last executing test programs:

10.472963633s ago: executing program 2 (id=257):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000001700)=[{&(0x7f0000000080)=""/86, 0x56}], 0x1)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r3, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r1}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @empty, @void, {@canfd={0xd, {{0x4, 0x1, 0x1, 0x1}, 0xd, 0x3, 0x0, 0x0, "3343ffcb801929bc045e57c823d287a4c397b6f980204037878c4549c1a1adc57ac41e088ffeeb27c543b3c23db0df378ec81b4fd507ef36fab9b82f92c20814"}}}}, &(0x7f0000000140)={0x1, 0x3, [0x88, 0xc82, 0x527, 0x4be]})
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
close(0xffffffffffffffff)
syz_emit_ethernet(0x0, 0x0, 0x0)
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14)

8.580044068s ago: executing program 2 (id=264):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
removexattr(&(0x7f0000000080)='./file0\x00', 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000, 0x0, 0x1}, 0x1c)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000740)="5986c661ebb42bfa6464cb14c75e9cfcd0c87d963c5f79227680b88d91ffce97afa404ce506c636d7edc5e22087a65633b94cdee29d97975aa7905b64cc8a1da29c7b4228fe35f3cf9351e377acfcce4079803e636b37d253db4084bbaa03972917794b87e398d654c7970b8d907ea25c42b466116c0100a456e897e59ef282d4165978c7526052d23a08264e673d53a443022bd4e5fb0d2e8f8", 0x9a}], 0x1, &(0x7f0000000380)}], 0x1, 0x8040010)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl0\x00', <r4=>0x0, 0x29, 0x2, 0xb7, 0x7f, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x25}, 0x20, 0x700, 0x5, 0x39}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl2\x00', 0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=@newtfilter={0x8f0, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0x5}, {0x1, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x8c0, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9c}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_ACT={0x80, 0x6, [@m_ife={0x7c, 0x2, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x10001, 0x4, 0x5, 0x400}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x1, 0x0, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r4}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x6}}, @TCA_ROUTE4_POLICE={0x818, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x4f, 0x3, 0x6, 0x3, 0x8, 0x0, 0x3ff, 0x81, 0x8, 0x77, 0x1f85e7e3, 0x39e, 0x1, 0x2, 0x7, 0xffff00, 0x0, 0x380, 0x4, 0x3, 0xf9, 0x0, 0x8, 0x4, 0x400, 0x1, 0x8, 0x1, 0x9, 0x32b3, 0x10000, 0x2521, 0x10001, 0x3, 0xc, 0x1, 0x10001, 0x101, 0x7, 0x1, 0x4, 0x3, 0x80000000, 0x8, 0x7, 0x8, 0x7fff, 0x800, 0x0, 0x6, 0xa0, 0x6, 0xffff0001, 0xb, 0x4, 0xffff8001, 0x2, 0x3, 0x18, 0xd, 0x2, 0x5, 0xd8f, 0x0, 0x4, 0xfffffffb, 0x10011, 0x27b1, 0x3, 0x2e0, 0x8, 0x8, 0x2, 0x83, 0x7, 0x5af0668a, 0x100, 0xfffffffd, 0xb, 0x3ff, 0x9, 0x0, 0x6, 0x10000, 0x3, 0xfff, 0x0, 0x1, 0x8, 0xe, 0x427d, 0x2, 0x3ff, 0x6, 0x0, 0x1, 0x7c966d50, 0x2, 0x1, 0x8, 0x86d4, 0x8, 0x2, 0xd5, 0x0, 0x2, 0x1, 0x9, 0x7, 0x80, 0x0, 0x3, 0x9, 0x0, 0x54, 0x7, 0x8, 0xf8, 0x2, 0x2275, 0x7643, 0x7fffffff, 0x8, 0x79, 0x9, 0x9, 0xd170, 0xec47, 0x7a71bb03, 0x0, 0xfffffffd, 0x10, 0x259674e7, 0x7, 0x7, 0xb10, 0x8, 0x28, 0x2, 0x4, 0x11, 0x6, 0x5, 0x100, 0x6a, 0x6, 0x9, 0x0, 0x80, 0x5, 0x1, 0x9, 0x8, 0x9, 0x1000, 0x6, 0x5, 0x6, 0xd, 0x9, 0x1, 0x2, 0xd, 0x3, 0x8, 0x0, 0x80000001, 0x800, 0x5, 0x3, 0x3, 0x6, 0x0, 0x81, 0xcd7b, 0x9, 0xf, 0x2, 0x7, 0x1, 0xc566, 0x6, 0x9, 0x327, 0xf17, 0x7, 0x8000, 0x4, 0xda, 0x4, 0x0, 0x8, 0x9, 0x3, 0x10001, 0xb422, 0x2, 0xffff, 0x3, 0x4, 0x66e8, 0x8000, 0xfffff1bd, 0x3, 0x8, 0x9, 0xad, 0x8000, 0x3800000, 0x6, 0x10001, 0x77d, 0x4, 0xf154, 0xd29, 0x7, 0x9, 0x81, 0x6, 0x8000, 0x6, 0x2, 0x1, 0x4, 0x2b, 0x6a, 0x200, 0x10000, 0x3, 0xdb, 0x6, 0x40, 0xd, 0x7c2, 0xff, 0x1000, 0x6, 0x0, 0x3, 0x3, 0x3, 0x4, 0x3, 0x2bc, 0x3, 0xe9, 0xf781, 0x2668, 0x5, 0x81, 0x6, 0x4, 0x9, 0xf, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x2, 0x2, 0x5, 0x3, 0x9, 0x7, 0x200, 0x0, 0x0, 0x2444, 0x1ff, 0x7ff, 0x6, 0x7, 0x46, 0xffffffff, 0x2, 0x7ab, 0x987, 0xff, 0x5, 0x9, 0x8, 0xf, 0x2, 0x8, 0x5, 0x2, 0x3, 0x9, 0x400, 0xb, 0x1, 0x4, 0x10001, 0x7, 0xffffffff, 0x6, 0x4, 0xbe3, 0x8001, 0x6, 0x42, 0x9, 0xffff0001, 0x4, 0x800, 0x2, 0x77, 0x9, 0x2, 0x1, 0x8, 0x77d, 0xf, 0x5b, 0x4, 0x5, 0x1, 0x2, 0x1, 0x1, 0x9, 0x8, 0x0, 0x6, 0x7d0d, 0x0, 0x78e, 0x5, 0x515c, 0x5, 0xe, 0xfffffffe, 0x5, 0xc6ab, 0x80000000, 0x0, 0x3, 0x2, 0x101, 0x80, 0xfffffff8, 0xc4, 0xc83156e9, 0x3, 0xfffff175, 0x3, 0x6, 0x400, 0x6, 0x836, 0x0, 0x5, 0xfffffff3, 0x4, 0x9, 0x7483, 0x8, 0x6, 0x2, 0x1ff, 0x3, 0x5, 0x8, 0x2, 0x4, 0x10001, 0xf, 0x3, 0x2, 0x0, 0x6, 0x9, 0x100, 0x6, 0x9, 0x3, 0x5393, 0x76102963, 0x4, 0x4, 0x9d7, 0x6, 0x800, 0x10001, 0x9, 0x6, 0x4, 0x3, 0x200, 0x3, 0x6, 0xf86, 0x3, 0x1, 0x5, 0x347, 0x4, 0x7fff, 0x5, 0x81, 0x800, 0x6, 0x1, 0x5, 0x9, 0x2, 0x7, 0x7f, 0x3, 0x42, 0x1ff, 0x800, 0x7, 0x10, 0x5, 0x8001, 0x28, 0xf, 0x738, 0x9, 0x8001, 0x9, 0xfffffff8, 0xfffffff8, 0x5, 0x9, 0x3, 0x5, 0xea, 0x4, 0x0, 0x401, 0x5, 0x9, 0x1f10b8ed, 0x1, 0x4, 0xc, 0x10, 0x5, 0xeb0f, 0x8, 0x8ba, 0x1, 0x10, 0x9, 0x4, 0x6, 0x8, 0x3, 0x4, 0x50, 0x2, 0x4, 0xf6, 0x54, 0x6, 0xfffffc00, 0x81, 0x5, 0x8, 0x9, 0x6, 0x1800, 0xa, 0x1, 0x7, 0xcb, 0xe, 0xd, 0x200, 0x2, 0x801e, 0x40, 0x2d, 0x5, 0x80000000, 0xffff, 0x3, 0x7fffffff, 0xb, 0x8, 0xa9e, 0x5, 0x8, 0x81, 0x8, 0xcaa, 0x9, 0x9, 0x8, 0x86dd, 0x0, 0x3, 0x5, 0x1, 0x6, 0xb, 0xfffffe23, 0x4, 0x0, 0x5, 0xfffffffb, 0x7, 0x8, 0x7, 0x3c, 0x6, 0x40, 0xb, 0x401, 0x9, 0x3]}]}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x8f0}}, 0x800)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0)
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2)
listen(r0, 0x5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082cbd7000fddbdf250500000008000400030000002c00068008000700", @ANYRES32=r6, @ANYBLOB="08000600100000000500020004000000080003001fabd22f08000700dad84c1c5d55a5ea2dd9db5ef7afa9e63cc97c188ca8d643d44c489e8feb6dba8c2f6e32bb4d2268c98a9ad4e062b38a02ac6f54b4760600b56df19633fc3f8b5598d92a66ba5277a8071c64908713f422f6808bda5ba6e6e133b0a48cc33627b36a48a99614e7856368c663fcced271b8c63ec947992b1d13864474b5680bc7e2ac75eacfaa22473289f70aff6a", @ANYRES32=r4, @ANYBLOB="0c00068005000200a200000005000500ec000000"], 0x5c}}, 0x48000)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1c}, 0x4000)

7.643375708s ago: executing program 2 (id=267):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd, {}, [{0x54, 0x1, [@m_skbmod={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0x0, 0x8}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1})
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x2c4340)
ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000040)='\x00\x00', 0x0, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4c)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000000), 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'wg1\x00', 0x4}, 0x18)

6.871989513s ago: executing program 3 (id=272):
syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x3630c1)
getpid()
mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2)
write(r3, &(0x7f00000000c0)='1\x00', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r4, &(0x7f00000001c0)='1\x00', 0x1)
syz_emit_ethernet(0x256, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x220, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}]}}}}}}, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r6 = epoll_create1(0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44004082)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x20000008})

