last executing test programs:

13.463553343s ago: executing program 1 (id=25):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02100000040000000800000064ea170180000000", @ANYRES32=0x0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00')
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xdfe5)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)
syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0)
add_key(&(0x7f0000000180)='trusted\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000240)="006c68890fabf274ff83ff4697", 0xd, 0x0)

10.91485662s ago: executing program 3 (id=35):
syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, 0x0, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x9)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x7fffffffffffffff)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000004c0)={'pim6reg0\x00', 0x1000})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600884700000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r4 = epoll_create1(0x80000)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)={0xe0002018})
write(0xffffffffffffffff, &(0x7f0000000300)='p:t_st/event1 ./file0:0x0 arg2=%bx', 0x22)
bind$802154_raw(r3, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14)

10.673908184s ago: executing program 3 (id=37):
mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff)
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file2\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00')
mkdir(&(0x7f0000000740)='./file4\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./file4\x00', &(0x7f0000000800)='rpc_pipefs\x00', 0x0, 0x0)
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x6645, &(0x7f0000000180)={0x0, 0xaa0b, 0x800, 0x1, 0x99}, &(0x7f00000002c0)=<r1=>0x0, &(0x7f0000000300), &(0x7f0000000340))
syz_io_uring_submit(r1, r0, 0x0, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r3 = socket(0x8000000010, 0x2, 0x0)
write(r3, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, 0x0, 0x4000)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0xe, 0x0, 0xffffffffffffffff, 0x489, '\x00', 0x0, r2, 0x0, 0x5, 0x2}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000a80)={'sit0\x00', &(0x7f0000000940)={'gre0\x00', <r5=>0x0, 0x46, 0x7, 0x4, 0x80000, {{0x43, 0x4, 0x3, 0x1, 0x10c, 0x67, 0x0, 0x6, 0x29, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0xc5, [@rand_addr=0x64010101, @remote]}, @timestamp={0x44, 0x28, 0x91, 0x0, 0x6, [0x18, 0x3b, 0x3, 0x0, 0x3ff, 0xfff, 0x3ff, 0x6, 0x101]}, @ssrr={0x89, 0xf, 0xeb, [@remote, @empty, @empty]}, @timestamp_prespec={0x44, 0x44, 0x34, 0x3, 0xa, [{@private=0xa010102, 0x8cf}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x401}, {@local, 0x1}, {@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@remote, 0xea34}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x5}]}, @timestamp_prespec={0x44, 0x14, 0xb9, 0x3, 0x3, [{@local, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @lsrr={0x83, 0x1b, 0xf9, [@rand_addr=0x64010102, @broadcast, @empty, @broadcast, @multicast2, @rand_addr=0x64010102]}, @rr={0x7, 0x23, 0xc6, [@multicast1, @private=0xa010101, @empty, @broadcast, @remote, @empty, @empty, @remote]}, @rr={0x7, 0x1b, 0xc8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @rand_addr=0x64010102, @multicast1, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}})
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, r2, 0x4, 0x1, 0x2}, 0x50)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b80)={0xffffffffffffffff, 0x1, 0x8}, 0xc)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtaction={0x48, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000bc0)={0x0, 0x5}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x15, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x99e3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@generic={0xfc, 0x2, 0x1, 0x1, 0x27}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xbbd9235c1f0aeb9a}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x4, 0xc1, &(0x7f0000000840)=""/193, 0x41000, 0x48, '\x00', r5, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x1, 0xd, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000c00)=[0x1, r6, r7, r9], &(0x7f0000000c40)=[{0x5, 0x2, 0x6, 0x4}, {0x0, 0x4, 0xc, 0x8}, {0x2, 0x3, 0x6, 0xb}, {0x0, 0x3, 0x2, 0xc}, {0x5, 0x4, 0x6, 0x6}, {0x4, 0x4, 0x6, 0x5}, {0x2, 0x4, 0x8, 0x9}, {0x5, 0x3, 0x7, 0xc}, {0x3, 0x1, 0xc, 0xa}], 0x10, 0x24}, 0x94)

10.206244785s ago: executing program 1 (id=39):
setns(0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400dd05000008001b0000000000"], 0x30}}, 0x0)
socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000))
syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="03471b00003fba10e40007000000300002"], 0x44}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmallocinfo\x00', 0x0, 0x0)
lseek(r4, 0x4, 0x0)

9.624069135s ago: executing program 3 (id=41):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
socket$nl_route(0x10, 0x3, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
recvfrom(r0, &(0x7f0000000180)=""/233, 0xe9, 0x40000002, 0x0, 0x0)
write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/245, 0xf5}], 0x1}, 0x3}], 0x1, 0x23, 0x0)
sendto$inet6(r0, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000080)='./file0\x00')
r2 = open(&(0x7f0000000600)='./file0\x00', 0x1e3342, 0x15b)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/zoneinfo\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000002240)={0x2020}, 0x2020)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000100)='\"', 0x1}], 0x1)

9.574869428s ago: executing program 1 (id=42):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = socket(0x1, 0x6, 0x0)
r4 = syz_io_uring_setup(0x141c, &(0x7f0000000200)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_modify_offsets$generic(r5, r6, 0x2c, 0x10000)
io_uring_enter(r4, 0x4119, 0x869e, 0xb, 0x0, 0x0)
io_uring_enter(r4, 0x7f9d, 0xf427, 0x8, 0x0, 0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000340)={0x2e, 0x52, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x2, 0xda4, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0xde}}}, 0x0)
syz_io_uring_complete(r5, r6)
io_uring_enter(r4, 0x20, 0x20, 0x1, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_80211_inject_frame(&(0x7f0000000900)=@device_b, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0)
writev(r2, &(0x7f0000000840), 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r0, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d0004"], 0x4c}}, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r9, 0x84, 0x23, 0x0, 0x0)

8.815521987s ago: executing program 1 (id=46):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x57, 0x0, 0x0, 0x0, 0x40000})
syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, 0x0, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x9)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x7fffffffffffffff)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1900, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff80}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xb0ffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f00000003c0)=""/140, &(0x7f0000000480)=0x8c)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000004c0)={'pim6reg0\x00', 0x1000})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600884700000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r7 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0xe0002018})
write(0xffffffffffffffff, &(0x7f0000000300)='p:t_st/event1 ./file0:0x0 arg2=%bx', 0x22)
bind$802154_raw(r3, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14)

8.464259077s ago: executing program 0 (id=48):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='270', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:1f.0/remove\x00', 0x1, 0x0)
write(r1, &(0x7f00000000c0)='1\x00', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='1\x00', 0x1)
close(r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000004000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00 \x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000600)=ANY=[@ANYRES32=r1, @ANYBLOB="e674d42dcdccb81ea2bdd493a287f647928f2c2c74a9a16a558b25da9becad9152d2f9cafc7eb1aade136c9e97640c06e1c7f0856828a63233ae13ced42ca091a7f9c6805b7addbef082a2b2b41b26bfbb12182a776caee6df9a736c89a4d8919524a21c8b406c92c949899ed8195fe47b0ed31f9a1b07af8e00bd7d32e47c477c391d68f46d267aa012cb822295be4b182ab46b6c8b226e1a16980f4db6e8b7c19ee74ed6d5d89599e2238809a63a5ce1f4ac5a57752eb4807cee08afa79ae972439ac579", @ANYRES64=r3, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macvtap0\x00', <r5=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x65be, 0x5, 0x0, 0x1, 0xcb00, '\x00', r5}, 0x50)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r9=>0x0}, &(0x7f0000000000)=0x8)
ioctl$sock_SIOCDELDLCI(r6, 0x8981, &(0x7f0000000180)={'macvlan1\x00', 0x7})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000001c0)={r9}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000280)={r9, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x8, 0x4, 0x200, 0x10, 0x7, 0x9}, 0x9c)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100)
close(r10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet6_mptcp(0xa, 0x1, 0x106)

8.40693079s ago: executing program 1 (id=50):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02100000040000000800000064ea170180000000", @ANYRES32=0x0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00')
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0xdfe5)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)
syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0)
add_key(&(0x7f0000000180)='trusted\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000240)="006c68890fabf274ff83ff4697", 0xd, 0x0)

8.32794093s ago: executing program 0 (id=51):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = socket(0x1, 0x6, 0x0)
r4 = syz_io_uring_setup(0x141c, &(0x7f0000000200)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_modify_offsets$generic(r5, r6, 0x2c, 0x10000)
io_uring_enter(r4, 0x4119, 0x869e, 0xb, 0x0, 0x0)
io_uring_enter(r4, 0x7f9d, 0xf427, 0x8, 0x0, 0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000340)={0x2e, 0x52, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x2, 0xda4, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0xde}}}, 0x0)
syz_io_uring_complete(r5, r6)
io_uring_enter(r4, 0x20, 0x20, 0x1, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_80211_inject_frame(&(0x7f0000000900)=@device_b, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0)
writev(r2, &(0x7f0000000840), 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r0, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r9, 0x84, 0x23, 0x0, 0x0)

7.524329056s ago: executing program 2 (id=52):
syz_emit_ethernet(0x8e, &(0x7f0000000380)={@empty, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x58, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x8, 0x6, "cd85b5", 0x7, 0x84, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [], "aad25a7f302d4579b298392ccf95e1e48f10658b1a1c7edc1ffd13d9ccbf356d"}}}}}}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x9c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x88, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0xb, 0x6, "7a163523edd482"}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0)
setns(0xc9, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x2a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000700)='syz0\x00', 0x200002, 0x0)
syz_clone3(&(0x7f0000000740)={0x201000000, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000540), {0x5}, &(0x7f0000000580)=""/164, 0xa4, &(0x7f0000000640)=""/66, &(0x7f00000006c0)=[r1], 0x1, {r4}}, 0x58)
r5 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000100)=0x1e)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r6, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd40, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000007}, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x8001}, 0x20)

