last executing test programs:

2m1.606875928s ago: executing program 3 (id=137):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x44}, 0x1, 0x0, 0x0, 0x14000846}, 0x4000084)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_kvm_setup_cpu$x86(r1, r6, &(0x7f000000a000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000001c0)={"5fbcdbfb555ab7b6da2c492fe4db90aeaf8e5347c79716e75fe060d73e9de531ef8085f88b3a09f05bf084c593b4dab8756600000000077eebf9940a0b60f02d333a2c2aa407522edaabb8cfccecb9d7e0cfd915c17f32bc1ac7e430af977b671ede8605c7c72a5d1397639fd21bf848190fbdbfaeb7e166205def53caa18404ba077c2b5713acbc3d125aea78dfd962dd250511376c3a3b5732114cc92d27be04c7c146cedcc9081a8435f9c67a0c5174df503a84dc11d1d98a2473fbd39de5d9c56ffa28098914b4d47ea99e8134deb75f944afd0df95136c08e057e4d839936c0755318e58ae63dd46f7009df574d263f87508d7e496efb29de0496d4018e8d6c6f7d016752a1d10bb1df8b406bb488dbb43ffd11eb1eb9b36d57cee3b9e4e2e72e97a8059bb8e8120bf04b1d0b929692cc3e5508293bb205beba29259f18213a602dde8a8a19dd2a16b26476ca4f24e86b84ee76d86aacc862c59e154e6bec6ec6e86eb3d9dd50c4ecf6de82c2419674da3b885ac6abaea4765d256727d8560fb55d0bee0c11b1e8a05d4b932254673e8f67abfca2f184a23839164b15e021bff742605fbeb628ab93803e90954074762487b0afc90eec0e31e75dda865693dd655a190f16dbdf7ce7693d27aaf31758d97e25ab40fc44dbc911639d99b592dd0c660b820a46b8374f7e8030031c39768fb9361164f5dad133cf0d5d66c617d3d62b1f0b80e9f88ffc872df05fb5822601dfe4b39179ace0a4f6808b39bad72a80a9a9bd579d0f9a104191ef6e708083218053d3daf8211dff0a87568b7c734ab79b26cf2a65d66b00f2c2f0d3ffd5fc35b58795406446275afb8df4247add7730331b045d384b0c9fa06284463eec7167512277a435ced48980aab83b37a85b7a33ce8fd8b2a543af82bd15955b12833a59645e1de6bd6ab86c4a046a0323415351e6ddb9bcb869d2e7d092b234bfa8c5be098abcd24d8b4a659b36d8af4f3136d23f9115ea6bdc62fb89e2de415e0f08bd6ec5cc53ee3a666049168a88191c6911ea5fe7972f5627923e8b5b9e7c5323da43d48b25caee3016f88c8178fb8ab1149547e33d7fff442fa3ab42408c87cdfe35a82034bd77399a0861ce16141670ffecde05c7393ae522430425707a4c7d988f34a494727e0b1920e93c95af07d3affe9d41bb82d59ff2149705bb782c9d85e53320268fb57096c6c47e616c457a371dda361170f706e53bf9a9ac5692b72d44072217ecb8646e841b6929251a080f56be308c47dac5d59db54bd1ca7499cf3bf7cb8bb763fed9a75d2eb69573b118e3ee78fb11d41c1ce314538fec8fc542c7bf4865841a2e71fc1efd9fa385903372e3670d96398128e75d786f242a6dbf2c053dc48ee2398763b1ba3550136c14ac7ad77d3c8e97b2f36b6af200"})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet6_tcp(0xa, 0x1, 0x0)

2m0.22148982s ago: executing program 3 (id=141):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
mount(0x0, &(0x7f0000000000)='./debug\x00', 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01"], 0x17)
nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0)
setns(0xc9, 0x0)
r1 = socket(0x1f, 0x5, 0x8)
bind(r1, &(0x7f0000000300)=@generic={0x1f, "00000000000001001122334455660101010100"}, 0x32)
listen(r1, 0x1)
nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0)
syz_emit_vhci(&(0x7f0000000400), 0x13)
nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0)
syz_emit_vhci(&(0x7f0000000500), 0x11)
nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000480)='usbip-vudc.0', 0xc)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})

1m59.086677716s ago: executing program 3 (id=148):
socket$key(0xf, 0x3, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000e80)={0x4009, 0x4, 0x4da})
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000640)=""/164, 0xa4}, {&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000940)=""/4087, 0xff7}, {&(0x7f00000003c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000080)=""/180, 0xb4}, {&(0x7f0000000180)=""/153, 0x99}, {&(0x7f00000005c0)=""/26, 0x1a}], 0x8}, 0x1}], 0x4, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
close(0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x0)
write$UHID_GET_REPORT_REPLY(r3, &(0x7f00000001c0)={0xa, {0x2000004, 0x7, 0x8}}, 0xffffffffffffffe4)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f00000002c0)={'gre0\x00', 0x8})
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)
r4 = io_uring_setup(0x1d07, &(0x7f0000000080)={0x0, 0x4ed6, 0x8000, 0x1, 0x124})
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
get_robust_list(r5, &(0x7f0000000240)=0x0, &(0x7f0000000280))
io_uring_setup(0x5084, &(0x7f0000000100)={0x0, 0xe906, 0x20000, 0x0, 0x28c, 0x0, r4})

1m58.686341838s ago: executing program 3 (id=150):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r0, &(0x7f0000000080), 0x8)
read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_OPEN(r0, &(0x7f0000002640)={0x20, 0x0, r1, {0x0, 0x1a}}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0)
umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8)

1m58.686125142s ago: executing program 3 (id=151):
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600), 0x4002, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000100)={0x5, 0x1, 0x3, 0x884, 0x0, 0x1}, 0x30, 0x2)
landlock_restrict_self(r0, 0x5)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x89fc, &(0x7f0000000340)={'bond0\x00', @random="00009e0c1100"})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dedbfd, {0x0, 0x0, 0x0, r4, {0xa, 0xd}, {0x0, 0x1}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040040}, 0x40004)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x44}, 0x8054)
ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f00000000c0)={0x4, 0x8})

1m58.357583873s ago: executing program 3 (id=156):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[], 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000340)='hybla', 0x5)
connect$unix(r5, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKSECTGET(r7, 0x1267, &(0x7f0000000100))
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r9 = syz_open_dev$loop(&(0x7f0000000240), 0x47dfffc, 0x105381)
ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001ac0)={r6, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0x1c, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f050500000000e354b98ef0000000000000000000004000", [0x6, 0x3fd]}})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, 0x0})
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x19)

1m58.242562871s ago: executing program 32 (id=156):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[], 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000340)='hybla', 0x5)
connect$unix(r5, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKSECTGET(r7, 0x1267, &(0x7f0000000100))
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r9 = syz_open_dev$loop(&(0x7f0000000240), 0x47dfffc, 0x105381)
ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001ac0)={r6, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0x1c, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f050500000000e354b98ef0000000000000000000004000", [0x6, 0x3fd]}})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, 0x0})
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x19)

1m21.248524005s ago: executing program 1 (id=379):
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x53, 0x7, 0x2008, {0x1000, 0x1}, {0x74, 0x2}, @ramp={0x6, 0x1, {0x1c33, 0xf, 0x4, 0x5}}})
syz_open_dev$evdev(&(0x7f00000000c0), 0x6938, 0x82ab01)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8c811}, 0x40040)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x98, r2, 0x300, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x75}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3a, 0x2c}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x20040000)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
r5 = eventfd(0xfffffdfe)
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x60000})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5})
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
fcntl$setstatus(r6, 0x4, 0x2000)
r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4)
fcntl$setstatus(r7, 0x4, 0x42000)
r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
fcntl$setstatus(r8, 0x4, 0x8e000)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x26201, 0x4)

1m21.178570929s ago: executing program 1 (id=380):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x16, 0x0, 0x8, 0xff, 0x0, 0x1, 0x4}, 0x50)
r1 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff000705010200020007058202"], 0x0)
syz_usb_disconnect(r1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1c0)
mount(0x0, &(0x7f0000002000)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x5, 0x47, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040cd0607"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
pipe(0x0)
landlock_create_ruleset(&(0x7f00000002c0)={0x1, 0xf, 0x3, 0x1060, 0xb}, 0x30, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000240)={0x1, 0x1000000, {0x7, 0xfffff962, 0x3001, 0x2, 0x7, 0x3, 0x2, 0x1}})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f47000)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x2)
futex(&(0x7f000000cffc)=0x10, 0x3, 0x801, 0x0, &(0x7f0000000080), 0x2)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
ioctl$DVD_READ_STRUCT(r3, 0x5390, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
write(r5, &(0x7f0000000140)="0e0412b60f0c0df0f2747782bb714a7661", 0xfdef)

1m19.258576705s ago: executing program 1 (id=398):
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8a100, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0, &(0x7f0000000180)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r8, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0)
write(r9, &(0x7f0000019080)="7472616e73706f72743d66634c2fe531000000006e6e2d307833333333333333333333b333333333333a706e2d307834343434343434343434343434343434f9986f73745f7472616464723d6e7b2d3078313131313131313131313131313131313a706e2d3078323232323232323232323232323232322c6e716e3d6e716e2e323031342d30382e6f72672e6e766d657870726573732e646973636f766572792c6374726c5f6c6f73735f746d6f3d", 0xaf)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c)

1m17.895730861s ago: executing program 1 (id=408):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x810, 0xffffffffffffffff, 0xec776000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18)
fcntl$setlease(r3, 0x400, 0x1)
r4 = fanotify_init(0x200, 0x0)
fanotify_mark(r4, 0x1, 0x48001059, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x400, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
fchmod(r0, 0x90)

