, 0x0, 0x19, 0x0, "585633671ffbca2496d5728d0f8f2bfcb2c20f83c6f1fa74940c64d4abfa391b832442b953fc573f4446b09d04892c8343a864c88ace846789292b47ee7a6d8e", "c50f751886fb50e007d5d016c44110f534af43cc07fac51bee13920811fd7002dc8aada05a7c0bda82f7ff87fdc11bc4ec00", "ee221bd6914010cf945a86f1069be93a8dc7d78055821a5718fd6b88965c471e", [0x4000003, 0x6]})
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xffffffff80000001)

15.039667661s ago: executing program 5 (id=1768):
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e89010203010902120001085440010904"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
mkdir(&(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f0000000440)='stm32g0-typec -8', 0x10)

13.800653419s ago: executing program 5 (id=1774):
unshare(0x28000400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
epoll_create(0x567)
socketpair(0x21, 0x3, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x70}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
read$FUSE(r2, &(0x7f0000001a80)={0x2020}, 0x2020)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="972fd1ebe125a60ab6d6b3fdf725be36", 0x10}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}], 0x1, 0x200080d0)
syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190)
syz_emit_ethernet(0x4e, &(0x7f0000001600)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x0, 0x0, @dev}}}}}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000740)=@newtaction={0x1c8, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd, {}, [{0x1b4, 0x1, [@m_mirred={0x1b0, 0x1e, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x2182, 0x8, 0x8, 0x1}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4, 0xfffffffffffffffd, 0x7, 0xc}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x4cfc64c5, 0x2, 0x1, 0xd}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3a, 0x1, 0x2, 0x3dfc}, 0x1}}, @TCA_MIRRED_PARMS={0xffffffffffffff23, 0x2, {{0x10, 0x4, 0x2, 0x2, 0xc}, 0x2}}, @TCA_MIRRED_PARMS={0xfffffffffffffda6, 0x2, {{0x5, 0x1, 0x3, 0x5, 0xb}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x55, 0x4010001, 0x3, 0xab5a, 0xfe04}}}]}, {0xa3, 0x6, "6cb9686a42b9d40de158508f0a2b5355d08ec3d0d3dc25d34487172fe6db64e5a1f79ec708388bd9841c50b3cbcb5c03ff3f0ab1c2c05cd0ad12668a202078ab1a03491374e4ccc619a712885fdeace45e330117d10cf7b75e01dc6399a38cb5ff366e3a64b15f58529bbfacf195ec9fdbe2624543094dde96d6a30ccb6bac556f4c2e414be832fafb25cc8bc11f36fac3e3e62fc3b5d34b16813d7fbd1bf0"}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40c0}, 0x0)

13.5648152s ago: executing program 5 (id=1776):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0x4}, {0x7, 0xffff}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r1, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0)

11.738732358s ago: executing program 2 (id=1780):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x29)
write(r0, &(0x7f0000000000)='7', 0x1)
socket$inet_sctp(0x2, 0x1, 0x84)

11.618073569s ago: executing program 2 (id=1781):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf254f00000008000300", @ANYRES32=r3, @ANYBLOB="64007a8008000400010000000c000300201b1d5f039b738a0c000300230753ec4079e77e0800040002000000080004008100000014000100b778f931073e90047852c3dc227f2cf4140002"], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

11.511643158s ago: executing program 2 (id=1782):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r0, &(0x7f00000000c0)="8f2a0a65bd8c202b0304000e0580a7b6070d63e286a5cefe", 0x5ac)

11.442160374s ago: executing program 2 (id=1783):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000004140)={0x2020}, 0x206f)

11.441811065s ago: executing program 2 (id=1784):
unshare(0x28000400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
epoll_create(0x567)
socketpair(0x21, 0x3, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
read$FUSE(r2, &(0x7f0000001a80)={0x2020}, 0x2020)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="972fd1ebe125a60ab6d6b3fdf725be36", 0x10}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}], 0x1, 0x200080d0)
syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190)
syz_emit_ethernet(0x4e, &(0x7f0000001600)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x0, 0x0, @dev}}}}}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000740)=@newtaction={0x1c8, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd, {}, [{0x1b4, 0x1, [@m_mirred={0x1b0, 0x1e, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x2182, 0x8, 0x8, 0x1}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4, 0xfffffffffffffffd, 0x7, 0xc}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x4cfc64c5, 0x2, 0x1, 0xd}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3a, 0x1, 0x2, 0x3dfc}, 0x1}}, @TCA_MIRRED_PARMS={0xffffffffffffff23, 0x2, {{0x10, 0x4, 0x2, 0x2, 0xc}, 0x2}}, @TCA_MIRRED_PARMS={0xfffffffffffffda6, 0x2, {{0x5, 0x1, 0x3, 0x5, 0xb}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x55, 0x4010001, 0x3, 0xab5a, 0xfe04}}}]}, {0xa3, 0x6, "6cb9686a42b9d40de158508f0a2b5355d08ec3d0d3dc25d34487172fe6db64e5a1f79ec708388bd9841c50b3cbcb5c03ff3f0ab1c2c05cd0ad12668a202078ab1a03491374e4ccc619a712885fdeace45e330117d10cf7b75e01dc6399a38cb5ff366e3a64b15f58529bbfacf195ec9fdbe2624543094dde96d6a30ccb6bac556f4c2e414be832fafb25cc8bc11f36fac3e3e62fc3b5d34b16813d7fbd1bf0"}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40c0}, 0x0)

11.123193718s ago: executing program 2 (id=1788):
unshare(0x26020480)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x0)
write(r0, &(0x7f0000000900)='+ 1 0 1', 0x7)

1.98264552s ago: executing program 41 (id=1740):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]})

1.505436279s ago: executing program 3 (id=1804):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0xfffff000)
mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0)

1.319053702s ago: executing program 3 (id=1805):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000280)='sync\x00', 0x0, 0x0)

1.238526841s ago: executing program 3 (id=1806):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x6, 0x204031, 0xffffffffffffffff, 0xec772000)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xbc})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
setns(0xc9, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce05562}]}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14}}, 0xa4}}, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
pipe2$9p(&(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x0)
tee(r3, r2, 0x9, 0x8)
write$FUSE_ATTR(r2, &(0x7f00000003c0)={0x78, 0x0, 0x0, {0x1, 0x9, 0x0, {0x1, 0x0, 0x87ac, 0x1, 0xffffffff, 0x4, 0xfffffcd8, 0x4, 0x7, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x6}}}, 0xfdef)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0)
r4 = socket(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'hsr0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000140)="01154e0001000011221e445588fbca0100011606", 0x1c, 0x4044015, &(0x7f0000000040)={0x11, 0x0, r5, 0x0, 0x0, 0x0}, 0x14)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x51efc45ed88f1b04)
mmap$binder(&(0x7f0000202000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0xe04)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0xc)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}}}]}, 0x38}}, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000010300)={r7, @in={{0x2, 0x4e24, @loopback}}}, &(0x7f00000103c0)=0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r9=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r9, 0x89b0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_channels={0x1, 0x5, 0xfffffffe, 0xffd, 0x3, 0xffffdffc, 0x3, 0x0, 0x200}})

240.131972ms ago: executing program 3 (id=1807):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x398, 0x0, 0xc0, 0xc0, 0xc0, 0xc0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x3a}, 0xff, 0xff, 'ipvlan0\x00', 'veth1\x00', {0xff}, {0xff}, 0x1, 0x0, 0x10}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x2, @multicast2}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x3e, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x10}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x19, 0x10}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

153.271226ms ago: executing program 3 (id=1808):
r0 = socket(0x10, 0x80003, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0xf9, 0x1, 0x8080000, 0x2000, &(0x7f0000000000/0x2000)=nil})
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 3 (id=1809):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x8000, 0x8a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x50)
write(r0, &(0x7f0000000000)='7', 0x1)

kernel console output (not intermixed with test programs):

