last executing test programs:

6m39.70955586s ago: executing program 1 (id=661):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x49)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@mpls_getroute={0x30, 0x1a, 0x1, 0x70bd2d, 0x25dfdbfc, {0x1c, 0x0, 0x10, 0x3, 0xfc, 0x2, 0x0, 0xa, 0xe00}, [@RTA_VIA={0x14, 0x12, {0x3, "4923396d223b2bc3af5f2dae0487"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404801c}, 0x4000080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$zero(0xffffff9c, &(0x7f0000000280), 0xc40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$FUSE(r1, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x4, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]})
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x3)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
fsetxattr(r0, &(0x7f0000000a40)=@known='security.selinux\x00', 0x0, 0x0, 0x0)
fgetxattr(r0, &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x24, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x5, 0xb, 0x101, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r0, 0x1, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x2, 0x0, 0xc, 0xa}, {0x0, 0x4, 0x9, 0x4}, {0x0, 0x4, 0xe}, {0x3, 0x2, 0x7, 0x6}, {0x5, 0x1, 0x8, 0x6}], 0x10, 0x80}, 0x94)
r4 = openat(r0, &(0x7f0000000000)='./cgroup.cpu/test/cgroup.procs\x00', 0x412600, 0x80)
write(r4, &(0x7f0000000280)='0', 0x1)

6m38.209057673s ago: executing program 1 (id=663):
openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0)
openat$dlm_monitor(0xffffff9c, &(0x7f0000000180), 0x129000, 0x0)
syz_open_dev$vcsu(&(0x7f00000001c0), 0x9e, 0x101000)
ioctl$COMEDI_CANCEL(0xffffffffffffffff, 0x6407)
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x4, 0x62400)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, 0x0)
rseq(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000003c0)=0x7)
r1 = syz_open_dev$media(&(0x7f0000000400), 0x0, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, 0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000100))
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
kexec_load(0x80, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x40000000, 0x2000000}], 0xa0000)
rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x1, 0x0)

6m37.268143065s ago: executing program 1 (id=669):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0)
openat$rdma_cm(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0xb270e90db6ebcac8, 0x3}}, 0x20)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x50, r0, 0xc1484000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newtaction={0x24c, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x238, 0x1, [@m_ife={0x118, 0x1, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x2}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x1000}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0x9, 0x3}}}]}, {0x7c, 0x6, "ce349e2d28fe07f70bdc86016dff000000e11a4b32c02ad4f4059db9159ab7df85d89205891c91cff8e5df4207742dc230f120c6acdddbc58ac77f0452fb0fcbbe5f62194cad617ef751f8c7a2bef9a0ab86d4d9275e0c3833eff2e5af4405c3d67ae1f173bc2f9636cdb3c25e76fb24bc8c429e9ca50a13"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x11c, 0x14, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x29}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x100}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8001}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x17b2e6ed}]}, {0xbe, 0x6, "7f1d342f0d6ea7d6753d1e556fdd6016049253df85fad2680681fc27e6b41c76d318ea907d8f0579ce96ef72c07ad097d7ff3bd1b7c3b06fb8c65468898a3eb85084f7b5a96ae07d4ab8f7569d36f55b5fa45e258398aa7c5f71a492bdc66f41b78ff45a4ddd4d5df5a52fb38a530b04b93b2f952a8ea845b635b0bd8011cce43f43366a16f24f4d3668e3abf2d9f8e5d3474dc5dfed07aa27ff4be62d2d038593c958dbf78bafbf690f24707d8069864c41bbfdb1ad1dfadfa5"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x804}, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5)
setreuid(0xee00, 0x0)
write$sequencer(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f00000004c0), 0x1200004, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xf000, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x13)
r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0, 0x0)
sendfile(r3, r3, 0x0, 0x7f03)
unshare(0x6a040000)
mmap(&(0x7f00002ff000/0x1000)=nil, 0x1000, 0x2000004, 0xe7ee32aa24a8b8f2, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000c7ddc80597327e6cdfdcc42c866ed3788ef82fe7ded92b3099bd5c54be07049986c1794d3f3df6f7219675cd692a17b352b5795131935e51e9e63c133bade540bd70403c99d88cce4da9"], 0x50)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)

6m33.888179624s ago: executing program 1 (id=679):
openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0)
openat$dlm_monitor(0xffffff9c, &(0x7f0000000180), 0x129000, 0x0)
syz_open_dev$vcsu(&(0x7f00000001c0), 0x9e, 0x101000)
ioctl$COMEDI_CANCEL(0xffffffffffffffff, 0x6407)
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x4, 0x62400)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, 0x0)
rseq(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000003c0)=0x7)
r1 = syz_open_dev$media(&(0x7f0000000400), 0x0, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, 0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000100))
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
kexec_load(0x80, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x40000000, 0x2000000}], 0xa0000)
rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x1, 0x0)

6m32.568680297s ago: executing program 1 (id=685):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="c1dfb080cd21d308098e000088a8", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = openat$cdrom(0xffffff9c, &(0x7f00000000c0), 0xc00, 0x0)
ioctl$CDROMPLAYMSF(r2, 0x5303, &(0x7f0000000180)={0x6, 0x40, 0x3b, 0x6, 0x0, 0x6})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x801, 0x109)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r5 = dup(r4)
getsockname$inet(r5, 0x0, &(0x7f00000000c0))
write(r3, &(0x7f00000005c0)='1', 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000000))

6m32.354856408s ago: executing program 1 (id=687):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0)
openat$rdma_cm(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0xb270e90db6ebcac8, 0x3}}, 0x20)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x50, r0, 0xc1484000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newtaction={0x24c, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x238, 0x1, [@m_ife={0x118, 0x1, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x2}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x1000}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0x9, 0x3}}}]}, {0x7c, 0x6, "ce349e2d28fe07f70bdc86016dff000000e11a4b32c02ad4f4059db9159ab7df85d89205891c91cff8e5df4207742dc230f120c6acdddbc58ac77f0452fb0fcbbe5f62194cad617ef751f8c7a2bef9a0ab86d4d9275e0c3833eff2e5af4405c3d67ae1f173bc2f9636cdb3c25e76fb24bc8c429e9ca50a13"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x11c, 0x14, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x29}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x100}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8001}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x17b2e6ed}]}, {0xbe, 0x6, "7f1d342f0d6ea7d6753d1e556fdd6016049253df85fad2680681fc27e6b41c76d318ea907d8f0579ce96ef72c07ad097d7ff3bd1b7c3b06fb8c65468898a3eb85084f7b5a96ae07d4ab8f7569d36f55b5fa45e258398aa7c5f71a492bdc66f41b78ff45a4ddd4d5df5a52fb38a530b04b93b2f952a8ea845b635b0bd8011cce43f43366a16f24f4d3668e3abf2d9f8e5d3474dc5dfed07aa27ff4be62d2d038593c958dbf78bafbf690f24707d8069864c41bbfdb1ad1dfadfa5"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x804}, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5)
setreuid(0xee00, 0x0)
write$sequencer(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f00000004c0), 0x1200004, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xf000, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x13)
r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0, 0x0)
sendfile(r3, r3, 0x0, 0x7f03)
unshare(0x6a040000)
mmap(&(0x7f00002ff000/0x1000)=nil, 0x1000, 0x2000004, 0xe7ee32aa24a8b8f2, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000c7ddc80597327e6cdfdcc42c866ed3788ef82fe7ded92b3099bd5c54be07049986c1794d3f3df6f7219675cd692a17b352b5795131935e51e9e63c133bade540bd70403c99d88cce4da9"], 0x50)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)

6m23.551297316s ago: executing program 3 (id=707):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d800000018", 0x5}], 0x1}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r4, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x38}}, 0x0)

6m23.263376769s ago: executing program 3 (id=709):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c000700000000000000000008000900000000"], 0x4c}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x8000000004)
mkdir(&(0x7f0000000280)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0xc)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='1\x00', 0x1)

6m23.119817702s ago: executing program 3 (id=710):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c000700000000000000000008000900000000"], 0x4c}}, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
mkdir(&(0x7f0000000280)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0xc)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r3, &(0x7f00000000c0)='1\x00', 0x1)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000003c0)={0xd2, 0x405, 0x87, "757ec1471be8f8f93fd5e142eaf9cfd60c3eeb2be0de6a65860fd51df7bd4ad05d2e47a4311d59ff71b7393433e9fa5814913b02c46958961dab41eaf5ff41f17906ce0883498e542d5689f2f724a3c9346fe51101a197d212796eef655ff935f473d81a011e607a31ec47095549b6e20190e5b9daaecaeb7f7ecfdb47dd6e711ed28f125f5748bd051bb4c2d4ad915259138e07f79a13c528babbdccb83e2c92aa54006e802a791042ff39a41bfde9ba4956a744d2a33b938a9a4c73cb3cca453dd7340fd3e51ac63fbc7636be0027ae0f6"})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r5, &(0x7f00000001c0)='1\x00', 0x1)

6m22.048662431s ago: executing program 3 (id=713):
syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)='W', 0x1}], 0x1, 0x8000, 0x7)
close(r0)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)

6m21.319550892s ago: executing program 3 (id=715):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="c1dfb080cd21d308098e000088a8", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = openat$cdrom(0xffffff9c, &(0x7f00000000c0), 0xc00, 0x0)
ioctl$CDROMPLAYMSF(r2, 0x5303, &(0x7f0000000180)={0x6, 0x40, 0x3b, 0x6, 0x0, 0x6})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x801, 0x109)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r5 = dup(r4)
getsockname$inet(r5, 0x0, &(0x7f00000000c0))
write(r3, &(0x7f00000005c0)='1', 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000000))

6m20.955892414s ago: executing program 3 (id=717):
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x33, 0x800000000004}, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)

6m17.350095473s ago: executing program 32 (id=687):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0)
openat$rdma_cm(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0xb270e90db6ebcac8, 0x3}}, 0x20)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x50, r0, 0xc1484000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newtaction={0x24c, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x238, 0x1, [@m_ife={0x118, 0x1, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x2}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x1000}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0x9, 0x3}}}]}, {0x7c, 0x6, "ce349e2d28fe07f70bdc86016dff000000e11a4b32c02ad4f4059db9159ab7df85d89205891c91cff8e5df4207742dc230f120c6acdddbc58ac77f0452fb0fcbbe5f62194cad617ef751f8c7a2bef9a0ab86d4d9275e0c3833eff2e5af4405c3d67ae1f173bc2f9636cdb3c25e76fb24bc8c429e9ca50a13"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x11c, 0x14, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x29}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x100}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8001}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x17b2e6ed}]}, {0xbe, 0x6, "7f1d342f0d6ea7d6753d1e556fdd6016049253df85fad2680681fc27e6b41c76d318ea907d8f0579ce96ef72c07ad097d7ff3bd1b7c3b06fb8c65468898a3eb85084f7b5a96ae07d4ab8f7569d36f55b5fa45e258398aa7c5f71a492bdc66f41b78ff45a4ddd4d5df5a52fb38a530b04b93b2f952a8ea845b635b0bd8011cce43f43366a16f24f4d3668e3abf2d9f8e5d3474dc5dfed07aa27ff4be62d2d038593c958dbf78bafbf690f24707d8069864c41bbfdb1ad1dfadfa5"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x804}, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5)
setreuid(0xee00, 0x0)
write$sequencer(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f00000004c0), 0x1200004, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xf000, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x13)
r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0, 0x0)
sendfile(r3, r3, 0x0, 0x7f03)
unshare(0x6a040000)
mmap(&(0x7f00002ff000/0x1000)=nil, 0x1000, 0x2000004, 0xe7ee32aa24a8b8f2, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000c7ddc80597327e6cdfdcc42c866ed3788ef82fe7ded92b3099bd5c54be07049986c1794d3f3df6f7219675cd692a17b352b5795131935e51e9e63c133bade540bd70403c99d88cce4da9"], 0x50)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)

6m5.758629521s ago: executing program 33 (id=717):
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x33, 0x800000000004}, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)

1m5.663136284s ago: executing program 2 (id=1825):
r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x40202, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000004c0)=0x4)
r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7f, 0x2)
ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f00000001c0)={0xfffffff8, 0x9})
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f00000000c0)=0xfe, 0x4)
sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, 0x0)
pread64(r5, 0x0, 0x0, 0x200)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)

1m4.447681047s ago: executing program 2 (id=1827):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x49)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@mpls_getroute={0x30, 0x1a, 0x1, 0x70bd2d, 0x25dfdbfc, {0x1c, 0x0, 0x10, 0x3, 0xfc, 0x2, 0x0, 0xa, 0xe00}, [@RTA_VIA={0x14, 0x12, {0x3, "4923396d223b2bc3af5f2dae0487"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404801c}, 0x4000080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$zero(0xffffff9c, &(0x7f0000000280), 0xc40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$FUSE(r1, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x4, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000880)={"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"})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
fsetxattr(r0, &(0x7f0000000a40)=@known='security.selinux\x00', 0x0, 0x0, 0x0)
fgetxattr(r0, &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x24, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x5, 0xb, 0x101, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r0, 0x1, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x2, 0x0, 0xc, 0xa}, {0x0, 0x4, 0x9, 0x4}, {0x0, 0x4, 0xe}, {0x3, 0x2, 0x7, 0x6}, {0x5, 0x1, 0x8, 0x6}], 0x10, 0x80}, 0x94)
r6 = openat(r0, &(0x7f0000000000)='./cgroup.cpu/test/cgroup.procs\x00', 0x412600, 0x80)
write(r6, &(0x7f0000000280)='0', 0x1)

1m3.933334789s ago: executing program 2 (id=1833):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c000700000000000000000008"], 0x4c}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x8000000004)
mkdir(&(0x7f0000000280)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0xc)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r3, &(0x7f00000000c0)='1\x00', 0x1)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000003c0)={0xd2, 0x405, 0x87, "757ec1471be8f8f93fd5e142eaf9cfd60c3eeb2be0de6a65860fd51df7bd4ad05d2e47a4311d59ff71b7393433e9fa5814913b02c46958961dab41eaf5ff41f17906ce0883498e542d5689f2f724a3c9346fe51101a197d212796eef655ff935f473d81a011e607a31ec47095549b6e20190e5b9daaecaeb7f7ecfdb47dd6e711ed28f125f5748bd051bb4c2d4ad915259138e07f79a13c528babbdccb83e2c92aa54006e802a791042ff39a41bfde9ba4956a744d2a33b938a9a4c73cb3cca453dd7340fd3e51ac63fbc7636be0027ae0f6"})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r5, &(0x7f00000001c0)='1\x00', 0x1)

1m3.079760554s ago: executing program 2 (id=1837):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
creat(&(0x7f0000000000)='file0\x00', 0x1ff)
mkdir(&(0x7f0000000100)='my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000700)='my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000d00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff)
mount(&(0x7f0000000640)=@nullb, &(0x7f0000001080)='./file0\x00', 0x0, 0x81001, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0)
write(r5, &(0x7f0000000f00)='file0', 0x5)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'hsr0\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x7ff, 0x0, 0x81, 0xd, 0x10, 0x8, 0x0, 0x6, 0x4, [0x4989, 0x9, 0x1, 0x80000000, 0x40, 0x1000, 0x0, 0xd6], [0x1000, 0x9430, 0x6, 0x4, 0x10, 0x7, 0x10, 0x4, 0xc]}})
r6 = socket(0x11, 0x2, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000080)={0x6})
bind$packet(r6, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000440)={0x1, 0x0, [{0xc001001b, 0x0, 0x7}]})
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090)

1m2.383328743s ago: executing program 2 (id=1839):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0), 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000001500)={@my=0x1})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)

1m2.068054909s ago: executing program 2 (id=1842):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, 0x0)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x3fffffff, &(0x7f00000000c0)={0x0, @bt={0xffffffff, 0x5bb, 0x1, 0x1, 0xdd9f81, 0x4, 0x0, 0x9, 0x7, 0x0, 0x71e, 0x6, 0x7, 0x75e, 0xd, 0x2f, {0x0, 0x6fd8e84b}, 0xff, 0x3}})

1m1.597744166s ago: executing program 34 (id=1842):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, 0x0)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x3fffffff, &(0x7f00000000c0)={0x0, @bt={0xffffffff, 0x5bb, 0x1, 0x1, 0xdd9f81, 0x4, 0x0, 0x9, 0x7, 0x0, 0x71e, 0x6, 0x7, 0x75e, 0xd, 0x2f, {0x0, 0x6fd8e84b}, 0xff, 0x3}})

7.817285002s ago: executing program 5 (id=2054):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x16, 0xa01, 0x0, 0x0, {0x8}, [@typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x1c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={<r5=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="30003cc004115784821de09e00b93200010800fa0000efffffe30020000028964d465240fbb018a9732371ec4ea0bf7a86f9a6c9fc109cbb06b14d21a6707261a326f0a250b388449b22a1d707651d2a2af9ffd19163c3860c137f79418b31fba825835c1c988d", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x200)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/245, 0x0, 0xf5, 0x0, 0x100}, 0x28)
syz_open_procfs(0x0, 0x0)
syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)

6.742018583s ago: executing program 5 (id=2058):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x97, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x0, 0x4, 0x9, 0x150}, 0x50)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48)
r3 = dup2(r2, r0)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f00000001c0)=0x1, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRES16], 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c)
syz_usb_control_io$printer(r5, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r7 = syz_usb_connect(0x5, 0x46, &(0x7f0000000340)=ANY=[@ANYRES32=r5], 0x0)
syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
write$char_usb(0xffffffffffffffff, &(0x7f0000000000), 0x0)

6.391085536s ago: executing program 6 (id=2062):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x49)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@mpls_getroute={0x30, 0x1a, 0x1, 0x70bd2d, 0x25dfdbfc, {0x1c, 0x0, 0x10, 0x3, 0xfc, 0x2, 0x0, 0xa, 0xe00}, [@RTA_VIA={0x14, 0x12, {0x3, "4923396d223b2bc3af5f2dae0487"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404801c}, 0x4000080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$zero(0xffffff9c, &(0x7f0000000280), 0xc40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$FUSE(r1, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x4, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000000c0)=0x3)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000880)={"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"})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
fsetxattr(r0, &(0x7f0000000a40)=@known='security.selinux\x00', 0x0, 0x0, 0x0)
fgetxattr(r0, &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r0, 0x1, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x2, 0x0, 0xc, 0xa}, {0x0, 0x4, 0x9, 0x4}, {0x0, 0x4, 0xe}, {0x3, 0x2, 0x7, 0x6}, {0x5, 0x1, 0x8, 0x6}], 0x10, 0x80}, 0x94)
r6 = openat(r0, &(0x7f0000000000)='./cgroup.cpu/test/cgroup.procs\x00', 0x412600, 0x80)
write(r6, &(0x7f0000000280)='0', 0x1)