7.524077427s ago: executing program 3 (id=53):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02100000040000000800000064ea170180000000", @ANYRES32=0x0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00')
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xdfe5)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)
syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0)
add_key(&(0x7f0000000180)='trusted\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000240)="006c68890fabf274ff83ff4697", 0xd, 0x0)

7.431286957s ago: executing program 0 (id=54):
setns(0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400dd05000008001b0000000000"], 0x30}}, 0x0)
socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000))
syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="03471b00003fba10e40007000000300002"], 0x44}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
keyctl$read(0x16, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0x200)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmallocinfo\x00', 0x0, 0x0)
lseek(r5, 0x4, 0x0)

6.255624143s ago: executing program 0 (id=55):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='270', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:1f.0/remove\x00', 0x1, 0x0)
write(r1, &(0x7f00000000c0)='1\x00', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='1\x00', 0x1)

6.150439838s ago: executing program 0 (id=56):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r2 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000540)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\x00\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f00000000c0)=[@increfs, @increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0})
r4 = dup3(r3, 0xffffffffffffffff, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
sched_setscheduler(0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000003, 0x204031, 0xffffffffffffffff, 0x97170000)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
timer_create(0x4, &(0x7f0000000300)={0x0, 0x38, 0x0, @thr={&(0x7f0000000100)="4c499e8369aba39a2969a6d0b462b753218c70bb", &(0x7f00000001c0)="5be27e58e40a92b0f61916b2e616d4a362da5ab9fe3613f1f0f0378ce4d05e0f99b8567c2e043f4c5d848977fabdd81697f7db052082b31f56def80c5a940ddfbd63d8139feb132f7b1529981d6c2f5146b4d9750d5ae7fbdb29dba78bce8485579af52d69ec91de970ef51ee5bdc79328fb1600f9a8bf8b37c116dc4de0995924cf2d8e10ac6e745977f8c7f872979224bbf589b79fce7f1fbc7fa308aa7079b533ef54db1dd41b29bd5dd4a5674c61d220b508002125d163788b6018a86ee29557c7945bcfe03ae31326da90"}}, &(0x7f0000000340))
ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2001, 0x3, 0x6}, 'syz0\x00', 0x38})
ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x12)
ioctl$UI_DEV_CREATE(r6, 0x5501)
write$input_event(r6, &(0x7f00000002c0)={{0x0, 0x2710}, 0x12, 0x7, 0x100000a}, 0x18)

5.686262308s ago: executing program 0 (id=57):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_ublk_setup_io_uring(0x4a10, &(0x7f0000000600)={0x0, 0x42030b5, 0x1, 0x2, 0x157}, &(0x7f00000000c0)=<r2=>0x0, 0x0, &(0x7f0000000080)=<r3=>0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000040)='./file2\x00', 0x81)
syz_ublk_add_dev(r1, r2, 0x0, r3, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r5, &(0x7f0000000580)={0x0, 0x1, 0x1f00, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x0, 0x3, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x0, 0x142, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8, 0x4, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x2, 0x8004, 0x0, 0x0}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001000000000000000020000085000000870000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xbd7)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r9)
ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)
r10 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x200)
ioctl$VIDIOC_STREAMOFF(r10, 0x40045613, &(0x7f0000000040)=0x2)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})

5.677331405s ago: executing program 2 (id=65):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = socket(0x1, 0x6, 0x0)
r4 = syz_io_uring_setup(0x141c, &(0x7f0000000200)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_modify_offsets$generic(r5, r6, 0x2c, 0x10000)
io_uring_enter(r4, 0x4119, 0x869e, 0xb, 0x0, 0x0)
io_uring_enter(r4, 0x7f9d, 0xf427, 0x8, 0x0, 0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000340)={0x2e, 0x52, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x2, 0xda4, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0xde}}}, 0x0)
syz_io_uring_complete(r5, r6)
io_uring_enter(r4, 0x20, 0x20, 0x1, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_80211_inject_frame(&(0x7f0000000900)=@device_b, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0)
writev(r2, &(0x7f0000000840), 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r0, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d0004"], 0x4c}}, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r9, 0x84, 0x23, 0x0, 0x0)

4.806469614s ago: executing program 1 (id=58):
setns(0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400dd05000008001b0000000000"], 0x30}}, 0x0)
socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="03471b00003fba10e40007000000300002"], 0x44}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
keyctl$read(0x16, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)=0x200)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmallocinfo\x00', 0x0, 0x0)
lseek(r6, 0x4, 0x0)

4.683576429s ago: executing program 2 (id=59):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff})
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5})
ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r3 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7b, 0x983a}, 0x90)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0)
write(r4, 0x0, 0x0)
write(r4, &(0x7f0000000200)='1', 0x1)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40087446, &(0x7f00000007c0)={0x1, &(0x7f0000000080)=[{0x16, 0xd, 0x1, 0x10001}]})

3.775872032s ago: executing program 3 (id=60):
setns(0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400dd05000008001b0000000000"], 0x30}}, 0x0)
socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="03471b00003fba10e40007000000300002"], 0x44}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
keyctl$read(0x16, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)=0x200)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)
lseek(0xffffffffffffffff, 0x4, 0x0)

2.835343454s ago: executing program 2 (id=61):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd40, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000007}, 0x0)

1.611269931s ago: executing program 2 (id=62):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x57, 0x0, 0x0, 0x0, 0x40000})
syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, 0x0, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x9)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x7fffffffffffffff)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1900, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff80}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xb0ffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f00000003c0)=""/140, &(0x7f0000000480)=0x8c)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000004c0)={'pim6reg0\x00', 0x1000})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600884700000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r6 = epoll_create1(0x80000)
r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000140)={0xe0002018})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r8, &(0x7f0000000300)='p:t_st/event1 ./file0:0x0 arg2=%bx', 0x22)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000000c0))

21.040213ms ago: executing program 3 (id=63):
setns(0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3000000410000108000000000000000000002dbb501d26580c22ee25f4a24c7a679c4b19522334ded5148c6a898f4ee82be3ac9c3b12082e69313550d46e54eac30bc78a33e859edf427a479453dbc822b411ef829a5f0692efabd623caa02bae53b52bb344e02d1950c5a329c11bc3d90c480efa1d5498ad9a9e1c5418901d7a3522a2f0c3356778902567b8780801cc655fc944207583a46df4417cf8523980fd6dbb4f8c43d9f82730f1b481842f47c2e070000000000000000626a5bb3e3741bcff1a7bc5bfebfe4e4adec2d3c4da48515137f6a8eda5ffef81d4f47e18b8a6885dddc4bfd833932b48de2d67b1e1a0a25008080a34497b6ff3ae29dd7b1137373060000006559d65b1f12ccfc001b15d278d52d500918a6d868604aca1b809d438377b91836d9fe3c80be4d254d495e524de805a2bef6ca651c913f688c3966aad5c12956a96716109f851cea0358662d29dc93bd0fa3f75975d725606cc3b2a0b9f6983d2f21369e8ff9b6af45db4ec14249935d3545195a7211e39008ccc4567e37cb9a2b2b92ddd8921b", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400dd05000008001b0000000000"], 0x30}}, 0x0)
socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="03471b00003fba10e40007000000300002"], 0x44}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
keyctl$read(0x16, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)=0x200)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="61128c00000000006113300000000000bf300000000000002500070007ffffffbd0201000000000095002000000000006916320000000000bf6700000000000007070000b964b01a4607feff00200000540700000ee60090bf050000000000000c5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f055af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6901fcecc8158f0200000000c8fb735fd552bdc268694aeb0763f65e439ec1120843e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3abd5dedd3f7d2cf5834f2af97787f696649a46e17e090000000000000045eac1720e83b7838e3eede14308d582685e1becd6f35154bcb400000000000000000000008129277dc467148670ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f14c3f2ed6c64ec90000022d600000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca51c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233ba3d4ce26ed703dcb9fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c17d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be6910023a26faea764fae160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7beecaaa61e7a726571df5cf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da046c7aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ce27e134548032a307871cea4c89d4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b8748d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b25055e786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc136464025013665b1cf26a863a5cb3e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a56c4f3f265a09628878040000000000000017b68afd95d4abd79286692439ee7acca2adc3d83d72b1b778e30c2bf2efbbcd054cf51f5705eb0faa8a0d9f18135cb1d8d567c3436fa697b72c5035d98b9e4f7f3379c0b3339debc78352b2e65299223d7ef2bd540e78167a3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586331eb5995d2288a167b7c6b20b32116b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22db669560d296287c13c92070000ee7553eb2df17a39542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c887081c8d320642389f5f0c42dba0ff75a257310f2d92cb1d1e16468949f5675262ee6609cf26ae4a8f5eac0ebf318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0f72c4a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1a706ec201eedfa5fbdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee8072d1f88cb781e4cdb04af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98c5a471f3521956f8da6a4ccf2071095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5a071ba22251e2de8bac16e79da9c2444d52facb7ab49420900000000000000f888a94365b99b72796fde1b922fc9ae09b526efca65faf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837be14d6a483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c79c846e403910bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be0000fdde69c350e59f11f1d26a4d04d8c8b2c4a4d23ee931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f647e1f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680faa8cf38dbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705113a5ce1c99193886d6008d3565b00000000000000000000000000000000001c260fc175785ca04e31790f542c0f17b6599e93134792eae9878638b299e1d2b38d367be0d5c99d179c6bde265caebbae48bae74338f9d4f12f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)
lseek(0xffffffffffffffff, 0x4, 0x0)

