last executing test programs:

8.368649318s ago: executing program 0 (id=86):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendto(r4, &(0x7f0000000380)="6800000030000505010000000000000000000000540001805000018009000100676174650000000040000280180002000000000000000000000000000000000000000000180005800e000000000000000000000008000300640000000c000700e803ffe40000000085", 0x69, 0x20001000, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000280)=<r5=>0x0)
syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="040e05003e20"], 0x8)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x5, 0x2, 0x4}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680))
r6 = openat$kvm(0x0, &(0x7f0000000440), 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000480), 0xf9ba, 0x501)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f00000004c0)={0x4, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000500)=@attr_riscv64=@attr_aplic={0x0, 0x1, @any=0x2, &(0x7f0000000540)=0x6})
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="e52a26bd7000f89cb7250200040006000000", @ANYRES32=r5], 0x1c}}, 0x4008054)
write$nci(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x14)
syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2)
r9 = socket(0x1e, 0x4, 0x0)
write$nci(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='P', @ANYRES8=r2, @ANYRES16=r9], 0x14)
ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000100)={&(0x7f0000000140)=""/120, 0xffffffffffffff28})
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='jfs\x00', 0x2200010, &(0x7f00000000c0)='discard')

8.156601071s ago: executing program 1 (id=88):
syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0)
preadv2(r0, &(0x7f00000005c0)=[{&(0x7f0000000880)=""/139, 0x8b}], 0x1, 0x86a, 0x0, 0x0)
recvmsg$can_j1939(r0, &(0x7f0000000c80)={&(0x7f0000000a00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a80)=""/115, 0x73}, {&(0x7f0000000b00)=""/52, 0x34}, {&(0x7f0000000b40)=""/115, 0x73}], 0x3, &(0x7f0000000c00)=""/85, 0x55}, 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x48, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x812}, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
r4 = syz_open_dev$usbfs(0x0, 0x80, 0x113201)
read$usbfs(r4, &(0x7f0000000600)=""/234, 0xea)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r5, &(0x7f00000000c0)='1\x00', 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)

7.517774829s ago: executing program 0 (id=89):
syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0)
preadv2(r0, &(0x7f00000005c0)=[{&(0x7f0000000880)=""/139, 0x8b}], 0x1, 0x86a, 0x0, 0x0)
recvmsg$can_j1939(r0, &(0x7f0000000c80)={&(0x7f0000000a00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a80)=""/115, 0x73}, {&(0x7f0000000b00)=""/52, 0x34}, {&(0x7f0000000b40)=""/115, 0x73}], 0x3, &(0x7f0000000c00)=""/85, 0x55}, 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x48, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x812}, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
r4 = syz_open_dev$usbfs(0x0, 0x80, 0x113201)
read$usbfs(r4, &(0x7f0000000600)=""/234, 0xea)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r5, &(0x7f00000000c0)='1\x00', 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)

5.808024949s ago: executing program 3 (id=91):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'syzkaller1\x00', 0x7101})
ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000440))
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r2, &(0x7f0000000680)={&(0x7f00000006c0)={0xa, 0x4e20, 0x3a, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x2b, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/sched/filter\x00', 0x1, 0x0)
pwritev2(r3, &(0x7f0000000300)=[{&(0x7f0000000800)="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", 0x906}, {0x0, 0x9}], 0x2, 0x5, 0x7ffffc, 0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/if_inet6\x00')
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0x601, 0x20000, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x2}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x60, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0xc, 0x2, 0x4, 0x0, 0x4, 0x0, 0x3, 0xc2d, [{0x0, 0x5, 0x1, 0x5}, {0xfdd, 0x9, 0x6, 0x3}, {0x8, 0x1000, 0x75, 0x3ff}, {0x400, 0x2658, 0x40000, 0x1}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffe0, 0xffe0}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0)
preadv(r4, &(0x7f0000000380)=[{&(0x7f0000001140)=""/4108, 0x100c}], 0x1, 0x100e, 0xc)
r6 = fsopen(&(0x7f0000000040)='adfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='gid', &(0x7f00000000c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000))
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000007c0)=""/62)

5.124294146s ago: executing program 3 (id=94):
r0 = socket(0xa, 0x3, 0x3a)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4020)
msgsnd(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000fe95a9b943b4f06cf017b824573d000000000000006c6d1d020b4d1f5a3196a6911f4d00"/50], 0x32, 0x800)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@can_newroute={0x1c, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_LIM_HOPS={0x5, 0xd, 0x4}]}, 0x1c}}, 0x2404485c)
statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0)
recvfrom(r0, &(0x7f0000000580)=""/211, 0xd3, 0x10000, &(0x7f0000000680)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4)
mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x81)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000440))
ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000480)=0x6f)
r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x8800, 0x0)
write$dsp(r5, &(0x7f0000001880)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
read$dsp(r6, &(0x7f00000018c0)=""/92, 0x5c)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r7, 0x0, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x74, 0x0, {0xffff, 0x7}, {0xf, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4048888)

5.120564495s ago: executing program 1 (id=95):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f40)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={0x0}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r3, &(0x7f0000001300)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14)
write(r3, &(0x7f0000001340)="080211000001080211000000080045", 0xf)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_TX_TS(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}, 0x1, 0x0, 0x0, 0x48080}, 0x4008090)
sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x84}}, 0x0)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000ac0)={'c6xdigio\x00', [0x20099c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x105, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x5, 0x83, 0x8, 0x1010003, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]})
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r9 = openat$audio1(0xffffff9c, &(0x7f00000003c0), 0x608700, 0x0)
read$dsp(r9, &(0x7f0000000400)=""/87, 0x57)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r8, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000004c0)={0x510, r8, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @local, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xffffff7f, @mcast1, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @empty, 0xfffffffb}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffd95e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfffffff9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @private0, 0x1000}}}}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6aa}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcf6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff00}]}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}]}, @TIPC_NLA_NODE={0x198, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x71, 0x3, "b01b0a02285150b8822d2de51486f35dbbafc64b0910076aee22f056448b8b5e215315f6fb23ea68722846c1235ca81be111be49be8f1ea36764f2f39947c710be336eb1b1f2f16c537f080b9e1a436413afeb3ad51008feb051efff0ca7bf46e45ccf357e35d8001cf86c3906"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ID={0xf7, 0x3, "f4b8aed1b9c66418586629b1b3040d459f9bbbd2bbcebd52431ce4009c1ef76145c6a6db6d3aed99f537eada951aef50854d04e7dd4cbfce9d65d752b545ccdbb9cef722bcc73d92e881b1c0b3162a231f996b1929dde655608c2cae9a45a085d371e115e5ecf6d5ea5a7c5ba563f17dc34a39c310edc88adc4712e8a9461b7ad84d2e960ad3db9cb2ea13f9284263c0b22e5d53ca357a986d40775447c8b06c211e5f3b8f50e1e484bd7e84c81de7a3ebf954078bf7ba621c047978502ff9af880d9254a7c7297fba740f54634a5cd05e8ef16c7603d6ff83abed51940f36b5bfbf43219dd8082e3f9898eade19afa22d97ed"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x510}, 0x1, 0x0, 0x0, 0x8801}, 0x44000841)

4.936207426s ago: executing program 1 (id=96):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000066c0)=ANY=[@ANYBLOB="00005a0001002d00000800040a00000065a8a782bde9894020d937f8a30000", @ANYRES32=0x0, @ANYBLOB="800008090800040004000000"], 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xd54895b78f604514)
syz_emit_ethernet(0x4a, &(0x7f00000065c0)=ANY=[@ANYBLOB="aaaa"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006600)=[{{0x0, 0x0, &(0x7f0000006640)=[{&(0x7f0000006680)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000006c40)={0x18, 0xf, &(0x7f0000006d00)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r1 = syz_open_dev$loop(&(0x7f0000006d80), 0x2, 0x2001)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006dc0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r2, &(0x7f0000006e00), 0xe09)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000006e40)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000006e00)=0x1cf, 0x4)
connect$inet(r3, &(0x7f00000072c0)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(r3, &(0x7f0000007300)={0x0, 0x14, &(0x7f0000007340)=[{&(0x7f0000007380)=' ', 0x100120}], 0x1}, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000006f80)={0xe, 0x6, &(0x7f0000007040)=ANY=[@ANYBLOB="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"], &(0x7f0000007180)='GPL\x00', 0x5, 0x29e, &(0x7f00000071c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x80, &(0x7f0000000240)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r4, &(0x7f00000002c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000006580)=0xab2)
write$FUSE_INIT(r4, &(0x7f0000002300)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50)
openat$dir(0xffffffffffffff9c, &(0x7f0000002380)='./file0\x00', 0x0, 0x18)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004440), 0x60140, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_CAP_HALT_POLL(r7, 0x4068aea3, &(0x7f00000064c0))
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000006540)=0x3)
ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000006840)={"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"})
ioctl$KVM_RUN(r8, 0xae80, 0x0)

4.821310086s ago: executing program 0 (id=97):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
ptrace(0x4206, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
accept4(r1, 0x0, 0x0, 0x800)
tkill(0x0, 0x12)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setns(0xc9, 0x0)
r2 = socket(0x2a, 0x2, 0x9)
bind$inet(r2, &(0x7f0000000300)={0x2a, 0x4e23, @empty=0x1000000}, 0x10)
modify_ldt$write2(0x11, &(0x7f0000000180)={0x81, 0x0, 0x4000, 0x1}, 0x10)
modify_ldt$read(0x0, &(0x7f0000001640)=""/4101, 0xffffffffffffffd6)
listen(0xffffffffffffffff, 0x5)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d000000000000", @ANYRESDEC=0x0, @ANYRES16, @ANYRES32=r0, @ANYRESDEC, @ANYRES64], 0x0, 0x34}, 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x111)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='.\x00', &(0x7f00000001c0)='ext4\x00', 0x8414, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000400), 0x6e, &(0x7f0000000480), 0x0, &(0x7f0000000500)=[@rights={{0xc}}, @cred={{0x18}}, @rights={{0xc}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x78}, 0x40)
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)

4.071824962s ago: executing program 3 (id=98):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0x63d, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000640), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r1 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil)
shmctl$IPC_RMID(r1, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000040), 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x5)
r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000840), &(0x7f00000009c0)=0x6e, 0x80000)
recvmsg$unix(r4, &(0x7f0000000a00)={&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/6, 0x6}, {&(0x7f0000000b40)=""/30, 0x1e}, {&(0x7f0000000b80)=""/151, 0x97}], 0x3, &(0x7f0000000c40)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x3c}, 0x200)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000c80), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000cc0)=0x2)
readlink(&(0x7f0000000d00)='./config/usb_gadget/g1/UDC\x00', &(0x7f0000000d40)=""/130, 0x82)
listen(0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000e00), 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mount(0x0, &(0x7f0000000e40)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', &(0x7f0000000e80)='configfs\x00', 0x2208800, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000f00)='./my_configfs\x00', &(0x7f0000000f40)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000001040)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001080)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f0000001100)='dummy_udc.0', 0xb)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r3)

3.943500574s ago: executing program 1 (id=99):
syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0)
preadv2(r0, &(0x7f00000005c0)=[{&(0x7f0000000880)=""/139, 0x8b}], 0x1, 0x86a, 0x0, 0x0)
recvmsg$can_j1939(r0, &(0x7f0000000c80)={&(0x7f0000000a00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a80)=""/115, 0x73}, {&(0x7f0000000b00)=""/52, 0x34}, {&(0x7f0000000b40)=""/115, 0x73}], 0x3, &(0x7f0000000c00)=""/85, 0x55}, 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x48, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x812}, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
r4 = syz_open_dev$usbfs(0x0, 0x80, 0x113201)
read$usbfs(r4, &(0x7f0000000600)=""/234, 0xea)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r5, &(0x7f00000000c0)='1\x00', 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)

3.620559339s ago: executing program 3 (id=100):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
getpid()
r2 = syz_open_dev$usbfs(0x0, 0x80, 0x113201)
read$usbfs(r2, &(0x7f0000000600)=""/234, 0xea)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB="010000000000000000000100000054000180060001000a000007000002001100000014000300000000000000000000000000135400000001060004001f900000070006007272000008000800000000000c0007000000000000000000080009008000"], 0x68}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="9a29ed7569b83f038a1f7bc55fd78b61732746fb05d6f069c5890f8cf79de395fd3b9a0748eae3870c5ce5f8066b5de13f729d4ba34375ee126e11b8ee6d606974c70e400469bd950b6b6d70d5b1d3c15f693b61f336845dfc47dfe5d2cc3d05720b4446c26118fe77af088793ca5a2d638f9d6dc0054baee37994", @ANYRES16, @ANYBLOB="010000000000000000000500000030000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f900000480002801400010000000000000000000000000000000000060002001f900000080003000200000008000400010000000800050000000000080006000000000006000b0002000000"], 0x8c}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x22401, 0x0)
write(r4, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734c0", 0xc8)