3.9167625s ago: executing program 2 (id=278):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
removexattr(&(0x7f0000000080)='./file0\x00', 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000, 0x0, 0x1}, 0x1c)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000740)="5986c661ebb42bfa6464cb14c75e9cfcd0c87d963c5f79227680b88d91ffce97afa404ce506c636d7edc5e22087a65633b94cdee29d97975aa7905b64cc8a1da29c7b4228fe35f3cf9351e377acfcce4079803e636b37d253db4084bbaa03972917794b87e398d654c7970b8d907ea25c42b466116c0100a456e897e59ef282d4165978c7526052d23a08264e673d53a443022bd4e5fb0d2e8f8", 0x9a}], 0x1, &(0x7f0000000380)}], 0x1, 0x8040010)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl0\x00', <r4=>0x0, 0x29, 0x2, 0xb7, 0x7f, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x25}, 0x20, 0x700, 0x5, 0x39}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl2\x00', 0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=@newtfilter={0x8f0, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0x5}, {0x1, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x8c0, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9c}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_ACT={0x80, 0x6, [@m_ife={0x7c, 0x2, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x10001, 0x4, 0x5, 0x400}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x1, 0x0, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r4}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x6}}, @TCA_ROUTE4_POLICE={0x818, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x4f, 0x3, 0x6, 0x3, 0x8, 0x0, 0x3ff, 0x81, 0x8, 0x77, 0x1f85e7e3, 0x39e, 0x1, 0x2, 0x7, 0xffff00, 0x0, 0x380, 0x4, 0x3, 0xf9, 0x0, 0x8, 0x4, 0x400, 0x1, 0x8, 0x1, 0x9, 0x32b3, 0x10000, 0x2521, 0x10001, 0x3, 0xc, 0x1, 0x10001, 0x101, 0x7, 0x1, 0x4, 0x3, 0x80000000, 0x8, 0x7, 0x8, 0x7fff, 0x800, 0x0, 0x6, 0xa0, 0x6, 0xffff0001, 0xb, 0x4, 0xffff8001, 0x2, 0x3, 0x18, 0xd, 0x2, 0x5, 0xd8f, 0x0, 0x4, 0xfffffffb, 0x10011, 0x27b1, 0x3, 0x2e0, 0x8, 0x8, 0x2, 0x83, 0x7, 0x5af0668a, 0x100, 0xfffffffd, 0xb, 0x3ff, 0x9, 0x0, 0x6, 0x10000, 0x3, 0xfff, 0x0, 0x1, 0x8, 0xe, 0x427d, 0x2, 0x3ff, 0x6, 0x0, 0x1, 0x7c966d50, 0x2, 0x1, 0x8, 0x86d4, 0x8, 0x2, 0xd5, 0x0, 0x2, 0x1, 0x9, 0x7, 0x80, 0x0, 0x3, 0x9, 0x0, 0x54, 0x7, 0x8, 0xf8, 0x2, 0x2275, 0x7643, 0x7fffffff, 0x8, 0x79, 0x9, 0x9, 0xd170, 0xec47, 0x7a71bb03, 0x0, 0xfffffffd, 0x10, 0x259674e7, 0x7, 0x7, 0xb10, 0x8, 0x28, 0x2, 0x4, 0x11, 0x6, 0x5, 0x100, 0x6a, 0x6, 0x9, 0x0, 0x80, 0x5, 0x1, 0x9, 0x8, 0x9, 0x1000, 0x6, 0x5, 0x6, 0xd, 0x9, 0x1, 0x2, 0xd, 0x3, 0x8, 0x0, 0x80000001, 0x800, 0x5, 0x3, 0x3, 0x6, 0x0, 0x81, 0xcd7b, 0x9, 0xf, 0x2, 0x7, 0x1, 0xc566, 0x6, 0x9, 0x327, 0xf17, 0x7, 0x8000, 0x4, 0xda, 0x4, 0x0, 0x8, 0x9, 0x3, 0x10001, 0xb422, 0x2, 0xffff, 0x3, 0x4, 0x66e8, 0x8000, 0xfffff1bd, 0x3, 0x8, 0x9, 0xad, 0x8000, 0x3800000, 0x6, 0x10001, 0x77d, 0x4, 0xf154, 0xd29, 0x7, 0x9, 0x81, 0x6, 0x8000, 0x6, 0x2, 0x1, 0x4, 0x2b, 0x6a, 0x200, 0x10000, 0x3, 0xdb, 0x6, 0x40, 0xd, 0x7c2, 0xff, 0x1000, 0x6, 0x0, 0x3, 0x3, 0x3, 0x4, 0x3, 0x2bc, 0x3, 0xe9, 0xf781, 0x2668, 0x5, 0x81, 0x6, 0x4, 0x9, 0xf, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x2, 0x2, 0x5, 0x3, 0x9, 0x7, 0x200, 0x0, 0x0, 0x2444, 0x1ff, 0x7ff, 0x6, 0x7, 0x46, 0xffffffff, 0x2, 0x7ab, 0x987, 0xff, 0x5, 0x9, 0x8, 0xf, 0x2, 0x8, 0x5, 0x2, 0x3, 0x9, 0x400, 0xb, 0x1, 0x4, 0x10001, 0x7, 0xffffffff, 0x6, 0x4, 0xbe3, 0x8001, 0x6, 0x42, 0x9, 0xffff0001, 0x4, 0x800, 0x2, 0x77, 0x9, 0x2, 0x1, 0x8, 0x77d, 0xf, 0x5b, 0x4, 0x5, 0x1, 0x2, 0x1, 0x1, 0x9, 0x8, 0x0, 0x6, 0x7d0d, 0x0, 0x78e, 0x5, 0x515c, 0x5, 0xe, 0xfffffffe, 0x5, 0xc6ab, 0x80000000, 0x0, 0x3, 0x2, 0x101, 0x80, 0xfffffff8, 0xc4, 0xc83156e9, 0x3, 0xfffff175, 0x3, 0x6, 0x400, 0x6, 0x836, 0x0, 0x5, 0xfffffff3, 0x4, 0x9, 0x7483, 0x8, 0x6, 0x2, 0x1ff, 0x3, 0x5, 0x8, 0x2, 0x4, 0x10001, 0xf, 0x3, 0x2, 0x0, 0x6, 0x9, 0x100, 0x6, 0x9, 0x3, 0x5393, 0x76102963, 0x4, 0x4, 0x9d7, 0x6, 0x800, 0x10001, 0x9, 0x6, 0x4, 0x3, 0x200, 0x3, 0x6, 0xf86, 0x3, 0x1, 0x5, 0x347, 0x4, 0x7fff, 0x5, 0x81, 0x800, 0x6, 0x1, 0x5, 0x9, 0x2, 0x7, 0x7f, 0x3, 0x42, 0x1ff, 0x800, 0x7, 0x10, 0x5, 0x8001, 0x28, 0xf, 0x738, 0x9, 0x8001, 0x9, 0xfffffff8, 0xfffffff8, 0x5, 0x9, 0x3, 0x5, 0xea, 0x4, 0x0, 0x401, 0x5, 0x9, 0x1f10b8ed, 0x1, 0x4, 0xc, 0x10, 0x5, 0xeb0f, 0x8, 0x8ba, 0x1, 0x10, 0x9, 0x4, 0x6, 0x8, 0x3, 0x4, 0x50, 0x2, 0x4, 0xf6, 0x54, 0x6, 0xfffffc00, 0x81, 0x5, 0x8, 0x9, 0x6, 0x1800, 0xa, 0x1, 0x7, 0xcb, 0xe, 0xd, 0x200, 0x2, 0x801e, 0x40, 0x2d, 0x5, 0x80000000, 0xffff, 0x3, 0x7fffffff, 0xb, 0x8, 0xa9e, 0x5, 0x8, 0x81, 0x8, 0xcaa, 0x9, 0x9, 0x8, 0x86dd, 0x0, 0x3, 0x5, 0x1, 0x6, 0xb, 0xfffffe23, 0x4, 0x0, 0x5, 0xfffffffb, 0x7, 0x8, 0x7, 0x3c, 0x6, 0x40, 0xb, 0x401, 0x9, 0x3]}]}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x8f0}}, 0x800)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0)
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2)
listen(r0, 0x5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082cbd7000fddbdf250500000008000400030000002c00068008000700", @ANYRES32=r6, @ANYBLOB="08000600100000000500020004000000080003001fabd22f08000700dad84c1c5d55a5ea2dd9db5ef7afa9e63cc97c188ca8d643d44c489e8feb6dba8c2f6e32bb4d2268c98a9ad4e062b38a02ac6f54b4760600b56df19633fc3f8b5598d92a66ba5277a8071c64908713f422f6808bda5ba6e6e133b0a48cc33627b36a48a99614e7856368c663fcced271b8c63ec947992b1d13864474b5680bc7e2ac75eacfaa22473289f70aff6a", @ANYRES32=r4, @ANYBLOB="0c00068005000200a200000005000500ec000000"], 0x5c}}, 0x48000)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1c}, 0x4000)

3.791713538s ago: executing program 1 (id=279):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4, 0x1}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000010a00)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0)
ioctl$BSG_IO(r5, 0x2285, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r8 = dup(r7)
write$P9_RSTATFS(r8, &(0x7f00000000c0)={0x43, 0x9, 0x1, {0x569142f3, 0x0, 0x100000001, 0x0, 0x1, 0x9, 0x7, 0x5, 0x6}}, 0x12)
ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"})
r9 = syz_open_pts(r7, 0x80)
r10 = dup3(r9, r7, 0x80000)
read$FUSE(r10, &(0x7f0000002300)={0x2020}, 0x2020)
ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000000)={0x1000, 0x8002, 0x5, 0xf7ffffff, 0x5, "73a40000000000000000f7d2000000fc00", 0x10000000, 0xda97})
read(r7, &(0x7f00000002c0)=""/228, 0xe4)
creat(&(0x7f0000000100)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x100)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x14d042, 0x1)
ioctl$SG_GET_KEEP_ORPHAN(r6, 0x2288, &(0x7f0000000040))
recvfrom$inet(r1, 0x0, 0x0, 0xc9110161, 0x0, 0x0)

3.661452346s ago: executing program 0 (id=280):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8a100, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
r3 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0, &(0x7f0000000180)=<r6=>0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000001440)="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", 0x1d9, 0xffffffffffffffff)
syz_io_uring_submit(r4, r5, r6, 0x0)
syz_ublk_setup_queues(r1, 0x0, &(0x7f0000019080)={0x0, 0xa7f2, 0x8, 0x4, 0x10d, 0x0, r1}, &(0x7f0000019180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2067, 0x400, 0x1, 0x17, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xce5e, 0x10000, 0x2, 0x2c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xecae, 0x2, 0x3, 0xe9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88d9, 0x800, 0x0, 0x3bd, 0x0, r1}}], 0x4, 0x0, &(0x7f0000019100))
r7 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r8, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c)

3.41021661s ago: executing program 0 (id=281):
mount$fuse(0x0, 0x0, 0x0, 0x413, 0x0)
socket$inet(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r0 = syz_ublk_setup_io_uring(0x5440, &(0x7f0000000240)={0x0, 0xd58c, 0x1000, 0x2, 0x266}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000440)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1})
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x6, 0x0, <r4=>0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x3, 0xc9e, 0x0, 0x0, 0x1000, 0x1000, 0x0, 0x0, 0x4}}}, &(0x7f0000000600))
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x30, 0x0, <r6=>r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, r5, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0xfffd, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x101}}}, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYRES16=r6, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00007ff000/0x800000)=nil, 0x800000, &(0x7f0000000040)=""/42)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="190000000400000008000000", @ANYRES32], 0x50)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x120}, 0x1, 0x0, 0x0, 0x64000}, 0x4040)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f0000000240)="2e9b3d00", 0x4}], 0x1)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0}}], 0x1, 0x4880)
r8 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
ioctl$FE_GET_EVENT(r8, 0x80286f4e, &(0x7f0000000140))
ioctl$FE_SET_FRONTEND(r8, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}})

3.226318392s ago: executing program 3 (id=282):
r0 = openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x141)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404000000c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e46968eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000000000000005335000000143ea70c2ab40c7cb70c943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a33e680846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2200af6c7784a1975fa807de38a3a61e44a9ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf652e28e700000000000000b24478a78a0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c450503009688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0000f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b4cbaf5a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13e434aae9df81ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a384002421d898913c45a9ac091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c045a17e9a61c3b064e679508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd911e0e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4218cea744b332ab232a09cf1ec375627074ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d522946727024de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df00000000000000000000dfa4c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5d00f26126d4cf2c73e5f94030000000000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481c55e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62fc9dfffeb13b4858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1ef90ed4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1af45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d78429d358aa54b4b49926c4be9ee4659153d9f9f5d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000d0267ac40d1130a9000000000045f50812a1a0530b02baed19f4c977ac0d397ed6371ec589bf5943690250bdfa5b676d5d53d2ab3aeee1a6910c1a33b6c06c93386768f8b1bb27ec31cffbd4f5c7b0c2e14e4fc6c2f089ab08567254e93780afdddefb3f0d2143ad73c0bf2467859049d46dc5aa91f918a307e7dcaaccd6cbe66e8a04d201392a487f681f82528a800e27d65200ae10e1b5d39a29d8a2c8ed2dfa77e21249b45806733e674a9e8e72ad1cb0d3bfadb00a18a5008ea1e4c8fb93d311f52a476c576a3f65c9bdd4e4b870aed4cb9906a8aa25986e6e30be249d9911114b42b2fb51168e56000a62b794c193f7797ebeb7f8b91c70b6e720af06ecfcfb89a2d5a25f"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="b9e0e7c56300698c0ba00a0d339c", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
file_getattr(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x18, 0x1000)
ioperm(0x0, 0x2, 0x7e)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0)
ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000180)={0x1, 0x0, 0x2, &(0x7f0000000000)={0x0, "0000206f0000a2263397400000060000000000400000aeb2e1e13d00"}})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x48, &(0x7f0000001440)=[@in6={0xa, 0x4e22, 0x8, @private1, 0x4208000}, @in6={0xa, 0x4e23, 0x2, @mcast2, 0x2}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0xc)
timer_create(0x7, &(0x7f0000000240)={0x0, 0xd, 0x4, @thr={&(0x7f0000000100)="84bb947fc8ffa679c58873c3b180a15ad2a233b32880121b3a095f642231", &(0x7f00000001c0)="0b3853c8b594e0ca0b49e91e2d73f8c5d9662f2533e04da9a93112330a64099bce927840a9cab170eb759068d700c07b586f23d434e89b0ae302e0baffa6c7d94c8990a258b6f9c3414cbce4ec1e678e976aaebc9002077b5ad9344019"}}, &(0x7f0000000280))
timer_create(0x4, &(0x7f00000002c0)={0x0, 0x1b, 0x2, @thr={&(0x7f0000000380)="d936acca8afeefb32fde9e1f6d0eaafe25e402", &(0x7f0000000440)="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"}}, &(0x7f0000000300)=<r5=>0x0)
clock_gettime(0x0, &(0x7f0000000340)={<r6=>0x0, <r7=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x8, 0xf, 0x1}}, 0x30)
timer_settime(r5, 0x1, &(0x7f0000000400)={{0x77359400}, {r6, r7+10000000}}, 0x0)

