last executing test programs:

3.649164822s ago: executing program 2 (id=3):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getpid()
bind$netlink(r0, &(0x7f0000000600)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0x2, 0x0, 0xa}, {0x3, 0x0, 0x0, 0x20000000000}, {0x0, 0x3, 0x9f2}, 0x4, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x6c}, 0x0, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe4)
socket$l2tp(0x2, 0x2, 0x73)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000b4ace6ff0000006110060000000000950000090000000002fb8027727266a64e611c145d7ccbcd6e3940b56d08bad6a48144dd26"], &(0x7f00000002c0)='syzkaller\x00', 0x4}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_int(r2, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0xfffffffd, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x7, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x78, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x7, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x200100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0002, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba0, 0x7, 0x3565, 0x2, 0x2, 0x4, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x10040)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1b080045f400280069000002069078640101", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b56d3ef48d2683515ce4bbd197775dc2639859aef079e1b665eb17acf7d0c38edb752f256e5d8eef0face8791d4654ea5a9e70b548b60737ac7ac04b6db79d63a2cf2bd21baa5c56a76a10998e5933e71b2ae1e63946c6ea"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r6, &(0x7f00000000c0)='1\x00', 0x1)
write(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r7, &(0x7f00000001c0)='1\x00', 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)

3.568024265s ago: executing program 3 (id=4):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x7, 0xb}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ff80850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00')
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}})
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6)
shutdown(r6, 0x32ce970513f32900)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0)
preadv(r7, &(0x7f00000000c0)=[{0x0}], 0x1, 0xf0, 0xa)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r8, &(0x7f00000001c0)='1', 0x1)

3.157156561s ago: executing program 0 (id=6):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000934000/0x2000)=nil, 0x2000, 0xb635773f06ebbeea, 0x10, 0xffffffffffffffff, 0x0)
r1 = eventfd2(0x3, 0x0)
fcntl$notify(r1, 0x402, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000005c0)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x8, 0x40000000000000]}})
r7 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102)
mq_notify(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x1f, 0x0, @thr={&(0x7f0000000300), &(0x7f0000000380)="e2e15cbebc064b26984da94db1a0293b4923c90b88f0f6caddee92328660df1adb0487cb420591"}})
r8 = semget$private(0x0, 0x2, 0x10)
semctl$SETVAL(r8, 0x1, 0x8, 0x0)
semctl$SETALL(r8, 0x0, 0x9, &(0x7f0000000200))
r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)
semctl$GETPID(0x0, 0x3, 0xb, &(0x7f00000013c0)=""/4096)
ptrace$setregset(0x4205, r9, 0x202, &(0x7f00000001c0)={0x0})
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001280)={r5, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00660000007f00000001"], 0x50)

3.041210131s ago: executing program 1 (id=7):
userfaultfd(0x801)
mkdir(&(0x7f0000000300)='./bus\x00', 0x101)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
syz_open_dev$sndctrl(&(0x7f0000000140), 0xc4, 0x200)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x10000, 0x7fff, 0x6, 0x400, 0x401, 0x9, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x3, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x20000038, 0x200, 0x1fd, 0x80, 0x800, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0x6, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x4, 0x5, 0xca, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
ftruncate(r1, 0x9)
openat(0xffffffffffffff9c, 0x0, 0x42082, 0xcd78457fbb1868dd)
fallocate(r1, 0x20002, 0x6, 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0xae8, 0x863, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000008c0)={0xc0})
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x88482)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x28}}, 0x4000)
ioctl$EVIOCGREP(r4, 0x80284504, &(0x7f0000000040)=""/98)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080))
openat$nvram(0xffffff9c, &(0x7f0000000480), 0x688441, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)

2.907785939s ago: executing program 2 (id=8):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000"], &(0x7f0000001540)='GPL\x00', 0x400, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, <r1=>0x0})
sched_setscheduler(r1, 0x1, &(0x7f0000000000)=0x40)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000240)={0x1, 0x1ff})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfa619000)
sendmmsg(0xffffffffffffffff, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="efdb89a322b8a83f0e5ec310761a96", 0xf}], 0x1}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000100)="de61fcb05cdc74c97ad7", 0xa}, {&(0x7f0000001740)="7b204c4e408d5bf5", 0x8}, {&(0x7f0000001780)="c8a61b6fb20e013dc2b5e61abbbb2012904f1b674846705b9123f76259534d8e0169ac46a6dc674f72856452d7a66afca892487d6281af1453f1ad324f71aeead6d0fc54be1e23262defe9e1503d28f7d9d21e75e6af8158efe02d9ffff46d", 0x5f}], 0x3}}], 0x2, 0x8810)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r5)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x11c, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x50}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
poll(&(0x7f0000000140), 0x0, 0xe6)
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)
r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000400)={0x5, 0x2})
ppoll(&(0x7f0000002700)=[{r7, 0x8018}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x2)
socket(0x200000000000011, 0x2, 0x0)

2.239145423s ago: executing program 3 (id=9):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000a8f000/0x3000)=nil, 0x3000, 0x1000005, 0x110, r0, 0x5c915000)
io_setup(0xf89f, &(0x7f00000001c0)=<r1=>0x0)
r2 = eventfd(0x2)
io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, 0x1, r0, &(0x7f0000000640)="c3f5b81558257fcd4b887ebd5e8342793cefd58e765e417218a68d0efe39aa53a728130ea62bdf55c38c584ee10f036fe5ae30399395ca4c46fd4d83762fa20356f94f10c89b448df3e293a66a3bb04faf4a7587e3ceec85c2523cf577643d7ca444c98f5b1c3d6e51a27cb58e2367c6bfc0525c0cebbae419aec6e309eb8b85f45283858b1b552e937c477d4ab6325927af2792499f748bc671932bb8f4f5ca84edc595551a1a8d653c1314c0488981102967f6956f5995477d640a9b4859e8c92fce096be02da1fa1169e60c55cd4da176fc5a0bfecea8c9cca74a551e87", 0xdf, 0x7fffffffffffffff, 0x0, 0x1, r2}])
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r3, r3, 0x0, 0x2000fb)
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0xb3c, 0x870, 0x1, 0x1, 0xd59f80, 0x3, 0x0, 0x19ef, 0x4, 0x7, 0x2800, 0x6, 0x5, 0xd1, 0x0, 0x30, {0x8, 0xae}, 0xd0, 0x9}})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e22, @private=0xa010102}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r6=>0x0]}, &(0x7f0000000280)=0x8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_matches\x00')
exit(0xffff)
read$ptp(r7, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="05090000000000000000240000000e0001006e653464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x4)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000000)={r6, 0x3, 0x8}, 0x8)
r10 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
mkdir(&(0x7f0000000180)='proc_mnt/1/root/lib/modules/7.2.0-rc2\x00', 0x176)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
openat(r7, &(0x7f0000000080)='proc_mnt/1/root/lib/modules\x00', 0x802400, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='proc_mnt/1/root/lib/modules/7.2.0-rc2\x00', 0x0, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f00000000c0))
write$apparmor_exec(r10, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0xed)
socket$inet6_sctp(0xa, 0x1, 0x84)