3.533329867s ago: executing program 0 (id=101):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]})
r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102)
timer_settime(0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540))
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x0)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x0)
close(r4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)
close(r3)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r5, 0x6, 0x3, &(0x7f0000000040)=0x24, 0x4)
setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000280)=0x1001, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))

2.502677173s ago: executing program 2 (id=102):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x75, &(0x7f0000000000)="1a00000002000000", 0x8)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000100)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x3)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r2, &(0x7f0000000200), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000240)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000280)={0x0, 0xd58c, 0x2000, 0x2, 0x1e2}, 0x0, &(0x7f0000000340), &(0x7f0000000440))
r3 = fsopen(&(0x7f0000000480)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000500)=@nl=@proc, 0x80, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/197, 0xc5}], 0x1, &(0x7f00000006c0)=""/77, 0x4d}, 0x20100)
open(&(0x7f0000000740)='./bus\x00', 0x143142, 0x80)
r5 = openat(r4, &(0x7f0000000780)='./bus\x00', 0x0, 0x10)
r6 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./bus\x00', 0x1c1002, 0x50)
write(r6, &(0x7f0000000800)='t', 0x1)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000840)={0x53, 0xfffffffffffffffb, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x10012, 0x0, 0x0})
sendfile(r6, r5, 0x0, 0x7fffffff)
syz_emit_ethernet(0x106, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000030a01010000f1ffffffffff62649d788004000800140000001100010000080005000000"], 0x3c}}, 0x0)

1.914768077s ago: executing program 0 (id=103):
io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab})
r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x2020)
fsopen(&(0x7f0000000000)='fusectl\x00', 0x0)
r1 = gettid()
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2000000000}, {}, 0x0, 0xffffffff, 0x1}, {{@in6=@mcast1, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x0, 0x0, 0x4}}, 0xe4)
timer_create(0x0, &(0x7f0000000400)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000440)={0x0, 0x0, 0x10001, 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config\x00', 0x1ff)
get_robust_list(r1, &(0x7f0000000500)=&(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={&(0x7f0000000600)}}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x1, 0x2)
fsopen(0x0, 0x1)
openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x2c41, 0x0)
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000740))
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
mount(0x0, &(0x7f0000000800)='./config\x00', &(0x7f0000000840)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
symlinkat(&(0x7f0000000940)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000a00)='\n', 0x1)

1.82542415s ago: executing program 3 (id=104):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x75, &(0x7f0000000000)="1a000000", 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000100)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x3)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r2, &(0x7f0000000200), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000240)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000280)={0x0, 0xd58c, 0x2000, 0x2, 0x1e2}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000440))
r3 = fsopen(&(0x7f0000000480)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
open(&(0x7f0000000740)='./bus\x00', 0x143142, 0x80)
r5 = openat(r4, &(0x7f0000000780)='./bus\x00', 0x0, 0x10)
r6 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./bus\x00', 0x1c1002, 0x50)
write(r6, &(0x7f0000000800)='t', 0x1)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000840)={0x53, 0xfffffffffffffffb, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x10012, 0x0, 0x0})
sendfile(r6, r5, 0x0, 0x7fffffff)
syz_emit_ethernet(0x106, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800451100f8006700000584907864010100ac1414bbc8e81fa33af9a85dccbe277c82d27598706635a8ed36956fbbf665af5c0d12cef0bb4be001e9c1ec65f5548d653902957d50a83377a94b5dbe6390bb38a197281865b7e86e270ac541aafa4bbe7b5e290dea38f4db89662070d85fb0bbc9411a78a4402d3749b417afd1ef1d0705283c6e5be544ab622ba2c36b69a8ab7b8a89e3e3b6bbf3ed21d8a69c70241645af9f28e5e0bdfcfcb9b66d81c1f5042aac99413328f43d7f70215ae7b30004114954edff6db508e885009a7f0273768f97a44ecfd9e6ab3488552280b02176b0b82a4147553719a615e0daf6828d2beefd9d9c26a0d2"], 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000030a01010000f1ffffffffff62649d788004000800140000001100010000080005000000"], 0x3c}}, 0x0)

1.598812525s ago: executing program 2 (id=105):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x75, &(0x7f0000000000)="1a00000002000000", 0x8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000100)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x3)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='veno', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r1, &(0x7f0000000200), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000240)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000280)={0x0, 0xd58c, 0x2000, 0x2, 0x1e2}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000440))
r2 = fsopen(&(0x7f0000000480)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000500)=@nl=@proc, 0x80, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/197, 0xc5}], 0x1, &(0x7f00000006c0)=""/77, 0x4d}, 0x20100)
open(&(0x7f0000000740)='./bus\x00', 0x143142, 0x80)
r4 = openat(r3, &(0x7f0000000780)='./bus\x00', 0x0, 0x10)
write(0xffffffffffffffff, &(0x7f0000000800)='t', 0x1)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000840)={0x53, 0xfffffffffffffffb, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x10012, 0x0, 0x0})
sendfile(0xffffffffffffffff, r4, 0x0, 0x7fffffff)

1.238176406s ago: executing program 1 (id=106):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x75, &(0x7f0000000000)="1a00000002000000", 0x8)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000100)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x3)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r2, &(0x7f0000000200), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000240)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000280)={0x0, 0xd58c, 0x2000, 0x2, 0x1e2}, &(0x7f0000000300), 0x0, &(0x7f0000000440))
r3 = fsopen(&(0x7f0000000480)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000500)=@nl=@proc, 0x80, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/197, 0xc5}], 0x1, &(0x7f00000006c0)=""/77, 0x4d}, 0x20100)
open(&(0x7f0000000740)='./bus\x00', 0x143142, 0x80)
r5 = openat(r4, &(0x7f0000000780)='./bus\x00', 0x0, 0x10)
r6 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./bus\x00', 0x1c1002, 0x50)
write(r6, &(0x7f0000000800)='t', 0x1)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000840)={0x53, 0xfffffffffffffffb, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x10012, 0x0, 0x0})
sendfile(r6, r5, 0x0, 0x7fffffff)
syz_emit_ethernet(0x106, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000030a01010000f1ffffffffff62649d788004000800140000001100010000080005000000"], 0x3c}}, 0x0)

970.102544ms ago: executing program 0 (id=107):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]})
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x3, 0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002", @ANYRES16=r0], 0x0)
ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x4, 0x208002)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000800000043000e007f00000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r1}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0xffffffffffffffff, 0x2000403, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x2000000000000000}, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x8001, 0x30, 0x80000000, 0x53b}, &(0x7f0000000280)=0x18)
shmat(r4, &(0x7f0000ffb000/0x3000)=nil, 0x7000)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000000)={0x6, 'veth1_vlan\x00', {}, 0xdd3c})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x154, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0xd, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x128, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x10, 0x7d, 0x8, 0xe, 0x8}}, @TCA_RED_STAB={0x104}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}]}, 0x154}}, 0x0)
ioctl$NILFS_IOCTL_RESIZE(r2, 0x40086e8b, 0x0)

829.196086ms ago: executing program 3 (id=108):
syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0)
preadv2(r0, &(0x7f00000005c0)=[{&(0x7f0000000880)=""/139, 0x8b}], 0x1, 0x86a, 0x0, 0x0)
recvmsg$can_j1939(r0, &(0x7f0000000c80)={&(0x7f0000000a00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a80)=""/115, 0x73}, {&(0x7f0000000b00)=""/52, 0x34}, {&(0x7f0000000b40)=""/115, 0x73}], 0x3, &(0x7f0000000c00)=""/85, 0x55}, 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x48, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x812}, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
r4 = syz_open_dev$usbfs(0x0, 0x80, 0x113201)
read$usbfs(r4, &(0x7f0000000600)=""/234, 0xea)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r5, &(0x7f00000000c0)='1\x00', 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)

616.143484ms ago: executing program 2 (id=109):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f00000001c0)='GPL\x00', 0x6, 0xac, &(0x7f0000000200)=""/172, 0x41000, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newlink={0x48, 0x10, 0x1, 0x71bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0xe0f}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfeffff7f, 0xe61e}}]}]}]}, 0x48}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084)
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42400, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=@newtfilter={0x450, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x420, 0x2, [@TCA_FLOW_POLICE={0x414, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa66, 0x100, 0x7, 0x1, 0xc0, 0x9, 0xff, 0xd5, 0xffff, 0x4, 0x3, 0x0, 0x6e1d, 0x1, 0x0, 0x0, 0x4, 0x6, 0x1, 0x9, 0x2, 0x7, 0x7, 0x2, 0x6, 0x1000, 0x0, 0x0, 0x758, 0x7, 0x1, 0xfff, 0x7, 0x40, 0x4, 0x4deb, 0x8, 0x3, 0x1, 0x5, 0x2, 0x3, 0x3ff, 0x2, 0x2, 0xfffffffd, 0x7fffffff, 0x9, 0x7ff, 0x6, 0x2, 0x1, 0x81, 0x4ed8, 0xcce5, 0x1, 0xd, 0x8, 0x0, 0x8004, 0x4, 0x1, 0x7ff, 0xfffffffa, 0x401, 0x72, 0x6, 0xa, 0x7, 0x5, 0xe, 0x615394f1, 0x8, 0x4, 0x3, 0x6f86c9de, 0x4, 0x3, 0x80, 0x1, 0x359f, 0x9, 0x101, 0x4, 0x9, 0x2, 0x5, 0x5, 0x3, 0xfff, 0x9, 0x0, 0x1, 0x1, 0x0, 0x800, 0x4, 0xf00, 0x2, 0x1, 0xaf94, 0xac8, 0x9, 0x7, 0x9, 0x1, 0x80000000, 0xa, 0x2, 0x2, 0x1, 0x8, 0x7, 0x7, 0x8, 0x6, 0xa, 0x8, 0x0, 0xce, 0x66d, 0xb6, 0x4, 0xe2c, 0x200, 0x4, 0x1ff, 0x2, 0x8000, 0x4, 0x7a, 0x5, 0x9, 0x1c43, 0x2, 0x5, 0x3, 0x10, 0x38de3997, 0x16, 0x6, 0x34, 0xf, 0x2, 0x3ff, 0x400, 0xb6, 0x0, 0xc, 0xfff, 0x1, 0x2, 0x0, 0xf, 0x3ff, 0x5ad, 0xdd, 0x80, 0xffff, 0x6, 0x5380, 0xfffffffc, 0x0, 0x9, 0x8, 0xf6, 0xc, 0xff, 0xffffff4d, 0x4, 0xfffffe01, 0xd1b3, 0x7ff, 0xffffaadf, 0x9, 0x9b, 0xa312, 0x5, 0x7, 0x7f, 0x0, 0x9, 0x3, 0x1, 0x3, 0x0, 0xff, 0x8, 0x9, 0x2, 0x401000, 0x9, 0x0, 0x7, 0xb851, 0x8af, 0x8, 0x1, 0x6, 0x2, 0x2, 0x5, 0x6, 0x1, 0x4, 0x8, 0x3, 0x1a00000, 0x0, 0x0, 0x100, 0x6, 0x9, 0xf, 0x9, 0x7, 0xea42dce5, 0x3ff, 0x401, 0x80000000, 0x2, 0x6, 0x7, 0x7, 0x3, 0x1369e7d4, 0x5, 0x2, 0x3, 0x1000, 0x0, 0xb53, 0x80, 0x4, 0x100, 0x7, 0x6, 0x7ed6, 0x590d, 0x3, 0x1, 0xe1, 0x8, 0xff, 0x3, 0xfffffffa, 0x2, 0x6, 0x5, 0x414, 0x11a, 0x7, 0xe21, 0x1, 0x7, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe950}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8017bfe}]}}]}, 0x450}, 0x1, 0x0, 0x0, 0x4894}, 0x42)

428.576885ms ago: executing program 2 (id=110):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f00000001c0)='GPL\x00', 0x6, 0xac, &(0x7f0000000200)=""/172, 0x41000, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newlink={0x48, 0x10, 0x1, 0x71bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0xe0f}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfeffff7f, 0xe61e}}]}]}]}, 0x48}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084)
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42400, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=@newtfilter={0x450, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x420, 0x2, [@TCA_FLOW_POLICE={0x414, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa66, 0x100, 0x7, 0x1, 0xc0, 0x9, 0xff, 0xd5, 0xffff, 0x4, 0x3, 0x0, 0x6e1d, 0x1, 0x0, 0x0, 0x4, 0x6, 0x1, 0x9, 0x2, 0x7, 0x7, 0x2, 0x6, 0x1000, 0x0, 0x0, 0x758, 0x7, 0x1, 0xfff, 0x7, 0x40, 0x4, 0x4deb, 0x8, 0x3, 0x1, 0x5, 0x2, 0x3, 0x3ff, 0x2, 0x2, 0xfffffffd, 0x7fffffff, 0x9, 0x7ff, 0x6, 0x2, 0x1, 0x81, 0x4ed8, 0xcce5, 0x1, 0xd, 0x8, 0x0, 0x8004, 0x4, 0x1, 0x7ff, 0xfffffffa, 0x401, 0x72, 0x6, 0xa, 0x7, 0x5, 0xe, 0x615394f1, 0x8, 0x4, 0x3, 0x6f86c9de, 0x4, 0x3, 0x80, 0x1, 0x359f, 0x9, 0x101, 0x4, 0x9, 0x2, 0x5, 0x5, 0x3, 0xfff, 0x9, 0x0, 0x1, 0x1, 0x0, 0x800, 0x4, 0xf00, 0x2, 0x1, 0xaf94, 0xac8, 0x9, 0x7, 0x9, 0x1, 0x80000000, 0xa, 0x2, 0x2, 0x1, 0x8, 0x7, 0x7, 0x8, 0x6, 0xa, 0x8, 0x0, 0xce, 0x66d, 0xb6, 0x4, 0xe2c, 0x200, 0x4, 0x1ff, 0x2, 0x8000, 0x4, 0x7a, 0x5, 0x9, 0x1c43, 0x2, 0x5, 0x3, 0x10, 0x38de3997, 0x16, 0x6, 0x34, 0xf, 0x2, 0x3ff, 0x400, 0xb6, 0x0, 0xc, 0xfff, 0x1, 0x2, 0x0, 0xf, 0x3ff, 0x5ad, 0xdd, 0x80, 0xffff, 0x6, 0x5380, 0xfffffffc, 0x0, 0x9, 0x8, 0xf6, 0xc, 0xff, 0xffffff4d, 0x4, 0xfffffe01, 0xd1b3, 0x7ff, 0xffffaadf, 0x9, 0x9b, 0xa312, 0x5, 0x7, 0x7f, 0x0, 0x9, 0x3, 0x1, 0x3, 0x0, 0xff, 0x8, 0x9, 0x2, 0x401000, 0x9, 0x0, 0x7, 0xb851, 0x8af, 0x8, 0x1, 0x6, 0x2, 0x2, 0x5, 0x6, 0x1, 0x4, 0x8, 0x3, 0x1a00000, 0x0, 0x0, 0x100, 0x6, 0x9, 0xf, 0x9, 0x7, 0xea42dce5, 0x3ff, 0x401, 0x80000000, 0x2, 0x6, 0x7, 0x7, 0x3, 0x1369e7d4, 0x5, 0x2, 0x3, 0x1000, 0x0, 0xb53, 0x80, 0x4, 0x100, 0x7, 0x6, 0x7ed6, 0x590d, 0x3, 0x1, 0xe1, 0x8, 0xff, 0x3, 0xfffffffa, 0x2, 0x6, 0x5, 0x414, 0x11a, 0x7, 0xe21, 0x1, 0x7, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe950}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8017bfe}]}}]}, 0x450}, 0x1, 0x0, 0x0, 0x4894}, 0x42)

191.1687ms ago: executing program 1 (id=111):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x75, &(0x7f0000000000)="1a00000002000000", 0x8)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000100)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x3)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r2, &(0x7f0000000200), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000240)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000280)={0x0, 0xd58c, 0x2000, 0x2, 0x1e2}, &(0x7f0000000300), 0x0, &(0x7f0000000440))
r3 = fsopen(&(0x7f0000000480)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000500)=@nl=@proc, 0x80, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/197, 0xc5}], 0x1, &(0x7f00000006c0)=""/77, 0x4d}, 0x20100)
open(&(0x7f0000000740)='./bus\x00', 0x143142, 0x80)
r5 = openat(r4, &(0x7f0000000780)='./bus\x00', 0x0, 0x10)
r6 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./bus\x00', 0x1c1002, 0x50)
write(r6, &(0x7f0000000800)='t', 0x1)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000840)={0x53, 0xfffffffffffffffb, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x10012, 0x0, 0x0})
sendfile(r6, r5, 0x0, 0x7fffffff)
syz_emit_ethernet(0x106, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000030a01010000f1ffffffffff62649d788004000800140000001100010000080005000000"], 0x3c}}, 0x0)

158.895167ms ago: executing program 2 (id=112):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0x63d, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000640), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r1 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil)
shmctl$IPC_RMID(r1, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000040), 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x5)
r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000840), &(0x7f00000009c0)=0x6e, 0x80000)
recvmsg$unix(r4, &(0x7f0000000a00)={&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/6, 0x6}, {&(0x7f0000000b40)=""/30, 0x1e}, {&(0x7f0000000b80)=""/151, 0x97}], 0x3, &(0x7f0000000c40)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x3c}, 0x200)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000c80), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000cc0)=0x2)
readlink(&(0x7f0000000d00)='./config/usb_gadget/g1/UDC\x00', &(0x7f0000000d40)=""/130, 0x82)
listen(0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000e00), 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mount(0x0, &(0x7f0000000e40)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', &(0x7f0000000e80)='configfs\x00', 0x2208800, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./my_configfs\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000001040)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001080)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f0000001100)='dummy_udc.0', 0xb)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r3)