4.80438486s ago: executing program 6 (id=2066):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103)
syz_fuse_handle_req(r0, &(0x7f0000004100)="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", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})

4.598164085s ago: executing program 4 (id=2067):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_io_uring_setup(0x11a1, &(0x7f00000007c0)={0x0, 0xb649, 0x40000, 0x2, 0x145}, &(0x7f0000000840), &(0x7f0000000140), &(0x7f00000008c0))
read$FUSE(r2, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x5)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000200))
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1)
r4 = dup2(r3, 0xffffffffffffffff)
read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x2)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x2)
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5)
read$FUSE(r4, 0x0, 0x0)
creat(0x0, 0x8)
close(r1)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r8=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48810}, 0x8000)

4.503422416s ago: executing program 5 (id=2069):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xff}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x26f}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)

4.026499363s ago: executing program 6 (id=2070):
pidfd_send_signal(0xffffffffffffffff, 0x30, &(0x7f0000000140)={0x11, 0x4, 0x6}, 0x0)
r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x80, 0x130c42)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0d0eaaed", @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000012008c0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)=ANY=[@ANYBLOB="20000000000721020000000000000000050000020900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000019}, 0x8080)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680))
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f0000000b80)={{&(0x7f0000000640)=[{0x627a, 0x5, 0x7fffffff, {0xf99, 0x81}, 0x92a, 0x9, 0x9}, {0x8000000000000001, 0x9, 0x7, {0x10001, 0xba1}, 0xb, 0x3ff, 0x5}, {0x6, 0x6, 0x8, {0xa, 0x5}, 0x1, 0x87, 0x101}, {0x77f8, 0x3, 0x80000000, {0x94, 0x4}, 0x370, 0x8, 0x100}, {0x8c1f, 0xfffffffffffffffe, 0x3, {0x7}, 0x44, 0x8, 0x9}], 0x5, 0x40, 0xfb, 0x6}, {&(0x7f00000007c0)=[{0x1cab, 0x3}, {0xd2f0, 0x3afb}], 0x2, 0x10, 0xe, 0xffffffff}, {&(0x7f0000000880)=[0x800, 0xfffffffffffffff7, 0xff, 0x9, 0x7fffffff, 0xe, 0x7, 0xfffffffffffffff9], 0x8, 0x8, 0x4, 0x4}, {0x0, 0x0, 0x28, 0xf}, {0x0, 0x0, 0x8, 0x7, 0x5927}})
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r7, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f00000001c0)={{0x3, 0x200, 0x85c2, 0x1, 0x0, 0x4}, 0x348, [0x1, 0x84, 0x1, 0x9, 0x3, 0x9, 0xff, 0x7, 0x7, 0x0, 0x7, 0x5, 0x9c, 0x3, 0x6, 0xb9, 0x4, 0x6, 0x6, 0x7, 0x8, 0x8, 0x9, 0x1, 0x4c1b, 0x3, 0x7, 0x9, 0x4, 0x8295, 0x80000001, 0xb5, 0x8, 0x7, 0x8, 0x6, 0x7fffffff, 0x9, 0x1, 0x2, 0x4, 0x8, 0x2, 0x5, 0x81, 0xcc88, 0x2a6f, 0x10000, 0x6a, 0x0, 0x17, 0x800, 0x10fc, 0x8, 0x2, 0x400, 0x0, 0xb22, 0x6, 0xc9a, 0xfff, 0x401, 0x8, 0x9c7d, 0x5, 0x0, 0x6, 0x7fff, 0x1000000, 0x3, 0xffff8382, 0x7fffffff, 0x1ff, 0x6, 0x9, 0x8, 0x0, 0xfffffffa, 0x8, 0x8c, 0x7, 0x400, 0x2, 0x2, 0x10, 0x6, 0x8000, 0xd3, 0x7f, 0x16cf, 0xffffffff, 0x8, 0x2, 0xd7b, 0x9, 0x7fff, 0xffffff5c, 0x1, 0x666, 0x0, 0x8, 0x7, 0x3, 0x3, 0x3, 0x1, 0x4, 0x368, 0x8, 0x3, 0x580, 0x2, 0x6, 0x10, 0x70955bc4, 0x1, 0x2, 0xfffffffb, 0x2, 0x2, 0x3, 0xfffff38f, 0x2, 0xa000000, 0xeb, 0x5b2, 0x4, 0x960, 0x6, 0x79, 0x3, 0x30, 0x3, 0x7, 0x1, 0x7fff, 0xf2, 0x5, 0x7, 0xff, 0x4, 0x3, 0x12e4, 0x3, 0x0, 0x101, 0x200, 0x7, 0x40, 0x0, 0x1, 0x3, 0x2, 0xffffff00, 0x702, 0x7, 0x800, 0x81, 0xdffffff7, 0x7, 0x1, 0xd, 0x40, 0x10000, 0x3, 0xffffffff, 0x23db, 0x6, 0x0, 0x5, 0x7, 0xffffffff, 0x4, 0x7, 0x6, 0x2, 0x200040, 0xb7, 0x6, 0x638, 0x0, 0x800, 0x6, 0x6, 0x0, 0x8, 0x7, 0x2, 0x8, 0x2, 0xfffffffb, 0x2, 0x80, 0xffff7fff, 0x4, 0x200, 0x7f, 0x1, 0x5, 0x9, 0x1, 0xfffffffa, 0xc, 0x50c2, 0xc1ed, 0x401, 0x3, 0x7, 0x101, 0x800, 0x5, 0x5, 0x8, 0x1, 0x1, 0xfffffff8, 0xe9, 0x1, 0x7f, 0x7ff, 0x0, 0x7, 0xac, 0x80000000, 0x81, 0x80000001, 0x2, 0x80, 0x3ff, 0xa639, 0x0, 0x53647e6f, 0x2, 0xd792, 0x14b, 0x4, 0x3, 0xb36, 0xa, 0x1, 0x4, 0x94, 0x5f, 0x1, 0x8, 0xd8, 0x7fff, 0xf, 0x400, 0x7f, 0x80000001, 0xd08, 0x2, 0x1, 0x6, 0x9, 0x7d9, 0x1, 0x3, 0x3, 0x8, 0x6, 0x400, 0x86, 0x2, 0x1000, 0xbdf6, 0x41bf, 0xc, 0x2487005d, 0x2, 0x1, 0xaa1, 0x6, 0x80000001, 0x9, 0xe, 0x2, 0x0, 0x4, 0x401, 0x5, 0x87a0, 0xffffffff, 0x5, 0x3, 0xf, 0x7fffffff, 0x0, 0x8d, 0xe, 0x3, 0xb6, 0x5, 0x9, 0x100, 0xfff, 0x10, 0x1, 0x6, 0xb7, 0x7, 0xfffffffa, 0x4, 0x5, 0x81, 0x6, 0x5, 0xdcdf, 0x7ff, 0x9, 0xffffffe3, 0x1ff, 0x3, 0xf1c, 0x8021, 0xffffffff, 0x70, 0x10000, 0x7, 0x4, 0x1, 0x0, 0x4, 0x7aed, 0x4, 0x8, 0xe, 0xffffffc0, 0x8b7, 0x5, 0x5, 0x200, 0x40, 0x3ff, 0x5, 0x0, 0xa, 0xc, 0x7, 0xe324, 0xf, 0x7, 0x97a, 0x7fff, 0xffffffff, 0x8, 0x7, 0x40000000, 0x7, 0x6, 0x7, 0x6f007526, 0xa, 0x80000000, 0x0, 0x200, 0xaeb, 0x315c, 0x9, 0x1000, 0xd, 0x5, 0x0, 0xf0f, 0x6, 0x20, 0x2, 0x9, 0x2, 0x9, 0x4, 0x6, 0xb37, 0x8, 0x5, 0x8, 0xa6b7, 0x10001, 0x2, 0x1, 0xf, 0x8, 0x8, 0x3ff, 0x1, 0x4, 0xbe, 0x1, 0x10001, 0x7fa, 0xe7ad, 0x4, 0x2, 0x6, 0x81, 0x10000, 0x3, 0xbd7, 0x71e5119d, 0x62, 0xffd, 0x5, 0x6, 0x4, 0xc, 0x3, 0x7, 0x400, 0x4, 0x400277e, 0xe1, 0x3, 0x4, 0x3, 0x4, 0x6, 0xbf, 0x7, 0x6, 0x8, 0x5, 0x3ff, 0x9ad9, 0x8, 0x1, 0x0, 0x3, 0x400, 0x2, 0x9, 0x6, 0x40, 0x1000, 0x82, 0x4, 0x1000, 0x8, 0x3d, 0x2, 0xe, 0x4, 0x3, 0x1, 0x4, 0x8, 0x10, 0x6, 0x9, 0xffffffff, 0x10, 0x0, 0x1, 0x9225, 0x3be, 0xd, 0x401, 0x81, 0x13, 0x5, 0x3b1, 0x1, 0x9f18, 0x2, 0x8f86, 0x417db73f, 0x7, 0x1, 0x7, 0x5, 0x3, 0x6, 0x7, 0x0, 0xd, 0x0, 0x7, 0x7, 0x2, 0x8, 0x5, 0x0, 0xab, 0x5, 0x94, 0xb3ab, 0x5ae, 0x2, 0x40, 0x5, 0x0, 0x8001, 0x8, 0x800, 0xb, 0xa4, 0x50, 0x8, 0x99, 0x10, 0x5, 0x100, 0xfffff800, 0x5, 0xca, 0x3, 0x4, 0x6, 0x7ff, 0x6e15d2ec, 0x7, 0x5, 0x8, 0x7ba, 0x21c0, 0xe64, 0xc, 0x7, 0x6d4, 0x5, 0x0, 0x7fff, 0x121, 0x9, 0xe6d8, 0x1000, 0x1ff, 0x42db5dac, 0xffff, 0x6, 0xfffffff8, 0x3ff, 0xfcf, 0x1000, 0x7, 0x2, 0x2, 0x6, 0x7, 0x2, 0x7, 0x80000001, 0x7, 0x8, 0x7, 0xfffff000, 0xfffffffe, 0x5, 0x5, 0x7, 0x80000001, 0x4, 0x2, 0x53f, 0x8, 0x6, 0x0, 0xffff7ff8, 0x6, 0x8, 0x9, 0x8, 0x6d, 0x48, 0x8001, 0x1, 0x1, 0x2e7a, 0x8, 0x4, 0x10000, 0x5, 0x1ff, 0x1, 0x8, 0xfffffffd, 0xc217, 0x6, 0x59a, 0x2, 0x3, 0xba7a, 0x6d9c7f55, 0x4, 0x9, 0x1000, 0x3, 0x10001, 0x2, 0x2, 0x7, 0x1, 0x2, 0x1, 0x27a, 0x9, 0x2, 0xde26, 0x99, 0xfffffffe, 0x5, 0x1, 0xdba4b27, 0x6, 0x100, 0x0, 0x9, 0x7, 0x1, 0x7ff, 0x0, 0x2, 0xffff9369, 0x4, 0xff, 0x6, 0xed1, 0x6, 0x0, 0x3, 0x80000001, 0xe, 0x9, 0x1, 0xffff, 0x6, 0x9, 0x4, 0xef3, 0x1, 0xfffffffb, 0x7, 0x40, 0x6, 0x4, 0x9, 0x7f, 0x5, 0x1, 0x3, 0x2, 0xc15e, 0x6, 0x0, 0x6, 0x8, 0xffffffff, 0x8, 0x401, 0x0, 0x10, 0x3, 0x2, 0x4, 0x7, 0x3, 0x4b, 0x7, 0x0, 0x2, 0x75, 0x80, 0x1, 0xdb, 0x401, 0x5, 0x1, 0x3, 0x6, 0xbf0d, 0x18, 0x1, 0x5, 0x95, 0x7fff, 0xe7, 0xa, 0x4, 0x0, 0xffffff16, 0x10, 0xae25, 0x908, 0x78e, 0x6, 0x1, 0xb2b7, 0xc, 0x7, 0x0, 0x5, 0x9, 0x8, 0x73, 0x9, 0xfffffffe, 0x5df, 0x1, 0x7, 0x81, 0xffffffaa, 0x3, 0x6, 0xd, 0xffffc4e6, 0xffff0001, 0xfffffffe, 0x5, 0x10001, 0x2, 0x3, 0x0, 0x6, 0x4, 0x3, 0x8, 0x3, 0x8, 0x5, 0x3, 0xc3f, 0x0, 0x2, 0x6, 0x6, 0xaed, 0x4, 0xed4, 0x7, 0x7, 0x8, 0xff, 0x8001, 0x5, 0x9, 0x4, 0xc2, 0x80000000, 0x80000000, 0x4, 0x8, 0xab84, 0xb4, 0xfffffc00, 0x908b, 0x8, 0xc9, 0xfffffffe, 0x1, 0x3, 0x8, 0xfffffffb, 0x0, 0xf8, 0xfffffff0, 0x637, 0x6, 0x4, 0xa, 0x88, 0xfffffff9, 0xfffffb70, 0x0, 0x120e, 0x7, 0x0, 0x6, 0x2, 0x1000, 0xa, 0x6, 0x2, 0xd, 0x3ff, 0x5e18, 0xf, 0x9ebe, 0x7, 0x2, 0x1, 0x7, 0x7, 0x9e, 0x8, 0xedd3, 0x9, 0x1, 0xffffffff, 0x5, 0x1ff, 0x8, 0x1, 0x5, 0x2, 0x40, 0xe, 0x4, 0xc, 0xc65, 0x40, 0x7, 0xbb7d, 0x10, 0x2, 0x1ff, 0x8, 0x6, 0x80, 0x2, 0xf, 0x7, 0x80000000, 0x6e0, 0x1, 0x5, 0xd1, 0x9, 0x8, 0xfffffe00, 0x0, 0x1, 0x4, 0xe449, 0x4, 0x40, 0x10, 0x1000, 0x0, 0xca, 0xffff, 0x10001, 0xfffff891, 0x2, 0xfe, 0x200, 0xffffff81, 0xfffffff8, 0x4, 0x101, 0x68f0, 0xbfb, 0xdfe2, 0x0, 0x4, 0x9e74, 0x8, 0x7, 0x3ff, 0x80, 0xde7, 0x5, 0x51, 0x0, 0xb, 0x3, 0xad, 0x8, 0x2, 0x1, 0x8000, 0x8, 0x7, 0x8, 0x4, 0x10, 0x80000000, 0x6, 0x1400000, 0xf7, 0x108, 0x81, 0x4, 0x6790, 0x9, 0xfa6, 0x400, 0x7f, 0x3ff, 0x4, 0x2, 0x9, 0x6, 0x9107, 0x1, 0xcac, 0x40, 0x7, 0xc, 0x1, 0x5, 0x7, 0xb923, 0x2, 0xffff3818, 0x3, 0x1, 0x5, 0xe39, 0x4, 0x6, 0x7ff, 0xfff, 0x5, 0x5, 0x1, 0x101, 0xfffffff9, 0x3, 0x1, 0x400, 0xe59, 0x6, 0x8, 0x3ff, 0x6, 0x3ff, 0x9, 0x2, 0x6, 0x12dd, 0x0, 0x10, 0x6, 0x40, 0x0, 0xffffff80, 0x3, 0x0, 0x1, 0x7, 0x997, 0x7, 0x7fffffff, 0x81, 0x1, 0xe, 0x7e, 0x9, 0x3, 0x5, 0x7c, 0x4, 0x9, 0x3, 0x0, 0x1ff, 0x4, 0x926a, 0x9, 0x6, 0xea, 0x9, 0x9, 0xc0000, 0xf4d, 0x80000001, 0x1, 0x2, 0x1, 0x3, 0x7fff, 0x3, 0x1, 0x5851, 0x9fc, 0x0, 0x6, 0xcf4, 0x6, 0x1, 0xffb8, 0x0, 0x10001, 0x7, 0x8, 0x7b, 0x6, 0x89, 0xfffc0000, 0x9, 0x1, 0x4, 0xb, 0x9, 0x3, 0x5, 0xc2, 0x5, 0x2, 0x9, 0x3, 0x2c33, 0x5, 0x4, 0x0, 0x5, 0x9, 0x1, 0xa, 0x819, 0x5, 0x4, 0xeaa8, 0xb, 0x5, 0x8000, 0xffff, 0x8, 0x7fff, 0xe, 0x3, 0x6, 0xffffffff, 0x7, 0xba, 0x1, 0x2, 0xc7c, 0x8, 0xdc, 0x3, 0x5, 0x9, 0x1]})
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4024587b, &(0x7f0000001a40)={{<r8=>r0, &(0x7f0000000040)='(\x00', 0x202, &(0x7f0000001200)={@align=0x3, {0x5, 0x80, 0x6, 0xf}}, 0x4, &(0x7f0000001240), &(0x7f0000001280)=0x3}, 0x8, &(0x7f0000001980)=[{0x2, 0x1f9, &(0x7f00000012c0)='/dev/admmidi#\x00', &(0x7f0000001300)="5d4999bf1cf8518bcbb62631916ba88a11aa43cafd7f407caa9b4616a44d58018d4065126996ee95a3d34ee7cb0b0f9efa6cc1df7177bee84ae9695ac8f0085387f2477fca63d431760dbafa2263e37f60daf199e4edd71d90603ced82f352e673033858d9614a2942a9558f76ce4afd78b91869dd0a2bf119b0", 0x7a, 0x10}, {0x3, 0xb, &(0x7f0000001380)='/dev/admmidi#\x00', &(0x7f00000013c0)="3e3ea691ae30b0473e0011274e716fce93187f271fc91f5b", 0x18, 0x28}, {0x2, 0x7ff, &(0x7f0000001400)='\x00', &(0x7f0000001ac0)="f72a719d8f827cca5c6466e3782a5c4c56ab8e377a066ba0c83a7f249369bbd1595aefad426522b6d985db1419654b53a9b5b3a9549b89c4dba948ee745f612e75e8e0d110e987e2185ccd0fb3e2a114d970561c02991b8997377931ee9e7a51b37890a799c24c64a1edf1cca95446d44777ae9dc3fd9e308b7e73756d548469dfb9c11101f8ae0f6ae5e8f924129dd7c3bbf0", 0x93}, {0x1, 0xffffffff, &(0x7f0000001500)=':(-(/*%\x00', &(0x7f0000001540)="8b64de158c82bbada28700864db3c66aa90fa4b5865c04cc7bd7", 0x1a, 0x28}, {0x1, 0x3, &(0x7f0000001580)='\x00', &(0x7f00000015c0)="3585e0c0773be6412639780da6a14752c43780c6a5b42b8f7abc18d302a98334d4e6732c6891bee4a2cd57fcbe375618fc85ff01f535bf5a6525519b962663ec2f520579a257fd3d0e789566686d8b55cd608b74d148d2644b7be7fd9ec83ca03c6910893a63ce6447eced95968c1b1c641b537bbe6612a6c807b3191e0ef12be418634239c35305e905fbc5f007787fd557bece938f0f4142de18e360a26a711d06289d83a52b9a9efa20fb192c093ac40da01a9c855a2f11a8c21081c752d27aece96c6bc6e1fc4cab3172650f28ad01fd06bdfa6a5a4f728c", 0xda, 0x8}, {0x3, 0xfffffffb, &(0x7f00000016c0)='/dev/snd/midiC#D#\x00', &(0x7f0000001700)="cd7b8a63226bbb951e94d3c60e8ea839da0a882a4b38572f128a737644b5ca5d0581b2521541fd64bdda940dad7c46ff7aa99ced7a2a1c342afad97734d2ec6c878e5fc5ff2302ae9fb9f929d1ea3f8a6a739e69046fdde1450373a364f82c455714346e5217", 0x66, 0xa}, {0x2, 0x9, &(0x7f0000001780)='./binderfs/binder0\x00', &(0x7f00000017c0)="9d677763660c354846744d491a405cec3f165e33250f97e7c07fba5e36916ef21fb2425199145dccad53e367cc2c0fd7425fea739abd2b2929f247926e385730b63d7911d68b4a432eefaf809b02f8a951dcc10ff29d6057c6a6bba333bcd36000463d61353fe37913af36", 0x6b, 0x10}, {0x1, 0xfffffff3, &(0x7f0000001840)='/dev/sequencer\x00', &(0x7f0000001880)="dfe176885957ad639d2fdae34019308eed4e9607b48dd499a8eb0c654dde4bf99aaf16c482633b283e6fdf88e7d232aa3b988ae0f71d86ddd40769f7fe7e483e72223afe01ad1c309d74c7dee39fd40a7e2cbb2ef0380265e2173a79a6791240958a8bfae53e6348c906395e04713ce74e7c281ac0208c9a142ec9528732efa585af37b6d5dbfbe231cd1856a627c93583716921e69be01bbb72dcdf07ffe229433bd596893e0b1ce7c175f01e91f69444ba4969b48544afd226f53a640a3b876ca9c858ff", 0xc5, 0x20}]})
setsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f0000001a80)=0x4, 0x4)
r9 = openat$vicodec0(0xffffff9c, &(0x7f0000000440), 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
ioctl$VIDIOC_G_EXT_CTRLS(r9, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f909, 0x8002, '\x00', @p_u16=&(0x7f00000010c0)=0xa5b}})
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x66)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000000000), 0xb97a, r10}, 0x38)

