last executing test programs:

10.069431082s ago: executing program 3 (id=29):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_io_uring_setup(0x11a1, &(0x7f00000007c0)={0x0, 0xb649, 0x40000, 0x2, 0xf4}, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0))
read$FUSE(r1, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x5)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000200))
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r3, 0x200, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x23f}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf9dcfd3b5a1ee243}, 0xc000080)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x1)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000140)=0x81)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x48, 0x0, &(0x7f0000000940)=[@register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001380)='\x00'})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0})
r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
read$FUSE(r5, &(0x7f0000000440)={0x2020}, 0x2020)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x2)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x2)
read$FUSE(r5, 0x0, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')

9.500134007s ago: executing program 3 (id=32):
r0 = socket(0xa, 0x1, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
flistxattr(r1, &(0x7f0000000380)=""/80, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="3400000040000701fcffbeff00000100037c0000040042800c0003"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000feffffffb7080000000000007baaf8ff00000000b5080000000000007b8af00300000000bfa900000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a70000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd700000000000010000001c0007800c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018808000100", @ANYRES32=r0, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0xc844)

9.314368533s ago: executing program 3 (id=34):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
getpid()
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0)
r4 = syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16, @ANYRES8=0x0, @ANYRESOCT=r3, @ANYBLOB=',\x00'])
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r5 = getegid()
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100))
ioctl$DVB_DEMUX_DMX_EXPBUF(r4, 0xc00c6f3e, &(0x7f0000000280)={0x1, 0x80000, r2})
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aeae41b5fde2f28d891ffda7e94646233f4e80b9ff2507f07db3ee231cecc4f81c70d0c5a37b16e6b254ad7bd22e49ddb83263ace4aabe6b0937a16821b6895fc9850f484d076854903d422", 0x95}], 0x1)
statx(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x800, 0x400, 0x0)
fsetxattr$system_posix_acl(r1, 0x0, &(0x7f0000000980)={{}, {0x1, 0x2}, [{}, {0x2, 0x4}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x6}, {0x2, 0x3}, {0x2, 0x3}], {}, [{0x8, 0x2}, {0x8, 0x4, r5}, {0x8, 0x4}, {0x8, 0x5}], {0x10, 0x1}, {0x20, 0x1}}, 0x7c, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r6, &(0x7f00000000c0)='1\x00', 0x1)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r7, &(0x7f00000001c0)='1', 0x1)

7.404411138s ago: executing program 1 (id=38):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000851}, 0x800)
write(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0)
write$sndseq(r2, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x5}, {}, @addr={0xec, 0x5b}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {0x8}, {0x5, 0x6}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @time={0x8, 0xffff11fa}, {0x0, 0xa}, {0x2}, @addr={0x1, 0x6}}, {0x1, 0x3, 0x1, 0x0, @tick=0x48, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}, {0x9a, 0x9, 0x8, 0x4, @time={0x2029, 0xa}, {0x8, 0x9}, {0xe, 0x5}, @quote={{0xd7, 0x5}, 0x3, &(0x7f0000000040)={0x3, 0x6, 0x0, 0x8, @time={0x80000001, 0x1}, {0x2, 0x2}, {0x7, 0xd9}, @raw32={[0x5, 0x4e9907a7, 0x1000]}}}}], 0x8c)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00')
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

7.3564931s ago: executing program 3 (id=39):
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081054e81f782db44b9040a1d080243000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7d9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace80ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, 0x0, 0x0, 0x0}})
ioctl$FS_IOC_SETFLAGS(r2, 0xc0606610, &(0x7f0000000040)=0x60)
write(r1, &(0x7f0000000400)='1', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x161001, 0xc1)
write(r3, &(0x7f0000000600)='1', 0x1)
creat(&(0x7f0000000240)='./file0\x00', 0x122)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@v2={0x2000000, [{0x6, 0x19c8}, {0x9, 0xfcf}]}, 0x14, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x3, 0xa0aaf419689b402e)
mkdir(&(0x7f00000001c0)='./file1\x00', 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000740)={0x7, &(0x7f0000000640)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @link_local}]})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106}}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r5=>r2, {0x1}}, './file1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x5, 0x1, 0x0, r4}]}, &(0x7f0000000480)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x30, r1, 0x8, &(0x7f00000004c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x1, 0xfffffffc, 0x1}, 0x10, 0x0, r1, 0x5, &(0x7f00000005c0)=[r3, 0xffffffffffffffff, r5, r1, r3, r1, r1], &(0x7f00000007c0)=[{0x4, 0x4, 0x8, 0x7}, {0x2, 0x4, 0x1, 0x2}, {0x5, 0x1, 0x3, 0x9}, {0x1, 0x1, 0xc, 0xa}, {0x0, 0x4, 0x8, 0x6}], 0x10, 0xfffffffe}, 0x94)

6.838269963s ago: executing program 3 (id=41):
r0 = syz_open_dev$mtd(&(0x7f0000000080), 0x99c, 0x0)
ioctl$MEMGETOOBSEL(r0, 0x80c84d0a, 0x0)
getpgrp(0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2d)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"})
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
socket$unix(0x1, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)

6.5146006s ago: executing program 3 (id=42):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x3794c3, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close(0x4)
ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffa, 0x82ab01)
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000100)={0x0, 0x0, 0x0})
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x101040)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40854}, 0x0)
r7 = socket(0x1, 0x803, 0x0)
r8 = socket(0x10, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r7, 0x0, 0x0)
sendmsg$nl_route(r9, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x2a0200)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$CDROM_LAST_WRITTEN(r2, 0x5395, &(0x7f0000000040))

6.419160887s ago: executing program 32 (id=42):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x3794c3, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close(0x4)
ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffa, 0x82ab01)
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000100)={0x0, 0x0, 0x0})
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x101040)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40854}, 0x0)
r7 = socket(0x1, 0x803, 0x0)
r8 = socket(0x10, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r7, 0x0, 0x0)
sendmsg$nl_route(r9, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x2a0200)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$CDROM_LAST_WRITTEN(r2, 0x5395, &(0x7f0000000040))

5.950653432s ago: executing program 1 (id=44):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x183000, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/227, 0xb5}], 0x1, 0x1bf, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCSFF(r2, 0x402c4580, &(0x7f0000001240)={0x51, 0x0, 0x0, {}, {}, @period={0x5d, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x500002, 0x144)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
write(r6, &(0x7f00000000c0)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @mcast1, 0x2}, 0x1c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r7)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc004}, 0x4040041)
socket$inet(0x10, 0x3, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2004000)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/100, &(0x7f0000000300)=0x64)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)

5.518193909s ago: executing program 1 (id=49):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0xc00, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002000)=ANY=[@ANYBLOB="30000000200025a729bd7000fddbdf250a0000cdff0000010200010008000600000000000c001400e0a396e5aa98ddf4"], 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48)
utimes(0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
write(0xffffffffffffffff, &(0x7f0000000040)="05000000", 0x4)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1700000015006b05c84e2100", 0xc}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b100", 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000000)={0x5, 0x0, [{0x0, 0x84, 0x4, 0x9, 0x4, 0x0, 0xb}, {0xb, 0x5, 0x0, 0xd, 0x6, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0x40007, 0x1000}, {0x40000001, 0x0, 0x4, 0x10001, 0x6, 0x3, 0x8}, {0xa, 0x3, 0x8, 0x2, 0xfffffff7, 0x8459, 0x401}]})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x4e, &(0x7f0000002480)=ANY=[@ANYBLOB="12010002000000401107500500000102000109023c00010100a0320904"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1}, 0x48)
syz_io_uring_setup(0x31bc, &(0x7f0000000540)={0x0, 0xc3af, 0x8, 0x1, 0x278}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000100))
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x1f36, 0x4)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)

4.761933371s ago: executing program 1 (id=51):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c0000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000080008000a40fffffffc0900010073797a31000000000800054000"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioprio_get$pid(0x1, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x830}, 0x810)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
io_setup(0x8, &(0x7f0000000280))
close(0xffffffffffffffff)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x80007fffffff, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b0001000010000904330001"], 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a00000000000000", @ANYRES32=r3, @ANYBLOB], 0x20}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)

2.249386883s ago: executing program 1 (id=58):
socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0x8, &(0x7f00000003c0)={0x14d, 0xe4}, 0x0)
r5 = syz_io_uring_setup(0x1e58, &(0x7f0000000300)={0x0, 0xf211, 0x1000, 0x2, 0x35e}, &(0x7f0000000100), 0x0, &(0x7f0000000000)=<r6=>0x0)
sched_setscheduler(0x0, 0x5, &(0x7f00000000c0))
r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
creat(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x0)
mount(&(0x7f0000000140)=@filename='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, &(0x7f0000000100)='trans=rdma,')
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$kcm(0xa, 0xf, 0x106)
sendmsg$kcm(r9, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="bd9ff69d6693d0d7d674e22a7595e6782d1c722f1883dd7848c5603921291ce50d9b386cdf6a11ca49b61d43b34b7bd35404b2bfb861986ad12e860351ffced33800f3e8019d949f9cd740dddeaf8d7cd3b56b1d2c04ed88ed2fcba6abec22192a8bfa5d6d2eb0e2205593dc2e3e2ce1c86ca32b34543f221f98855bcb05c7ac99c2501cdd", @ANYRES64=r6, @ANYRESOCT, @ANYRES16=r4, @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="b2f4d6b45fb41604e4680a914fe6e2452ed46d983ec3526701d76532e8985ef3c0a890b3a4ada5fcf08a32bbafd124c98971defb2a2f59cc99b545a50af2dfe0ed8c86f4e2c6eae3de235a5c60e1335c0618e355218a3aded2a9182221a9babeae854dc5a5e0b307323a6e0f1d104dfa2895bf3c92c7", @ANYRESDEC=r8, @ANYRES64=0x0], 0x38}, 0x1, 0x0, 0x0, 0x80c4}, 0x40050)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000008580)=[{0xfffffffa, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0xa41c, 0x0, 0x0}, {0x1, 0x1, 0x0}, {0xfd2, 0x0, 0x0}, {0x7ff, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x40000009, 0x1, 0x0}], 0x9)
connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
fsmount(r0, 0x3f00, 0x18)