3.161407535s ago: executing program 0 (id=283):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
modify_ldt$write2(0x11, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYRES64=r3], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
readv(r4, &(0x7f0000001700)=[{&(0x7f0000000080)=""/86, 0x56}], 0x1)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}], 0x1}, 0x4}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r2}, 0x94)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @empty, @void, {@canfd={0xd, {{0x4, 0x1, 0x1, 0x1}, 0xd, 0x3, 0x0, 0x0, "3343ffcb801929bc045e57c823d287a4c397b6f980204037878c4549c1a1adc57ac41e088ffeeb27c543b3c23db0df378ec81b4fd507ef36fab9b82f92c20814"}}}}, &(0x7f0000000140)={0x1, 0x3, [0x88, 0xc82, 0x527, 0x4be]})
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
close(0xffffffffffffffff)
syz_emit_ethernet(0x0, 0x0, 0x0)
bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
socket$nl_route(0x10, 0x3, 0x0)

3.06478912s ago: executing program 3 (id=284):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8a100, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0, &(0x7f0000000180)=<r5=>0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000001440)="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", 0x1d9, 0xffffffffffffffff)
syz_io_uring_submit(r3, r4, r5, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000019080)={0x0, 0xa7f2, 0x8, 0x4, 0x10d}, &(0x7f0000019180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2067, 0x400, 0x1, 0x17}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xce5e, 0x10000, 0x2, 0x2c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xecae, 0x2, 0x3, 0xe9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88d9, 0x800, 0x0, 0x3bd}}], 0x4, 0x0, &(0x7f0000019100))
r6 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r7, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c)

2.356370492s ago: executing program 1 (id=285):
socket$inet(0x2, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setns(0xc9, 0x0)
r2 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c)
listen(r2, 0x100)
sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1a000}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback=0xa00020f}], 0x18}, 0x8050)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
fanotify_init(0x20, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r3)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000)
socketpair(0x1, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r4 = gettid()
tkill(r4, 0x21)

2.145051194s ago: executing program 0 (id=286):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendto$inet(r1, &(0x7f0000000540)="040010", 0x3, 0xa46e77133d435a86, 0x0, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000080)={0x1, 0x0, [{0x80000019, 0xdd6, 0x5, 0x2, 0x7, 0x0, 0x80000000}]})
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={<r2=>0x0, 0x2}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000240)={r2, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}, [0xc, 0x7fffffffffffffff, 0x3, 0x9, 0x9, 0x0, 0x2, 0x5, 0x1, 0x7, 0xfffffffffffff000, 0x9, 0x7f, 0x6, 0x8]}, &(0x7f0000000340)=0xfc)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0x1}}, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1.856335122s ago: executing program 1 (id=287):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd, {}, [{0x54, 0x1, [@m_skbmod={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0x0, 0x8}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1})
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x2c4340)
ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000040)='\x00\x00', 0x0, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4c)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000000), 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'wg1\x00', 0x4}, 0x18)

1.855777538s ago: executing program 2 (id=288):
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=<r0=>0x0, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r3=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=<r4=>0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0)
syz_ublk_setup_queues(r5, r4, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x342, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x10000, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x8, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r3, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410)
syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)="3d183e767f00214c2e5c07799ae108914ae4c2cd24a1470432a3917ac4932ba9e1c6f129861f13f430ca8eeac0f55b39cef14cc9")
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$COMEDI_CMD(r5, 0x80406409, &(0x7f0000000300)={0xc1, 0x0, 0x0, 0x6, 0x20, 0xbbc, 0x4, 0x1, 0xffffffff, 0x3, 0x2, 0x4, &(0x7f00000001c0)=[0x15], 0x1, &(0x7f0000000200)="4e0f5678089879e09f4bde7834b2b6177af2d72340d44565095508ee79b6d349f1051822cbc698aff9cab0e4c1b27ade7ac5a04688214706579fc5e6a04fecce0862cb5c1809f29bb2bba8f5ca7fb7a8934b9ed313fba6e97bf16faa85e89feda87c7697a167221d27da0b524c4afb98120198516aabda0d6a2855a1c0a8d8603ec566bc5ab5b0e48de9aff202eb4a9051d78c9ab28aa80c8748c69ded8717f887f581c31b28e3fad0b97a1285ce7ad49979c4dd35bc45266c59ecb78e71541a14e3e374d3de325232513bd792b1c028d8ab56044d20c64cc31c564f4470f005b101", 0xe2})
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0)
sendfile(r7, r7, 0x0, 0x6)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000002500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000024c0)={&(0x7f0000002340)={0x80, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x64, 0x3, "c907821af0a1a820c8a9d270a15dbabaa1e56e30808953e62fb8fc92d00052d206e217f2dce4148877931e67d9998da21eb88975347d6c0f02b1fcf501d04c3d3332e23cd85edcaa445a27871c8cb8690379961e759cb5262f98620916a88c26"}]}, @TIPC_NLA_NODE={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f00000003c0)={0x0, 0x1, r8, 0x1, 0x80000})

1.79292942s ago: executing program 3 (id=289):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8a100, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2)
r3 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0, &(0x7f0000000180)=<r6=>0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000001440)="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", 0x1d9, 0xffffffffffffffff)
syz_io_uring_submit(r4, r5, r6, 0x0)
syz_ublk_setup_queues(r1, 0x0, &(0x7f0000019080)={0x0, 0xa7f2, 0x8, 0x4, 0x10d, 0x0, r1}, &(0x7f0000019180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2067, 0x400, 0x1, 0x17, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xce5e, 0x10000, 0x2, 0x2c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xecae, 0x2, 0x3, 0xe9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88d9, 0x800, 0x0, 0x3bd, 0x0, r1}}], 0x4, 0x0, &(0x7f0000019100))
r7 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r8, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c)

1.501875164s ago: executing program 3 (id=290):
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=<r0=>0x0, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r3=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=<r4=>0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0)
syz_ublk_setup_queues(r5, r4, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x342, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x10000, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x8, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r3, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)="3d183e767f00214c2e5c07799ae108914ae4c2cd24a1470432a3917ac4932ba9e1c6f129861f13f430ca8eeac0f55b39cef14cc9")
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$COMEDI_CMD(r5, 0x80406409, &(0x7f0000000300)={0xc1, 0x0, 0x0, 0x6, 0x20, 0xbbc, 0x4, 0x1, 0xffffffff, 0x3, 0x2, 0x4, &(0x7f00000001c0)=[0x15], 0x1, &(0x7f0000000200)="4e0f5678089879e09f4bde7834b2b6177af2d72340d44565095508ee79b6d349f1051822cbc698aff9cab0e4c1b27ade7ac5a04688214706579fc5e6a04fecce0862cb5c1809f29bb2bba8f5ca7fb7a8934b9ed313fba6e97bf16faa85e89feda87c7697a167221d27da0b524c4afb98120198516aabda0d6a2855a1c0a8d8603ec566bc5ab5b0e48de9aff202eb4a9051d78c9ab28aa80c8748c69ded8717f887f581c31b28e3fad0b97a1285ce7ad49979c4dd35bc45266c59ecb78e71541a14e3e374d3de325232513bd792b1c028d8ab56044d20c64cc31c564f4470f005b101", 0xe2})
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0)
sendfile(r6, r6, 0x0, 0x6)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f0000002500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000024c0)={&(0x7f0000002340)={0x80, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x64, 0x3, "c907821af0a1a820c8a9d270a15dbabaa1e56e30808953e62fb8fc92d00052d206e217f2dce4148877931e67d9998da21eb88975347d6c0f02b1fcf501d04c3d3332e23cd85edcaa445a27871c8cb8690379961e759cb5262f98620916a88c26"}]}, @TIPC_NLA_NODE={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f00000003c0)={0x0, 0x1, r7, 0x1, 0x80000})

1.499105153s ago: executing program 0 (id=298):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)
r1 = socket$inet(0x2, 0x2, 0x11)
sendto$inet(r1, &(0x7f0000000100)="1234", 0x4, 0x0, &(0x7f0000000200)={0x2, 0x1234, @local}, 0x10)
setns(0xc9, 0x40000000)
r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0xa0402)
ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000400)={0x23, 0x1, 0x10, 0x1, 0x0, 0x3, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x480142, 0x161)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
keyctl$clear(0x11, 0xfffffffffffffffd)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000040)=0x4, 0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0xa)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000})
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x9, 0x800081fd, 0x2001, 0x4001}, 0x1c)
openat$dir(0xffffffffffffff9c, 0x0, 0x30400, 0x66)
r7 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c)
recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
mkdir(&(0x7f0000000000)='dir0\x00', 0x80)
mount(0x0, &(0x7f00000000c0)='dir0/per_cpu/cpu0/trace\x00', &(0x7f0000000100)='esdfs\x00', 0x0, 0x0)

647.983586ms ago: executing program 2 (id=291):
mount$fuse(0x0, 0x0, 0x0, 0x413, 0x0)
socket$inet(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r0 = syz_ublk_setup_io_uring(0x5440, &(0x7f0000000240)={0x0, 0xd58c, 0x1000, 0x2, 0x266}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000440)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1})
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x6, 0x0, <r4=>0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x3, 0xc9e, 0x0, 0x0, 0x1000, 0x1000, 0x0, 0x0, 0x4}}}, &(0x7f0000000600))
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x30, 0x0, <r6=>r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, r5, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0xfffd, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x101}}}, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYRES16=r6, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00007ff000/0x800000)=nil, 0x800000, &(0x7f0000000040)=""/42)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="190000000400000008000000", @ANYRES32], 0x50)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x120}, 0x1, 0x0, 0x0, 0x64000}, 0x4040)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f0000000240)="2e9b3d00", 0x4}], 0x1)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0}}], 0x1, 0x4880)
r8 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
ioctl$FE_GET_EVENT(r8, 0x80286f4e, &(0x7f0000000140))
ioctl$FE_SET_FRONTEND(r8, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}})

599.389773ms ago: executing program 1 (id=292):
r0 = openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x141)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="b9e0e7c56300698c0ba00a0d339c", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
file_getattr(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x18, 0x1000)
ioperm(0x0, 0x2, 0x7e)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0)
ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000180)={0x1, 0x0, 0x2, &(0x7f0000000000)={0x0, "0000206f0000a2263397400000060000000000400000aeb2e1e13d00"}})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x48, &(0x7f0000001440)=[@in6={0xa, 0x4e22, 0x8, @private1, 0x4208000}, @in6={0xa, 0x4e23, 0x2, @mcast2, 0x2}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0xc)
timer_create(0x7, &(0x7f0000000240)={0x0, 0xd, 0x4, @thr={&(0x7f0000000100)="84bb947fc8ffa679c58873c3b180a15ad2a233b32880121b3a095f642231", &(0x7f00000001c0)="0b3853c8b594e0ca0b49e91e2d73f8c5d9662f2533e04da9a93112330a64099bce927840a9cab170eb759068d700c07b586f23d434e89b0ae302e0baffa6c7d94c8990a258b6f9c3414cbce4ec1e678e976aaebc9002077b5ad9344019"}}, &(0x7f0000000280))
timer_create(0x4, &(0x7f00000002c0)={0x0, 0x1b, 0x2, @thr={&(0x7f0000000380)="d936acca8afeefb32fde9e1f6d0eaafe25e402", &(0x7f0000000440)="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"}}, &(0x7f0000000300)=<r5=>0x0)
clock_gettime(0x0, &(0x7f0000000340)={<r6=>0x0, <r7=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x8, 0xf, 0x1}}, 0x30)
timer_settime(r5, 0x1, &(0x7f0000000400)={{0x77359400}, {r6, r7+10000000}}, 0x0)

281.737397ms ago: executing program 1 (id=293):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x426}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x44}}, 0x0)

101.714145ms ago: executing program 1 (id=294):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
modify_ldt$write2(0x11, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYRES64=r3], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
readv(r4, &(0x7f0000001700)=[{&(0x7f0000000080)=""/86, 0x56}], 0x1)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}], 0x1}, 0x4}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r2}, 0x94)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @empty, @void, {@canfd={0xd, {{0x4, 0x1, 0x1, 0x1}, 0xd, 0x3, 0x0, 0x0, "3343ffcb801929bc045e57c823d287a4c397b6f980204037878c4549c1a1adc57ac41e088ffeeb27c543b3c23db0df378ec81b4fd507ef36fab9b82f92c20814"}}}}, &(0x7f0000000140)={0x1, 0x3, [0x88, 0xc82, 0x527, 0x4be]})
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
close(0xffffffffffffffff)
syz_emit_ethernet(0x0, 0x0, 0x0)
bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
socket$nl_route(0x10, 0x3, 0x0)