3.323026979s ago: executing program 4 (id=2071):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x34b5, 0x0, 0x2, 0x150}, &(0x7f00000002c0)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480))
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00')
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r4, 0x265)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x200003}, 0x0)
r8 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66)
ioctl$UFFDIO_REGISTER(r8, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r9 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
tkill(r9, 0xb)
pread64(r4, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a)
pwritev2(r4, &(0x7f0000000200)=[{0x0}, {&(0x7f00000000c0)="3a4002c716d6a76c8c4954a5376cbb6f97620bfe3824433daae61da82f787afff91cf673ef7ebed356e623497f0489", 0x2f}, {&(0x7f0000000100)="14647874f50593fbd741385970459568ce343ccd4ca406866df429c6830d4bed180761c6379067d47e193a152b8d9b9da24d5e2bfff31cabce47132c5f77935c3daa805711c8891ca27689fc7040b552c98f8497e0f83d29d4d31a5428db4e0b66c4f2cb4a58658f48f111a2d19940a9fdc06ef423164c716d82f62fbfec4a93993b602b0ae83752df6dc833066afb0806d527718d646510a82a215b61d8cbfb270fca0317890b361155dfa0a614209ff9cd54f0f116b87d9a4b25f7b04a5318ecbb78440b2eaee36182408db4a31885717297d9ac1a2347feb0c981cd", 0xdd}], 0x3, 0x3, 0xffff8000, 0x14)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'})

2.998347093s ago: executing program 6 (id=2073):
r0 = syz_io_uring_complete(0x0, 0x0)
ioctl$EVIOCGVERSION(r0, 0x80044501, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0)
socket(0x200000000000011, 0x2, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000040)=0x2, 0x4)
openat$ptmx(0xffffff9c, &(0x7f0000000200), 0x201, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2f, 0x2000, 0x0, &(0x7f0000000140)="e0b9547ed387dbe9abc89b6f5b2e", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x0, 0x0)
syz_ublk_setup_queues(r0, 0x0, &(0x7f0000000240)={0x0, 0x68c, 0x2, 0x2, 0xf}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb83e, 0x0, 0x1, 0x238, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1d95, 0x400, 0x1, 0x115, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8ff1, 0x0, 0x3, 0x164, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1454, 0x40, 0x1, 0x15f, 0x0, r4}}], 0x4, 0x0, &(0x7f00000015c0))
r5 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x74bd24, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x0)

2.997913125s ago: executing program 4 (id=2074):
epoll_create1(0x80000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r3, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890)
ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r5)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x40, r6, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}]}]}]}, 0x40}}, 0x804)
sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c", 0x11, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x20)
ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000080))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x48)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x108, 0x10, 0x7, 0x70bd28, 0x0, {{@in=@private=0xa0100fe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x0, 0x2, 0x4, 0x10000000}, {0x0, 0x200000, 0x7}, {0xc, 0x0, 0xae5}, 0x4, 0xf7fffffe, 0xa, 0x2, 0x0, 0xba4c15520301ae61}, [@coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, @replay_thresh={0x8, 0xb, 0x2}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000009}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000020000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a39e3bfe0673c23a3dd7cc6dace019fe8a8d40f708546ce1dbd5a268c0f6c06a16e4d7fe259af8e30e34454465c75ac87d4eef72e9ef076fc7b540ddf"], 0x64}}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, 0xffffffffffffffff, 0x0)

2.886781689s ago: executing program 5 (id=2075):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c000700000000000000000008000900000000"], 0x4c}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x8000000004)
mkdir(&(0x7f0000000280)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0xc)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r3, &(0x7f00000000c0)='1\x00', 0x1)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000003c0)={0xd2, 0x405, 0x87, "757ec1471be8f8f93fd5e142eaf9cfd60c3eeb2be0de6a65860fd51df7bd4ad05d2e47a4311d59ff71b7393433e9fa5814913b02c46958961dab41eaf5ff41f17906ce0883498e542d5689f2f724a3c9346fe51101a197d212796eef655ff935f473d81a011e607a31ec47095549b6e20190e5b9daaecaeb7f7ecfdb47dd6e711ed28f125f5748bd051bb4c2d4ad915259138e07f79a13c528babbdccb83e2c92aa54006e802a791042ff39a41bfde9ba4956a744d2a33b938a9a4c73cb3cca453dd7340fd3e51ac63fbc7636be0027ae0f6"})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r5, &(0x7f00000001c0)='1\x00', 0x1)

2.788242255s ago: executing program 4 (id=2076):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c000700000000000000000008000900000000"], 0x4c}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x8000000004)
mkdir(&(0x7f0000000280)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0xc)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r3, &(0x7f00000000c0)='1\x00', 0x1)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000003c0)={0xd2, 0x405, 0x87, "757ec1471be8f8f93fd5e142eaf9cfd60c3eeb2be0de6a65860fd51df7bd4ad05d2e47a4311d59ff71b7393433e9fa5814913b02c46958961dab41eaf5ff41f17906ce0883498e542d5689f2f724a3c9346fe51101a197d212796eef655ff935f473d81a011e607a31ec47095549b6e20190e5b9daaecaeb7f7ecfdb47dd6e711ed28f125f5748bd051bb4c2d4ad915259138e07f79a13c528babbdccb83e2c92aa54006e802a791042ff39a41bfde9ba4956a744d2a33b938a9a4c73cb3cca453dd7340fd3e51ac63fbc7636be0027ae0f6"})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r5, &(0x7f00000001c0)='1\x00', 0x1)

1.65428085s ago: executing program 6 (id=2077):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x97, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x0, 0x4, 0x9, 0x150}, 0x50)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48)
r3 = dup2(r2, r0)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f00000001c0)=0x1, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRES16], 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c)
syz_usb_control_io$printer(r5, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect(0x5, 0x46, &(0x7f0000000340)=ANY=[@ANYRES32=r5], 0x0)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r7, &(0x7f0000000000), 0x0)

1.135371324s ago: executing program 4 (id=2079):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000200)=0x81, 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r2, 0x28, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x600)
r3 = socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[], 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000200)="05178100", 0x4, 0x50, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @local}, 0x14)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000080), 0x208e24b)
writev(r6, 0x0, 0x0)
lseek(r6, 0x0, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYRES64, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x404c801}, 0x44800)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]})
cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="05090000000001006e657464657673696d0000000f0002006e657464657673696d3000000800030020000000"], 0x3c}}, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(r7, 0xae78, &(0x7f0000000000)=0x2)

1.133471816s ago: executing program 5 (id=2080):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, 0x0, r1, 0x0, 0x46)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00')
pause()
read(r2, &(0x7f0000000180)=""/199, 0xc7)
mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000680)="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"/700, 0x2bc)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000003c0)="37828caac7", 0x8237)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r6, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x54}, 0x2, 0x34005}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

785.193571ms ago: executing program 0 (id=2081):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES8=r0], 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

697.618564ms ago: executing program 0 (id=2082):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
r1 = getpid()
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000000)={0xfffffeff, 0x7, {}, {<r2=>0x0}, 0x69ef, 0x401}) (async)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async)
r4 = getegid()
fsetxattr$system_posix_acl(r3, 0x0, &(0x7f0000000980)={{}, {0x1, 0x2}, [{}, {0x2, 0x4}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x6}, {0x2, 0x3}, {0x2, 0x3}], {}, [{0x8, 0x2}, {0x8, 0x4, r4}, {0x8, 0x4}, {0x8, 0x5}], {0x10, 0x1}, {0x20, 0x1}}, 0x7c, 0x3)
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={r1, r2, r4}, 0xc)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff018}, {0x6, 0x0, 0x0, 0x2}]}, 0x8)

697.357007ms ago: executing program 0 (id=2083):
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x1000000, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0xc00000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffdffffffffffff, 0x9, 0x3, 0xf, 0x80000006}, 0x0, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8})
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2})
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
close_range(r0, 0xffffffffffffffff, 0x0)

645.41705ms ago: executing program 0 (id=2084):
r0 = syz_io_uring_setup(0xf03, &(0x7f0000000380)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1})
io_uring_enter(r0, 0x1005, 0xfffffffd, 0x9, 0x0, 0x0)

610.554717ms ago: executing program 0 (id=2085):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0)
write$binfmt_aout(r0, 0x0, 0xfffffee2)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x2501f, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)

237.534861ms ago: executing program 5 (id=2086):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r4, 0x800448d4, &(0x7f0000000040)={0x1, 0x3f, "f8ff00", 0xff, 0x3})
getsockopt$sock_timeval(r4, 0x1, 0x15, 0x0, &(0x7f0000000600))
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3000000035e0beb230349db5f74e4d9901e6fe86b620f837a934172f921f9a45d3c8feade75e0959d874ffb6d7587dfd2b310282f0a8e7301556c5f91bb4f9d53d7312959889eb2d25bc8402860102068a103b058b53796b22d1ee88ae8b2e1f7dbcb3fc8fad5c36a22325f9d200cae39d024596c7369e2baaa736d730405cdf59561f528d64f257b8f8ae28571f6f68f3b686460302bd9761c27e47bcab630dd69438755966d21718fd5f89c2719e7366a71da2fd648ba529126f6be90000", @ANYRES16=r8, @ANYBLOB="010026bd5000f8dbdf2555000000080001004f00000008000300", @ANYRES32=r7, @ANYBLOB="0c009900050020005d000000"], 0x30}, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r10, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b00)=ANY=[@ANYRES8=r9, @ANYRES8=r4, @ANYRES32, @ANYRESOCT=r5, @ANYBLOB="ec326aeaba0719b9c4b613d4a470a44270c9fbc1b2592479df7b2e26491b32d0ddb9107081bba5206e95645c4309508c5d837937dd743cb301e36fe5227f38b0c50a7633192a25749d4bbe684f4209adc819b89a5ef8499e43ee0a39f923e06c29f747038aee0d62042dbdf5493781b15313d0c0d76844e7cfdbede56ccf9b5d5ec01f15d7b3c45883f095d50569d6749d90ccc743aea63571ec2444cda71674b901ad8787f244c5b8ef96597377eae52efaf1afea85015cc15b6c7b30e85dbdaeb6226b199d90b53b223e5a6f9e90b4fb33cf00"/223], 0x24}, 0x1, 0x0, 0x0, 0x95}, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x28, r12, 0x1, 0x10000, 0x25dfdbfd, {{0x8}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x28}}, 0x0)
ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r13 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
ioctl$PAGEMAP_SCAN(r13, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe4, 0x2, 0x0, 0x2})
mount$9p_virtio(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x8c9030, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6d73f6f6653dadd0303030303030303030303030373962632c616e616d653d002c686173682c53707072616973652c6f626a5f747970653d706167656d6170002c00b9232bd77fbef7c9e25447aad78700dca96adcab50c065944b2a35ce876b02a8cbd10f382c76683c5cf8dfa612c964466f6cc61dd8426e52b6e1ffb29f633037decb89c20f3eb569ee"])

226.672462ms ago: executing program 4 (id=2087):
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c", 0x5, 0x840, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090005"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9})
unshare(0xbd7a02a7dcac7ab6)
fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5})
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
r2 = memfd_create(&(0x7f0000000100)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1m\x13}\xe1\xdf4f!\xd5d\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85\b\x00\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5>j\x87\x04\x11y\xa1\xc8\x9f\x9etiHv\xef\x1a\xedS\xd6\x91%||/c\x87\x94Y\xa0\x8e\x03\x00\x00\x00\x00\x00\x00\x003:\x99\x1e\xac`\x00\x00\x00\x00m\xeaB\xf0K\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80', 0x1)
write$binfmt_script(r2, &(0x7f0000000fc0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, 'fi\xc9x+\xc1\xcaV\xc3\xb8k\xce\xabO\xf04\x19\x96/\x91\xc0\x1b\xbf\x03\x13Tc4d%2O\x89T\x9d\xd8\x0f9Y\xe13\xc6\x83\x02\xe1\x02z\xe1\xad8\xc8l\x89\xe9\xc3c\x91F\tf\xe4\xda\x8bZt\xb6\x9dM\x87Cq#\a\x84\xa5k\xeb9\xb7o\xb8t\x01E\v\x88\xad\x1d\xf2\xdcMe?\xd7\xcam\xe8F\xa0\f\reh\x1b\x10\xb4g\xbc[\xe5J\xdb\xeaZio\xba\xfb}\x9f\xbd\xbb'}]}, 0x17a)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000180))
fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9})
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xf}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x699dc78d}]}, 0x70}, 0x1, 0x0, 0x0, 0x80001}, 0x20000000)
ioperm(0x0, 0x9, 0x4)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x200c8)
r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x36e, 0x400000)
ioctl$I2C_RETRIES(r4, 0x701, 0x4)
r5 = io_uring_setup(0x7fd, &(0x7f0000000080)={0x0, 0xed43, 0x10000, 0x3, 0x1f9})
io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)

162.339302ms ago: executing program 0 (id=2088):
openat$mice(0xffffff9c, &(0x7f0000000000), 0x80401)
openat$mice(0xffffff9c, &(0x7f0000000400), 0x141080)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0x20ce5, r4}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000207000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f0000ffa000/0x4000)=nil)
move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000012000/0x3000)=nil], 0x0, 0x0, 0x2)
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000204000/0x4000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000011f000/0x2000)=nil, 0x2000, &(0x7f0000000140)='\x00')
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)

0s ago: executing program 6 (id=2089):
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
socket$inet(0x2, 0x2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001200)={'sit0\x00', &(0x7f0000001140)={'syztnl2\x00', 0x0, 0x700, 0x10, 0x6, 0x4, {{0x5, 0x4, 0x0, 0x12, 0x14, 0x66, 0x0, 0x1, 0x2f, 0x0, @empty, @loopback}}}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0xc00000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffdffffffffffff, 0x9, 0x3, 0xf, 0x80000006}, 0x0, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8})
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)={@hyper, 0x2})
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
close_range(r1, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