1m17.77203858s ago: executing program 1 (id=410):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000050)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./debug/netdevsim/netdevsim0/health/break_health\x00', 0x1, 0x0)
setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}])

1m17.521449931s ago: executing program 1 (id=413):
socket$inet6(0xa, 0x3, 0x1)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x7, 0x7ffc0001}]})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000000d800ffffffffffff00000000000000800000"], 0x48)
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0xfffffffc, 0x80000004, 0x100003, 0x80002, 0x1, 0x2}})
unshare(0x30000200)
socket(0x10, 0x3, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9)
r1 = getpid()
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x3)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x497, &(0x7f00000003c0)={0x0, 0x4885, 0x100, 0x0, 0x1d}, &(0x7f0000000340), &(0x7f0000000600), &(0x7f0000000000))
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}}], 0x1, 0x400c014)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000010)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)

1m2.379184199s ago: executing program 33 (id=413):
socket$inet6(0xa, 0x3, 0x1)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x7, 0x7ffc0001}]})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000000d800ffffffffffff00000000000000800000"], 0x48)
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0xfffffffc, 0x80000004, 0x100003, 0x80002, 0x1, 0x2}})
unshare(0x30000200)
socket(0x10, 0x3, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9)
r1 = getpid()
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x3)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x497, &(0x7f00000003c0)={0x0, 0x4885, 0x100, 0x0, 0x1d}, &(0x7f0000000340), &(0x7f0000000600), &(0x7f0000000000))
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}}], 0x1, 0x400c014)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000010)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)

3.759687814s ago: executing program 2 (id=1083):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000007c0)={'veth1_virt_wifi\x00', &(0x7f0000000780)=@ethtool_pauseparam={0x12, 0x80000001, 0x6, 0x8}})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=<r4=>r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030427bd70000000000000000000", @ANYRES8=r4, @ANYBLOB="40440900000000001c001280091cc130306c616e000000000c000280060001000100000008000500", @ANYRES32, @ANYRESDEC=r5], 0x44}, 0x1, 0x0, 0x0, 0x24000040}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2.729806267s ago: executing program 2 (id=1095):
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc00)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vlan0\x00'})
nanosleep(&(0x7f00000003c0), 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000001a80)={0x6, 'tunl0\x00', {0x2}, 0x5})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000001ac0)={0x0, 'bridge_slave_1\x00', {0x4}, 0x5})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r4], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x6}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44010}, 0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r6, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r6}}, 0x1c)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8005)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r10=>0x0})
getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000480)={'nat\x00', 0x0, [0x1984, 0x7fff, 0x4, 0xfffff800, 0x3]}, &(0x7f0000000500)=0x54)
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="370525bd7000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c009900040000005200000004006c0008009f00050000000800a00007000000050019010b00000004008e0008002700040000000500180135000000050019010600000008009f00070000000800220137410000e2afd74901f2d8ab8755a9651478d32146cb42135087046b56d448ab856c47ac3d22a47eea079c7039720fad08eaf00a8aad7220b3d7ae0cec0173967a38ad93ddbf0f6b7817a937635769614d7c44962994fa168d71ac7b802e084500ce321c7f33b8bb8b2921fc160a3a4aa267504771a0bbad3ec073f9a6c817e23fa64fbb00"], 0x70}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0xa, {{0x2, 0x0, @multicast2}}}, 0x88)

2.535918939s ago: executing program 2 (id=1089):
io_uring_setup(0x3c48, &(0x7f00000001c0)={0x0, 0x100eb7f, 0x40, 0x3, 0x382})
r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x24e}, &(0x7f0000000180)=<r1=>0x0, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000240)=<r3=>0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0)
r4 = socket(0xa, 0x801, 0x0)
getsockopt(r4, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f00000000c0)=0x54)
ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0})
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000004000000020000000500"/27], 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa6ae, 0x100008c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
fchdir(r6)
r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r7)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004500010002000800fddbdf250500000008000200", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x4008094)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r10, 0x5414, &(0x7f0000000080)={0xc, 0x1, 0x9, 0x25})

2.029599112s ago: executing program 4 (id=1090):
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x6fe, &(0x7f00000000c0)={[0x4, 0x3]}, 0x8)

1.66272462s ago: executing program 4 (id=1094):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x44}, 0x1, 0x0, 0x0, 0x14000846}, 0x4000084)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_kvm_setup_cpu$x86(r1, r6, &(0x7f000000a000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000001c0)={"5fbcdbfb555ab7b6da2c492fe4db90aeaf8e5347c79716e75fe060d73e9de531ef8085f88b3a09f05bf084c593b4dab8756600000000077eebf9940a0b60f02d333a2c2aa407522edaabb8cfccecb9d7e0cfd915c17f32bc1ac7e430af977b671ede8605c7c72a5d1397639fd21bf848190fbdbfaeb7e166205def53caa18404ba077c2b5713acbc3d125aea78dfd962dd250511376c3a3b5732114cc92d27be04c7c146cedcc9081a8435f9c67a0c5174df503a84dc11d1d98a2473fbd39de5d9c56ffa28098914b4d47ea99e8134deb75f944afd0df95136c08e057e4d839936c0755318e58ae63dd46f7009df574d263f87508d7e496efb29de0496d4018e8d6c6f7d016752a1d10bb1df8b406bb488dbb43ffd11eb1eb9b36d57cee3b9e4e2e72e97a8059bb8e8120bf04b1d0b929692cc3e5508293bb205beba29259f18213a602dde8a8a19dd2a16b26476ca4f24e86b84ee76d86aacc862c59e154e6bec6ec6e86eb3d9dd50c4ecf6de82c2419674da3b885ac6abaea4765d256727d8560fb55d0bee0c11b1e8a05d4b932254673e8f67abfca2f184a23839164b15e021bff742605fbeb628ab93803e90954074762487b0afc90eec0e31e75dda865693dd655a190f16dbdf7ce7693d27aaf31758d97e25ab40fc44dbc911639d99b592dd0c660b820a46b8374f7e8030031c39768fb9361164f5dad133cf0d5d66c617d3d62b1f0b80e9f88ffc872df05fb5822601dfe4b39179ace0a4f6808b39bad72a80a9a9bd579d0f9a104191ef6e708083218053d3daf8211dff0a87568b7c734ab79b26cf2a65d66b00f2c2f0d3ffd5fc35b58795406446275afb8df4247add7730331b045d384b0c9fa06284463eec7167512277a435ced48980aab83b37a85b7a33ce8fd8b2a543af82bd15955b12833a59645e1de6bd6ab86c4a046a0323415351e6ddb9bcb869d2e7d092b234bfa8c5be098abcd24d8b4a659b36d8af4f3136d23f9115ea6bdc62fb89e2de415e0f08bd6ec5cc53ee3a666049168a88191c6911ea5fe7972f5627923e8b5b9e7c5323da43d48b25caee3016f88c8178fb8ab1149547e33d7fff442fa3ab42408c87cdfe35a82034bd77399a0861ce16141670ffecde05c7393ae522430425707a4c7d988f34a494727e0b1920e93c95af07d3affe9d41bb82d59ff2149705bb782c9d85e53320268fb57096c6c47e616c457a371dda361170f706e53bf9a9ac5692b72d44072217ecb8646e841b6929251a080f56be308c47dac5d59db54bd1ca7499cf3bf7cb8bb763fed9a75d2eb69573b118e3ee78fb11d41c1ce314538fec8fc542c7bf4865841a2e71fc1efd9fa385903372e3670d96398128e75d786f242a6dbf2c053dc48ee2398763b1ba3550136c14ac7ad77d3c8e97b2f36b6af200"})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet6_tcp(0xa, 0x1, 0x0)

1.526210442s ago: executing program 2 (id=1096):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x74, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}]}, 0x74}}, 0x0)

1.495712388s ago: executing program 2 (id=1098):
socket$tipc(0x1e, 0x5, 0x0) (async)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000740)=""/175, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000740)=""/175, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="21012cbd7000000000001400000008000300", @ANYRES32=r4, @ANYBLOB="0600360000000000050029"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x440)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2)
statx(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', 0x4000, 0x7ff, &(0x7f0000000540)) (async)
statx(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', 0x4000, 0x7ff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r7)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) (async)
r8 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r8}, &(0x7f00000006c0)=""/94, 0x5e, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
listen(r0, 0x0)
socket$tipc(0x1e, 0x5, 0x0) (async)
r9 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4)
close(r9) (async)
close(r9)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=@newtaction={0x1f8, 0x30, 0x1, 0x400000, 0x0, {}, [{0x1e4, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x0, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}, @m_tunnel_key={0x15c, 0x15, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x7ff, 0x4, 0x9, 0x9}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x10001, 0x6, 0x1, 0x6, 0x3278f763}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}]}, {0xd9, 0x6, "67040d3c9793b59aec0053d7f6e36b420e85211637cf895968e52fbd60f472b6b85caba967d2e146e782592c53b42c288942c14e284adb6b48cca442f6d4ce0c5b407c2eb9ca320c126dd36c959743749db1823736ede5afacb9e17ba55943ac4240632e9550e19c5d4aa2d44a9387e88dcc5710ca860303c8e5e3c24e5de08e4417b4d757b62dcb374157ec0a97978646984d197586accdc322e000f65bf619dcd5a0c7047c9e610219c103a0ca7ac432d8a8a4a26a4a20a9cd024f8f8aeca4ec60ace8fc5d242380307c95081165952d03b537c3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x1f8}}, 0x0)
accept4(r0, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800)
epoll_create(0x4)