75.119624ms ago: executing program 0 (id=295):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
modify_ldt$write2(0x11, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYRES64=r3], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
readv(r4, &(0x7f0000001700)=[{&(0x7f0000000080)=""/86, 0x56}], 0x1)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}], 0x1}, 0x4}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r2}, 0x94)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @empty, @void, {@canfd={0xd, {{0x4, 0x1, 0x1, 0x1}, 0xd, 0x3, 0x0, 0x0, "3343ffcb801929bc045e57c823d287a4c397b6f980204037878c4549c1a1adc57ac41e088ffeeb27c543b3c23db0df378ec81b4fd507ef36fab9b82f92c20814"}}}}, &(0x7f0000000140)={0x1, 0x3, [0x88, 0xc82, 0x527, 0x4be]})
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
close(0xffffffffffffffff)
syz_emit_ethernet(0x0, 0x0, 0x0)
bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
socket$nl_route(0x10, 0x3, 0x0)

0s ago: executing program 3 (id=296):
socket$unix(0x1, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00')
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r0)
mount(0x0, 0x0, 0x0, 0x800000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00')
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x939, 0x0, 0x3, 0xbd}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x102100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x24c}}], 0x1, &(0x7f0000000340)={0x2e, 0x4c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x3}]}}}]}, 0x3c}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:65014' (ED25519) to the list of known hosts.
[   42.395367][ T5725] cgroup: Unknown subsys name 'net'
[   42.543059][ T5725] cgroup: Unknown subsys name 'cpuset'
[   42.546620][ T5725] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.543833][ T5725] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   47.638183][ T5741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   47.644997][ T5750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   47.645320][ T5750] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   47.645576][ T5750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   47.646884][ T5751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   47.652039][ T5747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   47.652827][ T5751] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   47.653278][ T5747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   47.653414][ T5751] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   47.653967][ T5747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   47.654356][ T5747] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   47.655658][ T5753] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   47.655825][ T5753] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   47.655886][ T5753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   47.655989][ T5751] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   47.658236][ T5753] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   47.659167][ T5753] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   47.660475][ T5753] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   47.667353][ T5741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   47.667934][ T5753] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   48.203416][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.203776][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.203887][ T5737] bridge_slave_0: entered allmulticast mode
[   48.204723][ T5737] bridge_slave_0: entered promiscuous mode
[   48.221811][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.221887][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.221947][ T5737] bridge_slave_1: entered allmulticast mode
[   48.222740][ T5737] bridge_slave_1: entered promiscuous mode
[   48.246508][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.257672][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.278359][ T5737] team0: Port device team_slave_0 added
[   48.283957][ T5737] team0: Port device team_slave_1 added
[   48.326624][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.326636][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.326648][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.328144][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.328153][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.328165][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.434048][ T5737] hsr_slave_0: entered promiscuous mode
[   48.434614][ T5737] hsr_slave_1: entered promiscuous mode
[   48.492120][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.492164][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.492223][ T5740] bridge_slave_0: entered allmulticast mode
[   48.493387][ T5740] bridge_slave_0: entered promiscuous mode
[   48.502404][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.502477][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.502537][ T5736] bridge_slave_0: entered allmulticast mode
[   48.503279][ T5736] bridge_slave_0: entered promiscuous mode
[   48.528872][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.528916][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.528979][ T5740] bridge_slave_1: entered allmulticast mode
[   48.529767][ T5740] bridge_slave_1: entered promiscuous mode
[   48.533761][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.533804][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.533866][ T5736] bridge_slave_1: entered allmulticast mode
[   48.534583][ T5736] bridge_slave_1: entered promiscuous mode
[   48.576419][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.576548][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.576663][ T5738] bridge_slave_0: entered allmulticast mode
[   48.578063][ T5738] bridge_slave_0: entered promiscuous mode
[   48.591496][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.602483][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.607201][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.607279][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.607337][ T5738] bridge_slave_1: entered allmulticast mode
[   48.608110][ T5738] bridge_slave_1: entered promiscuous mode
[   48.609896][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.616119][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.626257][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.649169][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.650893][ T5736] team0: Port device team_slave_0 added
[   48.656958][ T5736] team0: Port device team_slave_1 added
[   48.678688][ T5740] team0: Port device team_slave_0 added
[   48.683368][ T5738] team0: Port device team_slave_0 added
[   48.693861][ T5740] team0: Port device team_slave_1 added
[   48.694129][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.694138][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.694151][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.701462][ T5738] team0: Port device team_slave_1 added
[   48.707760][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.707771][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.707783][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.739994][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.740007][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.740019][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.740752][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.740773][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.740794][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.746574][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.746585][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.746598][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.749836][ T5736] hsr_slave_0: entered promiscuous mode
[   48.750332][ T5736] hsr_slave_1: entered promiscuous mode
[   48.750748][ T5736] debugfs: 'hsr0' already exists in 'hsr'
[   48.750803][ T5736] Cannot create hsr debugfs directory
[   48.751492][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.751505][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.751526][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.847311][ T5738] hsr_slave_0: entered promiscuous mode
[   48.848115][ T5738] hsr_slave_1: entered promiscuous mode
[   48.848767][ T5738] debugfs: 'hsr0' already exists in 'hsr'
[   48.848786][ T5738] Cannot create hsr debugfs directory
[   48.862920][ T5740] hsr_slave_0: entered promiscuous mode
[   48.863371][ T5740] hsr_slave_1: entered promiscuous mode
[   48.863663][ T5740] debugfs: 'hsr0' already exists in 'hsr'
[   48.863674][ T5740] Cannot create hsr debugfs directory
[   48.874139][ T5737] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.882828][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.883643][ T5737] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.886622][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.916151][ T5737] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.919048][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.919951][ T5737] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.923292][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.166902][ T5736] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   49.170702][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   49.171353][ T5736] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   49.177478][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   49.179764][ T5736] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   49.184701][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   49.189768][ T5736] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   49.193661][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.245253][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.245501][ T5740] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   49.247625][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   49.248086][ T5740] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   49.249946][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   49.260049][ T5740] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   49.263166][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   49.263650][ T5740] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   49.266598][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.308965][ T5737] 8021q: adding VLAN 0 to HW filter on device team0
[   49.319572][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.319698][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.330372][ T5738] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   49.333482][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   49.333893][ T5738] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   49.336289][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   49.342494][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.342549][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.343040][ T5738] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   49.346082][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   49.347120][ T5738] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   49.350947][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.401842][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.423439][ T5737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   49.430954][ T5736] 8021q: adding VLAN 0 to HW filter on device team0
[   49.444334][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.444382][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.454609][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.460709][  T230] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.460757][  T230] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.483360][ T5740] 8021q: adding VLAN 0 to HW filter on device team0
[   49.495674][  T230] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.495721][  T230] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.501609][  T230] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.501653][  T230] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.522568][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.536382][ T5738] 8021q: adding VLAN 0 to HW filter on device team0
[   49.547740][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.547789][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.557943][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.557989][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.719810][ T5751] Bluetooth: hci0: command tx timeout
[   49.720001][ T5751] Bluetooth: hci3: command tx timeout
[   49.720010][ T5743] Bluetooth: hci1: command tx timeout
[   49.720283][ T5096] Bluetooth: hci2: command tx timeout
[   49.723353][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.756971][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.760785][ T5737] veth0_vlan: entered promiscuous mode
[   49.767563][ T5737] veth1_vlan: entered promiscuous mode
[   49.812649][ T5736] veth0_vlan: entered promiscuous mode
[   49.815686][ T5737] veth0_macvtap: entered promiscuous mode
[   49.820650][ T5736] veth1_vlan: entered promiscuous mode
[   49.823378][ T5737] veth1_macvtap: entered promiscuous mode
[   49.826977][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.840943][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.850386][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.860141][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.871667][ T5736] veth0_macvtap: entered promiscuous mode
[   49.874650][ T5736] veth1_macvtap: entered promiscuous mode
[   49.899359][ T5885] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.910413][ T5740] veth0_vlan: entered promiscuous mode
[   49.915619][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.922923][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.930234][ T5740] veth1_vlan: entered promiscuous mode
[   49.964139][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.964153][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.972108][ T5738] veth0_vlan: entered promiscuous mode