19][T12643] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  523.471642][T12643] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  523.486414][ T5753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  523.489700][T12643] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 17790 usecs
[  523.495817][ T5753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  523.499007][ T5753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  523.505180][ T5753] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  523.510120][ T5753] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  523.577933][T12643] pci 0000:00:01.0: Adding to iommu group 1
[  523.600962][T12643] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  523.603900][T12643] pci 0000:00:01.0: vgaarb: bridge control possible
[  523.606684][T12643] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  523.637113][T12643] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  523.640921][T12643] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  523.645581][T12643] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  523.687483][T12643] [drm] Found bochs VGA, ID 0xb0c5.
[  523.689911][T12643] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  523.718767][T12643] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  523.792340][T12643] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  523.887027][   T41] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[  523.988683][T12644] bridge0: port 1(bridge_slave_0) entered blocking state
[  523.991029][T12644] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.993055][T12644] bridge_slave_0: entered allmulticast mode
[  523.995469][T12644] bridge_slave_0: entered promiscuous mode
[  524.003379][T12644] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.005731][T12644] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.009099][T12644] bridge_slave_1: entered allmulticast mode
[  524.011990][T12644] bridge_slave_1: entered promiscuous mode
[  524.030432][T12644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  524.035078][T12644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  524.047087][   T41] usb 10-1: Using ep0 maxpacket: 8
[  524.050882][   T41] usb 10-1: config index 0 descriptor too short (expected 74, got 45)
[  524.052044][T12644] team0: Port device team_slave_0 added
[  524.054415][   T41] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  524.060770][T12644] team0: Port device team_slave_1 added
[  524.064236][   T41] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  524.068781][   T41] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  524.073569][   T41] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  524.079373][   T41] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  524.080938][T12644] batman_adv: batadv0: Adding interface: batadv_slave_0
[  524.086704][T12644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  524.086779][T12675] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  524.096645][T12644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  524.100453][   T41] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  524.104643][T12644] batman_adv: batadv0: Adding interface: batadv_slave_1
[  524.108236][   T41] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.109895][T12644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  524.109913][T12644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  524.129448][T12644] hsr_slave_0: entered promiscuous mode
[  524.131748][T12644] hsr_slave_1: entered promiscuous mode
[  524.210765][T12682] F2FS-fs: Conflicting test_dummy_encryption options
[  524.222670][T12678] vfio-pci 0000:00:01.0: vgaarb: deactivate vga console
[  524.225683][T12678] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  524.337932][   T41] usb 10-1: GET_CAPABILITIES returned 0
[  524.340659][   T41] usbtmc 10-1:16.0: can't read capabilities
[  524.546198][T12651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  524.551418][T12651] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  524.560845][    C2] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  524.564856][T12651] usbtmc 10-1:16.0: Unable to send data, error -71
[  524.570782][   T41] usb 10-1: USB disconnect, device number 21
[  524.729222][T12644] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  524.737328][T12644] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  524.741043][T12644] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  524.745426][T12644] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  524.748254][T12644] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  524.754980][T12644] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  524.758761][T12644] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  524.764384][T12644] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  524.786254][T12644] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.789431][T12644] bridge0: port 2(bridge_slave_1) entered forwarding state
[  524.793986][T12644] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.797094][T12644] bridge0: port 1(bridge_slave_0) entered forwarding state
[  524.832421][T12644] 8021q: adding VLAN 0 to HW filter on device bond0
[  524.845655][ T6789] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.849155][ T6789] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.858619][T12644] 8021q: adding VLAN 0 to HW filter on device team0
[  524.866180][ T6789] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.869229][ T6789] bridge0: port 1(bridge_slave_0) entered forwarding state
[  524.879246][ T6789] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.882272][ T6789] bridge0: port 2(bridge_slave_1) entered forwarding state
[  525.213620][T12707] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  525.473792][T12644] 8021q: adding VLAN 0 to HW filter on device batadv0
[  525.558266][ T5753] Bluetooth: hci2: command tx timeout
[  525.588474][T12644] veth0_vlan: entered promiscuous mode
[  525.606553][T12644] veth1_vlan: entered promiscuous mode
[  525.672289][T12644] veth0_macvtap: entered promiscuous mode
[  525.683430][T12644] veth1_macvtap: entered promiscuous mode
[  525.712493][T12644] batman_adv: batadv0: Interface activated: batadv_slave_0
[  525.736034][T12644] batman_adv: batadv0: Interface activated: batadv_slave_1
[  525.878613][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  525.883146][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  525.917243][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  525.923065][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  526.163331][ T6789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  526.178014][ T6789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  526.249757][ T6789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  526.252964][ T6789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  526.335327][T12717] FAULT_INJECTION: forcing a failure.
[  526.335327][T12717] name failslab, interval 1, probability 0, space 0, times 0
[  526.341097][T12717] CPU: 1 UID: 0 PID: 12717 Comm: syz.0.1727 Not tainted syzkaller #0 PREEMPT(full) 
[  526.341115][T12717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  526.341122][T12717] Call Trace:
[  526.341140][T12717]  <TASK>
[  526.341146][T12717]  dump_stack_lvl+0x100/0x190
[  526.341187][T12717]  should_fail_ex.cold+0x5/0xa
[  526.341201][T12717]  should_failslab+0xc2/0x120
[  526.341225][T12717]  __kvmalloc_node_noprof+0x116/0x970
[  526.341241][T12717]  ? seq_read_iter+0x819/0x1270
[  526.341302][T12717]  seq_read_iter+0x819/0x1270
[  526.341326][T12717]  seq_read+0x344/0x4d0
[  526.341343][T12717]  ? __pfx_seq_read+0x10/0x10
[  526.341359][T12717]  ? __pfx___might_resched+0x10/0x10
[  526.341385][T12717]  ? lock_acquire+0x1b9/0x370
[  526.341409][T12717]  ? rw_verify_area+0xce/0x6d0
[  526.341427][T12717]  ? __pfx_seq_read+0x10/0x10
[  526.341444][T12717]  vfs_read+0x1e4/0xb40
[  526.341458][T12717]  ? __pfx_vfs_read+0x10/0x10
[  526.341469][T12717]  ? find_held_lock+0x2b/0x80
[  526.341483][T12717]  ? __fget_files+0x215/0x3d0
[  526.341497][T12717]  ? __fget_files+0x21f/0x3d0
[  526.341511][T12717]  ksys_read+0x12a/0x250
[  526.341521][T12717]  ? __pfx_ksys_read+0x10/0x10
[  526.341531][T12717]  ? ksys_write+0x1ac/0x250
[  526.341541][T12717]  ? __pfx_ksys_write+0x10/0x10
[  526.341555][T12717]  __do_fast_syscall_32+0xe7/0x970
[  526.341580][T12717]  ? lockdep_hardirqs_on+0x78/0x100
[  526.341597][T12717]  do_fast_syscall_32+0x32/0x70
[  526.341613][T12717]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  526.341629][T12717] RIP: 0023:0xf704efec
[  526.341644][T12717] Code: Unable to access opcode bytes at 0xf704efc2.
[  526.341660][T12717] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003
[  526.341673][T12717] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200
[  526.341680][T12717] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  526.341687][T12717] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  526.341694][T12717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  526.341700][T12717] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  526.341714][T12717]  </TASK>
[  526.468135][T12721] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  526.502877][T12720] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  526.537738][T12725] program syz.4.1747 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  526.622186][T12729] FAULT_INJECTION: forcing a failure.
[  526.622186][T12729] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  526.628399][T12729] CPU: 3 UID: 0 PID: 12729 Comm: syz.5.1741 Not tainted syzkaller #0 PREEMPT(full) 
[  526.628430][T12729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  526.628437][T12729] Call Trace:
[  526.628441][T12729]  <TASK>
[  526.628447][T12729]  dump_stack_lvl+0x100/0x190
[  526.628465][T12729]  should_fail_ex.cold+0x5/0xa
[  526.628478][T12729]  _copy_to_user+0x32/0xd0
[  526.628508][T12729]  simple_read_from_buffer+0xcb/0x170
[  526.628528][T12729]  proc_fail_nth_read+0x1af/0x230
[  526.628544][T12729]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  526.628561][T12729]  ? rw_verify_area+0xce/0x6d0
[  526.628577][T12729]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  526.628593][T12729]  vfs_read+0x1e4/0xb40
[  526.628605][T12729]  ? __pfx_vfs_read+0x10/0x10
[  526.628615][T12729]  ? find_held_lock+0x2b/0x80
[  526.628629][T12729]  ? __fget_files+0x215/0x3d0
[  526.628643][T12729]  ? __fget_files+0x21f/0x3d0
[  526.628657][T12729]  ksys_read+0x12a/0x250
[  526.628667][T12729]  ? __pfx_ksys_read+0x10/0x10
[  526.628682][T12729]  do_int80_emulation+0x14b/0x720
[  526.628701][T12729]  asm_int80_emulation+0x1a/0x20
[  526.628713][T12729] RIP: 0023:0xf71c73eb
[  526.628724][T12729] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  526.628735][T12729] RSP: 002b:00000000f547d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  526.628747][T12729] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f547d5d0
[  526.628755][T12729] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  526.628761][T12729] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  526.628768][T12729] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  526.628775][T12729] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  526.628789][T12729]  </TASK>
[  527.460429][T12725] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  527.482306][T12725] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  527.484610][T12725] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  527.488124][T12725] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  527.491656][T12725] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  527.505942][T12725] pci 0000:00:01.0: Adding to iommu group 1
[  527.519330][T12725] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  527.521461][T12725] pci 0000:00:01.0: vgaarb: bridge control possible
[  527.523506][T12725] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  527.539105][T12725] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  527.541907][T12725] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  527.545601][T12725] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  527.559530][T12725] [drm] Found bochs VGA, ID 0xb0c5.
[  527.561320][T12725] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  527.575017][T12725] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  527.619830][T12725] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  527.637066][ T5753] Bluetooth: hci2: command tx timeout
[  527.815554][T12742] F2FS-fs: Conflicting test_dummy_encryption options
[  527.820285][T12742] vfio-pci 0000:00:01.0: vgaarb: deactivate vga console
[  527.823140][T12742] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  528.133911][ T5753] Bluetooth: hci1: unexpected event for opcode 0x0c38
[  529.717178][ T5753] Bluetooth: hci2: command tx timeout
[  530.328104][   T41] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  530.498014][   T41] usb 5-1: Using ep0 maxpacket: 8
[  530.501593][   T41] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[  530.504641][   T41] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  530.509028][   T41] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  530.512232][   T41] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  530.515752][   T41] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  530.520550][   T41] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  530.524711][   T41] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  530.528432][   T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.731853][T12785] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  530.809812][T12786] F2FS-fs: Conflicting test_dummy_encryption options
[  530.813769][T12786] vfio-pci 0000:00:01.0: vgaarb: deactivate vga console
[  530.816749][T12786] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  530.829807][   T41] usb 5-1: GET_CAPABILITIES returned 0
[  530.832900][   T41] usbtmc 5-1:16.0: can't read capabilities
[  531.066048][T12773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  531.071681][T12773] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  531.119782][    C3] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  531.123711][T12773] usbtmc 5-1:16.0: Unable to send data, error -71
[  531.138909][   T41] usb 5-1: USB disconnect, device number 32
[  531.815289][ T5753] Bluetooth: hci2: command tx timeout
[  533.178210][T12801] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  533.242798][T12801] program syz.4.1763 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  533.256675][T12801] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  533.274538][T12801] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  533.277253][T12801] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  533.279914][T12801] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  533.285370][T12801] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  533.317685][T12801] pci 0000:00:01.0: Adding to iommu group 1
[  533.342102][T12801] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  533.344417][T12801] pci 0000:00:01.0: vgaarb: bridge control possible
[  533.346525][T12801] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  533.358325][T12801] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  533.361101][T12801] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  533.367443][T12801] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  533.409042][T12801] [drm] Found bochs VGA, ID 0xb0c5.
[  533.410867][T12801] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  533.864200][T12801] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  533.915233][T12801] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  534.185392][T12826] program syz.2.1768 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  535.111260][T12840] F2FS-fs: Conflicting test_dummy_encryption options
[  535.387219][T12826] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  535.424950][T12826] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  535.426497][T12842] block2mtd: device name too long
[  535.429863][T12826] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  535.430080][T12826] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  535.430825][T12826] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  535.456931][T12826] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 25640 usecs
[  535.607763][T12826] pci 0000:00:01.0: Adding to iommu group 1
[  535.622481][T12826] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  535.624538][T12826] pci 0000:00:01.0: vgaarb: bridge control possible
[  535.626469][T12826] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  535.653711][T12826] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  535.664852][T12826] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  535.677057][T12826] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  535.691900][T12826] [drm] Found bochs VGA, ID 0xb0c5.
[  535.774717][T12826] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  535.792763][T12826] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4
[  535.870724][T12849] program syz.4.1773 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  536.092644][T12849] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  536.114733][T12849] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  536.119030][T12849] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  536.122827][T12849] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  536.128154][T12849] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  536.220054][T12849] pci 0000:00:01.0: Adding to iommu group 1
[  536.224349][T12857] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  536.244279][T12849] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  536.246471][T12849] pci 0000:00:01.0: vgaarb: bridge control possible
[  536.248490][T12849] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  536.260477][T12849] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  536.263525][T12849] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  536.280019][T12849] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  536.338860][T12849] [drm] Found bochs VGA, ID 0xb0c5.
[  536.340659][T12849] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  536.473839][T12849] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  536.734931][T12849] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  537.268077][T12868] bond1: entered promiscuous mode
[  537.568939][T12876] F2FS-fs: Conflicting test_dummy_encryption options
[  537.571947][T12876] vfio-pci 0000:00:01.0: vgaarb: deactivate vga console
[  537.574578][T12876] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  538.650404][T12886] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1784'.
[  538.966907][T12897] program syz.2.1786 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  538.981200][T12896] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  539.065810][T12897] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  539.098762][T12897] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  539.102537][T12897] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  539.106778][T12897] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  539.128014][T12897] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  539.202071][T12897] pci 0000:00:01.0: Adding to iommu group 1
[  539.210190][T12897] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  539.212943][T12897] pci 0000:00:01.0: vgaarb: bridge control possible
[  539.215472][T12897] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  539.248604][T12897] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  539.252947][T12897] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  539.264697][T12897] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  539.341322][T12897] [drm] Found bochs VGA, ID 0xb0c5.
[  539.343910][T12897] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  539.373357][T12897] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  539.488251][T12897] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  540.152068][T12919] program syz.2.1791 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  540.340261][T12919] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  540.361096][T12919] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  540.363581][T12919] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  540.366077][T12919] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  540.373396][T12919] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  540.405093][T12919] pci 0000:00:01.0: Adding to iommu group 1
[  540.433278][T12919] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  540.435170][T12919] pci 0000:00:01.0: vgaarb: bridge control possible
[  540.436977][T12919] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  540.451202][T12919] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  540.454512][T12919] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  540.461255][T12919] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  540.538229][T12919] [drm] Found bochs VGA, ID 0xb0c5.
[  540.541226][T12919] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  540.922175][T12927] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  541.008906][T12919] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  541.122793][T12919] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  542.012571][ T5753] Bluetooth: hci0: Malformed Event: 0x13
[  542.220859][T12956] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  542.338014][T12959] program syz.5.1800 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  543.129497][T12959] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  543.158008][T12959] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  543.161745][T12959] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  543.166213][T12959] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  543.225116][T12959] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  543.994484][T12959] pci 0000:00:01.0: Adding to iommu group 1
[  544.024485][T12959] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  544.027242][T12959] pci 0000:00:01.0: vgaarb: bridge control possible
[  544.029849][T12959] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  544.044664][T12959] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  544.048172][T12959] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  544.052909][T12959] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  544.068458][T12959] [drm] Found bochs VGA, ID 0xb0c5.
[  544.070645][T12959] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  544.106043][T12959] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  544.136184][T12976] binder: 12975:12976 ioctl c0306201 0 returned -14
[  544.333837][T12959] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  544.411733][T12982] program syz.0.1806 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  544.499617][T12978] Mass Storage Function, version: 2009/09/11
[  544.502661][T12978] LUN: removable file: (no medium)
[  544.829094][T12986] program syz.5.1807 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  544.894499][T12982] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  544.915467][T12982] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  544.922582][T12982] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  544.925553][T12982] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  544.929568][T12982] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  544.945336][T12982] pci 0000:00:01.0: Adding to iommu group 1