1.049209064s ago: executing program 2 (id=1100):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r0 = syz_ublk_setup_io_uring(0x64d, &(0x7f0000000240)={0x0, 0xd58c, 0x1000, 0x2, 0x14d}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000380)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1})
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYBLOB='|'], 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ppoll(&(0x7f0000000100)=[{r5, 0x8440}], 0x1, 0x0, 0x0, 0x0)
dup2(r4, r5)
personality(0xeaffffffffffffff)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9})
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1)

872.86241ms ago: executing program 0 (id=1101):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x7}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=@newchain={0xda0, 0x64, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xffe0}, {0x5, 0xe}, {0xffe0, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xfff8}}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xc0, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_u32={{0x8}, {0xd48, 0x2, [@TCA_U32_POLICE={0x480, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffff7fff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xc00000, 0x8, 0x401, 0x0, 0x5, 0xc, 0xff, 0x8, 0x180000, 0x4, 0x7, 0x5, 0xb, 0x80000000, 0x6, 0x5, 0xb, 0x3, 0xd0, 0xb, 0x80000000, 0x80000000, 0xa, 0x2, 0x1, 0x2, 0xff, 0x8c0, 0x87, 0x9, 0x1, 0xc, 0x4, 0x3800, 0x4, 0x2, 0x20000, 0x8, 0x5, 0xe601112, 0x9c0, 0x1, 0xffe, 0xbfc, 0xb129, 0x2, 0xfffffffb, 0x3, 0x10000, 0x3, 0x1c000, 0xa, 0x7, 0x5, 0x0, 0x329, 0x6, 0xff, 0x93, 0x9, 0x5, 0x816d, 0x9, 0x6, 0x1, 0x0, 0x5929, 0x1, 0x80000000, 0x4, 0x6, 0x401, 0x6d83d92c, 0x9, 0x40, 0x5, 0x80, 0x7, 0x1ff, 0xf6ee, 0x3, 0x5, 0x9, 0xfffffffb, 0x5, 0x1, 0x240, 0x9, 0xa, 0x914e, 0xffffffff, 0x0, 0x4, 0x401, 0x1, 0x4272f7bf, 0x6, 0x7fffffff, 0x10000, 0x0, 0x7, 0x0, 0x5, 0xb, 0x2, 0x9, 0x0, 0x6, 0x1, 0x5, 0x279c0, 0x6, 0x1, 0x7f, 0x2, 0x53, 0xb645, 0x748, 0x6419, 0x6, 0x1, 0x2, 0x8001, 0x8, 0xf756, 0xf, 0x101, 0x1, 0x737, 0x5, 0x200009, 0x5, 0xd, 0x10001, 0x80000000, 0x3, 0x7, 0x6, 0x5, 0x7, 0x10, 0x4, 0x9, 0x8, 0x40, 0x40, 0x4, 0xe06, 0x5, 0x4, 0xb0c2, 0x5, 0xfffffffd, 0x3, 0x2728, 0x8, 0x10, 0x0, 0x40, 0x6, 0x7, 0x4, 0xe5e7, 0xa, 0x9e, 0x3ff, 0x1, 0x1, 0x92, 0x5, 0x1fea, 0x6, 0x9, 0x7, 0x2, 0x0, 0x1, 0xfffffbff, 0x8, 0x3, 0x600, 0x40, 0x0, 0x380, 0x0, 0x2, 0x9, 0x7a3, 0xac, 0x8, 0x9, 0x0, 0x6e, 0x7fff, 0x7f, 0x6, 0x2, 0x4, 0x2, 0xf9, 0x4, 0x0, 0x8000, 0x7b, 0x4, 0x1, 0x4, 0x3, 0x2, 0x5, 0x3e, 0x9, 0x1, 0x8, 0x6, 0x0, 0x1, 0x6, 0x6, 0xffffffff, 0x2, 0xfffffffc, 0x7fff, 0x8, 0x2, 0x1c4f, 0x1000, 0x647cb996, 0x8, 0x6776, 0x0, 0x7a, 0xa, 0x7, 0x1, 0x9, 0x1, 0x4, 0x81, 0x80000001, 0x5, 0x0, 0x3, 0x0, 0x7, 0x9, 0x101, 0x80000000, 0x1, 0x3, 0xffffffff, 0x0, 0xe231, 0x4, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff9, 0x6, 0x40, 0x5, 0x2, {0x3, 0x1, 0xb, 0x815, 0x4, 0x8}, {0x9, 0x2, 0x5, 0x3c9, 0xfff7, 0xfffff503}, 0x60000000, 0xc, 0xa7c1240}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x22}]}, @TCA_U32_HASH={0x8, 0x2, 0xaae}, @TCA_U32_SEL={0x814, 0x5, {0xf, 0x3, 0x8, 0xff, 0x1, 0x0, 0x0, 0x7, [{0x7, 0x198bc2cc, 0x7d1, 0x40}, {0x9, 0x5, 0x7ce2, 0x1}, {0x1000, 0x7, 0x7, 0x4}, {0x8, 0x40, 0x4}, {0x0, 0x5, 0x5c1, 0x8}, {0x5, 0x3, 0x2d8, 0x8}, {0x7, 0x4, 0x3, 0x5}, {0x1, 0x47, 0x4fcc, 0x7876}, {0x5, 0xab, 0x2, 0x8000}, {0x5, 0x1, 0x7014, 0x8001}, {0xc00000, 0x9, 0xe, 0x5}, {0xa, 0x24, 0x9, 0x4}, {0x8, 0xf, 0x2, 0x1c00}, {0xb60, 0x6, 0xeb5, 0x4}, {0x1dcb, 0x5, 0xf, 0x7fff}, {0x50, 0x40, 0x6, 0xfffffff8}, {0x8, 0x3, 0x2, 0xfffffffc}, {0x8, 0xfffffff8, 0x200, 0x7fffffff}, {0x200, 0x6, 0x6, 0x6}, {0x1, 0x2, 0x5, 0x4}, {0x200, 0x4, 0x400, 0x7a00}, {0x4b1, 0x6db0c3c4, 0x40, 0x5}, {0x6, 0x1, 0x10000, 0x6}, {0x8000, 0x7ff, 0x5, 0xfffffffe}, {0x3, 0xb0bc, 0x9, 0xe}, {0x8, 0x5, 0xa, 0x10001}, {0x6, 0x4, 0x10001, 0x7}, {0xc, 0xc1, 0x9, 0x80000001}, {0xfffffff0, 0x0, 0x8, 0xfffffff1}, {0x9, 0x4800000, 0x4, 0x2}, {0x7, 0xc690, 0x7, 0x9}, {0x9, 0x533, 0x92, 0x4}, {0x3, 0x4}, {0xae, 0x1, 0x9, 0x2}, {0x23ba, 0x3ff, 0x4, 0x80}, {0xfffffffa, 0x6, 0x7, 0x4}, {0x7, 0x40, 0x6, 0x9}, {0xffffffff, 0x0, 0x4, 0x400}, {0x0, 0xc0000000, 0x1ff, 0x4}, {0x8, 0x5, 0x6, 0x899d}, {0x9, 0x88a, 0x851, 0x8}, {0x6, 0xa, 0xc144, 0xb6c8}, {0x200, 0x4417826b, 0x0, 0x7}, {0xc58, 0x400, 0x6, 0x800}, {0x6ff, 0x0, 0x4, 0x5}, {0x0, 0x1, 0x7, 0x7f}, {0x1, 0x7, 0x2dde, 0x100}, {0x7, 0x964, 0x6e53, 0xc838}, {0x6, 0x7, 0x8, 0x1}, {0x0, 0x1, 0x3, 0xf}, {0x6, 0x4, 0x7}, {0x2, 0x5, 0x6, 0x4}, {0x0, 0x1, 0x0, 0x10001}, {0x844, 0x2, 0x7819, 0x1}, {0xfa, 0x7810, 0x8000, 0x2}, {0xfffffffa, 0x9c6, 0xfffff775, 0x9}, {0x9, 0xb, 0x4e6, 0xffff8000}, {0x4, 0xf, 0x2, 0x6}, {0xffffffe6, 0xffff, 0x2, 0x8}, {0xe, 0x80, 0x6}, {0x4, 0x8, 0x13b, 0xdf6}, {0x9, 0x0, 0x1, 0xfffffd84}, {0x3, 0x476378d3, 0x9, 0x8001}, {0x6b4, 0x10001, 0x445, 0xa97f}, {0x8, 0x1, 0x2}, {0x5, 0x2, 0x800, 0x6}, {0x5, 0xf95, 0x9d9, 0x4}, {0x400, 0x5, 0x0, 0x4}, {0x33, 0x1793, 0xfffffffc, 0x800}, {0x2, 0x1, 0x5, 0x5}, {0x8, 0x1, 0x1cb8, 0x80}, {0x8, 0xfffffffb, 0x4, 0x3}, {0x8, 0xd, 0x10001, 0x60}, {0xfffff000, 0xffff0001, 0x2, 0xfffff83a}, {0x5, 0x2, 0x8, 0x3}, {0xffff8a0f, 0x4, 0x3, 0x80000000}, {0x0, 0x10, 0x3, 0x4}, {0x7f, 0x0, 0x2, 0x5}, {0xfff, 0xfffffffb, 0x4, 0xf}, {0x3, 0x5, 0x14a0}, {0xb, 0x3, 0x80000000, 0x8}, {0x5, 0x5, 0xfffffff8, 0x5}, {0x9, 0x6, 0x5, 0x7}, {0x4, 0x7, 0xfffffffd, 0x44}, {0x2, 0x40000000, 0x2, 0x7}, {0x1, 0xe, 0x7, 0x2}, {0x400, 0xffffffff, 0x5, 0x2}, {0xf7, 0x19, 0x8, 0x7}, {0x6, 0x1ff, 0x80000001, 0x9}, {0x200, 0xbd37, 0x3, 0x200}, {0xff, 0x4, 0x4, 0x3}, {0x9, 0x1, 0x1, 0x2}, {0xffff, 0x9, 0x6, 0x10000}, {0x2, 0x8, 0xffff8000, 0x6}, {0x7, 0x2, 0x8}, {0x7, 0x1, 0x7, 0x5}, {0x9f3, 0x3, 0x8911, 0x9}, {0x9, 0x100, 0x4, 0x8}, {0xfff, 0xd7e1, 0x3c4c, 0x1}, {0x5, 0x6, 0x8, 0xff}, {0x9, 0x0, 0xa3, 0x1}, {0x2, 0x4, 0xffff, 0x8001}, {0x3, 0x0, 0x100, 0x6a}, {0x4, 0x9, 0x2b, 0x8001}, {0x3, 0x6d6, 0x7115770, 0x1000}, {0x10001, 0x4, 0x94}, {0xa60e, 0xac2, 0x2, 0x80000001}, {0x9, 0x7, 0x3, 0x1}, {0x5, 0x7ff, 0x1, 0xd}, {0x6, 0x46, 0x8, 0x3}, {0x1000, 0xb, 0x3, 0x800}, {0x0, 0xfffffffb, 0x80000000, 0x101}, {0x80, 0x7f0, 0x5, 0x4}, {0xd, 0x7, 0x7, 0x9}, {0x5d02, 0x0, 0x6, 0x400}, {0xa563, 0x7, 0x7, 0xffffff73}, {0x22, 0x6, 0x80000000, 0x8}, {0x9, 0x7, 0xffff, 0xe35}, {0x4, 0x9, 0x9, 0x9806}, {0xfff, 0x8}, {0x8000, 0x8, 0xfff, 0x74f}, {0x81, 0x0, 0x1, 0x27}, {0x80000000, 0x4ee4a205, 0x8, 0xe6d}, {0x9, 0x1, 0x3, 0x3ff}, {0xff, 0x101, 0x401, 0x7fff}, {0xffff, 0x0, 0x2, 0x7fff}, {0xb8b0, 0x6, 0x4, 0x6}, {0x80000001, 0x9, 0x6, 0x2}]}}, @TCA_U32_FLAGS={0x8}, @TCA_U32_FLAGS={0x8}, @TCA_U32_LINK={0x8, 0x3, 0x1}, @TCA_U32_POLICE={0x90, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1ff, 0x5, 0x8, 0x3, 0x4, {0x89, 0x1, 0xfff, 0x5, 0x22b, 0xd}, {0x0, 0x1, 0x9, 0x9, 0x1, 0x9b}, 0x5, 0x3ff, 0x1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x6, 0x0, 0x38, 0x8, {0xfb, 0x2, 0x75d, 0x5, 0x5, 0xf}, {0xa9, 0x0, 0x2, 0x6, 0x5, 0x4}, 0xb, 0x2876, 0x9}}]}]}}]}, 0xda0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r14, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xb4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r16)
socket$unix(0x1, 0x5, 0x0)