[   50.006064][ T5738] veth1_vlan: entered promiscuous mode
[   50.011277][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.011290][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.018339][ T5740] veth0_macvtap: entered promiscuous mode
[   50.036292][ T5740] veth1_macvtap: entered promiscuous mode
[   50.042298][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.042313][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.053511][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.055577][ T5738] veth0_macvtap: entered promiscuous mode
[   50.062628][ T5738] veth1_macvtap: entered promiscuous mode
[   50.065350][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.081087][ T5737] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   50.083312][ T5885] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.083390][ T5885] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.083885][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.083896][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.084784][ T5737] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   50.086907][ T5737] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   50.087565][ T5737] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   50.098359][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.100085][ T5549] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.106352][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.123437][ T5737] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   50.123913][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.123945][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.123971][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.124020][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.174781][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.174808][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.216606][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.216620][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.239635][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.239649][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.249297][ T5885] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.249323][ T5885] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.249342][ T5885] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.249360][ T5885] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.249378][ T5885] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.249396][ T5885] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.249414][ T5885] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.249433][ T5885] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.287145][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.287161][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.346901][ T5891] lo speed is unknown, defaulting to 1000
[   50.352660][ T5891] lo speed is unknown, defaulting to 1000
[   50.367776][ T5891] lo speed is unknown, defaulting to 1000
[   50.368044][ T5890] rdma_rxe: rxe_newlink: failed to add lo
[   50.599074][ T5891] infiniband syz0: set active
[   50.599088][ T5891] infiniband syz0: added lo
[   50.611653][ T5891] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   50.611675][ T5891] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   50.611696][ T5891] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   50.731023][ T5891] RDS/IB: syz0: added
[   50.731145][ T5891] smc: adding ib device syz0 with port count 1
[   50.731182][ T5891] smc:    ib device syz0 port 1 has no pnetid
[   50.734068][ T5891] lo speed is unknown, defaulting to 1000
[   50.885966][ T5837] lo speed is unknown, defaulting to 1000
[   50.886428][ T5837] lo speed is unknown, defaulting to 1000
[   51.278567][ T5891] lo speed is unknown, defaulting to 1000
[   51.672820][ T5891] lo speed is unknown, defaulting to 1000
[   51.789027][ T5751] Bluetooth: hci0: command tx timeout
[   51.789051][ T5751] Bluetooth: hci2: command tx timeout
[   51.789065][ T5751] Bluetooth: hci3: command tx timeout
[   51.789142][ T5096] Bluetooth: hci1: command tx timeout
[   51.906710][ T5891] lo speed is unknown, defaulting to 1000
[   52.131582][ T5927] rdma_rxe: rxe_newlink: failed to add lo
[   52.677022][ T5935] Zero length message leads to an empty skb
[   52.996561][ T5945] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 4, id = 0
[   53.870103][ T5743] Bluetooth: hci2: command tx timeout
[   53.870136][ T5743] Bluetooth: hci0: command tx timeout
[   53.870381][ T5751] Bluetooth: hci3: command tx timeout
[   53.870441][   T66] Bluetooth: hci1: command tx timeout
[   54.190255][   T62] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[   54.548569][   T62] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[   54.549158][   T62] usb 8-1: too many configurations: 248, using maximum allowed: 8
[   54.554507][   T62] usb 8-1: config index 0 descriptor too short (expected 28277, got 36)
[   54.554615][   T62] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   54.554727][   T62] usb 8-1: config 0 has no interfaces?
[   54.577729][   T62] usb 8-1: config index 1 descriptor too short (expected 28277, got 36)
[   54.577835][   T62] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   54.577917][   T62] usb 8-1: config 0 has no interfaces?
[   54.620510][   T62] usb 8-1: config index 2 descriptor too short (expected 28277, got 36)
[   54.620579][   T62] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   54.620596][   T62] usb 8-1: config 0 has no interfaces?
[   54.647681][   T62] usb 8-1: config index 3 descriptor too short (expected 28277, got 36)
[   54.647736][   T62] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   54.647841][   T62] usb 8-1: config 0 has no interfaces?
[   54.746510][   T62] usb 8-1: config index 4 descriptor too short (expected 28277, got 36)
[   54.746576][   T62] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   54.746728][   T62] usb 8-1: config 0 has no interfaces?
[   54.793131][   T62] usb 8-1: config index 5 descriptor too short (expected 28277, got 36)
[   54.793278][   T62] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   54.793295][   T62] usb 8-1: config 0 has no interfaces?
[   54.819775][   T62] usb 8-1: config index 6 descriptor too short (expected 28277, got 36)
[   54.819819][   T62] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   54.819852][   T62] usb 8-1: config 0 has no interfaces?
[   54.868948][   T62] usb 8-1: config index 7 descriptor too short (expected 28277, got 36)
[   54.869031][   T62] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   54.869076][   T62] usb 8-1: config 0 has no interfaces?
[   54.869093][   T62] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.920241][   T62] usb 8-1: config 0 descriptor??
[   55.961979][   T66] Bluetooth: hci1: command tx timeout
[   55.962004][   T66] Bluetooth: hci3: command tx timeout
[   55.962018][   T66] Bluetooth: hci0: command 0x0419 tx timeout
[   55.963281][   T66] Bluetooth: hci2: command tx timeout
[   56.368988][ T5990] Bluetooth: MGMT ver 1.23
[   56.573337][ T5997] warning: `syz.0.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   56.719983][ T5950] syz.1.12 (5950) used greatest stack depth: 19560 bytes left
[   56.818611][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   56.969331][    T9] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[   56.970685][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   56.970707][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   56.972894][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.972926][    T9] usb 5-1: Product: syz
[   56.972940][    T9] usb 5-1: Manufacturer: syz
[   56.972953][    T9] usb 5-1: SerialNumber: syz
[   57.106078][   T62] usb 8-1: string descriptor 0 read error: -71
[   57.107880][   T62] usb 8-1: USB disconnect, device number 2
[   57.378690][ T6008] bridge0: port 3(wlan1) entered blocking state
[   57.388065][ T6008] bridge0: port 3(wlan1) entered disabled state
[   57.416042][ T6008] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[   57.458400][   T43] audit: type=1800 audit(1790857329.728:2): pid=6007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.22" name="file0" dev="overlay" ino=54 res=0 errno=0
[   57.473107][ T6008] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[   57.522078][ T6008] bridge0: port 3(wlan1) entered blocking state
[   57.522278][ T6008] bridge0: port 3(wlan1) entered forwarding state
[   57.670489][ T6011] bridge0: port 3(wlan1) entered disabled state
[   57.682932][ T6011] mac80211_hwsim hwsim9 wlan1 (unregistering): left allmulticast mode
[   57.682954][ T6011] mac80211_hwsim hwsim9 wlan1 (unregistering): left promiscuous mode
[   57.683418][ T6011] bridge0: port 3(wlan1) entered disabled state
[   58.028861][ T5096] Bluetooth: hci0: command 0x0419 tx timeout
[   58.531323][    T9] usb 5-1: unit 4 not found!
[   58.703758][    T9] usb 5-1: USB disconnect, device number 2
[   60.128579][ T5096] Bluetooth: hci0: command 0x0419 tx timeout
[   61.698645][ T6073] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size
[   61.714551][ T6072] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0)
[   61.786592][ T6080] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 4, id = 0
[   62.981722][ T6097] rdma_rxe: rxe_newlink: failed to add lo
[   63.019273][ T6101] overlayfs: failed to resolve './file0': -2
[   63.990426][    T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   64.169721][    T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[   64.169754][    T9] usb 5-1: too many configurations: 248, using maximum allowed: 8
[   64.170742][    T9] usb 5-1: config index 0 descriptor too short (expected 28277, got 36)
[   64.170757][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   64.170766][    T9] usb 5-1: config 0 has no interfaces?
[   64.173410][    T9] usb 5-1: config index 1 descriptor too short (expected 28277, got 36)
[   64.173428][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   64.173438][    T9] usb 5-1: config 0 has no interfaces?
[   64.175162][    T9] usb 5-1: config index 2 descriptor too short (expected 28277, got 36)
[   64.175183][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   64.175195][    T9] usb 5-1: config 0 has no interfaces?
[   64.176093][    T9] usb 5-1: config index 3 descriptor too short (expected 28277, got 36)
[   64.176106][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   64.176115][    T9] usb 5-1: config 0 has no interfaces?
[   64.219408][    T9] usb 5-1: config index 4 descriptor too short (expected 28277, got 36)
[   64.219426][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   64.219436][    T9] usb 5-1: config 0 has no interfaces?
[   64.240743][    T9] usb 5-1: config index 5 descriptor too short (expected 28277, got 36)
[   64.240766][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   64.240809][    T9] usb 5-1: config 0 has no interfaces?
[   64.245284][    T9] usb 5-1: config index 6 descriptor too short (expected 28277, got 36)
[   64.245300][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   64.245309][    T9] usb 5-1: config 0 has no interfaces?
[   64.269283][    T9] usb 5-1: config index 7 descriptor too short (expected 28277, got 36)
[   64.269299][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   64.269309][    T9] usb 5-1: config 0 has no interfaces?
[   64.269323][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.270544][    T9] usb 5-1: config 0 descriptor??
[   64.578933][   T35] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[   64.774684][   T35] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[   64.774725][   T35] usb 8-1: too many configurations: 248, using maximum allowed: 8
[   64.796735][   T35] usb 8-1: unable to read config index 0 descriptor/start: -61
[   64.796775][   T35] usb 8-1: can't read configurations, error -61
[   64.863605][ T6130] FAULT_INJECTION: forcing a failure.
[   64.863605][ T6130] name failslab, interval 1, probability 0, space 0, times 1
[   64.863645][ T6130] CPU: 1 UID: 0 PID: 6130 Comm: syz.1.46 Not tainted syzkaller #0 PREEMPT(full) 
[   64.863672][ T6130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   64.863685][ T6130] Call Trace:
[   64.863693][ T6130]  <TASK>
[   64.863702][ T6130]  dump_stack_lvl+0x100/0x190
[   64.863738][ T6130]  should_fail_ex.cold+0x5/0xa
[   64.863772][ T6130]  should_failslab+0xc2/0x120
[   64.863806][ T6130]  __kmalloc_cache_noprof+0x91/0x6d0
[   64.863833][ T6130]  ? nft_netdev_hook_alloc+0x54/0x430
[   64.863870][ T6130]  nft_netdev_hook_alloc+0x54/0x430
[   64.863899][ T6130]  ? nft_hook_list_find+0x13f/0x1b0
[   64.863932][ T6130]  nf_tables_parse_netdev_hooks+0x2e2/0x6f0
[   64.863971][ T6130]  nft_flowtable_parse_hook+0x2ea/0x920
[   64.864010][ T6130]  ? __pfx_nft_flowtable_parse_hook+0x10/0x10
[   64.864041][ T6130]  ? queue_delayed_work_on+0x142/0x1e0
[   64.864083][ T6130]  nf_tables_newflowtable+0x1991/0x25e0
[   64.864120][ T6130]  ? __pfx_nf_tables_newflowtable+0x10/0x10
[   64.864171][ T6130]  ? __pfx___nla_validate_parse+0x10/0x10
[   64.864213][ T6130]  ? lock_acquire+0x1d1/0x380
[   64.864245][ T6130]  ? net_generic+0x25/0x2a0
[   64.864278][ T6130]  ? __nla_parse+0x40/0x60
[   64.864309][ T6130]  nfnetlink_rcv_batch+0x1410/0x2880
[   64.864348][ T6130]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[   64.864369][ T6130]  ? find_held_lock+0x2b/0x80
[   64.864393][ T6130]  ? __local_bh_enable_ip+0xa5/0x120
[   64.864421][ T6130]  ? lockdep_hardirqs_on+0x7d/0x110
[   64.864442][ T6130]  ? __dev_queue_xmit+0xa12/0x4970
[   64.864506][ T6130]  ? __nla_parse+0x40/0x60
[   64.864532][ T6130]  nfnetlink_rcv+0x3bd/0x440
[   64.864551][ T6130]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   64.864579][ T6130]  netlink_unicast+0x585/0x850
[   64.864610][ T6130]  ? __pfx_netlink_unicast+0x10/0x10
[   64.864659][ T6130]  netlink_sendmsg+0x8b0/0xda0
[   64.864690][ T6130]  ? __pfx_netlink_sendmsg+0x10/0x10
[   64.864720][ T6130]  ? apparmor_socket_sendmsg+0x165/0x280