[1, 0] type 2 family 0 port 6081 - 0
[  636.190613][ T5741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  636.252436][T11920] bridge0: port 1(bridge_slave_0) entered blocking state
[  636.252526][T11920] bridge0: port 1(bridge_slave_0) entered disabled state
[  636.252665][T11920] bridge_slave_0: entered allmulticast mode
[  636.253377][T11920] bridge_slave_0: entered promiscuous mode
[  636.257193][ T5741] Bluetooth: hci4: command tx timeout
[  636.259641][T11899] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  636.273734][T11899] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  636.274510][T11899] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  636.282763][T11899] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  636.288306][ T5448] 8021q: adding VLAN 0 to HW filter on device eth12
[  636.289659][T11920] bridge0: port 2(bridge_slave_1) entered blocking state
[  636.289716][T11920] bridge0: port 2(bridge_slave_1) entered disabled state
[  636.289795][T11920] bridge_slave_1: entered allmulticast mode
[  636.291249][T11920] bridge_slave_1: entered promiscuous mode
[  636.320231][T11899] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  636.331452][T11899] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  636.365541][T11920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  636.368191][T11920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  636.458659][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  636.492515][T11920] team0: Port device team_slave_0 added
[  636.510572][T11004] syz_tun (unregistering): left allmulticast mode
[  636.525661][T11920] team0: Port device team_slave_1 added
[  636.569454][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  636.579425][T11920] batman_adv: batadv0: Adding interface: batadv_slave_0
[  636.579479][T11920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  636.579702][T11920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  636.584698][T11920] batman_adv: batadv0: Adding interface: batadv_slave_1
[  636.584711][T11920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  636.584732][T11920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  636.687164][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  636.706160][T11920] hsr_slave_0: entered promiscuous mode
[  636.707082][T11920] hsr_slave_1: entered promiscuous mode
[  636.707614][T11920] debugfs: 'hsr0' already exists in 'hsr'
[  636.707631][T11920] Cannot create hsr debugfs directory
[  636.842483][T11899] 8021q: adding VLAN 0 to HW filter on device bond0
[  636.881245][T11960] Bluetooth: hci3: command tx timeout
[  636.931551][T11899] 8021q: adding VLAN 0 to HW filter on device team0
[  636.967148][ T5448] 8021q: adding VLAN 0 to HW filter on device eth13
[  636.997248][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state
[  636.997322][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state
[  637.032861][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state
[  637.032931][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state
[  637.046880][   T13] bridge_slave_1: left allmulticast mode
[  637.046930][   T13] bridge_slave_1: left promiscuous mode
[  637.047239][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  637.053915][   T13] bridge_slave_0: left allmulticast mode
[  637.053936][   T13] bridge_slave_0: left promiscuous mode
[  637.054032][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  637.176228][   T13] team0: Port device bond0 removed
[  637.180461][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  637.186567][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  637.194617][   T13] bond0 (unregistering): Released all slaves
[  637.354636][T11920] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  637.359982][T11920] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  637.380471][T11920] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  637.384792][T11920] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  637.385258][T11920] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  637.390902][T11920] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  637.395472][T11920] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  637.406843][T11920] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  637.535285][   T13] hsr_slave_0: left promiscuous mode
[  637.537557][   T13] hsr_slave_1: left promiscuous mode
[  637.538120][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  637.538133][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  637.539149][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  637.539159][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  637.563534][   T13] veth1_macvtap: left promiscuous mode
[  637.563606][   T13] veth0_macvtap: left promiscuous mode
[  637.563701][   T13] veth1_vlan: left promiscuous mode
[  637.563731][   T13] veth0_vlan: left promiscuous mode
[  637.778394][   T13] team0 (unregistering): Port device team_slave_1 removed
[  637.799240][   T13] team0 (unregistering): Port device team_slave_0 removed
[  637.907087][ T5448] 8021q: adding VLAN 0 to HW filter on device eth14
[  637.947320][T11957] bridge0: port 1(bridge_slave_0) entered blocking state
[  637.947455][T11957] bridge0: port 1(bridge_slave_0) entered disabled state
[  637.947568][T11957] bridge_slave_0: entered allmulticast mode
[  637.948834][T11957] bridge_slave_0: entered promiscuous mode
[  637.968650][T11957] bridge0: port 2(bridge_slave_1) entered blocking state
[  637.968779][T11957] bridge0: port 2(bridge_slave_1) entered disabled state
[  637.968907][T11957] bridge_slave_1: entered allmulticast mode
[  637.970295][T11957] bridge_slave_1: entered promiscuous mode
[  638.002643][T11957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  638.005981][T11957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  638.028066][T11957] team0: Port device team_slave_0 added
[  638.029762][T11957] team0: Port device team_slave_1 added
[  638.049659][T11957] batman_adv: batadv0: Adding interface: batadv_slave_0
[  638.049709][T11957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  638.049997][T11957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  638.053947][T11920] 8021q: adding VLAN 0 to HW filter on device bond0
[  638.054456][T11957] batman_adv: batadv0: Adding interface: batadv_slave_1
[  638.054464][T11957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  638.054479][T11957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  638.108301][T11920] 8021q: adding VLAN 0 to HW filter on device team0
[  638.130579][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.130669][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state
[  638.132476][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.132524][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state
[  638.156167][T11957] hsr_slave_0: entered promiscuous mode
[  638.156745][T11957] hsr_slave_1: entered promiscuous mode
[  638.157109][T11957] debugfs: 'hsr0' already exists in 'hsr'
[  638.157136][T11957] Cannot create hsr debugfs directory
[  638.292910][T11899] 8021q: adding VLAN 0 to HW filter on device batadv0
[  638.314287][T11960] Bluetooth: hci0: command tx timeout
[  638.315232][T11960] Bluetooth: hci4: command tx timeout
[  638.329882][T11920] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  638.360742][ T5448] 8021q: adding VLAN 0 to HW filter on device eth15
[  638.614313][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.638067][T11957] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  638.643556][T11957] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  638.646613][T11957] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  638.661208][T11957] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  638.662799][T11957] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  638.671797][T11957] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  638.700272][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.708632][T11957] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  638.713118][T11957] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  638.738255][ T5448] 8021q: adding VLAN 0 to HW filter on device eth16
[  638.749811][T11899] veth0_vlan: entered promiscuous mode
[  638.764051][T11899] veth1_vlan: entered promiscuous mode
[  638.796375][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.825619][T11899] veth0_macvtap: entered promiscuous mode
[  638.832230][T11899] veth1_macvtap: entered promiscuous mode
[  638.849027][T11899] batman_adv: batadv0: Interface activated: batadv_slave_0
[  638.860105][T11899] batman_adv: batadv0: Interface activated: batadv_slave_1
[  638.866666][T11957] 8021q: adding VLAN 0 to HW filter on device bond0
[  638.899800][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.910845][ T5826] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  638.910971][ T5826] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  638.953614][ T5736] Bluetooth: hci3: command tx timeout
[  638.954796][T11957] 8021q: adding VLAN 0 to HW filter on device team0
[  638.969325][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.969422][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state
[  639.055133][T11920] 8021q: adding VLAN 0 to HW filter on device batadv0
[  639.069502][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state
[  639.069649][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state
[  639.113437][T11051] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  639.130569][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  639.131498][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  639.141561][ T5786] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  639.223527][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  639.223579][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  639.256008][   T13] dvmrp8: left allmulticast mode
[  639.395094][   T13] bond1 (unregistering): (slave bridge0): Releasing backup interface
[  639.404030][   T13] team0: Port device bond0 removed
[  639.407565][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  639.414221][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  639.418358][   T13] bond0 (unregistering): Released all slaves
[  639.422540][   T13] bond1 (unregistering): Released all slaves
[  639.433286][ T5448] 8021q: adding VLAN 0 to HW filter on device eth17
[  639.539418][T11920] veth0_vlan: entered promiscuous mode
[  639.540534][   T13] tipc: Left network mode
[  639.557335][T11920] veth1_vlan: entered promiscuous mode
[  639.640951][T11920] veth0_macvtap: entered promiscuous mode
[  639.709515][T11920] veth1_macvtap: entered promiscuous mode
[  639.793353][T11920] batman_adv: batadv0: Interface activated: batadv_slave_0
[  639.805689][T11920] batman_adv: batadv0: Interface activated: batadv_slave_1
[  639.808372][T12071] FAULT_INJECTION: forcing a failure.
[  639.808372][T12071] name failslab, interval 1, probability 0, space 0, times 1
[  639.808398][T12071] CPU: 2 UID: 0 PID: 12071 Comm: syz.6.1525 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  639.808415][T12071] Tainted: [L]=SOFTLOCKUP
[  639.808419][T12071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  639.808427][T12071] Call Trace:
[  639.808432][T12071]  <TASK>
[  639.808437][T12071]  dump_stack_lvl+0x100/0x190
[  639.808460][T12071]  should_fail_ex.cold+0x5/0xa
[  639.808478][T12071]  should_failslab+0xc2/0x120
[  639.808499][T12071]  kmem_cache_alloc_noprof+0x92/0x6a0
[  639.808514][T12071]  ? __ksm_enter+0x3c/0x630
[  639.808532][T12071]  __ksm_enter+0x3c/0x630
[  639.808544][T12071]  ? mas_prev_slot+0x768/0x11b0
[  639.808564][T12071]  ksm_madvise+0x24a/0x2c0
[  639.808577][T12071]  madvise_vma_behavior+0x261/0x2350
[  639.808595][T12071]  ? mas_prev+0xa4/0x100
[  639.808611][T12071]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  639.808647][T12071]  ? mas_walk+0x260/0x310
[  639.808667][T12071]  ? find_vma_prev+0xd8/0x150
[  639.808682][T12071]  ? __rb_reserve_next.constprop.0+0x6f7/0x1640
[  639.808698][T12071]  ? __pfx_find_vma_prev+0x10/0x10
[  639.808718][T12071]  ? ring_buffer_lock_reserve+0x4bb/0x1220
[  639.808738][T12071]  madvise_walk_vmas+0x30e/0xc50
[  639.808759][T12071]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  639.808777][T12071]  ? __lock_acquire+0x4c5/0x1ec0
[  639.808797][T12071]  ? __pfx_futex_wake_mark+0x10/0x10
[  639.808811][T12071]  ? __pfx_ring_buffer_discard_commit+0x10/0x10
[  639.808832][T12071]  madvise_do_behavior+0x1ea/0x510
[  639.808848][T12071]  ? __pfx___might_resched+0x10/0x10
[  639.808865][T12071]  ? __pfx_madvise_do_behavior+0x10/0x10
[  639.808886][T12071]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  639.808904][T12071]  do_madvise+0x238/0x290
[  639.808919][T12071]  ? __pfx_do_madvise+0x10/0x10
[  639.808945][T12071]  ? find_held_lock+0x2b/0x80
[  639.808956][T12071]  ? trace_syscall_enter+0xcc/0x120
[  639.808974][T12071]  ? trace_syscall_enter+0xcc/0x120
[  639.808994][T12071]  __ia32_sys_madvise+0xa7/0x110
[  639.809024][T12071]  ? trace_syscall_enter+0xd6/0x120
[  639.809042][T12071]  __do_fast_syscall_32+0x13a/0x8b0
[  639.809061][T12071]  do_fast_syscall_32+0x32/0x70
[  639.809077][T12071]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  639.809100][T12071] RIP: 0023:0xf708efec
[  639.809117][T12071] Code: Unable to access opcode bytes at 0xf708efc2.
[  639.809124][T12071] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000db
[  639.809138][T12071] RAX: ffffffffffffffda RBX: 0000000080ffc000 RCX: 0000000000002000
[  639.809147][T12071] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000
[  639.809155][T12071] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  639.809164][T12071] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  639.809172][T12071] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  639.809190][T12071]  </TASK>
[  639.823917][T11051] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  639.824304][T11051] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  639.824411][T11051] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  639.824478][T11051] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  639.989232][ T5448] 8021q: adding VLAN 0 to HW filter on device eth18
[  640.281308][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  640.281359][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  640.358576][T11957] 8021q: adding VLAN 0 to HW filter on device batadv0
[  640.391584][ T5736] Bluetooth: hci4: command tx timeout
[  640.391655][ T5736] Bluetooth: hci0: command tx timeout
[  640.587935][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  640.587991][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  640.648289][ T5448] 8021q: adding VLAN 0 to HW filter on device eth19
[  640.889567][T12101] netlink: 'syz.7.1528': attribute type 5 has an invalid length.
[  640.894301][T12101] netlink: 'syz.7.1528': attribute type 9 has an invalid length.
[  640.897747][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1528'.
[  641.038929][   T13] hsr_slave_0: left promiscuous mode
[  641.044196][T11960] Bluetooth: hci3: command tx timeout
[  641.092365][   T13] hsr_slave_1: left promiscuous mode
[  641.094774][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  641.097493][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  641.111695][   T13] veth1_macvtap: left promiscuous mode
[  641.114322][   T13] veth0_macvtap: left promiscuous mode
[  641.119441][   T13] veth1_vlan: left promiscuous mode
[  641.122724][   T13] veth0_vlan: left promiscuous mode
[  641.172605][T12107] md: pers->run() failed ...
[  641.249104][   T13] smc: removing net device vlan1 with user defined pnetid SYZ2
[  641.332689][   T13] team0 (unregistering): Port device team_slave_1 removed
[  641.362322][   T13] team0 (unregistering): Port device team_slave_0 removed
[  641.533848][ T5448] 8021q: adding VLAN 0 to HW filter on device eth20
[  641.584258][T11957] veth0_vlan: entered promiscuous mode
[  641.587987][T11957] veth1_vlan: entered promiscuous mode
[  641.618538][T11957] veth0_macvtap: entered promiscuous mode
[  641.621538][T11957] veth1_macvtap: entered promiscuous mode
[  641.628722][T11957] batman_adv: batadv0: Interface activated: batadv_slave_0
[  641.630984][T11957] batman_adv: batadv0: Interface activated: batadv_slave_1
[  641.639541][ T5826] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  641.639672][ T5826] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  641.639750][ T5826] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  641.639787][ T5826] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  641.886094][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  641.886137][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  641.935516][T11667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  641.935577][T11667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  641.995567][T12121] FAULT_INJECTION: forcing a failure.
[  641.995567][T12121] name failslab, interval 1, probability 0, space 0, times 0
[  641.995643][T12121] CPU: 0 UID: 0 PID: 12121 Comm: syz.7.1538 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  641.995673][T12121] Tainted: [L]=SOFTLOCKUP
[  641.995679][T12121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  641.995687][T12121] Call Trace:
[  641.995691][T12121]  <TASK>
[  641.995697][T12121]  dump_stack_lvl+0x100/0x190
[  641.995719][T12121]  should_fail_ex.cold+0x5/0xa
[  641.995735][T12121]  should_failslab+0xc2/0x120
[  641.995754][T12121]  kmem_cache_alloc_noprof+0x92/0x6a0