2.182171162s ago: executing program 0 (id=59):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e4, 0x134, 0x168, 0x9, 0x134, 0xb, 0x21c, 0x250, 0x250, 0x21c, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0xec, 0x134, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x24}}, @inet=@rpfilter={{0x24}, {0xc}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@common=@inet=@set2={{0x24}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x340)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r1, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[], [], 0x2c})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
listns(&(0x7f0000000000)={0x20, 0x0, 0x2}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
setsockopt$inet_int(r4, 0x0, 0x19, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x200000010000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x9}, {0x0, 0x8, 0xfffffffffffffff8, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000000000)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0xf9, 0x5})
ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6})
sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="200000001100010000000000ffdbdf25100000000b00000056ccabd869c2030095bc9389dcab1b9e63580a69b2cde86e672248d3167c7925a9eb8e65a19b87275380e7680719e0805fb5f5bb959c6dbf8c4f6be6205026b18c1549fa651f0531573b4a5f40d05e72ee7463cad17852db834a8884ce357b6f582fc52d563132c5d75064eb0d440579f9df127bafc3be87dc162b8201e52b0826f9410a8220005adbab1f24f9e534014f457c93ef000ea0439401568d319dbaa1675b7df1ab906ac9486a4b0ae351e3b4df15"], 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0)

1.776681098s ago: executing program 2 (id=61):
socket$nl_route(0x10, 0x3, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x2)
clock_gettime(0xa, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0xa, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0x4f, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x1000008e, 0x3, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84d}, 0x3, 0xed}})
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = dup(r4)
landlock_restrict_self(r0, 0x5)
mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r8=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="30360804c5", @ANYRES32=r8, @ANYBLOB="80007f0a0a000200ffffffffffff00000600050001000000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040004)
socket$nl_xfrm(0x10, 0x3, 0x6)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2)

1.776412134s ago: executing program 0 (id=62):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="030300000000fcffffff0c00000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1.631007196s ago: executing program 0 (id=63):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000140)="440f20c0350b000000440f22c0c4e1f91496001800006464440f2356460f233566baa100ed4e0fc7990c000080f3fbf33e410f001766baf80cb8607dbd84ef66bafc0cb0a8eec744240003010000c744240220cb39b4ff1c24", 0x59}], 0x1, 0x42, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x4040000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r0)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x3e3, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x2, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x6, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x6, 0xa, 0x1b, 0x202, 0x2, 0x5, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x9, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x6, 0xe6, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x4, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x1, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x5, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x3, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1f, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x3ff, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xfff7, 0x2, 0x89, 0x2, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x2, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x0, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x40000001, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x3, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0x7, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0xc, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0x1002, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b14, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x2, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x10ff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0x3, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x7ff, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x80001, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fef, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x9f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x9, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x6, 0x2, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0x0, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x2000008, 0x2000a, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf2, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x9, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x4, 0x62, 0x2, 0xd, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x1000040, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x0, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x101, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f406", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1.485292163s ago: executing program 0 (id=64):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
pread64(r2, &(0x7f0000000300)=""/148, 0x94, 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x8, 0x2}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000340)=0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
read$dsp(r0, &(0x7f00000001c0)=""/62, 0x3e)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]})

1.431612473s ago: executing program 2 (id=65):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf8080045020014006700000267900100010100ffbfffff"], 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
syz_open_dev$video(0x0, 0xfffffffd, 0x10bd00)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}}, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x18, &(0x7f0000000380)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x240}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x6a}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000340)="00000000000010051a409ed86813", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f})
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5407000044000701fefffffffcdbdf25037c0000040045803c0701"], 0x754}}, 0xc000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5338, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x2, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x400001ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x400, 0x5], [0x391, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x104, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x8000, 0x4, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x7, 0x7, 0x100, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x6, 0xa, 0xffffffff, 0x40004, 0x3, 0x6, 0x100fffe, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3a, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0xf, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0x0, 0x135, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r5, 0x5501)
write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0xffe4, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xb, 0x2000000, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0)

789.179109ms ago: executing program 4 (id=50):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000851}, 0x800)
write(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0)
write$sndseq(r3, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x5}, {}, @addr={0xec, 0x5b}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {0x8}, {0x5, 0x6}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @time={0x8, 0xffff11fa}, {0x0, 0xa}, {0x2}, @addr={0x1, 0x6}}, {0x1, 0x3, 0x1, 0x0, @tick=0x48, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}, {0x9a, 0x9, 0x8, 0x4, @time={0x2029, 0xa}, {0x8, 0x9}, {0xe, 0x5}, @quote={{0xd7, 0x5}, 0x3, &(0x7f0000000040)={0x3, 0x6, 0x0, 0x8, @time={0x80000001, 0x1}, {0x2, 0x2}, {0x7, 0xd9}, @raw32={[0x5, 0x4e9907a7, 0x1000]}}}}], 0x8c)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00')
getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

580.869361ms ago: executing program 1 (id=66):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c0000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000080008000a40fffffffc0900010073797a31000000000800054000"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioprio_get$pid(0x1, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x830}, 0x810)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
io_setup(0x8, &(0x7f0000000280))
close(0xffffffffffffffff)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x80007fffffff, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b0001000010000904330001"], 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008", @ANYRES32=r3, @ANYBLOB], 0x20}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)

510.244517ms ago: executing program 0 (id=67):
landlock_restrict_self(0xffffffffffffffff, 0x1)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000)
mkdir(&(0x7f0000000400)='./file0\x00', 0x114)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000000)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c0000000b0a010400000000000000000a0000090900010073797a31000000000900020073797a3100000000300000000e0a010400000000000000000a0000000900010073797a31000000000900020073797a31"], 0x84}, 0x1, 0x0, 0x0, 0x40091}, 0x40)
sync()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0xfffffffffffffffe, 0x200, 0x6})
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000670000/0x12000)=nil, 0x12000})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
splice(r4, 0x0, r3, &(0x7f0000000180)=0x6, 0x40, 0x8)

164.017123ms ago: executing program 2 (id=68):
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5202)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r2, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd6}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x14)

131.50101ms ago: executing program 2 (id=69):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x9, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
r2 = openat$zero(0xffffff9c, &(0x7f0000000280), 0x210400, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$FUSE(r3, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1e08004512005800000000002f9078ac1414aaffffffff248086dd0000000010000800000086dd080088be00000000100000000100000000000000080000000000000000000800655800000000"], 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1e210e83e2bca482, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]})
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f00000000c0)=0x3)
ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000880)={"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"})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
fsetxattr(r0, &(0x7f0000000a40)=@known='security.selinux\x00', 0x0, 0x0, 0x0)
fgetxattr(r0, &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000680)={'syztnl0\x00', <r7=>0x0, 0x2f, 0x80, 0x6, 0x1, 0x0, @mcast1, @private2, 0x7800, 0x40, 0x3, 0x5}})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r0, 0x20, &(0x7f0000000600)={&(0x7f0000000440)=""/245, 0xf5, <r8=>0x0, &(0x7f0000000540)=""/133, 0x85}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', r7, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2, 0xd, 0x101, 0x4}, 0x10, r8, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0x1, 0xffffffffffffffff, r0, 0x1, r0], &(0x7f00000002c0), 0x10, 0x80}, 0x94)
r9 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x280)
write(r9, &(0x7f0000000280)='0', 0x1)