[   64.864752][ T6130]  ____sys_sendmsg+0xa4d/0xbe0
[   64.864774][ T6130]  ? __pfx_netlink_sendmsg+0x10/0x10
[   64.864802][ T6130]  ? __pfx_____sys_sendmsg+0x10/0x10
[   64.864836][ T6130]  ___sys_sendmsg+0x190/0x1e0
[   64.864862][ T6130]  ? __pfx____sys_sendmsg+0x10/0x10
[   64.864887][ T6130]  ? futex_wait+0x11e/0x370
[   64.864921][ T6130]  ? find_held_lock+0x2b/0x80
[   64.864960][ T6130]  __sys_sendmsg+0x160/0x210
[   64.864978][ T6130]  ? __pfx___sys_sendmsg+0x10/0x10
[   64.865011][ T6130]  __do_fast_syscall_32+0x13a/0x8b0
[   64.865038][ T6130]  do_fast_syscall_32+0x32/0x70
[   64.865062][ T6130]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   64.865087][ T6130] RIP: 0023:0xf70befec
[   64.865108][ T6130] Code: Unable to access opcode bytes at 0xf70befc2.
[   64.865116][ T6130] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[   64.865136][ T6130] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000c40
[   64.865147][ T6130] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000
[   64.865157][ T6130] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   64.865168][ T6130] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   64.865178][ T6130] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   64.865208][ T6130]  </TASK>
[   64.948750][   T35] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[   65.099594][   T35] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[   65.099662][   T35] usb 8-1: too many configurations: 248, using maximum allowed: 8
[   65.101452][   T35] usb 8-1: unable to read config index 0 descriptor/start: -61
[   65.101479][   T35] usb 8-1: can't read configurations, error -61
[   65.102190][   T35] usb usb8-port1: attempt power cycle
[   65.129925][ T6133] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   65.438543][   T35] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[   65.677924][   T35] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[   65.677949][   T35] usb 8-1: too many configurations: 248, using maximum allowed: 8
[   65.900512][   T35] usb 8-1: unable to read config index 0 descriptor/start: -61
[   65.900538][   T35] usb 8-1: can't read configurations, error -61
[   66.368589][   T35] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[   66.392418][   T35] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[   66.392444][   T35] usb 8-1: too many configurations: 248, using maximum allowed: 8
[   66.393590][   T35] usb 8-1: unable to read config index 0 descriptor/start: -61
[   66.393607][   T35] usb 8-1: can't read configurations, error -61
[   66.393901][   T35] usb usb8-port1: unable to enumerate USB device
[   66.437446][ T6150] syz0: rxe_newlink: already configured on lo
[   66.620838][    T9] usb 5-1: string descriptor 0 read error: -71
[   66.629588][    T9] usb 5-1: USB disconnect, device number 3
[   66.669890][ T6156] rdma_rxe: rxe_newlink: failed to add lo
[   67.158187][ T6168] rdma_rxe: rxe_newlink: failed to add lo
[   67.342182][ T6173] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 4, id = 0
[   68.035752][ T6187] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   68.192451][ T6193] rdma_rxe: rxe_newlink: failed to add lo
[   69.451354][ T6246] FAULT_INJECTION: forcing a failure.
[   69.451354][ T6246] name failslab, interval 1, probability 0, space 0, times 0
[   69.451388][ T6246] CPU: 0 UID: 0 PID: 6246 Comm: syz.2.68 Not tainted syzkaller #0 PREEMPT(full) 
[   69.451413][ T6246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   69.451426][ T6246] Call Trace:
[   69.451433][ T6246]  <TASK>
[   69.451442][ T6246]  dump_stack_lvl+0x100/0x190
[   69.451476][ T6246]  should_fail_ex.cold+0x5/0xa
[   69.451506][ T6246]  should_failslab+0xc2/0x120
[   69.451539][ T6246]  __kmalloc_cache_noprof+0x91/0x6d0
[   69.451564][ T6246]  ? nft_netdev_hook_alloc+0x54/0x430
[   69.451602][ T6246]  nft_netdev_hook_alloc+0x54/0x430
[   69.451630][ T6246]  ? nft_hook_list_find+0x13f/0x1b0
[   69.451662][ T6246]  nf_tables_parse_netdev_hooks+0x2e2/0x6f0
[   69.451699][ T6246]  nft_flowtable_parse_hook+0x2ea/0x920
[   69.451737][ T6246]  ? __pfx_nft_flowtable_parse_hook+0x10/0x10
[   69.451780][ T6246]  nf_tables_newflowtable+0x1991/0x25e0
[   69.451816][ T6246]  ? __pfx_nf_tables_newflowtable+0x10/0x10
[   69.451844][ T6246]  ? __pfx___nla_validate_parse+0x10/0x10
[   69.451874][ T6246]  ? lock_acquire+0x1d1/0x380
[   69.451906][ T6246]  ? net_generic+0x25/0x2a0
[   69.451936][ T6246]  ? __nla_parse+0x40/0x60
[   69.451967][ T6246]  nfnetlink_rcv_batch+0x1410/0x2880
[   69.452009][ T6246]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[   69.452062][ T6246]  ? find_held_lock+0x2b/0x80
[   69.452093][ T6246]  ? __local_bh_enable_ip+0xa5/0x120
[   69.452129][ T6246]  ? lockdep_hardirqs_on+0x7d/0x110
[   69.452154][ T6246]  ? __dev_queue_xmit+0xa12/0x4970
[   69.452223][ T6246]  ? __nla_parse+0x40/0x60
[   69.452250][ T6246]  nfnetlink_rcv+0x3bd/0x440
[   69.452271][ T6246]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   69.452299][ T6246]  netlink_unicast+0x585/0x850
[   69.452330][ T6246]  ? __pfx_netlink_unicast+0x10/0x10
[   69.452364][ T6246]  netlink_sendmsg+0x8b0/0xda0
[   69.452394][ T6246]  ? __pfx_netlink_sendmsg+0x10/0x10
[   69.452422][ T6246]  ? apparmor_socket_sendmsg+0x165/0x280
[   69.452453][ T6246]  ____sys_sendmsg+0xa4d/0xbe0
[   69.452474][ T6246]  ? __pfx_netlink_sendmsg+0x10/0x10
[   69.452504][ T6246]  ? __pfx_____sys_sendmsg+0x10/0x10
[   69.452541][ T6246]  ___sys_sendmsg+0x190/0x1e0
[   69.452569][ T6246]  ? __pfx____sys_sendmsg+0x10/0x10
[   69.452617][ T6246]  ? futex_wait+0x11e/0x370
[   69.452656][ T6246]  ? find_held_lock+0x2b/0x80
[   69.452702][ T6246]  __sys_sendmsg+0x160/0x210
[   69.452723][ T6246]  ? __pfx___sys_sendmsg+0x10/0x10
[   69.452761][ T6246]  __do_fast_syscall_32+0x13a/0x8b0
[   69.452793][ T6246]  do_fast_syscall_32+0x32/0x70
[   69.452818][ T6246]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   69.452842][ T6246] RIP: 0023:0xf705efec
[   69.452865][ T6246] Code: Unable to access opcode bytes at 0xf705efc2.
[   69.452873][ T6246] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[   69.452893][ T6246] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000c40
[   69.452906][ T6246] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000
[   69.452917][ T6246] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   69.452929][ T6246] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   69.452941][ T6246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   69.452969][ T6246]  </TASK>
[   69.497806][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'.
[   69.588567][ T3372] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[   69.755657][ T6255] rdma_rxe: rxe_newlink: failed to add lo
[   69.762248][ T3372] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[   69.762274][ T3372] usb 6-1: too many configurations: 248, using maximum allowed: 8
[   69.763712][ T3372] usb 6-1: unable to read config index 0 descriptor/start: -61
[   69.763734][ T3372] usb 6-1: can't read configurations, error -61
[   69.888860][ T3372] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[   70.049187][ T3372] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[   70.049212][ T3372] usb 6-1: too many configurations: 248, using maximum allowed: 8
[   70.050421][ T3372] usb 6-1: unable to read config index 0 descriptor/start: -61
[   70.050439][ T3372] usb 6-1: can't read configurations, error -61
[   70.050679][ T3372] usb usb6-port1: attempt power cycle
[   70.412468][ T3372] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[   70.548094][ T3372] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[   70.548145][ T3372] usb 6-1: too many configurations: 248, using maximum allowed: 8
[   70.595483][ T3372] usb 6-1: unable to read config index 0 descriptor/start: -61
[   70.595511][ T3372] usb 6-1: can't read configurations, error -61
[   70.691281][ T6270] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 4, id = 0
[   70.719295][ T3372] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[   70.742410][ T3372] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[   70.742507][ T3372] usb 6-1: too many configurations: 248, using maximum allowed: 8
[   70.746376][ T3372] usb 6-1: unable to read config index 0 descriptor/start: -61
[   70.746527][ T3372] usb 6-1: can't read configurations, error -61
[   70.747785][ T3372] usb usb6-port1: unable to enumerate USB device
[   70.992221][ T1438] ieee802154 phy0 wpan0: encryption failed: -22
[   70.992261][ T1438] ieee802154 phy1 wpan1: encryption failed: -22
[   72.254962][ T6301] rdma_rxe: rxe_newlink: failed to add lo
[   72.480127][ T6066] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[   72.555945][ T6309] rdma_rxe: rxe_newlink: failed to add lo
[   72.794127][ T6066] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[   72.794153][ T6066] usb 8-1: too many configurations: 248, using maximum allowed: 8
[   72.897649][ T6066] usb 8-1: config index 0 descriptor too short (expected 28277, got 36)
[   72.897667][ T6066] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   72.897677][ T6066] usb 8-1: config 0 has no interfaces?
[   72.952922][ T6066] usb 8-1: config index 1 descriptor too short (expected 28277, got 36)
[   72.952943][ T6066] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   72.952956][ T6066] usb 8-1: config 0 has no interfaces?
[   72.997491][ T6066] usb 8-1: config index 2 descriptor too short (expected 28277, got 36)
[   72.997509][ T6066] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   72.997518][ T6066] usb 8-1: config 0 has no interfaces?
[   73.135366][ T6066] usb 8-1: config index 3 descriptor too short (expected 28277, got 36)
[   73.135384][ T6066] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   73.135394][ T6066] usb 8-1: config 0 has no interfaces?
[   73.163347][ T6066] usb 8-1: config index 4 descriptor too short (expected 28277, got 36)
[   73.163364][ T6066] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   73.163373][ T6066] usb 8-1: config 0 has no interfaces?
[   73.186109][ T6066] usb 8-1: config index 5 descriptor too short (expected 28277, got 36)
[   73.186126][ T6066] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   73.186136][ T6066] usb 8-1: config 0 has no interfaces?
[   73.209344][ T6066] usb 8-1: config index 6 descriptor too short (expected 28277, got 36)
[   73.209363][ T6066] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   73.209372][ T6066] usb 8-1: config 0 has no interfaces?
[   73.315175][ T6066] usb 8-1: config index 7 descriptor too short (expected 28277, got 36)
[   73.315193][ T6066] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   73.315209][ T6066] usb 8-1: config 0 has no interfaces?
[   73.315224][ T6066] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.316998][ T6066] usb 8-1: config 0 descriptor??
[   73.360921][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'.
[   74.626720][ T6344] rdma_rxe: rxe_newlink: failed to add lo
[   75.055145][ T6066] usb 8-1: string descriptor 0 read error: -71
[   75.055878][ T6066] usb 8-1: USB disconnect, device number 7
[   75.688807][ T5847] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   76.162624][ T5847] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[   76.167102][ T5847] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   76.167196][ T5847] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[   76.240896][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.240921][ T5847] usb 7-1: Product: syz
[   76.240977][ T5847] usb 7-1: Manufacturer: syz
[   76.240990][ T5847] usb 7-1: SerialNumber: syz
[   76.319861][   T42] cfg80211: failed to load regulatory.db
[   76.647777][ T6370] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0)
[   76.774517][ T6365] bridge0: port 3(wlan1) entered blocking state
[   76.777121][ T6365] bridge0: port 3(wlan1) entered disabled state
[   76.777277][ T6365] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   76.789181][ T6365] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   76.789689][ T6365] bridge0: port 3(wlan1) entered blocking state
[   76.789731][ T6365] bridge0: port 3(wlan1) entered forwarding state
[   76.822352][ T6365] bridge0: port 3(wlan1) entered disabled state
[   76.826017][ T6365] mac80211_hwsim hwsim3 wlan1 (unregistering): left allmulticast mode
[   76.826038][ T6365] mac80211_hwsim hwsim3 wlan1 (unregistering): left promiscuous mode
[   76.826112][ T6365] bridge0: port 3(wlan1) entered disabled state
[   77.016133][ T5847] usb 7-1: unit 4 not found!
[   77.045914][ T6381] rdma_rxe: rxe_newlink: failed to add lo
[   77.059167][ T5847] usb 7-1: USB disconnect, device number 2
[   77.121359][ T5744] udevd[5744]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   78.129806][ T6400] rdma_rxe: rxe_newlink: failed to add lo
[   78.554958][ T6417] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0)
[   82.090782][ T3372] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   82.248987][ T3372] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[   82.249797][ T3372] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   82.249821][ T3372] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[   82.251326][ T3372] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.251338][ T3372] usb 6-1: Product: syz
[   82.251345][ T3372] usb 6-1: Manufacturer: syz
[   82.251352][ T3372] usb 6-1: SerialNumber: syz
[   82.549545][ T6435] bridge0: port 3(wlan1) entered blocking state
[   82.549594][ T6435] bridge0: port 3(wlan1) entered disabled state
[   82.559489][ T6435] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   82.567982][ T6435] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[   82.610195][ T6435] bridge0: port 3(wlan1) entered disabled state
[   82.619476][ T6435] mac80211_hwsim hwsim5 wlan1 (unregistering): left allmulticast mode
[   82.619494][ T6435] mac80211_hwsim hwsim5 wlan1 (unregistering): left promiscuous mode
[   82.619553][ T6435] bridge0: port 3(wlan1) entered disabled state