0s ago: executing program 2 (id=72):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e79"])
socket$nl_route(0x10, 0x3, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
recvfrom(r0, &(0x7f0000000180)=""/233, 0xe9, 0x40000002, 0x0, 0x0)
write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/245, 0xf5}], 0x1}, 0x3}], 0x1, 0x23, 0x0)
sendto$inet6(r0, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000080)='./file0\x00')
r2 = open(&(0x7f0000000600)='./file0\x00', 0x1e3342, 0x15b)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/zoneinfo\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000002240)={0x2020}, 0x2020)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000100)='\"', 0x1}], 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:9720' (ED25519) to the list of known hosts.
[   42.388315][ T5724] cgroup: Unknown subsys name 'net'
[   42.532165][ T5724] cgroup: Unknown subsys name 'cpuset'
[   42.534779][ T5724] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.421610][ T5724] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   47.409634][ T5738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   47.411637][ T5749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   47.412596][ T5749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   47.412832][ T5751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   47.413170][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   47.413594][ T5749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   47.413661][ T5751] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   47.414812][ T5749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   47.414948][ T5750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   47.417368][ T5749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   47.417381][ T5751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   47.418182][ T5749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   47.418874][ T5751] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   47.419069][ T5749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   47.421553][ T5751] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   47.423757][ T5750] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   47.434511][ T5750] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   47.434733][ T5750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   47.436285][ T5096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   47.436563][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.988598][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.989396][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.989504][ T5737] bridge_slave_0: entered allmulticast mode
[   47.991094][ T5737] bridge_slave_0: entered promiscuous mode
[   47.994573][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.994646][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.995320][ T5737] bridge_slave_1: entered allmulticast mode
[   47.996667][ T5737] bridge_slave_1: entered promiscuous mode
[   48.050415][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.065524][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.086837][ T5737] team0: Port device team_slave_0 added
[   48.112849][ T5737] team0: Port device team_slave_1 added
[   48.118839][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.118880][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.118943][ T5736] bridge_slave_0: entered allmulticast mode
[   48.120595][ T5736] bridge_slave_0: entered promiscuous mode
[   48.122596][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.122635][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.124730][ T5736] bridge_slave_1: entered allmulticast mode
[   48.126035][ T5736] bridge_slave_1: entered promiscuous mode
[   48.192877][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.192891][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.192907][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.214487][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.214497][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.214509][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.215865][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.230928][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.231012][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.231068][ T5735] bridge_slave_0: entered allmulticast mode
[   48.232533][ T5735] bridge_slave_0: entered promiscuous mode
[   48.234971][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.244675][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.244740][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.244794][ T5735] bridge_slave_1: entered allmulticast mode
[   48.245492][ T5735] bridge_slave_1: entered promiscuous mode
[   48.267274][ T5736] team0: Port device team_slave_0 added
[   48.268473][ T5736] team0: Port device team_slave_1 added
[   48.313118][ T5737] hsr_slave_0: entered promiscuous mode
[   48.313637][ T5737] hsr_slave_1: entered promiscuous mode
[   48.323427][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.323509][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.323995][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.324052][ T5744] bridge_slave_0: entered allmulticast mode
[   48.324767][ T5744] bridge_slave_0: entered promiscuous mode
[   48.325983][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.326037][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.326090][ T5744] bridge_slave_1: entered allmulticast mode
[   48.326760][ T5744] bridge_slave_1: entered promiscuous mode
[   48.333624][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.333633][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.333646][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.343681][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.349005][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.349014][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.349028][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.369811][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.385310][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.395131][ T5735] team0: Port device team_slave_0 added
[   48.396504][ T5735] team0: Port device team_slave_1 added
[   48.427685][ T5736] hsr_slave_0: entered promiscuous mode
[   48.428110][ T5736] hsr_slave_1: entered promiscuous mode
[   48.428457][ T5736] debugfs: 'hsr0' already exists in 'hsr'
[   48.428504][ T5736] Cannot create hsr debugfs directory
[   48.433663][ T5744] team0: Port device team_slave_0 added
[   48.439568][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.439577][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.439590][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.445613][ T5744] team0: Port device team_slave_1 added
[   48.456098][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.456108][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.456121][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.503610][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.503621][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.503633][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.504463][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.504471][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.504483][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.548616][ T5735] hsr_slave_0: entered promiscuous mode
[   48.549037][ T5735] hsr_slave_1: entered promiscuous mode
[   48.549498][ T5735] debugfs: 'hsr0' already exists in 'hsr'
[   48.549509][ T5735] Cannot create hsr debugfs directory
[   48.591263][ T5744] hsr_slave_0: entered promiscuous mode
[   48.591684][ T5744] hsr_slave_1: entered promiscuous mode
[   48.592014][ T5744] debugfs: 'hsr0' already exists in 'hsr'
[   48.592026][ T5744] Cannot create hsr debugfs directory
[   48.707961][ T5737] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.711881][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.712326][ T5737] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.718621][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.719411][ T5737] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.725486][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.746489][ T5737] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.750248][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.822045][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.822100][ T5737] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.822408][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.822453][ T5737] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.834057][ T5736] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.838096][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.838533][ T5736] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.842293][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.846622][ T5736] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.849789][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.851741][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.854904][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.882188][ T5736] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.884653][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.935720][ T5735] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   48.940603][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.943562][ T5735] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   48.949806][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.957719][ T5735] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   48.962989][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.985240][ T5735] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   48.989094][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.023621][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.056405][ T5744] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   49.060338][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   49.060853][ T5744] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   49.065650][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   49.067523][ T5744] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   49.073316][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   49.076939][ T5737] 8021q: adding VLAN 0 to HW filter on device team0