[  544.991286][T12982] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  544.994222][T12982] pci 0000:00:01.0: vgaarb: bridge control possible
[  544.997046][T12982] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  545.012496][T12982] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  545.016212][T12982] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  545.037285][T12982] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  545.090982][T12982] [drm] Found bochs VGA, ID 0xb0c5.
[  545.096745][T12982] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  545.113611][T12990] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1817'.
[  545.130655][T12982] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  545.275896][T12982] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  545.393984][ T5753] Bluetooth: hci4: Malformed Event: 0x13
[  546.556031][T13023] program syz.0.1819 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  546.677941][T13023] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  546.700285][T13023] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  546.703149][T13023] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  546.705702][T13023] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  546.709522][ T3391] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  546.713807][T13023] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  546.734016][T13019] block2mtd: device name too long
[  546.834945][T13023] pci 0000:00:01.0: Adding to iommu group 1
[  546.870941][T13023] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  546.873149][T13023] pci 0000:00:01.0: vgaarb: bridge control possible
[  546.875227][T13023] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  546.923200][T13023] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  546.926401][T13023] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  546.933303][T13023] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  547.018366][T13023] [drm] Found bochs VGA, ID 0xb0c5.
[  547.023249][T13023] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  547.071178][T13023] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  547.273560][T13034] program syz.2.1821 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  547.283690][T13023] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  547.658794][ T3391] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  547.664897][ T3391] usb 9-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00
[  547.676946][ T3391] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  547.734395][T13034] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  547.760959][T13034] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  547.764241][T13034] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  547.767705][T13034] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  547.772984][T13034] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  547.792261][T13034] pci 0000:00:01.0: Adding to iommu group 1
[  547.882955][T13042] capability: warning: `syz.0.1823' uses deprecated v2 capabilities in a way that may be insecure
[  547.935397][ T3391] msi2500 9-1:1.0: Registered as swradio24
[  547.941975][ T3391] msi2500 9-1:1.0: SDR API is still slightly experimental and functionality changes may follow
[  547.974040][T13034] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  547.976652][T13034] pci 0000:00:01.0: vgaarb: bridge control possible
[  547.979431][T13034] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  548.011331][T13034] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  548.014880][T13034] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  548.020513][T13034] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  548.028259][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1822'.
[  548.040699][T13043] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  548.053005][T13034] [drm] Found bochs VGA, ID 0xb0c5.
[  548.055307][T13034] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  548.060708][T13034] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4
[  548.335846][ T5461] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  549.156194][    C0] vcan0: j1939_tp_rxtimer: 0xffff88804c36d400: rx timeout, send abort
[  549.572256][   T56] usb 9-1: USB disconnect, device number 18
[  549.662717][    C0] vcan0: j1939_tp_rxtimer: 0xffff88804c36d400: abort rx timeout. Force session deactivation
[  549.777614][T13075] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  549.869337][T13074] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  550.220551][T13090] program syz.2.1833 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  550.229065][T13090] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  550.249804][T13090] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  550.252429][T13090] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  550.255214][T13090] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  550.260068][T13090] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  550.294617][T13090] pci 0000:00:01.0: Adding to iommu group 1
[  550.306771][T13090] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  550.308838][T13090] pci 0000:00:01.0: vgaarb: bridge control possible
[  550.310762][T13090] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  550.323949][T13090] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  550.326795][T13090] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  550.333098][T13090] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  550.400739][T13090] [drm] Found bochs VGA, ID 0xb0c5.
[  550.402683][T13090] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  550.427175][T13090] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  550.645895][T13090] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  550.723889][T13097] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  550.989475][T13103] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1845'.
[  551.427262][T13109] bridge_slave_0: left allmulticast mode
[  551.430184][T13109] bridge_slave_0: left promiscuous mode
[  551.432644][T13109] bridge0: port 1(bridge_slave_0) entered disabled state
[  551.444045][T13109] bridge_slave_1: left allmulticast mode
[  551.446363][T13109] bridge_slave_1: left promiscuous mode
[  551.449499][T13109] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.460777][T13109] bond0: (slave bond_slave_0): Releasing backup interface
[  551.472919][T13109] bond0: (slave bond_slave_1): Releasing backup interface
[  551.485374][T13109] team0: Port device team_slave_0 removed
[  551.502231][T13109] team0: Port device team_slave_1 removed
[  551.505311][T13109] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  551.508224][T13109] batman_adv: batadv0: Removing interface: batadv_slave_0
[  551.513539][T13109] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  551.516450][T13109] batman_adv: batadv0: Removing interface: batadv_slave_1
[  551.522011][T13109] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  551.848734][T13119] program syz.4.1848 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  552.004692][T13119] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  552.029122][T13119] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  552.033109][T13119] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  552.036652][T13119] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  552.048127][T13119] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  552.120264][T13119] pci 0000:00:01.0: Adding to iommu group 1
[  552.162688][T13119] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  552.165664][T13119] pci 0000:00:01.0: vgaarb: bridge control possible
[  552.168421][T13119] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  552.188273][T13119] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  552.191891][T13119] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  552.203076][T13119] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  552.291245][T13119] [drm] Found bochs VGA, ID 0xb0c5.
[  552.293862][T13119] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  552.320126][ T5803] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  552.324226][ T5803] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.447151][T13119] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  552.508619][T13131] program syz.5.1846 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  552.800810][T13119] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  553.023384][ T5803] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  553.026924][ T5803] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.323669][ T5803] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  553.333737][ T5803] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.369804][ T5751] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  553.376148][ T5751] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  553.383597][ T5751] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  553.392089][ T5751] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  553.396650][ T5751] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  553.524653][ T5803] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  553.589419][T13154] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  553.672277][ T5803] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.974155][ T5803] bridge_slave_1: left allmulticast mode
[  553.976060][ T5803] bridge_slave_1: left promiscuous mode
[  553.978716][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.984406][ T5803] bridge_slave_0: left allmulticast mode
[  553.986271][ T5803] bridge_slave_0: left promiscuous mode
[  553.988243][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.176385][ T5803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  554.185166][ T5803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  554.190209][ T5803] bond0 (unregistering): Released all slaves
[  554.196030][ T5803] bond1 (unregistering): Released all slaves
[  554.197396][ T5755] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  554.221075][T13173] program syz.5.1854 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  554.417011][ T5755] usb 9-1: Using ep0 maxpacket: 8
[  554.427634][ T5755] usb 9-1: config index 0 descriptor too short (expected 74, got 45)
[  554.435476][ T5755] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  554.444847][ T5755] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  554.453890][ T5755] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  554.459783][ T5755] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  554.465619][T13173] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  554.466969][ T5755] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  554.473607][ T5755] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  554.488417][ T5755] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.515911][T13173] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  554.518583][T13173] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  554.524906][T13173] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  554.530806][T13173] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  554.540680][T13173] pci 0000:00:01.0: Adding to iommu group 1
[  554.546151][T13173] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  554.548271][T13173] pci 0000:00:01.0: vgaarb: bridge control possible
[  554.550288][T13173] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  554.561130][T13173] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  554.564058][T13173] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  554.569530][T13173] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  554.577699][T13173] [drm] Found bochs VGA, ID 0xb0c5.
[  554.579669][T13173] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  554.592951][T13173] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  554.674125][ T5461] 8021q: adding VLAN 0 to HW filter on device eth1
[  554.721494][ T5755] usb 9-1: GET_CAPABILITIES returned 0
[  554.727910][ T5755] usbtmc 9-1:16.0: can't read capabilities
[  554.760340][T13173] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  554.855395][ T5803] hsr_slave_0: left promiscuous mode
[  554.859711][ T5803] hsr_slave_1: left promiscuous mode
[  554.862778][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  554.883924][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_0
[  554.899600][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  554.903401][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_1
[  554.932927][T13163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  554.937041][ T5803] veth1_macvtap: left promiscuous mode
[  554.938933][T13163] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  554.939421][ T5803] veth0_macvtap: left promiscuous mode
[  554.948720][ T8772] usb 9-1: USB disconnect, device number 19
[  554.957378][ T5803] veth1_vlan: left promiscuous mode
[  554.959753][ T5803] veth0_vlan: left promiscuous mode
[  555.164939][T13198] program syz.0.1857 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  555.357916][ T5803] team0 (unregistering): Port device team_slave_1 removed
[  555.375640][ T5803] team0 (unregistering): Port device team_slave_0 removed
[  555.483573][ T5461] 8021q: adding VLAN 0 to HW filter on device eth6
[  555.505562][T13198] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  555.558291][T13198] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  555.561185][T13198] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  555.564339][T13198] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  555.570320][ T5753] Bluetooth: hci1: command tx timeout
[  555.574490][T13198] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  555.618763][T13198] pci 0000:00:01.0: Adding to iommu group 1
[  555.623842][T13198] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  555.626040][T13198] pci 0000:00:01.0: vgaarb: bridge control possible
[  555.628494][T13198] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  555.638087][T13138] bridge0: port 1(bridge_slave_0) entered blocking state
[  555.640724][T13138] bridge0: port 1(bridge_slave_0) entered disabled state
[  555.643251][T13138] bridge_slave_0: entered allmulticast mode
[  555.646126][T13138] bridge_slave_0: entered promiscuous mode
[  555.651382][T13138] bridge0: port 2(bridge_slave_1) entered blocking state
[  555.655114][T13138] bridge0: port 2(bridge_slave_1) entered disabled state
[  555.664347][T13138] bridge_slave_1: entered allmulticast mode
[  555.673005][T13138] bridge_slave_1: entered promiscuous mode
[  555.698537][T13198] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  555.706719][T13198] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  555.720167][T13138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  555.725678][T13138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  555.736058][T13198] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  555.760831][T13198] [drm] Found bochs VGA, ID 0xb0c5.
[  555.764011][T13198] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  555.828835][T13212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1859'.
[  555.834730][T13198] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  555.848531][T13138] team0: Port device team_slave_0 added
[  555.875997][T13138] team0: Port device team_slave_1 added
[  555.955900][ T5461] 8021q: adding VLAN 0 to HW filter on device eth7
[  555.965281][T13138] batman_adv: batadv0: Adding interface: batadv_slave_0
[  555.974106][T13138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  555.981996][T13138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  556.004331][T13138] batman_adv: batadv0: Adding interface: batadv_slave_1
[  556.007542][T13138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  556.027090][T13138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  556.038978][T13198] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  556.073054][T13138] hsr_slave_0: entered promiscuous mode
[  556.077659][T13138] hsr_slave_1: entered promiscuous mode
[  556.083809][T13138] debugfs: 'hsr0' already exists in 'hsr'
[  556.088285][T13138] Cannot create hsr debugfs directory
[  556.221798][T13138] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  556.225817][T13138] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  556.230034][T13138] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  556.236165][T13138] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  556.239081][T13138] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  556.246263][T13138] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  556.249099][T13138] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  556.253414][T13138] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  556.268030][T13138] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.270264][T13138] bridge0: port 2(bridge_slave_1) entered forwarding state
[  556.272576][T13138] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.274694][T13138] bridge0: port 1(bridge_slave_0) entered forwarding state
[  556.325807][T13138] 8021q: adding VLAN 0 to HW filter on device bond0
[  556.340851][ T6775] bridge0: port 1(bridge_slave_0) entered disabled state
[  556.345974][T13246] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  556.353742][ T6775] bridge0: port 2(bridge_slave_1) entered disabled state
[  556.399732][T13138] 8021q: adding VLAN 0 to HW filter on device team0
[  556.403875][ T5461] 8021q: adding VLAN 0 to HW filter on device eth8
[  556.415324][ T6775] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.418590][ T6775] bridge0: port 1(bridge_slave_0) entered forwarding state
[  556.445802][ T6775] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.449233][ T6775] bridge0: port 2(bridge_slave_1) entered forwarding state
[  557.132864][T13138] 8021q: adding VLAN 0 to HW filter on device batadv0
[  557.542490][T13279] program syz.4.1865 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  557.570569][T13138] veth0_vlan: entered promiscuous mode
[  557.578242][T13138] veth1_vlan: entered promiscuous mode
[  557.616980][   T24] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[  557.637088][ T5753] Bluetooth: hci1: command tx timeout
[  557.701843][T13138] veth0_macvtap: entered promiscuous mode
[  557.717971][T13138] veth1_macvtap: entered promiscuous mode
[  557.787303][   T24] usb 10-1: Using ep0 maxpacket: 8
[  557.791350][   T24] usb 10-1: config index 0 descriptor too short (expected 74, got 45)
[  557.794509][   T24] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  557.799810][   T24] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  557.803265][   T24] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  557.806758][   T24] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  557.810216][   T24] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  557.810793][T13138] batman_adv: batadv0: Interface activated: batadv_slave_0
[  557.814269][   T24] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  557.822520][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  557.846718][T13138] batman_adv: batadv0: Interface activated: batadv_slave_1
[  557.949156][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  557.957358][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  557.972871][T13279] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  558.006644][ T5803] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  558.009902][ T5803] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  558.019345][T13279] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  558.022540][T13279] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  558.025641][T13279] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  558.032545][ T6789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  558.040769][ T6789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  558.042739][   T24] usb 10-1: GET_CAPABILITIES returned 0
[  558.046096][   T24] usbtmc 10-1:16.0: can't read capabilities
[  558.046949][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  558.050935][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  558.053533][T13279] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  558.064596][T13279] pci 0000:00:01.0: Adding to iommu group 1
[  558.072388][T13279] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  558.074784][T13279] pci 0000:00:01.0: vgaarb: bridge control possible
[  558.076843][T13279] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  558.091303][T13279] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  558.094028][T13279] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  558.098401][T13279] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  558.119871][T13279] [drm] Found bochs VGA, ID 0xb0c5.
[  558.122312][T13279] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  558.134801][T13279] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  558.198552][T13279] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  558.253517][T13274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  558.278340][T13274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  558.296121][   T24] usb 10-1: USB disconnect, device number 22
[  558.677163][T13298] program syz.0.1871 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  558.749553][T13298] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  558.779606][T13298] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  558.791775][T13298] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  558.794723][T13298] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  558.798778][T13298] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  558.815387][T13298] pci 0000:00:01.0: Adding to iommu group 1
[  558.824059][T13298] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  558.826873][T13298] pci 0000:00:01.0: vgaarb: bridge control possible
[  558.829655][T13298] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  558.847293][T13298] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  558.851525][T13298] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  558.857868][T13298] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  558.908772][T13298] [drm] Found bochs VGA, ID 0xb0c5.
[  558.911832][T13298] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  558.935248][T13298] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  559.002944][T13298] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  559.203396][T13306] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  559.727276][ T5753] Bluetooth: hci1: command tx timeout
[  560.138037][T13313] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  560.619952][T13323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  560.624663][T13324] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  561.074506][T13334] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  561.338552][T13340] F2FS-fs: Conflicting test_dummy_encryption options
[  561.344041][T13340] vfio-pci 0000:00:01.0: vgaarb: deactivate vga console