[   82.871639][ T3372] usb 6-1: unit 4 not found!
[   82.920478][ T3372] usb 6-1: USB disconnect, device number 6
[   82.958556][ T5744] udevd[5744]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   83.991679][ T6486] rdma_rxe: rxe_newlink: failed to add lo
[   84.565135][ T6496] syz0: rxe_newlink: already configured on lo
[   85.938543][   T42] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[   86.093204][   T42] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[   86.093365][   T42] usb 8-1: too many configurations: 248, using maximum allowed: 8
[   86.113280][   T42] usb 8-1: config index 0 descriptor too short (expected 28277, got 36)
[   86.113297][   T42] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   86.113307][   T42] usb 8-1: config 0 has no interfaces?
[   86.134673][   T42] usb 8-1: config index 1 descriptor too short (expected 28277, got 36)
[   86.134770][   T42] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   86.134819][   T42] usb 8-1: config 0 has no interfaces?
[   86.162101][   T42] usb 8-1: config index 2 descriptor too short (expected 28277, got 36)
[   86.162182][   T42] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   86.162243][   T42] usb 8-1: config 0 has no interfaces?
[   86.166191][   T42] usb 8-1: config index 3 descriptor too short (expected 28277, got 36)
[   86.166231][   T42] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   86.166242][   T42] usb 8-1: config 0 has no interfaces?
[   86.169049][   T42] usb 8-1: config index 4 descriptor too short (expected 28277, got 36)
[   86.169145][   T42] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   86.169246][   T42] usb 8-1: config 0 has no interfaces?
[   86.177623][   T42] usb 8-1: config index 5 descriptor too short (expected 28277, got 36)
[   86.177684][   T42] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   86.177703][   T42] usb 8-1: config 0 has no interfaces?
[   86.181849][   T42] usb 8-1: config index 6 descriptor too short (expected 28277, got 36)
[   86.181892][   T42] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   86.181928][   T42] usb 8-1: config 0 has no interfaces?
[   86.232220][   T42] usb 8-1: config index 7 descriptor too short (expected 28277, got 36)
[   86.232316][   T42] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   86.232362][   T42] usb 8-1: config 0 has no interfaces?
[   86.232591][   T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.260223][   T42] usb 8-1: config 0 descriptor??
[   88.617062][   T42] usb 8-1: string descriptor 0 read error: -71
[   88.618540][   T42] usb 8-1: USB disconnect, device number 8
[   88.667427][ T6560] rdma_rxe: rxe_newlink: failed to add lo
[   89.986855][ T6581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.142'.
[   91.558083][ T6615] rdma_rxe: rxe_newlink: failed to add lo
[   92.686998][ T6632] FAULT_INJECTION: forcing a failure.
[   92.686998][ T6632] name failslab, interval 1, probability 0, space 0, times 0
[   92.687021][ T6632] CPU: 1 UID: 0 PID: 6632 Comm: syz.2.155 Not tainted syzkaller #0 PREEMPT(full) 
[   92.687033][ T6632] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   92.687040][ T6632] Call Trace:
[   92.687044][ T6632]  <TASK>
[   92.687049][ T6632]  dump_stack_lvl+0x100/0x190
[   92.687068][ T6632]  should_fail_ex.cold+0x5/0xa
[   92.687086][ T6632]  should_failslab+0xc2/0x120
[   92.687105][ T6632]  kmem_cache_alloc_noprof+0x92/0x6a0
[   92.687120][ T6632]  ? proc_reg_open+0x23f/0x5f0
[   92.687139][ T6632]  proc_reg_open+0x23f/0x5f0
[   92.687156][ T6632]  do_dentry_open+0x6ab/0x14d0
[   92.687169][ T6632]  ? __pfx_proc_reg_open+0x10/0x10
[   92.687190][ T6632]  vfs_open+0x82/0x3f0
[   92.687209][ T6632]  path_openat+0x19fa/0x2440
[   92.687227][ T6632]  ? __pfx_path_openat+0x10/0x10
[   92.687245][ T6632]  do_file_open+0x20e/0x430
[   92.687261][ T6632]  ? __pfx_do_file_open+0x10/0x10
[   92.687287][ T6632]  ? _raw_spin_unlock+0x28/0x50
[   92.687298][ T6632]  ? alloc_fd+0x471/0x7a0
[   92.687316][ T6632]  do_sys_openat2+0x10f/0x1e0
[   92.687334][ T6632]  ? __pfx_do_sys_openat2+0x10/0x10
[   92.687351][ T6632]  ? __local_bh_enable_ip+0xa5/0x120
[   92.687373][ T6632]  __ia32_compat_sys_openat+0x12d/0x210
[   92.687384][ T6632]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[   92.687401][ T6632]  __do_fast_syscall_32+0x13a/0x8b0
[   92.687418][ T6632]  do_fast_syscall_32+0x32/0x70
[   92.687432][ T6632]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   92.687447][ T6632] RIP: 0023:0xf705efec
[   92.687460][ T6632] Code: Unable to access opcode bytes at 0xf705efc2.
[   92.687465][ T6632] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[   92.687481][ T6632] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040
[   92.687489][ T6632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   92.687496][ T6632] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   92.687503][ T6632] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   92.687510][ T6632] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   92.687524][ T6632]  </TASK>
[   95.170264][ T6657] rdma_rxe: rxe_newlink: failed to add lo
[   95.314890][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'.
[   95.508790][ T5822] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[   95.668983][ T5822] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[   95.669008][ T5822] usb 7-1: too many configurations: 248, using maximum allowed: 8
[   95.669843][ T5822] usb 7-1: config index 0 descriptor too short (expected 28277, got 36)
[   95.669856][ T5822] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.669865][ T5822] usb 7-1: config 0 has no interfaces?
[   95.672860][ T5822] usb 7-1: config index 1 descriptor too short (expected 28277, got 36)
[   95.672874][ T5822] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.672883][ T5822] usb 7-1: config 0 has no interfaces?
[   95.673634][ T5822] usb 7-1: config index 2 descriptor too short (expected 28277, got 36)
[   95.673649][ T5822] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.673657][ T5822] usb 7-1: config 0 has no interfaces?
[   95.674426][ T5822] usb 7-1: config index 3 descriptor too short (expected 28277, got 36)
[   95.674440][ T5822] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.674449][ T5822] usb 7-1: config 0 has no interfaces?
[   95.675204][ T5822] usb 7-1: config index 4 descriptor too short (expected 28277, got 36)
[   95.675217][ T5822] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.675226][ T5822] usb 7-1: config 0 has no interfaces?
[   95.675989][ T5822] usb 7-1: config index 5 descriptor too short (expected 28277, got 36)
[   95.676001][ T5822] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.676011][ T5822] usb 7-1: config 0 has no interfaces?
[   95.676769][ T5822] usb 7-1: config index 6 descriptor too short (expected 28277, got 36)
[   95.676782][ T5822] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.676791][ T5822] usb 7-1: config 0 has no interfaces?
[   95.677578][ T5822] usb 7-1: config index 7 descriptor too short (expected 28277, got 36)
[   95.677591][ T5822] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.677600][ T5822] usb 7-1: config 0 has no interfaces?
[   95.677614][ T5822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.763975][ T5822] usb 7-1: config 0 descriptor??
[   97.339469][ T6705] rdma_rxe: rxe_newlink: failed to add lo
[   97.736327][ T6714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'.
[   98.471400][ T5822] usb 7-1: string descriptor 0 read error: -71
[   98.511564][ T5822] usb 7-1: USB disconnect, device number 3
[   99.436207][ T6734] rdma_rxe: rxe_newlink: failed to add lo
[   99.521748][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'.
[   99.559992][ T6741] rdma_rxe: rxe_newlink: failed to add lo
[   99.746240][ T6749] rdma_rxe: rxe_newlink: failed to add lo
[  104.017778][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'.
[  104.324441][ T6835] netlink: 52 bytes leftover after parsing attributes in process `syz.0.203'.
[  105.388481][   T43] audit: type=1326 audit(1790857377.658:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.203" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7fc00000
[  105.400322][   T43] audit: type=1326 audit(1790857377.668:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.203" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704efec code=0x7fc00000
[  105.406749][   T43] audit: type=1326 audit(1790857377.678:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.203" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7fc00000
[  106.056337][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'.
[  106.527062][ T6876] rdma_rxe: rxe_newlink: failed to add lo
[  107.536609][ T6894] ptrace attach of "/syz-executor exec"[5736] was attempted by "/syz-executor exec"[6894]
[  107.709180][ T5837] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  107.827877][ T5837] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  107.851592][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'.
[  108.091915][ T5837] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  108.214386][ T6889] ceph: No mds server is up or the cluster is laggy
[  110.173671][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'.
[  112.049269][ T6982] FAULT_INJECTION: forcing a failure.
[  112.049269][ T6982] name failslab, interval 1, probability 0, space 0, times 0
[  112.049300][ T6982] CPU: 2 UID: 0 PID: 6982 Comm: syz.3.239 Not tainted syzkaller #0 PREEMPT(full) 
[  112.049321][ T6982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  112.049333][ T6982] Call Trace:
[  112.049339][ T6982]  <TASK>
[  112.049346][ T6982]  dump_stack_lvl+0x100/0x190
[  112.049376][ T6982]  should_fail_ex.cold+0x5/0xa
[  112.049401][ T6982]  should_failslab+0xc2/0x120
[  112.049428][ T6982]  kmem_cache_alloc_noprof+0x92/0x6a0
[  112.049455][ T6982]  ? security_file_alloc+0x34/0x2c0
[  112.049481][ T6982]  security_file_alloc+0x34/0x2c0
[  112.049508][ T6982]  init_file+0x95/0x480
[  112.049536][ T6982]  alloc_empty_file+0x79/0x1c0
[  112.049564][ T6982]  path_openat+0xdb/0x2440
[  112.049593][ T6982]  ? __pfx_path_openat+0x10/0x10
[  112.049624][ T6982]  do_file_open+0x20e/0x430
[  112.049651][ T6982]  ? __pfx_do_file_open+0x10/0x10
[  112.049692][ T6982]  ? _raw_spin_unlock+0x28/0x50
[  112.049711][ T6982]  ? alloc_fd+0x471/0x7a0
[  112.049742][ T6982]  do_sys_openat2+0x10f/0x1e0
[  112.049771][ T6982]  ? __pfx_do_sys_openat2+0x10/0x10
[  112.049798][ T6982]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  112.049847][ T6982]  __ia32_compat_sys_openat+0x12d/0x210
[  112.049868][ T6982]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  112.049917][ T6982]  do_int80_emulation+0x166/0x650
[  112.049945][ T6982]  asm_int80_emulation+0x1a/0x20
[  112.049966][ T6982] RIP: 0023:0xf71875ab
[  112.049981][ T6982] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  112.049997][ T6982] RSP: 002b:00000000f543b38c EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  112.050016][ T6982] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72515f1
[  112.050028][ T6982] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  112.050038][ T6982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  112.050049][ T6982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  112.050060][ T6982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  112.050084][ T6982]  </TASK>
[  113.042226][ T7005] rdma_rxe: rxe_newlink: failed to add lo
[  113.812052][ T7014] tipc: Started in network mode
[  113.812066][ T7014] tipc: Node identity 4, cluster identity 4711
[  113.812074][ T7014] tipc: Node number set to 4
[  114.724369][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'.
[  114.860076][ T7037] netlink: 'syz.2.253': attribute type 5 has an invalid length.
[  114.860093][ T7037] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.253'.
[  115.122031][ T7037] kAFS: No cell specified
[  117.343003][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'.
[  119.355829][ T7120] Console: switching to colour dummy device 80x25
[  120.026870][ T7121] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  120.045683][ T7121] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref]
[  120.045964][ T7121] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff]
[  120.046729][ T7121] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  120.047962][ T7121] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  120.128366][ T7121] pci 0000:00:01.0: Adding to iommu group 1
[  120.153782][ T7121] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  120.153798][ T7121] pci 0000:00:01.0: vgaarb: bridge control possible
[  120.153807][ T7121] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  120.190083][ T7121] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  120.194283][ T7121] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  120.223449][ T7121] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  120.299410][ T7121] [drm] Found bochs VGA, ID 0xb0c5.
[  120.299459][ T7121] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  120.446279][ T7121] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  121.013015][ T7121] Console: switching to colour frame buffer device 160x50
[  121.091434][ T7121] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  121.841216][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'.
[  126.502238][ T7198] ==================================================================
[  126.502260][ T7198] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0
[  126.502352][ T7198] Read of size 8 at addr ffff8880002ab818 by task syz.2.291/7198
[  126.502363][ T7198] 
[  126.502369][ T7198] CPU: 2 UID: 0 PID: 7198 Comm: syz.2.291 Not tainted syzkaller #0 PREEMPT(full) 
[  126.502384][ T7198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  126.502391][ T7198] Call Trace:
[  126.502397][ T7198]  <TASK>
[  126.502401][ T7198]  dump_stack_lvl+0x100/0x190
[  126.502418][ T7198]  print_report+0x13d/0x4b0