93.71853ms ago: executing program 0 (id=70):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x1, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x4, 0x81, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0x6, '\x00', 0x5}, {0xd, 0x1, 0xf8, '\x00', 0x3}, {0x2, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x28, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0xff}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0xfd, 0x2}, {0x2, 0x9, 0x0, '\x00', 0x6f}, {0x55, 0x51, 0x6}, {0x12, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x5, 0x2, '\x00', 0x7}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0xa, 0x8a, 0xc6, '\x00', 0x5}, {0x0, 0x7, 0x4, '\x00', 0x1c}, {0xb, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7f, 0x2, '\x00', 0x7}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf8, 0xa1, 0x4, '\x00', 0x7}, {0x8, 0x9, 0x0, '\x00', 0x6}]}})
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = dup(r3)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r6, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c090}, 0x44000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000300)={'wg0\x00'})
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_buf(r7, 0x6, 0xb, &(0x7f0000000400)=""/92, &(0x7f0000000300)=0x5c)
setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000380)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, 0xc)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000013c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2e00000099f8941fe980963dca9813da7ec92536434d9d841148d6d96d8263a846696bb39d4ab904562c48f432182855febbfc04ea724b6651b1b0a61b49c6372b49a3badf530e0e33c5a2", @ANYRES16=r6, @ANYBLOB="04002abd7000fbdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x11)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000480)={0x0, 0x5, 0x10}, 0xc)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x4, 0x94, 0xfffffffd, 0x5}, 0x9c)
symlinkat(&(0x7f00000000c0)='./nfsd\x00', r4, &(0x7f0000000140)='./file0\x00')
r8 = openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @loopback}}}, &(0x7f0000000440)=0xe4)
r10 = getegid()
lstat(&(0x7f0000000480)='./nfsd/portlist\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
fstat(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
mount$fuse(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r9, @ANYBLOB=',group_id=', @ANYRESDEC=r10, @ANYBLOB=',blksize=0x0000000000001000,uid=', @ANYRESDEC=r11, @ANYBLOB=',dont_measure,dont_measure,uid>', @ANYRESDEC=r12, @ANYBLOB=',pcr=00000000000000000009,subj_type=,fowner=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d7b212f2c00485cd5379307af9c7c3d7659487b3516731c3c2da2b4c833ddf148f2c784eebdc72cb75906cfee5bba4a5b41961234da23d5d07f9758fd80c4aa36077df7d5808b23a299dab2a7239d7f46904d6705889053540cb28bd519700455f6ae2ab8f30ba4bce503955d93f57d"])
mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0)
socket(0x23, 0x5, 0x0)

87.620428ms ago: executing program 2 (id=71):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000140)="440f20c0350b000000440f22c0c4e1f91496001800006464440f2356460f233566baa100ed4e0fc7990c000080f3fbf33e410f001766baf80cb8607dbd84ef66bafc0cb0a8eec744240003010000c744240220cb39b4ff1c24", 0x59}], 0x1, 0x42, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x4040000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r0)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x3e3, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x2, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x6, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x6, 0xa, 0x1b, 0x202, 0x2, 0x5, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x9, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x6, 0xe6, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x4, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x1, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x5, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x3, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1f, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x3ff, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xfff7, 0x2, 0x89, 0x2, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x2, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x0, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x40000001, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x3, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0x7, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0xc, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0x1002, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b14, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x2, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x10ff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0x3, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x7ff, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x80001, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fef, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x9f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x9, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x6, 0x2, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0x0, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x2000008, 0x2000a, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf2, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x9, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x4, 0x62, 0x2, 0xd, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x1000040, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x0, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x101, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f40600", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)