826.902793ms ago: executing program 4 (id=1102):
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc00)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vlan0\x00'})
nanosleep(&(0x7f00000003c0), 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000001a80)={0x6, 'tunl0\x00', {0x2}, 0x5})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000001ac0)={0x0, 'bridge_slave_1\x00', {0x4}, 0x5})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r4], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x6}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44010}, 0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r6, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r6}}, 0x1c)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8005)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r10=>0x0})
getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000480)={'nat\x00', 0x0, [0x1984, 0x7fff, 0x4, 0xfffff800, 0x3]}, &(0x7f0000000500)=0x54)
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="370525bd7000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c009900040000005200000004006c0008009f00050000000800a00007000000050019010b00000004008e0008002700040000000500180135000000050019010600000008009f00070000000800220137410000e2afd74901f2d8ab8755a9651478d32146cb42135087046b56d448ab856c47ac3d22a47eea079c7039720fad08eaf00a8aad7220b3d7ae0cec0173967a38ad93ddbf0f6b7817a937635769614d7c44962994fa168d71ac7b802e084500ce321c7f33b8bb8b2921fc160a3a4aa267504771a0bbad3ec073f9a6c817e23fa64fbb00"], 0x70}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0xa, {{0x2, 0x0, @multicast2}}}, 0x88)

794.061541ms ago: executing program 0 (id=1103):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
socket$inet6_sctp(0xa, 0x5, 0x84)
recvmsg$inet_nvme(r0, 0x0, 0x1)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='environ\x00')
execve(&(0x7f0000000300)='./mnt\x00', &(0x7f0000000580)={[&(0x7f0000000540)='\x06*^(\xfa^!]\\-:\x00']}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x1008c10, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER(r3, 0x0, 0x4040)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
pwrite64(r4, &(0x7f0000000000)="ff", 0x58200, 0xfb2200)
write$cgroup_pid(r4, &(0x7f0000000480), 0x12)
pread64(r2, 0x0, 0x0, 0x4)
write$fb(r2, &(0x7f00000001c0)="e83a8bc17394c340e6f05e716934f36b529f95d86d27fcf35fb7cac8483986e0174a74efe3cf6b6fef9f27884803614a3bcca29d533d2335ede51821905a6a595c59f55e650fa5a13d223f17085656ccc119d313b5e4c8cdb62c02c122c513ace621268e179ddd40e86379914d30b23b205fec1eca456d1cffc40ff01095ba2d1dbd715cc9e1a6c219f40998955ccb7b14d6b0f1b6c456a9911f23dd484784684c24809288b87cbc2bae7525e33dbe520f62e036e796f6ab42b54d0a2e172aae8a3f", 0xc2)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)

735.731286ms ago: executing program 0 (id=1104):
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x6fe, &(0x7f00000000c0)={[0x4, 0x3]}, 0x8)

679.695094ms ago: executing program 0 (id=1105):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002b80)=@delchain={0x3e8, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x6, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x3bc, 0x2, [@TCA_BPF_ACT={0x3b8, 0x1, [@m_bpf={0xb4, 0x11, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x65, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0x10c, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xe2, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xc4, 0x8, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0xa3b7, 0x9, 0xb, 0x7}]}]}, {0x7d, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x130, 0x17, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "af48b6deba1f74c21e05d954368ebb96"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0xea, 0x6, "22be5921dd8ffc6b373a7e862d290c42d830be2696b1dfd40719b5ab8fb21e290e16fbf7a0cd4e12f562bf5624c97ed711692abeaaf54fe2fe93a28c2c262c2d5373741536b93deedde69cfbba1b30503dcb93cb6a4b61bfea2d711793df7602b4ae19588d0e37ecd762381e0dd4a601c8ffafb283eaeaf177f772ea68344ae4b7c664cae0162c1ffe58212a0062b5b0a60c226d67f136a502cd8340af67087af3cec112bf9243b46d4c7a7e0345bf8c100c6ce9bc0848976d13ae07fdee5e847473c1aaca815cd7687606f6b6b849007a6f22db607fe613b8d93fb047ffebd74881705d261d"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xd4)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0xfffffffffffffedd}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3daa1ea3000000005d95ab71cc16e3ded13584c763e48af471ec58cd0a963c42f54ee4158f0ada085c718cdda31573150654ee5379f4a11f674ce482fb58520a0aa11cb2ad1c2bd616a01f63eedfdfb52d9c920f269e16baa7d95d04bfd8508d88fc98182e9c58fae08799fc5bf00b739a8965f99bc8de8e3bc5184a9b", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',version=9p2000,\x00'])
r6 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000004540)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000006580)={0x50, 0x0, r7, {0x7, 0x2d, 0x8, 0x800, 0xfffe, 0x5, 0x4, 0x8000, 0x0, 0x0, 0x10, 0x3}}, 0x50)
write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r4, @ANYRESHEX=r5], 0x15)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
eventfd2(0x10, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r10, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500070000001400040073"], 0x58}}, 0x0)
close(0x3)
r11 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2)
ioctl$VIDIOC_G_FMT(r11, 0xc0cc5604, &(0x7f0000000080)={0xb, @pix_mp={0x4, 0x0, 0x0, 0x0, 0x0, [{0x81}, {}, {0x8}, {}, {}, {}, {}, {0xfffffffd}], 0x0, 0x0, 0x4}})
socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x2c, &(0x7f0000000000)={0x0, 0x0}, 0x10)

678.669168ms ago: executing program 0 (id=1113):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x6fe, &(0x7f00000000c0)={[0x4, 0x3]}, 0x8)

653.29556ms ago: executing program 4 (id=1106):
io_uring_setup(0x3c48, &(0x7f00000001c0)={0x0, 0x100eb7f, 0x40, 0x3, 0x382})
r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x24e}, &(0x7f0000000180)=<r1=>0x0, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000240)=<r3=>0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0)
r4 = socket(0xa, 0x801, 0x0)
getsockopt(r4, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f00000000c0)=0x54)
ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0})
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000004000000020000000500"/27], 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa6ae, 0x100008c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
fchdir(r6)
r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r7)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004500010002000800fddbdf250500000008000200", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x4008094)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r10, 0x5414, &(0x7f0000000080)={0xc, 0x1, 0x9, 0x25})