2.220354642s ago: executing program 1 (id=10):
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000b80), 0x2000048, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_auto}, {@workdir={'workdir', 0x3d, './bus'}}]})
setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {0x1, 0x5}, [{0x2, 0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x5}, {0x2, 0x1}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x7}, {0x8, 0x4}, {0x8, 0x6}, {0x8, 0x1}], {0x10, 0x6}, {0x20, 0x4}}, 0x7c, 0x1)
r0 = syz_open_procfs(0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe)
listen(r1, 0x0)
accept4(r1, 0x0, 0x0, 0x80800)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4)
setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4)
listen(r4, 0x0)
close_range(r2, r4, 0x0)
fchdir(0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs trusted:tr0000000000000000016'], 0x35, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
gettid()
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='stack\x00')
write$binfmt_format(r5, &(0x7f0000000180)='1\x00', 0x2)
r6 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r6, 0x9)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r7, &(0x7f0000002c40)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000440)="b1983d1d686aa7395b1aa29aa9639ed2fc6ac3f779ca01c84b8ea58709d028c0d88eb7af2d8e36b193480b65ef2adbc0e3c754a1ff988af402ed8d5120114e163f03673de74ed4d785b56f140ae4f2b1844687546afb954295d9d9f63433f6831c1b3efa17990fdcc46de4d360f3ee376194ca02e963b7e73d48ae33b4497fdd5a8b2b93d0f79d641b4c4f46acff6bb3d245276d8d734160047f9f7ad5deec0d", 0xa0}, {&(0x7f0000000580)="8fab81697dc9691d39d48c2c2a45c7b2ab7d7f578784b37eb0eb4b2cb0184b382b4e078ff52d5da177f1d64f856609fcb77b1244447c6d30c9092da07d1841608c8ceb4db2b1069bf7946de0bc7c3f92611e9f7508030b3181c176192156a81353dffb3089358c6bd25497b7f8052179f0b32bb62dc0c3aa43c22f", 0x7b}, {&(0x7f0000000640)="faf78f6d1a8bc817487803", 0xb}, {&(0x7f0000000680)="ddb3470b36590a16b0aacbea02974c031e1a06e07a38431d79e990b26d9f4121757bb06c90ebcfb107020822e155b0ffd3b8352dd3b2ee9354a15d6714f6c5630bbe417d1ac685a5e616baea599edb49f91a6132292b7d04e61733ef485c51141dac922681b1c3269cef6d601b78a689a7ae2caf44aae9c9e63b999722009fdcb67e2b20775a29e3c7499aaa40c66d4114d4568d37855992ae001a62ff194e28319c9b57da32194fb98ba6f5e653b2352f1f33b4f03e94bcf0913ab1736acc57fe62d9e0ad", 0xc5}, {&(0x7f0000000780)="480a58d2f1f1628f4e47cb6a7aea54d447e3f9a1462e3d44e086aed0215daa3b993e571434e75b5caccf3034fdd57b18d39cd33c86d08f6e5928f60af069a9ad2a8f071a9fd295ee5656ac89df6726d97a618f0c7d984fb132d610f9812bd1803ae25438ecc8b9e4bb1fde4f3f8c5692a880cd09eb2de45587dc895eedac41a543822f9319a73ed1c9fae81d3dfd8eda46e5af45df5b8b689b1a2bb048692fe542ce6608c7ce12c029279085d706f74b7a07ea02a2b05280", 0xb8}, {&(0x7f0000000840)="c4fdd5a874e66d83b016711957d8eef3e6b1ad51917d0e1b75c81ed56b911085267ff8b8", 0x24}], 0x6}}, {{&(0x7f00000008c0)={0xa, 0x4e24, 0x616c5089, @remote, 0x1}, 0x1c, &(0x7f0000002bc0)=[{&(0x7f0000000900)="3dd4e990d3ee050bf2fe9668c68aaf5a75a5e03f3a93f81a92358d0096eb8897748bdebcd25cfe558766a7f31551", 0x2e}, {&(0x7f0000000940)="558c25b5fdd1b11517dba5608720ef38d72a66ed96d7c66da83c0e482f7d23a3dec67017cdc6aa350f392c5a5cc096b325bb83866dc8f1864d4b71ee0d0a66ad8c63277d4e2e1147456db2b58f91146950046082d418cb073709bd8cfb33f4bf6c1b8511061e7648143e8411d0b2dc2c5fa983a2fba5e88b86a9ced381d3a709ef883bda942170a6b8ff4d822acc5853b02538b609b6d521f41bc82164e99f3a4a7941f2938ce0dd7dd50aa19c06f06dc6", 0xb1}, {0x0}, {&(0x7f0000000bc0)="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", 0x77f}, {&(0x7f0000001bc0)="bff8254e33bfd2f94ce190a1050975415255e2cb31e39b2c0cde98f2388f65a92308c17d93ac236a0fb80b9b3f06d37f63efa86efb7f2f693930b51a2a85ca172446b5bc05b960415dbdbbd7327c23a2902d4396ea9967fb9e06d739db53aa0cc26f16eb336c542aea191b91e21d27662485b7b8d1ad006d82dcbf7bdc5f10d9931db50f436ef30de01b1ded6993e00a8a3fb277f9f769a874e9d17664a8436d05f09148d2d34fb265869bf05c8fa6773ba3a6c8b2bd9b4745752826f3e596a990ee7eb3ec47d0e03699561bd18ed0c42d3cd56d85bf996c97e40b0f346fabb4936783997751bcf5a76bb62b2fcb41397e519c6eced7d486bc45189f55cfba59767cf52d433702a80fe2745b117af2bbebac746d5fc8598b1f851e4c069bea13702f68ca8234e9c1d1f91dc2785fe89d489eb7a25cb87fc6428810e4e4e56f11dc10f507d396718a8ee4028e52e37144d6fb74895d72ee5bb2855b44048244260ae2d69be2f9319395659109291d39ec19fa33ede2755c5b97522121e02995250603413fd0ed0a66874f1617d735dd03f3469e3832bf14712e3011bcc91e37b1c18401fdfab51a9c904976d123161aeaab09cdc650c00c047707f1c6ef3fc0b6d767ca6220fd32db495b7e05f71daedb7f2d052f5114672e7066b3e4825bcdd11a7ca9b83e4f62fedf6a26c62a0b954aa219ea025c0a985a98712046984b594aad24c126c98147563fce2e05f6d0d458b1097e337909487760ee9ec8eacb4e91d59f8fbc70dbf6d69edb02086fed958932cdf4dbe14f88c1cd1c1777f402a5d151583465dc6e813bfbe90f5b1ceec699c585cb0bed26aefc398cb4be5ed73b303cfc49a749306b3a3d4327614e79c3967cedad077f7d253d712e58c9988fc65df4da78c79a05e06b14a2ee6127b4a9f814ae723dbfff5644963c69419ca24d024aa902a3f19200722eea074338ecc0c7df051aec9762b1b9a368825125ce22dc5ac2f50133a5eaf61d9398d4e316a5e53c8e1f9b10216bb5b709d75b6408f642f9343c499e4522474a8d531d7863665810ccf4a2afa8f8d6e7b0e18b6e6d799b3b3362bcd6abbcfee034617cd53ec394ee54ed73e465c98ccc68f421eb8c79654730bc6b7a49ea7e10b70a7057ba8f7bceaa0d157c09478ebbaaea37771ba128f1b5676c2d9d452f2d84474643353b2422eec6023cb1f53d811488642ad6483c15bbb30e42f0cebddeaee7c639509226dcb169a970a2bb8ac05c8f2dfd388d34c6e5b8303b683ef7378ff1d029812c0ffbac7dd57f19cc23f42487d24797c586090ab646d33089e42999cbbb240de623fdbe336015e0eeb2f78a2e0cc57d13cbaab6a1fde6c8f5471e3472ac6f5eba3bd78eb0d776900082493fb479fe783cace87eceef881b87f304cd20af90420cea88986c6f08b2b650775b4a1c3baf1427dc12caee58ca44881f5d8204a1885824a408fab27ce2af3405d2fa51bb96f59afcb8b70d71164013e84a6eec3e9a68f8924c600d7fe2785ae4c49c8dcc248ca9f877634b65de0727f8e17014430c654341dbb8c376c5f7dda04dcae0929c80e948e41490848308350caf1a7f35ff2ffa4594ee2c188b672fac7d76d29187e267c66b6dd98567795a66c264fe1b92c2bf02bbc0997fc42a0c144e06e6d2ce527e68301159440055c70c047fa3c10d308b0bd515a36c812cc370dd582a93603e222047667c90801a2bf51eec7d86891390b857bd207b0c06677676fe0b3b36bcaf1650554add57fc142537a0dc2da771515b5bbb8eefdf5f1e2f6d0ebd51de4456938a3b5e020825e53b7f9f8309fc77f42df7ff61510984e8f1a2afa7d2c365b2e7990a2d5767d9ccc79da7dd67617b32291c54c72eddcbf81cc0a5d3f434dc622dcf95fe52a229c2e838e114f1327c9d76ec1a13f35db4efd8d96cdf81bca7a177a3978e6e33c3d81202caa01e55306e3d3557f8f64d10d49d01d0050caf64762a02ff6975020a77e6b7eece8c2102b012d381eae3cdf5340450f9db19bdbab4756927ed37c4f357905c94491b0ef3756c2f324e0b393ed6dc9568aa79094a4646bee458943b3f0b7257a4917a25861ad489f0d61f4c0bda87854ce9b613bdda757087f989b9043ef66747278d6846b85b9325d564a97af139ac0ae874f32d7b5c11a18ebe79c388b8fb2933cb38024114c6eb513ef0bb1c6f6a8c65001cc721aacef5e62a4650a21c644f1f068dff3d40977180be58ea230c7c17a556a40e64b0f70bdde3b6d0cfc53d703615001f64fa9a3e9eb109f3a11e32541dc4055a59b040db72de38e6d44d5ade0e68dae14ca9715614711e68c9ab0c53863714ef2d27f443c90f3660f91f0ced0fa075a8f6c38b107f4bee5dee3c8245baf219cbfa27751fe6c8ebf4ee1675653de77f00fc8f2e2c9db22fa294a45b3c26e59cf73b5981c0b6d2136e4a85f6149ea9a90390da35eafce3fb6aeb89e82a35185d8d4d864163763e98a6719deb83687c78d3bf95350a07bdb3c6188cfc4d19f6dfe7aee86ced6ad6b97187f5b950cbf5a57f395172b50e10eb3d33661025bc93095a22897b437bd2591bb13b5ce712ee14ac807968ef70f231aec6191b6f8b56c23c168d96e24ed8ba6d0f5bad58454dc8f569bf6b85fbbc43d4003dd4fac2155956b2ef36f840a7d6ee2e20bdb65e193bfa8751b0a22c7b6220d776fd01b1d1ce8cc8e6b49fae7c4aeb306753eabbe7b24618497cbc71a7da2f7dbac4dfe1447cd7d5c55889632174b146271d9736ec6fb741e6418812437ddaccc78255e7f98f2078a027bc9bd17607b4976ffc5b7c160a3571b17ab604e2e80c4b56fc214d0d1f2e92da9e60ffed7351a377b7b7561a0d9f20072b464333cdabc297c69d25372d4929bd2341ccb10a567420456927e95554dd1bbaf8a3158f4d1c5e63cad440ebc6f735ca49494ff7af8b0ba1a0e21a242fac7a5262c8de34a33688469d26acee22f10162792af66fa42e6042fcf39c7b97a9b36b46f852aba7bc6595cc387b44527b61fa447580cc8dfb6608c6fa179b6b79da88373062f35e98ad23b67be15da5564696cc73cc043d3cc51c073ed10bcc6057355d07666ef7ac7ef9415ff517f7105559a02778aaf5ba2afbf5e263e1d26f04f73b6c1416d0797c3b5b3c47c96782c2b4664b29512826a691bdc1dbdbcaeaf63c2eba3940b3c1ebf5336f6b43322ab47b89ed65dc071939669c96f504e2b9a25ae94f5ddcafd4e832a9d02115351440edf4313721e32127d4ae1c2633bd77565bd6706e46afb1b0472b051f25afd59dd28d0c1260154431fc0d73d8d0c6fbe232ae45b43b8098b540bafd6f67aa700ff090fb6f50d28fbaf0c216fa6c8457fc091f2cf00ffba17c7a38dcda4b6404961d42ff69daa0600c318b71b8b495c430700a2fb2b3339d20229bcf553924e7bc565a914c142eba7fbf11ca2862d70d45b689fd21931e58ab5073ca7be7996242a60d187575c9a404c3460a555fd763965016e3fc78e7c9b4ed104e3916d00868449e125b43368e2fda559636ce1a1724ee2fc86b01c8252857638b4da3c17e8aa5b979a569a706aba6dce6b6848caee72622641ce296ccf81aab186ecbca3b43057b5e00a303cd6b1e1f198763fc779d5230720c03e965760ece3e3c9ed3e534f12c4c7823dd1fad0bc342105496605053d66ff41fac6b4052491b920662a09943329cb905def84f6c97d50a0e88b19c5533c3c81a126a565715f9434395417a3dd5d13746831ce7e6a122322f297fbf8fc1578eb7f6fec4d606cb5d7eaccb8f7ab95926623f3e3fc105b6f384e59e391e1e39c6f04ab7011de6bdb94a54d86fbfe07f6cc5c17f9aa844104612914dce889e60c31c322f3ad1fcc24ea7da385ddac696af89744dd17be727eaa58fab90a0750105b9dbe4b1e55537f4db2460aef161fccda83d8e422f9534971a0319b3e8ac1fe79d1625ffec06d2fdad94e207874d9a0f119cc1c7edfd0ef9403ace327e729074d01c7f09c65a66e3efe6be2b039d5ac3342a8ff734cfa9190689ca2163ac668c2be4c814e17b2f85437e4bdbda403c4cfc38e5d2dce83f1f75bf05fb8292907869d9c72af93db9ea4023c89f91876ae5ab3c3a3e04733b2d00bbeb9d50ae4417e7f8346312ebc047e104c6524c9cd3b7a3fb28fbd249de9b23798ffd3ebf6e95a7fbf57ef9be741e9ef5f48fc9198d89987f04a7c433e02a3ea250e28febd08f68663ef9d3851f5baa17286a1087083a647d3e60c542b477e46c0ba9680a794ae22795706d4b3c610f8c4b01eb31c21534745ba3c2b07d99cbe86a1737ee828feb00e9deb5fa101c307d45bfc0002295b1421ae946f65c32d4102b331e6a4a13f6da51aed83c3625ca48a312d190cdd4ab5e4c5a5e5d9134fd070aac5bcc095b8c5a52e75abf1d4ddb85136fdbdc52d03432906ff1c731b312f16671fe3f5d1ee3c831007df4560ae9b0020b76e093337c3644e54913c51de7b7c01bcf03936ecf11b3480d42b0da00e5f0ddc99d2767f506a6402754fc15dd42551a29bc91f3630f3b7a44eddce4fec412d230da7873749f4a6216cfc983a750914ac28de1a89b02d55bbcbe7624bf801c8eb760231712844e249af5b74e842ad7b82c6816bf3163411467919f3223affb8562c231db8921665676243ec047aec66a1f24f8b260eb75788a806ac7eea45829f7b75b48516a9b9123c54023ad7d4bce5e21c33ec7e07dece50945030c0d6e05f9b41ad38844accc960027dbb475d94388d29686b08f1032af95516d595eb5fb0e579ab2991a9c827d8e563751f538fb1cfac3f0e659327d75c3c5df48f4f9edbe994e6ebba5901ffd8cee9744b7e3817d07556450fc400b40aff6b403a5e3c4b92ac7c8995f08e718b65cb763ca0753892f2a524cbe1a87bb56da3f94281d2f5b65088d2b48e11763840c51a403bf9564c053e14d3bca449fcfba09a66fef23d12d738de4d541dacff8eb77e0aa1d6d3cfc780b0f47e860105b3c98534b7d2354001fb9ba595e135e462cc3acb2ad3944d057d8d67f9f6014ea42ddb53c3d9083adad9032659239ab6aaaa9693e87e715c846c3af90646e174221ea3bd5e85c55665b27bb0541422e9a80297018b6d61072fefdfb1db51a17d26137680076c5754ae8cafb0b33d3e32d2f1d56c475ecea91e786b282f9527c8eaa87b496b5f9fc3e90743201437973d1f69af07327175809ad44490c54685c33b1b8dfe7cab4124adc00c39c569e68d2e4f4bc0e523e91c2855322ec4662a73504383c7739e230dc005e85dc2d0b4fed0aec31fa991c6eb984ec565c485e0cb98ef602a70f3676f8f4cf189221135765eda1c1678bbf26659c439e971e4e1d7fd2eb5cd188e70b63636e12b6870fb50d711adba866a6e0e6f382c8f6d3a3013b2b2b87be85dd14bd44cb7821e1b62fdd6ee92d4786ff1e6555499307c04ff8228e6a2a86cc3e4839df5948fdb4ff64ce90a615128d14c46b268d8afd1aa8d3cecda4d96c9d1998414d881e61732b3e5693a9e52e6a96e96dfd48b67184bd544df51dc2aeee6ca445d939f14e141c18bcb257040065131bbf7c5755afed2882b9d503a75e7921cb73dd3589f6d9ea69830f652db92b5286a9d18c8fd3ce0634ba3f3e52710960962b741e6ebf6ec3f0fd6c552d757355ddf3cce6b8b859a2cf14cd52e12ae758b5bd273f91e67b45eafb50d3aee5298c3ecb5c44cc599d62c34e19f046a42c44e9ee2d35a2a67f3605793636b66425111736b6af2c2d3e43668f4c0543", 0xfff}], 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="1000000029fd000034000000090000001000000000430000002303000010000000290000003e00000001000000"], 0x30}}], 0x2, 0x44019)
preadv(r0, 0x0, 0x0, 0x9, 0x1)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0)