[   49.077736][ T5744] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   49.081344][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.095568][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.095614][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.109696][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.109772][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.132822][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.163292][ T5736] 8021q: adding VLAN 0 to HW filter on device team0
[   49.180477][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.180562][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.191274][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.191336][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.197065][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.229977][ T5735] 8021q: adding VLAN 0 to HW filter on device team0
[   49.244311][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.244384][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.260704][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.260787][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.263847][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.295032][ T5744] 8021q: adding VLAN 0 to HW filter on device team0
[   49.315815][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.315884][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.327368][   T55] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.327412][   T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.335793][ T5735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   49.480901][ T5096] Bluetooth: hci0: command tx timeout
[   49.480909][ T5745] Bluetooth: hci2: command tx timeout
[   49.481175][ T5096] Bluetooth: hci3: command tx timeout
[   49.481317][ T5748] Bluetooth: hci1: command tx timeout
[   49.537132][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.565434][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.573356][ T5737] veth0_vlan: entered promiscuous mode
[   49.581199][ T5737] veth1_vlan: entered promiscuous mode
[   49.602588][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.604672][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.613550][ T5736] veth0_vlan: entered promiscuous mode
[   49.621912][ T5737] veth0_macvtap: entered promiscuous mode
[   49.622949][ T5736] veth1_vlan: entered promiscuous mode
[   49.639287][ T5737] veth1_macvtap: entered promiscuous mode
[   49.657919][ T5735] veth0_vlan: entered promiscuous mode
[   49.665890][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.667864][ T5736] veth0_macvtap: entered promiscuous mode
[   49.673085][ T5736] veth1_macvtap: entered promiscuous mode
[   49.675048][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.676418][ T5744] veth0_vlan: entered promiscuous mode
[   49.682343][ T5735] veth1_vlan: entered promiscuous mode
[   49.684519][ T5744] veth1_vlan: entered promiscuous mode
[   49.698387][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.712206][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.737413][ T5744] veth0_macvtap: entered promiscuous mode
[   49.739622][ T5814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.739746][ T5814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.739765][ T5814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.739783][ T5814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.751361][ T5744] veth1_macvtap: entered promiscuous mode
[   49.764105][ T5735] veth0_macvtap: entered promiscuous mode
[   49.783216][ T5735] veth1_macvtap: entered promiscuous mode
[   49.792737][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.792749][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.794888][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.809099][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.815996][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.816008][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.833321][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.833332][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.850594][   T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.850623][   T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.859144][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.873029][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.880410][ T5814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.880647][ T5814] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.881010][ T5814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.881122][ T5814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.881347][ T5814] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.881601][ T5814] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.881713][ T5814] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.881861][ T5814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.935359][ T5736] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.965511][ T5736] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   49.965819][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.965830][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.971306][ T5736] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   49.972893][ T5736] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   50.003000][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.003018][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.004021][ T5736] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   50.025046][   T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.025063][   T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.032269][   T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.032285][   T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.041557][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.041890][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.042055][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.042454][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.201729][ T5892] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure
[   50.385896][ T5898] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1'.
[   50.481379][ T5895] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   50.918237][ T5906] pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 conventional PCI endpoint
[   50.931253][ T5906] pci 0000:00:1f.0: quirk: [io  0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO
[   50.938958][ T5906] pci 0000:00:1f.0: Adding to iommu group 8
[   50.950281][ T5906] lpc_ich 0000:00:1f.0: I/O space for GPIO uninitialized
[   51.069865][ T5911] pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 conventional PCI endpoint
[   51.072227][ T5911] pci 0000:00:1f.0: quirk: [io  0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO
[   51.076883][ T5911] FAULT_INJECTION: forcing a failure.
[   51.076883][ T5911] name failslab, interval 1, probability 0, space 0, times 1
[   51.076903][ T5911] CPU: 3 UID: 0 PID: 5911 Comm: syz.1.6 Not tainted syzkaller #0 PREEMPT(full) 
[   51.076916][ T5911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   51.076923][ T5911] Call Trace:
[   51.076928][ T5911]  <TASK>
[   51.076932][ T5911]  dump_stack_lvl+0x100/0x190
[   51.076952][ T5911]  should_fail_ex.cold+0x5/0xa
[   51.076968][ T5911]  should_failslab+0xc2/0x120
[   51.076987][ T5911]  __kmalloc_cache_noprof+0x91/0x6d0
[   51.077001][ T5911]  ? intel_iommu_probe_device+0xc55/0x30b0
[   51.077019][ T5911]  ? intel_iommu_probe_device+0x5e2/0x30b0
[   51.077039][ T5911]  intel_iommu_probe_device+0x5e2/0x30b0
[   51.077062][ T5911]  ? do_raw_spin_lock+0x128/0x260
[   51.077075][ T5911]  ? __pfx_intel_iommu_probe_device+0x10/0x10
[   51.077092][ T5911]  ? __iommu_probe_device+0x23c/0x1550
[   51.077106][ T5911]  ? __iommu_probe_device+0x23c/0x1550
[   51.077126][ T5911]  __iommu_probe_device+0x2f2/0x1550
[   51.077143][ T5911]  ? __pfx___iommu_probe_device+0x10/0x10
[   51.077170][ T5911]  iommu_probe_device+0x28/0x130
[   51.077186][ T5911]  iommu_bus_notifier+0x5b/0x110
[   51.077202][ T5911]  notifier_call_chain+0x99/0x3f0
[   51.077219][ T5911]  blocking_notifier_call_chain+0x69/0xa0
[   51.077235][ T5911]  bus_notify+0x56/0x80
[   51.077255][ T5911]  device_add+0x1169/0x1970
[   51.077272][ T5911]  ? __pfx_device_add+0x10/0x10
[   51.077299][ T5911]  ? pci_device_add+0xd4f/0x1820
[   51.077318][ T5911]  ? down_write+0x146/0x1f0
[   51.077331][ T5911]  ? pcibios_device_add+0x492/0x600
[   51.077348][ T5911]  ? up_write+0x2dc/0x5b0
[   51.077362][ T5911]  pci_device_add+0xdb6/0x1820
[   51.077380][ T5911]  ? __pfx_pci_device_add+0x10/0x10
[   51.077396][ T5911]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[   51.077411][ T5911]  ? __raw_spin_lock_init+0x3a/0x110