0s ago: executing program 2 (id=72):
r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$clear(0x7, r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="4c0000000206010200000000000000000c0000090c00078008001240000600000500010006000000050005004675000005000400000000000900020073797a310000000015000300686173683a69502c706f72742c6e657400000000"], 0x5c}}, 0x0)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x27}, {0x0, 0x0, 0x0, 0x6, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x70bd25, 0x4000000, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0)
write(r5, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) (async)
keyctl$clear(0x7, r0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="4c0000000206010200000000000000000c0000090c00078008001240000600000500010006000000050005004675000005000400000000000900020073797a310000000015000300686173683a69502c706f72742c6e657400000000"], 0x5c}}, 0x0) (async)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x27}, {0x0, 0x0, 0x0, 0x6, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x70bd25, 0x4000000, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) (async)
write(r5, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb) (async)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:3840' (ED25519) to the list of known hosts.
syzkaller login: [   47.909995][ T5729] cgroup: Unknown subsys name 'net'
[   48.030078][ T5729] cgroup: Unknown subsys name 'cpuset'
[   48.035792][ T5729] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.155494][ T5729] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.752647][ T5747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.756743][ T5747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.762302][ T5752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.765938][ T5752] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.770774][ T5753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.775242][ T5753] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.777515][ T5754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   53.779506][ T5753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.781357][ T5754] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.783816][ T5753] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   53.786534][ T5754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.790147][ T5753] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   53.791673][ T5754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.794062][ T5753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.802982][   T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.805622][   T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   53.805708][ T5760] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.811462][ T5757] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   53.811657][ T5760] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.817952][ T5753] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.456107][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.460300][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.463023][ T5744] bridge_slave_0: entered allmulticast mode
[   54.466197][ T5744] bridge_slave_0: entered promiscuous mode
[   54.500629][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.503195][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.505660][ T5744] bridge_slave_1: entered allmulticast mode
[   54.508780][ T5744] bridge_slave_1: entered promiscuous mode
[   54.631631][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.646010][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.648786][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.651004][ T5756] bridge_slave_0: entered allmulticast mode
[   54.653533][ T5756] bridge_slave_0: entered promiscuous mode
[   54.656755][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.659074][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.661210][ T5756] bridge_slave_1: entered allmulticast mode
[   54.665764][ T5756] bridge_slave_1: entered promiscuous mode
[   54.670160][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.672992][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.675330][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.678619][ T5748] bridge_slave_0: entered allmulticast mode
[   54.681405][ T5748] bridge_slave_0: entered promiscuous mode
[   54.685259][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.687474][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.689675][ T5748] bridge_slave_1: entered allmulticast mode
[   54.692402][ T5748] bridge_slave_1: entered promiscuous mode
[   54.738637][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.741159][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.743506][ T5749] bridge_slave_0: entered allmulticast mode
[   54.746485][ T5749] bridge_slave_0: entered promiscuous mode
[   54.760305][ T5744] team0: Port device team_slave_0 added
[   54.773018][ T5756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.776116][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.778774][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.781220][ T5749] bridge_slave_1: entered allmulticast mode
[   54.783922][ T5749] bridge_slave_1: entered promiscuous mode
[   54.788634][ T5744] team0: Port device team_slave_1 added
[   54.800945][ T5748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.805610][ T5748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.810406][ T5756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.855610][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.858673][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.869509][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.895980][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.899890][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.902352][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.910268][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.921568][ T5748] team0: Port device team_slave_0 added
[   54.925932][ T5756] team0: Port device team_slave_0 added
[   54.930440][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.956025][ T5748] team0: Port device team_slave_1 added
[   54.960275][ T5756] team0: Port device team_slave_1 added
[   54.972671][ T5749] team0: Port device team_slave_0 added
[   54.999660][ T5749] team0: Port device team_slave_1 added
[   55.029607][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.032463][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.043587][ T5756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.056665][ T5744] hsr_slave_0: entered promiscuous mode
[   55.060239][ T5744] hsr_slave_1: entered promiscuous mode
[   55.064093][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.067470][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.078245][ T5748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.090420][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.093305][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.103534][ T5748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.109684][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.112131][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.121996][ T5756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.135256][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.137485][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.145295][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.165419][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.167862][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.175748][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.226776][ T5748] hsr_slave_0: entered promiscuous mode
[   55.229117][ T5748] hsr_slave_1: entered promiscuous mode
[   55.231975][ T5748] debugfs: 'hsr0' already exists in 'hsr'
[   55.233818][ T5748] Cannot create hsr debugfs directory
[   55.239816][ T5756] hsr_slave_0: entered promiscuous mode
[   55.242052][ T5756] hsr_slave_1: entered promiscuous mode
[   55.244695][ T5756] debugfs: 'hsr0' already exists in 'hsr'
[   55.246524][ T5756] Cannot create hsr debugfs directory
[   55.269929][ T5749] hsr_slave_0: entered promiscuous mode
[   55.272086][ T5749] hsr_slave_1: entered promiscuous mode
[   55.274684][ T5749] debugfs: 'hsr0' already exists in 'hsr'
[   55.276825][ T5749] Cannot create hsr debugfs directory
[   55.611858][ T5744] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   55.621567][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   55.624439][ T5744] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   55.629526][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   55.633435][ T5744] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   55.640526][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   55.650115][ T5744] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   55.658933][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   55.695159][ T5748] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.703457][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   55.710494][ T5748] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.715193][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   55.718391][ T5748] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.722592][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   55.725317][ T5748] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.731420][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   55.792448][ T5749] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.799330][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   55.802513][ T5749] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.808454][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   55.811229][ T5749] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.816005][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   55.826076][ T5749] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.827668][ T5747] Bluetooth: hci0: command tx timeout
[   55.828874][ T5757] Bluetooth: hci3: command tx timeout
[   55.833956][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   55.838986][ T5757] Bluetooth: hci2: command tx timeout
[   55.904711][ T5756] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.907711][ T5757] Bluetooth: hci1: command tx timeout
[   55.910345][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   55.915811][ T5756] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.922017][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   55.932187][ T5756] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.938366][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   55.943450][ T5756] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.948492][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   55.976511][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.011403][ T5744] 8021q: adding VLAN 0 to HW filter on device team0
[   56.022976][ T5748] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.041902][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.044915][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.056597][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.058859][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.081320][ T5748] 8021q: adding VLAN 0 to HW filter on device team0
[   56.105866][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.109023][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.129208][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.138400][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.140698][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.169330][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.190092][ T5749] 8021q: adding VLAN 0 to HW filter on device team0
[   56.194977][ T5756] 8021q: adding VLAN 0 to HW filter on device team0
[   56.210187][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.213226][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.226401][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.229354][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.243811][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.246546][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.254807][  T230] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.257935][  T230] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.275350][ T5748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.674097][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.701545][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.727277][ T5744] veth0_vlan: entered promiscuous mode
[   56.732670][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.751107][ T5744] veth1_vlan: entered promiscuous mode
[   56.763633][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.775875][ T5748] veth0_vlan: entered promiscuous mode
[   56.792288][ T5748] veth1_vlan: entered promiscuous mode
[   56.843521][ T5744] veth0_macvtap: entered promiscuous mode
[   56.846643][ T5756] veth0_vlan: entered promiscuous mode
[   56.855751][ T5749] veth0_vlan: entered promiscuous mode
[   56.860072][ T5744] veth1_macvtap: entered promiscuous mode
[   56.873705][ T5748] veth0_macvtap: entered promiscuous mode
[   56.877313][ T5756] veth1_vlan: entered promiscuous mode
[   56.880238][ T5749] veth1_vlan: entered promiscuous mode
[   56.887990][ T5748] veth1_macvtap: entered promiscuous mode
[   56.899516][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.914839][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.925339][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.937176][ T5756] veth0_macvtap: entered promiscuous mode
[   56.950697][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.961628][ T5756] veth1_macvtap: entered promiscuous mode
[   56.973151][ T5749] veth0_macvtap: entered promiscuous mode
[   56.990639][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.993194][ T5749] veth1_macvtap: entered promiscuous mode