2.16710021s ago: executing program 1 (id=11):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
fsopen(&(0x7f00000002c0)='nsfs\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000009500000500000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0xb00}, 0x90)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r1, r0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x482, &(0x7f0000000600)=<r4=>0x0)
r5 = syz_open_dev$dri(&(0x7f0000002380), 0xb, 0x100)
ioctl$SNAPSHOT_S2RAM(r3, 0x330b)
io_submit(r4, 0x400000000000038c, &(0x7f0000002500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x4ca2, r3, &(0x7f0000001340)="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", 0x0, 0x9b16}, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x3c7, r5, &(0x7f00000023c0)="1ad2c6de160e51d5347732954cde7feeb7a2f4d6b63d09dc0970b898c296a11ec334f41951062aa65bea509fbaf37fd9a6fd0bcd571e6a71fb081b7839c1acca6031dcc0453c46d57e3bc633da8c0c1a4277134d833f95911a813e169bac491c5cea23a772e09b532c427bf53a2c3f4b7403097e8c25015a6bc5c6823bf1d147dfcc5177d284e0cf993062e710430b15a709b5591cf571eeda89e9700d9fda37550c67a0044271bd0c29c4decf2e0fd52b082ae28d8a8792260e6b8047ebc5e530bc96e3fcd7789f61b6693425509c6394c68528c75d027a7a90a487c9d8c5a6c626e3ea9acbd43defb5836281c096d4f4f927bf", 0x0, 0x3, 0x0, 0x1, r3}])
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x9d, 0x0, &(0x7f00000003c0)=[@request_death], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$binderfs(0x0, 0x0, 0x0, 0x4843, &(0x7f0000000100)=ANY=[@ANYBLOB='max'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000500)="0a000001"})