[  641.995770][T12121]  ? prepare_creds+0x2c/0x950
[  641.995787][T12121]  prepare_creds+0x2c/0x950
[  641.995803][T12121]  __sys_setuid+0x9c/0x440
[  641.995821][T12121]  __do_fast_syscall_32+0x13a/0x8b0
[  641.995846][T12121]  do_fast_syscall_32+0x32/0x70
[  641.995863][T12121]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  641.995881][T12121] RIP: 0023:0xf70aefec
[  641.995896][T12121] Code: Unable to access opcode bytes at 0xf70aefc2.
[  641.995902][T12121] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000017
[  641.995915][T12121] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000
[  641.995923][T12121] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  641.995930][T12121] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  641.995938][T12121] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  641.995945][T12121] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  641.995961][T12121]  </TASK>
[  642.207666][T12131] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  642.223233][T12131] udc usbip-vudc.0: failed to start g1: -19
[  642.227386][T12131] UDC core: g1: couldn't find an available UDC or it's busy
[  642.269851][   T13] IPVS: stop unused estimator thread 0...
[  642.323520][ T5448] 8021q: adding VLAN 0 to HW filter on device eth21
[  642.476121][T12142] FAULT_INJECTION: forcing a failure.
[  642.476121][T12142] name failslab, interval 1, probability 0, space 0, times 0
[  642.476198][T12142] CPU: 0 UID: 0 PID: 12142 Comm: syz.6.1544 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  642.476226][T12142] Tainted: [L]=SOFTLOCKUP
[  642.476250][T12142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  642.476258][T12142] Call Trace:
[  642.476263][T12142]  <TASK>
[  642.476268][T12142]  dump_stack_lvl+0x100/0x190
[  642.476288][T12142]  should_fail_ex.cold+0x5/0xa
[  642.476304][T12142]  should_failslab+0xc2/0x120
[  642.476322][T12142]  kmem_cache_alloc_noprof+0x92/0x6a0
[  642.476335][T12142]  ? d_instantiate+0x8a/0xb0
[  642.476352][T12142]  ? alloc_empty_file+0x5b/0x1c0
[  642.476373][T12142]  alloc_empty_file+0x5b/0x1c0
[  642.476392][T12142]  alloc_file_pseudo+0x183/0x290
[  642.476411][T12142]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  642.476430][T12142]  ? alloc_fd+0x471/0x7a0
[  642.476443][T12142]  ? do_raw_spin_unlock+0x145/0x1e0
[  642.476463][T12142]  __anon_inode_getfile+0xe8/0x280
[  642.476484][T12142]  anon_inode_getfile_fmode+0x37/0xa0
[  642.476504][T12142]  __do_sys_fanotify_init+0xa0d/0xe30
[  642.476519][T12142]  __do_fast_syscall_32+0x13a/0x8b0
[  642.476537][T12142]  do_fast_syscall_32+0x32/0x70
[  642.476552][T12142]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  642.476566][T12142] RIP: 0023:0xf708efec
[  642.476580][T12142] Code: Unable to access opcode bytes at 0xf708efc2.
[  642.476587][T12142] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000152
[  642.476602][T12142] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000002
[  642.476612][T12142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  642.476621][T12142] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  642.476628][T12142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  642.476634][T12142] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  642.476649][T12142]  </TASK>
[  642.481191][ T5736] Bluetooth: hci4: command tx timeout
[  642.481222][T11960] Bluetooth: hci0: command tx timeout
[  642.771124][T11183] usb 12-1: new high-speed USB device number 2 using dummy_hcd
[  642.921807][T11183] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  642.922728][T11183] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  642.922745][T11183] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  642.922758][T11183] usb 12-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  642.924432][T11183] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.924444][T11183] usb 12-1: Product: syz
[  642.924452][T11183] usb 12-1: Manufacturer: syz
[  642.924459][T11183] usb 12-1: SerialNumber: syz
[  642.926972][T11183] hub 12-1:1.0: bad descriptor, ignoring hub
[  642.926989][T11183] hub 12-1:1.0: probe with driver hub failed with error -5
[  643.043427][T12167] FAULT_INJECTION: forcing a failure.
[  643.043427][T12167] name failslab, interval 1, probability 0, space 0, times 0
[  643.043591][T12167] CPU: 0 UID: 0 PID: 12167 Comm: syz.8.1550 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  643.043621][T12167] Tainted: [L]=SOFTLOCKUP
[  643.043628][T12167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  643.043640][T12167] Call Trace:
[  643.043648][T12167]  <TASK>
[  643.043656][T12167]  dump_stack_lvl+0x100/0x190
[  643.043687][T12167]  should_fail_ex.cold+0x5/0xa
[  643.043730][T12167]  should_failslab+0xc2/0x120
[  643.043775][T12167]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  643.043801][T12167]  ? hugetlbfs_alloc_inode+0x8c/0x1d0
[  643.043839][T12167]  hugetlbfs_alloc_inode+0x8c/0x1d0
[  643.043869][T12167]  ? __pfx_hugetlbfs_alloc_inode+0x10/0x10
[  643.043905][T12167]  alloc_inode+0x68/0x250
[  643.043936][T12167]  new_inode+0x22/0x1c0
[  643.043968][T12167]  hugetlbfs_get_inode+0x39a/0x700
[  643.043999][T12167]  ? do_raw_spin_lock+0x128/0x260
[  643.044036][T12167]  hugetlb_file_setup+0x15b/0x5b0
[  643.044070][T12167]  memfd_alloc_file+0xc2/0x610
[  643.044098][T12167]  ? _raw_spin_unlock+0x28/0x50
[  643.044120][T12167]  ? __pfx_memfd_alloc_file+0x10/0x10
[  643.044155][T12167]  __do_sys_memfd_create+0x236/0x3d0
[  643.044186][T12167]  __do_fast_syscall_32+0x13a/0x8b0
[  643.044217][T12167]  do_fast_syscall_32+0x32/0x70
[  643.044274][T12167]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  643.044303][T12167] RIP: 0023:0xf7fb5fec
[  643.044326][T12167] Code: Unable to access opcode bytes at 0xf7fb5fc2.
[  643.044336][T12167] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000164
[  643.044358][T12167] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000004
[  643.044372][T12167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  643.044384][T12167] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  643.044395][T12167] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  643.044408][T12167] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  643.044434][T12167]  </TASK>
[  643.162153][T11183] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  643.285306][T12172] FAULT_INJECTION: forcing a failure.
[  643.285306][T12172] name failslab, interval 1, probability 0, space 0, times 0
[  643.285425][T12172] CPU: 0 UID: 0 PID: 12172 Comm: syz.8.1552 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  643.285467][T12172] Tainted: [L]=SOFTLOCKUP
[  643.285475][T12172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  643.285487][T12172] Call Trace:
[  643.285495][T12172]  <TASK>
[  643.285503][T12172]  dump_stack_lvl+0x100/0x190
[  643.285534][T12172]  should_fail_ex.cold+0x5/0xa
[  643.285561][T12172]  should_failslab+0xc2/0x120
[  643.285586][T12172]  kmem_cache_alloc_noprof+0x92/0x6a0
[  643.285608][T12172]  ? d_instantiate+0x8a/0xb0
[  643.285635][T12172]  ? alloc_empty_file+0x5b/0x1c0
[  643.285666][T12172]  alloc_empty_file+0x5b/0x1c0
[  643.285692][T12172]  alloc_file_pseudo+0x183/0x290
[  643.285719][T12172]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  643.285743][T12172]  ? alloc_fd+0x471/0x7a0
[  643.285766][T12172]  ? do_raw_spin_unlock+0x145/0x1e0
[  643.285800][T12172]  __anon_inode_getfile+0xe8/0x280
[  643.285830][T12172]  anon_inode_getfile_fmode+0x37/0xa0
[  643.285858][T12172]  do_signalfd4+0x1ed/0x480
[  643.285887][T12172]  __ia32_compat_sys_signalfd4+0x143/0x1e0
[  643.285915][T12172]  ? find_held_lock+0x2b/0x80
[  643.285934][T12172]  ? __pfx___ia32_compat_sys_signalfd4+0x10/0x10
[  643.285963][T12172]  ? trace_syscall_enter+0xcc/0x120
[  643.285999][T12172]  __do_fast_syscall_32+0x13a/0x8b0
[  643.286029][T12172]  do_fast_syscall_32+0x32/0x70
[  643.286056][T12172]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  643.286082][T12172] RIP: 0023:0xf7fb5fec
[  643.286103][T12172] Code: Unable to access opcode bytes at 0xf7fb5fc2.
[  643.286111][T12172] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000147
[  643.286130][T12172] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000080000140
[  643.286142][T12172] RDX: 0000000000000008 RSI: 0000000000000800 RDI: 0000000000000000
[  643.286153][T12172] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  643.286164][T12172] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  643.286175][T12172] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  643.286201][T12172]  </TASK>
[  643.694421][T12146] usb 12-1: reset high-speed USB device number 2 using dummy_hcd
[  644.127436][ T8674] usb 12-1: USB disconnect, device number 2
[  644.132147][ T8674] usblp0: removed
[  644.301364][T11183] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[  644.461185][T11183] usb 11-1: Using ep0 maxpacket: 8
[  644.462060][T11183] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  644.463120][T11183] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  644.463146][T11183] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  644.463174][T11183] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  644.463196][T11183] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  644.463216][T11183] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  644.463235][T11183] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  644.463251][T11183] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  644.463273][T11183] usb 11-1: config 168 interface 0 has no altsetting 0
[  644.464283][T11183] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  644.464308][T11183] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  644.464334][T11183] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  644.464352][T11183] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  644.464371][T11183] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  644.464389][T11183] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  644.464409][T11183] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  644.464430][T11183] usb 11-1: config 168 interface 0 has no altsetting 0
[  644.465425][T11183] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  644.465450][T11183] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  644.465478][T11183] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  644.465497][T11183] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  644.465512][T11183] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  644.465532][T11183] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  644.465552][T11183] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  644.465573][T11183] usb 11-1: config 168 interface 0 has no altsetting 0
[  644.468790][T11183] usb 11-1: string descriptor 0 read error: -22
[  644.469008][T11183] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  644.478125][T11183] adutux 11-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  644.551431][T11960] Bluetooth: hci0: command tx timeout
[  644.793608][ T8674] usb 11-1: USB disconnect, device number 2
[  645.662811][T12237] syzkaller1: entered promiscuous mode
[  645.662862][T12237] syzkaller1: entered allmulticast mode
[  645.942604][T12241] netlink: 'syz.6.1576': attribute type 10 has an invalid length.
[  645.969306][T12241] 8021q: adding VLAN 0 to HW filter on device bond0
[  645.975001][T12241] team0: Port device bond0 added
[  646.403588][ T5946] usb 12-1: new high-speed USB device number 3 using dummy_hcd
[  646.572564][ T5946] usb 12-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[  646.573422][ T5946] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  646.573438][ T5946] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  646.575083][ T5946] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  646.575096][ T5946] usb 12-1: Product: syz
[  646.575104][ T5946] usb 12-1: Manufacturer: syz
[  646.575112][ T5946] usb 12-1: SerialNumber: syz
[  646.581874][T12243] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  646.581968][T12243] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  646.582759][ T5946] usbserial_generic 12-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  646.582770][ T5946] usbserial_generic 12-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  646.582788][ T5946] usbserial_generic 12-1:1.0: generic converter detected
[  646.584720][ T5946] usb 12-1: generic converter now attached to ttyUSB0
[  646.828374][ T5946] usb 12-1: USB disconnect, device number 3
[  646.909253][ T5946] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  646.913468][ T5946] usbserial_generic 12-1:1.0: device disconnected
[  648.709370][ T5736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  648.713071][ T5736] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  648.716013][ T5736] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  648.723470][ T5736] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  648.726974][ T5736] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  649.602655][T12263] bridge0: port 1(bridge_slave_0) entered blocking state
[  649.602744][T12263] bridge0: port 1(bridge_slave_0) entered disabled state
[  649.602813][T12263] bridge_slave_0: entered allmulticast mode
[  649.610902][T12263] bridge_slave_0: entered promiscuous mode
[  649.617563][T12263] bridge0: port 2(bridge_slave_1) entered blocking state
[  649.617719][T12263] bridge0: port 2(bridge_slave_1) entered disabled state
[  649.617841][T12263] bridge_slave_1: entered allmulticast mode
[  649.619191][T12263] bridge_slave_1: entered promiscuous mode
[  649.699156][T12263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  649.708674][T12263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  650.472994][ T5826] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  650.638178][T12309] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  650.791161][T11960] Bluetooth: hci1: command tx timeout
[  650.975368][T12263] team0: Port device team_slave_0 added
[  650.983092][T12263] team0: Port device team_slave_1 added
[  651.033350][T12263] batman_adv: batadv0: Adding interface: batadv_slave_0
[  651.033405][T12263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  651.033458][T12263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  651.035085][T12263] batman_adv: batadv0: Adding interface: batadv_slave_1
[  651.035099][T12263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  651.035121][T12263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  651.129265][T12263] hsr_slave_0: entered promiscuous mode
[  651.144256][T12263] hsr_slave_1: entered promiscuous mode
[  651.345762][ T5826] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.545577][ T5826] bond0: (slave netdevsim1): Releasing backup interface
[  651.579686][ T5826] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.790625][ T5826] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.868818][T12263] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  651.888010][T12263] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  651.888790][T12263] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  651.908690][T12263] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  651.919718][T12263] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  651.928032][T12263] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  651.933251][T12263] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  651.943618][T12263] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  652.067895][T12323] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  652.183845][ T5826] bridge_slave_1: left allmulticast mode
[  652.183932][ T5826] bridge_slave_1: left promiscuous mode
[  652.184162][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[  652.194467][ T5826] bridge_slave_0: left allmulticast mode
[  652.194501][ T5826] bridge_slave_0: left promiscuous mode
[  652.194800][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[  652.640747][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  652.654355][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  652.672587][ T5826] bond0 (unregistering): Released all slaves
[  652.719762][ T5448] 8021q: adding VLAN 0 to HW filter on device eth22
[  652.757538][T12263] 8021q: adding VLAN 0 to HW filter on device bond0
[  652.792695][ T5826] : left promiscuous mode
[  652.872147][ T5736] Bluetooth: hci1: command tx timeout
[  652.910993][T12263] 8021q: adding VLAN 0 to HW filter on device team0
[  652.920722][T11667] bridge0: port 1(bridge_slave_0) entered blocking state
[  652.920813][T11667] bridge0: port 1(bridge_slave_0) entered forwarding state
[  652.927102][T12336] FAULT_INJECTION: forcing a failure.
[  652.927102][T12336] name failslab, interval 1, probability 0, space 0, times 0
[  652.927161][T12336] CPU: 0 UID: 0 PID: 12336 Comm: syz.7.1597 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  652.927188][T12336] Tainted: [L]=SOFTLOCKUP
[  652.927193][T12336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  652.927288][T12336] Call Trace:
[  652.927295][T12336]  <TASK>
[  652.927300][T12336]  dump_stack_lvl+0x100/0x190
[  652.927321][T12336]  should_fail_ex.cold+0x5/0xa
[  652.927337][T12336]  should_failslab+0xc2/0x120
[  652.927353][T12336]  __kvmalloc_node_noprof+0x113/0x9b0
[  652.927369][T12336]  ? newary+0x185/0xc30
[  652.927385][T12336]  newary+0x185/0xc30
[  652.927396][T12336]  ? ipcget+0x8aa/0xf50
[  652.927413][T12336]  ? ipcget+0x8aa/0xf50
[  652.927432][T12336]  ipcget+0x909/0xf50