[  561.347798][T13340] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  561.807422][ T5753] Bluetooth: hci1: command tx timeout
[  562.042862][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1882'.
[  562.069547][   T56] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  562.227863][   T56] usb 9-1: Using ep0 maxpacket: 8
[  562.232797][   T56] usb 9-1: config index 0 descriptor too short (expected 74, got 45)
[  562.236234][   T56] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  562.241956][   T56] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  562.249954][   T56] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  562.254293][   T56] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  562.259018][   T56] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  562.264383][   T56] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  562.268570][   T56] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.480733][   T56] usb 9-1: GET_CAPABILITIES returned 0
[  562.483674][   T56] usbtmc 9-1:16.0: can't read capabilities
[  562.529398][ T1441] ieee802154 phy1 wpan1: encryption failed: -22
[  562.564767][T13362] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  563.496593][T13373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  563.499956][T13373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  563.511971][ T5856] usb 9-1: USB disconnect, device number 20
[  563.714297][T13376] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  563.886550][T13375] program syz.6.1889 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  563.894961][T13375] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  563.912676][T13375] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  563.915503][T13375] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  563.918211][T13375] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  563.921189][T13375] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  563.929031][T13375] pci 0000:00:01.0: Adding to iommu group 1
[  563.935024][T13375] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  563.937863][T13375] pci 0000:00:01.0: vgaarb: bridge control possible
[  563.940563][T13375] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  563.950549][T13375] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  563.954005][T13375] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  563.960758][T13375] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  563.973747][T13375] [drm] Found bochs VGA, ID 0xb0c5.
[  563.975898][T13375] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  563.985543][T13375] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  564.047309][T13375] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  564.436154][T13402] F2FS-fs: Conflicting test_dummy_encryption options
[  564.570256][T13402] vfio-pci 0000:00:01.0: vgaarb: deactivate vga console
[  564.576483][T13402] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  564.729863][T13400] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  564.781460][T13400] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  564.790293][T13400] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  564.798432][T13400] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  564.808464][T13400] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  564.895081][T13400] pci 0000:00:01.0: Adding to iommu group 1
[  564.978607][T13400] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  564.981512][T13400] pci 0000:00:01.0: vgaarb: bridge control possible
[  564.984224][T13400] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  564.999400][T13400] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  565.003383][T13400] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  565.050518][T13400] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  565.105514][T13400] [drm] Found bochs VGA, ID 0xb0c5.
[  565.112397][T13400] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  565.156782][T13400] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  565.285001][T13400] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  565.632635][T13428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1900'.
[  565.636392][T13428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1900'.
[  566.171078][T13435] netlink: 'syz.5.1903': attribute type 16 has an invalid length.
[  566.175988][T13435] netlink: 'syz.5.1903': attribute type 3 has an invalid length.
[  566.179087][T13435] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1903'.
[  566.446241][T13443] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  566.886140][T13454] program syz.0.1909 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  566.936923][T13455] program syz.6.1908 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  567.527480][T13454] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  567.575703][T13454] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  567.586304][T13454] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  567.597626][T13454] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  567.605989][T13454] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  567.624166][T13454] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 17926 usecs
[  567.669860][T13454] pci 0000:00:01.0: Adding to iommu group 1
[  567.683756][T13454] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  567.686644][T13454] pci 0000:00:01.0: vgaarb: bridge control possible
[  567.689350][T13454] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  567.740823][T13454] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  567.747077][T13454] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  567.759519][T13454] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  567.794081][T13454] [drm] Found bochs VGA, ID 0xb0c5.
[  567.800495][T13454] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  567.845981][T13454] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  567.898457][T13454] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  567.965287][T13485] Cache volume key already in use (9p,syz,)
[  568.073939][   T42] audit: type=1804 audit(1785774878.102:6): pid=13491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1913" name="/newroot/47/file0/file0" dev="9p" ino=78393299 res=1 errno=0
[  568.300444][T13496] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  570.483821][T13536] program syz.4.1921 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  570.934418][T13535] F2FS-fs: Conflicting test_dummy_encryption options
[  571.272626][T13535] vfio-pci 0000:00:01.0: vgaarb: deactivate vga console
[  571.276999][T13535] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  571.303032][T13536] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  571.320665][T13536] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  571.326808][T13536] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  571.341271][T13536] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  571.343987][T13536] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  571.355072][T13536] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 10948 usecs
[  571.373670][T13536] pci 0000:00:01.0: Adding to iommu group 1
[  571.386536][T13536] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  571.388649][T13536] pci 0000:00:01.0: vgaarb: bridge control possible
[  571.390778][T13536] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  571.403798][T13536] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  571.406512][T13536] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  571.412910][T13536] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  571.423585][T13536] [drm] Found bochs VGA, ID 0xb0c5.
[  571.425569][T13536] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  571.433103][T13536] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4
[  571.587727][T13547] program syz.5.1923 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  571.595976][T13547] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  571.613402][T13547] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  571.616009][T13547] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  571.618818][T13547] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  571.623661][T13547] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  571.639225][T13552] F2FS-fs: Conflicting test_dummy_encryption options
[  571.650072][T13547] pci 0000:00:01.0: Adding to iommu group 1
[  571.665036][T13547] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  571.667260][T13547] pci 0000:00:01.0: vgaarb: bridge control possible
[  571.669347][T13547] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  571.683457][T13547] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  571.686436][T13547] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  571.694440][T13547] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  571.723293][T13547] [drm] Found bochs VGA, ID 0xb0c5.
[  571.725315][T13547] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  571.751539][T13547] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  571.860103][T13547] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  573.311245][ T1172] Bluetooth: (null): Invalid header checksum
[  573.403873][ T1172] Bluetooth: (null): Invalid header checksum
[  573.525666][ T6785] Bluetooth: (null): Invalid header checksum
[  573.609636][  T103] Bluetooth: (null): Invalid header checksum
[  573.723493][ T6785] Bluetooth: (null): Invalid header checksum
[  573.827571][ T1172] Bluetooth: (null): Invalid header checksum
[  573.894100][T13581] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  573.988434][ T1172] Bluetooth: (null): Invalid header checksum
[  574.041396][T13584] vfio-pci 0000:00:01.0: vgaarb: deactivate vga console
[  574.047069][T13584] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  574.193902][T13589] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  574.235184][T13589] program syz.4.1933 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  574.244528][T13589] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  574.268362][T13589] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  574.272218][T13589] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  574.275590][T13589] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  574.282653][T13589] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  574.306734][T13593] FAULT_INJECTION: forcing a failure.
[  574.306734][T13593] name failslab, interval 1, probability 0, space 0, times 0
[  574.317353][T13593] CPU: 2 UID: 0 PID: 13593 Comm: syz.5.1935 Not tainted syzkaller #0 PREEMPT(full) 
[  574.317371][T13593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  574.317378][T13593] Call Trace:
[  574.317418][T13593]  <TASK>
[  574.317424][T13593]  dump_stack_lvl+0x100/0x190
[  574.317520][T13593]  should_fail_ex.cold+0x5/0xa
[  574.317534][T13593]  should_failslab+0xc2/0x120
[  574.317557][T13593]  __kmalloc_noprof+0xfc/0x820
[  574.317572][T13593]  ? trace_kmalloc+0xeb/0x110
[  574.317587][T13593]  ? ___neigh_create+0x1532/0x2940
[  574.317637][T13593]  ___neigh_create+0x1532/0x2940
[  574.317654][T13593]  ? __asan_memcpy+0x3c/0x60
[  574.317667][T13593]  ? skb_copy_bits+0x5c8/0x8d0
[  574.317682][T13593]  ? __pfx____neigh_create+0x10/0x10
[  574.317697][T13593]  ip6_finish_output2+0xffa/0x1ce0
[  574.317729][T13593]  ip6_fragment+0xc4d/0x28f0
[  574.317746][T13593]  ? __pfx_ip6_finish_output2+0x10/0x10
[  574.317773][T13593]  ? __pfx_ip6_fragment+0x10/0x10
[  574.317788][T13593]  ? nf_nat_ipv6_fn+0xff/0x2d0
[  574.317822][T13593]  __ip6_finish_output+0xb06/0xdf0
[  574.317840][T13593]  ip6_output+0x2aa/0xa60
[  574.317856][T13593]  ? __pfx_ip6_output+0x10/0x10
[  574.317872][T13593]  ? __ip6_make_skb+0x1258/0x23c0
[  574.317889][T13593]  ? __pfx_ip6_finish_output+0x10/0x10
[  574.317907][T13593]  ? __pfx_ip6_output+0x10/0x10
[  574.317924][T13593]  ip6_local_out+0xcb/0x1f0
[  574.317949][T13593]  ip6_send_skb+0x112/0x430
[  574.317967][T13593]  udp_v6_send_skb+0x9aa/0x1390
[  574.317985][T13593]  udp_v6_push_pending_frames+0x96/0x160
[  574.317998][T13593]  udpv6_sendmsg+0x1d0f/0x2c20
[  574.318015][T13593]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  574.318029][T13593]  ? find_held_lock+0x2b/0x80
[  574.318049][T13593]  ? is_bpf_text_address+0x8a/0x1a0
[  574.318071][T13593]  ? kernel_text_address+0x8d/0x100
[  574.318100][T13593]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  574.318143][T13593]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  574.318156][T13593]  ? inet6_sendmsg+0x105/0x140
[  574.318168][T13593]  inet6_sendmsg+0x105/0x140
[  574.318181][T13593]  ____sys_sendmsg+0x704/0xbe0
[  574.318201][T13593]  ? __pfx_____sys_sendmsg+0x10/0x10
[  574.318220][T13593]  ___sys_sendmsg+0x190/0x1e0
[  574.318234][T13593]  ? __pfx____sys_sendmsg+0x10/0x10
[  574.318254][T13593]  ? find_held_lock+0x2b/0x80
[  574.318279][T13593]  __sys_sendmsg+0x160/0x210
[  574.318297][T13593]  ? __pfx___sys_sendmsg+0x10/0x10
[  574.318317][T13593]  ? __pfx_ksys_write+0x10/0x10
[  574.318331][T13593]  __do_fast_syscall_32+0xe7/0x970
[  574.318373][T13593]  ? lockdep_hardirqs_on+0x78/0x100
[  574.318390][T13593]  do_fast_syscall_32+0x32/0x70
[  574.318406][T13593]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  574.318421][T13593] RIP: 0023:0xf708efec
[  574.318462][T13593] Code: Unable to access opcode bytes at 0xf708efc2.
[  574.318493][T13593] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  574.318506][T13593] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0
[  574.318513][T13593] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000
[  574.318520][T13593] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  574.318527][T13593] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  574.318534][T13593] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  574.318549][T13593]  </TASK>
[  574.320070][T13589] pci 0000:00:01.0: Adding to iommu group 1
[  574.345293][T13595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1936'.
[  574.384034][T13589] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  574.428516][T13589] pci 0000:00:01.0: vgaarb: bridge control possible
[  574.430590][T13589] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  574.446215][T13589] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  574.449249][T13589] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  574.456378][T13589] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  574.457400][T13595] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  574.464423][T13595] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  574.467120][T13595] vhci_hcd vhci_hcd.0: Device attached
[  574.485932][T13599] vhci_hcd: connection closed
[  574.486199][ T5803] vhci_hcd vhci_hcd.0: stop threads
[  574.489996][ T5803] vhci_hcd vhci_hcd.0: release socket
[  574.491621][ T5803] vhci_hcd vhci_hcd.0: disconnect device
[  574.540477][T13589] [drm] Found bochs VGA, ID 0xb0c5.
[  574.543116][T13589] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  574.721129][T13589] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  574.865369][T13589] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  575.564171][T13617] program syz.4.1937 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  575.955503][T13617] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  575.974686][T13617] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  575.977555][T13617] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  575.980142][T13617] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  575.995737][T13617] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  576.024180][T13617] pci 0000:00:01.0: Adding to iommu group 1
[  576.049700][T13617] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  576.051778][T13617] pci 0000:00:01.0: vgaarb: bridge control possible
[  576.053763][T13617] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  576.078622][T13617] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  576.081345][T13617] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  576.089064][T13617] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  576.136275][T13617] [drm] Found bochs VGA, ID 0xb0c5.
[  576.138417][T13617] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  576.164998][T13621] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality.
[  576.373976][T13617] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  576.611280][T13632] program syz.5.1943 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  576.628862][T13617] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  576.798862][T13623] vfio-pci 0000:00:01.0: vgaarb: deactivate vga console
[  576.819340][T13623] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  576.939674][T13631] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  577.035405][T13635] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  577.142393][T13632] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  577.163493][T13632] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  577.166305][T13632] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  577.170907][T13632] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  577.175540][T13632] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  577.353231][T13641] program syz.6.1947 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  577.395716][T13632] pci 0000:00:01.0: Adding to iommu group 1
[  577.403393][T13632] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  577.405609][T13632] pci 0000:00:01.0: vgaarb: bridge control possible
[  577.408069][T13632] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  577.424924][T13632] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  577.428438][T13632] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  577.439282][T13632] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  577.518894][T13632] [drm] Found bochs VGA, ID 0xb0c5.
[  577.520646][T13632] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  577.524115][T13632] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4
[  577.648660][T13644] vcan1: entered promiscuous mode
[  577.650326][T13644] vcan1: entered allmulticast mode
[  578.021602][T13650] ucsi_ccg 0-0008: i2c_transfer failed -95
[  578.024448][T13650] ucsi_ccg 0-0008: ucsi_ccg_init failed - -95
[  578.030842][T13650] ucsi_ccg 0-0008: probe with driver ucsi_ccg failed with error -95
[  578.100265][T13650] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08
[  578.756415][T13667] bond1: left promiscuous mode
[  578.762021][T13667] bond2: left promiscuous mode
[  579.710410][T13676] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  579.953617][T13680] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  581.161965][T13688] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  581.201018][T13690] program syz.0.1957 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  581.370362][T13690] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  581.392339][T13690] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  581.395010][T13690] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  581.398485][T13690] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  581.404060][T13690] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  581.419017][T13693] F2FS-fs: Conflicting test_dummy_encryption options
[  581.474133][T13690] pci 0000:00:01.0: Adding to iommu group 1
[  581.502338][T13690] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  581.504534][T13690] pci 0000:00:01.0: vgaarb: bridge control possible
[  581.506607][T13690] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  581.519184][T13690] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  581.522110][T13690] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  581.529211][T13690] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  581.560264][T13690] [drm] Found bochs VGA, ID 0xb0c5.
[  581.562226][T13690] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  581.579582][T13690] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  581.720193][T13690] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  582.043377][T13707] FAULT_INJECTION: forcing a failure.
[  582.043377][T13707] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  582.048599][T13707] CPU: 3 UID: 0 PID: 13707 Comm: syz.0.1962 Not tainted syzkaller #0 PREEMPT(full) 
[  582.048616][T13707] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  582.048624][T13707] Call Trace:
[  582.048677][T13707]  <TASK>
[  582.048682][T13707]  dump_stack_lvl+0x100/0x190
[  582.048781][T13707]  should_fail_ex.cold+0x5/0xa
[  582.048795][T13707]  _copy_from_iter+0x1f4/0x1690
[  582.048840][T13707]  ? trace_kmem_cache_alloc+0xdd/0x100
[  582.048862][T13707]  ? __kasan_slab_alloc+0x89/0x90
[  582.048879][T13707]  ? __pfx__copy_from_iter+0x10/0x10
[  582.048896][T13707]  ? __kvmalloc_node_noprof+0x616/0x970
[  582.048910][T13707]  ? __asan_memset+0x23/0x50
[  582.048923][T13707]  ? __build_skb_around+0x278/0x390
[  582.048972][T13707]  ? is_vmalloc_addr+0x86/0xa0
[  582.048986][T13707]  netlink_sendmsg+0x808/0xda0
[  582.049010][T13707]  ? __pfx_netlink_sendmsg+0x10/0x10
[  582.049025][T13707]  ? apparmor_socket_sendmsg+0x15b/0x270
[  582.049051][T13707]  ____sys_sendmsg+0xa4d/0xbe0
[  582.049069][T13707]  ? __pfx_netlink_sendmsg+0x10/0x10
[  582.049083][T13707]  ? __pfx_____sys_sendmsg+0x10/0x10
[  582.049101][T13707]  ___sys_sendmsg+0x190/0x1e0
[  582.049115][T13707]  ? __pfx____sys_sendmsg+0x10/0x10
[  582.049134][T13707]  ? find_held_lock+0x2b/0x80
[  582.049162][T13707]  __sys_sendmsg+0x160/0x210
[  582.049181][T13707]  ? __pfx___sys_sendmsg+0x10/0x10
[  582.049201][T13707]  ? __pfx_ksys_write+0x10/0x10
[  582.049215][T13707]  __do_fast_syscall_32+0xe7/0x970
[  582.049258][T13707]  ? lockdep_hardirqs_on+0x78/0x100
[  582.049275][T13707]  do_fast_syscall_32+0x32/0x70
[  582.049291][T13707]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  582.049306][T13707] RIP: 0023:0xf704efec
[  582.049321][T13707] Code: Unable to access opcode bytes at 0xf704efc2.
[  582.049354][T13707] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  582.049366][T13707] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001300
[  582.049373][T13707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  582.049380][T13707] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  582.049387][T13707] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  582.049394][T13707] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  582.049408][T13707]  </TASK>
[  582.303836][T13720] file system registered
[  582.384138][T13722] FAULT_INJECTION: forcing a failure.
[  582.384138][T13722] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  582.388436][T13722] CPU: 1 UID: 0 PID: 13722 Comm: syz.6.1966 Not tainted syzkaller #0 PREEMPT(full) 
[  582.388464][T13722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  582.388472][T13722] Call Trace:
[  582.388477][T13722]  <TASK>
[  582.388482][T13722]  dump_stack_lvl+0x100/0x190
[  582.388501][T13722]  should_fail_ex.cold+0x5/0xa
[  582.388512][T13722]  ? prepare_alloc_pages+0x16d/0x5f0
[  582.388530][T13722]  should_fail_alloc_page+0xeb/0x140
[  582.388548][T13722]  prepare_alloc_pages+0x1f0/0x5f0
[  582.388566][T13722]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  582.388587][T13722]  ? rcu_is_watching+0x12/0xc0
[  582.388603][T13722]  ? trace_mm_page_alloc+0x164/0x1c0
[  582.388620][T13722]  ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0