1.672243226s ago: executing program 0 (id=12):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/1/nodeid\x00', 0x1, 0x0)
write(r3, &(0x7f00000001c0)='1\x00', 0x2)
sendmsg$NFT_BATCH(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x250, 0x16, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x1e8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'veth1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'batadv0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x536}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x34, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x47c1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x278}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000010)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
socket(0x10, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r9 = mq_open(&(0x7f00000001c0)='ba\xa5J_\xe5\xf9|a\x1dv]\x13mave_1\x00\xe0\xb2\xf0\xabT\x87I\xa4\xd4)c\xf2\xe0\xd0\xba\xdb\f\x16n\x96J\x90c\xc5~#\xc9\xfb\xef5\xab\xb9\xe8\xc7\xde\xc2\x80\f\x19L\xdb\xdc\x14\xb4\x86\x1d\xe0\x9b\xe4\"m\'+\xc8\x05\xa4\x1cT`\xdcL\x8f\xf0\xc9\xb7\xc8D\xcdWG\xe6%\xd9', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000004, 0xa, 0x3, 0x5})
mq_getsetattr(r9, &(0x7f0000001080)={0x0, 0x20000000005, 0x8001, 0x55e}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
mq_timedreceive(r9, &(0x7f0000000140)=""/107, 0x6b, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000180)={0x6, 0x100ca6d7, {}, {<r11=>0xee01}, 0x2, 0x8})
fsetxattr$security_capability(r9, &(0x7f00000000c0), &(0x7f00000001c0)=@v3={0x3000000, [{0x4, 0x5}, {0x1000, 0x419f49d}], r11}, 0x18, 0x1)

1.285695055s ago: executing program 1 (id=13):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
pread64(r0, &(0x7f0000000240)=""/164, 0x131, 0x131)
mmap(&(0x7f00004f8000/0x800000)=nil, 0x800000, 0x1000006, 0x13, r0, 0x3fd6d000)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x1000)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4c}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000100)={0x2b, 0x23, 0x0, 0xfffffffe, 0x8, 0xa9, 0x5, 0x2, 0x1})
ioctl$COMEDI_RANGEINFO(r0, 0x80086408, &(0x7f00000001c0)={0x0, &(0x7f0000000180)=[{}, {}]})
write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002b00)=@base={0x1, 0x4, 0x2, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001"], 0x50)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r0)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x190, r7, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xcf, 0x3, "77e4b9bce64aeb7ae05c4c07446112928f1917cafef972664e973191c4310e64d34f7d0a841fed11431dfa18634f6b30726f159e66b89704ebb347ec7840231b9b3dd2454a73b191d2826654f52b1a5d077410a3f9710d5198acc777cdc5aadca27513c5ddc949260b5682f386e3478dc00b276368f3792534fb43fa7cf70026134d2bfdc0411eaf875d59ccd982f3de5de53b3eeebeb157fb978afa4d2fabe6766a68f8eb29adce09e39c76c6fadbe88fda4889450fa5371fdf43315939142f207978345cfe90ee518cd1"}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2a7}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x2000}, 0x80)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101)
setresuid(0x0, 0xee00, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))

1.088238254s ago: executing program 3 (id=14):
r0 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000080), 0x101002, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'sit0\x00', &(0x7f00000005c0)={'gre0\x00', <r1=>0x0, 0x1, 0x40, 0xff, 0xff, {{0x19, 0x4, 0x1, 0x9, 0x64, 0x64, 0x0, 0x81, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @noop, @timestamp={0x44, 0x14, 0xde, 0x0, 0x3, [0x3, 0x8, 0xfffffffa, 0x1]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0xe7, [@multicast2, @dev={0xac, 0x14, 0x14, 0x10}, @empty]}, @cipso={0x86, 0x23, 0x1, [{0x0, 0xc, "1ea330e8a6f1ea209352"}, {0x6, 0x6, "195fb2c4"}, {0x6, 0xb, "63d41e116550e67ee4"}]}, @noop]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x16, &(0x7f0000000b80)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000002606080001044d004507000002000000240600000ee60000bf050000000000000f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ff2d350100000000e59400000000000000050000000000000095000000000000001f1bd182bd43cb58074e0816289328452c0880fe4b3af9c97925711095cc7d3ebcd8418ffdc4a1da470a14e4391c3fb6915cbff2a4911fe82664d775cdb95f4ab35172a74e9afe751664dd4b000000000000a4fa79303101a652776cc2fb4f01e79cd10215d917a116350d60f27fdc244bdab56ee3ad8f5fdf82027a1215bc54045d6b9f30bdebcf053aa120397695ffd0f6e5fe24ce4b9143a3d8419fb51331ca5fef"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', r1, @fallback=0x26, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x10, 0xffffffffffffffff, 0xb2993000)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000002000010000000000000000000a804008000000850000000014000200fc0200000000000000000000000000011400010020010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$radio(&(0x7f0000000180), 0x0, 0x2)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
userfaultfd(0x80000)
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x4004510d, &(0x7f0000000000))
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4)
read$char_usb(r5, &(0x7f0000000040)=""/236, 0xec)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x700, 0x0, 0x0, 0x2)