[  652.927451][T12336]  ? event_triggers_call+0x337/0x4d0
[  652.927468][T12336]  ? __pfx_ipcget+0x10/0x10
[  652.927486][T12336]  ? trace_event_buffer_commit+0x20a/0xa80
[  652.927507][T12336]  __ia32_sys_semget+0x1cb/0x260
[  652.927522][T12336]  ? __pfx___ia32_sys_semget+0x10/0x10
[  652.927535][T12336]  ? trace_syscall_enter+0xcc/0x120
[  652.927557][T12336]  __do_fast_syscall_32+0x13a/0x8b0
[  652.927575][T12336]  do_fast_syscall_32+0x32/0x70
[  652.927590][T12336]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  652.927605][T12336] RIP: 0023:0xf70aefec
[  652.927618][T12336] Code: Unable to access opcode bytes at 0xf70aefc2.
[  652.927623][T12336] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000189
[  652.927636][T12336] RAX: ffffffffffffffda RBX: 00000000798e2651 RCX: 0000000000000003
[  652.927644][T12336] RDX: 000000000000039c RSI: 0000000000000000 RDI: 0000000000000000
[  652.927651][T12336] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  652.927658][T12336] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  652.927664][T12336] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  652.927679][T12336]  </TASK>
[  652.940632][T11667] bridge0: port 2(bridge_slave_1) entered blocking state
[  652.940680][T11667] bridge0: port 2(bridge_slave_1) entered forwarding state
[  653.107422][T12341] loop7: detected capacity change from 0 to 7
[  653.184640][T12341] Dev loop7: unable to read RDB block 7
[  653.184687][T12341]  loop7: unable to read partition table
[  653.184813][T12341] loop7: partition table beyond EOD, truncated
[  653.184858][T12341] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  653.267995][ T5448] 8021q: adding VLAN 0 to HW filter on device eth23
[  653.401195][ T8672] usb 12-1: new high-speed USB device number 4 using dummy_hcd
[  653.429901][ T5826] hsr_slave_0: left promiscuous mode
[  653.436653][ T5826] hsr_slave_1: left promiscuous mode
[  653.439111][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  653.444313][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_0
[  653.459115][ T5826] veth1_macvtap: left promiscuous mode
[  653.461633][ T5826] veth0_macvtap: left promiscuous mode
[  653.461750][ T5826] veth1_vlan: left promiscuous mode
[  653.461817][ T5826] veth0_vlan: left promiscuous mode
[  653.551384][ T8672] usb 12-1: Using ep0 maxpacket: 32
[  653.553282][ T8672] usb 12-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  653.554149][ T8672] usb 12-1: config 0 has no interfaces?
[  653.554177][ T8672] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  653.558676][ T8672] usb 12-1: config 0 descriptor??
[  653.892325][ T5145] Dev loop7: unable to read RDB block 7
[  653.892400][ T5145]  loop7: unable to read partition table
[  653.892528][ T5145] loop7: partition table beyond EOD, truncated
[  653.895719][ T8672] usb 12-1: USB disconnect, device number 4
[  654.220642][ T1173] smbdirect: ib_dev[syz2] removed
[  654.289343][T12077] infiniband syz2: ib_query_port failed (-19)
[  654.486321][T12263] 8021q: adding VLAN 0 to HW filter on device batadv0
[  654.785493][ T5826] IPVS: stop unused estimator thread 0...
[  654.944876][T12263] veth0_vlan: entered promiscuous mode
[  654.951309][T11960] Bluetooth: hci1: command tx timeout
[  654.957653][T12263] veth1_vlan: entered promiscuous mode
[  654.990015][T12263] veth0_macvtap: entered promiscuous mode
[  654.998096][T12263] veth1_macvtap: entered promiscuous mode
[  655.014093][T12263] batman_adv: batadv0: Interface activated: batadv_slave_0
[  655.028331][T12263] batman_adv: batadv0: Interface activated: batadv_slave_1
[  655.181179][ T5786] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  655.181226][ T5786] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  655.181272][ T5786] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  655.181305][ T5786] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  655.268684][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  655.268770][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  655.393492][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  655.393554][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  655.489746][   T43] audit: type=1326 audit(1788465722.409:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12400 comm="syz.9.1584" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702efec code=0x0
[  655.596787][T12404] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  656.429287][T12431] syzkaller1: entered allmulticast mode
[  656.813284][T12449] jffs2: notice: (12449) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  657.032052][T11960] Bluetooth: hci1: command tx timeout
[  657.587507][ T5448] 8021q: adding VLAN 0 to HW filter on device eth24
[  657.631297][ T8674] usb 12-1: new high-speed USB device number 5 using dummy_hcd
[  657.759333][ T5448] 8021q: adding VLAN 0 to HW filter on device eth25
[  657.781124][ T8674] usb 12-1: Using ep0 maxpacket: 8
[  657.781609][ T8674] usb 12-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  657.782396][ T8674] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  657.790782][ T8674] pvrusb2: Hardware description: Terratec Grabster AV400
[  657.799464][ T8674] pvrusb2: **********
[  657.800898][ T8674] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  657.804591][ T8674] pvrusb2: Important functionality might not be entirely working.
[  657.807356][ T8674] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  657.811986][ T8674] pvrusb2: **********
[  657.995119][ T2506] pvrusb2: Invalid write control endpoint
[  658.031709][ T2506] pvrusb2: Invalid write control endpoint
[  658.035199][ T2506] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  658.039740][ T2506] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  658.043314][ T2506] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  658.046056][ T2506] pvrusb2: Device being rendered inoperable
[  658.051225][ T2506] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  658.051305][ T2506] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  658.056841][ T2506] pvrusb2: Attached sub-driver cx25840
[  658.056856][ T2506] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  658.056865][ T2506] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  658.212374][T12475] pvrusb2: Attempted to execute control transfer when device not ok
[  658.213248][    T9] usb 12-1: USB disconnect, device number 5
[  658.621691][ T5946] usb 14-1: new high-speed USB device number 2 using dummy_hcd
[  658.781143][ T5946] usb 14-1: Using ep0 maxpacket: 8
[  658.781659][ T5946] usb 14-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  658.782989][ T5946] usb 14-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  658.783011][ T5946] usb 14-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  658.783026][ T5946] usb 14-1: config 0 interface 0 has no altsetting 0
[  658.783051][ T5946] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.798856][ T5946] usb 14-1: config 0 descriptor??
[  659.049315][T12504] FAULT_INJECTION: forcing a failure.
[  659.049315][T12504] name failslab, interval 1, probability 0, space 0, times 0
[  659.049425][T12504] CPU: 0 UID: 0 PID: 12504 Comm: syz.7.1623 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  659.049458][T12504] Tainted: [L]=SOFTLOCKUP
[  659.049465][T12504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  659.049473][T12504] Call Trace:
[  659.049478][T12504]  <TASK>
[  659.049485][T12504]  dump_stack_lvl+0x100/0x190
[  659.049513][T12504]  should_fail_ex.cold+0x5/0xa
[  659.049560][T12504]  should_failslab+0xc2/0x120
[  659.049590][T12504]  __kmalloc_cache_noprof+0x91/0x6d0
[  659.049621][T12504]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  659.049655][T12504]  ? nfs_alloc_fhandle+0x3b/0x90
[  659.049682][T12504]  nfs_alloc_fhandle+0x3b/0x90
[  659.049697][T12504]  nfs_init_fs_context+0x65/0x1510
[  659.049716][T12504]  alloc_fs_context+0x60c/0xf40
[  659.049736][T12504]  __ia32_sys_fsopen+0xef/0x230
[  659.049759][T12504]  __do_fast_syscall_32+0x13a/0x8b0
[  659.049779][T12504]  do_fast_syscall_32+0x32/0x70
[  659.049798][T12504]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  659.049815][T12504] RIP: 0023:0xf70aefec
[  659.049830][T12504] Code: Unable to access opcode bytes at 0xf70aefc2.
[  659.049836][T12504] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae
[  659.049851][T12504] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000
[  659.049859][T12504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  659.049868][T12504] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  659.049875][T12504] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  659.049886][T12504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  659.049914][T12504]  </TASK>
[  659.222050][ T5946] hid_parser_main: 19 callbacks suppressed
[  659.222119][ T5946] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0
[  659.222150][ T5946] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0
[  659.222163][ T5946] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0
[  659.222175][ T5946] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0
[  659.222186][ T5946] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0
[  659.222493][ T5946] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0
[  659.295691][T12508] serio: Serial port ptm0
[  659.435510][ T5946] usb 14-1: USB disconnect, device number 2
[  660.171303][ T5736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  660.177515][ T5736] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  660.178662][ T5736] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  660.182018][ T5736] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  660.182527][ T5736] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  660.299365][T12525] input: syz0 as /devices/virtual/input/input24
[  660.516543][T12531] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1630'.
[  660.587109][ T5786] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.760297][ T5786] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.864200][ T5786] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.992205][ T5786] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.222582][T12554] FAULT_INJECTION: forcing a failure.
[  661.222582][T12554] name fail_futex, interval 1, probability 0, space 0, times 1
[  661.222640][T12554] CPU: 0 UID: 0 PID: 12554 Comm: syz.9.1637 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  661.222678][T12554] Tainted: [L]=SOFTLOCKUP
[  661.222686][T12554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  661.222696][T12554] Call Trace:
[  661.222703][T12554]  <TASK>
[  661.222712][T12554]  dump_stack_lvl+0x100/0x190
[  661.222739][T12554]  should_fail_ex.cold+0x5/0xa
[  661.222764][T12554]  get_futex_key+0x293/0x14f0
[  661.222795][T12554]  ? __pfx_get_futex_key+0x10/0x10
[  661.222825][T12554]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  661.222854][T12554]  futex_requeue+0x25e/0x22e0
[  661.222883][T12554]  ? __pfx_futex_requeue+0x10/0x10
[  661.222903][T12554]  ? trace_event_buffer_commit+0x20a/0xa80
[  661.222935][T12554]  ? eprobe_trigger_func+0x362/0x1450
[  661.222966][T12554]  ? __pfx_eprobe_trigger_func+0x10/0x10
[  661.222992][T12554]  do_futex+0x3ae/0x440
[  661.223011][T12554]  ? __pfx_do_futex+0x10/0x10
[  661.223028][T12554]  ? event_triggers_call+0x337/0x4d0
[  661.223057][T12554]  __ia32_sys_futex_time32+0x2f4/0x470
[  661.223079][T12554]  ? __pfx___ia32_sys_futex_time32+0x10/0x10
[  661.223097][T12554]  ? find_held_lock+0x2b/0x80
[  661.223118][T12554]  ? trace_syscall_enter+0xcc/0x120
[  661.223147][T12554]  ? trace_syscall_enter+0xcc/0x120
[  661.223179][T12554]  __do_fast_syscall_32+0x13a/0x8b0
[  661.223206][T12554]  do_fast_syscall_32+0x32/0x70
[  661.223229][T12554]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  661.223251][T12554] RIP: 0023:0xf702efec
[  661.223280][T12554] Code: Unable to access opcode bytes at 0xf702efc2.
[  661.223291][T12554] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0
[  661.223313][T12554] RAX: ffffffffffffffda RBX: 0000000080000200 RCX: 0000000000000004
[  661.223325][T12554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  661.223336][T12554] RBP: 0000000034fffffd R08: 0000000000000000 R09: 0000000000000000
[  661.223348][T12554] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  661.223360][T12554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  661.223384][T12554]  </TASK>
[  661.368534][T12520] bridge0: port 1(bridge_slave_0) entered blocking state
[  661.368695][T12520] bridge0: port 1(bridge_slave_0) entered disabled state
[  661.368831][T12520] bridge_slave_0: entered allmulticast mode
[  661.370553][T12520] bridge_slave_0: entered promiscuous mode
[  661.387815][T12520] bridge0: port 2(bridge_slave_1) entered blocking state
[  661.387890][T12520] bridge0: port 2(bridge_slave_1) entered disabled state
[  661.388070][T12520] bridge_slave_1: entered allmulticast mode
[  661.396674][T12520] bridge_slave_1: entered promiscuous mode
[  661.535314][T12520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  661.540494][T12520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  661.637012][T12520] team0: Port device team_slave_0 added
[  661.641562][T12520] team0: Port device team_slave_1 added
[  661.645856][ T5786] bridge_slave_1: left allmulticast mode
[  661.646169][ T5786] bridge_slave_1: left promiscuous mode
[  661.646299][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state
[  661.658630][ T5786] bridge_slave_0: left allmulticast mode
[  661.658684][ T5786] bridge_slave_0: left promiscuous mode
[  661.658828][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state
[  661.882628][ T5786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  661.900784][ T5786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  661.910505][ T5786] bond0 (unregistering): Released all slaves
[  661.955148][T12520] batman_adv: batadv0: Adding interface: batadv_slave_0
[  661.955199][T12520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  661.955408][T12520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  661.956710][T12520] batman_adv: batadv0: Adding interface: batadv_slave_1
[  661.956722][T12520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  661.956750][T12520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  662.096025][T12520] hsr_slave_0: entered promiscuous mode
[  662.096926][T12520] hsr_slave_1: entered promiscuous mode
[  662.097469][T12520] debugfs: 'hsr0' already exists in 'hsr'
[  662.097488][T12520] Cannot create hsr debugfs directory
[  662.231368][T11960] Bluetooth: hci2: command tx timeout
[  662.381398][ T5448] 8021q: adding VLAN 0 to HW filter on device eth26
[  662.413210][ T5786] hsr_slave_0: left promiscuous mode
[  662.415766][ T5786] hsr_slave_1: left promiscuous mode
[  662.417023][ T5786] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  662.417049][ T5786] batman_adv: batadv0: Removing interface: batadv_slave_0
[  662.421253][ T5786] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  662.421271][ T5786] batman_adv: batadv0: Removing interface: batadv_slave_1
[  662.444461][ T5786] veth1_macvtap: left promiscuous mode
[  662.444588][ T5786] veth0_macvtap: left promiscuous mode
[  662.444762][ T5786] veth1_vlan: left promiscuous mode
[  662.444851][ T5786] veth0_vlan: left promiscuous mode
[  662.485737][ T5736] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  662.495263][ T5736] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  662.496616][ T5736] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  662.503616][ T5736] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  662.504584][ T5736] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  662.569853][T12588] FAULT_INJECTION: forcing a failure.
[  662.569853][T12588] name failslab, interval 1, probability 0, space 0, times 0
[  662.569950][T12588] CPU: 0 UID: 0 PID: 12588 Comm: syz.9.1648 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  662.569991][T12588] Tainted: [L]=SOFTLOCKUP
[  662.570000][T12588] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  662.570011][T12588] Call Trace:
[  662.570017][T12588]  <TASK>
[  662.570025][T12588]  dump_stack_lvl+0x100/0x190
[  662.570054][T12588]  should_fail_ex.cold+0x5/0xa
[  662.570079][T12588]  should_failslab+0xc2/0x120
[  662.570103][T12588]  __kmalloc_node_noprof+0xff/0x880
[  662.570122][T12588]  ? __get_vm_area_node+0x1ff/0x350
[  662.570144][T12588]  ? __get_vm_area_node+0x22b/0x350
[  662.570165][T12588]  ? __vmalloc_node_range_noprof+0x3d4/0x1420
[  662.570213][T12588]  __vmalloc_node_range_noprof+0x3d4/0x1420
[  662.570248][T12588]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  662.570275][T12588]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  662.570300][T12588]  ? rcu_is_watching+0x13/0xc0
[  662.570319][T12588]  ? trace_hrtimer_start+0x77/0x220
[  662.570340][T12588]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  662.570363][T12588]  __vmalloc_node_noprof+0xad/0xf0
[  662.570388][T12588]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  662.570414][T12588]  __vmalloc_noprof+0xa3/0x120
[  662.570438][T12588]  ? __pfx___vmalloc_noprof+0x10/0x10
[  662.570459][T12588]  ? rcu_is_watching+0x13/0xc0
[  662.570479][T12588]  ? rcu_is_watching+0x13/0xc0
[  662.570497][T12588]  ? apparmor_capable+0x1d7/0x4d0
[  662.570522][T12588]  bpf_prog_alloc_no_stats+0x58/0x690
[  662.570545][T12588]  ? security_capable+0x80/0x260
[  662.570569][T12588]  bpf_prog_alloc+0x3b/0x200