0s ago: executing program 2 (id=113):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
getpid()
r2 = syz_open_dev$usbfs(0x0, 0x80, 0x113201)
read$usbfs(r2, &(0x7f0000000600)=""/234, 0xea)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB="010000000000000000000100000054000180060001000a000007000002001100000014000300000000000000000000000000135400000001060004001f900000070006007272000008000800000000000c0007000000000000000000080009008000"], 0x68}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="9a29ed7569b83f038a1f7bc55fd78b61732746fb05d6f069c5890f8cf79de395fd3b9a0748eae3870c5ce5f8066b5de13f729d4ba34375ee126e11b8ee6d606974c70e400469bd950b6b6d70d5b1d3c15f693b61f336845dfc47dfe5d2cc3d05720b4446c26118fe77af088793ca5a2d638f9d6dc0054baee37994", @ANYRES16, @ANYBLOB="010000000000000000000500000030000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f900000480002801400010000000000000000000000000000000000060002001f900000080003000200000008000400010000000800050000000000080006000000000006000b0002000000"], 0x8c}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x22401, 0x0)
write(r4, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734c0", 0xc8)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:44024' (ED25519) to the list of known hosts.
[   32.249505][ T5706] cgroup: Unknown subsys name 'net'
[   32.416036][ T5706] cgroup: Unknown subsys name 'cpuset'
[   32.421776][ T5706] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   33.299373][ T5706] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   37.937372][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   37.938479][ T5150] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   37.944093][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   37.945043][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   37.945572][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   37.946601][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   37.946702][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   37.948134][ T5150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   37.948613][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   37.949294][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   37.949915][ T5150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   37.950520][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   37.951823][   T67] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   37.972042][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   37.972641][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   37.974566][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   37.976086][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   37.976518][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   37.977898][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   37.979847][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   38.167497][ T5799] rxe_eth0 speed is unknown, defaulting to 1000
[   38.170798][ T5799] rxe_eth0 speed is unknown, defaulting to 1000
[   38.174262][ T5799] rxe_eth0 speed is unknown, defaulting to 1000
[   38.220065][ T5791] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   38.241203][ T5790] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   38.267948][ T5799] infiniband rxe0: set active
[   38.270864][ T5799] infiniband rxe0: added rxe_eth0
[   38.278670][   T34] rxe_eth0 speed is unknown, defaulting to 1000
[   38.281055][ T5804] rxe0: rxe_newlink: already configured on rxe_eth0
[   38.286312][ T5799] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   38.286331][ T5799] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   38.286351][ T5799] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   38.287566][ T5790] rxe_eth0 speed is unknown, defaulting to 1000
[   38.302520][ T5799] RDS/IB: rxe0: added
[   38.302631][ T5799] smc: adding ib device rxe0 with port count 1
[   38.302663][ T5799] smc:    ib device rxe0 port 1 has no pnetid
[   38.314017][ T2411] rxe_eth0 speed is unknown, defaulting to 1000
[   38.413651][ T5799] rxe_eth0 speed is unknown, defaulting to 1000
[   38.478734][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.478782][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.478956][ T5791] bridge_slave_0: entered allmulticast mode
[   38.481467][ T5791] bridge_slave_0: entered promiscuous mode
[   38.484592][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.484633][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.484690][ T5791] bridge_slave_1: entered allmulticast mode
[   38.485484][ T5791] bridge_slave_1: entered promiscuous mode
[   38.513708][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.522495][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.528484][ T5799] rxe_eth0 speed is unknown, defaulting to 1000
[   38.546469][ T5791] team0: Port device team_slave_0 added
[   38.548024][ T5791] team0: Port device team_slave_1 added
[   38.561758][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.561768][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.561780][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.564429][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.564437][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.564448][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.594544][ T5791] hsr_slave_0: entered promiscuous mode
[   38.595064][ T5791] hsr_slave_1: entered promiscuous mode
[   38.735625][ T5799] rxe_eth0 speed is unknown, defaulting to 1000
[   38.783674][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.783749][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.783832][ T5790] bridge_slave_0: entered allmulticast mode
[   38.784554][ T5790] bridge_slave_0: entered promiscuous mode
[   38.793426][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.793497][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.793554][ T5790] bridge_slave_1: entered allmulticast mode
[   38.794239][ T5790] bridge_slave_1: entered promiscuous mode
[   38.818109][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.823878][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.838502][ T5790] team0: Port device team_slave_0 added
[   38.854225][ T5790] team0: Port device team_slave_1 added
[   38.882582][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.882594][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.882605][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.886778][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.886786][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.886797][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.958793][ T5790] hsr_slave_0: entered promiscuous mode
[   38.959501][ T5790] hsr_slave_1: entered promiscuous mode
[   38.960170][ T5790] debugfs: 'hsr0' already exists in 'hsr'
[   38.960179][ T5790] Cannot create hsr debugfs directory
[   38.970313][ T5791] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   38.976830][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   38.989060][ T5791] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   38.993705][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   38.994373][ T5791] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   38.997876][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.013941][ T5791] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   39.016835][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.137864][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.137964][ T5791] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.138404][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.138495][ T5791] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.211559][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.211642][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.211744][ T5804] bridge_slave_0: entered allmulticast mode
[   39.213941][ T5804] bridge_slave_0: entered promiscuous mode
[   39.216060][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.216185][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.216275][ T5804] bridge_slave_1: entered allmulticast mode
[   39.217382][ T5804] bridge_slave_1: entered promiscuous mode
[   39.281217][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   39.307999][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   39.345568][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.345692][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.345814][ T5799] bridge_slave_0: entered allmulticast mode
[   39.347016][ T5799] bridge_slave_0: entered promiscuous mode
[   39.361768][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   39.366329][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.367165][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.367230][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.367320][ T5799] bridge_slave_1: entered allmulticast mode
[   39.367964][ T5799] bridge_slave_1: entered promiscuous mode
[   39.368451][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   39.372679][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.376178][ T5804] team0: Port device team_slave_0 added
[   39.378056][ T5804] team0: Port device team_slave_1 added
[   39.390738][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   39.393598][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.402556][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   39.405338][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   39.408463][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.415724][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.415733][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.415745][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.417236][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   39.439145][   T85] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.440552][   T85] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.458734][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.458749][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.458767][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.463508][ T5799] team0: Port device team_slave_0 added
[   39.465428][ T5799] team0: Port device team_slave_1 added
[   39.500804][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.500814][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.500826][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.517543][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.517553][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.517565][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.523990][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.530973][ T5804] hsr_slave_0: entered promiscuous mode
[   39.531817][ T5804] hsr_slave_1: entered promiscuous mode
[   39.532435][ T5804] debugfs: 'hsr0' already exists in 'hsr'
[   39.532448][ T5804] Cannot create hsr debugfs directory
[   39.598261][ T5799] hsr_slave_0: entered promiscuous mode
[   39.599047][ T5799] hsr_slave_1: entered promiscuous mode
[   39.599632][ T5799] debugfs: 'hsr0' already exists in 'hsr'
[   39.599645][ T5799] Cannot create hsr debugfs directory
[   39.631256][ T5791] 8021q: adding VLAN 0 to HW filter on device team0
[   39.708772][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.708858][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.713449][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.713493][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.832419][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.848768][ T5804] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   39.851704][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.858404][ T5804] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   39.862867][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.864722][ T5804] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   39.870936][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.872570][ T5804] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   39.876271][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.881234][ T5790] 8021q: adding VLAN 0 to HW filter on device team0
[   39.912358][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.912450][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.927942][ T5799] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   39.931134][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.940021][   T85] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.940108][   T85] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.941531][ T5799] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   39.947811][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.948259][ T5799] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   39.952737][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.969952][ T5799] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   39.972542][ T5800] Bluetooth: hci1: command tx timeout
[   39.973703][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   40.052390][ T5800] Bluetooth: hci3: command tx timeout
[   40.052434][ T5794] Bluetooth: hci0: command tx timeout
[   40.052630][ T5803] Bluetooth: hci2: command tx timeout
[   40.077553][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.094778][ T5804] 8021q: adding VLAN 0 to HW filter on device team0
[   40.098790][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.098843][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.106831][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.109399][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.109444][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.122149][ T5799] 8021q: adding VLAN 0 to HW filter on device team0
[   40.136546][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.136592][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.146440][ T5804] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   40.146533][ T5804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   40.155520][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.155600][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.197070][ T5799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   40.205210][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.229775][ T5791] veth0_vlan: entered promiscuous mode
[   40.238772][ T5791] veth1_vlan: entered promiscuous mode
[   40.257039][ T5791] veth0_macvtap: entered promiscuous mode
[   40.260843][ T5791] veth1_macvtap: entered promiscuous mode
[   40.283640][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.287029][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.316102][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.316618][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.342933][ T5643] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.343075][ T5643] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.372349][  T112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.372361][  T112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.395095][  T112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.395109][  T112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.419810][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.446771][ T5790] veth0_vlan: entered promiscuous mode
[   40.458321][ T5790] veth1_vlan: entered promiscuous mode
[   40.474618][ T5791] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   40.476040][ T5790] veth0_macvtap: entered promiscuous mode
[   40.478054][ T5791] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.478271][ T5790] veth1_macvtap: entered promiscuous mode
[   40.480685][ T5791] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.481360][ T5791] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.498935][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.504264][ T5791] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.516810][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.522505][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.554404][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.626873][ T5799] veth0_vlan: entered promiscuous mode