[   51.077425][ T5911]  pci_scan_single_device+0x1d0/0x240
[   51.077441][ T5911]  ? __pfx_pci_scan_single_device+0x10/0x10
[   51.077462][ T5911]  pci_scan_slot+0x1c9/0x7c0
[   51.077479][ T5911]  ? __pfx_pci_scan_slot+0x10/0x10
[   51.077496][ T5911]  ? rcu_is_watching+0x13/0xc0
[   51.077511][ T5911]  pci_scan_child_bus_extend+0x6b/0x7b0
[   51.077527][ T5911]  ? pci_find_next_bus+0x60/0xb0
[   51.077547][ T5911]  pci_rescan_bus+0x18/0x40
[   51.077563][ T5911]  rescan_store+0xfb/0x130
[   51.077579][ T5911]  ? __pfx_rescan_store+0x10/0x10
[   51.077596][ T5911]  ? sysfs_file_kobj+0xe4/0x290
[   51.077611][ T5911]  ? __pfx_rescan_store+0x10/0x10
[   51.077627][ T5911]  bus_attr_store+0x74/0xb0
[   51.077642][ T5911]  ? __pfx_bus_attr_store+0x10/0x10
[   51.077659][ T5911]  sysfs_kf_write+0xf2/0x150
[   51.077674][ T5911]  kernfs_fop_write_iter+0x3e0/0x5f0
[   51.077686][ T5911]  ? __pfx_sysfs_kf_write+0x10/0x10
[   51.077702][ T5911]  vfs_write+0x6af/0x1050
[   51.077717][ T5911]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   51.077731][ T5911]  ? __pfx_vfs_write+0x10/0x10
[   51.077744][ T5911]  ? find_held_lock+0x2b/0x80
[   51.077768][ T5911]  ksys_write+0x12a/0x250
[   51.077782][ T5911]  ? __pfx_ksys_write+0x10/0x10
[   51.077801][ T5911]  __do_fast_syscall_32+0x13a/0x8b0
[   51.077821][ T5911]  do_fast_syscall_32+0x32/0x70
[   51.077832][ T5911]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   51.077847][ T5911] RIP: 0023:0xf7f98fec
[   51.077861][ T5911] Code: Unable to access opcode bytes at 0xf7f98fc2.
[   51.077866][ T5911] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[   51.077877][ T5911] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140
[   51.077884][ T5911] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[   51.077891][ T5911] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   51.077897][ T5911] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   51.077903][ T5911] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   51.077918][ T5911]  </TASK>
[   51.163575][ T5911] lpc_ich 0000:00:1f.0: I/O space for GPIO uninitialized
[   51.559276][ T5748] Bluetooth: hci3: command tx timeout
[   51.569345][ T5748] Bluetooth: hci1: command tx timeout
[   51.569365][ T5748] Bluetooth: hci2: command tx timeout
[   51.569376][ T5748] Bluetooth: hci0: command tx timeout
[   51.939050][ T5922] pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 conventional PCI endpoint
[   51.979071][ T5922] pci 0000:00:1f.0: quirk: [io  0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO
[   52.015201][ T5922] pci 0000:00:1f.0: Adding to iommu group 8
[   52.024793][ T5922] lpc_ich 0000:00:1f.0: I/O space for GPIO uninitialized
[   52.382859][ T5931] netlink: 'syz.3.10': attribute type 12 has an invalid length.
[   52.383764][ T5931] Zero length message leads to an empty skb
[   52.660729][ T5942] pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 conventional PCI endpoint
[   52.662849][ T5942] pci 0000:00:1f.0: quirk: [io  0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO
[   52.670492][ T5942] pci 0000:00:1f.0: Adding to iommu group 8
[   52.680660][ T5942] lpc_ich 0000:00:1f.0: I/O space for GPIO uninitialized
[   53.637039][ T5964] pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 conventional PCI endpoint
[   53.639011][ T5964] pci 0000:00:1f.0: quirk: [io  0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO
[   53.645715][ T5964] pci 0000:00:1f.0: Adding to iommu group 8
[   53.651842][ T5750] Bluetooth: hci0: command tx timeout
[   53.651866][ T5750] Bluetooth: hci2: command tx timeout
[   53.651879][ T5750] Bluetooth: hci1: command tx timeout
[   53.651891][ T5750] Bluetooth: hci3: command tx timeout
[   53.655383][ T5964] lpc_ich 0000:00:1f.0: I/O space for GPIO uninitialized
[   53.889969][ T5967] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17'.
[   54.448036][ T5976] ptp ptp0: new virtual clock ptp2
[   54.448052][ T5976] ptp ptp0: guarantee physical clock free running
[   55.152497][ T5981] pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 conventional PCI endpoint
[   55.166061][ T5981] pci 0000:00:1f.0: quirk: [io  0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO
[   55.168981][ T5981] pci 0000:00:1f.0: Adding to iommu group 8
[   55.182595][ T5981] lpc_ich 0000:00:1f.0: I/O space for GPIO uninitialized
[   55.215953][ T5984] pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 conventional PCI endpoint
[   55.226515][ T5984] pci 0000:00:1f.0: quirk: [io  0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO
[   55.239047][ T5984] pci 0000:00:1f.0: Adding to iommu group 8
[   55.258636][ T5984] lpc_ich 0000:00:1f.0: I/O space for GPIO uninitialized
[   55.367271][ T5990] netlink: 'syz.3.23': attribute type 12 has an invalid length.
[   55.721948][ T5750] Bluetooth: hci1: command tx timeout
[   55.721995][ T5750] Bluetooth: hci0: command tx timeout
[   55.722017][ T5745] Bluetooth: hci2: command tx timeout
[   55.722029][ T5748] Bluetooth: hci3: command tx timeout
[   55.967329][ T5997] Invalid ELF header magic: != ELF
[   56.027787][ T5997] =======================================================
[   56.027787][ T5997] WARNING: The mand mount option has been deprecated and
[   56.027787][ T5997]          and is ignored by this kernel. Remove the mand
[   56.027787][ T5997]          option from the mount to silence this warning.
[   56.027787][ T5997] =======================================================
[   56.749119][ T6003] netlink: 44 bytes leftover after parsing attributes in process `syz.0.27'.
[   57.369390][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   57.512354][ T6021] ptp ptp0: guarantee physical clock free running
[   57.918212][ T6031] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   58.244209][ T6043] netlink: 'syz.3.37': attribute type 12 has an invalid length.
[   58.793905][ T6052] netlink: 44 bytes leftover after parsing attributes in process `syz.1.39'.
[   59.466236][ T6061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   59.832852][ T6071] 9pnet_virtio: no channels available for device syz
[   60.331279][ T6078] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   60.437728][ T6085] pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 conventional PCI endpoint
[   60.442257][ T6085] pci 0000:00:1f.0: quirk: [io  0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO
[   60.458862][ T6085] pci 0000:00:1f.0: Adding to iommu group 8
[   60.459072][ T6085] FAULT_INJECTION: forcing a failure.
[   60.459072][ T6085] name failslab, interval 1, probability 0, space 0, times 0
[   60.459096][ T6085] CPU: 0 UID: 0 PID: 6085 Comm: syz.0.48 Not tainted syzkaller #0 PREEMPT(full) 
[   60.459117][ T6085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   60.459129][ T6085] Call Trace:
[   60.459135][ T6085]  <TASK>
[   60.459143][ T6085]  dump_stack_lvl+0x100/0x190
[   60.459192][ T6085]  should_fail_ex.cold+0x5/0xa
[   60.459218][ T6085]  should_failslab+0xc2/0x120
[   60.459252][ T6085]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[   60.459279][ T6085]  ? __alloc_skb+0x140/0x710
[   60.459304][ T6085]  __alloc_skb+0x140/0x710
[   60.459320][ T6085]  ? __alloc_skb+0x5b7/0x710
[   60.459339][ T6085]  ? __pfx___alloc_skb+0x10/0x10
[   60.459357][ T6085]  ? netlink_has_listeners+0x21b/0x430
[   60.459383][ T6085]  ? netlink_has_listeners+0x21b/0x430
[   60.459413][ T6085]  alloc_uevent_skb+0x7d/0x210
[   60.459437][ T6085]  kobject_uevent_env+0xd2d/0x18b0
[   60.459470][ T6085]  device_add+0x1173/0x1970
[   60.459495][ T6085]  ? __pfx_device_add+0x10/0x10
[   60.459514][ T6085]  ? pci_device_add+0xd4f/0x1820
[   60.459538][ T6085]  ? down_write+0x146/0x1f0
[   60.459557][ T6085]  ? pcibios_device_add+0x492/0x600
[   60.459579][ T6085]  ? up_write+0x2dc/0x5b0
[   60.459599][ T6085]  pci_device_add+0xdb6/0x1820
[   60.459625][ T6085]  ? __pfx_pci_device_add+0x10/0x10
[   60.459646][ T6085]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[   60.459670][ T6085]  ? __raw_spin_lock_init+0x3a/0x110
[   60.459693][ T6085]  pci_scan_single_device+0x1d0/0x240
[   60.459718][ T6085]  ? __pfx_pci_scan_single_device+0x10/0x10
[   60.459751][ T6085]  pci_scan_slot+0x1c9/0x7c0
[   60.459778][ T6085]  ? __pfx_pci_scan_slot+0x10/0x10
[   60.459803][ T6085]  ? rcu_is_watching+0x13/0xc0
[   60.459829][ T6085]  pci_scan_child_bus_extend+0x6b/0x7b0
[   60.459852][ T6085]  ? pci_find_next_bus+0x60/0xb0
[   60.459884][ T6085]  pci_rescan_bus+0x18/0x40
[   60.459908][ T6085]  rescan_store+0xfb/0x130
[   60.459932][ T6085]  ? __pfx_rescan_store+0x10/0x10
[   60.459957][ T6085]  ? sysfs_file_kobj+0xe4/0x290
[   60.459981][ T6085]  ? __pfx_rescan_store+0x10/0x10
[   60.460006][ T6085]  bus_attr_store+0x74/0xb0
[   60.460028][ T6085]  ? __pfx_bus_attr_store+0x10/0x10
[   60.460044][ T6085]  sysfs_kf_write+0xf2/0x150
[   60.460059][ T6085]  kernfs_fop_write_iter+0x3e0/0x5f0
[   60.460071][ T6085]  ? __pfx_sysfs_kf_write+0x10/0x10
[   60.460087][ T6085]  vfs_write+0x6af/0x1050
[   60.460102][ T6085]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   60.460116][ T6085]  ? __pfx_vfs_write+0x10/0x10
[   60.460129][ T6085]  ? find_held_lock+0x2b/0x80
[   60.460153][ T6085]  ksys_write+0x12a/0x250
[   60.460167][ T6085]  ? __pfx_ksys_write+0x10/0x10
[   60.460186][ T6085]  __do_fast_syscall_32+0x13a/0x8b0
[   60.460206][ T6085]  do_fast_syscall_32+0x32/0x70
[   60.460218][ T6085]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   60.460237][ T6085] RIP: 0023:0xf7f75fec