650.882555ms ago: executing program 0 (id=1107):
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
unshare(0x40400)
recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/36, 0x24, 0x40000000, &(0x7f00000004c0)=@file={0x1, './config/usb_gadget/g1/functions/uvc.0\x00'}, 0x6e)
r0 = syz_open_dev$video(0x0, 0x7, 0x40)
ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000001040)={0xe, {0x6, 0x7, 0x7, 0xffffffde}, {0x8, 0x1, 0x4, 0x7ff}, {0x7, 0x6}})
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100), 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff)
symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00')
symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00', 0x1ff)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000380))
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0)
r3 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0)
setns(0xc9, 0x0)
r4 = socket(0x8, 0x5, 0x5)
syz_usb_ep_read(r3, 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write(r3, 0x81, 0x40, &(0x7f0000000100)="900100"/64)
ioctl$sock_SIOCOUTQNSD(r4, 0x400261f2, &(0x7f0000000000))
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in=@broadcast, @in=@local}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000540)=0xe8)

492.002133ms ago: executing program 4 (id=1109):
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0xa, 0x1})
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x0, 0xa, 0x4, 0xe7ffffff, 0x0, {}, {}, 0x0, 0x1, {0x0}, 0x2})
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x1, 0x0)
msgget$private(0x0, 0x4)
write(r1, &(0x7f0000000000)='3', 0x4e)
sched_setaffinity(0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)

402.436967ms ago: executing program 4 (id=1110):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x74, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}]}, 0x74}}, 0x0)

323.064552ms ago: executing program 5 (id=1111):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mlockall(0x2)
r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
shmctl$SHM_UNLOCK(r2, 0xc)
sendmmsg$unix(r1, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="10fb00000100000001000000", @ANYRES32=r0], 0x10}}], 0x1, 0x0)

242.71685ms ago: executing program 5 (id=1112):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x7}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=@newchain={0xda0, 0x64, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xffe0}, {0x5, 0xe}, {0xffe0, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xfff8}}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xc0, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_u32={{0x8}, {0xd48, 0x2, [@TCA_U32_POLICE={0x480, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffff7fff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xc00000, 0x8, 0x401, 0x0, 0x5, 0xc, 0xff, 0x8, 0x180000, 0x4, 0x7, 0x5, 0xb, 0x80000000, 0x6, 0x5, 0xb, 0x3, 0xd0, 0xb, 0x80000000, 0x80000000, 0xa, 0x2, 0x1, 0x2, 0xff, 0x8c0, 0x87, 0x9, 0x1, 0xc, 0x4, 0x3800, 0x4, 0x2, 0x20000, 0x8, 0x5, 0xe601112, 0x9c0, 0x1, 0xffe, 0xbfc, 0xb129, 0x2, 0xfffffffb, 0x3, 0x10000, 0x3, 0x1c000, 0xa, 0x7, 0x5, 0x0, 0x329, 0x6, 0xff, 0x93, 0x9, 0x5, 0x816d, 0x9, 0x6, 0x1, 0x0, 0x5929, 0x1, 0x80000000, 0x4, 0x6, 0x401, 0x6d83d92c, 0x9, 0x40, 0x5, 0x80, 0x7, 0x1ff, 0xf6ee, 0x3, 0x5, 0x9, 0xfffffffb, 0x5, 0x1, 0x240, 0x9, 0xa, 0x914e, 0xffffffff, 0x0, 0x4, 0x401, 0x1, 0x4272f7bf, 0x6, 0x7fffffff, 0x10000, 0x0, 0x7, 0x0, 0x5, 0xb, 0x2, 0x9, 0x0, 0x6, 0x1, 0x5, 0x279c0, 0x6, 0x1, 0x7f, 0x2, 0x53, 0xb645, 0x748, 0x6419, 0x6, 0x1, 0x2, 0x8001, 0x8, 0xf756, 0xf, 0x101, 0x1, 0x737, 0x5, 0x200009, 0x5, 0xd, 0x10001, 0x80000000, 0x3, 0x7, 0x6, 0x5, 0x7, 0x10, 0x4, 0x9, 0x8, 0x40, 0x40, 0x4, 0xe06, 0x5, 0x4, 0xb0c2, 0x5, 0xfffffffd, 0x3, 0x2728, 0x8, 0x10, 0x0, 0x40, 0x6, 0x7, 0x4, 0xe5e7, 0xa, 0x9e, 0x3ff, 0x1, 0x1, 0x92, 0x5, 0x1fea, 0x6, 0x9, 0x7, 0x2, 0x0, 0x1, 0xfffffbff, 0x8, 0x3, 0x600, 0x40, 0x0, 0x380, 0x0, 0x2, 0x9, 0x7a3, 0xac, 0x8, 0x9, 0x0, 0x6e, 0x7fff, 0x7f, 0x6, 0x2, 0x4, 0x2, 0xf9, 0x4, 0x0, 0x8000, 0x7b, 0x4, 0x1, 0x4, 0x3, 0x2, 0x5, 0x3e, 0x9, 0x1, 0x8, 0x6, 0x0, 0x1, 0x6, 0x6, 0xffffffff, 0x2, 0xfffffffc, 0x7fff, 0x8, 0x2, 0x1c4f, 0x1000, 0x647cb996, 0x8, 0x6776, 0x0, 0x7a, 0xa, 0x7, 0x1, 0x9, 0x1, 0x4, 0x81, 0x80000001, 0x5, 0x0, 0x3, 0x0, 0x7, 0x9, 0x101, 0x80000000, 0x1, 0x3, 0xffffffff, 0x0, 0xe231, 0x4, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff9, 0x6, 0x40, 0x5, 0x2, {0x3, 0x1, 0xb, 0x815, 0x4, 0x8}, {0x9, 0x2, 0x5, 0x3c9, 0xfff7, 0xfffff503}, 0x60000000, 0xc, 0xa7c1240}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x22}]}, @TCA_U32_HASH={0x8, 0x2, 0xaae}, @TCA_U32_SEL={0x814, 0x5, {0xf, 0x3, 0x8, 0xff, 0x1, 0x0, 0x0, 0x7, [{0x7, 0x198bc2cc, 0x7d1, 0x40}, {0x9, 0x5, 0x7ce2, 0x1}, {0x1000, 0x7, 0x7, 0x4}, {0x8, 0x40, 0x4}, {0x0, 0x5, 0x5c1, 0x8}, {0x5, 0x3, 0x2d8, 0x8}, {0x7, 0x4, 0x3, 0x5}, {0x1, 0x47, 0x4fcc, 0x7876}, {0x5, 0xab, 0x2, 0x8000}, {0x5, 0x1, 0x7014, 0x8001}, {0xc00000, 0x9, 0xe, 0x5}, {0xa, 0x24, 0x9, 0x4}, {0x8, 0xf, 0x2, 0x1c00}, {0xb60, 0x6, 0xeb5, 0x4}, {0x1dcb, 0x5, 0xf, 0x7fff}, {0x50, 0x40, 0x6, 0xfffffff8}, {0x8, 0x3, 0x2, 0xfffffffc}, {0x8, 0xfffffff8, 0x200, 0x7fffffff}, {0x200, 0x6, 0x6, 0x6}, {0x1, 0x2, 0x5, 0x4}, {0x200, 0x4, 0x400, 0x7a00}, {0x4b1, 0x6db0c3c4, 0x40, 0x5}, {0x6, 0x1, 0x10000, 0x6}, {0x8000, 0x7ff, 0x5, 0xfffffffe}, {0x3, 0xb0bc, 0x9, 0xe}, {0x8, 0x5, 0xa, 0x10001}, {0x6, 0x4, 0x10001, 0x7}, {0xc, 0xc1, 0x9, 0x80000001}, {0xfffffff0, 0x0, 0x8, 0xfffffff1}, {0x9, 0x4800000, 0x4, 0x2}, {0x7, 0xc690, 0x7, 0x9}, {0x9, 0x533, 0x92, 0x4}, {0x3, 0x4}, {0xae, 0x1, 0x9, 0x2}, {0x23ba, 0x3ff, 0x4, 0x80}, {0xfffffffa, 0x6, 0x7, 0x4}, {0x7, 0x40, 0x6, 0x9}, {0xffffffff, 0x0, 0x4, 0x400}, {0x0, 0xc0000000, 0x1ff, 0x4}, {0x8, 0x5, 0x6, 0x899d}, {0x9, 0x88a, 0x851, 0x8}, {0x6, 0xa, 0xc144, 0xb6c8}, {0x200, 0x4417826b, 0x0, 0x7}, {0xc58, 0x400, 0x6, 0x800}, {0x6ff, 0x0, 0x4, 0x5}, {0x0, 0x1, 0x7, 0x7f}, {0x1, 0x7, 0x2dde, 0x100}, {0x7, 0x964, 0x6e53, 0xc838}, {0x6, 0x7, 0x8, 0x1}, {0x0, 0x1, 0x3, 0xf}, {0x6, 0x4, 0x7}, {0x2, 0x5, 0x6, 0x4}, {0x0, 0x1, 0x0, 0x10001}, {0x844, 0x2, 0x7819, 0x1}, {0xfa, 0x7810, 0x8000, 0x2}, {0xfffffffa, 0x9c6, 0xfffff775, 0x9}, {0x9, 0xb, 0x4e6, 0xffff8000}, {0x4, 0xf, 0x2, 0x6}, {0xffffffe6, 0xffff, 0x2, 0x8}, {0xe, 0x80, 0x6}, {0x4, 0x8, 0x13b, 0xdf6}, {0x9, 0x0, 0x1, 0xfffffd84}, {0x3, 0x476378d3, 0x9, 0x8001}, {0x6b4, 0x10001, 0x445, 0xa97f}, {0x8, 0x1, 0x2}, {0x5, 0x2, 0x800, 0x6}, {0x5, 0xf95, 0x9d9, 0x4}, {0x400, 0x5, 0x0, 0x4}, {0x33, 0x1793, 0xfffffffc, 0x800}, {0x2, 0x1, 0x5, 0x5}, {0x8, 0x1, 0x1cb8, 0x80}, {0x8, 0xfffffffb, 0x4, 0x3}, {0x8, 0xd, 0x10001, 0x60}, {0xfffff000, 0xffff0001, 0x2, 0xfffff83a}, {0x5, 0x2, 0x8, 0x3}, {0xffff8a0f, 0x4, 0x3, 0x80000000}, {0x0, 0x10, 0x3, 0x4}, {0x7f, 0x0, 0x2, 0x5}, {0xfff, 0xfffffffb, 0x4, 0xf}, {0x3, 0x5, 0x14a0}, {0xb, 0x3, 0x80000000, 0x8}, {0x5, 0x5, 0xfffffff8, 0x5}, {0x9, 0x6, 0x5, 0x7}, {0x4, 0x7, 0xfffffffd, 0x44}, {0x2, 0x40000000, 0x2, 0x7}, {0x1, 0xe, 0x7, 0x2}, {0x400, 0xffffffff, 0x5, 0x2}, {0xf7, 0x19, 0x8, 0x7}, {0x6, 0x1ff, 0x80000001, 0x9}, {0x200, 0xbd37, 0x3, 0x200}, {0xff, 0x4, 0x4, 0x3}, {0x9, 0x1, 0x1, 0x2}, {0xffff, 0x9, 0x6, 0x10000}, {0x2, 0x8, 0xffff8000, 0x6}, {0x7, 0x2, 0x8}, {0x7, 0x1, 0x7, 0x5}, {0x9f3, 0x3, 0x8911, 0x9}, {0x9, 0x100, 0x4, 0x8}, {0xfff, 0xd7e1, 0x3c4c, 0x1}, {0x5, 0x6, 0x8, 0xff}, {0x9, 0x0, 0xa3, 0x1}, {0x2, 0x4, 0xffff, 0x8001}, {0x3, 0x0, 0x100, 0x6a}, {0x4, 0x9, 0x2b, 0x8001}, {0x3, 0x6d6, 0x7115770, 0x1000}, {0x10001, 0x4, 0x94}, {0xa60e, 0xac2, 0x2, 0x80000001}, {0x9, 0x7, 0x3, 0x1}, {0x5, 0x7ff, 0x1, 0xd}, {0x6, 0x46, 0x8, 0x3}, {0x1000, 0xb, 0x3, 0x800}, {0x0, 0xfffffffb, 0x80000000, 0x101}, {0x80, 0x7f0, 0x5, 0x4}, {0xd, 0x7, 0x7, 0x9}, {0x5d02, 0x0, 0x6, 0x400}, {0xa563, 0x7, 0x7, 0xffffff73}, {0x22, 0x6, 0x80000000, 0x8}, {0x9, 0x7, 0xffff, 0xe35}, {0x4, 0x9, 0x9, 0x9806}, {0xfff, 0x8}, {0x8000, 0x8, 0xfff, 0x74f}, {0x81, 0x0, 0x1, 0x27}, {0x80000000, 0x4ee4a205, 0x8, 0xe6d}, {0x9, 0x1, 0x3, 0x3ff}, {0xff, 0x101, 0x401, 0x7fff}, {0xffff, 0x0, 0x2, 0x7fff}, {0xb8b0, 0x6, 0x4, 0x6}, {0x80000001, 0x9, 0x6, 0x2}]}}, @TCA_U32_FLAGS={0x8}, @TCA_U32_FLAGS={0x8}, @TCA_U32_LINK={0x8, 0x3, 0x1}, @TCA_U32_POLICE={0x90, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1ff, 0x5, 0x8, 0x3, 0x4, {0x89, 0x1, 0xfff, 0x5, 0x22b, 0xd}, {0x0, 0x1, 0x9, 0x9, 0x1, 0x9b}, 0x5, 0x3ff, 0x1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x6, 0x0, 0x38, 0x8, {0xfb, 0x2, 0x75d, 0x5, 0x5, 0xf}, {0xa9, 0x0, 0x2, 0x6, 0x5, 0x4}, 0xb, 0x2876, 0x9}}]}]}}]}, 0xda0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r14, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xb4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r16)
socket$unix(0x1, 0x5, 0x0)