577.293182ms ago: executing program 2 (id=15):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48)
r1 = socket$kcm(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, 0x0, &(0x7f0000000680)='GPL\x00'}, 0x94)
socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mkdir(&(0x7f0000000080)='./file1\x00', 0x8)
bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
set_mempolicy(0x1, 0x0, 0x3)
mq_timedsend(r2, 0x0, 0x0, 0xa, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={0x0, &(0x7f0000000440)=""/4096, 0x0, 0x1000, 0x0, 0x71f9, 0x10000}, 0x28)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8008, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a16, 0xd, 0xfffffb9a, 0xffffbffc, 0x6, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x1, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x6, 0x1000, 0x2, 0x200, 0x2, 0x2, 0x8, 0x4, 0x2, 0x7, 0x40, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x294, 0x5, 0x0, 0x981, 0x4, 0xfd, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x2, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xf6, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x1, 0x10, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x400001, 0x3, 0x8, 0x6, 0x200, 0x3], [0x3fd, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x4, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x1000007, 0x9, 0x2, 0x20000005, 0x7d, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x207, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x5, 0xffffffff, 0x4, 0x1, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x7], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x1, 0x40, 0x2, 0x763, 0xb, 0x0, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x5, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa809, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x402, 0x1, 0x200, 0x7, 0x1004edf, 0xfefffffd, 0x4, 0xe, 0x2, 0xe, 0x11, 0x133, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
readv(r3, &(0x7f00000005c0), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f0000000080)={0x1, 0x102, 0x2, {0x0, 0x80000006, 0x3, 0xffffffff}})
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
syz_open_dev$radio(0x0, 0x1, 0x2)

426.571824ms ago: executing program 0 (id=16):
r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00')
r1 = openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0)
write(r1, &(0x7f0000000d00)='nf   12 .0.0.1 2000000000 l\\calhost\n', 0x24)

340.467671ms ago: executing program 0 (id=17):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xf000, 0x0, 0xf000, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1, 0xddccb000, 0xd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x72}, {0x10d, 0xdddd8000, 0xb, 0xe, 0x0, 0x4, 0x3, 0x20, 0x7, 0xe, 0x4, 0x6}, {0x10b002, 0x2000, 0xc, 0xe, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0xd, 0x0, 0x70, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x7, 0xa8}, {0xe000, 0x3000, 0x0, 0x4, 0xb, 0x8, 0x0, 0x0, 0x2b, 0xfc, 0x86, 0xfe}, {0x50000, 0x8000000, 0xd, 0x0, 0x5, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0x41000, 0x8, 0x82, 0x0, 0x10, 0x4, 0xe}, {0x26000}, {0x200000, 0xfffe}, 0x40008, 0x0, 0x0, 0x10, 0x1000000000000001, 0x0, 0x900, [0x0, 0x0, 0x2, 0x5]})

310.889794ms ago: executing program 1 (id=18):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x80000)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0xff, 0xfffff00c}, {0xb1, 0x20, 0x40, 0xffffefff}, {0x6, 0x0, 0x0, 0x2}]}, 0x8)
sendmmsg(r3, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9365fe5a", 0x33fe0}], 0x1}}], 0x80000af, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2})
r5 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x181000)
ioctl$MON_IOCX_MFETCH(r5, 0xc00c9207, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102)
write$cgroup_int(r8, &(0x7f0000000040)=0x8000000001cb, 0x12)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000000)={<r10=>0xffffffffffffffff}, 0x111, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r10, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e22, @local}, @ib={0x1b, 0xffff, 0x1, {"000037e45bd17505546dd1caff00"}, 0x0, 0xfffffffffffffffc, 0x96}}}, 0x118)
ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @empty}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x207, 0x0, 0x9, 0x9, 0x4})
ioctl$VIDIOC_PREPARE_BUF(r11, 0xc058565d, &(0x7f00000002c0)=@userptr={0x5, 0xa, 0x4, 0x2000, 0x8, {0x0, 0x2710}, {0x2, 0x0, 0xd5, 0x6, 0x74, 0x3, "fbebff7f"}, 0x4000ff, 0x2, {0x0}, 0x4})
r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040), 0x2, 0x6}}, 0x20)

250.249476ms ago: executing program 0 (id=19):
userfaultfd(0x801)
mkdir(&(0x7f0000000300)='./bus\x00', 0x101)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
syz_open_dev$sndctrl(&(0x7f0000000140), 0xc4, 0x200)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x10000, 0x7fff, 0x6, 0x400, 0x401, 0x9, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x3, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x20000038, 0x200, 0x1fd, 0x80, 0x800, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0x6, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x4, 0x5, 0xca, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000005000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x50)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
ftruncate(r1, 0x9)
openat(0xffffffffffffff9c, 0x0, 0x42082, 0xcd78457fbb1868dd)
fallocate(r1, 0x20002, 0x6, 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0xae8, 0x863, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x88482)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x28}}, 0x4000)
ioctl$EVIOCGREP(r4, 0x80284504, &(0x7f0000000040)=""/98)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080))
openat$nvram(0xffffff9c, &(0x7f0000000480), 0x688441, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)

180.586598ms ago: executing program 3 (id=20):
fsopen(&(0x7f0000000100)='udf\x00', 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000002280)=0x6)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x2ac65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000002c0)="91f8a9", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748", 0xa}], 0x1}}], 0x2, 0x0)
ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0)

26.918493ms ago: executing program 0 (id=21):
syz_ublk_setup_io_uring(0xd61, &(0x7f0000000280)={0x0, 0xdf75, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=<r0=>0x0, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180))
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0xdf)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0)
write(r3, &(0x7f0000000440)='44100,48000,88200,96000,176400,192000,352+00,3', 0x2e)
symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000000640)='usbip-', 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xf, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x5, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b8, 0x0, 0xfffffff8]})
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8)
setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4)
sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="fffffffffffffdf9a684a51b86dd600c7a00d8c225ccd109a27f3291082000183afffe800000000000e700000000000000bbfe8000000000000000000000000000aa8800907800000000fe800000"], 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x400000, 0x5, 0x0, 0x32525942, 0xc, [{0x6, 0xfffffffe}, {}, {0x2, 0x8}, {0x1, 0xfffffffc}, {0x80}, {}, {0xffffc33a}, {0x200}], 0x3, 0xfe, 0x0, 0x0, 0x5}})
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)