[  662.570592][T12588]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  662.570621][T12588]  bpf_prog_load+0x49e/0x2a80
[  662.570649][T12588]  ? __lock_acquire+0x4c5/0x1ec0
[  662.570681][T12588]  ? __pfx_bpf_prog_load+0x10/0x10
[  662.570728][T12588]  __sys_bpf+0x1f46/0x4a30
[  662.570763][T12588]  ? __pfx___sys_bpf+0x10/0x10
[  662.570798][T12588]  ? ring_buffer_event_data+0x10a/0x150
[  662.570831][T12588]  ? trace_event_buffer_commit+0x20a/0xa80
[  662.570880][T12588]  ? __pfx_eprobe_trigger_func+0x10/0x10
[  662.570926][T12588]  ? trace_event_buffer_commit+0x20a/0xa80
[  662.570962][T12588]  ? find_held_lock+0x2b/0x80
[  662.570990][T12588]  ? __ia32_sys_bpf+0xcc/0x170
[  662.571009][T12588]  __ia32_sys_bpf+0xcc/0x170
[  662.571029][T12588]  ? rcu_is_watching+0x13/0xc0
[  662.571049][T12588]  __do_fast_syscall_32+0x13a/0x8b0
[  662.571081][T12588]  do_fast_syscall_32+0x32/0x70
[  662.571106][T12588]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  662.571128][T12588] RIP: 0023:0xf702efec
[  662.571150][T12588] Code: Unable to access opcode bytes at 0xf702efc2.
[  662.571161][T12588] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  662.571181][T12588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001b00
[  662.571193][T12588] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000
[  662.571205][T12588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  662.571216][T12588] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  662.571228][T12588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  662.571252][T12588]  </TASK>
[  662.574257][T12588] syz.9.1648: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  662.574334][T12588] CPU: 0 UID: 0 PID: 12588 Comm: syz.9.1648 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  662.574363][T12588] Tainted: [L]=SOFTLOCKUP
[  662.574370][T12588] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  662.574383][T12588] Call Trace:
[  662.574390][T12588]  <TASK>
[  662.574398][T12588]  dump_stack_lvl+0x100/0x190
[  662.574428][T12588]  warn_alloc.cold+0x9e/0xb2
[  662.574449][T12588]  ? __pfx_warn_alloc+0x10/0x10
[  662.574477][T12588]  ? dump_stack_lvl+0x17c/0x190
[  662.574502][T12588]  ? rcu_is_watching+0x13/0xc0
[  662.574524][T12588]  ? __kasan_kmalloc+0x8a/0xb0
[  662.574546][T12588]  ? __kmalloc_node_noprof+0x360/0x880
[  662.574565][T12588]  ? __get_vm_area_node+0x1ff/0x350
[  662.574587][T12588]  ? __get_vm_area_node+0x22b/0x350
[  662.574609][T12588]  ? __vmalloc_node_range_noprof+0x3d4/0x1420
[  662.574639][T12588]  __vmalloc_node_range_noprof+0x10f4/0x1420
[  662.574673][T12588]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  662.574702][T12588]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  662.574728][T12588]  ? rcu_is_watching+0x13/0xc0
[  662.574755][T12588]  ? trace_hrtimer_start+0x77/0x220
[  662.574779][T12588]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  662.574804][T12588]  __vmalloc_node_noprof+0xad/0xf0
[  662.574829][T12588]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  662.574856][T12588]  __vmalloc_noprof+0xa3/0x120
[  662.574881][T12588]  ? __pfx___vmalloc_noprof+0x10/0x10
[  662.574905][T12588]  ? rcu_is_watching+0x13/0xc0
[  662.574925][T12588]  ? rcu_is_watching+0x13/0xc0
[  662.574944][T12588]  ? apparmor_capable+0x1d7/0x4d0
[  662.574972][T12588]  bpf_prog_alloc_no_stats+0x58/0x690
[  662.574996][T12588]  ? security_capable+0x80/0x260
[  662.575018][T12588]  bpf_prog_alloc+0x3b/0x200
[  662.575038][T12588]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  662.575064][T12588]  bpf_prog_load+0x49e/0x2a80
[  662.575087][T12588]  ? __lock_acquire+0x4c5/0x1ec0
[  662.575118][T12588]  ? __pfx_bpf_prog_load+0x10/0x10
[  662.575164][T12588]  __sys_bpf+0x1f46/0x4a30
[  662.575191][T12588]  ? __pfx___sys_bpf+0x10/0x10
[  662.575209][T12588]  ? ring_buffer_event_data+0x10a/0x150
[  662.575241][T12588]  ? trace_event_buffer_commit+0x20a/0xa80
[  662.575306][T12588]  ? __pfx_eprobe_trigger_func+0x10/0x10
[  662.575350][T12588]  ? trace_event_buffer_commit+0x20a/0xa80
[  662.575388][T12588]  ? find_held_lock+0x2b/0x80
[  662.575414][T12588]  ? __ia32_sys_bpf+0xcc/0x170
[  662.575434][T12588]  __ia32_sys_bpf+0xcc/0x170
[  662.575454][T12588]  ? rcu_is_watching+0x13/0xc0
[  662.575475][T12588]  __do_fast_syscall_32+0x13a/0x8b0
[  662.575505][T12588]  do_fast_syscall_32+0x32/0x70
[  662.575532][T12588]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  662.575555][T12588] RIP: 0023:0xf702efec
[  662.575575][T12588] Code: Unable to access opcode bytes at 0xf702efc2.
[  662.575580][T12588] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  662.575592][T12588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001b00
[  662.575599][T12588] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000
[  662.575606][T12588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  662.575613][T12588] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  662.575620][T12588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  662.575635][T12588]  </TASK>
[  662.579156][T12588] Mem-Info:
[  662.579168][T12588] active_anon:8648 inactive_anon:853 isolated_anon:0
[  662.579168][T12588]  active_file:10555 inactive_file:24699 isolated_file:0
[  662.579168][T12588]  unevictable:0 dirty:346 writeback:0
[  662.579168][T12588]  slab_reclaimable:6632 slab_unreclaimable:57703
[  662.579168][T12588]  mapped:24658 shmem:520 pagetables:1665
[  662.579168][T12588]  sec_pagetables:311 bounce:0
[  662.579168][T12588]  kernel_misc_reclaimable:0
[  662.579168][T12588]  free:30376 free_pcp:6801 free_cma:0
[  662.579211][T12588] Node 0 active_anon:180kB inactive_anon:64kB active_file:60kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8864kB pagetables:1396kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  662.579253][T12588] Node 1 active_anon:34412kB inactive_anon:3348kB active_file:42160kB inactive_file:98796kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98604kB dirty:1376kB writeback:0kB shmem:2080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5772kB pagetables:5264kB sec_pagetables:112kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  662.579294][T12588] Node 0 DMA free:2044kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:12kB inactive_anon:4kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:652kB local_pcp:244kB free_cma:0kB
[  662.579337][T12588] lowmem_reserve[]: 0 278 278 278 278
[  662.579364][T12588] Node 0 DMA32 free:15464kB boost:0kB min:12628kB low:15784kB high:18940kB reserved_highatomic:0kB free_highatomic:0kB active_anon:168kB inactive_anon:60kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:1032196kB managed:284672kB mlocked:0kB bounce:0kB free_pcp:9988kB local_pcp:3420kB free_cma:0kB
[  662.579406][T12588] lowmem_reserve[]: 0 0 0 0 0
[  662.579431][T12588] Node 1 DMA32 free:103996kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:34412kB inactive_anon:3348kB active_file:42160kB inactive_file:98796kB unevictable:0kB writepending:1376kB zspages:1640kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:16564kB local_pcp:9680kB free_cma:0kB
[  662.579471][T12588] lowmem_reserve[]: 0 0 0 0 0
[  662.579493][T12588] Node 0 DMA: 15*4kB (UM) 12*8kB (UM) 8*16kB (UM) 5*32kB (UM) 13*64kB (UM) 4*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2044kB
[  662.579585][T12588] Node 0 DMA32: 8*4kB (UME) 61*8kB (UME) 22*16kB (ME) 40*32kB (ME) 54*64kB (UME) 19*128kB (UME) 5*256kB (UME) 6*512kB (UM) 3*1024kB (U) 0*2048kB 0*4096kB = 15464kB
[  662.579683][T12588] Node 1 DMA32: 175*4kB (UME) 626*8kB (UME) 139*16kB (UME) 419*32kB (UME) 129*64kB (UME) 49*128kB (UME) 24*256kB (ME) 11*512kB (UME) 11*1024kB (UM) 4*2048kB (U) 9*4096kB (U) = 103964kB
[  662.579796][T12588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  662.579807][T12588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  662.579818][T12588] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  662.579828][T12588] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  662.579839][T12588] 35967 total pagecache pages
[  662.579844][T12588] 197 pages in swap cache
[  662.579849][T12588] Free swap  = 122408kB
[  662.584335][T12588] Total swap = 124996kB
[  662.584349][T12588] 524155 pages RAM
[  662.584356][T12588] 0 pages HighMem/MovableOnly
[  662.584363][T12588] 212095 pages reserved
[  662.584369][T12588] 0 pages cma reserved
[  663.065728][ T5786] team0 (unregistering): Port device team_slave_1 removed
[  663.090506][ T5786] team0 (unregistering): Port device team_slave_0 removed
[  663.106051][T12604] jffs2: notice: (12604) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  663.281475][T12608] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  664.242841][T12625] FAULT_INJECTION: forcing a failure.
[  664.242841][T12625] name failslab, interval 1, probability 0, space 0, times 0
[  664.247417][T12625] CPU: 3 UID: 0 PID: 12625 Comm: syz.9.1658 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  664.247450][T12625] Tainted: [L]=SOFTLOCKUP
[  664.247456][T12625] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  664.247464][T12625] Call Trace:
[  664.247470][T12625]  <TASK>
[  664.247475][T12625]  dump_stack_lvl+0x100/0x190
[  664.247496][T12625]  should_fail_ex.cold+0x5/0xa
[  664.247512][T12625]  should_failslab+0xc2/0x120
[  664.247528][T12625]  __kmalloc_noprof+0xfc/0x840
[  664.247542][T12625]  ? __do_sys_futex_waitv+0x204/0x2b0
[  664.247557][T12625]  __do_sys_futex_waitv+0x204/0x2b0
[  664.247570][T12625]  ? __pfx___do_sys_futex_waitv+0x10/0x10
[  664.247584][T12625]  ? trace_syscall_enter+0xcc/0x120
[  664.247606][T12625]  __do_fast_syscall_32+0x13a/0x8b0
[  664.247624][T12625]  do_fast_syscall_32+0x32/0x70
[  664.247640][T12625]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  664.247655][T12625] RIP: 0023:0xf702efec
[  664.247669][T12625] Code: Unable to access opcode bytes at 0xf702efc2.
[  664.247680][T12625] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 00000000000001c1
[  664.247692][T12625] RAX: ffffffffffffffda RBX: 0000000080000e80 RCX: 0000000000000001
[  664.247700][T12625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  664.247708][T12625] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  664.247715][T12625] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  664.247723][T12625] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  664.247738][T12625]  </TASK>
[  664.329249][T11960] Bluetooth: hci2: command tx timeout
[  664.519057][ T5448] 8021q: adding VLAN 0 to HW filter on device eth27
[  664.553656][T11960] Bluetooth: hci0: command tx timeout
[  664.728682][ T5786] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  664.765839][T12584] bridge0: port 1(bridge_slave_0) entered blocking state
[  664.766042][T12584] bridge0: port 1(bridge_slave_0) entered disabled state
[  664.766161][T12584] bridge_slave_0: entered allmulticast mode
[  664.767944][T12584] bridge_slave_0: entered promiscuous mode
[  664.787550][T12584] bridge0: port 2(bridge_slave_1) entered blocking state
[  664.787681][T12584] bridge0: port 2(bridge_slave_1) entered disabled state
[  664.787816][T12584] bridge_slave_1: entered allmulticast mode
[  664.795505][ T5736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  664.795859][T12584] bridge_slave_1: entered promiscuous mode
[  664.804048][ T5736] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  664.829299][ T5736] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  664.831336][ T5736] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  664.831960][ T5736] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  664.878336][T12584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  664.892345][T12584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  664.995641][ T5786] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.017523][T12584] team0: Port device team_slave_0 added
[  665.021446][T12584] team0: Port device team_slave_1 added
[  665.065915][T12584] batman_adv: batadv0: Adding interface: batadv_slave_0
[  665.065963][T12584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  665.066000][T12584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  665.066938][T12584] batman_adv: batadv0: Adding interface: batadv_slave_1
[  665.066947][T12584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  665.066960][T12584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  665.105294][T12584] hsr_slave_0: entered promiscuous mode
[  665.105946][T12584] hsr_slave_1: entered promiscuous mode
[  665.106282][T12584] debugfs: 'hsr0' already exists in 'hsr'
[  665.106295][T12584] Cannot create hsr debugfs directory
[  665.145742][ T5786] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.189588][T12520] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  665.206725][T12520] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  665.213555][T12520] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  665.224583][T12520] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  665.225077][T12520] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  665.229522][T12520] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  665.235413][T12660] Invalid argument reading file caps for ./file0
[  665.263568][ T5786] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.274238][T12520] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  665.278670][T12520] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  665.362927][ T5448] 8021q: adding VLAN 0 to HW filter on device eth28
[  665.688274][ T5786] bridge_slave_1: left allmulticast mode
[  665.688345][ T5786] bridge_slave_1: left promiscuous mode
[  665.688884][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state
[  665.694826][ T5786] bridge_slave_0: left allmulticast mode
[  665.694848][ T5786] bridge_slave_0: left promiscuous mode
[  665.695026][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state
[  665.818766][ T5786] team0: Port device bond0 removed
[  665.824840][ T5786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  665.830131][ T5786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  665.834967][ T5786] bond0 (unregistering): Released all slaves
[  665.883984][T11183] usb 14-1: new high-speed USB device number 3 using dummy_hcd
[  665.884682][T12520] 8021q: adding VLAN 0 to HW filter on device bond0
[  665.900867][T12520] 8021q: adding VLAN 0 to HW filter on device team0
[  665.909017][T11667] bridge0: port 1(bridge_slave_0) entered blocking state
[  665.909153][T11667] bridge0: port 1(bridge_slave_0) entered forwarding state
[  665.920300][T11667] bridge0: port 2(bridge_slave_1) entered blocking state
[  665.920381][T11667] bridge0: port 2(bridge_slave_1) entered forwarding state
[  666.073010][T11183] usb 14-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00
[  666.077087][T11183] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  666.081930][T11183] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.084697][T11183] usb 14-1: Product: syz
[  666.086558][T11183] usb 14-1: Manufacturer: syz
[  666.088593][T11183] usb 14-1: SerialNumber: syz
[  666.240243][T12645] bridge0: port 1(bridge_slave_0) entered blocking state
[  666.249478][T12645] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.253088][T12645] bridge_slave_0: entered allmulticast mode
[  666.256008][T12645] bridge_slave_0: entered promiscuous mode
[  666.258373][T12645] bridge0: port 2(bridge_slave_1) entered blocking state
[  666.258440][T12645] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.258527][T12645] bridge_slave_1: entered allmulticast mode
[  666.259703][T12645] bridge_slave_1: entered promiscuous mode
[  666.305095][ T5448] 8021q: adding VLAN 0 to HW filter on device eth29
[  666.324158][    T9] usb 14-1: USB disconnect, device number 3
[  666.360449][T12645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  666.364243][T12645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  666.388179][T12645] team0: Port device team_slave_0 added
[  666.390457][T12645] team0: Port device team_slave_1 added
[  666.391494][T11960] Bluetooth: hci2: command tx timeout
[  666.436281][ T5786] hsr_slave_0: left promiscuous mode
[  666.438407][ T5786] hsr_slave_1: left promiscuous mode
[  666.439428][ T5786] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  666.439446][ T5786] batman_adv: batadv0: Removing interface: batadv_slave_0
[  666.442200][ T5786] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  666.442212][ T5786] batman_adv: batadv0: Removing interface: batadv_slave_1
[  666.452637][ T5786] veth1_macvtap: left promiscuous mode
[  666.452708][ T5786] veth0_macvtap: left promiscuous mode
[  666.452767][ T5786] veth1_vlan: left promiscuous mode
[  666.452798][ T5786] veth0_vlan: left promiscuous mode
[  666.633845][ T5786] team0 (unregistering): Port device team_slave_1 removed
[  666.641317][T11960] Bluetooth: hci0: command tx timeout
[  666.646296][ T5786] team0 (unregistering): Port device team_slave_0 removed
[  666.739686][T12645] batman_adv: batadv0: Adding interface: batadv_slave_0
[  666.739747][T12645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  666.739803][T12645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  666.742270][T12645] batman_adv: batadv0: Adding interface: batadv_slave_1
[  666.742283][T12645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  666.742298][T12645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  666.881310][T11960] Bluetooth: hci3: command tx timeout
[  666.972200][T12645] hsr_slave_0: entered promiscuous mode
[  666.973821][T12645] hsr_slave_1: entered promiscuous mode