[  582.388633][T13722]  ? trace_sched_exit_tp+0x120/0x160
[  582.388648][T13722]  ? __schedule+0x126e/0x6730
[  582.388662][T13722]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  582.388678][T13722]  ? finish_task_switch.isra.0+0x2c0/0x10c0
[  582.388693][T13722]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  582.388709][T13722]  ? preempt_schedule_irq+0x7b/0x90
[  582.388725][T13722]  ? irqentry_exit+0x24d/0xa00
[  582.388739][T13722]  ? lockdep_hardirqs_on+0x78/0x100
[  582.388757][T13722]  alloc_pages_bulk_noprof+0x5de/0x13c0
[  582.388773][T13722]  ? alloc_pages_mpol+0xe9/0x540
[  582.388791][T13722]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[  582.388812][T13722]  __kasan_populate_vmalloc+0xf0/0x210
[  582.388829][T13722]  alloc_vmap_area+0x95d/0x2bb0
[  582.388848][T13722]  ? kasan_save_track+0x14/0x30
[  582.388862][T13722]  ? __kasan_kmalloc+0xaa/0xb0
[  582.388876][T13722]  ? __pfx_alloc_vmap_area+0x10/0x10
[  582.388892][T13722]  ? __get_vm_area_node+0x101/0x330
[  582.388910][T13722]  __get_vm_area_node+0x1ca/0x330
[  582.388929][T13722]  __vmalloc_node_range_noprof+0x228/0x1630
[  582.388947][T13722]  ? bpf_prog_alloc_no_stats+0x58/0x640
[  582.388963][T13722]  ? __schedule+0x126e/0x6730
[  582.388979][T13722]  ? bpf_prog_alloc_no_stats+0x58/0x640
[  582.388998][T13722]  ? __pfx___schedule+0x10/0x10
[  582.389011][T13722]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  582.389029][T13722]  ? preempt_schedule_irq+0x7b/0x90
[  582.389044][T13722]  ? irqentry_exit+0x24d/0xa00
[  582.389059][T13722]  ? lockdep_hardirqs_on+0x78/0x100
[  582.389073][T13722]  ? irqentry_exit+0x24d/0xa00
[  582.389089][T13722]  ? bpf_prog_alloc_no_stats+0x58/0x640
[  582.389104][T13722]  __vmalloc_node_noprof+0xad/0xf0
[  582.389121][T13722]  ? bpf_prog_alloc_no_stats+0x58/0x640
[  582.389138][T13722]  __vmalloc_noprof+0xa3/0x120
[  582.389155][T13722]  ? __pfx___vmalloc_noprof+0x10/0x10
[  582.389172][T13722]  ? cap_capable+0x70/0x430
[  582.389186][T13722]  ? rcu_is_watching+0x12/0xc0
[  582.389199][T13722]  ? apparmor_capable+0x1d7/0x4d0
[  582.389214][T13722]  bpf_prog_alloc_no_stats+0x58/0x640
[  582.389229][T13722]  ? security_capable+0x80/0x260
[  582.389243][T13722]  bpf_prog_alloc+0x3b/0x200
[  582.389257][T13722]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  582.389275][T13722]  bpf_prog_load+0x4a9/0x2fa0
[  582.389290][T13722]  ? __pfx_bpf_prog_load+0x10/0x10
[  582.389302][T13722]  ? irqentry_exit+0x24d/0xa00
[  582.389316][T13722]  ? lockdep_hardirqs_on+0x78/0x100
[  582.389342][T13722]  __sys_bpf+0x18dc/0x4e80
[  582.389354][T13722]  ? trace_contention_end.constprop.0+0x145/0x1a0
[  582.389370][T13722]  ? __lock_acquire+0x490/0x1a40
[  582.389387][T13722]  ? __pfx___sys_bpf+0x10/0x10
[  582.389399][T13722]  ? __pfx___css_rstat_updated+0x10/0x10
[  582.389418][T13722]  ? kvm_sched_clock_read+0x11/0x20
[  582.389433][T13722]  ? lock_acquire+0x1b9/0x370
[  582.389451][T13722]  ? finish_task_switch.isra.0+0x2c0/0x10c0
[  582.389465][T13722]  ? rcu_is_watching+0x12/0xc0
[  582.389480][T13722]  ? finish_task_switch.isra.0+0x2c5/0x10c0
[  582.389493][T13722]  ? rcu_is_watching+0x12/0xc0
[  582.389506][T13722]  ? trace_sched_exit_tp+0x120/0x160
[  582.389521][T13722]  ? __schedule+0x126e/0x6730
[  582.389541][T13722]  ? __pfx___schedule+0x10/0x10
[  582.389555][T13722]  ? fput+0x79/0x100
[  582.389570][T13722]  ? __ia32_sys_bpf+0xcc/0x170
[  582.389585][T13722]  __ia32_sys_bpf+0xcc/0x170
[  582.389598][T13722]  ? __do_fast_syscall_32+0x98/0x970
[  582.389615][T13722]  __do_fast_syscall_32+0xe7/0x970
[  582.389631][T13722]  ? lockdep_hardirqs_on+0x78/0x100
[  582.389646][T13722]  do_fast_syscall_32+0x32/0x70
[  582.389663][T13722]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  582.389678][T13722] RIP: 0023:0xf70cefec
[  582.389692][T13722] Code: Unable to access opcode bytes at 0xf70cefc2.
[  582.389697][T13722] RSP: 002b:00000000f547b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  582.389709][T13722] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000440
[  582.389716][T13722] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000
[  582.389723][T13722] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  582.389729][T13722] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  582.389736][T13722] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  582.389749][T13722]  </TASK>
[  582.390486][T13722] syz.6.1966: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[  582.391937][ T5754] IPVS: starting estimator thread 0...
[  582.393492][T13722] ,cpuset=/
[  582.486988][T13723] IPVS: using max 44 ests per chain, 105600 per kthread
[  582.487738][T13722] ,mems_allowed=0-1
[  582.546987][  T846] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  582.548764][T13722] 
[  582.548778][T13722] CPU: 1 UID: 0 PID: 13722 Comm: syz.6.1966 Not tainted syzkaller #0 PREEMPT(full) 
[  582.548792][T13722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  582.548800][T13722] Call Trace:
[  582.548805][T13722]  <TASK>
[  582.548812][T13722]  dump_stack_lvl+0x100/0x190
[  582.548829][T13722]  warn_alloc.cold+0x94/0xa8
[  582.548842][T13722]  ? __pfx_warn_alloc+0x10/0x10
[  582.548855][T13722]  ? lockdep_hardirqs_on+0x78/0x100
[  582.548873][T13722]  ? __get_vm_area_node+0x2cd/0x330
[  582.548892][T13722]  ? __get_vm_area_node+0x208/0x330
[  582.548911][T13722]  __vmalloc_node_range_noprof+0xccd/0x1630
[  582.548929][T13722]  ? __schedule+0x126e/0x6730
[  582.548946][T13722]  ? bpf_prog_alloc_no_stats+0x58/0x640
[  582.548966][T13722]  ? __pfx___schedule+0x10/0x10
[  582.548979][T13722]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  582.548998][T13722]  ? preempt_schedule_irq+0x7b/0x90
[  582.549013][T13722]  ? irqentry_exit+0x24d/0xa00
[  582.549027][T13722]  ? lockdep_hardirqs_on+0x78/0x100
[  582.549041][T13722]  ? irqentry_exit+0x24d/0xa00
[  582.549057][T13722]  ? bpf_prog_alloc_no_stats+0x58/0x640
[  582.549073][T13722]  __vmalloc_node_noprof+0xad/0xf0
[  582.549090][T13722]  ? bpf_prog_alloc_no_stats+0x58/0x640
[  582.549107][T13722]  __vmalloc_noprof+0xa3/0x120
[  582.549124][T13722]  ? __pfx___vmalloc_noprof+0x10/0x10
[  582.549141][T13722]  ? cap_capable+0x70/0x430
[  582.549154][T13722]  ? rcu_is_watching+0x12/0xc0
[  582.549169][T13722]  ? apparmor_capable+0x1d7/0x4d0
[  582.549184][T13722]  bpf_prog_alloc_no_stats+0x58/0x640
[  582.549199][T13722]  ? security_capable+0x80/0x260
[  582.549213][T13722]  bpf_prog_alloc+0x3b/0x200
[  582.549227][T13722]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  582.549245][T13722]  bpf_prog_load+0x4a9/0x2fa0
[  582.549260][T13722]  ? __pfx_bpf_prog_load+0x10/0x10
[  582.549272][T13722]  ? irqentry_exit+0x24d/0xa00
[  582.549286][T13722]  ? lockdep_hardirqs_on+0x78/0x100
[  582.549311][T13722]  __sys_bpf+0x18dc/0x4e80
[  582.549324][T13722]  ? trace_contention_end.constprop.0+0x145/0x1a0
[  582.549340][T13722]  ? __lock_acquire+0x490/0x1a40
[  582.549357][T13722]  ? __pfx___sys_bpf+0x10/0x10
[  582.549369][T13722]  ? __pfx___css_rstat_updated+0x10/0x10
[  582.549388][T13722]  ? kvm_sched_clock_read+0x11/0x20
[  582.549403][T13722]  ? lock_acquire+0x1b9/0x370
[  582.549421][T13722]  ? finish_task_switch.isra.0+0x2c0/0x10c0
[  582.549435][T13722]  ? rcu_is_watching+0x12/0xc0
[  582.549450][T13722]  ? finish_task_switch.isra.0+0x2c5/0x10c0
[  582.549463][T13722]  ? rcu_is_watching+0x12/0xc0
[  582.549477][T13722]  ? trace_sched_exit_tp+0x120/0x160
[  582.549491][T13722]  ? __schedule+0x126e/0x6730
[  582.549511][T13722]  ? __pfx___schedule+0x10/0x10
[  582.549525][T13722]  ? fput+0x79/0x100
[  582.549540][T13722]  ? __ia32_sys_bpf+0xcc/0x170
[  582.549552][T13722]  __ia32_sys_bpf+0xcc/0x170
[  582.549565][T13722]  ? __do_fast_syscall_32+0x98/0x970
[  582.549583][T13722]  __do_fast_syscall_32+0xe7/0x970
[  582.549599][T13722]  ? lockdep_hardirqs_on+0x78/0x100
[  582.549615][T13722]  do_fast_syscall_32+0x32/0x70
[  582.549631][T13722]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  582.549647][T13722] RIP: 0023:0xf70cefec
[  582.549663][T13722] Code: Unable to access opcode bytes at 0xf70cefc2.
[  582.549668][T13722] RSP: 002b:00000000f547b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  582.549684][T13722] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000440
[  582.549692][T13722] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000
[  582.549698][T13722] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  582.549705][T13722] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  582.549711][T13722] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  582.549725][T13722]  </TASK>
[  582.549729][T13722] Mem-Info:
[  582.686688][T13722] active_anon:9028 inactive_anon:335 isolated_anon:0
[  582.686688][T13722]  active_file:7870 inactive_file:31604 isolated_file:0
[  582.686688][T13722]  unevictable:1768 dirty:519 writeback:0
[  582.686688][T13722]  slab_reclaimable:7372 slab_unreclaimable:60719
[  582.686688][T13722]  mapped:27357 shmem:5115 pagetables:1338
[  582.686688][T13722]  sec_pagetables:310 bounce:0
[  582.686688][T13722]  kernel_misc_reclaimable:0
[  582.686688][T13722]  free:44460 free_pcp:13660 free_cma:0
[  582.696958][  T846] usb 9-1: Using ep0 maxpacket: 8
[  582.701480][T13722] Node 0 active_anon:120kB inactive_anon:88kB active_file:16kB inactive_file:2108kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:2076kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8384kB pagetables:1484kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  582.701517][T13722] Node 1 active_anon:35992kB inactive_anon:1252kB active_file:31464kB inactive_file:124308kB unevictable:5536kB isolated(anon):0kB isolated(file):0kB mapped:107352kB dirty:2076kB writeback:0kB shmem:18924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6196kB pagetables:3868kB sec_pagetables:100kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  582.706517][  T846] usb 9-1: config 0 has an invalid interface number: 186 but max is 0
[  582.714986][T13722] Node 0 DMA free:3772kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:240kB local_pcp:204kB free_cma:0kB
[  582.715029][T13722] lowmem_reserve[]: 0 280 280 280 280
[  582.715053][T13722] Node 0 DMA32 free:19336kB boost:4096kB min:16864kB low:20056kB high:23248kB reserved_highatomic:0KB free_highatomic:0KB active_anon:116kB inactive_anon:88kB active_file:16kB inactive_file:2100kB unevictable:1536kB writepending:0kB zspages:0kB present:1032196kB managed:286920kB mlocked:0kB bounce:0kB free_pcp:9028kB local_pcp:2536kB free_cma:0kB
[  582.715086][T13722] lowmem_reserve[]: 0 0 0 0 0
[  582.715107][T13722] Node 1 DMA32 free:154732kB boost:6144kB min:53288kB low:65072kB high:76856kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35992kB inactive_anon:1252kB active_file:31464kB inactive_file:124308kB unevictable:5536kB writepending:2076kB zspages:1632kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:45372kB local_pcp:3780kB free_cma:0kB
[  582.715140][T13722] lowmem_reserve[]: 0 0 0 0 0
[  582.715161][T13722] Node 0 DMA: 241*4kB (UE) 23*8kB (UE) 14*16kB (UE) 11*32kB (UE) 
[  582.734772][  T846] usb 9-1: config 0 has no interface number 0
[  582.740805][T13722] 6*64kB (UE) 3*128kB (UE) 1*256kB (E) 0*512kB 1*1024kB (E) 0*2048kB 0*4096kB = 3772kB
[  582.740863][T13722] Node 0 DMA32: 506*4kB (UME) 152*8kB (UME) 78*16kB (UME) 192*32kB (UME) 54*64kB (UME) 
[  582.768601][  T846] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  582.770840][T13722] 19*128kB (UME) 5*256kB (UME) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 19336kB
[  582.770890][T13722] Node 1 DMA32: 7*4kB (UE) 2*8kB (UM) 172*16kB (UME) 
[  582.777245][  T846] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  582.779649][T13722] 278*32kB (UME) 478*64kB (UME) 214*128kB (UME) 64*256kB (UM) 30*512kB (UM) 16*1024kB (UM) 6*2048kB (UM) 6*4096kB (M) = 154668kB
[  582.779741][T13722] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  582.787068][  T846] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  582.789392][T13722] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  582.789412][T13722] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  582.789425][T13722] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  582.789439][T13722] 44982 total pagecache pages
[  582.789447][T13722] 397 pages in swap cache
[  582.789454][T13722] Free swap  = 121288kB
[  582.793594][  T846] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  582.797651][T13722] Total swap = 124996kB
[  582.797664][T13722] 524155 pages RAM
[  582.797668][T13722] 0 pages HighMem/MovableOnly
[  582.800776][  T846] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 1269, setting to 1024
[  582.804272][T13722] 211532 pages reserved
[  582.804281][T13722] 0 pages cma reserved
[  582.806495][T13712] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  582.812190][  T846] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  582.892003][  T846] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  582.895784][  T846] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.899300][  T846] usb 9-1: Product: syz
[  582.901021][  T846] usb 9-1: Manufacturer: syz
[  582.902806][  T846] usb 9-1: SerialNumber: syz
[  582.908696][  T846] usb 9-1: config 0 descriptor??
[  582.911899][T13720] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  583.125772][  T846] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0
[  583.133551][  T846] usb 9-1: USB disconnect, device number 21
[  583.709420][ T8586] ffs_data_put(): freeing
[  583.950212][T13744] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  583.952991][T13744] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  583.956344][T13744] vhci_hcd vhci_hcd.0: Device attached
[  584.158356][T13752] syzkaller0: entered promiscuous mode
[  584.160794][T13752] syzkaller0: entered allmulticast mode
[  584.176444][T13752] tipc: Started in network mode
[  584.178118][T13752] tipc: Node identity f2ee286dba5b, cluster identity 4711
[  584.183082][T13752] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  584.189712][T13752] tipc: Resetting bearer <eth:syzkaller0>
[  584.201442][T13751] tipc: Resetting bearer <eth:syzkaller0>
[  584.207626][  T846] usb 37-1: new high-speed USB device number 2 using vhci_hcd
[  584.232071][T13751] tipc: Disabling bearer <eth:syzkaller0>
[  584.614760][T13747] vhci_hcd: connection reset by peer
[  584.629569][ T5803] vhci_hcd vhci_hcd.0: stop threads
[  584.633172][ T5803] vhci_hcd vhci_hcd.0: release socket
[  584.635586][ T5803] vhci_hcd vhci_hcd.0: disconnect device
[  585.260532][T13764] syzkaller0: entered promiscuous mode
[  585.262844][T13764] syzkaller0: entered allmulticast mode
[  585.294680][T13764] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  585.350253][T13771] tipc: Resetting bearer <eth:syzkaller0>
[  585.398373][T13763] tipc: Resetting bearer <eth:syzkaller0>
[  585.431625][T13763] tipc: Disabling bearer <eth:syzkaller0>
[  587.199803][T13789] fuse: blksize only supported for fuseblk
[  587.386761][T13795] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  587.447737][T13797] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  587.520868][T13800] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  588.749170][T13832] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  589.189230][T13836] syzkaller0: entered promiscuous mode
[  589.191139][T13836] syzkaller0: entered allmulticast mode
[  589.202548][T13836] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  589.211277][T13836] FAULT_INJECTION: forcing a failure.
[  589.211277][T13836] name failslab, interval 1, probability 0, space 0, times 0
[  589.219039][T13836] CPU: 2 UID: 0 PID: 13836 Comm: syz.5.1995 Not tainted syzkaller #0 PREEMPT(full) 
[  589.219065][T13836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  589.219077][T13836] Call Trace:
[  589.219085][T13836]  <TASK>
[  589.219092][T13836]  dump_stack_lvl+0x100/0x190
[  589.219123][T13836]  should_fail_ex.cold+0x5/0xa
[  589.219146][T13836]  should_failslab+0xc2/0x120
[  589.219172][T13836]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  589.219196][T13836]  ? __alloc_skb+0x5b7/0x710
[  589.219219][T13836]  ? __alloc_skb+0x140/0x710
[  589.219246][T13836]  __alloc_skb+0x140/0x710
[  589.219271][T13836]  ? __alloc_skb+0x5b7/0x710
[  589.219296][T13836]  ? __pfx___alloc_skb+0x10/0x10
[  589.219351][T13836]  netlink_alloc_large_skb+0x69/0x150
[  589.219378][T13836]  netlink_sendmsg+0x680/0xda0
[  589.219409][T13836]  ? __pfx_netlink_sendmsg+0x10/0x10
[  589.219439][T13836]  ? apparmor_socket_sendmsg+0x15b/0x270
[  589.219467][T13836]  ____sys_sendmsg+0xa4d/0xbe0
[  589.219501][T13836]  ? __pfx_netlink_sendmsg+0x10/0x10
[  589.219525][T13836]  ? __pfx_____sys_sendmsg+0x10/0x10
[  589.219556][T13836]  ___sys_sendmsg+0x190/0x1e0
[  589.219578][T13836]  ? __pfx____sys_sendmsg+0x10/0x10
[  589.219611][T13836]  ? find_held_lock+0x2b/0x80
[  589.219657][T13836]  __sys_sendmsg+0x160/0x210
[  589.219685][T13836]  ? __pfx___sys_sendmsg+0x10/0x10
[  589.219714][T13836]  ? __pfx_ksys_write+0x10/0x10
[  589.219738][T13836]  __do_fast_syscall_32+0xe7/0x970
[  589.219767][T13836]  ? lockdep_hardirqs_on+0x78/0x100
[  589.219795][T13836]  do_fast_syscall_32+0x32/0x70
[  589.219820][T13836]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  589.219841][T13836] RIP: 0023:0xf708efec
[  589.219862][T13836] Code: Unable to access opcode bytes at 0xf708efc2.
[  589.219869][T13836] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  589.219887][T13836] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800003c0
[  589.219899][T13836] RDX: 0000000000004890 RSI: 0000000000000000 RDI: 0000000000000000
[  589.219911][T13836] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  589.219922][T13836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  589.219934][T13836] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  589.219958][T13836]  </TASK>
[  589.226584][T13836] tipc: Resetting bearer <eth:syzkaller0>
[  589.397835][  T846] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  589.415658][T13835] tipc: Resetting bearer <eth:syzkaller0>
[  589.451584][T13835] tipc: Disabling bearer <eth:syzkaller0>
[  589.797304][ T5751] Bluetooth: hci1: command 0x0405 tx timeout
[  590.339969][T13854] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  590.347745][T13853] program syz.6.1999 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  590.919493][T13860] F2FS-fs: Conflicting test_dummy_encryption options
[  590.925616][T13860] vfio-pci 0000:00:01.0: vgaarb: deactivate vga console
[  590.930850][T13860] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  591.199692][T13864] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  591.246486][T13865] program syz.6.2002 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  591.653652][T13865] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  591.686119][T13865] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  591.689542][T13865] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  591.692307][T13865] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  591.697630][T13865] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  591.734581][T13865] pci 0000:00:01.0: Adding to iommu group 1
[  591.756359][T13865] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  591.758568][T13865] pci 0000:00:01.0: vgaarb: bridge control possible
[  591.760756][T13865] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  591.775151][T13865] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  591.778161][T13865] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  591.786009][T13865] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  591.809047][T13865] [drm] Found bochs VGA, ID 0xb0c5.
[  591.811031][T13865] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  591.858895][T13865] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  592.004645][T13865] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  593.183970][T13878] netlink: 'syz.0.2005': attribute type 10 has an invalid length.
[  593.221502][T13873] bond1: left promiscuous mode
[  593.232303][T13873] 8021q: adding VLAN 0 to HW filter on device bond1
[  593.237788][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  593.245461][T13873] 8021q: adding VLAN 0 to HW filter on device bond2
[  593.263515][T13878] syz_tun: entered promiscuous mode
[  593.286778][T13878] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  593.315242][ T5803] bond0: (slave syz_tun): interface is now down
[  593.373036][T13880] F2FS-fs: Conflicting test_dummy_encryption options
[  593.384249][T13880] vfio-pci 0000:00:01.0: vgaarb: deactivate vga console
[  593.392736][T13880] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  593.410676][ T5803] bond0: (slave syz_tun): interface is now down
[  593.447140][ T5803] bond0: now running without any active interface!
[  594.213481][T13888] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  594.245853][T13888] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  594.270577][T13888] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  594.273206][T13888] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  594.288831][T13888] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  594.291760][T13888] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  594.298128][T13888] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  594.304843][T13888] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  594.308213][T13888] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  594.313197][T13888] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  594.425318][T13903] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2012'.
[  594.571133][T13905] block device autoloading is deprecated and will be removed.
[  594.587727][T11716] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[  594.737031][T11716] usb 9-1: Using ep0 maxpacket: 8
[  594.740829][T11716] usb 9-1: config index 0 descriptor too short (expected 74, got 45)
[  594.743475][T11716] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  594.747680][T11716] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  594.752334][T11716] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  594.757002][T11716] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  594.760331][T11716] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  594.765855][T11716] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  594.769144][T11716] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.068260][T11716] usb 9-1: GET_CAPABILITIES returned 0
[  595.071182][T11716] usbtmc 9-1:16.0: can't read capabilities
[  595.333148][T13892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  595.392713][T13892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  595.487119][ T5751] Bluetooth: hci4: command 0x0406 tx timeout
[  595.584386][   T56] usb 9-1: USB disconnect, device number 22
[  595.801861][T13923] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  595.876776][T13923] F2FS-fs: Conflicting test_dummy_encryption options
[  595.881576][T13923] vfio-pci 0000:00:01.0: vgaarb: deactivate vga console