[  126.502436][ T7198]  ? __virt_addr_valid+0x239/0x430
[  126.502454][ T7198]  ? dvb_device_open+0x33f/0x3b0
[  126.502484][ T7198]  kasan_report+0xdf/0x1c0
[  126.502522][ T7198]  ? dvb_device_open+0x33f/0x3b0
[  126.502537][ T7198]  ? __pfx_dvb_device_open+0x10/0x10
[  126.502551][ T7198]  dvb_device_open+0x33f/0x3b0
[  126.502565][ T7198]  ? __pfx_dvb_device_open+0x10/0x10
[  126.502584][ T7198]  chrdev_open+0x234/0x6a0
[  126.502604][ T7198]  ? __pfx_apparmor_file_open+0x10/0x10
[  126.502628][ T7198]  ? __pfx_chrdev_open+0x10/0x10
[  126.502654][ T7198]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  126.502680][ T7198]  do_dentry_open+0x6ab/0x14d0
[  126.502694][ T7198]  ? __pfx_chrdev_open+0x10/0x10
[  126.502710][ T7198]  vfs_open+0x82/0x3f0
[  126.502727][ T7198]  path_openat+0x19fa/0x2440
[  126.502742][ T7198]  ? __pfx_path_openat+0x10/0x10
[  126.502759][ T7198]  do_file_open+0x20e/0x430
[  126.502776][ T7198]  ? __pfx_do_file_open+0x10/0x10
[  126.502797][ T7198]  ? _raw_spin_unlock+0x28/0x50
[  126.502836][ T7198]  ? alloc_fd+0x471/0x7a0
[  126.502855][ T7198]  do_sys_openat2+0x10f/0x1e0
[  126.502875][ T7198]  ? __pfx_do_sys_openat2+0x10/0x10
[  126.502896][ T7198]  ? irqentry_exit+0x24d/0xa10
[  126.502911][ T7198]  ? lockdep_hardirqs_on+0x7d/0x110
[  126.502927][ T7198]  __ia32_compat_sys_openat+0x12d/0x210
[  126.502940][ T7198]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  126.502957][ T7198]  do_int80_emulation+0x166/0x650
[  126.502977][ T7198]  asm_int80_emulation+0x1a/0x20
[  126.502989][ T7198] RIP: 0023:0xf71975ab
[  126.502999][ T7198] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  126.503015][ T7198] RSP: 002b:00000000f544d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  126.503028][ T7198] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f544d100
[  126.503036][ T7198] RDX: 0000000000040002 RSI: 0000000000000000 RDI: 0000000000000000
[  126.503043][ T7198] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  126.503050][ T7198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  126.503057][ T7198] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  126.503068][ T7198]  </TASK>
[  126.503073][ T7198] 
[  126.503076][ T7198] Allocated by task 1:
[  126.503082][ T7198]  kasan_save_stack+0x30/0x50
[  126.503099][ T7198]  kasan_save_track+0x14/0x30
[  126.503114][ T7198]  __kasan_kmalloc+0xaa/0xb0
[  126.503130][ T7198]  __kmalloc_cache_noprof+0x2f8/0x6d0
[  126.503142][ T7198]  dvb_register_device+0x1d6/0x1e20
[  126.503156][ T7198]  dvb_register_frontend+0x552/0x820
[  126.503170][ T7198]  vidtv_bridge_probe+0x44b/0xa30
[  126.503188][ T7198]  platform_probe+0x106/0x1d0
[  126.503203][ T7198]  really_probe+0x241/0xa60
[  126.503220][ T7198]  __driver_probe_device+0x210/0x460
[  126.503238][ T7198]  driver_probe_device+0x4a/0x140
[  126.503255][ T7198]  __driver_attach+0x21f/0x5b0
[  126.503272][ T7198]  bus_for_each_dev+0x13e/0x1d0
[  126.503286][ T7198]  bus_add_driver+0x305/0x5b0
[  126.503301][ T7198]  driver_register+0x1e2/0x360
[  126.503312][ T7198]  vidtv_bridge_init+0x52/0x80
[  126.503330][ T7198]  do_one_initcall+0x11c/0x6f0
[  126.503341][ T7198]  kernel_init_freeable+0x6ea/0x7b0
[  126.503355][ T7198]  kernel_init+0x21/0x1e0
[  126.503370][ T7198]  ret_from_fork+0x730/0xd60
[  126.503380][ T7198]  ret_from_fork_asm+0x1a/0x30
[  126.503391][ T7198] 
[  126.503393][ T7198] Freed by task 7154:
[  126.503399][ T7198]  kasan_save_stack+0x30/0x50
[  126.503415][ T7198]  kasan_save_track+0x14/0x30
[  126.503431][ T7198]  kasan_save_free_info+0x3b/0x70
[  126.503442][ T7198]  __kasan_slab_free+0x5f/0x80
[  126.503458][ T7198]  kfree+0x22b/0x6d0
[  126.503475][ T7198]  dvb_device_put.part.0+0x57/0x90
[  126.503489][ T7198]  dvb_device_open+0x2ba/0x3b0
[  126.503503][ T7198]  chrdev_open+0x234/0x6a0
[  126.503518][ T7198]  do_dentry_open+0x6ab/0x14d0
[  126.503532][ T7198]  vfs_open+0x82/0x3f0
[  126.503549][ T7198]  path_openat+0x19fa/0x2440
[  126.503565][ T7198]  do_file_open+0x20e/0x430
[  126.503580][ T7198]  do_sys_openat2+0x10f/0x1e0
[  126.503599][ T7198]  __ia32_compat_sys_openat+0x12d/0x210
[  126.503611][ T7198]  do_int80_emulation+0x166/0x650
[  126.503626][ T7198]  asm_int80_emulation+0x1a/0x20
[  126.503639][ T7198] 
[  126.503642][ T7198] The buggy address belongs to the object at ffff8880002ab800
[  126.503642][ T7198]  which belongs to the cache kmalloc-256 of size 256
[  126.503651][ T7198] The buggy address is located 24 bytes inside of
[  126.503651][ T7198]  freed 256-byte region [ffff8880002ab800, ffff8880002ab900)
[  126.503662][ T7198] 
[  126.503665][ T7198] The buggy address belongs to the physical page:
[  126.503670][ T7198] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2aa
[  126.503680][ T7198] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  126.503690][ T7198] flags: 0x7ff00000000040(head|node=0|zone=0|lastcpupid=0x7ff)
[  126.503701][ T7198] page_type: f5(slab)
[  126.503711][ T7198] raw: 007ff00000000040 ffff88801c042b40 dead000000000100 dead000000000122
[  126.503722][ T7198] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  126.503733][ T7198] head: 007ff00000000040 ffff88801c042b40 dead000000000100 dead000000000122
[  126.503743][ T7198] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  126.503753][ T7198] head: 007ff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[  126.503763][ T7198] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  126.503770][ T7198] page dumped because: kasan: bad access detected
[  126.503776][ T7198] page_owner tracks the page as allocated
[  126.503780][ T7198] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9195617358
[  126.503798][ T7198]  post_alloc_hook+0xfd/0x120
[  126.503809][ T7198]  get_page_from_freelist+0x110d/0x35d0
[  126.503822][ T7198]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  126.503835][ T7198]  new_slab+0xa9/0x6e0
[  126.503846][ T7198]  refill_objects+0xe3/0x410
[  126.503858][ T7198]  __pcs_replace_empty_main+0x35e/0x650
[  126.503869][ T7198]  __kmalloc_cache_noprof+0x4f4/0x6d0
[  126.503881][ T7198]  bus_add_driver+0x92/0x5b0
[  126.503896][ T7198]  driver_register+0x1e2/0x360
[  126.503907][ T7198]  usb_register_driver+0x21c/0x3e0
[  126.503920][ T7198]  do_one_initcall+0x11c/0x6f0
[  126.503930][ T7198]  kernel_init_freeable+0x6ea/0x7b0
[  126.503943][ T7198]  kernel_init+0x21/0x1e0
[  126.503959][ T7198]  ret_from_fork+0x730/0xd60
[  126.503971][ T7198]  ret_from_fork_asm+0x1a/0x30
[  126.503982][ T7198] page_owner free stack trace missing
[  126.503986][ T7198] 
[  126.503988][ T7198] Memory state around the buggy address:
[  126.503994][ T7198]  ffff8880002ab700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  126.504002][ T7198]  ffff8880002ab780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  126.504010][ T7198] >ffff8880002ab800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  126.504016][ T7198]                             ^
[  126.504022][ T7198]  ffff8880002ab880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  126.504030][ T7198]  ffff8880002ab900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  126.504036][ T7198] ==================================================================
[  126.883378][ T7198] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  126.885798][ T7198] CPU: 2 UID: 0 PID: 7198 Comm: syz.2.291 Not tainted syzkaller #0 PREEMPT(full) 
[  126.888809][ T7198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  126.892393][ T7198] Call Trace:
[  126.893602][ T7198]  <TASK>
[  126.894675][ T7198]  dump_stack_lvl+0x100/0x190
[  126.896300][ T7198]  vpanic+0x553/0x970
[  126.897677][ T7198]  ? __pfx_vpanic+0x10/0x10
[  126.899228][ T7198]  ? dvb_device_open+0x33f/0x3b0
[  126.900827][ T7198]  panic+0xd1/0xe0
[  126.902070][ T7198]  ? __pfx_panic+0x10/0x10
[  126.903475][ T7198]  ? dvb_device_open+0x33f/0x3b0
[  126.905078][ T7198]  ? preempt_schedule_common+0x3c/0xb0
[  126.907017][ T7198]  check_panic_on_warn.cold+0x19/0x34
[  126.908748][ T7198]  end_report.part.0+0x3a/0x90
[  126.910296][ T7198]  kasan_report.cold+0xe/0x18
[  126.911828][ T7198]  ? dvb_device_open+0x33f/0x3b0
[  126.913415][ T7198]  ? __pfx_dvb_device_open+0x10/0x10
[  126.915118][ T7198]  dvb_device_open+0x33f/0x3b0
[  126.916684][ T7198]  ? __pfx_dvb_device_open+0x10/0x10
[  126.918405][ T7198]  chrdev_open+0x234/0x6a0
[  126.919807][ T7198]  ? __pfx_apparmor_file_open+0x10/0x10
[  126.921614][ T7198]  ? __pfx_chrdev_open+0x10/0x10
[  126.923296][ T7198]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  126.925438][ T7198]  do_dentry_open+0x6ab/0x14d0
[  126.927195][ T7198]  ? __pfx_chrdev_open+0x10/0x10
[  126.928878][ T7198]  vfs_open+0x82/0x3f0
[  126.930278][ T7198]  path_openat+0x19fa/0x2440
[  126.931851][ T7198]  ? __pfx_path_openat+0x10/0x10
[  126.933565][ T7198]  do_file_open+0x20e/0x430
[  126.935335][ T7198]  ? __pfx_do_file_open+0x10/0x10
[  126.937007][ T7198]  ? _raw_spin_unlock+0x28/0x50
[  126.938670][ T7198]  ? alloc_fd+0x471/0x7a0
[  126.940078][ T7198]  do_sys_openat2+0x10f/0x1e0
[  126.941653][ T7198]  ? __pfx_do_sys_openat2+0x10/0x10
[  126.943530][ T7198]  ? irqentry_exit+0x24d/0xa10
[  126.945683][ T7198]  ? lockdep_hardirqs_on+0x7d/0x110
[  126.948050][ T7198]  __ia32_compat_sys_openat+0x12d/0x210
[  126.950538][ T7198]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  126.953160][ T7198]  do_int80_emulation+0x166/0x650
[  126.955615][ T7198]  asm_int80_emulation+0x1a/0x20
[  126.957765][ T7198] RIP: 0023:0xf71975ab
[  126.959534][ T7198] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  126.966693][ T7198] RSP: 002b:00000000f544d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  126.969563][ T7198] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f544d100
[  126.972348][ T7198] RDX: 0000000000040002 RSI: 0000000000000000 RDI: 0000000000000000
[  126.975062][ T7198] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  126.977551][ T7198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  126.980032][ T7198] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  126.982778][ T7198]  </TASK>
[  126.984533][ T7198] Kernel Offset: disabled
[  126.986271][ T7198] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:23:18  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=dffffc0000000000 RCX=0000000000000000 RDX=0000000000000004
RSI=ffffffff8e391eab RDI=ffff88804bd3c398 RBP=ffff8880482f4b00 RSP=ffffc9000dc0fb08
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffff88804bd3c038 R13=0000000000000bb8 R14=000000000000a9cc R15=ffff888060a57458
RIP=ffffffff8963a083 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096955000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000080004000 CR3=000000004bba4000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=8000000001000001 RBX=ffff88802b323f00 RCX=0000000001000001 RDX=ffff8880496d4b00
RSI=ffffffff81b877fc RDI=ffff8880496d4b00 RBP=0000000000000001 RSP=ffffc9000fa7efc8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000
R12=ffff8880496d4b00 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81b7d990 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096a55000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000f7208c10 CR3=000000004bba4000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=ffffc90006d20000 RBX=ffff888029684000 RCX=0000000001000001 RDX=1ffff110052d0a84
RSI=ffffffff87054b6f RDI=0000000000000016 RBP=0000000000000080 RSP=ffffc90000548ec0
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffff88802969e07c R13=dffffc0000000000 R14=ffff888029685420 R15=0000000000000000
RIP=ffffffff87054b97 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096b55000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000000c368d25 CR3=00000000290ca000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055cf984eec50 000055cf984eec50
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6c94a480 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3f20205d38393137 54205b5d37333532 30352e3632312020 5b203a6c656e7265
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3335203039203039 2036362030392036 3620303920363620 6666206666203161
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2037662039652064 3520663520653520 6235203363206435 206635206535203e
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 62353c2030382064 6320303320343220 6336206238206332 2034322063372062
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3820383220343220 3437206238203432 2034322034352062 3820303220343220
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=dffffc0000000000 RBX=ffff88802b533de8 RCX=ffffffff8213e67f RDX=0000000000000000
RSI=ffffffff8c623f00 RDI=ffffffff8e65a938 RBP=0000000000000003 RSP=ffffc90024b778a8
R8 =0000000000000000 R9 =fffffbfff228b10b R10=ffffffff9145885f R11=0000000000000000
R12=0000000000000200 R13=ffff888073c34150 R14=ffffc90024b77a30 R15=1ffff9200496ef26
RIP=ffffffff81ef5cc1 RFL=00000806 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096c55000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000080004000 CR3=0000000026cee000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7ed1862123ebbc19 bef7cd8b514f4118
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b4b9e6f0140094b1 0328bfab33521e8e
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 54ecffce69658ed5 c2f626e94d1029a6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 92226c298e04d47a ce554860148d4f4c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003b40
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01000000fc96c519 e388437401000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 004da9d7004dabc8 e5eaed6149b68275
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f3471607e1427278 7f9b00009b160080
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4aa6be2968f099df 459b0080004da8dc
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 080c525ef026f75d 6f7b214ec6041859
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6637f403743c0cc1 dfe888358b5bf080
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000