[   57.008075][ T5824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.025249][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.060189][   T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.064730][   T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.066583][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.079478][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.099165][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.099392][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.101655][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.161708][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.164490][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.168973][ T5823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.194060][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.196477][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.227449][ T5744] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.233430][   T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.235948][   T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.243186][ T5744] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   57.250589][ T5744] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   57.263680][ T5744] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   57.270088][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.276166][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.288035][ T5744] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   57.309630][   T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.314277][   T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.365153][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.368304][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.388399][ T5796] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.399142][ T5796] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.403450][ T5796] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.414183][ T5796] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.448767][ T5823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.454199][ T5823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.459369][ T5823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.465672][ T5823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.469900][ T5823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.474586][ T5823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.479587][ T5823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.498648][ T5796] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.571900][ T5796] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.729673][ T5901] fuse: Bad value for 'user_id'
[   57.731766][ T5901] fuse: Bad value for 'user_id'
[   57.737120][   T42] audit: type=1800 audit(1785790539.887:2): pid=5901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="file0" dev="overlay" ino=26 res=0 errno=0
[   57.907377][ T5747] Bluetooth: hci2: command tx timeout
[   57.908388][ T5753] Bluetooth: hci3: command tx timeout
[   57.915728][ T5757] Bluetooth: hci0: command tx timeout
[   57.997239][ T5747] Bluetooth: hci1: command tx timeout
[   58.537622][ T5909] =======================================================
[   58.537622][ T5909] WARNING: The mand mount option has been deprecated and
[   58.537622][ T5909]          and is ignored by this kernel. Remove the mand
[   58.537622][ T5909]          option from the mount to silence this warning.
[   58.537622][ T5909] =======================================================
[   58.643482][ T5911] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[   58.646274][ T5911] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   58.655277][ T5911] vhci_hcd vhci_hcd.0: Device attached
[   58.730936][ T5918] fuse: Bad value for 'fd'
[   58.810285][ T5921] Zero length message leads to an empty skb
[   58.818820][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6'.
[   58.827349][ T5858] vhci_hcd vhci_hcd.1: vhci_device speed not set
[   58.834473][ T5921] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6'.
[   58.897640][ T5858] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[   59.345992][ T5912] vhci_hcd: connection closed
[   59.364784][ T5907] process 'syz.1.2' launched './file0' with NULL argv: empty string added
[   59.385458][ T5824] vhci_hcd vhci_hcd.1: stop threads
[   59.393704][ T5824] vhci_hcd vhci_hcd.1: release socket
[   59.416164][ T5824] vhci_hcd vhci_hcd.1: disconnect device
[   59.758146][ T5858] usb 39-1: enqueue for inactive port 0
[   59.987542][ T5757] Bluetooth: hci3: command tx timeout
[   59.990026][ T5757] Bluetooth: hci0: command tx timeout
[   59.992266][ T5747] Bluetooth: hci2: command tx timeout
[   60.079681][ T5753] Bluetooth: hci1: command tx timeout
[   60.274425][ T5930] input: syz0 as /devices/virtual/input/input5
[   60.300649][ T5933] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   60.308250][ T5933] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   60.319160][ T5933] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   60.325681][ T5933] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   60.336138][ T5933] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   60.491392][ T5858] vhci_hcd vhci_hcd.1: vhci_device speed not set
[   60.675046][ T5942] usbip-vudc usbip-vudc.0: gadget not bound
[   60.917109][   T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   61.068565][   T10] usb 6-1: Using ep0 maxpacket: 32
[   61.077669][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[   61.098347][   T10] usb 6-1: config 14 has an invalid interface number: 57 but max is 1
[   61.103847][   T10] usb 6-1: config 14 has an invalid interface number: 228 but max is 1
[   61.112100][   T10] usb 6-1: config 14 has no interface number 0
[   61.116751][   T10] usb 6-1: config 14 has no interface number 1
[   61.121065][   T10] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[   61.128667][   T10] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[   61.139818][   T10] usb 6-1: config 14 interface 57 has no altsetting 0
[   61.143819][   T10] usb 6-1: config 14 interface 228 has no altsetting 0
[   61.151861][   T10] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[   61.169663][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.184554][   T10] usb 6-1: Product: syz
[   61.188902][   T10] usb 6-1: Manufacturer: syz
[   61.196822][   T10] usb 6-1: SerialNumber: syz
[   61.643550][ T5967] netlink: 'syz.3.17': attribute type 1 has an invalid length.
[   61.666445][   T10] legousbtower 6-1:14.57: interrupt endpoints not found
[   61.875084][   T10] legousbtower 6-1:14.228: interrupt endpoints not found
[   61.928112][   T10] IPVS: starting estimator thread 0...
[   62.027187][ T5973] IPVS: using max 23 ests per chain, 55200 per kthread
[   62.067171][ T5753] Bluetooth: hci2: command tx timeout
[   62.067998][ T5747] Bluetooth: hci0: command tx timeout
[   62.069511][ T5753] Bluetooth: hci3: command tx timeout
[   62.147110][ T5753] Bluetooth: hci1: command tx timeout
[   62.167279][   T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   62.318510][   T10] usb 8-1: Using ep0 maxpacket: 32
[   62.322995][   T10] usb 8-1: config 0 has an invalid interface number: 51 but max is 0
[   62.326505][   T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   62.331063][   T10] usb 8-1: config 0 has no interface number 0
[   62.333843][   T10] usb 8-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   62.343473][   T10] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   62.347463][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.351766][   T10] usb 8-1: Product: syz
[   62.354867][   T10] usb 8-1: Manufacturer: syz
[   62.357413][   T10] usb 8-1: SerialNumber: syz
[   62.363844][   T10] usb 8-1: config 0 descriptor??
[   62.369247][ T5976] dlm: no local IP address has been set
[   62.371285][   T10] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   62.372935][ T5976] dlm: cannot start dlm midcomms -107
[   62.389299][ T5976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.576365][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'.
[   62.582761][   T10] usb 8-1: qt2_attach - failed to power on unit: -71
[   62.588227][   T10] quatech2 8-1:0.51: probe with driver quatech2 failed with error -71
[   62.598771][   T10] usb 8-1: USB disconnect, device number 2
[   63.072789][ T5983] Mass Storage Function, version: 2009/09/11
[   63.075580][ T5983] LUN: removable file: (no medium)
[   63.084381][   T42] audit: type=1800 audit(1785790545.267:3): pid=5983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.22" name="file" dev="configfs" ino=9639 res=0 errno=0
[   63.402972][ T5989] program syz.3.23 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   63.741910][ T5992] dlm: no local IP address has been set
[   63.744826][ T5992] dlm: cannot start dlm midcomms -107
[   63.749102][ T5992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.930872][   T10] usb 6-1: USB disconnect, device number 2
[   64.076049][ T5996] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[   64.081709][ T5996] overlayfs: overlapping lowerdir path
[   64.090706][ T5996] overlay: Unknown parameter 'default_permissions:/'
[   64.133101][ T5989] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   64.180517][ T5989] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref]
[   64.183817][ T5989] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff]
[   64.188952][ T5989] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   64.193783][ T5989] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   64.248863][ T5989] pci 0000:00:01.0: Adding to iommu group 1
[   64.282728][ T5989] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   64.285958][ T5989] pci 0000:00:01.0: vgaarb: bridge control possible
[   64.288575][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'.
[   64.288766][ T5989] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   64.312836][ T5989] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   64.330038][ T5989] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   64.341045][ T5989] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   64.352961][ T6000] dlm: no local IP address has been set
[   64.354729][ T6000] dlm: cannot start dlm midcomms -107
[   64.359400][ T6000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.362942][ T5989] [drm] Found bochs VGA, ID 0xb0c5.
[   64.365147][ T5989] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   64.374466][ T5989] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4
[   64.493434][   T40] nvmet: connect request for invalid subsystem n!
[   64.501266][ T6003] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "n"
[   65.283442][ T6020] netlink: 16 bytes leftover after parsing attributes in process `syz.3.32'.
[   65.365164][ T6022] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.33' sets config #1024
[   65.370393][ T6020] nbd: socks must be embedded in a SOCK_ITEM attr
[   65.372147][ T6010] binder: BINDER_SET_CONTEXT_MGR already set
[   65.376979][ T6010] binder: 6009:6010 ioctl 4018620d 80004a80 returned -16
[   65.378440][ T6020] block nbd0: shutting down sockets
[   65.382127][ T6022] netlink: 'syz.1.33': attribute type 10 has an invalid length.
[   65.388161][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.392395][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.407369][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.411325][ T6022] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.416897][ T6022] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.420032][ T6022] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.426819][ T6022] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   65.464147][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'.
[   65.467199][ T6022] bridge_slave_1: left allmulticast mode
[   65.469289][ T6022] bridge_slave_1: left promiscuous mode
[   65.472966][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.488356][ T6022] bridge_slave_0: left allmulticast mode
[   65.491302][ T6022] bridge_slave_0: left promiscuous mode
[   65.496137][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.539321][ T6029] 9p: Bad value for 'rfdno'
[   65.543801][ T6028] overlayfs: conflicting lowerdir path
[   66.045831][ T6022] bond0: (slave bridge0): Releasing backup interface
[   66.141201][ T6030] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   66.166127][ T6030] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[   66.171210][ T6030] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[   66.177855][ T6030] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   66.186873][ T6030] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   66.303782][ T6030] pci 0000:00:01.0: Adding to iommu group 1
[   66.338772][ T6030] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   66.341299][ T6030] pci 0000:00:01.0: vgaarb: bridge control possible
[   66.343744][ T6030] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   66.369378][ T6030] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   66.373908][ T6030] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   66.393759][ T6030] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   66.468600][ T6030] [drm] Found bochs VGA, ID 0xb0c5.
[   66.470815][ T6030] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   67.084149][ T6030] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[   67.266246][ T6030] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[   67.429962][ T6041] pci_bus 0000:01: busn_res: [bus 01] is released
[   67.451468][ T6046] dlm: no local IP address has been set
[   67.454309][ T6046] dlm: cannot start dlm midcomms -107
[   67.457495][ T6045] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port
[   67.466776][ T6046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.473959][ T6045] pci 0000:00:04.0: PCI bridge to [bus 01]
[   67.476884][ T6045] pci 0000:00:04.0:   bridge window [io  0x1000-0x1fff]
[   67.479715][ T6045] pci 0000:00:04.0:   bridge window [mem 0xfe800000-0xfe9fffff]
[   67.484376][ T6045] pci 0000:00:04.0:   bridge window [mem 0xfe000000-0xfe1fffff 64bit pref]
[   67.488330][ T6045] pci 0000:00:04.0: enabling Extended Tags
[   67.504915][ T6045] pci 0000:00:04.0: Adding to iommu group 4
[   67.532531][ T6045] pci 0000:00:04.0: PCI bridge to [bus 01]