0s ago: executing program 1 (id=22):
r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000140)={0x2, @raw_data="f0aaee3b7b1d1d8b98768b307642b2e16c5b0764110fbdccde2a214ac3cc553d7fdbb7d96dcab30c468a3d6eb0bedb5e9ce2cae9ce78b058c53bfb39d123be5d115c5ed7f697d35495b83ac831518d5caa3357bf5b5c46f55cb667ac7d8822a7eee4b30a2bb7de4fda1ebddfd60700d8a02e6c09a1c3040ad7f014e8b7c69faa7382c459a4d833de4eb17f97408005530ba3d22bdb3b1f4bfbc75b9ee50f4c5a56769dabf18cbe9b05432a0205bbf802675ee49376be256c0dba4ce21e933a7c2b1780f2478b83c1"})
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd700001dcdf25070000000a00040077706162310000000c00060001000000010000000c0017000200aaaaaaaaaaaa080003001d"], 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x40080)
sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r4, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r8, 0xc048aeca, &(0x7f0000000340)={0x3, 0x0, [{0x119, 0x0, 0x10000}, {0xb2e, 0x0, 0x39294324}, {0x1df, 0x0, 0x100000000}]})
setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r9, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x1b, 0x2}, &(0x7f00000003c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r10 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x80681, 0x0)
pwrite64(r10, &(0x7f0000000080)="625430c10d", 0xff3c, 0x100000001)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0xe04848848bd3bc38, 0xffffffffffffffff, 0x0)
ioctl$FITHAW(r9, 0xc0045878)
setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r9, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff63)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20008000)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x1}, 0x1c)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010029bf70000200004b45dc0780180001defdadf6000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:16793' (ED25519) to the list of known hosts.
[   42.443586][ T5726] cgroup: Unknown subsys name 'net'
[   42.617599][ T5726] cgroup: Unknown subsys name 'cpuset'
[   42.622146][ T5726] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.540077][ T5726] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   47.077199][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   47.082352][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   47.087315][ T5748] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   47.095628][ T5748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   47.099820][ T5759] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   47.100597][ T5759] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   47.103431][ T5756] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   47.108179][ T5759] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   47.111276][ T5756] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   47.112145][ T5761] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   47.113518][ T5761] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   47.117262][ T5756] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   47.119280][ T5759] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   47.119930][ T5761] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   47.120461][ T5756] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   47.120609][ T5761] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   47.122034][ T5761] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   47.122586][ T5761] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.126284][ T5759] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   47.148974][ T5759] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   47.741660][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.744786][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.747945][ T5746] bridge_slave_0: entered allmulticast mode
[   47.751818][ T5746] bridge_slave_0: entered promiscuous mode
[   47.792820][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.795255][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.797553][ T5746] bridge_slave_1: entered allmulticast mode
[   47.800212][ T5746] bridge_slave_1: entered promiscuous mode
[   47.821585][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.824674][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.827617][ T5749] bridge_slave_0: entered allmulticast mode
[   47.831326][ T5749] bridge_slave_0: entered promiscuous mode
[   47.856250][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.858589][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.860871][ T5749] bridge_slave_1: entered allmulticast mode
[   47.863576][ T5749] bridge_slave_1: entered promiscuous mode
[   47.869766][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.872769][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.875111][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.877424][ T5750] bridge_slave_0: entered allmulticast mode
[   47.880062][ T5750] bridge_slave_0: entered promiscuous mode
[   47.883170][ T5757] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.885617][ T5757] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.887896][ T5757] bridge_slave_0: entered allmulticast mode
[   47.890527][ T5757] bridge_slave_0: entered promiscuous mode
[   47.901818][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.910115][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.912589][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.915808][ T5750] bridge_slave_1: entered allmulticast mode
[   47.918517][ T5750] bridge_slave_1: entered promiscuous mode
[   47.927300][ T5757] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.930222][ T5757] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.933103][ T5757] bridge_slave_1: entered allmulticast mode
[   47.937154][ T5757] bridge_slave_1: entered promiscuous mode
[   47.969585][ T5750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.974161][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.980192][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.984295][ T5746] team0: Port device team_slave_0 added
[   47.997258][ T5750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.019524][ T5746] team0: Port device team_slave_1 added
[   48.024434][ T5757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.034943][ T5749] team0: Port device team_slave_0 added
[   48.044529][ T5757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.049775][ T5750] team0: Port device team_slave_0 added
[   48.052709][ T5749] team0: Port device team_slave_1 added
[   48.072566][ T5750] team0: Port device team_slave_1 added
[   48.086776][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.089013][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.097104][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.140426][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.143636][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.154662][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.161492][ T5757] team0: Port device team_slave_0 added
[   48.165051][ T5757] team0: Port device team_slave_1 added
[   48.167238][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.169694][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.177700][ T5750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.182821][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.185825][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.196192][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.213318][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.216016][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.224027][ T5750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.228173][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.230909][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.240414][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.264908][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.267168][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.275439][ T5757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.279899][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.282211][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.292099][ T5757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.326487][ T5749] hsr_slave_0: entered promiscuous mode
[   48.328824][ T5749] hsr_slave_1: entered promiscuous mode
[   48.341054][ T5746] hsr_slave_0: entered promiscuous mode
[   48.343313][ T5746] hsr_slave_1: entered promiscuous mode
[   48.346013][ T5746] debugfs: 'hsr0' already exists in 'hsr'
[   48.347890][ T5746] Cannot create hsr debugfs directory
[   48.373660][ T5750] hsr_slave_0: entered promiscuous mode
[   48.376033][ T5750] hsr_slave_1: entered promiscuous mode
[   48.378940][ T5750] debugfs: 'hsr0' already exists in 'hsr'
[   48.380818][ T5750] Cannot create hsr debugfs directory
[   48.395436][ T5757] hsr_slave_0: entered promiscuous mode
[   48.398127][ T5757] hsr_slave_1: entered promiscuous mode
[   48.400259][ T5757] debugfs: 'hsr0' already exists in 'hsr'
[   48.402058][ T5757] Cannot create hsr debugfs directory
[   48.702501][ T5749] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.710310][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.713379][ T5749] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.717763][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.720499][ T5749] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.726148][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.729584][ T5749] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.733518][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.782697][ T5746] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.789455][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.792808][ T5746] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.797177][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.799974][ T5746] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.804156][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.807160][ T5746] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.811819][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.869446][ T5750] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.876145][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.878895][ T5750] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.883145][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.886527][ T5750] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.891092][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.899451][ T5750] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.903657][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.969518][ T5757] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   48.973623][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.978146][ T5757] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   48.982764][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.986868][ T5757] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   48.991999][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.994999][ T5757] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   48.998715][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.004525][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.053998][ T5749] 8021q: adding VLAN 0 to HW filter on device team0
[   49.067534][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.077475][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.080521][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.093714][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.096974][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.113807][ T5746] 8021q: adding VLAN 0 to HW filter on device team0
[   49.133489][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.135865][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.143991][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.146333][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.165010][ T5753] Bluetooth: hci0: command tx timeout
[   49.165014][ T5756] Bluetooth: hci1: command tx timeout
[   49.165316][ T5759] Bluetooth: hci2: command tx timeout
[   49.174023][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.200877][ T5750] 8021q: adding VLAN 0 to HW filter on device team0
[   49.211112][ T5757] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.217481][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.219842][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.230827][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.233665][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.245065][ T5759] Bluetooth: hci3: command tx timeout
[   49.250492][ T5757] 8021q: adding VLAN 0 to HW filter on device team0
[   49.270058][  T207] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.272515][  T207] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.282251][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.284978][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.487374][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.520088][ T5749] veth0_vlan: entered promiscuous mode
[   49.532839][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.538526][ T5749] veth1_vlan: entered promiscuous mode
[   49.543932][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.558967][ T5757] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.579379][ T5749] veth0_macvtap: entered promiscuous mode
[   49.588724][ T5749] veth1_macvtap: entered promiscuous mode
[   49.609892][ T5750] veth0_vlan: entered promiscuous mode
[   49.618790][ T5746] veth0_vlan: entered promiscuous mode
[   49.624752][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.629125][ T5750] veth1_vlan: entered promiscuous mode
[   49.637123][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.645207][ T5746] veth1_vlan: entered promiscuous mode
[   49.660295][ T5757] veth0_vlan: entered promiscuous mode
[   49.669534][ T5757] veth1_vlan: entered promiscuous mode
[   49.687708][ T5750] veth0_macvtap: entered promiscuous mode
[   49.696977][ T5750] veth1_macvtap: entered promiscuous mode
[   49.732156][ T5746] veth0_macvtap: entered promiscuous mode
[   49.738581][  T207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.743257][ T5757] veth0_macvtap: entered promiscuous mode
[   49.743430][  T207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.748009][ T5746] veth1_macvtap: entered promiscuous mode
[   49.751960][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.759892][ T5757] veth1_macvtap: entered promiscuous mode
[   49.768144][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.799471][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.802281][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.803228][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.813689][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.835159][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.840105][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.853919][ T5749] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.860091][  T207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.864075][  T207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.864160][ T5749] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   49.876412][ T5749] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   49.881710][ T5749] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   49.897012][ T5749] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   49.904210][  T207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.906955][  T207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.968257][  T207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.972398][  T207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.008781][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.019842][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.022616][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.029740][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.061441][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.064997][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.069553][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.073087][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.095507][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.099415][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.116086][ T5905] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3'.