[   60.460252][ T6085] Code: Unable to access opcode bytes at 0xf7f75fc2.
[   60.460258][ T6085] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[   60.460270][ T6085] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140
[   60.460277][ T6085] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[   60.460285][ T6085] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   60.460291][ T6085] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   60.460299][ T6085] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   60.460315][ T6085]  </TASK>
[   60.486353][ T6085] lpc_ich 0000:00:1f.0: I/O space for GPIO uninitialized
[   60.855864][ T6093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.912389][ T6091] Invalid ELF header magic: != ELF
[   61.661292][ T6113] Invalid ELF header magic: != ELF
[   61.690452][ T6114] netlink: 44 bytes leftover after parsing attributes in process `syz.0.54'.
[   62.654267][ T6122] pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 conventional PCI endpoint
[   62.656862][ T6122] pci 0000:00:1f.0: quirk: [io  0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO
[   62.662426][ T6122] pci 0000:00:1f.0: Adding to iommu group 8
[   62.662481][ T6122] FAULT_INJECTION: forcing a failure.
[   62.662481][ T6122] name failslab, interval 1, probability 0, space 0, times 0
[   62.662504][ T6122] CPU: 1 UID: 0 PID: 6122 Comm: syz.0.55 Not tainted syzkaller #0 PREEMPT(full) 
[   62.662526][ T6122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   62.662537][ T6122] Call Trace:
[   62.662543][ T6122]  <TASK>
[   62.662551][ T6122]  dump_stack_lvl+0x100/0x190
[   62.662583][ T6122]  should_fail_ex.cold+0x5/0xa
[   62.662608][ T6122]  should_failslab+0xc2/0x120
[   62.662634][ T6122]  __kmalloc_cache_noprof+0x91/0x6d0
[   62.662656][ T6122]  ? domain_attach_iommu.part.0+0x4e/0x3f0
[   62.662689][ T6122]  domain_attach_iommu.part.0+0x4e/0x3f0
[   62.662715][ T6122]  ? device_block_translation+0x4aa/0x700
[   62.662738][ T6122]  intel_iommu_attach_device+0x387/0xe00
[   62.662762][ T6122]  ? __pfx_intel_iommu_attach_device+0x10/0x10
[   62.662782][ T6122]  __iommu_attach_device+0x73/0x340
[   62.662804][ T6122]  __iommu_device_set_domain+0x178/0x250
[   62.662828][ T6122]  __iommu_probe_device+0x89b/0x1550
[   62.662851][ T6122]  ? __pfx___iommu_probe_device+0x10/0x10
[   62.662878][ T6122]  iommu_probe_device+0x28/0x130
[   62.662902][ T6122]  iommu_bus_notifier+0x5b/0x110
[   62.662926][ T6122]  notifier_call_chain+0x99/0x3f0
[   62.662952][ T6122]  blocking_notifier_call_chain+0x69/0xa0
[   62.662976][ T6122]  bus_notify+0x56/0x80
[   62.663003][ T6122]  device_add+0x1169/0x1970
[   62.663054][ T6122]  ? __pfx_device_add+0x10/0x10
[   62.663077][ T6122]  ? pci_device_add+0xd4f/0x1820
[   62.663104][ T6122]  ? down_write+0x146/0x1f0
[   62.663125][ T6122]  ? pcibios_device_add+0x492/0x600
[   62.663148][ T6122]  ? up_write+0x2dc/0x5b0
[   62.663169][ T6122]  pci_device_add+0xdb6/0x1820
[   62.663207][ T6122]  ? __pfx_pci_device_add+0x10/0x10
[   62.663246][ T6122]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[   62.663274][ T6122]  ? __raw_spin_lock_init+0x3a/0x110
[   62.663298][ T6122]  pci_scan_single_device+0x1d0/0x240
[   62.663325][ T6122]  ? __pfx_pci_scan_single_device+0x10/0x10
[   62.663359][ T6122]  pci_scan_slot+0x1c9/0x7c0
[   62.663386][ T6122]  ? __pfx_pci_scan_slot+0x10/0x10
[   62.663410][ T6122]  ? rcu_is_watching+0x13/0xc0
[   62.663435][ T6122]  pci_scan_child_bus_extend+0x6b/0x7b0
[   62.663460][ T6122]  ? pci_find_next_bus+0x60/0xb0
[   62.663493][ T6122]  pci_rescan_bus+0x18/0x40
[   62.663511][ T6122]  rescan_store+0xfb/0x130
[   62.663530][ T6122]  ? __pfx_rescan_store+0x10/0x10
[   62.663556][ T6122]  ? sysfs_file_kobj+0xe4/0x290
[   62.663579][ T6122]  ? __pfx_rescan_store+0x10/0x10
[   62.663605][ T6122]  bus_attr_store+0x74/0xb0
[   62.663629][ T6122]  ? __pfx_bus_attr_store+0x10/0x10
[   62.663653][ T6122]  sysfs_kf_write+0xf2/0x150
[   62.663678][ T6122]  kernfs_fop_write_iter+0x3e0/0x5f0
[   62.663696][ T6122]  ? __pfx_sysfs_kf_write+0x10/0x10
[   62.663725][ T6122]  vfs_write+0x6af/0x1050
[   62.663749][ T6122]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   62.663771][ T6122]  ? __pfx_vfs_write+0x10/0x10
[   62.663791][ T6122]  ? find_held_lock+0x2b/0x80
[   62.663827][ T6122]  ksys_write+0x12a/0x250
[   62.663842][ T6122]  ? __pfx_ksys_write+0x10/0x10
[   62.663861][ T6122]  __do_fast_syscall_32+0x13a/0x8b0
[   62.663881][ T6122]  do_fast_syscall_32+0x32/0x70
[   62.663892][ T6122]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   62.663908][ T6122] RIP: 0023:0xf7f75fec
[   62.663923][ T6122] Code: Unable to access opcode bytes at 0xf7f75fc2.
[   62.663928][ T6122] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[   62.663939][ T6122] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140
[   62.663946][ T6122] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[   62.663952][ T6122] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   62.663959][ T6122] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   62.663966][ T6122] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   62.663987][ T6122]  </TASK>
[   62.678330][ T6122] lpc_ich 0000:00:1f.0: I/O space for GPIO uninitialized
[   62.931066][ T6124] input: syz0 as /devices/virtual/input/input5
[   63.487195][ T6127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.068656][   T30] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   64.290819][   T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   64.294954][   T30] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   64.295017][   T30] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   64.295211][   T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.317390][ T6130] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   64.408992][   T30] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[   66.267262][ T6143] netlink: 44 bytes leftover after parsing attributes in process `syz.3.60'.
[   66.465942][ T2395] usb 5-1: USB disconnect, device number 2
[   67.850552][ T6157] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   68.960742][    C0] ==================================================================
[   68.960759][    C0] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60
[   68.960787][    C0] Read of size 1 at addr ffff8880622f4418 by task kworker/0:3/2395
[   68.960801][    C0] 
[   68.960811][    C0] CPU: 0 UID: 0 PID: 2395 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) 
[   68.960831][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   68.960842][    C0] Workqueue: usb_hub_wq hub_event
[   68.960866][    C0] Call Trace:
[   68.960873][    C0]  <IRQ>
[   68.960882][    C0]  dump_stack_lvl+0x100/0x190
[   68.960906][    C0]  print_report+0x13d/0x4b0
[   68.960929][    C0]  ? __virt_addr_valid+0x239/0x430
[   68.960954][    C0]  ? _raw_spin_lock_irqsave+0x3a/0x60
[   68.960974][    C0]  kasan_report+0xdf/0x1c0
[   68.961002][    C0]  ? _raw_spin_lock_irqsave+0x3a/0x60
[   68.961024][    C0]  ? _raw_spin_lock_irqsave+0x3a/0x60
[   68.961050][    C0]  __kasan_check_byte+0x36/0x50
[   68.961075][    C0]  lock_acquire+0x132/0x380
[   68.961099][    C0]  ? do_raw_spin_unlock+0x53/0x1e0
[   68.961116][    C0]  ? .slowpath+0x9/0x18
[   68.961139][    C0]  _raw_spin_lock_irqsave+0x3a/0x60
[   68.961157][    C0]  ? p9_req_put+0xaf/0x250
[   68.961172][    C0]  p9_req_put+0xaf/0x250
[   68.961190][    C0]  req_done+0x1dc/0x2e0
[   68.961213][    C0]  ? __pfx_req_done+0x10/0x10
[   68.961235][    C0]  ? __hrtimer_get_next_event+0x1b7/0x360
[   68.961255][    C0]  ? __pfx_req_done+0x10/0x10
[   68.961275][    C0]  vring_interrupt+0x2ef/0x660
[   68.961301][    C0]  ? __pfx_vring_interrupt+0x10/0x10
[   68.961324][    C0]  __handle_irq_event_percpu+0x232/0x880
[   68.961348][    C0]  handle_irq_event+0xab/0x1e0
[   68.961367][    C0]  handle_edge_irq+0x34c/0x950
[   68.961388][    C0]  __common_interrupt+0xd8/0x2f0
[   68.961411][    C0]  common_interrupt+0xb9/0xe0
[   68.961426][    C0]  </IRQ>
[   68.961430][    C0]  <TASK>
[   68.961435][    C0]  asm_common_interrupt+0x26/0x40
[   68.961449][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[   68.961469][    C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 06 12 f6 48 89 df e8 7e 5d 12 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 c5 40 01 f6 65 48 83 3d b4 43 b8 09 00 74 16 5b
[   68.961482][    C0] RSP: 0000:ffffc9000c41edc0 EFLAGS: 00000246
[   68.961494][    C0] RAX: 0000000000000002 RBX: ffff888024d88a80 RCX: 0000000000000040
[   68.961503][    C0] RDX: 0000000000000003 RSI: ffffffff8e3e00c5 RDI: ffffffff8c625580
[   68.961512][    C0] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000000
[   68.961520][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802b03c040
[   68.961528][    C0] R13: ffff88802b03cf20 R14: ffff888024d88a80 R15: ffff888024d88000
[   68.961543][    C0]  try_to_wake_up+0xd8d/0x1c90
[   68.961564][    C0]  ? lockdep_hardirqs_on+0x7d/0x110
[   68.961582][    C0]  ? __pfx_try_to_wake_up+0x10/0x10
[   68.961602][    C0]  ? lock_acquire+0x1d1/0x380
[   68.961621][    C0]  ? find_held_lock+0x2b/0x80
[   68.961637][    C0]  ? mark_held_locks+0x40/0x70
[   68.961655][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   68.961673][    C0]  __mutex_unlock_slowpath+0x32b/0x930
[   68.961695][    C0]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   68.961714][    C0]  ? find_held_lock+0x2b/0x80
[   68.961729][    C0]  ? schedule+0x225/0x2c0
[   68.961748][    C0]  synchronize_rcu_expedited+0x3c3/0x450