[   40.640662][ T5804] veth0_vlan: entered promiscuous mode
[   40.647549][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.647566][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.659156][ T5799] veth1_vlan: entered promiscuous mode
[   40.665904][ T5804] veth1_vlan: entered promiscuous mode
[   40.676294][  T112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.676306][  T112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.707256][ T5804] veth0_macvtap: entered promiscuous mode
[   40.717144][ T5804] veth1_macvtap: entered promiscuous mode
[   40.724461][ T5799] veth0_macvtap: entered promiscuous mode
[   40.730607][ T5799] veth1_macvtap: entered promiscuous mode
[   40.733681][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.746210][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.746794][   T42] audit: type=1804 audit(1793690141.718:2): pid=5950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2" name="bus" dev="ramfs" ino=9722 res=1 errno=0
[   40.746833][   T42] audit: type=1804 audit(1793690141.718:3): pid=5950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2" name="bus" dev="ramfs" ino=9722 res=1 errno=0
[   40.765400][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.773713][ T5887] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.773940][ T5887] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.773972][ T5887] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.774001][ T5887] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.791755][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.792080][ T5887] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.792145][ T5887] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.792177][ T5887] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.792206][ T5887] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.843453][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.843466][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.892756][ T5643] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.896594][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.896611][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.936810][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.936829][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.944278][ T5887] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.945275][ T5887] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.995008][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.995028][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.042388][ T5887] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.633173][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'.
[   41.638468][   T42] audit: type=1804 audit(1793690142.608:4): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5" name="bus" dev="ramfs" ino=8050 res=1 errno=0
[   41.639038][   T42] audit: type=1804 audit(1793690142.608:5): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5" name="bus" dev="ramfs" ino=8050 res=1 errno=0
[   41.671964][ T5583] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   41.700248][ T5976] Zero length message leads to an empty skb
[   41.858342][ T5583] usb 5-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.04
[   41.880901][ T5583] usb 5-1: Dual-Role OTG device on HNP port
[   41.882722][ T5583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   41.916875][ T5978] Console: switching to colour dummy device 80x25
[   42.023716][ T5583] gspca_main: spca501-2.14.0 probing 0000:0000
[   42.024771][ T5583] gspca_spca501: reg write: error -32
[   42.028952][ T5583] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05
[   42.029130][ T5583] spca501 5-1:1.0: probe with driver spca501 failed with error -22
[   42.053839][ T5803] Bluetooth: hci1: command tx timeout
[   42.132362][ T5803] Bluetooth: hci0: command tx timeout
[   42.132376][ T5794] Bluetooth: hci2: command tx timeout
[   42.142291][ T5803] Bluetooth: hci3: command tx timeout
[   43.164685][ T5985] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   43.433510][ T5985] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref]
[   43.433819][ T5985] pci 0000:00:01.0: BAR 2 [mem 0xfeaf6000-0xfeaf6fff]
[   43.434302][ T5985] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   43.437672][ T5985] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   43.621005][ T5985] pci 0000:00:01.0: Adding to iommu group 1
[   43.649584][ T5985] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   43.649598][ T5985] pci 0000:00:01.0: vgaarb: bridge control possible
[   43.649605][ T5985] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   43.675035][ T5985] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   43.689461][ T5985] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   43.697413][ T5985] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   43.709209][ T5985] [drm] Found bochs VGA, ID 0xb0c5.
[   43.709218][ T5985] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   43.710829][ T5985] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4
[   44.144066][ T5803] Bluetooth: hci1: command tx timeout
[   44.212202][ T5794] Bluetooth: hci0: command tx timeout
[   44.213657][ T5794] Bluetooth: hci3: command tx timeout
[   44.214096][ T5803] Bluetooth: hci2: command tx timeout
[   44.352869][ T5990] nvme nvme0: failed to connect socket: -111
[   44.441779][ T6002] tmpfs: Cannot change global quota limit on remount
[   44.609341][ T6000] all (unregistering): Released all slaves
[   44.721272][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'.
[   44.728350][   T42] audit: type=1326 audit(1793690145.698:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.1.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000
[   44.728551][   T42] audit: type=1326 audit(1793690145.698:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.1.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000
[   44.731134][   T42] audit: type=1326 audit(1793690145.698:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.1.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000
[   44.731159][   T42] audit: type=1326 audit(1793690145.698:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.1.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000
[   44.731201][   T42] audit: type=1326 audit(1793690145.698:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.1.12" exe="/syz-executor" sig=0 arch=40000003 syscall=304 compat=1 ip=0xf745efbc code=0x7ffc0000
[   44.732287][   T42] audit: type=1326 audit(1793690145.708:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.1.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000
[   44.840255][ T6005] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   44.840271][ T6005] batman_adv: batadv0: Removing interface: batadv_slave_0
[   44.841636][ T6005] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   44.841646][ T6005] batman_adv: batadv0: Removing interface: batadv_slave_1
[   46.241942][ T5794] Bluetooth: hci1: command tx timeout
[   46.292581][ T5803] Bluetooth: hci2: command tx timeout
[   46.292605][ T5803] Bluetooth: hci0: command tx timeout
[   46.292648][ T5794] Bluetooth: hci3: command tx timeout
[   46.318601][   T42] kauditd_printk_skb: 185 callbacks suppressed
[   46.318613][   T42] audit: type=1804 audit(1793690147.288:197): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.17" name="bus" dev="ramfs" ino=10691 res=1 errno=0
[   46.321794][   T42] audit: type=1804 audit(1793690147.288:198): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.17" name="bus" dev="ramfs" ino=10691 res=1 errno=0
[   46.743715][ T6030] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   46.759341][ T6030] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[   46.759572][ T6030] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[   46.759952][ T6030] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   46.770364][ T6030] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   46.784160][ T6030] pci 0000:00:01.0: Adding to iommu group 1
[   46.788769][ T6030] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   46.788787][ T6030] pci 0000:00:01.0: vgaarb: bridge control possible
[   46.788799][ T6030] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   46.805528][ T6030] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   46.806007][ T6030] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   46.809895][ T6030] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   46.829169][ T6030] [drm] Found bochs VGA, ID 0xb0c5.
[   46.829188][ T6030] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   46.963350][ T6030] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[   47.171818][ T6030] Console: switching to colour frame buffer device 160x50
[   47.205128][ T6030] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[   47.329954][ T6034] Console: switching to colour dummy device 80x25
[   47.668279][   T42] audit: type=1804 audit(1793690148.638:199): pid=6038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.21" name="bus" dev="ramfs" ino=8628 res=1 errno=0
[   47.669177][   T42] audit: type=1804 audit(1793690148.638:200): pid=6038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.21" name="bus" dev="ramfs" ino=8628 res=1 errno=0
[   47.859829][ T6041] FAULT_INJECTION: forcing a failure.
[   47.859829][ T6041] name failslab, interval 1, probability 0, space 0, times 1
[   47.859868][ T6041] CPU: 3 UID: 0 PID: 6041 Comm: syz.1.22 Not tainted syzkaller #0 PREEMPT(full) 
[   47.859889][ T6041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   47.859899][ T6041] Call Trace:
[   47.859906][ T6041]  <TASK>
[   47.859929][ T6041]  dump_stack_lvl+0x100/0x190
[   47.860035][ T6041]  should_fail_ex.cold+0x5/0xa
[   47.860061][ T6041]  should_failslab+0xc2/0x120
[   47.860126][ T6041]  __kmalloc_cache_noprof+0x91/0x6d0
[   47.860153][ T6041]  ? cdev_alloc+0x3c/0xd0
[   47.860180][ T6041]  cdev_alloc+0x3c/0xd0
[   47.860199][ T6041]  tty_cdev_add+0x4a/0x300
[   47.860263][ T6041]  tty_register_device_attr+0x48e/0x810
[   47.860289][ T6041]  ? lockdep_init_map_type+0x5c/0x250
[   47.860311][ T6041]  ? __pfx_tty_register_device_attr+0x10/0x10
[   47.860340][ T6041]  ? tty_port_init+0x156/0x1c0
[   47.860368][ T6041]  gsm_activate_mux+0x155/0x2a0
[   47.860394][ T6041]  gsmld_ioctl+0x346/0x15c0
[   47.860423][ T6041]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   47.860446][ T6041]  ? __pfx_gsmld_ioctl+0x10/0x10
[   47.860490][ T6041]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   47.860515][ T6041]  ? __pfx_gsmld_ioctl+0x10/0x10
[   47.860540][ T6041]  tty_compat_ioctl+0x396/0x420
[   47.860563][ T6041]  ? __pfx_tty_compat_ioctl+0x10/0x10
[   47.860585][ T6041]  __ia32_compat_sys_ioctl+0x2cf/0x360
[   47.860616][ T6041]  __do_fast_syscall_32+0x14b/0x8c0
[   47.860715][ T6041]  do_fast_syscall_32+0x32/0x70
[   47.860740][ T6041]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   47.860763][ T6041] RIP: 0023:0xf745efbc
[   47.860778][ T6041] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   47.860796][ T6041] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[   47.860825][ T6041] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000040204706
[   47.860837][ T6041] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000
[   47.860849][ T6041] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   47.860860][ T6041] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   47.860871][ T6041] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   47.860897][ T6041]  </TASK>
[   48.058919][   T42] audit: type=1804 audit(1793690149.028:201): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.23" name="bus" dev="ramfs" ino=8650 res=1 errno=0
[   48.061978][   T42] audit: type=1804 audit(1793690149.028:202): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.23" name="bus" dev="ramfs" ino=8650 res=1 errno=0
[   48.774471][ T2411] rxe_eth0 speed is unknown, defaulting to 1000
[   51.262842][ T6086] batman_adv: batadv0: Adding interface: dummy0
[   51.262893][ T6086] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   51.262952][ T6086] batman_adv: batadv0: Interface activated: dummy0
[   51.866879][ T6090] Set syz0 is full, maxelem 0 reached
[   51.889016][ T6089] batadv0: mtu less than device minimum
[   51.889532][ T6089] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   51.890070][ T6089] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   51.890559][ T6089] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   51.891085][ T6089] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   51.891597][ T6089] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   51.892211][ T6089] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   51.892700][ T6089] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   51.893181][ T6089] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   52.075300][ T6092] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   52.180998][   T42] audit: type=1804 audit(1793690153.148:203): pid=6098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.31" name="bus" dev="ramfs" ino=8149 res=1 errno=0
[   52.190699][   T42] audit: type=1804 audit(1793690153.158:204): pid=6098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.31" name="bus" dev="ramfs" ino=8149 res=1 errno=0
[   52.613220][ T6104] Invalid ELF header magic: != ELF
[   52.803007][ T6099] md: serialize_policy is only effective for raid1
[   52.841936][ T6103] md: serialize_policy is only effective for raid1
[   53.042256][   T42] audit: type=1804 audit(1793690154.008:205): pid=6110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.33" name="bus" dev="ramfs" ino=8156 res=1 errno=0
[   53.046528][   T42] audit: type=1804 audit(1793690154.018:206): pid=6110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.33" name="bus" dev="ramfs" ino=8156 res=1 errno=0
[   53.111895][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   53.192537][   T42] audit: type=1804 audit(1793690154.168:207): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.34" name="bus" dev="ramfs" ino=10733 res=1 errno=0
[   53.193241][   T42] audit: type=1804 audit(1793690154.168:208): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.34" name="bus" dev="ramfs" ino=10733 res=1 errno=0
[   53.388696][ T6117] netlink: 28 bytes leftover after parsing attributes in process `syz.0.35'.
[   53.893297][ T6131] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   53.915348][ T6131] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[   53.915628][ T6131] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[   53.915940][ T6131] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   53.918568][ T6131] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   53.988035][ T6131] pci 0000:00:01.0: Adding to iommu group 1
[   54.034018][ T6131] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   54.034041][ T6131] pci 0000:00:01.0: vgaarb: bridge control possible
[   54.034048][ T6131] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   54.047552][ T6131] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   54.048089][ T6131] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   54.056209][ T6131] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   54.144029][ T6131] [drm] Found bochs VGA, ID 0xb0c5.
[   54.144661][ T6131] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   54.337030][ T6131] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[   54.996551][ T6131] Console: switching to colour frame buffer device 160x50
[   55.052420][ T6131] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[   55.344943][ T6146] pim6reg: entered allmulticast mode
[   55.975685][ T6148] pim6reg: left allmulticast mode
[   56.258011][ T6156] bridge0: port 3(syz_tun) entered blocking state
[   56.258221][ T6156] bridge0: port 3(syz_tun) entered disabled state
[   56.258371][ T6156] syz_tun: entered allmulticast mode