[   67.539283][ T6045] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000
[   67.545592][ T6045] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000
[   67.550634][ T6045] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned
[   67.553838][ T6044] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[   67.554138][ T6045] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned
[   67.556713][ T6044] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   67.565355][ T6045] pci 0000:00:04.0: bridge window [io  0x1000-0x1fff]: assigned
[   67.568770][ T6045] pci 0000:00:04.0: PCI bridge to [bus 01]
[   67.571321][ T6045] pci 0000:00:04.0:   bridge window [io  0x1000-0x1fff]
[   67.576397][ T6045] pci 0000:00:04.0:   bridge window [mem 0x81100000-0x812fffff]
[   67.579400][ T6044] vhci_hcd vhci_hcd.0: Device attached
[   67.582586][ T6045] pci 0000:00:04.0:   bridge window [mem 0x580000000-0x5801fffff 64bit pref]
[   67.685909][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'.
[   67.704618][ T6045] pcieport 0000:00:04.0: PME: Signaling with IRQ 25
[   67.730147][ T6045] pcieport 0000:00:04.0: AER: enabled with IRQ 26
[   67.733643][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40'.
[   67.900158][ T6064] ubi8: attaching mtd0
[   67.902035][ T6064] ubi8 error: ubi_attach_mtd_dev: bad VID header (32769) or data offsets (32833)
[   67.917466][   T29] usb 38-1: SetAddress Request (2) to port 0
[   67.924692][   T29] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd
[   68.083305][ T6049] vhci_hcd: connection reset by peer
[   68.087688][ T5823] vhci_hcd vhci_hcd.0: stop threads
[   68.089864][ T5823] vhci_hcd vhci_hcd.0: release socket
[   68.093202][ T5823] vhci_hcd vhci_hcd.0: disconnect device
[   68.239820][ T5823] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.347761][ T5823] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.411414][ T5747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   68.418078][ T5747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   68.426078][ T5747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   68.431894][ T5747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   68.435359][ T5747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   68.440444][ T5823] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.546338][ T5823] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.915968][ T6120] e1000e 0000:00:02.0 eth1: NIC Link is Down
[   68.933586][ T5823] bridge_slave_1: left allmulticast mode
[   68.936771][ T5823] bridge_slave_1: left promiscuous mode
[   68.941315][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.951629][ T5823] bridge_slave_0: left allmulticast mode
[   68.953589][ T5823] bridge_slave_0: left promiscuous mode
[   68.955601][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.079019][ T5823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.084734][ T5823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.091390][ T5823] bond0 (unregistering): Released all slaves
[   69.200541][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.48'.
[   69.274463][ T6136] dlm: no local IP address has been set
[   69.278102][ T6136] dlm: cannot start dlm midcomms -107
[   69.301631][ T6136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.749969][ T5458] 8021q: adding VLAN 0 to HW filter on device eth2
[   69.792758][ T5823] hsr_slave_0: left promiscuous mode
[   69.797505][ T5823] hsr_slave_1: left promiscuous mode
[   69.799630][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.802084][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.805752][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.810408][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.824645][ T5823] veth1_macvtap: left promiscuous mode
[   69.831368][ T5823] veth0_macvtap: left promiscuous mode
[   69.833315][ T5823] veth1_vlan: left promiscuous mode
[   69.835078][ T5823] veth0_vlan: left promiscuous mode
[   70.024622][ T5894] IPVS: starting estimator thread 0...
[   70.117126][ T6151] IPVS: using max 43 ests per chain, 103200 per kthread
[   70.179952][ T5823] team0 (unregistering): Port device team_slave_1 removed
[   70.204842][ T5823] team0 (unregistering): Port device team_slave_0 removed
[   70.267150][ T1477] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   70.417120][ T1477] usb 6-1: Using ep0 maxpacket: 32
[   70.421244][ T1477] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[   70.424519][ T1477] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   70.428492][ T1477] usb 6-1: config 0 has no interface number 0
[   70.431191][ T1477] usb 6-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   70.439697][ T1477] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   70.446537][ T1477] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.450200][ T1477] usb 6-1: Product: syz
[   70.451956][ T1477] usb 6-1: Manufacturer: syz
[   70.453842][ T1477] usb 6-1: SerialNumber: syz
[   70.463561][ T1477] usb 6-1: config 0 descriptor??
[   70.467193][ T5753] Bluetooth: hci0: command tx timeout
[   70.467331][ T1477] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   70.500902][ T6155] syzkaller0: entered promiscuous mode
[   70.503254][ T6155] syzkaller0: entered allmulticast mode
[   70.517711][ T6087] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.522129][ T6087] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.525115][ T6087] bridge_slave_0: entered allmulticast mode
[   70.531325][ T6087] bridge_slave_0: entered promiscuous mode
[   70.540085][ T6087] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.542469][ T6087] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.545471][ T6087] bridge_slave_1: entered allmulticast mode
[   70.548545][ T6087] bridge_slave_1: entered promiscuous mode
[   70.589333][ T6087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.595267][ T5458] 8021q: adding VLAN 0 to HW filter on device eth3
[   70.600691][ T6087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.679508][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'.
[   70.790858][ T6177] ubi8: attaching mtd0
[   70.792751][ T6177] ubi8 error: ubi_attach_mtd_dev: bad VID header (32769) or data offsets (32833)
[   70.865957][ T5858] IPVS: starting estimator thread 0...
[   70.947083][ T6180] IPVS: using max 44 ests per chain, 105600 per kthread
[   71.137250][ T5858] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   71.276073][ T1441] ieee802154 phy0 wpan0: encryption failed: -22
[   71.279909][ T1441] ieee802154 phy1 wpan1: encryption failed: -22
[   71.307557][ T5858] usb 5-1: Using ep0 maxpacket: 32
[   71.313529][ T5858] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[   71.318249][ T5858] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   71.322323][ T5858] usb 5-1: config 0 has no interface number 0
[   71.325105][ T5858] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   71.332642][ T5858] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   71.335836][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.338719][ T5858] usb 5-1: Product: syz
[   71.340774][ T5858] usb 5-1: Manufacturer: syz
[   71.342432][ T5858] usb 5-1: SerialNumber: syz
[   71.346079][ T5858] usb 5-1: config 0 descriptor??
[   71.353826][ T5858] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   71.555664][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'.
[   71.869361][ T6087] team0: Port device team_slave_0 added
[   71.878132][ T6087] team0: Port device team_slave_1 added
[   71.883764][ T1477] usb 6-1: qt2_attach - failed to power on unit: -71
[   71.897475][ T1477] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71
[   71.899129][ T5858] usb 5-1: qt2_attach - failed to power on unit: -71
[   71.903360][ T5858] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71
[   71.903762][ T1477] usb 6-1: USB disconnect, device number 3
[   71.916923][ T5858] usb 5-1: USB disconnect, device number 2
[   71.925550][ T6087] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.927932][ T6087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.938618][ T6087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.965857][ T6087] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.970199][ T6087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.981525][ T6087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.038080][ T6184] fuse: Bad value for 'fd'
[   72.041937][ T6087] hsr_slave_0: entered promiscuous mode
[   72.044450][ T6087] hsr_slave_1: entered promiscuous mode
[   72.154097][ T5823] IPVS: stop unused estimator thread 0...
[   72.183206][ T5458] 8021q: adding VLAN 0 to HW filter on device eth4
[   72.200376][ T6087] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   72.205121][ T6087] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   72.208245][ T6087] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   72.215056][ T6087] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   72.219138][ T6087] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   72.228424][ T6087] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   72.232562][ T6087] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   72.241276][ T6087] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   72.328221][ T6087] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.353281][ T6087] 8021q: adding VLAN 0 to HW filter on device team0
[   72.362405][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.365331][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.378312][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.381344][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.415968][ T5458] 8021q: adding VLAN 0 to HW filter on device eth5
[   72.547189][ T5753] Bluetooth: hci0: command tx timeout
[   72.767484][ T5893] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   72.819846][ T6087] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.870620][ T6238] binder: 6236:6238 ioctl c00c620f 800003c0 returned -22
[   72.920289][ T5893] usb 6-1: config index 0 descriptor too short (expected 45, got 36)
[   72.923936][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.935247][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   72.946378][ T5893] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   72.962641][ T5893] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   72.971691][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.988576][ T5893] usb 6-1: config 0 descriptor??
[   73.020680][ T6087] veth0_vlan: entered promiscuous mode
[   73.027979][   T29] usb 38-1: device descriptor read/8, error -110
[   73.034606][ T6087] veth1_vlan: entered promiscuous mode
[   73.066348][ T6087] veth0_macvtap: entered promiscuous mode
[   73.074539][ T6087] veth1_macvtap: entered promiscuous mode
[   73.091853][ T6087] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.102511][ T6087] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.111399][ T5824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.119586][ T5824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.247079][    T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!!
[   73.275684][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.281067][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.304640][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.311644][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.317421][ T5823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.339921][ T6261] Driver unsupported XDP return value 0 on prog  (id 7) dev N/A, expect packet loss!
[   73.387204][ T5824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.431560][ T6267] overlay: Unknown parameter '/¤'
[   73.433370][ T6210] smbdirect: ib_dev[syz1] removed
[   73.457941][ T6267] netlink: zone id is out of range
[   73.461814][ T6267] netlink: zone id is out of range
[   73.464125][ T6267] netlink: zone id is out of range
[   73.466350][ T6267] netlink: zone id is out of range
[   73.468599][ T6267] netlink: zone id is out of range
[   73.470888][ T6267] netlink: zone id is out of range
[   73.473190][ T6267] netlink: zone id is out of range
[   73.476413][ T6267] netlink: zone id is out of range
[   73.479112][ T6267] netlink: zone id is out of range
[   73.517935][   T29] usb usb38-port1: attempt power cycle
[   73.582605][ T6267] input: syz0 as /devices/virtual/input/input6
[   73.584839][ T5893] usbhid 6-1:0.0: can't add hid device: -71
[   73.592445][ T5893] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[   73.639873][ T5893] usb 6-1: USB disconnect, device number 4
[   74.109895][   T29] usb usb38-port1: unable to enumerate USB device
[   74.238584][ T6280] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   74.250314][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'.
[   74.306454][ T6284] dlm: no local IP address has been set
[   74.313979][ T6284] dlm: cannot start dlm midcomms -107
[   74.316822][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.67'.
[   74.325245][ T6284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.438131][ T5858] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   74.607076][ T5858] usb 6-1: Using ep0 maxpacket: 32
[   74.611926][ T5858] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[   74.615028][ T5858] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   74.620525][ T5858] usb 6-1: config 0 has no interface number 0
[   74.622854][ T5858] usb 6-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   74.627725][ T5753] Bluetooth: hci0: command tx timeout
[   74.629825][ T5858] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   74.633476][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.637575][ T5858] usb 6-1: Product: syz
[   74.639361][ T5858] usb 6-1: Manufacturer: syz
[   74.641442][ T5858] usb 6-1: SerialNumber: syz
[   74.659467][ T5858] usb 6-1: config 0 descriptor??
[   74.668736][ T5858] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   74.715978][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'.
[   74.726111][ T6296] netlink: 'syz.2.72': attribute type 3 has an invalid length.
[   74.727708][ T6291] fuse: Bad value for 'user_id'