[   68.961770][    C0]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[   68.961790][    C0]  ? __pfx_autoremove_wake_function+0x10/0x10
[   68.961809][    C0]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[   68.961830][    C0]  port_delete.isra.0+0x3f/0x210
[   68.961845][    C0]  snd_seq_delete_port+0x228/0x2c0
[   68.961861][    C0]  snd_seq_ioctl_delete_port+0xb6/0x200
[   68.961876][    C0]  call_seq_client_ctl+0xa3/0x130
[   68.961890][    C0]  snd_seq_kernel_client_ctl+0x35/0x50
[   68.961905][    C0]  snd_seq_event_port_detach+0xbb/0x100
[   68.961920][    C0]  ? __pfx_snd_seq_event_port_detach+0x10/0x10
[   68.961939][    C0]  ? snd_midi_event_encode_byte+0xcc0/0xd30
[   68.961954][    C0]  ? snd_midi_event_free+0x43/0x60
[   68.961968][    C0]  ? kfree+0x22b/0x6d0
[   68.961981][    C0]  ? kernfs_remove_by_name_ns+0xdf/0x120
[   68.961998][    C0]  snd_seq_midisynth_remove+0x266/0x4b0
[   68.962012][    C0]  ? __pfx_snd_seq_midisynth_remove+0x10/0x10
[   68.962026][    C0]  snd_seq_bus_remove+0x62/0x80
[   68.962049][    C0]  ? __pfx_snd_seq_bus_remove+0x10/0x10
[   68.962068][    C0]  device_remove+0xcb/0x180
[   68.962085][    C0]  device_release_driver_internal+0x44e/0x620
[   68.962103][    C0]  bus_remove_device+0x2bc/0x560
[   68.962124][    C0]  ? __pfx_bus_remove_device+0x10/0x10
[   68.962144][    C0]  ? __pfx_device_remove_attrs+0x10/0x10
[   68.962172][    C0]  device_del+0x376/0x9b0
[   68.962188][    C0]  ? __pfx_device_del+0x10/0x10
[   68.962205][    C0]  ? __pfx_snd_seq_device_dev_disconnect+0x10/0x10
[   68.962227][    C0]  snd_seq_device_dev_disconnect+0x38/0x50
[   68.962247][    C0]  snd_device_disconnect_all+0x111/0x1b0
[   68.962267][    C0]  ? __pfx_snd_mixer_oss_notify_handler+0x10/0x10
[   68.962287][    C0]  snd_card_disconnect.part.0+0x29e/0x5b0
[   68.962309][    C0]  snd_card_disconnect+0x1f/0x30
[   68.962328][    C0]  usb_audio_disconnect+0x25a/0x310
[   68.962349][    C0]  usb_unbind_interface+0x1dd/0x9e0
[   68.962375][    C0]  ? __pfx_usb_unbind_interface+0x10/0x10
[   68.962397][    C0]  device_remove+0x12a/0x180
[   68.962412][    C0]  device_release_driver_internal+0x44e/0x620
[   68.962433][    C0]  bus_remove_device+0x2bc/0x560
[   68.962458][    C0]  ? __pfx_bus_remove_device+0x10/0x10
[   68.962481][    C0]  ? __pfx_device_remove_attrs+0x10/0x10
[   68.962509][    C0]  device_del+0x376/0x9b0
[   68.962526][    C0]  ? __pfx_device_del+0x10/0x10
[   68.962540][    C0]  ? kobject_put+0xb9/0x640
[   68.962561][    C0]  usb_disable_device+0x367/0x810
[   68.962670][    C0]  usb_disconnect+0x2e2/0x9a0
[   68.962694][    C0]  hub_event+0x1bb1/0x4420
[   68.962720][    C0]  ? __lock_acquire+0x5c0/0x1f40
[   68.962747][    C0]  ? __pfx_hub_event+0x10/0x10
[   68.962767][    C0]  ? rwsem_spin_on_owner+0x100/0x230
[   68.962788][    C0]  ? lock_acquire+0x1d1/0x380
[   68.962812][    C0]  ? process_one_work+0xa2c/0x1b10
[   68.962836][    C0]  ? process_one_work+0x906/0x1b10
[   68.962856][    C0]  ? process_one_work+0x906/0x1b10
[   68.962879][    C0]  process_one_work+0xac7/0x1b10
[   68.962905][    C0]  ? __pfx_process_one_work+0x10/0x10
[   68.962928][    C0]  ? lock_acquire+0x1d1/0x380
[   68.962955][    C0]  ? __pfx_hub_event+0x10/0x10
[   68.962977][    C0]  worker_thread+0x5ef/0xe50
[   68.963020][    C0]  ? __pfx_worker_thread+0x10/0x10
[   68.963050][    C0]  ? kthread+0x13a/0x450
[   68.963069][    C0]  ? __pfx_worker_thread+0x10/0x10
[   68.963090][    C0]  kthread+0x373/0x450
[   68.963110][    C0]  ? __pfx_kthread+0x10/0x10
[   68.963129][    C0]  ret_from_fork+0x730/0xd60
[   68.963148][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[   68.963166][    C0]  ? __switch_to+0x800/0x10f0
[   68.963186][    C0]  ? __pfx_kthread+0x10/0x10
[   68.963207][    C0]  ret_from_fork_asm+0x1a/0x30
[   68.963231][    C0]  </TASK>
[   68.963239][    C0] 
[   68.963243][    C0] Allocated by task 6161:
[   68.963253][    C0]  kasan_save_stack+0x30/0x50
[   68.963276][    C0]  kasan_save_track+0x14/0x30
[   68.963297][    C0]  __kasan_kmalloc+0xaa/0xb0
[   68.963318][    C0]  __kmalloc_cache_noprof+0x2f8/0x6d0
[   68.963336][    C0]  p9_client_create+0xaf/0xd40
[   68.963353][    C0]  v9fs_session_init+0x3c/0xdd0
[   68.963375][    C0]  v9fs_get_tree+0xb8/0xb50
[   68.963391][    C0]  vfs_get_tree+0x92/0x320
[   68.963406][    C0]  path_mount+0x7d0/0x24c0
[   68.963429][    C0]  __ia32_sys_mount+0x292/0x310
[   68.963441][    C0]  __do_fast_syscall_32+0x13a/0x8b0
[   68.963465][    C0]  do_fast_syscall_32+0x32/0x70
[   68.963480][    C0]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   68.963501][    C0] 
[   68.963505][    C0] Freed by task 6161:
[   68.963513][    C0]  kasan_save_stack+0x30/0x50
[   68.963535][    C0]  kasan_save_track+0x14/0x30
[   68.963555][    C0]  kasan_save_free_info+0x3b/0x70
[   68.963572][    C0]  __kasan_slab_free+0x5f/0x80
[   68.963594][    C0]  kfree+0x22b/0x6d0
[   68.963610][    C0]  p9_client_create+0x72d/0xd40
[   68.963624][    C0]  v9fs_session_init+0x3c/0xdd0
[   68.963645][    C0]  v9fs_get_tree+0xb8/0xb50
[   68.963660][    C0]  vfs_get_tree+0x92/0x320
[   68.963675][    C0]  path_mount+0x7d0/0x24c0
[   68.963696][    C0]  __ia32_sys_mount+0x292/0x310
[   68.963709][    C0]  __do_fast_syscall_32+0x13a/0x8b0
[   68.963733][    C0]  do_fast_syscall_32+0x32/0x70
[   68.963748][    C0]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   68.963768][    C0] 
[   68.963772][    C0] The buggy address belongs to the object at ffff8880622f4400
[   68.963772][    C0]  which belongs to the cache kmalloc-512 of size 512
[   68.963786][    C0] The buggy address is located 24 bytes inside of
[   68.963786][    C0]  freed 512-byte region [ffff8880622f4400, ffff8880622f4600)
[   68.963802][    C0] 
[   68.963807][    C0] The buggy address belongs to the physical page:
[   68.963816][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x622f4
[   68.963832][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   68.963847][    C0] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff)
[   68.963863][    C0] page_type: f5(slab)
[   68.963878][    C0] raw: 04fff00000000040 ffff88801d042c80 dead000000000100 dead000000000122
[   68.963893][    C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   68.963908][    C0] head: 04fff00000000040 ffff88801d042c80 dead000000000100 dead000000000122
[   68.963923][    C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   68.963938][    C0] head: 04fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[   68.963953][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[   68.963963][    C0] page dumped because: kasan: bad access detected
[   68.963971][    C0] page_owner tracks the page as allocated
[   68.963977][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5947, tgid 5947 (kworker/u32:6), ts 68211955229
[   68.964004][    C0]  post_alloc_hook+0xfd/0x120
[   68.964021][    C0]  get_page_from_freelist+0x110d/0x35d0
[   68.964046][    C0]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[   68.964066][    C0]  new_slab+0xa9/0x6e0
[   68.964083][    C0]  refill_objects+0xe3/0x410
[   68.964099][    C0]  __pcs_replace_empty_main+0x35e/0x650
[   68.964117][    C0]  __kmalloc_cache_noprof+0x4f4/0x6d0
[   68.964135][    C0]  batadv_forw_packet_alloc+0x3a9/0x4d0
[   68.964150][    C0]  batadv_iv_ogm_aggregate_new+0x11e/0x4c0
[   68.964171][    C0]  batadv_iv_ogm_schedule_buff+0x110a/0x15d0
[   68.964193][    C0]  batadv_iv_send_outstanding_bat_ogm_packet+0x517/0x7d0
[   68.964217][    C0]  process_one_work+0xac7/0x1b10
[   68.964237][    C0]  worker_thread+0x5ef/0xe50
[   68.964256][    C0]  kthread+0x373/0x450
[   68.964273][    C0]  ret_from_fork+0x730/0xd60
[   68.964288][    C0]  ret_from_fork_asm+0x1a/0x30
[   68.964304][    C0] page last free pid 6141 tgid 6141 ts 66262098731 stack trace:
[   68.964316][    C0]  __free_frozen_pages+0x79f/0x10f0
[   68.964331][    C0]  qlist_free_all+0x47/0xf0
[   68.964351][    C0]  kasan_quarantine_reduce+0x1a0/0x1f0
[   68.964372][    C0]  __kasan_slab_alloc+0x69/0x90
[   68.964394][    C0]  kmem_cache_alloc_noprof+0x269/0x6a0
[   68.964413][    C0]  jbd2__journal_start+0x194/0x6b0
[   68.964430][    C0]  __ext4_journal_start_sb+0x314/0x610
[   68.964452][    C0]  ext4_dirty_inode+0xa1/0x130
[   68.964475][    C0]  __mark_inode_dirty+0x1f3/0x16e0
[   68.964494][    C0]  file_update_time_flags+0x49c/0x520
[   68.964519][    C0]  ext4_page_mkwrite+0x324/0x1860
[   68.964540][    C0]  do_page_mkwrite+0x17a/0x440
[   68.964558][    C0]  do_fault+0x659/0x1830
[   68.964580][    C0]  __handle_mm_fault+0x150b/0x2f60
[   68.964596][    C0]  handle_mm_fault+0x363/0xa20
[   68.964612][    C0]  do_user_addr_fault+0x59c/0x12f0
[   68.964631][    C0] 
[   68.964635][    C0] Memory state around the buggy address:
[   68.964644][    C0]  ffff8880622f4300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   68.964655][    C0]  ffff8880622f4380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   68.964667][    C0] >ffff8880622f4400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   68.964675][    C0]                             ^
[   68.964685][    C0]  ffff8880622f4480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   68.964697][    C0]  ffff8880622f4500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   68.964706][    C0] ==================================================================
[   68.964716][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   69.792215][    C0] CPU: 0 UID: 0 PID: 2395 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) 