[  595.884665][T13923] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  595.919062][T13927] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  596.075737][T13927] program syz.5.2019 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  596.096055][T13927] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  596.118350][T13927] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  596.121471][T13927] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  596.124928][T13927] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  596.129677][T13927] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  596.185063][T13927] pci 0000:00:01.0: Adding to iommu group 1
[  596.239914][T13927] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  596.242333][T13927] pci 0000:00:01.0: vgaarb: bridge control possible
[  596.244590][T13927] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  596.261784][T13927] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  596.265239][T13927] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  596.281209][ T5751] Bluetooth: hci0: command 0x0406 tx timeout
[  596.284170][T13927] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  596.360812][ T5751] Bluetooth: hci1: command 0x0405 tx timeout
[  596.365855][T12645] Bluetooth: hci2: command 0x0c1a tx timeout
[  596.385088][T13927] [drm] Found bochs VGA, ID 0xb0c5.
[  596.387908][T13927] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  596.528915][T13927] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  596.908762][T13927] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  597.371694][T13955] comedi comedi0: Minor -3 is invalid!
[  597.430094][T13958] tmpfs: Unknown parameter 'grpquota/cluster/mycluster/node/mynode/ipv4_address'
[  597.580930][ T5753] Bluetooth: hci4: command 0x0406 tx timeout
[  598.341533][T13966] netlink: 'syz.0.2027': attribute type 10 has an invalid length.
[  598.367303][ T5753] Bluetooth: hci0: command 0x0406 tx timeout
[  598.437124][ T5753] Bluetooth: hci2: command 0x0c1a tx timeout
[  598.441790][ T5753] Bluetooth: hci1: command 0x0405 tx timeout
[  599.220181][T13966] 8021q: adding VLAN 0 to HW filter on device bond0
[  599.246107][T13966] team0: Port device bond0 added
[  599.304185][T13967] syz_tun: left promiscuous mode
[  599.434645][T13977] program syz.6.2028 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  599.443652][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  599.497802][ T5803] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  599.511792][ T5803] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  599.515830][T13977] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  599.533000][T13977] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  599.533800][ T5803] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  599.535641][T13977] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  599.541111][T13977] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  599.545615][T13977] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  599.581060][T13977] pci 0000:00:01.0: Adding to iommu group 1
[  599.599383][T13977] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  599.599408][T13977] pci 0000:00:01.0: vgaarb: bridge control possible
[  599.599418][T13977] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  599.608093][T13977] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  599.608186][T11716] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[  599.608359][T13977] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  599.611870][T13977] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  599.757284][T11716] usb 9-1: Using ep0 maxpacket: 8
[  599.758761][T11716] usb 9-1: config index 0 descriptor too short (expected 74, got 45)
[  599.758799][T11716] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  599.758814][T11716] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  599.758827][T11716] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  599.758841][T11716] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  599.758853][T11716] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  599.758874][T11716] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  599.758886][T11716] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.769421][T13977] [drm] Found bochs VGA, ID 0xb0c5.
[  599.769542][T13977] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  599.873242][T13977] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  599.986643][T11716] usb 9-1: GET_CAPABILITIES returned 0
[  599.986676][T11716] usbtmc 9-1:16.0: can't read capabilities
[  600.084896][T13986] bond1 (unregistering): Released all slaves
[  600.197174][T13975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  600.197565][T13975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  600.223507][ T5754] usb 9-1: USB disconnect, device number 23
[  600.364230][T13977] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  600.519492][ T5751] Bluetooth: hci1: command 0x0405 tx timeout
[  600.519524][ T5751] Bluetooth: hci2: command 0x0c1a tx timeout
[  600.864161][T14003] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  602.062263][T14022] program syz.6.2040 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  602.207739][T14023] bond1 (unregistering): Released all slaves
[  602.289679][T14022] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  602.336938][T14022] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  602.340469][T14022] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  602.343622][T14022] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  602.347773][T14022] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  602.351622][T14029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2042'.
[  602.361717][T14022] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 14654 usecs
[  602.597219][ T5753] Bluetooth: hci1: command 0x0405 tx timeout
[  603.001421][T14022] pci 0000:00:01.0: Adding to iommu group 1
[  603.055345][T14022] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  603.057972][T14022] pci 0000:00:01.0: vgaarb: bridge control possible
[  603.060301][T14022] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  603.123933][T14022] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  603.129524][T14022] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  603.134653][T14022] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  603.148820][T14022] [drm] Found bochs VGA, ID 0xb0c5.
[  603.150915][T14022] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  603.162978][T14022] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  603.211227][T14022] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  603.287172][ T5856] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  603.351559][T14038] F2FS-fs: Conflicting test_dummy_encryption options
[  603.377096][   T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  603.517045][ T5856] usb 10-1: Using ep0 maxpacket: 8
[  603.523666][ T5856] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  603.527032][ T5856] usb 10-1: config 0 has no interface number 0
[  603.529672][ T5856] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  603.533926][ T5856] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  603.538015][ T5856] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  603.631495][ T5856] usb 10-1: config 0 descriptor??
[  603.648777][ T5856] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  603.656943][   T10] usb 5-1: Using ep0 maxpacket: 8
[  603.665486][   T10] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[  603.669359][   T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  603.679001][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  603.685654][T14047] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  603.687835][T14047] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  603.690623][   T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  603.695157][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  603.708504][   T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  603.711526][T14047] vhci_hcd vhci_hcd.0: Device attached
[  603.715720][   T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  603.726580][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  603.764301][T14050] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6)
[  603.766917][T14050] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  603.771360][T14050] vhci_hcd vhci_hcd.0: Device attached
[  603.872799][T14032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  603.881755][T14032] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  603.925342][T11716] usb 10-1: USB disconnect, device number 23
[  603.953497][   T10] usb 5-1: GET_CAPABILITIES returned 0
[  603.958188][   T10] usbtmc 5-1:16.0: can't read capabilities
[  603.997712][   T56] usb 46-1: SetAddress Request (2) to port 0
[  603.999880][   T56] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd
[  604.063748][ T5836] usb 50-1: SetAddress Request (2) to port 0
[  604.066810][ T5836] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd
[  604.166998][T14035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  604.172420][T14035] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  604.179878][   T24] usb 5-1: USB disconnect, device number 33
[  604.403832][T14048] vhci_hcd: connection reset by peer
[  604.409475][   T13] vhci_hcd vhci_hcd.4: stop threads
[  604.411065][   T13] vhci_hcd vhci_hcd.4: release socket
[  604.412746][   T13] vhci_hcd vhci_hcd.4: disconnect device
[  604.505229][T14051] vhci_hcd: connection reset by peer
[  604.510363][   T13] vhci_hcd vhci_hcd.6: stop threads
[  604.512296][   T13] vhci_hcd vhci_hcd.6: release socket
[  604.516078][   T13] vhci_hcd vhci_hcd.6: disconnect device
[  605.487650][T14056] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  605.646976][T14056] usb 5-1: Using ep0 maxpacket: 8
[  605.653627][T14056] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[  605.657430][T14056] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  605.666120][T14056] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  605.670074][T14056] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  605.674106][T14056] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  605.678481][T14056] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  605.683684][T14056] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  605.688710][T14056] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.024139][T14056] usb 5-1: GET_CAPABILITIES returned 0
[  606.026899][T14056] usbtmc 5-1:16.0: can't read capabilities
[  606.133396][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2054'.
[  606.227903][T14064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  606.233323][T14064] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  606.256161][T14056] usb 5-1: USB disconnect, device number 34
[  607.467395][T11716] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[  607.472380][T14090] F2FS-fs: Conflicting test_dummy_encryption options
[  607.619387][T11716] usb 10-1: Using ep0 maxpacket: 8
[  607.623747][T11716] usb 10-1: config index 0 descriptor too short (expected 74, got 45)
[  607.640768][T11716] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  607.981152][T11716] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  608.428403][T11716] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  608.437034][T11716] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  608.442005][T11716] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  608.448016][T11716] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  608.451768][T11716] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.710888][T11716] usb 10-1: GET_CAPABILITIES returned 0
[  608.722237][T11716] usbtmc 10-1:16.0: can't read capabilities
[  608.779081][T14119] program syz.4.2065 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  608.908419][T14093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  608.914387][T14093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  608.924041][T11716] usb 10-1: USB disconnect, device number 24
[  608.953119][T14119] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  608.983458][T14119] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  608.987394][T14119] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  608.990870][T14119] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  608.996240][T14119] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  609.089691][   T56] usb 46-1: device descriptor read/8, error -110
[  609.165434][T14119] pci 0000:00:01.0: Adding to iommu group 1
[  609.177534][T14119] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  609.180486][T14119] pci 0000:00:01.0: vgaarb: bridge control possible
[  609.183254][T14119] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  609.195891][T14119] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  609.199645][T14119] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  609.204821][T14119] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  609.219015][T14119] [drm] Found bochs VGA, ID 0xb0c5.
[  609.221349][T14119] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  609.230446][ T5836] usb 50-1: device descriptor read/8, error -110
[  609.254774][T14119] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  609.324666][T14119] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  609.518118][   T56] usb usb46-port1: attempt power cycle
[  609.628039][ T5836] usb usb50-port1: attempt power cycle
[  609.679754][T14135] program syz.0.2068 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  609.812702][T14135] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  609.832863][T14135] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  609.836225][T14135] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  609.839216][T14135] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  609.843096][T14135] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  609.852897][T14135] pci 0000:00:01.0: Adding to iommu group 1
[  609.862098][T14135] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  609.864742][T14135] pci 0000:00:01.0: vgaarb: bridge control possible
[  609.867321][T14135] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  610.177379][   T56] usb usb46-port1: unable to enumerate USB device
[  610.419272][T14135] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  610.431817][T14135] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  610.457700][T14135] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  610.473914][T14135] [drm] Found bochs VGA, ID 0xb0c5.
[  610.475270][ T5836] usb usb50-port1: unable to enumerate USB device
[  610.476179][T14135] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  610.593715][T14135] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  610.704601][T14135] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  610.793701][ T5754] libceph: connect (1)[c::]:6789 error -101
[  610.797481][ T5754] libceph: mon0 (1)[c::]:6789 connect error
[  610.806446][ T5754] libceph: connect (1)[c::]:6789 error -101
[  610.809253][ T5754] libceph: mon0 (1)[c::]:6789 connect error
[  610.819920][T14144] ceph: No mds server is up or the cluster is laggy
[  611.032445][T14155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2074'.
[  611.320407][T14163] program syz.5.2075 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  611.591592][T14165] program syz.4.2076 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  612.563033][T14163] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  612.591020][T14163] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  612.594312][T14163] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  612.597607][T14163] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  612.602400][T14163] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  612.631111][T14163] pci 0000:00:01.0: Adding to iommu group 1
[  612.644781][T14163] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  612.647455][T14163] pci 0000:00:01.0: vgaarb: bridge control possible
[  612.649746][T14163] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  612.661809][T14163] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  612.666803][T14163] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  612.673106][T14163] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  612.712760][T14163] [drm] Found bochs VGA, ID 0xb0c5.
[  612.714599][T14163] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  612.725465][T14163] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4
[  612.756987][ T5899] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[  612.835247][T14175] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  612.917008][ T5899] usb 11-1: Using ep0 maxpacket: 8
[  612.928649][ T5899] usb 11-1: config index 0 descriptor too short (expected 74, got 45)
[  612.934762][ T5899] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  612.944196][ T5899] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  612.954436][ T5899] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  612.966476][ T5899] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  612.972441][ T5899] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  612.978077][ T5899] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  612.981956][ T5899] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  613.196384][ T5899] usb 11-1: GET_CAPABILITIES returned 0
[  613.206322][ T5899] usbtmc 11-1:16.0: can't read capabilities
[  613.404102][T14171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  613.409397][T14171] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  613.415539][ T5899] usb 11-1: USB disconnect, device number 2
[  613.802522][T14203] netlink: Invalid conntrack helper
[  613.804538][T14203] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  614.067093][T14221] 
[  614.068266][T14221] ============================================
[  614.070603][T14221] WARNING: possible recursive locking detected
[  614.072914][T14221] syzkaller #0 Not tainted
[  614.074719][T14221] --------------------------------------------
[  614.077002][T14221] syz.6.2089/14221 is trying to acquire lock:
[  614.079303][T14221] ffffffff8fc53d30 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0
[  614.085732][T14221] 
[  614.085732][T14221] but task is already holding lock:
[  614.088448][T14221] ffffffff8fc53d30 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0
[  614.092542][T14221] 
[  614.092542][T14221] other info that might help us debug this:
[  614.095513][T14221]  Possible unsafe locking scenario:
[  614.095513][T14221] 
[  614.098251][T14221]        CPU0
[  614.099518][T14221]        ----
[  614.100769][T14221]   lock(qp_broker_list.mutex);
[  614.102592][T14221]   lock(qp_broker_list.mutex);
[  614.104439][T14221] 
[  614.104439][T14221]  *** DEADLOCK ***
[  614.104439][T14221] 
[  614.107486][T14221]  May be due to missing lock nesting notation
[  614.107486][T14221] 
[  614.110548][T14221] 1 lock held by syz.6.2089/14221:
[  614.112467][T14221]  #0: ffffffff8fc53d30 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0
[  614.116755][T14221] 
[  614.116755][T14221] stack backtrace:
[  614.118960][T14221] CPU: 3 UID: 0 PID: 14221 Comm: syz.6.2089 Not tainted syzkaller #0 PREEMPT(full) 
[  614.118985][T14221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  614.118998][T14221] Call Trace:
[  614.119024][T14221]  <TASK>
[  614.119032][T14221]  dump_stack_lvl+0x100/0x190
[  614.119066][T14221]  print_deadlock_bug.cold+0xbd/0xca
[  614.119097][T14221]  __lock_acquire+0x1256/0x1a40
[  614.119130][T14221]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  614.119154][T14221]  lock_acquire+0x1b9/0x370
[  614.119178][T14221]  ? vmci_qp_broker_detach+0x14c/0x11e0
[  614.119205][T14221]  ? __pfx___might_resched+0x10/0x10
[  614.119256][T14221]  ? kasan_save_stack+0x3f/0x50
[  614.119288][T14221]  ? kasan_save_stack+0x30/0x50
[  614.119308][T14221]  __mutex_lock+0x1a4/0x1bd0
[  614.119335][T14221]  ? vmci_qp_broker_detach+0x14c/0x11e0
[  614.119360][T14221]  ? vmci_qp_broker_detach+0x14c/0x11e0
[  614.119385][T14221]  ? __fput+0x3ff/0xb50
[  614.119406][T14221]  ? task_work_run+0x150/0x240
[  614.119428][T14221]  ? exit_to_user_mode_loop+0x1d8/0x6f0
[  614.119444][T14221]  ? __do_fast_syscall_32+0x701/0x970
[  614.119475][T14221]  ? do_fast_syscall_32+0x32/0x70
[  614.119498][T14221]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  614.119522][T14221]  ? __pfx___mutex_lock+0x10/0x10
[  614.119551][T14221]  ? vmci_qp_broker_detach+0x14c/0x11e0
[  614.119573][T14221]  vmci_qp_broker_detach+0x14c/0x11e0
[  614.119598][T14221]  ? kasan_quarantine_put+0x104/0x240
[  614.119619][T14221]  ? lockdep_hardirqs_on+0x78/0x100
[  614.119641][T14221]  ? __pfx_vmci_qp_broker_detach+0x10/0x10
[  614.119664][T14221]  ? ctx_free_ctx+0x400/0xda0
[  614.119685][T14221]  ? ctx_free_ctx+0x4bd/0xda0
[  614.119709][T14221]  ? kfree+0x22b/0x6c0
[  614.119728][T14221]  ctx_free_ctx+0x517/0xda0
[  614.119754][T14221]  ? __pfx___schedule+0x10/0x10
[  614.119774][T14221]  ? __pfx_ctx_free_ctx+0x10/0x10
[  614.119798][T14221]  ? preempt_schedule_thunk+0x16/0x40
[  614.119825][T14221]  ? preempt_schedule_common+0x42/0xc0
[  614.119846][T14221]  ? preempt_schedule_thunk+0x16/0x40
[  614.119874][T14221]  vmci_ctx_enqueue_datagram+0x4be/0x5f0
[  614.119903][T14221]  vmci_datagram_dispatch+0x3db/0xc60
[  614.119919][T14221]  ? __pfx_vmci_datagram_dispatch+0x10/0x10
[  614.119937][T14221]  ? vmci_qp_broker_detach+0xe0f/0x11e0
[  614.119960][T14221]  ? find_held_lock+0x2b/0x80
[  614.119980][T14221]  ? vmci_qp_broker_detach+0xef9/0x11e0
[  614.120005][T14221]  qp_notify_peer+0x1a6/0x230
[  614.120027][T14221]  ? __pfx_qp_notify_peer+0x10/0x10
[  614.120049][T14221]  ? __pfx_vmci_ctx_qp_exists+0x10/0x10
[  614.120077][T14221]  vmci_qp_broker_detach+0xa20/0x11e0
[  614.120104][T14221]  ? __pfx_vmci_qp_broker_detach+0x10/0x10
[  614.120127][T14221]  ? ctx_free_ctx+0x400/0xda0
[  614.120151][T14221]  ? ctx_free_ctx+0x4bd/0xda0
[  614.120172][T14221]  ? kfree+0x22b/0x6c0
[  614.120189][T14221]  ctx_free_ctx+0x517/0xda0
[  614.120216][T14221]  ? __pfx_ctx_free_ctx+0x10/0x10
[  614.120240][T14221]  ? __pfx_autoremove_wake_function+0x10/0x10
[  614.120267][T14221]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  614.120294][T14221]  vmci_ctx_destroy+0x150/0x1c0
[  614.120320][T14221]  vmci_host_close+0x115/0x1a0
[  614.120340][T14221]  ? __pfx_vmci_host_close+0x10/0x10
[  614.120360][T14221]  __fput+0x3ff/0xb50
[  614.120384][T14221]  task_work_run+0x150/0x240
[  614.120409][T14221]  ? __pfx_task_work_run+0x10/0x10
[  614.120435][T14221]  exit_to_user_mode_loop+0x1d8/0x6f0
[  614.120452][T14221]  ? rcu_is_watching+0x12/0xc0
[  614.120482][T14221]  __do_fast_syscall_32+0x701/0x970
[  614.120510][T14221]  do_fast_syscall_32+0x32/0x70
[  614.120534][T14221]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  614.120555][T14221] RIP: 0023:0xf70cefec
[  614.120579][T14221] Code: Unable to access opcode bytes at 0xf70cefc2.
[  614.120600][T14221] RSP: 002b:00000000f549c50c EFLAGS: 00000292 ORIG_RAX: 00000000000001b4
[  614.120620][T14221] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 00000000ffffffff
[  614.120633][T14221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  614.120644][T14221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  614.120655][T14221] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  614.120663][T14221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  614.120680][T14221]  </TASK>
[  623.958169][ T1441] ieee802154 phy1 wpan1: encryption failed: -22