158.144357ms ago: executing program 5 (id=1114):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
socket$inet6_sctp(0xa, 0x5, 0x84)
recvmsg$inet_nvme(r0, 0x0, 0x1)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='environ\x00')
execve(&(0x7f0000000300)='./mnt\x00', &(0x7f0000000580)={[&(0x7f0000000540)='\x06*^(\xfa^!]\\-:\x00']}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x1008c10, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER(r3, 0x0, 0x4040)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
pwrite64(r4, &(0x7f0000000000)="ff", 0x58200, 0xfb2200)
write$cgroup_pid(r4, &(0x7f0000000480), 0x12)
pread64(r2, 0x0, 0x0, 0x4)
write$fb(r2, &(0x7f00000001c0)="e83a8bc17394c340e6f05e716934f36b529f95d86d27fcf35fb7cac8483986e0174a74efe3cf6b6fef9f27884803614a3bcca29d533d2335ede51821905a6a595c59f55e650fa5a13d223f17085656ccc119d313b5e4c8cdb62c02c122c513ace621268e179ddd40e86379914d30b23b205fec1eca456d1cffc40ff01095ba2d1dbd715cc9e1a6c219f40998955ccb7b14d6b0f1b6c456a9911f23dd484784684c24809288b87cbc2bae7525e33dbe520f62e036e796f6ab42b54d0a2e172aae8a3f", 0xc2)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)

99.61792ms ago: executing program 5 (id=1115):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002b80)=@delchain={0x3e8, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x6, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x3bc, 0x2, [@TCA_BPF_ACT={0x3b8, 0x1, [@m_bpf={0xb4, 0x11, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x65, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0x10c, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xe2, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xc4, 0x8, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0xa3b7, 0x9, 0xb, 0x7}]}]}, {0x7d, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x130, 0x17, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "af48b6deba1f74c21e05d954368ebb96"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0xea, 0x6, "22be5921dd8ffc6b373a7e862d290c42d830be2696b1dfd40719b5ab8fb21e290e16fbf7a0cd4e12f562bf5624c97ed711692abeaaf54fe2fe93a28c2c262c2d5373741536b93deedde69cfbba1b30503dcb93cb6a4b61bfea2d711793df7602b4ae19588d0e37ecd762381e0dd4a601c8ffafb283eaeaf177f772ea68344ae4b7c664cae0162c1ffe58212a0062b5b0a60c226d67f136a502cd8340af67087af3cec112bf9243b46d4c7a7e0345bf8c100c6ce9bc0848976d13ae07fdee5e847473c1aaca815cd7687606f6b6b849007a6f22db607fe613b8d93fb047ffebd74881705d261d"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xd4)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0xfffffffffffffedd}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3daa1ea3000000005d95ab71cc16e3ded13584c763e48af471ec58cd0a963c42f54ee4158f0ada085c718cdda31573150654ee5379f4a11f674ce482fb58520a0aa11cb2ad1c2bd616a01f63eedfdfb52d9c920f269e16baa7d95d04bfd8508d88fc98182e9c58fae08799fc5bf00b739a8965f99bc8de8e3bc5184a9b", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',version=9p2000,\x00'])
r6 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000004540)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000006580)={0x50, 0x0, r7, {0x7, 0x2d, 0x8, 0x800, 0xfffe, 0x5, 0x4, 0x8000, 0x0, 0x0, 0x10, 0x3}}, 0x50)
write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r4, @ANYRESHEX=r5], 0x15)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
eventfd2(0x10, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r10, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500070000001400040073"], 0x58}}, 0x0)
close(0x3)
r11 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2)
ioctl$VIDIOC_G_FMT(r11, 0xc0cc5604, &(0x7f0000000080)={0xb, @pix_mp={0x4, 0x0, 0x0, 0x0, 0x0, [{0x81}, {}, {0x8}, {}, {}, {}, {}, {0xfffffffd}], 0x0, 0x0, 0x4}})
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000040)=0x80000001, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000000)={0x0, 0x0}, 0x10)

341.877µs ago: executing program 5 (id=1116):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x6fe, 0x0, 0x0)