[   56.259602][ T6156] syz_tun: entered promiscuous mode
[   56.260034][ T6156] bridge0: port 3(syz_tun) entered blocking state
[   56.260083][ T6156] bridge0: port 3(syz_tun) entered forwarding state
[   56.365592][ T6158] Console: switching to colour dummy device 80x25
[   56.705010][   T42] audit: type=1804 audit(1793690157.678:209): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.44" name="bus" dev="ramfs" ino=10071 res=1 errno=0
[   56.705662][   T42] audit: type=1804 audit(1793690157.678:210): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.44" name="bus" dev="ramfs" ino=10071 res=1 errno=0
[   56.872013][  T859] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   57.021922][  T859] usb 7-1: Using ep0 maxpacket: 16
[   57.025141][  T859] usb 7-1: unable to get BOS descriptor or descriptor too short
[   57.025182][  T859] usb 7-1: New USB device found: idVendor=0d8c, idProduct=0201, bcdDevice=0.40
[   57.026118][  T859] usb 7-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config
[   57.026167][  T859] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7
[   57.052449][  T859] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.052462][  T859] usb 7-1: Product: syz
[   57.052469][  T859] usb 7-1: Manufacturer: syz
[   57.052476][  T859] usb 7-1: SerialNumber: syz
[   58.281171][ T6178] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   58.298428][ T6178] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[   58.299429][ T6178] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[   58.300014][ T6178] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   58.304945][ T6178] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   58.342838][ T6178] pci 0000:00:01.0: Adding to iommu group 1
[   58.389443][ T6178] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   58.389456][ T6178] pci 0000:00:01.0: vgaarb: bridge control possible
[   58.389463][ T6178] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   58.415335][ T6178] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   58.415775][ T6178] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   58.429419][ T6178] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   58.500241][ T6178] [drm] Found bochs VGA, ID 0xb0c5.
[   58.500254][ T6178] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   58.720823][ T6178] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[   59.114349][  T859] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   59.163356][ T6178] Console: switching to colour frame buffer device 160x50
[   59.229737][  T859] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   59.232862][ T6178] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[   59.258517][  T859] usb 7-1: USB disconnect, device number 2
[   59.345351][ T6095] udevd[6095]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[   59.364706][ T6189] net_ratelimit: 11 callbacks suppressed
[   59.364733][ T6189] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.449545][   T42] audit: type=1804 audit(1793690160.418:211): pid=6192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.52" name="bus" dev="ramfs" ino=11276 res=1 errno=0
[   59.449577][   T42] audit: type=1804 audit(1793690160.418:212): pid=6192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.52" name="bus" dev="ramfs" ino=11276 res=1 errno=0
[   59.528409][ T6191] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[   60.212258][ T6201] batman_adv: batadv0: Adding interface: syz_tun
[   60.212276][ T6201] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.212290][ T6201] batman_adv: batadv0: Interface activated: syz_tun
[   60.374218][   T42] audit: type=1804 audit(1793690161.348:213): pid=6208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.56" name="bus" dev="ramfs" ino=8833 res=1 errno=0
[   60.374563][   T42] audit: type=1804 audit(1793690161.348:214): pid=6208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.56" name="bus" dev="ramfs" ino=8833 res=1 errno=0
[   60.628192][ T6214] pim6reg: entered allmulticast mode
[   60.708761][ T6217] pim6reg: left allmulticast mode
[   61.880409][ T6231] syz.1.64 uses obsolete (PF_INET,SOCK_PACKET)
[   62.153578][   T42] audit: type=1804 audit(1793690163.128:215): pid=6250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.67" name="bus" dev="ramfs" ino=11380 res=1 errno=0
[   62.154104][   T42] audit: type=1804 audit(1793690163.128:216): pid=6250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.67" name="bus" dev="ramfs" ino=11380 res=1 errno=0
[   62.235038][ T6245] Console: switching to colour dummy device 80x25
[   62.972187][ T6281] trusted_key: encrypted_key: insufficient parameters specified
[   62.973493][ T6281] trusted_key: encrypted_key: insufficient parameters specified
[   63.278512][  T859] hid-generic 0005:15C2:8000.0002: unknown main item tag 0x4
[   63.278668][  T859] hid-generic 0005:15C2:8000.0002: item fetching failed at offset 5/6
[   63.284595][  T859] hid-generic 0005:15C2:8000.0002: probe with driver hid-generic failed with error -22
[   64.020724][ T6293] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   64.034598][ T6293] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[   64.034925][ T6293] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[   64.035339][ T6293] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   64.039004][ T6293] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   64.066389][ T6293] pci 0000:00:01.0: Adding to iommu group 1
[   64.084759][ T6293] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   64.084774][ T6293] pci 0000:00:01.0: vgaarb: bridge control possible
[   64.084781][ T6293] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   64.099806][ T6293] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   64.100284][ T6293] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   64.105463][ T6293] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   64.143470][ T6293] [drm] Found bochs VGA, ID 0xb0c5.
[   64.143504][ T6293] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   64.621477][ T6293] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[   64.733493][ T6293] Console: switching to colour frame buffer device 160x50
[   64.860455][ T6293] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[   65.255356][ T6306] Console: switching to colour dummy device 80x25
[   65.527488][ T6309] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   65.540245][ T6309] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[   65.540509][ T6309] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[   65.543862][ T6309] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   65.547255][ T6309] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   65.571299][ T6309] pci 0000:00:01.0: Adding to iommu group 1
[   65.580550][ T6309] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   65.580577][ T6309] pci 0000:00:01.0: vgaarb: bridge control possible
[   65.580584][ T6309] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   65.592326][ T6309] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   65.592591][ T6309] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   65.599224][ T6309] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   65.639477][ T6309] [drm] Found bochs VGA, ID 0xb0c5.
[   65.639521][ T6309] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   65.680770][ T6309] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[   65.956923][ T6309] Console: switching to colour frame buffer device 160x50
[   65.976938][   T42] audit: type=1804 audit(1793690166.878:217): pid=6315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.78" name="bus" dev="ramfs" ino=9050 res=1 errno=0
[   65.977023][   T42] audit: type=1804 audit(1793690166.888:218): pid=6315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.78" name="bus" dev="ramfs" ino=9050 res=1 errno=0
[   65.992805][ T6309] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[   67.659700][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'.
[   67.790296][   T42] audit: type=1804 audit(1793690168.758:219): pid=6325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.80" name="bus" dev="ramfs" ino=9055 res=1 errno=0
[   67.790854][   T42] audit: type=1804 audit(1793690168.758:220): pid=6325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.80" name="bus" dev="ramfs" ino=9055 res=1 errno=0
[   67.839981][ T6328] Console: switching to colour dummy device 80x25
[   68.231015][ T6338] openvswitch: netlink: Port 536870913 exceeds max allowable 65535
[   68.256991][ T6338] netlink: 52 bytes leftover after parsing attributes in process `syz.3.84'.
[   68.407117][ T6339] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x70014
[   68.407215][ T6339] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   68.407232][ T6339] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff)
[   68.407252][ T6339] page_type: f5(slab)
[   68.407270][ T6339] raw: 04fff00000000040 ffff88801d442b40 dead000000000122 0000000000000000
[   68.407288][ T6339] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   68.407305][ T6339] head: 04fff00000000040 ffff88801d442b40 dead000000000122 0000000000000000
[   68.407322][ T6339] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   68.407339][ T6339] head: 04fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[   68.407357][ T6339] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[   68.407368][ T6339] page dumped because: unmovable page
[   68.407377][ T6339] page_owner tracks the page as allocated
[   68.407383][ T6339] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6325, tgid 6319 (syz.1.80), ts 68280788984
[   68.407412][ T6339]  post_alloc_hook+0xfd/0x120
[   68.407546][ T6339]  get_page_from_freelist+0x1113/0x35e0
[   68.407573][ T6339]  __alloc_frozen_pages_noprof+0x2bd/0x3280
[   68.407600][ T6339]  new_slab+0xb1/0x6d0
[   68.407624][ T6339]  refill_objects+0xe3/0x410
[   68.407647][ T6339]  __pcs_replace_empty_main+0x35e/0x650
[   68.407670][ T6339]  __kmalloc_noprof+0x677/0x840
[   68.407694][ T6339]  iter_file_splice_write+0x1d8/0x10b0
[   68.407732][ T6339]  direct_splice_actor+0x192/0x690
[   68.407754][ T6339]  splice_direct_to_actor+0x341/0xa30
[   68.407774][ T6339]  do_splice_direct+0x174/0x240
[   68.407794][ T6339]  do_sendfile+0xadc/0xe20
[   68.407822][ T6339]  __ia32_compat_sys_sendfile+0x1e5/0x220
[   68.407844][ T6339]  __do_fast_syscall_32+0x14b/0x8c0
[   68.407940][ T6339]  do_fast_syscall_32+0x32/0x70
[   68.407970][ T6339]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   68.407994][ T6339] page last free pid 5947 tgid 5947 ts 68057182411 stack trace:
[   68.408007][ T6339]  __free_frozen_pages+0x7b4/0x1110
[   68.408031][ T6339]  kasan_depopulate_vmalloc_pte+0x5d/0x80
[   68.408062][ T6339]  __apply_to_page_range+0xb1d/0x1520
[   68.408081][ T6339]  __kasan_release_vmalloc+0xd7/0xe0
[   68.408107][ T6339]  purge_vmap_node+0x210/0xb40
[   68.408132][ T6339]  __purge_vmap_area_lazy+0x90a/0xc00
[   68.408159][ T6339]  drain_vmap_area_work+0x27/0x40
[   68.408190][ T6339]  process_one_work+0xac7/0x1b10
[   68.408216][ T6339]  worker_thread+0x5ef/0xe50
[   68.408241][ T6339]  kthread+0x373/0x450
[   68.408264][ T6339]  ret_from_fork+0x730/0xd60
[   68.408285][ T6339]  ret_from_fork_asm+0x1a/0x30
[   68.683340][ T5794] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1
[   68.697162][ T6343] JFS: discard option not supported on device
[   68.698410][ T6343] Mount JFS Failure: -5
[   68.698417][ T6343] jfs_mount failed w/return code = -5
[   68.954492][   T42] audit: type=1804 audit(1793690169.928:221): pid=6353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.87" name="bus" dev="ramfs" ino=9167 res=1 errno=0
[   68.955244][   T42] audit: type=1804 audit(1793690169.928:222): pid=6353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.87" name="bus" dev="ramfs" ino=9167 res=1 errno=0
[   70.877127][ T6362] syz_tun: entered allmulticast mode
[   71.011046][ T6360] syz_tun: left allmulticast mode
[   71.017244][ T1444] ieee802154 phy0 wpan0: encryption failed: -22
[   71.017445][ T1444] ieee802154 phy1 wpan1: encryption failed: -22
[   71.503505][  T996] cfg80211: failed to load regulatory.db
[   71.863428][   T42] audit: type=1804 audit(1793690172.838:223): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.93" name="bus" dev="ramfs" ino=10190 res=1 errno=0
[   71.863970][   T42] audit: type=1804 audit(1793690172.838:224): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.93" name="bus" dev="ramfs" ino=10190 res=1 errno=0
[   72.005007][ T6379] comedi comedi3: c6xdigio: I/O port conflict (0x20099c,3)
[   72.010016][ T6379] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   72.062472][ T6380] pim6reg: entered allmulticast mode
[   72.076124][ T6382] loop2: detected capacity change from 0 to 7
[   72.089614][ T6382] Dev loop2: unable to read RDB block 7
[   72.089636][ T6382]  loop2: unable to read partition table
[   72.089728][ T6382] loop2: partition table beyond EOD, truncated
[   72.089737][ T6382] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[   72.219993][ T6380] pim6reg: left allmulticast mode
[   72.380456][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'.
[   72.695431][ T5794] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   72.695483][ T5794] Bluetooth: hci0: Injecting HCI hardware error event
[   72.696679][ T5794] Bluetooth: hci0: hardware error 0x00
[   73.496649][ T6397] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   73.510494][ T6397] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[   73.510736][ T6397] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[   73.510986][ T6397] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   73.512676][ T6397] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   73.534676][ T6397] pci 0000:00:01.0: Adding to iommu group 1
[   73.544968][ T6397] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   73.544981][ T6397] pci 0000:00:01.0: vgaarb: bridge control possible
[   73.544995][ T6397] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   73.555610][ T6397] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   73.555855][ T6397] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   73.559349][ T6397] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   73.575851][ T6397] [drm] Found bochs VGA, ID 0xb0c5.
[   73.575993][ T6397] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   73.602819][ T6397] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[   73.717972][ T6400] comedi comedi3: board detection failed
[   73.906757][ T6397] Console: switching to colour frame buffer device 160x50
[   73.937651][ T6397] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[   74.712875][   T42] audit: type=1804 audit(1793690175.668:225): pid=6405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.102" name="bus" dev="ramfs" ino=11115 res=1 errno=0
[   74.713041][   T42] audit: type=1804 audit(1793690175.678:226): pid=6405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.102" name="bus" dev="ramfs" ino=11115 res=1 errno=0
[   74.855506][ T5794] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   75.241067][ T5945] usb 5-1: USB disconnect, device number 2
[   75.295332][   T42] audit: type=1804 audit(1793690176.268:227): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.104" name="bus" dev="ramfs" ino=10224 res=1 errno=0
[   75.299289][   T42] audit: type=1804 audit(1793690176.268:228): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.104" name="bus" dev="ramfs" ino=10224 res=1 errno=0
[   75.521694][   T42] audit: type=1804 audit(1793690176.488:229): pid=6418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.105" name="bus" dev="ramfs" ino=12295 res=1 errno=0
[   75.867915][   T42] audit: type=1804 audit(1793690176.838:230): pid=6422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.106" name="bus" dev="ramfs" ino=11530 res=1 errno=0