[   74.731393][ T6296] netlink: 'syz.2.72': attribute type 3 has an invalid length.
[   74.734690][ T6296] vhci_hcd vhci_hcd.0: remove, state 4
[   74.735819][ T6291] fuse: Bad value for 'user_id'
[   74.741760][ T6296] usb usb38: USB disconnect, device number 1
[   74.776300][ T5823] vhci_hcd vhci_hcd.0: stop threads
[   74.778329][ T5823] vhci_hcd vhci_hcd.0: release socket
[   74.780120][ T5823] vhci_hcd vhci_hcd.0: disconnect device
[   74.784060][ T5823] vhci_hcd vhci_hcd.0: stop threads
[   74.786337][ T5823] vhci_hcd vhci_hcd.0: release socket
[   74.789819][ T5823] vhci_hcd vhci_hcd.0: disconnect device
[   74.791865][ T6296] vhci_hcd vhci_hcd.0: USB bus 38 deregistered
[   74.792268][ T5823] vhci_hcd vhci_hcd.0: stop threads
[   74.796873][ T5823] vhci_hcd vhci_hcd.0: release socket
[   74.799887][ T5823] vhci_hcd vhci_hcd.0: disconnect device
[   74.802306][ T5823] vhci_hcd vhci_hcd.0: stop threads
[   74.804529][ T5823] vhci_hcd vhci_hcd.0: release socket
[   74.805796][ T6296] vhci_hcd vhci_hcd.0: remove, state 4
[   74.806812][ T5823] ==================================================================
[   74.809155][ T6296] usb usb37: USB disconnect, device number 1
[   74.812365][ T5823] BUG: KASAN: slab-use-after-free in vhci_cleanup_unlink_list+0x44/0x456
[   74.812428][ T5823] Read of size 4 at addr ffff8880214dcb40 by task kworker/u32:3/5823
[   74.812443][ T5823] 
[   74.812465][ T5823] CPU: 3 UID: 0 PID: 5823 Comm: kworker/u32:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   74.812491][ T5823] Tainted: [L]=SOFTLOCKUP
[   74.812498][ T5823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   74.812518][ T5823] Workqueue: usbip_event event_handler
[   74.812623][ T5823] Call Trace:
[   74.812648][ T5823]  <TASK>
[   74.812656][ T5823]  dump_stack_lvl+0x100/0x190
[   74.812695][ T5823]  print_report+0x13d/0x4b0
[   74.812719][ T5823]  ? __virt_addr_valid+0x239/0x430
[   74.812756][ T5823]  ? vhci_cleanup_unlink_list+0x44/0x456
[   74.812780][ T5823]  kasan_report+0xdf/0x1c0
[   74.812820][ T5823]  ? vhci_cleanup_unlink_list+0x44/0x456
[   74.812847][ T5823]  vhci_cleanup_unlink_list+0x44/0x456
[   74.812875][ T5823]  vhci_shutdown_connection.cold+0x165/0x37c
[   74.812901][ T5823]  event_handler+0x216/0x570
[   74.812921][ T5823]  process_one_work+0xa23/0x1940
[   74.812985][ T5823]  ? __pfx_process_one_work+0x10/0x10
[   74.813013][ T5823]  ? __pfx_event_handler+0x10/0x10
[   74.813030][ T5823]  worker_thread+0x5ef/0xe50
[   74.813057][ T5823]  ? kthread+0x13a/0x450
[   74.813081][ T5823]  ? __pfx_worker_thread+0x10/0x10
[   74.813102][ T5823]  kthread+0x370/0x450
[   74.813125][ T5823]  ? __pfx_kthread+0x10/0x10
[   74.813148][ T5823]  ret_from_fork+0x72b/0xd50
[   74.813180][ T5823]  ? __pfx_ret_from_fork+0x10/0x10
[   74.813202][ T5823]  ? __switch_to+0x800/0x10f0
[   74.813236][ T5823]  ? __pfx_kthread+0x10/0x10
[   74.813258][ T5823]  ret_from_fork_asm+0x1a/0x30
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   74.813286][ T5823]  </TASK>
[   74.813292][ T5823] 
[   74.813299][ T5823] Allocated by task 1:
[   74.813316][ T5823]  kasan_save_stack+0x30/0x50
[   74.813339][ T5823]  kasan_save_track+0x14/0x30
[   74.813358][ T5823]  __kasan_kmalloc+0xaa/0xb0
[   74.849312][ T6296] vhci_hcd vhci_hcd.0: USB bus 37 deregistered
[   74.849345][ T5823]  __kmalloc_noprof+0x322/0x820
[   74.895301][ T5823]  __usb_create_hcd+0x5e/0xac0
[   74.896863][ T5823]  vhci_hcd_probe+0x1a5/0x4e0
[   74.898385][ T5823]  platform_probe+0x106/0x1d0
[   74.899910][ T5823]  really_probe+0x241/0xa60
[   74.901406][ T5823]  __driver_probe_device+0x20e/0x450
[   74.903081][ T5823]  driver_probe_device+0x4a/0x140
[   74.904676][ T5823]  __device_attach_driver+0x1df/0x320
[   74.906407][ T5823]  bus_for_each_drv+0x159/0x1e0
[   74.907947][ T5823]  __device_attach+0x1e4/0x4d0
[   74.909474][ T5823]  device_initial_probe+0xaf/0xd0
[   74.911111][ T5823]  bus_probe_device+0x64/0x160
[   74.912626][ T5823]  device_add+0x121d/0x1970
[   74.914066][ T5823]  platform_device_add+0x35a/0x800
[   74.915702][ T5823]  platform_device_register_full+0x5cf/0x830
[   74.917642][ T5823]  vhci_hcd_init+0x1a1/0x2f0
[   74.919142][ T5823]  do_one_initcall+0x11d/0x700
[   74.920696][ T5823]  kernel_init_freeable+0x6ea/0x7b0
[   74.922738][ T5823]  kernel_init+0x1f/0x1e0
[   74.924528][ T5823]  ret_from_fork+0x72b/0xd50
[   74.926432][ T5823]  ret_from_fork_asm+0x1a/0x30
[   74.928409][ T5823] 
[   74.929426][ T5823] Freed by task 6296:
[   74.931063][ T5823]  kasan_save_stack+0x30/0x50
[   74.932951][ T5823]  kasan_save_track+0x14/0x30
[   74.934894][ T5823]  kasan_save_free_info+0x3b/0x70
[   74.936899][ T5823]  __kasan_slab_free+0x5f/0x80
[   74.938808][ T5823]  kfree+0x22b/0x6c0
[   74.940348][ T5823]  usb_put_hcd+0x149/0x1f0
[   74.941797][ T5823]  vhci_hcd_remove+0xb5/0x1b0
[   74.943241][ T5823]  platform_remove+0x5f/0x80
[   74.944665][ T5823]  device_remove+0xcb/0x180
[   74.946068][ T5823]  device_release_driver_internal+0x44e/0x620
[   74.947895][ T5823]  unbind_store+0xf8/0x110
[   74.949238][ T5823]  drv_attr_store+0x74/0xb0
[   74.950667][ T5823]  sysfs_kf_write+0xf2/0x150
[   74.952089][ T5823]  kernfs_fop_write_iter+0x3e0/0x5f0
[   74.953670][ T5823]  vfs_write+0x6ac/0x1050
[   74.955096][ T5823]  ksys_write+0x12a/0x250
[   74.956709][ T5823]  __do_fast_syscall_32+0xe7/0x970
[   74.958643][ T5823]  do_fast_syscall_32+0x32/0x70
[   74.960506][ T5823]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   74.962901][ T5823] 
[   74.963803][ T5823] Last potentially related work creation:
[   74.965815][ T5823]  kasan_save_stack+0x30/0x50
[   74.967260][ T5823]  kasan_record_aux_stack+0xa7/0xc0
[   74.968832][ T5823]  insert_work+0x36/0x230
[   74.970217][ T5823]  __queue_work+0x9bc/0x12b0
[   74.971660][ T5823]  queue_work_on+0x1a9/0x1e0
[   74.973066][ T5823]  usb_hcd_giveback_urb+0x330/0x4a0
[   74.974615][ T5823]  unlink1+0x418/0x510
[   74.975899][ T5823]  usb_hcd_unlink_urb+0x131/0x210
[   74.977430][ T5823]  usb_kill_urb+0x121/0x320
[   74.978810][ T5823]  hub_quiesce+0x1e9/0x320
[   74.980217][ T5823]  hub_suspend+0x4ab/0x9e0
[   74.981612][ T5823]  usb_suspend_both+0x288/0x950
[   74.983108][ T5823]  usb_runtime_suspend+0x49/0x120
[   74.984642][ T5823]  __rpm_callback+0xc8/0x620
[   74.986076][ T5823]  rpm_callback+0x16a/0x1b0
[   74.987470][ T5823]  rpm_suspend+0x2f4/0x11a0
[   74.988842][ T5823]  __pm_runtime_suspend+0xba/0x1a0
[   74.990430][ T5823]  usb_runtime_idle+0x7e/0x90
[   74.991898][ T5823]  rpm_idle+0x322/0x790
[   74.993208][ T5823]  pm_runtime_work+0x120/0x150
[   74.994665][ T5823]  process_one_work+0xa23/0x1940
[   74.996179][ T5823]  worker_thread+0x5ef/0xe50
[   74.997785][ T5823]  kthread+0x370/0x450
[   74.999075][ T5823]  ret_from_fork+0x72b/0xd50
[   75.000562][ T5823]  ret_from_fork_asm+0x1a/0x30
[   75.002107][ T5823] 
[   75.002900][ T5823] Second to last potentially related work creation:
[   75.004994][ T5823]  kasan_save_stack+0x30/0x50
[   75.006486][ T5823]  kasan_record_aux_stack+0xa7/0xc0
[   75.008117][ T5823]  insert_work+0x36/0x230
[   75.009492][ T5823]  __queue_work+0x9bc/0x12b0
[   75.011053][ T5823]  queue_work_on+0x1a9/0x1e0
[   75.012570][ T5823]  usb_hcd_giveback_urb+0x3b8/0x4a0
[   75.014234][ T5823]  usb_hcd_submit_urb+0xab7/0x2150
[   75.015869][ T5823]  usb_submit_urb+0x827/0x19b0
[   75.017378][ T5823]  usb_start_wait_urb+0x10e/0x580
[   75.018945][ T5823]  usb_control_msg+0x328/0x4b0
[   75.020639][ T5823]  hub_suspend+0x826/0x9e0
[   75.022496][ T5823]  usb_suspend_both+0x288/0x950
[   75.024078][ T5823]  usb_runtime_suspend+0x49/0x120
[   75.025748][ T5823]  __rpm_callback+0xc8/0x620
[   75.027240][ T5823]  rpm_callback+0x16a/0x1b0
[   75.028687][ T5823]  rpm_suspend+0x2f4/0x11a0
[   75.030168][ T5823]  __pm_runtime_suspend+0xba/0x1a0
[   75.031768][ T5823]  usb_runtime_idle+0x7e/0x90
[   75.033252][ T5823]  rpm_idle+0x322/0x790
[   75.034598][ T5823]  pm_runtime_work+0x120/0x150
[   75.036197][ T5823]  process_one_work+0xa23/0x1940
[   75.037747][ T5823]  worker_thread+0x5ef/0xe50
[   75.039222][ T5823]  kthread+0x370/0x450
[   75.040580][ T5823]  ret_from_fork+0x72b/0xd50
[   75.042051][ T5823]  ret_from_fork_asm+0x1a/0x30
[   75.043553][ T5823] 
[   75.044317][ T5823] The buggy address belongs to the object at ffff8880214dc000
[   75.044317][ T5823]  which belongs to the cache kmalloc-8k of size 8192
[   75.048591][ T5823] The buggy address is located 2880 bytes inside of
[   75.048591][ T5823]  freed 8192-byte region [ffff8880214dc000, ffff8880214de000)
[   75.052849][ T5823] 
[   75.053620][ T5823] The buggy address belongs to the physical page:
[   75.055648][ T5823] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x214d8
[   75.058354][ T5823] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   75.061214][ T5823] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   75.063547][ T5823] page_type: f5(slab)
[   75.064844][ T5823] raw: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000
[   75.067521][ T5823] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[   75.070231][ T5823] head: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000
[   75.072891][ T5823] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[   75.075590][ T5823] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[   75.078295][ T5823] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   75.081024][ T5823] page dumped because: kasan: bad access detected
[   75.083016][ T5823] page_owner tracks the page as allocated
[   75.084818][ T5823] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 11413671350, free_ts 9248773949
[   75.091075][ T5823]  post_alloc_hook+0xfd/0x120
[   75.092549][ T5823]  get_page_from_freelist+0xf48/0x3530
[   75.094254][ T5823]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[   75.096118][ T5823]  new_slab+0xa2/0x640
[   75.097407][ T5823]  refill_objects+0xe3/0x410
[   75.098874][ T5823]  __pcs_replace_empty_main+0x376/0x680
[   75.100624][ T5823]  __kmalloc_noprof+0x66d/0x820
[   75.102157][ T5823]  __usb_create_hcd+0x5e/0xac0
[   75.103663][ T5823]  vhci_hcd_probe+0xf3/0x4e0
[   75.105144][ T5823]  platform_probe+0x106/0x1d0
[   75.106737][ T5823]  really_probe+0x241/0xa60
[   75.108599][ T5823]  __driver_probe_device+0x20e/0x450
[   75.110374][ T5823]  driver_probe_device+0x4a/0x140
[   75.112004][ T5823]  __device_attach_driver+0x1df/0x320
[   75.113715][ T5823]  bus_for_each_drv+0x159/0x1e0
[   75.115265][ T5823]  __device_attach+0x1e4/0x4d0
[   75.116749][ T5823] page last free pid 919 tgid 919 stack trace:
[   75.118505][ T5823]  free_pages_prepare+0x586/0xd80
[   75.120098][ T5823]  __free_contig_range_common+0x14f/0x250
[   75.121877][ T5823]  free_pages_bulk+0x12a/0x200
[   75.123380][ T5823]  vm_area_free_pages+0xad/0x2b0
[   75.124917][ T5823]  vfree+0x107/0x750
[   75.126115][ T5823]  delayed_vfree_work+0x56/0x80
[   75.127551][ T5823]  process_one_work+0xa23/0x1940
[   75.129113][ T5823]  worker_thread+0x5ef/0xe50
[   75.130518][ T5823]  kthread+0x370/0x450
[   75.131805][ T5823]  ret_from_fork+0x72b/0xd50
[   75.133260][ T5823]  ret_from_fork_asm+0x1a/0x30
[   75.134801][ T5823] 
[   75.135561][ T5823] Memory state around the buggy address:
[   75.137271][ T5823]  ffff8880214dca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   75.139696][ T5823]  ffff8880214dca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   75.142216][ T5823] >ffff8880214dcb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   75.144691][ T5823]                                            ^
[   75.146634][ T5823]  ffff8880214dcb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   75.149130][ T5823]  ffff8880214dcc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   75.151678][ T5823] ==================================================================
[   75.158743][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'.
[   75.162338][ T5823] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   75.164981][ T5823] CPU: 3 UID: 0 PID: 5823 Comm: kworker/u32:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   75.168509][ T5823] Tainted: [L]=SOFTLOCKUP
[   75.170146][ T5823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   75.173758][ T5823] Workqueue: usbip_event event_handler
[   75.175488][ T5823] Call Trace:
[   75.176563][ T5823]  <TASK>
[   75.177524][ T5823]  dump_stack_lvl+0x100/0x190
[   75.179031][ T5823]  vpanic+0x552/0x970
[   75.180304][ T5823]  ? __pfx_vpanic+0x10/0x10
[   75.181744][ T5823]  ? mark_held_locks+0x40/0x70
[   75.183268][ T5823]  ? vhci_cleanup_unlink_list+0x44/0x456
[   75.185080][ T5823]  panic+0xd1/0xe0
[   75.186282][ T5823]  ? __pfx_panic+0x10/0x10
[   75.187693][ T5823]  ? vhci_cleanup_unlink_list+0x44/0x456
[   75.189476][ T5823]  ? preempt_schedule_common+0x42/0xc0
[   75.191190][ T5823]  ? check_panic_on_warn+0x1f/0x90
[   75.192808][ T5823]  check_panic_on_warn.cold+0x19/0x34
[   75.194502][ T5823]  end_report.part.0+0x3a/0x90
[   75.196036][ T5823]  kasan_report.cold+0xe/0x18
[   75.197531][ T5823]  ? vhci_cleanup_unlink_list+0x44/0x456
[   75.199312][ T5823]  vhci_cleanup_unlink_list+0x44/0x456
[   75.201123][ T5823]  vhci_shutdown_connection.cold+0x165/0x37c
[   75.203528][ T5823]  event_handler+0x216/0x570
[   75.205200][ T5823]  process_one_work+0xa23/0x1940
[   75.206771][ T5823]  ? __pfx_process_one_work+0x10/0x10
[   75.208573][ T5823]  ? __pfx_event_handler+0x10/0x10
[   75.210197][ T5823]  worker_thread+0x5ef/0xe50
[   75.211660][ T5823]  ? kthread+0x13a/0x450
[   75.213000][ T5823]  ? __pfx_worker_thread+0x10/0x10
[   75.214620][ T5823]  kthread+0x370/0x450
[   75.215947][ T5823]  ? __pfx_kthread+0x10/0x10
[   75.217422][ T5823]  ret_from_fork+0x72b/0xd50
[   75.218905][ T5823]  ? __pfx_ret_from_fork+0x10/0x10
[   75.220521][ T5823]  ? __switch_to+0x800/0x10f0
[   75.222038][ T5823]  ? __pfx_kthread+0x10/0x10
[   75.223507][ T5823]  ret_from_fork_asm+0x1a/0x30
[   75.225087][ T5823]  </TASK>
[   75.226797][ T5823] Kernel Offset: disabled
[   75.228165][ T5823] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:55:57  Registers:
info registers vcpu 0