[  666.974501][T12645] debugfs: 'hsr0' already exists in 'hsr'
[  666.974519][T12645] Cannot create hsr debugfs directory
[  667.276463][ T1352] wiimote 0005:057E:0306.0009: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  667.277421][ T1352] wiimote 0005:057E:0306.0009: New device registered
[  667.290272][T12719] wiimote 0005:057E:0306.0009: Device removed
[  667.323349][T12520] 8021q: adding VLAN 0 to HW filter on device batadv0
[  667.353924][T12722] fido_id[12722]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  667.380897][T12520] veth0_vlan: entered promiscuous mode
[  667.458351][ T5786] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  667.481556][T12520] veth1_vlan: entered promiscuous mode
[  667.529556][T12520] veth0_macvtap: entered promiscuous mode
[  667.535470][T12520] veth1_macvtap: entered promiscuous mode
[  667.610804][ T5786] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  667.707450][T12520] batman_adv: batadv0: Interface activated: batadv_slave_0
[  667.734973][ T5786] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  667.765219][T12520] batman_adv: batadv0: Interface activated: batadv_slave_1
[  667.852500][ T5786] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  667.873517][ T5826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  667.873626][ T5826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  667.873693][ T5826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  668.002092][T11051] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  668.120919][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  668.121205][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  668.226821][ T5786] bridge_slave_1: left allmulticast mode
[  668.226888][ T5786] bridge_slave_1: left promiscuous mode
[  668.227815][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state
[  668.238223][ T5786] bridge_slave_0: left allmulticast mode
[  668.238287][ T5786] bridge_slave_0: left promiscuous mode
[  668.238414][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state
[  668.398102][ T5786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  668.406675][ T5786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  668.412243][ T5786] bond0 (unregistering): Released all slaves
[  668.419129][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  668.422739][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  668.471222][T11960] Bluetooth: hci2: command tx timeout
[  668.708920][ T5786] hsr_slave_0: left promiscuous mode
[  668.711468][T11960] Bluetooth: hci0: command tx timeout
[  668.715688][ T5786] hsr_slave_1: left promiscuous mode
[  668.716250][ T5786] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  668.716265][ T5786] batman_adv: batadv0: Removing interface: batadv_slave_0
[  668.723961][ T5786] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  668.724014][ T5786] batman_adv: batadv0: Removing interface: batadv_slave_1
[  668.735737][ T5786] veth1_macvtap: left promiscuous mode
[  668.735823][ T5786] veth0_macvtap: left promiscuous mode
[  668.735907][ T5786] veth1_vlan: left promiscuous mode
[  668.735960][ T5786] veth0_vlan: left promiscuous mode
[  668.893834][ T5786] team0 (unregistering): Port device team_slave_1 removed
[  668.899925][ T5786] team0 (unregistering): Port device team_slave_0 removed
[  668.922021][T12747] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  668.961160][T11960] Bluetooth: hci3: command tx timeout
[  669.077612][T12747] usb 8-1: Using ep0 maxpacket: 8
[  669.078358][T12747] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  669.079264][T12747] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  669.079288][T12747] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  669.079307][T12747] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  669.079325][T12747] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  669.079352][T12747] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  669.299170][T12584] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  669.310064][T12747] usb 8-1: GET_CAPABILITIES returned 0
[  669.310140][T12747] usbtmc 8-1:16.0: can't read capabilities
[  669.314145][T12584] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  669.314654][T12584] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  669.322745][T12584] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  669.326658][T12584] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  669.333585][T12584] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  669.334421][T12584] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  669.342828][T12584] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  669.351279][ T1352] wiimote 0005:057E:0306.0009: detected device: Nintendo Wii Remote (Gen 1)
[  669.478492][T12645] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  669.483908][ T1352] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0009/input/input26
[  669.489623][T12645] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  669.499264][T12645] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  669.502933][ T1352] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0009/input/input27
[  669.504680][T12645] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  669.510937][ T1352] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0009/input/input25
[  669.522143][T12645] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  669.534350][T12049] usb 8-1: USB disconnect, device number 8
[  669.569728][T12645] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  669.570486][T12645] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  669.583133][T12645] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  669.623594][T12584] 8021q: adding VLAN 0 to HW filter on device bond0
[  669.639538][T12584] 8021q: adding VLAN 0 to HW filter on device team0
[  669.645376][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state
[  669.645467][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state
[  669.654893][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state
[  669.654996][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state
[  669.708560][T12645] 8021q: adding VLAN 0 to HW filter on device bond0
[  669.724793][T12645] 8021q: adding VLAN 0 to HW filter on device team0
[  669.734093][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state
[  669.734172][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state
[  669.739572][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state
[  669.739663][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state
[  670.030079][T12584] 8021q: adding VLAN 0 to HW filter on device batadv0
[  670.045936][T12645] 8021q: adding VLAN 0 to HW filter on device batadv0
[  670.080613][T12584] veth0_vlan: entered promiscuous mode
[  670.095556][T12584] veth1_vlan: entered promiscuous mode
[  670.200859][T12584] veth0_macvtap: entered promiscuous mode
[  670.204143][T12584] veth1_macvtap: entered promiscuous mode
[  670.212217][T12584] batman_adv: batadv0: Interface activated: batadv_slave_0
[  670.215967][T12584] batman_adv: batadv0: Interface activated: batadv_slave_1
[  670.219355][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  670.243842][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  670.281590][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  670.281654][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  670.380761][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  670.380836][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  670.417407][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  670.417475][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  670.456364][T12645] veth0_vlan: entered promiscuous mode
[  670.468513][T12645] veth1_vlan: entered promiscuous mode
[  670.508316][T12645] veth0_macvtap: entered promiscuous mode
[  670.512228][T12645] veth1_macvtap: entered promiscuous mode
[  670.522740][T12645] batman_adv: batadv0: Interface activated: batadv_slave_0
[  670.525323][T12645] batman_adv: batadv0: Interface activated: batadv_slave_1
[  670.571245][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  670.571402][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  670.571469][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  670.593804][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2
[  670.639772][ T5826] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  670.712454][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  670.712564][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  670.766069][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  670.766114][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  670.801419][T11960] Bluetooth: hci0: command tx timeout
[  671.041306][T11960] Bluetooth: hci3: command tx timeout
[  671.478282][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3
[  671.562628][T12905] FAULT_INJECTION: forcing a failure.
[  671.562628][T12905] name failslab, interval 1, probability 0, space 0, times 0
[  671.562725][T12905] CPU: 3 UID: 0 PID: 12905 Comm: syz.2.1685 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  671.562769][T12905] Tainted: [L]=SOFTLOCKUP
[  671.562777][T12905] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  671.562788][T12905] Call Trace:
[  671.562796][T12905]  <TASK>
[  671.562804][T12905]  dump_stack_lvl+0x100/0x190
[  671.562838][T12905]  should_fail_ex.cold+0x5/0xa
[  671.562864][T12905]  should_failslab+0xc2/0x120
[  671.562890][T12905]  __kvmalloc_node_noprof+0x113/0x9b0
[  671.562916][T12905]  ? do_getxattr+0xbb/0x3c0
[  671.562943][T12905]  do_getxattr+0xbb/0x3c0
[  671.562966][T12905]  filename_getxattr+0xee/0x1a0
[  671.562992][T12905]  ? __pfx_filename_getxattr+0x10/0x10
[  671.563018][T12905]  ? do_getname+0x191/0x390
[  671.563046][T12905]  path_getxattrat+0x20d/0x430
[  671.563071][T12905]  ? __pfx_path_getxattrat+0x10/0x10
[  671.563118][T12905]  ? trace_syscall_enter+0xcc/0x120
[  671.563147][T12905]  ? trace_syscall_enter+0xcc/0x120
[  671.563181][T12905]  __do_fast_syscall_32+0x13a/0x8b0
[  671.563213][T12905]  do_fast_syscall_32+0x32/0x70
[  671.563241][T12905]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  671.563266][T12905] RIP: 0023:0xf708efec
[  671.563296][T12905] Code: Unable to access opcode bytes at 0xf708efc2.
[  671.563306][T12905] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000e6
[  671.563327][T12905] RAX: ffffffffffffffda RBX: 0000000080000240 RCX: 00000000800003c0
[  671.563342][T12905] RDX: 00000000800002c0 RSI: 000000000000007a RDI: 0000000000000000
[  671.563356][T12905] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  671.563367][T12905] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  671.563379][T12905] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  671.563406][T12905]  </TASK>
[  671.770633][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4
[  672.016597][T12941] netlink: 'syz.2.1693': attribute type 10 has an invalid length.
[  672.030980][T12941] 8021q: adding VLAN 0 to HW filter on device bond0
[  672.038856][T12941] team0: Port device bond0 added
[  672.049937][T12941] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1693'.
[  672.062227][ T5724] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  672.211121][ T5724] usb 8-1: Using ep0 maxpacket: 8
[  672.211901][ T5724] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  672.214270][ T5724] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  672.214311][ T5724] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  672.237757][ T5724] usb 8-1: config 0 descriptor??
[  672.241778][T12077] usb 10-1: new low-speed USB device number 5 using dummy_hcd
[  672.399245][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5
[  672.404649][T12077] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  672.409693][T12077] usb 10-1: config 0 has an invalid interface number: 55 but max is 0
[  672.414817][T12077] usb 10-1: config 0 has no interface number 0
[  672.414920][T12077] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  672.414949][T12077] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  672.414979][T12077] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  672.415009][T12077] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  672.415038][T12077] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  672.415067][T12077] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  672.415106][T12077] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  672.446709][T12077] usb 10-1: config 0 descriptor??
[  672.449392][T12939] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  672.452126][T12939] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  672.458216][T12077] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  672.464760][ T5724] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1
[  672.673807][T12858] usb 10-1: USB disconnect, device number 5
[  672.673925][    C3] ldusb 10-1:0.55: usb_submit_urb failed (-19)
[  672.684167][T12858] ldusb 10-1:0.55: LD USB Device #0 now disconnected
[  672.692010][T12515] usb 8-1: USB disconnect, device number 9
[  673.121139][T11960] Bluetooth: hci3: command tx timeout
[  673.687602][T13021] netlink: 'syz.2.1705': attribute type 10 has an invalid length.
[  673.709962][T13021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1705'.
[  674.079451][T13040] lapbether: lapb_data_request error - 4
[  674.121230][T12395] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  674.201217][T13046] loop8: detected capacity change from 0 to 7
[  674.233617][T13046] Dev loop8: unable to read RDB block 7
[  674.233806][T13046]  loop8: unable to read partition table
[  674.234068][T13046] loop8: partition table beyond EOD, truncated
[  674.234106][T13046] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  674.286055][T12395] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  674.289716][T12395] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.289804][T12395] usb 8-1: Product: syz
[  674.289832][T12395] usb 8-1: Manufacturer: syz
[  674.289843][T12395] usb 8-1: SerialNumber: syz
[  674.665980][T12395] rtl8150 8-1:1.0: couldn't reset the device
[  674.666337][T12395] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5
[  674.684995][T12395] usb 8-1: USB disconnect, device number 10
[  674.739875][T13074] FAULT_INJECTION: forcing a failure.
[  674.739875][T13074] name failslab, interval 1, probability 0, space 0, times 0
[  674.743931][T13074] CPU: 0 UID: 0 PID: 13074 Comm: syz.2.1713 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  674.743964][T13074] Tainted: [L]=SOFTLOCKUP
[  674.743970][T13074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  674.743977][T13074] Call Trace:
[  674.743982][T13074]  <TASK>
[  674.743988][T13074]  dump_stack_lvl+0x100/0x190
[  674.744008][T13074]  should_fail_ex.cold+0x5/0xa
[  674.744025][T13074]  should_failslab+0xc2/0x120
[  674.744041][T13074]  __kmalloc_noprof+0xfc/0x840
[  674.744056][T13074]  ? lsm_blob_alloc+0x68/0x90
[  674.744069][T13074]  lsm_blob_alloc+0x68/0x90
[  674.744097][T13074]  security_prepare_creds+0x2d/0x290
[  674.744118][T13074]  prepare_creds+0x5d6/0x950
[  674.744134][T13074]  join_session_keyring+0x17/0x350
[  674.744152][T13074]  lookup_user_key+0xbf9/0x1300
[  674.744168][T13074]  ? __pfx_lookup_user_key+0x10/0x10
[  674.744184][T13074]  ? __might_fault+0xc5/0x140
[  674.744202][T13074]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  674.744218][T13074]  ? _copy_from_user+0x59/0xd0
[  674.744230][T13074]  ? memdup_user+0x82/0xe0
[  674.744250][T13074]  __do_sys_add_key+0x2a6/0x460
[  674.744262][T13074]  ? __pfx___do_sys_add_key+0x10/0x10
[  674.744272][T13074]  ? find_held_lock+0x2b/0x80
[  674.744289][T13074]  __do_fast_syscall_32+0x13a/0x8b0
[  674.744307][T13074]  do_fast_syscall_32+0x32/0x70
[  674.744322][T13074]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  674.744337][T13074] RIP: 0023:0xf708efec
[  674.744350][T13074] Code: Unable to access opcode bytes at 0xf708efc2.
[  674.744355][T13074] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e
[  674.744368][T13074] RAX: ffffffffffffffda RBX: 0000000080000200 RCX: 0000000080000180
[  674.744375][T13074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000fffffffd
[  674.744382][T13074] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  674.744389][T13074] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  674.744395][T13074] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  674.744409][T13074]  </TASK>
[  674.778338][T13076] FAULT_INJECTION: forcing a failure.
[  674.778338][T13076] name failslab, interval 1, probability 0, space 0, times 0
[  674.778371][T13076] CPU: 2 UID: 0 PID: 13076 Comm: syz.5.1714 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  674.778397][T13076] Tainted: [L]=SOFTLOCKUP
[  674.778403][T13076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  674.778414][T13076] Call Trace:
[  674.778421][T13076]  <TASK>
[  674.778429][T13076]  dump_stack_lvl+0x100/0x190
[  674.778459][T13076]  should_fail_ex.cold+0x5/0xa
[  674.778485][T13076]  should_failslab+0xc2/0x120
[  674.778510][T13076]  kmem_cache_alloc_noprof+0x92/0x6a0
[  674.778534][T13076]  ? kcm_create+0x11e/0x6a0
[  674.778561][T13076]  kcm_create+0x11e/0x6a0
[  674.778586][T13076]  __sock_create+0x339/0x860
[  674.778622][T13076]  __sys_socket+0x14d/0x260
[  674.778652][T13076]  ? __pfx___sys_socket+0x10/0x10
[  674.778688][T13076]  ? find_held_lock+0x2b/0x80
[  674.778708][T13076]  ? trace_syscall_enter+0xcc/0x120