[   75.868532][   T42] audit: type=1804 audit(1793690176.838:231): pid=6422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.106" name="bus" dev="ramfs" ino=11530 res=1 errno=0
[   76.067828][   T42] audit: type=1326 audit(1793690177.038:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.0.107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efbc code=0x7ffc0000
[   76.321938][ T2411] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   76.351579][ T6428] Console: switching to colour dummy device 80x25
[   76.358959][ T6430] team0: entered allmulticast mode
[   76.358972][ T6430] team_slave_0: entered allmulticast mode
[   76.358981][ T6430] team_slave_1: entered allmulticast mode
[   76.891921][   T42] kauditd_printk_skb: 18 callbacks suppressed
[   76.892085][   T42] audit: type=1326 audit(1793690177.858:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.0.107" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf741efbc code=0x7ffc0000
[   76.892229][   T42] audit: type=1326 audit(1793690177.858:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.0.107" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf741efbc code=0x7ffc0000
[   76.922020][ T2411] usb 5-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00
[   76.922524][   T42] audit: type=1326 audit(1793690177.898:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.0.107" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf741efbc code=0x7ffc0000
[   76.922755][   T42] audit: type=1326 audit(1793690177.898:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.0.107" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf741efbc code=0x7ffc0000
[   76.923776][   T42] audit: type=1326 audit(1793690177.898:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.0.107" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf741efbc code=0x7ffc0000
[   76.924089][   T42] audit: type=1326 audit(1793690177.898:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.0.107" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf741efbc code=0x7ffc0000
[   76.924432][   T42] audit: type=1326 audit(1793690177.898:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.0.107" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf741efbc code=0x7ffc0000
[   76.924746][   T42] audit: type=1326 audit(1793690177.898:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.0.107" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf741efbc code=0x7ffc0000
[   76.925043][   T42] audit: type=1326 audit(1793690177.898:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.0.107" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf741efbc code=0x7ffc0000
[   76.925254][   T42] audit: type=1326 audit(1793690177.898:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.0.107" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf741efbc code=0x7ffc0000
[   76.926427][ T2411] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.926440][ T2411] usb 5-1: Product: syz
[   76.926447][ T2411] usb 5-1: Manufacturer: syz
[   76.926454][ T2411] usb 5-1: SerialNumber: syz
[   77.135249][ T6443] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   77.149216][ T6443] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[   77.149500][ T6443] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[   77.149908][ T6443] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   77.152948][ T6443] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   77.199426][ T6443] pci 0000:00:01.0: Adding to iommu group 1
[   77.211932][ T6443] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   77.211960][ T6443] pci 0000:00:01.0: vgaarb: bridge control possible
[   77.211977][ T6443] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   77.230562][ T6443] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   77.230808][ T6443] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   77.239900][ T6443] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   77.284885][ T6443] [drm] Found bochs VGA, ID 0xb0c5.
[   77.284897][ T6443] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   77.349591][ T6443] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[   77.666245][ T6443] Console: switching to colour frame buffer device 160x50
[   77.711270][ T6443] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[   78.035554][ T2411] usb 5-1: USB2VGA dongle found at address 3
[   78.524678][ T6445] netlink: 36 bytes leftover after parsing attributes in process `syz.0.107'.
[   78.587896][ T2411] usb 5-1: Allocated 8 output buffers
[   78.588366][    C0] ==================================================================
[   78.588383][    C0] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0
[   78.588508][    C0] Read of size 1 at addr ffff88804328a4e8 by task kworker/0:3/2411
[   78.588516][    C0] 
[   78.588551][    C0] CPU: 0 UID: 0 PID: 2411 Comm: kworker/0:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   78.588565][    C0] Tainted: [L]=SOFTLOCKUP
[   78.588569][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   78.588576][    C0] Workqueue: usb_hub_wq hub_event
[   78.588615][    C0] Call Trace:
[   78.588619][    C0]  <IRQ>
[   78.588624][    C0]  dump_stack_lvl+0x100/0x190
[   78.588647][    C0]  print_report+0x13d/0x4b0
[   78.588661][    C0]  ? __virt_addr_valid+0x239/0x430
[   78.588687][    C0]  ? find_endpoint+0x2a3/0x2c0
[   78.588696][    C0]  kasan_report+0xdf/0x1c0
[   78.588742][    C0]  ? find_endpoint+0x2a3/0x2c0
[   78.588753][    C0]  find_endpoint+0x2a3/0x2c0
[   78.588763][    C0]  dummy_timer+0x506/0x3840
[   78.588775][    C0]  ? do_raw_spin_lock+0x128/0x260
[   78.588788][    C0]  ? find_held_lock+0x2b/0x80
[   78.588801][    C0]  ? debug_object_deactivate+0x2e4/0x3b0
[   78.588834][    C0]  ? debug_object_deactivate+0x2e4/0x3b0
[   78.588846][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   78.588907][    C0]  ? debug_object_deactivate+0x2e4/0x3b0
[   78.588917][    C0]  ? __pfx_debug_object_deactivate+0x10/0x10
[   78.588929][    C0]  ? __pfx_dummy_timer+0x10/0x10
[   78.588940][    C0]  ? __pfx_dummy_timer+0x10/0x10
[   78.588951][    C0]  ? mark_held_locks+0x40/0x70
[   78.588961][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   78.588972][    C0]  ? __pfx_dummy_timer+0x10/0x10
[   78.588983][    C0]  __hrtimer_run_queues+0x448/0x9a0
[   78.589000][    C0]  hrtimer_run_softirq+0x1ca/0x360
[   78.589016][    C0]  handle_softirqs+0x216/0xa20
[   78.589027][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[   78.589036][    C0]  ? _raw_spin_unlock+0x28/0x50
[   78.589046][    C0]  ? __hrtimer_rearm_deferred+0x9b/0x7b0
[   78.589056][    C0]  __irq_exit_rcu+0x178/0x220
[   78.589065][    C0]  irq_exit_rcu+0x9/0x30
[   78.589074][    C0]  sysvec_apic_timer_interrupt+0xa3/0xc0
[   78.589087][    C0]  </IRQ>
[   78.589091][    C0]  <TASK>
[   78.589094][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   78.589106][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[   78.589118][    C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 c6 13 fa f5 48 89 df e8 4e 6a fa f5 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 e5 32 e9 f5 65 48 83 3d 84 52 cb 09 00 74 16 5b
[   78.589128][    C0] RSP: 0018:ffffc9000d7ce9f0 EFLAGS: 00000246
[   78.589144][    C0] RAX: 0000000000000006 RBX: ffff88802ae266c0 RCX: 0000000000000040
[   78.589151][    C0] RDX: 0000000000000001 RSI: ffffffff8e6250b5 RDI: ffffffff8c835a80
[   78.589157][    C0] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000000
[   78.589164][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802ae266c0
[   78.589170][    C0] R13: 0000000000000000 R14: 00000000ffffffff R15: ffff88802ae26708
[   78.589180][    C0]  __mod_timer+0x409/0xca0
[   78.589194][    C0]  ? __pfx___mod_timer+0x10/0x10
[   78.589208][    C0]  ? lockdep_init_map_type+0x5c/0x250
[   78.589220][    C0]  add_timer+0x62/0x90
[   78.589231][    C0]  schedule_timeout+0x122/0x280
[   78.589241][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[   78.589251][    C0]  ? __pfx_process_timeout+0x10/0x10
[   78.589262][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   78.589274][    C0]  ? prepare_to_wait_event+0xbe/0x770
[   78.589290][    C0]  sisusb_send_bulk_msg.constprop.0+0xbd9/0x1490
[   78.589307][    C0]  ? __pfx_sisusb_send_bulk_msg.constprop.0+0x10/0x10
[   78.589321][    C0]  ? __bus_probe_device+0x60/0x160
[   78.589346][    C0]  ? __pfx_autoremove_wake_function+0x10/0x10
[   78.589362][    C0]  ? dev_printk_emit+0xd2/0x10d
[   78.589379][    C0]  sisusb_init_gfxdevice+0x73c/0x3520
[   78.589394][    C0]  ? __dev_printk+0xe9/0x100
[   78.589409][    C0]  ? __pfx_sisusb_init_gfxdevice+0x10/0x10
[   78.589422][    C0]  ? __pfx__dev_info+0x10/0x10
[   78.589437][    C0]  ? __kasan_kmalloc+0xaa/0xb0
[   78.589448][    C0]  ? __kmalloc_noprof+0x350/0x840
[   78.589464][    C0]  ? lockdep_init_map_type+0x5c/0x250
[   78.589475][    C0]  ? kobject_get+0xbb/0x150
[   78.589492][    C0]  sisusb_probe.cold+0xad5/0xcbd
[   78.589507][    C0]  usb_probe_interface+0x386/0x980
[   78.589518][    C0]  ? __pfx_usb_probe_interface+0x10/0x10
[   78.589528][    C0]  ? kernfs_put+0x3f/0x60
[   78.589558][    C0]  ? sysfs_create_link+0x68/0xc0
[   78.589571][    C0]  ? __pfx_usb_probe_interface+0x10/0x10
[   78.589581][    C0]  really_probe+0x241/0xa60
[   78.589596][    C0]  __driver_probe_device+0x210/0x460
[   78.589609][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   78.589621][    C0]  driver_probe_device+0x4a/0x140
[   78.589635][    C0]  __device_attach_driver+0x1df/0x320
[   78.589649][    C0]  ? __pfx___device_attach_driver+0x10/0x10
[   78.589663][    C0]  bus_for_each_drv+0x159/0x1e0
[   78.589674][    C0]  ? __pfx_bus_for_each_drv+0x10/0x10
[   78.589686][    C0]  ? lockdep_hardirqs_on+0x7d/0x110
[   78.589697][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   78.589709][    C0]  __device_attach+0x1e4/0x4c0
[   78.589722][    C0]  ? __pfx___device_attach+0x10/0x10
[   78.589736][    C0]  ? do_raw_spin_unlock+0x145/0x1e0
[   78.589749][    C0]  device_initial_probe+0xaf/0xf0
[   78.589764][    C0]  __bus_probe_device+0x60/0x160
[   78.589776][    C0]  device_add+0x121d/0x1970
[   78.589786][    C0]  ? __pfx_device_add+0x10/0x10
[   78.589797][    C0]  ? usb_set_configuration+0xd8f/0x1dc0
[   78.589811][    C0]  usb_set_configuration+0xd97/0x1dc0
[   78.589829][    C0]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[   78.589841][    C0]  usb_generic_driver_probe+0xa1/0xe0
[   78.589853][    C0]  usb_probe_device+0xef/0x400
[   78.589867][    C0]  ? __pfx_usb_probe_device+0x10/0x10
[   78.589882][    C0]  really_probe+0x241/0xa60
[   78.589895][    C0]  __driver_probe_device+0x210/0x460
[   78.589909][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   78.589920][    C0]  driver_probe_device+0x4a/0x140
[   78.589934][    C0]  __device_attach_driver+0x1df/0x320
[   78.589948][    C0]  ? __pfx___device_attach_driver+0x10/0x10
[   78.589962][    C0]  bus_for_each_drv+0x159/0x1e0
[   78.589973][    C0]  ? __pfx_bus_for_each_drv+0x10/0x10
[   78.589985][    C0]  ? lockdep_hardirqs_on+0x7d/0x110
[   78.589996][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   78.590008][    C0]  __device_attach+0x1e4/0x4c0
[   78.590021][    C0]  ? __pfx___device_attach+0x10/0x10
[   78.590037][    C0]  ? do_raw_spin_unlock+0x145/0x1e0
[   78.590054][    C0]  device_initial_probe+0xaf/0xf0
[   78.590069][    C0]  __bus_probe_device+0x60/0x160
[   78.590081][    C0]  device_add+0x121d/0x1970
[   78.590093][    C0]  ? __pfx_device_add+0x10/0x10
[   78.590102][    C0]  ? add_device_randomness+0xc9/0x110
[   78.590127][    C0]  usb_new_device.part.0+0xcc2/0x1686
[   78.590138][    C0]  ? do_raw_spin_lock+0x128/0x260
[   78.590150][    C0]  ? __pfx_usb_new_device.part.0+0x10/0x10
[   78.590159][    C0]  ? mark_held_locks+0x40/0x70
[   78.590170][    C0]  hub_event.cold+0x1e3/0xe90
[   78.590185][    C0]  ? __pfx_hub_event+0x10/0x10
[   78.590198][    C0]  ? percpu_is_read_locked+0x30/0x1f0
[   78.590211][    C0]  ? lock_acquire+0x1d1/0x380
[   78.590221][    C0]  ? process_one_work+0xa2c/0x1b10
[   78.590235][    C0]  ? process_one_work+0x906/0x1b10
[   78.590249][    C0]  ? process_one_work+0x906/0x1b10
[   78.590263][    C0]  process_one_work+0xac7/0x1b10
[   78.590279][    C0]  ? __pfx_process_one_work+0x10/0x10
[   78.590293][    C0]  ? lock_acquire+0x1d1/0x380
[   78.590304][    C0]  ? __pfx_hub_event+0x10/0x10
[   78.590318][    C0]  worker_thread+0x5ef/0xe50
[   78.590333][    C0]  ? __pfx_worker_thread+0x10/0x10
[   78.590346][    C0]  ? kthread+0x13a/0x450
[   78.590358][    C0]  ? __pfx_worker_thread+0x10/0x10
[   78.590371][    C0]  kthread+0x373/0x450
[   78.590383][    C0]  ? __pfx_kthread+0x10/0x10
[   78.590396][    C0]  ret_from_fork+0x730/0xd60
[   78.590407][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[   78.590418][    C0]  ? __switch_to+0x800/0x10e0
[   78.590432][    C0]  ? __pfx_kthread+0x10/0x10
[   78.590445][    C0]  ret_from_fork_asm+0x1a/0x30
[   78.590458][    C0]  </TASK>
[   78.590469][    C0] 
[   78.590471][    C0] Allocated by task 5961:
[   78.590477][    C0]  kasan_save_stack+0x30/0x50
[   78.590486][    C0]  kasan_save_track+0x14/0x30
[   78.590494][    C0]  __kasan_kmalloc+0xaa/0xb0
[   78.590503][    C0]  __kmalloc_noprof+0x32f/0x840
[   78.590516][    C0]  usb_copy_descriptors+0xcd/0x320
[   78.590530][    C0]  f_midi2_bind+0x1dad/0x2770
[   78.590542][    C0]  usb_add_function+0x219/0x890
[   78.590553][    C0]  configfs_composite_bind+0xd83/0x1960
[   78.590568][    C0]  gadget_bind_driver+0x28c/0xbf0
[   78.590579][    C0]  really_probe+0x241/0xa60
[   78.590590][    C0]  __driver_probe_device+0x210/0x460
[   78.590603][    C0]  driver_probe_device+0x4a/0x140
[   78.590616][    C0]  __driver_attach+0x231/0x5b0
[   78.590628][    C0]  bus_for_each_dev+0x13e/0x1d0
[   78.590638][    C0]  bus_add_driver+0x4bf/0x620
[   78.590648][    C0]  driver_register+0x1e2/0x360
[   78.590656][    C0]  usb_gadget_register_driver_owner+0x132/0x210
[   78.590667][    C0]  gadget_dev_desc_UDC_store+0x1b0/0x2e0
[   78.590680][    C0]  configfs_write_iter+0x302/0x4e0
[   78.590693][    C0]  vfs_write+0x6af/0x1050
[   78.590702][    C0]  ksys_write+0x12a/0x250
[   78.590710][    C0]  __do_fast_syscall_32+0x14b/0x8c0
[   78.590722][    C0]  do_fast_syscall_32+0x32/0x70
[   78.590733][    C0]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   78.590744][    C0] 
[   78.590746][    C0] Freed by task 6411:
[   78.590750][    C0]  kasan_save_stack+0x30/0x50
[   78.590759][    C0]  kasan_save_track+0x14/0x30
[   78.590767][    C0]  kasan_save_free_info+0x3b/0x70
[   78.590779][    C0]  __kasan_slab_free+0x5f/0x80
[   78.590788][    C0]  kfree+0x22b/0x6d0
[   78.590799][    C0]  usb_free_all_descriptors+0x81/0x1a0
[   78.590812][    C0]  purge_configs_funcs+0x285/0x510
[   78.590824][    C0]  configfs_composite_unbind+0xae/0x210
[   78.590837][    C0]  gadget_unbind_driver+0x20c/0x4f0
[   78.590848][    C0]  device_remove+0xcb/0x180
[   78.590859][    C0]  device_release_driver_internal+0x441/0x610
[   78.590873][    C0]  driver_detach+0xd8/0x1b0
[   78.590886][    C0]  bus_remove_driver+0x13b/0x2e0
[   78.590897][    C0]  driver_unregister+0x76/0xb0
[   78.590905][    C0]  usb_gadget_unregister_driver+0x49/0x70
[   78.590916][    C0]  gadget_dev_desc_UDC_store+0x170/0x2e0
[   78.590928][    C0]  configfs_write_iter+0x302/0x4e0
[   78.590941][    C0]  vfs_write+0x6af/0x1050
[   78.590949][    C0]  ksys_write+0x12a/0x250
[   78.590957][    C0]  __do_fast_syscall_32+0x14b/0x8c0
[   78.590968][    C0]  do_fast_syscall_32+0x32/0x70
[   78.590979][    C0]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   78.590990][    C0] 
[   78.590992][    C0] The buggy address belongs to the object at ffff88804328a400
[   78.590992][    C0]  which belongs to the cache kmalloc-512 of size 512
[   78.591000][    C0] The buggy address is located 232 bytes inside of
[   78.591000][    C0]  freed 512-byte region [ffff88804328a400, ffff88804328a600)
[   78.591009][    C0] 