[   69.798247][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   69.804320][    C0] Workqueue: usb_hub_wq hub_event
[   69.807200][    C0] Call Trace:
[   69.810046][    C0]  <IRQ>
[   69.812884][    C0]  dump_stack_lvl+0x100/0x190
[   69.816237][    C0]  vpanic+0x553/0x970
[   69.818428][    C0]  ? __pfx_vpanic+0x10/0x10
[   69.820788][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[   69.824221][    C0]  ? _raw_spin_lock_irqsave+0x3a/0x60
[   69.828330][    C0]  panic+0xd1/0xe0
[   69.831252][    C0]  ? __pfx_panic+0x10/0x10
[   69.833949][    C0]  ? end_report.part.0+0x23/0x90
[   69.837762][    C0]  ? rcu_is_watching+0x13/0xc0
[   69.841863][    C0]  ? end_report.part.0+0x23/0x90
[   69.845814][    C0]  check_panic_on_warn.cold+0x19/0x34
[   69.850129][    C0]  end_report.part.0+0x3a/0x90
[   69.854053][    C0]  kasan_report.cold+0xe/0x18
[   69.856558][    C0]  ? _raw_spin_lock_irqsave+0x3a/0x60
[   69.858922][    C0]  ? _raw_spin_lock_irqsave+0x3a/0x60
[   69.862128][    C0]  __kasan_check_byte+0x36/0x50
[   69.865173][    C0]  lock_acquire+0x132/0x380
[   69.867431][    C0]  ? do_raw_spin_unlock+0x53/0x1e0
[   69.869999][    C0]  ? .slowpath+0x9/0x18
[   69.872763][    C0]  _raw_spin_lock_irqsave+0x3a/0x60
[   69.875557][    C0]  ? p9_req_put+0xaf/0x250
[   69.877537][    C0]  p9_req_put+0xaf/0x250
[   69.879469][    C0]  req_done+0x1dc/0x2e0
[   69.881228][    C0]  ? __pfx_req_done+0x10/0x10
[   69.891520][    C0]  ? __hrtimer_get_next_event+0x1b7/0x360
[   69.893730][    C0]  ? __pfx_req_done+0x10/0x10
[   69.895766][    C0]  vring_interrupt+0x2ef/0x660
[   69.897753][    C0]  ? __pfx_vring_interrupt+0x10/0x10
[   69.899839][    C0]  __handle_irq_event_percpu+0x232/0x880
[   69.912178][    C0]  handle_irq_event+0xab/0x1e0
[   69.914129][    C0]  handle_edge_irq+0x34c/0x950
[   69.916581][    C0]  __common_interrupt+0xd8/0x2f0
[   69.918617][    C0]  common_interrupt+0xb9/0xe0
[   69.935732][    C0]  </IRQ>
[   69.936762][    C0]  <TASK>
[   69.937888][    C0]  asm_common_interrupt+0x26/0x40
[   69.939913][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[   69.942444][    C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 06 12 f6 48 89 df e8 7e 5d 12 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 c5 40 01 f6 65 48 83 3d b4 43 b8 09 00 74 16 5b
[   69.950245][    C0] RSP: 0000:ffffc9000c41edc0 EFLAGS: 00000246
[   69.965391][    C0] RAX: 0000000000000002 RBX: ffff888024d88a80 RCX: 0000000000000040
[   69.968324][    C0] RDX: 0000000000000003 RSI: ffffffff8e3e00c5 RDI: ffffffff8c625580
[   69.971266][    C0] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000000
[   69.974272][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802b03c040
[   69.982446][    C0] R13: ffff88802b03cf20 R14: ffff888024d88a80 R15: ffff888024d88000
[   69.985614][    C0]  try_to_wake_up+0xd8d/0x1c90
[   69.987556][    C0]  ? lockdep_hardirqs_on+0x7d/0x110
[   69.989678][    C0]  ? __pfx_try_to_wake_up+0x10/0x10
[   70.001966][    C0]  ? lock_acquire+0x1d1/0x380
[   70.004455][    C0]  ? find_held_lock+0x2b/0x80
[   70.007515][    C0]  ? mark_held_locks+0x40/0x70
[   70.011031][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   70.014638][    C0]  __mutex_unlock_slowpath+0x32b/0x930
[   70.017126][    C0]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   70.020433][    C0]  ? find_held_lock+0x2b/0x80
[   70.024150][    C0]  ? schedule+0x225/0x2c0
[   70.027584][    C0]  synchronize_rcu_expedited+0x3c3/0x450
[   70.031286][    C0]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[   70.034507][    C0]  ? __pfx_autoremove_wake_function+0x10/0x10
[   70.037059][    C0]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[   70.038972][    C0]  port_delete.isra.0+0x3f/0x210
[   70.040889][    C0]  snd_seq_delete_port+0x228/0x2c0
[   70.042816][    C0]  snd_seq_ioctl_delete_port+0xb6/0x200
[   70.044902][    C0]  call_seq_client_ctl+0xa3/0x130
[   70.046808][    C0]  snd_seq_kernel_client_ctl+0x35/0x50
[   70.048938][    C0]  snd_seq_event_port_detach+0xbb/0x100
[   70.051746][    C0]  ? __pfx_snd_seq_event_port_detach+0x10/0x10
[   70.056508][    C0]  ? snd_midi_event_encode_byte+0xcc0/0xd30
[   70.061803][    C0]  ? snd_midi_event_free+0x43/0x60
[   70.066786][    C0]  ? kfree+0x22b/0x6d0
[   70.068338][    C0]  ? kernfs_remove_by_name_ns+0xdf/0x120
[   70.070759][    C0]  snd_seq_midisynth_remove+0x266/0x4b0
[   70.073218][    C0]  ? __pfx_snd_seq_midisynth_remove+0x10/0x10
[   70.076374][    C0]  snd_seq_bus_remove+0x62/0x80
[   70.080700][    C0]  ? __pfx_snd_seq_bus_remove+0x10/0x10
[   70.085341][    C0]  device_remove+0xcb/0x180
[   70.088097][    C0]  device_release_driver_internal+0x44e/0x620
[   70.091647][    C0]  bus_remove_device+0x2bc/0x560
[   70.095319][    C0]  ? __pfx_bus_remove_device+0x10/0x10
[   70.099050][    C0]  ? __pfx_device_remove_attrs+0x10/0x10
[   70.103485][    C0]  device_del+0x376/0x9b0
[   70.106148][    C0]  ? __pfx_device_del+0x10/0x10
[   70.109182][    C0]  ? __pfx_snd_seq_device_dev_disconnect+0x10/0x10
[   70.113255][    C0]  snd_seq_device_dev_disconnect+0x38/0x50
[   70.116027][    C0]  snd_device_disconnect_all+0x111/0x1b0
[   70.119236][    C0]  ? __pfx_snd_mixer_oss_notify_handler+0x10/0x10
[   70.122896][    C0]  snd_card_disconnect.part.0+0x29e/0x5b0
[   70.125866][    C0]  snd_card_disconnect+0x1f/0x30
[   70.128761][    C0]  usb_audio_disconnect+0x25a/0x310
[   70.133828][    C0]  usb_unbind_interface+0x1dd/0x9e0
[   70.136714][    C0]  ? __pfx_usb_unbind_interface+0x10/0x10
[   70.140708][    C0]  device_remove+0x12a/0x180
[   70.143891][    C0]  device_release_driver_internal+0x44e/0x620
[   70.147585][    C0]  bus_remove_device+0x2bc/0x560
[   70.151140][    C0]  ? __pfx_bus_remove_device+0x10/0x10
[   70.155467][    C0]  ? __pfx_device_remove_attrs+0x10/0x10
[   70.158686][    C0]  device_del+0x376/0x9b0
[   70.161173][    C0]  ? __pfx_device_del+0x10/0x10
[   70.163973][    C0]  ? kobject_put+0xb9/0x640
[   70.167149][    C0]  usb_disable_device+0x367/0x810
[   70.172006][    C0]  usb_disconnect+0x2e2/0x9a0
[   70.174857][    C0]  hub_event+0x1bb1/0x4420
[   70.177619][    C0]  ? __lock_acquire+0x5c0/0x1f40
[   70.180856][    C0]  ? __pfx_hub_event+0x10/0x10
[   70.183976][    C0]  ? rwsem_spin_on_owner+0x100/0x230
[   70.187043][    C0]  ? lock_acquire+0x1d1/0x380
[   70.189290][    C0]  ? process_one_work+0xa2c/0x1b10
[   70.192245][    C0]  ? process_one_work+0x906/0x1b10
[   70.194953][    C0]  ? process_one_work+0x906/0x1b10
[   70.197971][    C0]  process_one_work+0xac7/0x1b10
[   70.201118][    C0]  ? __pfx_process_one_work+0x10/0x10
[   70.204264][    C0]  ? lock_acquire+0x1d1/0x380
[   70.207084][    C0]  ? __pfx_hub_event+0x10/0x10
[   70.210193][    C0]  worker_thread+0x5ef/0xe50
[   70.212843][    C0]  ? __pfx_worker_thread+0x10/0x10
[   70.215715][    C0]  ? kthread+0x13a/0x450
[   70.218807][    C0]  ? __pfx_worker_thread+0x10/0x10
[   70.221163][    C0]  kthread+0x373/0x450
[   70.223059][    C0]  ? __pfx_kthread+0x10/0x10
[   70.226002][    C0]  ret_from_fork+0x730/0xd60
[   70.228828][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[   70.232356][    C0]  ? __switch_to+0x800/0x10f0
[   70.237751][    C0]  ? __pfx_kthread+0x10/0x10
[   70.241784][    C0]  ret_from_fork_asm+0x1a/0x30
[   70.245704][    C0]  </TASK>
[   70.248899][    C0] Kernel Offset: disabled
[   70.251697][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:08:47  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85b0e0c5 RDI=ffffffff9cc69ba0 RBP=ffffffff9cc69b60 RSP=ffffc900000074b0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3630383838666666
R12=0000000000000000 R13=0000000000000036 R14=0000000000000008 R15=ffffc900000077c8
RIP=ffffffff85b0e0ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88809574d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000f73ab2f0 CR3=000000000fb96000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000092d RBX=ffff888026613158 RCX=0000000000000028 RDX=0000000000000058
RSI=ffff888026613130 RDI=ffffffff9c9ae188 RBP=0000000000000058 RSP=ffffc900068e7998
R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000001
R12=ffff888026612580 R13=0000000000000002 R14=0000000000000000 R15=ffffffff9c9ae188
RIP=ffffffff81e6d10e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88809584d000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000f73248d4 CR3=00000000722e5000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=ffff88802258cb00
RSI=ffffffff81feeb0e RDI=ffff88802258cb00 RBP=ffff88802b043b00 RSP=ffffc90006a178a0
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffffed10044b1c13 R13=0000000000000003 R14=ffffed1005608761 R15=0000000000000001
RIP=ffffffff81feeb10 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88809594d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000f73e6288 CR3=000000000fb96000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
EAX=f6ef9cc0 EBX=f6efa188 ECX=828b344e EDX=f6efa188
ESI=828b344e EDI=ffffffff EBP=ffffffff ESP=ffcd35b0
EIP=f707b450 EFL=00000296 [--S-AP-] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA]
SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 00000000 ffffffff 00c00000
GS =0063 57fc2480 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 00000000 ffffffff 00c00000
TR =0040 000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000003381bff8 CR3=0000000071554000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a9000000000 0000002500000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000