[  674.778738][T13076]  ? trace_syscall_enter+0xcc/0x120
[  674.778769][T13076]  __ia32_sys_socket+0x72/0xb0
[  674.778798][T13076]  __do_fast_syscall_32+0x13a/0x8b0
[  674.778828][T13076]  do_fast_syscall_32+0x32/0x70
[  674.778854][T13076]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  674.778878][T13076] RIP: 0023:0xf700efec
[  674.778898][T13076] Code: Unable to access opcode bytes at 0xf700efc2.
[  674.778906][T13076] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167
[  674.778926][T13076] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 0000000000000002
[  674.778938][T13076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  674.778950][T13076] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  674.778964][T13076] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  674.778975][T13076] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  674.778997][T13076]  </TASK>
[  675.040362][T13091] FAULT_INJECTION: forcing a failure.
[  675.040362][T13091] name failslab, interval 1, probability 0, space 0, times 0
[  675.045310][T13091] CPU: 0 UID: 0 PID: 13091 Comm: syz.5.1719 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  675.045355][T13091] Tainted: [L]=SOFTLOCKUP
[  675.045363][T13091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  675.045373][T13091] Call Trace:
[  675.045380][T13091]  <TASK>
[  675.045388][T13091]  dump_stack_lvl+0x100/0x190
[  675.045418][T13091]  should_fail_ex.cold+0x5/0xa
[  675.045442][T13091]  should_failslab+0xc2/0x120
[  675.045467][T13091]  __kmalloc_noprof+0xfc/0x840
[  675.045488][T13091]  ? lsm_blob_alloc+0x68/0x90
[  675.045510][T13091]  lsm_blob_alloc+0x68/0x90
[  675.045526][T13091]  security_sk_alloc+0x2d/0x290
[  675.045543][T13091]  sk_prot_alloc+0x1d1/0x2a0
[  675.045568][T13091]  sk_alloc+0x36/0xe80
[  675.045584][T13091]  unix_create1+0xa6/0x700
[  675.045604][T13091]  unix_create+0x10f/0x1b0
[  675.045622][T13091]  __sock_create+0x339/0x860
[  675.045649][T13091]  __sys_socketpair+0x1e4/0x5b0
[  675.045674][T13091]  ? __pfx___sys_socketpair+0x10/0x10
[  675.045704][T13091]  __ia32_compat_sys_socketcall+0x3c1/0x770
[  675.045730][T13091]  ? __pfx___ia32_compat_sys_socketcall+0x10/0x10
[  675.045753][T13091]  ? trace_event_buffer_commit+0x20a/0xa80
[  675.045791][T13091]  __do_fast_syscall_32+0x13a/0x8b0
[  675.045817][T13091]  do_fast_syscall_32+0x32/0x70
[  675.045838][T13091]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  675.045858][T13091] RIP: 0023:0xf700efec
[  675.045881][T13091] Code: Unable to access opcode bytes at 0xf700efc2.
[  675.045890][T13091] RSP: 002b:00000000f53fd440 EFLAGS: 00000286 ORIG_RAX: 0000000000000066
[  675.045910][T13091] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f53fd45c
[  675.045922][T13091] RDX: 00000000f73d7ff4 RSI: 00000000f7404f00 RDI: 0000000000000000
[  675.045935][T13091] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000
[  675.045947][T13091] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  675.045959][T13091] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  675.045989][T13091]  </TASK>
[  675.156600][T13097] Bluetooth: MGMT ver 1.23
[  675.156699][T13097] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  675.244937][T13107] jffs2: notice: (13107) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  675.258635][T13110] FAULT_INJECTION: forcing a failure.
[  675.258635][T13110] name failslab, interval 1, probability 0, space 0, times 0
[  675.265370][T13110] CPU: 0 UID: 0 PID: 13110 Comm: syz.2.1725 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  675.265413][T13110] Tainted: [L]=SOFTLOCKUP
[  675.265420][T13110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  675.265428][T13110] Call Trace:
[  675.265433][T13110]  <TASK>
[  675.265438][T13110]  dump_stack_lvl+0x100/0x190
[  675.265460][T13110]  should_fail_ex.cold+0x5/0xa
[  675.265477][T13110]  should_failslab+0xc2/0x120
[  675.265494][T13110]  __kmalloc_cache_noprof+0x91/0x6d0
[  675.265515][T13110]  ? __do_sys_memfd_create+0x170/0x3d0
[  675.265535][T13110]  __do_sys_memfd_create+0x170/0x3d0
[  675.265553][T13110]  __do_fast_syscall_32+0x13a/0x8b0
[  675.265572][T13110]  do_fast_syscall_32+0x32/0x70
[  675.265588][T13110]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  675.265613][T13110] RIP: 0023:0xf708efec
[  675.265628][T13110] Code: Unable to access opcode bytes at 0xf708efc2.
[  675.265634][T13110] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000164
[  675.265646][T13110] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000001
[  675.265654][T13110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  675.265660][T13110] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  675.265667][T13110] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  675.265674][T13110] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  675.265689][T13110]  </TASK>
[  675.395831][T13118] FAULT_INJECTION: forcing a failure.
[  675.395831][T13118] name failslab, interval 1, probability 0, space 0, times 0
[  675.395929][T13118] CPU: 3 UID: 0 PID: 13118 Comm: syz.3.1727 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  675.395969][T13118] Tainted: [L]=SOFTLOCKUP
[  675.395977][T13118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  675.395989][T13118] Call Trace:
[  675.395996][T13118]  <TASK>
[  675.396004][T13118]  dump_stack_lvl+0x100/0x190
[  675.396036][T13118]  should_fail_ex.cold+0x5/0xa
[  675.396063][T13118]  should_failslab+0xc2/0x120
[  675.396112][T13118]  __kmalloc_noprof+0xfc/0x840
[  675.396135][T13118]  ? lsm_blob_alloc+0x68/0x90
[  675.396161][T13118]  lsm_blob_alloc+0x68/0x90
[  675.396180][T13118]  security_prepare_creds+0x2d/0x290
[  675.396211][T13118]  prepare_creds+0x5d6/0x950
[  675.396237][T13118]  lookup_user_key+0x5d0/0x1300
[  675.396265][T13118]  ? __pfx_lookup_user_key+0x10/0x10
[  675.396292][T13118]  ? lock_acquire+0x1d1/0x380
[  675.396320][T13118]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  675.396357][T13118]  __do_sys_add_key+0x2a6/0x460
[  675.396378][T13118]  ? __pfx___do_sys_add_key+0x10/0x10
[  675.396396][T13118]  ? find_held_lock+0x2b/0x80
[  675.396424][T13118]  __do_fast_syscall_32+0x13a/0x8b0
[  675.396455][T13118]  do_fast_syscall_32+0x32/0x70
[  675.396481][T13118]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  675.396506][T13118] RIP: 0023:0xf705efec
[  675.396527][T13118] Code: Unable to access opcode bytes at 0xf705efc2.
[  675.396536][T13118] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e
[  675.396556][T13118] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000
[  675.396569][T13118] RDX: 0000000080000200 RSI: 0000000000000002 RDI: 00000000fffffffe
[  675.396583][T13118] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  675.396594][T13118] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  675.396606][T13118] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  675.396631][T13118]  </TASK>
[  676.101154][   T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  676.128994][ T5448] 8021q: adding VLAN 0 to HW filter on device eth6
[  676.251178][   T10] usb 8-1: Using ep0 maxpacket: 8
[  676.256220][   T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  676.258062][   T10] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  676.258102][   T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  676.258119][   T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  676.258135][   T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  676.258153][   T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  676.258183][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  676.495997][   T10] usb 8-1: usb_control_msg returned -32
[  676.496100][   T10] usbtmc 8-1:16.0: can't read capabilities
[  676.864480][T13170] usbtmc 8-1:16.0: INITIATE_ABORT_BULK_IN returned 2
[  677.021584][ T5448] 8021q: adding VLAN 0 to HW filter on device eth7
[  677.060996][   T10] usb 8-1: USB disconnect, device number 11
[  677.205564][ T5448] 8021q: adding VLAN 0 to HW filter on device eth8
[  677.307509][T13142] Set syz1 is full, maxelem 65536 reached
[  677.406763][ T5448] 8021q: adding VLAN 0 to HW filter on device eth9
[  677.841922][T13214] jffs2: notice: (13214) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  678.229285][T13228] syzkaller1: entered promiscuous mode
[  678.229337][T13228] syzkaller1: entered allmulticast mode
[  678.778034][T13240] syzkaller1: entered promiscuous mode
[  678.780005][T13240] syzkaller1: entered allmulticast mode
[  678.973713][T13246] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  678.973765][T13246] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received
[  679.161893][T13253] vcan0: tx address claim with dest, not broadcast
[  679.167861][T13255] loop8: detected capacity change from 0 to 7
[  679.168855][T13255]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[  679.168880][T13255] loop8: partition table partially beyond EOD, truncated
[  679.171465][T13255] loop8: p1 size 1905483274 extends beyond EOD, truncated
[  679.184935][T13257] FAULT_INJECTION: forcing a failure.
[  679.184935][T13257] name failslab, interval 1, probability 0, space 0, times 0
[  679.185022][T13257] CPU: 3 UID: 0 PID: 13257 Comm: syz.5.1760 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  679.185050][T13257] Tainted: [L]=SOFTLOCKUP
[  679.185056][T13257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  679.185068][T13257] Call Trace:
[  679.185075][T13257]  <TASK>
[  679.185083][T13257]  dump_stack_lvl+0x100/0x190
[  679.185113][T13257]  should_fail_ex.cold+0x5/0xa
[  679.185136][T13257]  should_failslab+0xc2/0x120
[  679.185161][T13257]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  679.185184][T13257]  ? __d_alloc+0x35/0xa50
[  679.185221][T13257]  __d_alloc+0x35/0xa50
[  679.185248][T13257]  d_alloc_pseudo+0x1c/0xc0
[  679.185277][T13257]  alloc_file_pseudo+0x118/0x290
[  679.185304][T13257]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  679.185325][T13257]  ? alloc_fd+0x471/0x7a0
[  679.185347][T13257]  ? do_raw_spin_unlock+0x145/0x1e0
[  679.185376][T13257]  __anon_inode_getfile+0xe8/0x280
[  679.185403][T13257]  anon_inode_getfile_fmode+0x37/0xa0
[  679.185428][T13257]  do_eventfd+0x159/0x2b0
[  679.185447][T13257]  __ia32_sys_eventfd2+0x53/0x80
[  679.185463][T13257]  __do_fast_syscall_32+0x13a/0x8b0
[  679.185492][T13257]  do_fast_syscall_32+0x32/0x70
[  679.185518][T13257]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  679.185541][T13257] RIP: 0023:0xf700efec
[  679.185563][T13257] Code: Unable to access opcode bytes at 0xf700efc2.
[  679.185572][T13257] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000148
[  679.185590][T13257] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000
[  679.185602][T13257] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  679.185614][T13257] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  679.185623][T13257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  679.185634][T13257] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  679.185657][T13257]  </TASK>
[  679.186665][T13255] loop8: p2 start 121280928 is beyond EOD, truncated
[  679.255043][ T9415] udevd[9415]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  679.347299][T13264] loop9: detected capacity change from 0 to 7
[  679.356593][    C3] blk_print_req_error: 25 callbacks suppressed
[  679.356714][    C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  679.356790][    C3] buffer_io_error: 9 callbacks suppressed
[  679.356801][    C3] Buffer I/O error on dev loop9, logical block 0, async page read
[  679.357480][    C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  679.357536][    C3] Buffer I/O error on dev loop9, logical block 0, async page read
[  679.357618][    C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  679.357669][    C3] Buffer I/O error on dev loop9, logical block 0, async page read
[  679.357743][    C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  679.357792][    C3] Buffer I/O error on dev loop9, logical block 0, async page read
[  679.357902][    C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  679.357955][    C3] Buffer I/O error on dev loop9, logical block 0, async page read
[  679.358053][    C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  679.358105][    C3] Buffer I/O error on dev loop9, logical block 0, async page read
[  679.358235][    C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  679.358287][    C3] Buffer I/O error on dev loop9, logical block 0, async page read
[  679.358318][T13264] ldm_validate_partition_table(): Disk read failed.
[  679.358385][    C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  679.358436][    C3] Buffer I/O error on dev loop9, logical block 0, async page read
[  679.358517][    C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  679.358566][    C3] Buffer I/O error on dev loop9, logical block 0, async page read
[  679.360637][    C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  679.360693][    C3] Buffer I/O error on dev loop9, logical block 0, async page read
[  679.360845][T13264] Dev loop9: unable to read RDB block 0
[  679.364329][T13264]  loop9: unable to read partition table
[  679.364432][T13264] loop9: partition table beyond EOD, truncated
[  679.364482][T13264] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5)
[  679.441092][T13264] loop9: detected capacity change from 7 to 0
[  679.449734][T13266] bridge0: port 2(bridge_slave_1) entered disabled state
[  679.450055][T13266] bridge0: port 1(bridge_slave_0) entered disabled state
[  679.579683][T13266] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  679.585524][T13266] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  679.711298][ T5786] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  679.711357][ T5786] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  679.711379][ T5786] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  679.711398][ T5786] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  679.791532][ T2096] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  679.942755][ T2096] usb 10-1: Using ep0 maxpacket: 32
[  679.948847][ T2096] usb 10-1: unable to get BOS descriptor or descriptor too short
[  679.948923][ T2096] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[  679.962651][ T2096] usb 10-1: string descriptor 0 read error: -22
[  679.962779][ T2096] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  679.977609][ T2096] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state.
[  679.981564][ T2096] dw2102: su3000_power_ctrl: 1, initialized 0
[  679.985080][ T2096] dvb-usb: bulk message failed: -22 (2/0)
[  679.993867][ T2096] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  680.001673][ T2096] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3)
[  680.006757][ T2096] usb 10-1: media controller created
[  680.012318][ T2096] dvb-usb: bulk message failed: -22 (6/0)
[  680.015491][ T2096] dw2102: i2c transfer failed.
[  680.018498][ T2096] dvb-usb: bulk message failed: -22 (6/0)
[  680.023306][ T2096] dw2102: i2c transfer failed.
[  680.026330][ T2096] dvb-usb: bulk message failed: -22 (6/0)
[  680.029135][ T2096] dw2102: i2c transfer failed.
[  680.031844][ T2096] dvb-usb: bulk message failed: -22 (6/0)
[  680.034506][ T2096] dw2102: i2c transfer failed.
[  680.036570][ T2096] dvb-usb: bulk message failed: -22 (6/0)
[  680.039167][ T2096] dw2102: i2c transfer failed.
[  680.041575][ T2096] dvb-usb: bulk message failed: -22 (6/0)
[  680.044479][ T2096] dw2102: i2c transfer failed.
[  680.049412][ T2096] dvb-usb: MAC address: 02:02:02:02:02:02
[  680.068962][ T2096] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  680.096845][ T2096] dvb-usb: bulk message failed: -22 (3/0)
[  680.100973][ T2096] dw2102: command 0x0e transfer failed.
[  680.106405][ T2096] dvb-usb: bulk message failed: -22 (3/0)
[  680.109022][ T2096] dw2102: command 0x0e transfer failed.
[  680.188552][T13272] i2c i2c-2: Invalid 10-bit I2C address 0x4ff8
[  680.425240][ T2096] dvb-usb: bulk message failed: -22 (3/0)
[  680.431486][ T2096] dw2102: command 0x0e transfer failed.
[  680.438920][ T2096] dvb-usb: bulk message failed: -22 (3/0)
[  680.441685][ T2096] dw2102: command 0x0e transfer failed.
[  680.444231][ T2096] dvb-usb: bulk message failed: -22 (1/0)
[  680.446799][ T2096] dw2102: command 0x51 transfer failed.
[  680.479836][ T2096] DVB: Unable to find symbol ds3000_attach()
[  680.488147][ T2096] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3'
[  680.544363][ T2096] rc_core: IR keymap rc-su3000 not found
[  680.546122][ T2096] Registered IR keymap rc-empty
[  680.554462][ T2096] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0
[  680.567830][ T2096] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input28
[  680.592642][ T2096] dvb-usb: schedule remote query interval to 150 msecs.
[  680.596770][ T2096] dw2102: su3000_power_ctrl: 0, initialized 1
[  680.599463][ T2096] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected.
[  680.607882][ T2096] usb 10-1: USB disconnect, device number 6
[  680.656331][ T2096] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected.
[  682.159075][T13303] netlink: 'syz.3.1778': attribute type 10 has an invalid length.
[  682.166916][T13303] 8021q: adding VLAN 0 to HW filter on device bond0
[  682.170360][T13303] team0: Port device bond0 added
[  682.175033][T13303] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1778'.
[  682.804950][T13314] FAULT_INJECTION: forcing a failure.
[  682.804950][T13314] name failslab, interval 1, probability 0, space 0, times 0