[   50.125126][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.132651][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.136140][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.139089][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.141920][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.145068][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.148208][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.148271][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.154147][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.164949][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.171024][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.176508][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.231450][ T5908] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   50.232031][ T5912] futex_wake_op: syz.1.2 tries to shift op by -1; fix this program
[   50.293916][ T5908] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref]
[   50.298114][ T5908] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff]
[   50.302889][ T5908] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   50.309768][ T5908] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   50.342474][ T5908] pci 0000:00:01.0: Adding to iommu group 1
[   50.372361][ T5908] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   50.374507][ T5908] pci 0000:00:01.0: vgaarb: bridge control possible
[   50.376585][ T5908] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   50.406821][ T5908] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   50.420466][ T5908] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   50.431318][ T5908] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   50.449468][ T5908] [drm] Found bochs VGA, ID 0xb0c5.
[   50.451524][ T5908] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   50.521946][ T5908] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[   50.672410][ T5908] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[   51.248385][ T5759] Bluetooth: hci0: command tx timeout
[   51.250492][ T5759] Bluetooth: hci2: command tx timeout
[   51.252368][ T5759] Bluetooth: hci1: command tx timeout
[   51.329277][ T5759] Bluetooth: hci3: command tx timeout
[   51.449964][ T5935] trusted_key: encrypted_key: keylen parameter is missing
[   51.754937][ T5939] binder: 5938:5939 ioctl 330b 0 returned -22
[   51.772062][ T5939] binder: 5938:5939 unknown command 0
[   51.774124][ T5939] binder: 5938:5939 ioctl c0306201 800004c0 returned -22
[   51.786021][ T5939] devpts: Bad value for 'max'
[   52.471861][ T5956] mmap: syz.1.13 (5956) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   52.543522][ T5957] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13'.
[   52.648776][   T42] audit: type=1326 audit(1785618150.467:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.1.13" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe5fec code=0x0
[   53.205739][ T5966] input: syz1 as /devices/virtual/input/input5
[   53.325913][ T5759] Bluetooth: hci1: command tx timeout
[   53.327644][ T5759] Bluetooth: hci2: command tx timeout
[   53.329282][ T5756] Bluetooth: hci0: command tx timeout
[   53.404843][ T5759] Bluetooth: hci3: command tx timeout
[   53.592102][ T5973] block device autoloading is deprecated and will be removed.
[   53.678974][ T5980] ==================================================================
[   53.682214][ T5980] BUG: KASAN: invalid-free in f_uac2_opts_p_srate_store+0x1d4/0x260
[   53.685015][ T5980] Free of addr ffff88804ea53b2d by task syz.0.21/5980
[   53.688141][ T5980] 
[   53.689834][ T5980] CPU: 0 UID: 0 PID: 5980 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(full) 
[   53.689858][ T5980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   53.689869][ T5980] Call Trace:
[   53.689886][ T5980]  <TASK>
[   53.689894][ T5980]  dump_stack_lvl+0x100/0x190
[   53.689984][ T5980]  print_report+0x13d/0x4b0
[   53.690018][ T5980]  ? __virt_addr_valid+0x239/0x430
[   53.690056][ T5980]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[   53.690075][ T5980]  kasan_report_invalid_free+0xb8/0x190
[   53.690111][ T5980]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[   53.690129][ T5980]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[   53.690148][ T5980]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[   53.690166][ T5980]  check_slab_allocation+0xe1/0xf0
[   53.690181][ T5980]  ? f_uac2_opts_p_srate_store+0x100/0x260
[   53.690199][ T5980]  kfree+0x1b6/0x6c0
[   53.690215][ T5980]  ? __asan_memcpy+0x3c/0x60
[   53.690228][ T5980]  f_uac2_opts_p_srate_store+0x1d4/0x260
[   53.690246][ T5980]  ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10
[   53.690264][ T5980]  ? configfs_write_iter+0x388/0x4e0
[   53.690312][ T5980]  configfs_write_iter+0x302/0x4e0
[   53.690324][ T5980]  vfs_write+0x6ac/0x1050
[   53.690345][ T5980]  ? __pfx_configfs_write_iter+0x10/0x10
[   53.690361][ T5980]  ? __pfx_vfs_write+0x10/0x10
[   53.690376][ T5980]  ? find_held_lock+0x2b/0x80
[   53.690412][ T5980]  ksys_write+0x12a/0x250
[   53.690423][ T5980]  ? __pfx_ksys_write+0x10/0x10
[   53.690436][ T5980]  __do_fast_syscall_32+0xe7/0x970
[   53.690498][ T5980]  do_fast_syscall_32+0x32/0x70
[   53.690522][ T5980]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   53.690546][ T5980] RIP: 0023:0xf7f17fec
[   53.690567][ T5980] Code: Unable to access opcode bytes at 0xf7f17fc2.
[   53.690590][ T5980] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[   53.690608][ T5980] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000440
[   53.690620][ T5980] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000000
[   53.690631][ T5980] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   53.690642][ T5980] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   53.690653][ T5980] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   53.690670][ T5980]  </TASK>
[   53.690676][ T5980] 
[   53.759439][ T5980] Allocated by task 5980:
[   53.760737][ T5980]  kasan_save_stack+0x30/0x50
[   53.762151][ T5980]  kasan_save_track+0x14/0x30
[   53.763569][ T5980]  __kasan_kmalloc+0xaa/0xb0
[   53.764952][ T5980]  __kmalloc_node_track_caller_noprof+0x331/0x830
[   53.766847][ T5980]  kstrdup+0x51/0xe0
[   53.768044][ T5980]  f_uac2_opts_p_srate_store+0x113/0x260
[   53.769694][ T5980]  configfs_write_iter+0x302/0x4e0
[   53.771246][ T5980]  vfs_write+0x6ac/0x1050
[   53.772539][ T5980]  ksys_write+0x12a/0x250
[   53.773838][ T5980]  __do_fast_syscall_32+0xe7/0x970
[   53.775381][ T5980]  do_fast_syscall_32+0x32/0x70
[   53.776847][ T5980]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   53.778703][ T5980] 
[   53.779469][ T5980] The buggy address belongs to the object at ffff88804ea53b00
[   53.779469][ T5980]  which belongs to the cache kmalloc-64 of size 64
[   53.783424][ T5980] The buggy address is located 45 bytes inside of
[   53.783424][ T5980]  47-byte region [ffff88804ea53b00, ffff88804ea53b2f)
[   53.787186][ T5980] 
[   53.787918][ T5980] The buggy address belongs to the physical page:
[   53.789803][ T5980] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4ea53
[   53.792387][ T5980] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[   53.794485][ T5980] page_type: f5(slab)
[   53.795729][ T5980] raw: 04fff00000000000 ffff88801bc428c0 dead000000000100 dead000000000122
[   53.798390][ T5980] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000
[   53.801049][ T5980] page dumped because: kasan: bad access detected
[   53.803053][ T5980] page_owner tracks the page as allocated
[   53.804810][ T5980] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5965, tgid 5964 (syz.2.15), ts 53565713867, free_ts 50506115171
[   53.811032][ T5980]  post_alloc_hook+0xfd/0x120
[   53.812517][ T5980]  get_page_from_freelist+0xf48/0x3530
[   53.814217][ T5980]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[   53.816081][ T5980]  new_slab+0xa2/0x640
[   53.817385][ T5980]  refill_objects+0xe3/0x410
[   53.818861][ T5980]  __pcs_replace_empty_main+0x376/0x680
[   53.820583][ T5980]  __kmalloc_node_noprof+0x681/0x830
[   53.822127][ T5980]  load_msg+0x43/0x4a0
[   53.823379][ T5980]  do_mq_timedsend+0x3ce/0xc40
[   53.824772][ T5980]  __ia32_sys_mq_timedsend_time32+0x1cd/0x260
[   53.826567][ T5980]  do_int80_emulation+0x14b/0x720
[   53.828038][ T5980]  asm_int80_emulation+0x1a/0x20
[   53.829493][ T5980] page last free pid 5749 tgid 5749 stack trace:
[   53.831345][ T5980]  __free_frozen_pages+0x79f/0x1090
[   53.832864][ T5980]  qlist_free_all+0x47/0xf0
[   53.834179][ T5980]  kasan_quarantine_reduce+0x1a0/0x1f0
[   53.835777][ T5980]  __kasan_slab_alloc+0x69/0x90
[   53.837225][ T5980]  __kmalloc_noprof+0x2bf/0x820
[   53.838661][ T5980]  tomoyo_encode2+0xfb/0x3c0
[   53.840076][ T5980]  tomoyo_encode+0x29/0x50
[   53.841373][ T5980]  tomoyo_realpath_from_path+0x18c/0x690
[   53.843016][ T5980]  tomoyo_path_perm+0x276/0x460
[   53.844422][ T5980]  security_inode_getattr+0x116/0x280
[   53.845973][ T5980]  vfs_statx+0x11f/0x3f0
[   53.847224][ T5980]  do_statx+0xf1/0x170
[   53.848415][ T5980]  __ia32_sys_statx+0x140/0x1f0
[   53.849835][ T5980]  __do_fast_syscall_32+0xe7/0x970
[   53.851353][ T5980]  do_fast_syscall_32+0x32/0x70
[   53.852764][ T5980]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   53.854572][ T5980] 
[   53.855306][ T5980] Memory state around the buggy address:
[   53.856914][ T5980]  ffff88804ea53a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   53.859212][ T5980]  ffff88804ea53a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   53.861489][ T5980] >ffff88804ea53b00: 00 00 00 00 00 07 fc fc fc fc fc fc fc fc fc fc
[   53.863787][ T5980]                                   ^
[   53.865340][ T5980]  ffff88804ea53b80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   53.867636][ T5980]  ffff88804ea53c00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   53.869964][ T5980] ==================================================================
[   53.875450][ T5980] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   53.877599][ T5980] CPU: 1 UID: 0 PID: 5980 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(full) 
[   53.880221][ T5980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   53.883165][ T5980] Call Trace:
[   53.884251][ T5980]  <TASK>
[   53.885179][ T5980]  dump_stack_lvl+0x100/0x190
[   53.886595][ T5980]  vpanic+0x552/0x970
[   53.887799][ T5980]  ? __pfx_vpanic+0x10/0x10
[   53.889170][ T5980]  ? mark_held_locks+0x40/0x70
[   53.890640][ T5980]  panic+0xd1/0xe0
[   53.891798][ T5980]  ? __pfx_panic+0x10/0x10
[   53.893163][ T5980]  ? preempt_schedule_common+0x42/0xc0
[   53.894826][ T5980]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[   53.896701][ T5980]  check_panic_on_warn.cold+0x19/0x34
[   53.898382][ T5980]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[   53.900173][ T5980]  end_report.part.0+0x3a/0x90
[   53.901636][ T5980]  kasan_report_invalid_free.cold+0xd/0x12
[   53.903426][ T5980]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[   53.905169][ T5980]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[   53.906895][ T5980]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[   53.908621][ T5980]  check_slab_allocation+0xe1/0xf0
[   53.910203][ T5980]  ? f_uac2_opts_p_srate_store+0x100/0x260
[   53.912411][ T5980]  kfree+0x1b6/0x6c0
[   53.913705][ T5980]  ? __asan_memcpy+0x3c/0x60
[   53.915170][ T5980]  f_uac2_opts_p_srate_store+0x1d4/0x260
[   53.916941][ T5980]  ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10
[   53.918903][ T5980]  ? configfs_write_iter+0x388/0x4e0
[   53.920564][ T5980]  configfs_write_iter+0x302/0x4e0
[   53.922165][ T5980]  vfs_write+0x6ac/0x1050
[   53.923591][ T5980]  ? __pfx_configfs_write_iter+0x10/0x10
[   53.925387][ T5980]  ? __pfx_vfs_write+0x10/0x10
[   53.926896][ T5980]  ? find_held_lock+0x2b/0x80
[   53.928387][ T5980]  ksys_write+0x12a/0x250
[   53.929762][ T5980]  ? __pfx_ksys_write+0x10/0x10
[   53.931298][ T5980]  __do_fast_syscall_32+0xe7/0x970
[   53.932906][ T5980]  do_fast_syscall_32+0x32/0x70
[   53.934425][ T5980]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   53.936318][ T5980] RIP: 0023:0xf7f17fec
[   53.937615][ T5980] Code: Unable to access opcode bytes at 0xf7f17fc2.
[   53.939697][ T5980] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[   53.942275][ T5980] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000440
[   53.944718][ T5980] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000000
[   53.947162][ T5980] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   53.949496][ T5980] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   53.951815][ T5980] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   53.954116][ T5980]  </TASK>
[   53.955568][ T5980] Kernel Offset: disabled
[   53.956839][ T5980] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:02:31  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85a131f5 RDI=ffffffff9b9f71a0 RBP=ffffffff9b9f7160 RSP=ffffc900063a7598
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2065657246
R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b6f7221 R15=ffffffff85a13190
RIP=ffffffff85a1321f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096bdf000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000f73943e4 CR3=000000006f5ce000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=dffffc0000000000 RBX=ffff88802487ef00 RCX=1ffffffff36e70c0 RDX=1ffff11005520c01
RSI=ffffffff8c400a00 RDI=ffff88802a906008 RBP=ffff88802a905410 RSP=ffffc90006487e40
R8 =0000000000000000 R9 =fffffbfff224561a R10=ffffffff9122b0d7 R11=0000000000000000
R12=ffff88802a904a80 R13=0000000100000000 R14=00000000f548b97c R15=0000000000000000
RIP=ffffffff8bbc52e0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096cdf000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000f71fe9ea CR3=000000006deb8000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=0000000000000015 RCX=dffffc0000000000 RDX=ffff888028b9ca80
RSI=ffffffff85267a46 RDI=ffff888028b9ca80 RBP=0000000000000012 RSP=ffffc90003947190
R8 =0000000000000005 R9 =0000000000000004 R10=0000000000000002 R11=0000000000000000
R12=ffffffff8c403596 R13=ffff888070e028b4 R14=0000000000000002 R15=000000000000e7ec
RIP=ffffffff8209ae3f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff0c1769300 ffffffff 00c00000
GS =0000 ffff888096ddf000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055ac5bc65000 CR3=000000005196e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000001e 0000001400000000 0000000000000000 0000000000000017
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffdf080280030008 0002080014080006 0074920c00000188 0000000500000001
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000001ffffff ffffffffffe50803 8403000200038203
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03f8020003800340 0800028002400800 5208000100000008 060a016ffc000800
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02b80300040002b4 0300040002b00302 040002ac03060200 02aa0300020002a8
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 032080080002a003 0200000000000000 0000000000000120 01ffffffffffffff
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000eb4030004000e b0030404000eac03 0202000eaa030002 000ea80320800800
ZMM25=5a294bc05a294bc0 5a294bc05a294bc0 5a294bc05a294bc0 5a294bc05a294bc0 5a294bc05a294bc0 5a294bc05a294bc0 5a294bc05a294bc0 5a294bc05a294bc0
ZMM26=1a55d53d1a55d53d 1a55d53d1a55d53d 1a55d53d1a55d53d 1a55d53d1a55d53d 1a55d53d1a55d53d 1a55d53d1a55d53d 1a55d53d1a55d53d 1a55d53d1a55d53d
ZMM27=6be3c4b46be3c4b4 6be3c4b46be3c4b4 6be3c4b46be3c4b4 6be3c4b46be3c4b4 6be3c4b46be3c4b4 6be3c4b46be3c4b4 6be3c4b46be3c4b4 6be3c4b46be3c4b4
ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0404000004040000 0404000004040000 0404000004040000 0404000004040000 0404000004040000 0404000004040000 0404000004040000 0404000004040000
info registers vcpu 3

CPU#3
RAX=000000000006749b RBX=0000000000000000 RCX=ffffc90007711000 RDX=0000000000080000
RSI=ffffffff81fd1d2c RDI=ffff88804b602540 RBP=ffff88802b2433a0 RSP=ffffc900062c7a38
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=0000000000000003 R13=ffffed1005648675 R14=0000000000000001 R15=ffff88802b53c9c0
RIP=ffffffff8209ae60 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096edf000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000f73a5e9c CR3=0000000043689000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000