[   78.591011][    C0] The buggy address belongs to the physical page:
[   78.591015][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804328a000 pfn:0x43288
[   78.591044][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   78.591054][    C0] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff)
[   78.591065][    C0] page_type: f5(slab)
[   78.591074][    C0] raw: 04fff00000000240 ffff88801d442c80 ffffea00015dc410 ffffea00013e9310
[   78.591082][    C0] raw: ffff88804328a000 0000000000100002 00000000f5000000 0000000000000000
[   78.591090][    C0] head: 04fff00000000240 ffff88801d442c80 ffffea00015dc410 ffffea00013e9310
[   78.591098][    C0] head: ffff88804328a000 0000000000100002 00000000f5000000 0000000000000000
[   78.591106][    C0] head: 04fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[   78.591114][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[   78.591119][    C0] page dumped because: kasan: bad access detected
[   78.591123][    C0] page_owner tracks the page as allocated
[   78.591126][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5961, tgid 5959 (syz.2.3), ts 41426909419
[   78.591141][    C0]  post_alloc_hook+0xfd/0x120
[   78.591153][    C0]  get_page_from_freelist+0x1113/0x35e0
[   78.591166][    C0]  __alloc_frozen_pages_noprof+0x2bd/0x3280
[   78.591179][    C0]  new_slab+0xb1/0x6d0
[   78.591190][    C0]  refill_objects+0xe3/0x410
[   78.591202][    C0]  __pcs_replace_empty_main+0x35e/0x650
[   78.591214][    C0]  __kmalloc_cache_noprof+0x4ef/0x6d0
[   78.591225][    C0]  snd_mixer_oss_build_test+0x7a/0x380
[   78.591256][    C0]  snd_mixer_oss_build_test_all+0x5d0/0x6e0
[   78.591265][    C0]  snd_mixer_oss_build_input+0x139/0xd50
[   78.591275][    C0]  snd_mixer_oss_notify_handler+0x4e5/0xa10
[   78.591286][    C0]  snd_card_register+0x2bd/0x780
[   78.591297][    C0]  f_midi2_bind+0x1198/0x2770
[   78.591309][    C0]  usb_add_function+0x219/0x890
[   78.591317][    C0]  configfs_composite_bind+0xd83/0x1960
[   78.591331][    C0]  gadget_bind_driver+0x28c/0xbf0
[   78.591341][    C0] page last free pid 5791 tgid 5791 ts 38400182032 stack trace:
[   78.591347][    C0]  __free_frozen_pages+0x7b4/0x1110
[   78.591357][    C0]  qlist_free_all+0x47/0xf0
[   78.591370][    C0]  kasan_quarantine_reduce+0x1a0/0x1f0
[   78.591379][    C0]  __kasan_slab_alloc+0x69/0x90
[   78.591388][    C0]  __kmalloc_cache_noprof+0x278/0x6d0
[   78.591399][    C0]  ref_tracker_alloc+0x18b/0x600
[   78.591411][    C0]  register_netdevice+0x1544/0x26b0
[   78.591434][    C0]  vxcan_newlink+0x49b/0x7e0
[   78.591451][    C0]  rtnl_newlink+0x1697/0x2620
[   78.591459][    C0]  rtnetlink_rcv_msg+0x95e/0xe90
[   78.591467][    C0]  netlink_rcv_skb+0x159/0x420
[   78.591482][    C0]  netlink_unicast+0x668/0x950
[   78.591494][    C0]  netlink_sendmsg+0x9ac/0x10c0
[   78.591507][    C0]  __sys_sendto+0x492/0x4e0
[   78.591519][    C0]  __ia32_compat_sys_socketcall+0x59a/0x770
[   78.591531][    C0]  do_int80_emulation+0x166/0x650
[   78.591542][    C0] 
[   78.591544][    C0] Memory state around the buggy address:
[   78.591552][    C0]  ffff88804328a380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   78.591559][    C0]  ffff88804328a400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   78.591565][    C0] >ffff88804328a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   78.591570][    C0]                                                           ^
[   78.591575][    C0]  ffff88804328a500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   78.591581][    C0]  ffff88804328a580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   78.591586][    C0] ==================================================================
[   78.591591][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   79.114129][    C0] CPU: 0 UID: 0 PID: 2411 Comm: kworker/0:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   79.118156][    C0] Tainted: [L]=SOFTLOCKUP
[   79.119872][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   79.123656][    C0] Workqueue: usb_hub_wq hub_event
[   79.126190][    C0] Call Trace:
[   79.127484][    C0]  <IRQ>
[   79.128591][    C0]  dump_stack_lvl+0x100/0x190
[   79.130494][    C0]  vpanic+0x2dc/0x6f8
[   79.132019][    C0]  panic+0xd1/0xe0
[   79.133537][    C0]  ? __pfx_panic+0x10/0x10
[   79.135342][    C0]  ? end_report.part.0+0x23/0x90
[   79.137274][    C0]  ? rcu_is_watching+0x13/0xc0
[   79.139159][    C0]  ? end_report.part.0+0x23/0x90
[   79.141109][    C0]  check_panic_on_warn.cold+0x19/0x34
[   79.143282][    C0]  end_report.part.0+0x3a/0x90
[   79.145201][    C0]  kasan_report.cold+0xe/0x18
[   79.147068][    C0]  ? find_endpoint+0x2a3/0x2c0
[   79.148963][    C0]  find_endpoint+0x2a3/0x2c0
[   79.150832][    C0]  dummy_timer+0x506/0x3840
[   79.152712][    C0]  ? do_raw_spin_lock+0x128/0x260
[   79.154759][    C0]  ? find_held_lock+0x2b/0x80
[   79.156692][    C0]  ? debug_object_deactivate+0x2e4/0x3b0
[   79.158969][    C0]  ? debug_object_deactivate+0x2e4/0x3b0
[   79.161249][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   79.163388][    C0]  ? debug_object_deactivate+0x2e4/0x3b0
[   79.165660][    C0]  ? __pfx_debug_object_deactivate+0x10/0x10
[   79.167906][    C0]  ? __pfx_dummy_timer+0x10/0x10
[   79.169811][    C0]  ? __pfx_dummy_timer+0x10/0x10
[   79.171576][    C0]  ? mark_held_locks+0x40/0x70
[   79.173198][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   79.175510][    C0]  ? __pfx_dummy_timer+0x10/0x10
[   79.177709][    C0]  __hrtimer_run_queues+0x448/0x9a0
[   79.179686][    C0]  hrtimer_run_softirq+0x1ca/0x360
[   79.181456][    C0]  handle_softirqs+0x216/0xa20
[   79.183345][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[   79.185488][    C0]  ? _raw_spin_unlock+0x28/0x50
[   79.187494][    C0]  ? __hrtimer_rearm_deferred+0x9b/0x7b0
[   79.189738][    C0]  __irq_exit_rcu+0x178/0x220
[   79.191668][    C0]  irq_exit_rcu+0x9/0x30
[   79.193456][    C0]  sysvec_apic_timer_interrupt+0xa3/0xc0
[   79.195784][    C0]  </IRQ>
[   79.197028][    C0]  <TASK>
[   79.198257][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   79.200596][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[   79.203010][    C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 c6 13 fa f5 48 89 df e8 4e 6a fa f5 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 e5 32 e9 f5 65 48 83 3d 84 52 cb 09 00 74 16 5b
[   79.210913][    C0] RSP: 0018:ffffc9000d7ce9f0 EFLAGS: 00000246
[   79.213369][    C0] RAX: 0000000000000006 RBX: ffff88802ae266c0 RCX: 0000000000000040
[   79.216626][    C0] RDX: 0000000000000001 RSI: ffffffff8e6250b5 RDI: ffffffff8c835a80
[   79.219810][    C0] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000000
[   79.223062][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802ae266c0
[   79.225981][    C0] R13: 0000000000000000 R14: 00000000ffffffff R15: ffff88802ae26708
[   79.228847][    C0]  __mod_timer+0x409/0xca0
[   79.230536][    C0]  ? __pfx___mod_timer+0x10/0x10
[   79.232457][    C0]  ? lockdep_init_map_type+0x5c/0x250
[   79.234615][    C0]  add_timer+0x62/0x90
[   79.236306][    C0]  schedule_timeout+0x122/0x280
[   79.238283][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[   79.240405][    C0]  ? __pfx_process_timeout+0x10/0x10
[   79.242503][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   79.244955][    C0]  ? prepare_to_wait_event+0xbe/0x770
[   79.247189][    C0]  sisusb_send_bulk_msg.constprop.0+0xbd9/0x1490
[   79.249833][    C0]  ? __pfx_sisusb_send_bulk_msg.constprop.0+0x10/0x10
[   79.252636][    C0]  ? __bus_probe_device+0x60/0x160
[   79.254799][    C0]  ? __pfx_autoremove_wake_function+0x10/0x10
[   79.257379][    C0]  ? dev_printk_emit+0xd2/0x10d
[   79.259466][    C0]  sisusb_init_gfxdevice+0x73c/0x3520
[   79.261727][    C0]  ? __dev_printk+0xe9/0x100
[   79.263726][    C0]  ? __pfx_sisusb_init_gfxdevice+0x10/0x10
[   79.266181][    C0]  ? __pfx__dev_info+0x10/0x10
[   79.268175][    C0]  ? __kasan_kmalloc+0xaa/0xb0
[   79.270194][    C0]  ? __kmalloc_noprof+0x350/0x840
[   79.272330][    C0]  ? lockdep_init_map_type+0x5c/0x250
[   79.274590][    C0]  ? kobject_get+0xbb/0x150
[   79.276581][    C0]  sisusb_probe.cold+0xad5/0xcbd
[   79.278688][    C0]  usb_probe_interface+0x386/0x980
[   79.280969][    C0]  ? __pfx_usb_probe_interface+0x10/0x10
[   79.283371][    C0]  ? kernfs_put+0x3f/0x60
[   79.285248][    C0]  ? sysfs_create_link+0x68/0xc0
[   79.287360][    C0]  ? __pfx_usb_probe_interface+0x10/0x10
[   79.289702][    C0]  really_probe+0x241/0xa60
[   79.291585][    C0]  __driver_probe_device+0x210/0x460
[   79.293819][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   79.296302][    C0]  driver_probe_device+0x4a/0x140
[   79.298439][    C0]  __device_attach_driver+0x1df/0x320
[   79.300707][    C0]  ? __pfx___device_attach_driver+0x10/0x10
[   79.303167][    C0]  bus_for_each_drv+0x159/0x1e0
[   79.305201][    C0]  ? __pfx_bus_for_each_drv+0x10/0x10
[   79.307465][    C0]  ? lockdep_hardirqs_on+0x7d/0x110
[   79.309607][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   79.312068][    C0]  __device_attach+0x1e4/0x4c0
[   79.314109][    C0]  ? __pfx___device_attach+0x10/0x10
[   79.316366][    C0]  ? do_raw_spin_unlock+0x145/0x1e0
[   79.318548][    C0]  device_initial_probe+0xaf/0xf0
[   79.320599][    C0]  __bus_probe_device+0x60/0x160
[   79.322674][    C0]  device_add+0x121d/0x1970
[   79.324515][    C0]  ? __pfx_device_add+0x10/0x10
[   79.326437][    C0]  ? usb_set_configuration+0xd8f/0x1dc0
[   79.328742][    C0]  usb_set_configuration+0xd97/0x1dc0
[   79.330962][    C0]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[   79.333076][    C0]  usb_generic_driver_probe+0xa1/0xe0
[   79.334787][    C0]  usb_probe_device+0xef/0x400
[   79.336331][    C0]  ? __pfx_usb_probe_device+0x10/0x10
[   79.338026][    C0]  really_probe+0x241/0xa60
[   79.339494][    C0]  __driver_probe_device+0x210/0x460
[   79.341229][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   79.343095][    C0]  driver_probe_device+0x4a/0x140
[   79.344686][    C0]  __device_attach_driver+0x1df/0x320
[   79.346389][    C0]  ? __pfx___device_attach_driver+0x10/0x10
[   79.348266][    C0]  bus_for_each_drv+0x159/0x1e0
[   79.349804][    C0]  ? __pfx_bus_for_each_drv+0x10/0x10
[   79.351493][    C0]  ? lockdep_hardirqs_on+0x7d/0x110
[   79.353125][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   79.354933][    C0]  __device_attach+0x1e4/0x4c0
[   79.356376][    C0]  ? __pfx___device_attach+0x10/0x10
[   79.357842][    C0]  ? do_raw_spin_unlock+0x145/0x1e0
[   79.359765][    C0]  device_initial_probe+0xaf/0xf0
[   79.361759][    C0]  __bus_probe_device+0x60/0x160
[   79.363734][    C0]  device_add+0x121d/0x1970
[   79.365531][    C0]  ? __pfx_device_add+0x10/0x10
[   79.367484][    C0]  ? add_device_randomness+0xc9/0x110
[   79.369606][    C0]  usb_new_device.part.0+0xcc2/0x1686
[   79.371739][    C0]  ? do_raw_spin_lock+0x128/0x260
[   79.373734][    C0]  ? __pfx_usb_new_device.part.0+0x10/0x10
[   79.376052][    C0]  ? mark_held_locks+0x40/0x70
[   79.377949][    C0]  hub_event.cold+0x1e3/0xe90
[   79.379834][    C0]  ? __pfx_hub_event+0x10/0x10
[   79.381716][    C0]  ? percpu_is_read_locked+0x30/0x1f0
[   79.383827][    C0]  ? lock_acquire+0x1d1/0x380
[   79.385310][    C0]  ? process_one_work+0xa2c/0x1b10
[   79.386910][    C0]  ? process_one_work+0x906/0x1b10
[   79.388530][    C0]  ? process_one_work+0x906/0x1b10
[   79.390116][    C0]  process_one_work+0xac7/0x1b10
[   79.391712][    C0]  ? __pfx_process_one_work+0x10/0x10
[   79.393422][    C0]  ? lock_acquire+0x1d1/0x380
[   79.394983][    C0]  ? __pfx_hub_event+0x10/0x10
[   79.396840][    C0]  worker_thread+0x5ef/0xe50
[   79.398485][    C0]  ? __pfx_worker_thread+0x10/0x10
[   79.400304][    C0]  ? kthread+0x13a/0x450
[   79.401802][    C0]  ? __pfx_worker_thread+0x10/0x10
[   79.403628][    C0]  kthread+0x373/0x450
[   79.405072][    C0]  ? __pfx_kthread+0x10/0x10
[   79.406699][    C0]  ret_from_fork+0x730/0xd60
[   79.408341][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[   79.410143][    C0]  ? __switch_to+0x800/0x10e0
[   79.411802][    C0]  ? __pfx_kthread+0x10/0x10
[   79.413422][    C0]  ret_from_fork_asm+0x1a/0x30
[   79.414938][    C0]  </TASK>
[   79.416673][    C0] Kernel Offset: disabled
[   79.418402][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:16:19  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85c08375 RDI=ffffffff9cf3a5e0 RBP=ffffffff9cf3a5a0 RSP=ffffc90000007438
R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=3430383838666666
R12=0000000000000000 R13=0000000000000020 R14=0000000000000003 R15=ffffc90000007750
RIP=ffffffff85c0839f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888095281000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000008000f000 CR3=0000000044102000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
EAX=ffffffff EBX=f6eed4b0 ECX=897c198e EDX=f6eed4b0
ESI=897c1949 EDI=ffffffff EBP=ffffffff ESP=ffba28a0
EIP=f703bc9a EFL=00000297 [--S-APC] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA]
SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 00000000 ffffffff 00c00000
GS =0063 5851a480 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 00000000 ffffffff 00c00000
TR =0040 0004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000002eae1ff8 CR3=0000000044102000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=00000008000008fd RBX=ffff88801d4f338c RCX=0000000000000830 RDX=0000000000000008
RSI=00000000000000fd RDI=0000000000000003 RBP=0000000000000000 RSP=ffffc90003d3f7d0
R8 =0000000000000000 R9 =fffffbfff24d5aab R10=ffffffff926ad55f R11=0000000000000000
R12=0000000000000004 R13=1ffff920007a7efd R14=0000000000000003 R15=ffffc90003d3f808
RIP=ffffffff81b97b3a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888095481000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000008000a000 CR3=0000000014796000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=000000000000000c RBX=712ba51423aea100 RCX=0000000000000000 RDX=0000000000000008
RSI=ffff88801e31b130 RDI=ffff88801e31a580 RBP=ffffc9000048f9e8 RSP=ffffc9000048f950
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000
R12=ffff88801e31a580 R13=0000000000000000 R14=ffff88801e31a580 R15=ffff88801e31b130
RIP=ffffffff81e87a08 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888095581000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000002e9e5ff8 CR3=0000000041763000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8580d2da ffffffff85d2ed0e 0000001000000004 0000000600040008
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8386ef4b ffffffff8577830c ffffffff85ebd514 ffffffff85815bb2
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff85ec577c ffffffff85db211d ffffffff867b191d ffffffff85d7d294
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7665642f01ffffff ffffffffffe1080c 8003088002020800 00080006015d860a
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08000880030fffff ffff020e80021c08 00000800080153ce 1080829608000e88
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 031008000e80030f ffffffff02020800 ffffffff857e34ae ffffffff85979fff
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81d410b3 ffffffff85e65518 ffffffff81aebcdb ffffffff86b6f6f0
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08905a626994e367 48d6c43a5489d1db b85c3b10810619ba 96d97fc668cdbafc
ZMM25=6180851a6180851a 6180851a6180851a 6180851a6180851a 6180851a6180851a 6180851a6180851a 6180851a6180851a 6180851a6180851a 6180851a6180851a
ZMM26=f8e6cfcbf8e6cfcb f8e6cfcbf8e6cfcb f8e6cfcbf8e6cfcb f8e6cfcbf8e6cfcb f8e6cfcbf8e6cfcb f8e6cfcbf8e6cfcb f8e6cfcbf8e6cfcb f8e6cfcbf8e6cfcb
ZMM27=dc519eb9dc519eb9 dc519eb9dc519eb9 dc519eb9dc519eb9 dc519eb9dc519eb9 dc519eb9dc519eb9 dc519eb9dc519eb9 dc519eb9dc519eb9 dc519eb9dc519eb9
ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=8c0300008c030000 8c0300008c030000 8c0300008c030000 8c0300008c030000 8c0300008c030000 8c0300008c030000 8c0300008c030000 8c0300008c030000