0s ago: executing program 5 (id=1117):
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl(r1, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='sockfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/rfcomm0\x00', 0x802, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x40000000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)
syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioperm(0x0, 0x6, 0x8000000000004)
write$tun(r2, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0xfffe, 0x3, 0x9, 0x9}, @ipv6=@generic={0x7, 0x6, "9fd60f", 0x96, 0x2b, 0x1, @private1, @ipv4={'\x00', '\xff\xff', @multicast1}, {[], "780464b426696554ae3f702b079ba0cb2a3d656a7e098c52ffa59553f58ceae1af76da2712a959278b246fad1383882d510fdb742de0c93da8925f0d8d5a2e63f1c593d8e94707a77d1ef3bf4d625c971b94ad168ab3161b2ce1c61ddb6bd7cb8603b54c8e8716817f4e7f8be0798f7cfb798e985b54b88193bb337984b2c828ce25d6e8c3a50d4f132366be8d8a93961c3e1ab5005c"}}}, 0xc8)
ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000040))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000000480)='usbip-vudc.0', 0xc)

kernel console output (not intermixed with test programs):

ad+0x49e/0x2ab0
[  129.883285][ T8365]  ? __sys_bpf+0x1f46/0x4a30
[  129.883297][ T8365]  ? __ia32_sys_bpf+0xcc/0x170
[  129.883309][ T8365]  ? __do_fast_syscall_32+0x13a/0x8b0
[  129.883320][ T8365]  ? do_fast_syscall_32+0x32/0x70
[  129.883333][ T8365]  alloc_pages_bulk_noprof+0x5e1/0x13c0
[  129.883351][ T8365]  ? policy_nodemask+0xed/0x4f0
[  129.883369][ T8365]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[  129.883392][ T8365]  __kasan_populate_vmalloc+0xf0/0x210
[  129.883410][ T8365]  alloc_vmap_area+0x95d/0x2bb0
[  129.883429][ T8365]  ? kasan_save_track+0x14/0x30
[  129.883444][ T8365]  ? __kasan_kmalloc+0xaa/0xb0
[  129.883459][ T8365]  ? __pfx_alloc_vmap_area+0x10/0x10
[  129.883476][ T8365]  ? __get_vm_area_node+0x124/0x350
[  129.883494][ T8365]  __get_vm_area_node+0x1ed/0x350
[  129.883513][ T8365]  __vmalloc_node_range_noprof+0x268/0x1420
[  129.883531][ T8365]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  129.883547][ T8365]  ? process_measurement+0x4c8/0x2350
[  129.883565][ T8365]  ? down_write+0x146/0x1f0
[  129.883577][ T8365]  ? up_write+0x2dc/0x5b0
[  129.883589][ T8365]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  129.883608][ T8365]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  129.883625][ T8365]  ? __lock_acquire+0x5c0/0x1f40
[  129.883647][ T8365]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  129.883662][ T8365]  __vmalloc_node_noprof+0xad/0xf0
[  129.883680][ T8365]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  129.883698][ T8365]  __vmalloc_noprof+0xa3/0x120
[  129.883708][ T8365]  ? __pfx___vmalloc_noprof+0x10/0x10
[  129.883718][ T8365]  ? lock_acquire+0x1d1/0x380
[  129.883733][ T8365]  ? is_bpf_text_address+0x25/0x1a0
[  129.883750][ T8365]  ? rcu_is_watching+0x13/0xc0
[  129.883763][ T8365]  ? apparmor_capable+0x1d7/0x4d0
[  129.883776][ T8365]  bpf_prog_alloc_no_stats+0x58/0x690
[  129.883802][ T8365]  ? security_capable+0x80/0x260
[  129.883823][ T8365]  bpf_prog_alloc+0x3b/0x200
[  129.883838][ T8365]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  129.883856][ T8365]  bpf_prog_load+0x49e/0x2ab0
[  129.883872][ T8365]  ? __lock_acquire+0x5c0/0x1f40
[  129.883891][ T8365]  ? __pfx_bpf_prog_load+0x10/0x10
[  129.883919][ T8365]  __sys_bpf+0x1f46/0x4a30
[  129.883936][ T8365]  ? __pfx___sys_bpf+0x10/0x10
[  129.883948][ T8365]  ? lock_acquire+0x1d1/0x380
[  129.883963][ T8365]  ? get_pid_task+0x2a/0x250
[  129.883976][ T8365]  ? find_held_lock+0x2b/0x80
[  129.883988][ T8365]  ? get_pid_task+0xfc/0x250
[  129.884000][ T8365]  ? get_pid_task+0xfc/0x250
[  129.884015][ T8365]  ? proc_fail_nth_write+0x9f/0x220
[  129.884029][ T8365]  ? find_held_lock+0x2b/0x80
[  129.884045][ T8365]  ? rcu_read_lock_any_held+0x6a/0x90
[  129.884059][ T8365]  ? find_held_lock+0x2b/0x80
[  129.884071][ T8365]  ? ksys_write+0x190/0x250
[  129.884085][ T8365]  ? ksys_write+0x190/0x250
[  129.884098][ T8365]  ? lock_acquire+0x1d1/0x380
[  129.884123][ T8365]  ? fput+0x7c/0x100
[  129.884141][ T8365]  ? __ia32_sys_bpf+0xcc/0x170
[  129.884153][ T8365]  __ia32_sys_bpf+0xcc/0x170
[  129.884167][ T8365]  ? __do_fast_syscall_32+0xb3/0x8b0
[  129.884178][ T8365]  __do_fast_syscall_32+0x13a/0x8b0
[  129.884191][ T8365]  ? lockdep_hardirqs_on+0x7d/0x110
[  129.884208][ T8365]  do_fast_syscall_32+0x32/0x70
[  129.884219][ T8365]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  129.884233][ T8365] RIP: 0023:0xf73fefec
[  129.884250][ T8365] Code: Unable to access opcode bytes at 0xf73fefc2.
[  129.884255][ T8365] RSP: 002b:00000000f53d450c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  129.884266][ T8365] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800054c0
[  129.884273][ T8365] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000
[  129.884280][ T8365] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  129.884286][ T8365] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  129.884292][ T8365] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  129.884306][ T8365]  </TASK>
[  129.884365][ T8365] syz.5.627: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  129.884401][ T8365] CPU: 2 UID: 0 PID: 8365 Comm: syz.5.627 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  129.884428][ T8365] Tainted: [L]=SOFTLOCKUP
[  129.884432][ T8365] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  129.884438][ T8365] Call Trace:
[  129.884442][ T8365]  <TASK>
[  129.884446][ T8365]  dump_stack_lvl+0x100/0x190
[  129.884462][ T8365]  warn_alloc.cold+0x9e/0xb2
[  129.884475][ T8365]  ? __pfx_warn_alloc+0x10/0x10
[  129.884487][ T8365]  ? lockdep_hardirqs_on+0x7d/0x110
[  129.884505][ T8365]  ? __get_vm_area_node+0x2f0/0x350
[  129.884524][ T8365]  ? __get_vm_area_node+0x22b/0x350
[  129.884543][ T8365]  __vmalloc_node_range_noprof+0xfa2/0x1420
[  129.884561][ T8365]  ? process_measurement+0x4c8/0x2350
[  129.884578][ T8365]  ? down_write+0x146/0x1f0
[  129.884590][ T8365]  ? up_write+0x2dc/0x5b0
[  129.884601][ T8365]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  129.884620][ T8365]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  129.884638][ T8365]  ? __lock_acquire+0x5c0/0x1f40
[  129.884659][ T8365]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  129.884675][ T8365]  __vmalloc_node_noprof+0xad/0xf0
[  129.884692][ T8365]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  129.884710][ T8365]  __vmalloc_noprof+0xa3/0x120
[  129.884720][ T8365]  ? __pfx___vmalloc_noprof+0x10/0x10
[  129.884730][ T8365]  ? lock_acquire+0x1d1/0x380
[  129.884745][ T8365]  ? is_bpf_text_address+0x25/0x1a0
[  129.884763][ T8365]  ? rcu_is_watching+0x13/0xc0
[  129.884775][ T8365]  ? apparmor_capable+0x1d7/0x4d0
[  129.884787][ T8365]  bpf_prog_alloc_no_stats+0x58/0x690
[  129.884803][ T8365]  ? security_capable+0x80/0x260
[  129.884821][ T8365]  bpf_prog_alloc+0x3b/0x200
[  129.884836][ T8365]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  129.884853][ T8365]  bpf_prog_load+0x49e/0x2ab0
[  129.884870][ T8365]  ? __lock_acquire+0x5c0/0x1f40
[  129.884888][ T8365]  ? __pfx_bpf_prog_load+0x10/0x10
[  129.884917][ T8365]  __sys_bpf+0x1f46/0x4a30
[  129.884934][ T8365]  ? __pfx___sys_bpf+0x10/0x10
[  129.884946][ T8365]  ? lock_acquire+0x1d1/0x380
[  129.884961][ T8365]  ? get_pid_task+0x2a/0x250
[  129.884973][ T8365]  ? find_held_lock+0x2b/0x80
[  129.884985][ T8365]  ? get_pid_task+0xfc/0x250
[  129.884997][ T8365]  ? get_pid_task+0xfc/0x250
[  129.885012][ T8365]  ? proc_fail_nth_write+0x9f/0x220
[  129.885026][ T8365]  ? find_held_lock+0x2b/0x80
[  129.885042][ T8365]  ? rcu_read_lock_any_held+0x6a/0x90
[  129.885055][ T8365]  ? find_held_lock+0x2b/0x80
[  129.885068][ T8365]  ? ksys_write+0x190/0x250
[  129.885081][ T8365]  ? ksys_write+0x190/0x250
[  129.885094][ T8365]  ? lock_acquire+0x1d1/0x380
[  129.885120][ T8365]  ? fput+0x7c/0x100
[  129.885137][ T8365]  ? __ia32_sys_bpf+0xcc/0x170
[  129.885150][ T8365]  __ia32_sys_bpf+0xcc/0x170
[  129.885164][ T8365]  ? __do_fast_syscall_32+0xb3/0x8b0
[  129.885175][ T8365]  __do_fast_syscall_32+0x13a/0x8b0
[  129.885199][ T8365]  ? lockdep_hardirqs_on+0x7d/0x110
[  129.885216][ T8365]  do_fast_syscall_32+0x32/0x70
[  129.885227][ T8365]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  129.885247][ T8365] RIP: 0023:0xf73fefec