[  682.809971][T13314] CPU: 0 UID: 0 PID: 13314 Comm: syz.2.1780 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  682.810003][T13314] Tainted: [L]=SOFTLOCKUP
[  682.810009][T13314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  682.810016][T13314] Call Trace:
[  682.810022][T13314]  <TASK>
[  682.810028][T13314]  dump_stack_lvl+0x100/0x190
[  682.810049][T13314]  should_fail_ex.cold+0x5/0xa
[  682.810066][T13314]  should_failslab+0xc2/0x120
[  682.810082][T13314]  __kmalloc_cache_noprof+0x91/0x6d0
[  682.810102][T13314]  ? sctp_endpoint_new+0xfc/0xb20
[  682.810122][T13314]  sctp_endpoint_new+0xfc/0xb20
[  682.810141][T13314]  ? __pfx_sctp_endpoint_new+0x10/0x10
[  682.810157][T13314]  ? lockdep_init_map_type+0x5c/0x250
[  682.810176][T13314]  ? lockdep_init_map_type+0x5c/0x250
[  682.810193][T13314]  ? lockdep_init_map_type+0x5c/0x250
[  682.810212][T13314]  sctp_init_sock+0xe2b/0x1300
[  682.810232][T13314]  ? __pfx_sctp_init_sock+0x10/0x10
[  682.810251][T13314]  inet_create+0x94c/0x1060
[  682.810268][T13314]  ? inet_create+0x94/0x1060
[  682.810286][T13314]  __sock_create+0x339/0x860
[  682.810305][T13314]  __sys_socket+0x14d/0x260
[  682.810322][T13314]  ? __pfx___sys_socket+0x10/0x10
[  682.810338][T13314]  ? find_held_lock+0x2b/0x80
[  682.810349][T13314]  ? trace_syscall_enter+0xcc/0x120
[  682.810369][T13314]  ? trace_syscall_enter+0xcc/0x120
[  682.810389][T13314]  __ia32_sys_socket+0x72/0xb0
[  682.810406][T13314]  __do_fast_syscall_32+0x13a/0x8b0
[  682.810423][T13314]  do_fast_syscall_32+0x32/0x70
[  682.810439][T13314]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  682.810453][T13314] RIP: 0023:0xf708efec
[  682.810467][T13314] Code: Unable to access opcode bytes at 0xf708efc2.
[  682.810472][T13314] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167
[  682.810484][T13314] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000001
[  682.810491][T13314] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000
[  682.810497][T13314] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  682.810504][T13314] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  682.810510][T13314] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  682.810524][T13314]  </TASK>
[  682.991592][T13317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1781'.
[  683.062075][T13321] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  683.447101][T13333] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  684.511132][ T8674] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  684.684284][ T8674] usb 8-1: Using ep0 maxpacket: 32
[  684.685244][ T8674] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  684.688138][ T8674] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  684.688178][ T8674] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  684.688198][ T8674] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  684.688217][ T8674] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  684.690103][ T8674] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  684.690121][ T8674] usb 8-1: Product: syz
[  684.690133][ T8674] usb 8-1: Manufacturer: syz
[  684.690144][ T8674] usb 8-1: SerialNumber: syz
[  684.729086][    C2] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  684.829539][ T8674] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input29
[  684.941155][ T8674] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  684.941240][ T8674]  (id 0x00)
[  685.024719][ T8674] rc_core: IR keymap rc-imon-pad not found
[  685.024809][ T8674] Registered IR keymap rc-empty
[  685.024914][ T8674] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  685.024934][ T8674] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  685.151639][ T8674] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0
[  685.155086][ T8674] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input30
[  685.170112][ T8674] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:12> initialized
[  685.325849][T13342] imon:vfd_write: invalid payload size
[  685.327023][T12858] usb 8-1: USB disconnect, device number 12
[  685.524008][ T1437] ieee802154 phy0 wpan0: encryption failed: -22
[  685.524103][ T1437] ieee802154 phy1 wpan1: encryption failed: -22
[  687.045666][T13354] netlink: 'syz.3.1793': attribute type 10 has an invalid length.
[  687.204712][T13354] 8021q: adding VLAN 0 to HW filter on device bond0
[  687.210057][T13354] 8021q: adding VLAN 0 to HW filter on device team0
[  687.242486][T13354] 8021q: adding VLAN 0 to HW filter on device batadv0
[  687.421422][T13354] batman_adv: batadv0: Interface activated: batadv_slave_0
[  687.434269][T13354] batman_adv: batadv0: Interface activated: batadv_slave_1
[  687.471312][T13354] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  687.471916][T13354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  687.560583][T13354] veth1_vlan: left promiscuous mode
[  687.571934][T13354] veth0_vlan: left promiscuous mode
[  687.574873][T13354] veth0_vlan: entered promiscuous mode
[  687.593196][T13354] veth1_vlan: entered promiscuous mode
[  687.629274][T13354] veth1_macvtap: left promiscuous mode
[  687.642926][T13354] veth0_macvtap: left promiscuous mode
[  687.645563][T13354] veth0_macvtap: entered promiscuous mode
[  687.659912][T13354] veth1_macvtap: entered promiscuous mode
[  687.746001][T13354] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  687.759137][T13354] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  687.769397][T13354] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  687.782177][T13354] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  687.847044][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state
[  687.847192][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state
[  687.854837][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state
[  687.854904][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state
[  687.892845][ T5826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  687.893341][ T5826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  687.893748][ T5826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  687.893880][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  689.324982][T13405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1800'.
[  689.326392][T13405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1800'.
[  689.392787][T13409] jffs2: notice: (13409) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  692.767277][ T5736] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  692.782883][ T5736] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  692.786942][ T5736] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  692.792978][ T5736] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  692.799618][ T5736] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  693.138351][ T5826] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  693.372116][ T5826] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  693.512344][ T5826] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  693.609817][ T5826] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  693.845104][T13440] bridge0: port 1(bridge_slave_0) entered blocking state
[  693.845288][T13440] bridge0: port 1(bridge_slave_0) entered disabled state
[  693.845405][T13440] bridge_slave_0: entered allmulticast mode
[  693.846737][T13440] bridge_slave_0: entered promiscuous mode
[  693.870857][T13440] bridge0: port 2(bridge_slave_1) entered blocking state
[  693.870981][T13440] bridge0: port 2(bridge_slave_1) entered disabled state
[  693.872063][T13440] bridge_slave_1: entered allmulticast mode
[  693.874193][T13440] bridge_slave_1: entered promiscuous mode
[  693.943004][T13440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  693.947137][T13440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  694.002847][ T5826] bridge_slave_1: left allmulticast mode
[  694.002898][ T5826] bridge_slave_1: left promiscuous mode
[  694.003079][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[  694.019085][ T5826] bridge_slave_0: left allmulticast mode
[  694.019217][ T5826] bridge_slave_0: left promiscuous mode
[  694.019448][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[  694.248696][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  694.257459][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  694.268120][ T5826] bond0 (unregistering): Released all slaves
[  694.287876][T13440] team0: Port device team_slave_0 added
[  694.294064][T13440] team0: Port device team_slave_1 added
[  694.351885][T13440] batman_adv: batadv0: Adding interface: batadv_slave_0
[  694.351937][T13440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  694.351986][T13440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  694.353243][T13440] batman_adv: batadv0: Adding interface: batadv_slave_1
[  694.353273][T13440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  694.353306][T13440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  694.515593][T13440] hsr_slave_0: entered promiscuous mode
[  694.528947][T13440] hsr_slave_1: entered promiscuous mode
[  694.529609][T13440] debugfs: 'hsr0' already exists in 'hsr'
[  694.529628][T13440] Cannot create hsr debugfs directory
[  694.632075][T13474] ------------[ cut here ]------------
[  694.632122][T13474] unlikely(ret)
[  694.632171][T13474] WARNING: mm/vmalloc.c:5110 at pcpu_get_vm_areas+0x12b1/0x56c0, CPU#0: syz.3.1809/13474
[  694.642020][T13474] Modules linked in:
[  694.645880][T13474] CPU: 0 UID: 0 PID: 13474 Comm: syz.3.1809 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  694.651756][T13474] Tainted: [L]=SOFTLOCKUP
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  694.653624][T13474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  694.657572][T13474] RIP: 0010:pcpu_get_vm_areas+0x12b1/0x56c0
[  694.660065][T13474] Code: 08 48 83 84 24 c8 00 00 00 08 41 39 ef 0f 84 76 1b 00 00 89 6c 24 70 e9 58 fb ff ff 4c 8b bc 24 f0 00 00 00 e8 70 78 a0 ff 90 <0f> 0b 90 e8 67 78 a0 ff 8b 5c 24 70 31 ff 89 de 8d 6b ff e8 c7 72
[  694.668970][T13474] RSP: 0018:ffffc90002ee75a0 EFLAGS: 00010287
[  694.672723][T13474] RAX: 000000000006dea5 RBX: dffffc0000000000 RCX: ffffc90007131000
[  694.676497][T13474] RDX: 0000000000080000 RSI: ffffffff826ac3c0 RDI: ffffffff8e6b7920
[  694.679855][T13474] RBP: 0000000000000000 R08: 00000000ffffffff R09: fffffbfff1dffc3a
[  694.683393][T13474] R10: ffffffff8effe1d3 R11: 0000000000000000 R12: ffff888060404a90
[  694.686858][T13474] R13: ffffe8ffff000000 R14: dffffc0000000000 R15: ffffe8ffffe00000
[  694.690245][T13474] FS:  0000000000000000(0000) GS:ffff888096967000(0063) knlGS:00000000f544db40
[  694.694866][T13474] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  694.697914][T13474] CR2: 00000000f542cda4 CR3: 000000006f19b000 CR4: 0000000000352ef0
[  694.700816][T13474] Call Trace:
[  694.701970][T13474]  <TASK>
[  694.703129][T13474]  ? __kmalloc_noprof+0x350/0x840
[  694.705543][T13474]  ? __pfx_pcpu_get_vm_areas+0x10/0x10
[  694.707899][T13474]  ? pcpu_mem_zalloc+0x77/0xb0
[  694.710103][T13474]  pcpu_create_chunk+0x275/0x750
[  694.713096][T13474]  pcpu_alloc_noprof+0x1923/0x1e50
[  694.715575][T13474]  bpf_map_alloc_percpu+0x9a/0xf0
[  694.717716][T13474]  ? __pfx_bpf_map_alloc_percpu+0x10/0x10
[  694.720148][T13474]  ? __pfx___might_resched+0x10/0x10
[  694.722501][T13474]  ? __bpf_map_area_alloc+0x13a/0x200
[  694.724933][T13474]  array_map_alloc+0x553/0x750
[  694.727002][T13474]  map_create+0x874/0x30d0
[  694.729083][T13474]  ? __lock_acquire+0x4c5/0x1ec0
[  694.731772][T13474]  ? __pfx_map_create+0x10/0x10
[  694.734269][T13474]  ? lock_acquire+0x1d1/0x380
[  694.736110][T13474]  ? __might_fault+0xc5/0x140
[  694.737739][T13474]  ? __might_fault+0xc5/0x140
[  694.739304][T13474]  __sys_bpf+0x12a0/0x4a30
[  694.740919][T13474]  ? __pfx___sys_bpf+0x10/0x10
[  694.742812][T13474]  ? ring_buffer_event_data+0x10a/0x150
[  694.744595][T13474]  ? trace_event_buffer_commit+0x20a/0xa80
[  694.746566][T13474]  ? __pfx_eprobe_trigger_func+0x10/0x10
[  694.748967][T13474]  ? trace_event_buffer_commit+0x20a/0xa80
[  694.751708][T13474]  ? find_held_lock+0x2b/0x80
[  694.753964][T13474]  ? __ia32_sys_bpf+0xcc/0x170
[  694.756348][T13474]  __ia32_sys_bpf+0xcc/0x170
[  694.758581][T13474]  ? rcu_is_watching+0x13/0xc0
[  694.760729][T13474]  __do_fast_syscall_32+0x13a/0x8b0
[  694.762900][T13474]  do_fast_syscall_32+0x32/0x70
[  694.764928][T13474]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  694.767282][T13474] RIP: 0023:0xf705efec
[  694.768748][T13474] Code: Unable to access opcode bytes at 0xf705efc2.
[  694.770752][T13474] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  694.773727][T13474] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000
[  694.776694][T13474] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000
[  694.779322][T13474] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  694.782167][T13474] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  694.785617][T13474] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  694.788820][T13474]  </TASK>
[  694.790100][T13474] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  694.793065][T13474] CPU: 0 UID: 0 PID: 13474 Comm: syz.3.1809 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  694.798046][T13474] Tainted: [L]=SOFTLOCKUP
[  694.800059][T13474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  694.803561][T13474] Call Trace:
[  694.804764][T13474]  <TASK>
[  694.805700][T13474]  dump_stack_lvl+0x100/0x190
[  694.807181][T13474]  vpanic+0x553/0x970
[  694.808452][T13474]  ? __pfx_vpanic+0x10/0x10
[  694.809911][T13474]  panic+0xd1/0xe0
[  694.811099][T13474]  ? __pfx_panic+0x10/0x10
[  694.812516][T13474]  check_panic_on_warn.cold+0x19/0x34
[  694.814389][T13474]  ? pcpu_get_vm_areas+0x12b1/0x56c0
[  694.816485][T13474]  __warn.cold+0x191/0x318
[  694.818212][T13474]  __report_bug+0x30f/0x440
[  694.819919][T13474]  ? pcpu_get_vm_areas+0x12b1/0x56c0
[  694.821584][T13474]  ? __pfx___report_bug+0x10/0x10
[  694.823167][T13474]  ? __lock_acquire+0x4c5/0x1ec0
[  694.824663][T13474]  ? pcpu_get_vm_areas+0x12b1/0x56c0
[  694.826259][T13474]  report_bug+0xb3/0x220
[  694.827555][T13474]  ? pcpu_get_vm_areas+0x12b1/0x56c0
[  694.829233][T13474]  handle_bug+0x16a/0x2a0
[  694.830606][T13474]  exc_invalid_op+0x17/0x50
[  694.832073][T13474]  asm_exc_invalid_op+0x1a/0x20
[  694.833574][T13474] RIP: 0010:pcpu_get_vm_areas+0x12b1/0x56c0
[  694.835414][T13474] Code: 08 48 83 84 24 c8 00 00 00 08 41 39 ef 0f 84 76 1b 00 00 89 6c 24 70 e9 58 fb ff ff 4c 8b bc 24 f0 00 00 00 e8 70 78 a0 ff 90 <0f> 0b 90 e8 67 78 a0 ff 8b 5c 24 70 31 ff 89 de 8d 6b ff e8 c7 72
[  694.841901][T13474] RSP: 0018:ffffc90002ee75a0 EFLAGS: 00010287
[  694.844124][T13474] RAX: 000000000006dea5 RBX: dffffc0000000000 RCX: ffffc90007131000
[  694.846583][T13474] RDX: 0000000000080000 RSI: ffffffff826ac3c0 RDI: ffffffff8e6b7920
[  694.849035][T13474] RBP: 0000000000000000 R08: 00000000ffffffff R09: fffffbfff1dffc3a
[  694.851520][T13474] R10: ffffffff8effe1d3 R11: 0000000000000000 R12: ffff888060404a90
[  694.854027][T13474] R13: ffffe8ffff000000 R14: dffffc0000000000 R15: ffffe8ffffe00000
[  694.856783][T13474]  ? pcpu_get_vm_areas+0x12b0/0x56c0
[  694.858733][T13474]  ? __kmalloc_noprof+0x350/0x840
[  694.860369][T13474]  ? __pfx_pcpu_get_vm_areas+0x10/0x10
[  694.862065][T13474]  ? pcpu_mem_zalloc+0x77/0xb0
[  694.863859][T13474]  pcpu_create_chunk+0x275/0x750
[  694.865539][T13474]  pcpu_alloc_noprof+0x1923/0x1e50
[  694.867243][T13474]  bpf_map_alloc_percpu+0x9a/0xf0
[  694.868937][T13474]  ? __pfx_bpf_map_alloc_percpu+0x10/0x10
[  694.870860][T13474]  ? __pfx___might_resched+0x10/0x10
[  694.872632][T13474]  ? __bpf_map_area_alloc+0x13a/0x200
[  694.874351][T13474]  array_map_alloc+0x553/0x750
[  694.875942][T13474]  map_create+0x874/0x30d0
[  694.877528][T13474]  ? __lock_acquire+0x4c5/0x1ec0
[  694.879236][T13474]  ? __pfx_map_create+0x10/0x10
[  694.880879][T13474]  ? lock_acquire+0x1d1/0x380
[  694.882449][T13474]  ? __might_fault+0xc5/0x140
[  694.884122][T13474]  ? __might_fault+0xc5/0x140
[  694.885717][T13474]  __sys_bpf+0x12a0/0x4a30
[  694.887397][T13474]  ? __pfx___sys_bpf+0x10/0x10
[  694.889367][T13474]  ? ring_buffer_event_data+0x10a/0x150
[  694.891554][T13474]  ? trace_event_buffer_commit+0x20a/0xa80
[  694.893418][T13474]  ? __pfx_eprobe_trigger_func+0x10/0x10
[  694.895180][T13474]  ? trace_event_buffer_commit+0x20a/0xa80
[  694.896948][T13474]  ? find_held_lock+0x2b/0x80
[  694.898390][T13474]  ? __ia32_sys_bpf+0xcc/0x170
[  694.899916][T13474]  __ia32_sys_bpf+0xcc/0x170
[  694.901380][T13474]  ? rcu_is_watching+0x13/0xc0
[  694.903012][T13474]  __do_fast_syscall_32+0x13a/0x8b0
[  694.904698][T13474]  do_fast_syscall_32+0x32/0x70
[  694.906405][T13474]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  694.908685][T13474] RIP: 0023:0xf705efec
[  694.910432][T13474] Code: Unable to access opcode bytes at 0xf705efc2.
[  694.912547][T13474] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  694.915141][T13474] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000
[  694.917599][T13474] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000
[  694.920106][T13474] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  694.923112][T13474] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  694.926059][T13474] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  694.928708][T13474]  </TASK>
[  694.930446][T13474] Kernel Offset: disabled
[  694.931873][T13474] Rebooting in 86400 seconds..