CPU#0
RAX=00000000000eb8e3 RBX=ffffffff8e891480 RCX=ffffffff8bb892d5 RDX=0000000000000000
RSI=ffffffff8e1a9a00 RDI=ffffffff8c400a80 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10
R8 =0000000000000001 R9 =ffffed100564678d R10=ffff88802b233c6b R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000
RIP=ffffffff8bb8789f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096bdf000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000f546bda4 CR3=00000000264df000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00c800a400000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000200000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000008e7cf RBX=ffff88801c742540 RCX=ffffffff8bb892d5 RDX=0000000000000000
RSI=ffffffff8e1a9a00 RDI=ffffffff8c400a80 RBP=ffffed10038e84a8 RSP=ffffc9000046fe00
R8 =0000000000000001 R9 =ffffed100566678d R10=ffff88802b333c6b R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000
RIP=ffffffff8bb8789f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096cdf000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000f548bff4 CR3=0000000067929000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000008 RBX=0000000000000001 RCX=ffffffff8525e67f RDX=0000000000000010
RSI=0000000000000010 RDI=0000000000000001 RBP=ffffffff8c4030c0 RSP=ffffc90004737160
R8 =0000000000000005 R9 =0000000000000004 R10=0000000000000001 R11=0000000000000000
R12=0000000000000010 R13=0000000000000003 R14=0000000000000001 R15=000000008918ac24
RIP=ffffffff8209a6f0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f46abd49300 ffffffff 00c00000
GS =0000 ffff888096ddf000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000055e643531000 CR3=000000004c57b000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 0000001400000000 0000000000000000 0000000000000015
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01b2080580030580 0204880301800800 0480031000001df1 ffffffff00000001
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a20008000fffffff ff02018408000208 0004800200020108 00010800100177e6
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01b2080004900324 1cffb439cb200224 44c7000001030024 44c7eea8b00cfcba
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66ef84bd7d60b80c f8ba6617000f413e f3fbf38000000c99 c70f4eed00a1ba66
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 35230f4656230f44 6464000018009614 f9e1c4c0220f4400 00000b35c0200f44
ZMM24=8d0465f58d0465f5 8d0465f58d0465f5 8d0465f58d0465f5 8d0465f58d0465f5 8d0465f58d0465f5 8d0465f58d0465f5 8d0465f58d0465f5 8d0465f58d0465f5
ZMM25=7516203c7516203c 7516203c7516203c 7516203c7516203c 7516203c7516203c 7516203c7516203c 7516203c7516203c 7516203c7516203c 7516203c7516203c
ZMM26=2c32bbbd2c32bbbd 2c32bbbd2c32bbbd 2c32bbbd2c32bbbd 2c32bbbd2c32bbbd 2c32bbbd2c32bbbd 2c32bbbd2c32bbbd 2c32bbbd2c32bbbd 2c32bbbd2c32bbbd
ZMM27=32ca4a4b32ca4a4b 32ca4a4b32ca4a4b 32ca4a4b32ca4a4b 32ca4a4b32ca4a4b 32ca4a4b32ca4a4b 32ca4a4b32ca4a4b 32ca4a4b32ca4a4b 32ca4a4b32ca4a4b
ZMM28=000000800000007f 0000007e0000007d 0000007c0000007b 0000007a00000079 0000007800000077 0000007600000075 0000007400000073 0000007200000071
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=cc020000cc020000 cc020000cc020000 cc020000cc020000 cc020000cc020000 cc020000cc020000 cc020000cc020000 cc020000cc020000 cc020000cc020000
info registers vcpu 3

CPU#3
RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85a09df5 RDI=ffffffff9b9f74e0 RBP=ffffffff9b9f74a0 RSP=ffffc90006417538
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3431323038386552
R12=0000000000000000 R13=0000000000000038 R14=ffffffff9b6f7236 R15=ffffffff85a09d90
RIP=ffffffff85a09e1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096edf000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000000000000 CR3=000000004c1f7000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000