[  129.885257][ T8365] Code: Unable to access opcode bytes at 0xf73fefc2.
[  129.885262][ T8365] RSP: 002b:00000000f53d450c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  129.885272][ T8365] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800054c0
[  129.885279][ T8365] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000
[  129.885285][ T8365] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  129.885291][ T8365] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  129.885297][ T8365] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  129.885311][ T8365]  </TASK>
[  129.885484][ T8365] Mem-Info:
[  129.885490][ T8365] active_anon:7335 inactive_anon:5187 isolated_anon:0
[  129.885490][ T8365]  active_file:5114 inactive_file:21361 isolated_file:0
[  129.885490][ T8365]  unevictable:1000 dirty:478 writeback:0
[  129.885490][ T8365]  slab_reclaimable:6160 slab_unreclaimable:57754
[  129.885490][ T8365]  mapped:26923 shmem:4022 pagetables:1334
[  129.885490][ T8365]  sec_pagetables:309 bounce:0
[  129.885490][ T8365]  kernel_misc_reclaimable:0
[  129.885490][ T8365]  free:45020 free_pcp:15765 free_cma:0
[  129.885517][ T8365] Node 0 active_anon:128kB inactive_anon:4kB active_file:32kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:12kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8288kB pagetables:1196kB sec_pagetables:1104kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  129.885544][ T8365] Node 1 active_anon:29212kB inactive_anon:20744kB active_file:20424kB inactive_file:85444kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:107664kB dirty:1900kB writeback:0kB shmem:16088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:6588kB pagetables:4140kB sec_pagetables:132kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  129.885571][ T8365] Node 0 DMA free:1804kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:572kB local_pcp:84kB free_cma:0kB
[  129.885600][ T8365] lowmem_reserve[]: 0 259 259 259 259
[  129.885618][ T8365] Node 0 DMA32 free:22396kB boost:26328kB min:38032kB low:40956kB high:43880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:128kB inactive_anon:4kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:8kB zspages:4kB present:1032196kB managed:265388kB mlocked:0kB bounce:0kB free_pcp:3580kB local_pcp:1380kB free_cma:0kB
[  129.885647][ T8365] lowmem_reserve[]: 0 0 0 0 0
[  129.885683][ T8365] Node 1 DMA32 free:155880kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:29212kB inactive_anon:20744kB active_file:20424kB inactive_file:85444kB unevictable:4000kB writepending:1900kB zspages:2536kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:58908kB local_pcp:12924kB free_cma:0kB
[  129.885713][ T8365] lowmem_reserve[]: 0 0 0 0 0
[  129.885730][ T8365] Node 0 DMA: 91*4kB (UM) 14*8kB (UM) 5*16kB (UM) 1*32kB (M) 9*64kB (UM) 1*128kB (M) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1804kB
[  129.885833][ T8365] Node 0 DMA32: 435*4kB (UME) 172*8kB (UME) 81*16kB (UM) 160*32kB (UME) 57*64kB (UME) 24*128kB (UME) 8*256kB (UM) 8*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 22396kB
[  129.885906][ T8365] Node 1 DMA32: 1*4kB (M) 3*8kB (UME) 15*16kB (E) 66*32kB (UME) 193*64kB (UME) 148*128kB (UME) 93*256kB (UME) 82*512kB (UME) 27*1024kB (UME) 6*2048kB (UME) 4*4096kB (M) = 155788kB
[  129.885986][ T8365] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  129.885994][ T8365] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  129.886002][ T8365] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  129.886010][ T8365] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  129.886018][ T8365] 31207 total pagecache pages
[  129.886022][ T8365] 712 pages in swap cache
[  129.886025][ T8365] Free swap  = 117456kB
[  129.886029][ T8365] Total swap = 124996kB
[  129.886033][ T8365] 524155 pages RAM
[  129.886037][ T8365] 0 pages HighMem/MovableOnly
[  129.886040][ T8365] 216916 pages reserved
[  129.886044][ T8365] 0 pages cma reserved
[  130.448749][ T8375] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  130.448766][ T8375] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  130.448870][ T8375] vhci_hcd vhci_hcd.0: Device attached
[  130.449442][ T8378] usbip_core: unknown command
[  130.449449][ T8378] vhci_hcd: unknown pdu 0
[  130.449453][ T8378] usbip_core: unknown command
[  130.452763][ T5812] vhci_hcd vhci_hcd.0: stop threads
[  130.452825][ T5812] vhci_hcd vhci_hcd.0: release socket
[  130.452886][ T5812] vhci_hcd vhci_hcd.0: disconnect device
[  131.296638][ T5096] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  131.454873][ T5096] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  131.454928][ T5096] Bluetooth: hci2: Injecting HCI hardware error event
[  131.456091][ T5738] Bluetooth: hci2: hardware error 0x00
[  131.673775][ T8404] syz.5.637 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  131.673799][ T8404] CPU: 0 UID: 0 PID: 8404 Comm: syz.5.637 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  131.673815][ T8404] Tainted: [L]=SOFTLOCKUP
[  131.673820][ T8404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  131.673827][ T8404] Call Trace:
[  131.673831][ T8404]  <TASK>
[  131.673836][ T8404]  dump_stack_lvl+0x100/0x190
[  131.673856][ T8404]  dump_header+0xfb/0x606
[  131.673871][ T8404]  oom_kill_process.cold+0xd/0x380
[  131.673886][ T8404]  out_of_memory+0x340/0x14f0
[  131.673907][ T8404]  ? __pfx_out_of_memory+0x10/0x10
[  131.673929][ T8404]  mem_cgroup_out_of_memory+0xc6/0x130
[  131.673946][ T8404]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  131.673962][ T8404]  ? find_held_lock+0x2b/0x80
[  131.673978][ T8404]  ? do_raw_spin_unlock+0x145/0x1e0
[  131.673992][ T8404]  ? _raw_spin_unlock+0x28/0x50
[  131.674010][ T8404]  try_charge_memcg+0x783/0xf60
[  131.674026][ T8404]  ? __pfx_try_charge_memcg+0x10/0x10
[  131.674039][ T8404]  ? find_held_lock+0x2b/0x80
[  131.674052][ T8404]  ? rcu_read_unlock+0x17/0x60
[  131.674081][ T8404]  ? rcu_read_unlock+0x17/0x60
[  131.674100][ T8404]  obj_cgroup_charge_pages+0x2b/0x1f0
[  131.674115][ T8404]  __memcg_slab_post_alloc_hook+0x47f/0x10c0
[  131.674134][ T8404]  ? kasan_save_track+0x14/0x30
[  131.674153][ T8404]  kmem_cache_alloc_lru_noprof+0x4f6/0x6a0
[  131.674170][ T8404]  ? __d_alloc+0x35/0xa50
[  131.674191][ T8404]  __d_alloc+0x35/0xa50
[  131.674214][ T8404]  d_alloc+0x4a/0x1e0
[  131.674232][ T8404]  lookup_one_qstr_excl+0x171/0x250
[  131.674246][ T8404]  start_dirop+0x59/0xb0
[  131.674262][ T8404]  simple_start_creating+0xf9/0x110
[  131.674279][ T8404]  ? __pfx_simple_start_creating+0x10/0x10
[  131.674295][ T8404]  ? mntput+0x70/0xa0
[  131.674310][ T8404]  ? simple_pin_fs+0xa3/0x190
[  131.674325][ T8404]  debugfs_start_creating.part.0+0x7b/0x150
[  131.674346][ T8404]  __debugfs_create_file+0xa9/0x500
[  131.674368][ T8404]  debugfs_create_file_full+0x41/0x60
[  131.674389][ T8404]  ref_tracker_dir_debugfs+0x19e/0x2e0
[  131.674404][ T8404]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  131.674432][ T8404]  ? lockdep_init_map_type+0x5c/0x250
[  131.674453][ T8404]  ? __pfx_ieee802154_if_setup+0x10/0x10
[  131.674467][ T8404]  alloc_netdev_mqs+0x314/0x15c0
[  131.674485][ T8404]  ieee802154_if_add+0xe2/0x10e0
[  131.674502][ T8404]  ? __pfx_ieee802154_if_add+0x10/0x10
[  131.674518][ T8404]  ? __pfx___nla_validate_parse+0x10/0x10
[  131.674536][ T8404]  ? rcu_is_watching+0x13/0xc0
[  131.674551][ T8404]  ? __dev_get_by_index+0x102/0x140
[  131.674570][ T8404]  ? nl802154_pre_doit+0x398/0xd10
[  131.674588][ T8404]  ieee802154_add_iface+0x44/0x90
[  131.674600][ T8404]  nl802154_new_interface+0x2d5/0x550
[  131.674616][ T8404]  genl_family_rcv_msg_doit+0x214/0x300
[  131.674632][ T8404]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  131.674645][ T8404]  ? genl_get_cmd+0x3e7/0x760
[  131.674662][ T8404]  ? bpf_lsm_capable+0x9/0x10
[  131.674674][ T8404]  ? security_capable+0x80/0x260
[  131.674695][ T8404]  genl_rcv_msg+0x560/0x800
[  131.674711][ T8404]  ? __pfx_genl_rcv_msg+0x10/0x10
[  131.674724][ T8404]  ? __lock_acquire+0x5c0/0x1f40
[  131.674745][ T8404]  ? __pfx_nl802154_pre_doit+0x10/0x10
[  131.674759][ T8404]  ? __pfx_nl802154_new_interface+0x10/0x10
[  131.674772][ T8404]  ? __pfx_nl802154_post_doit+0x10/0x10
[  131.674786][ T8404]  ? __lock_acquire+0x5c0/0x1f40
[  131.674807][ T8404]  netlink_rcv_skb+0x159/0x420
[  131.674818][ T8404]  ? __pfx_genl_rcv_msg+0x10/0x10
[  131.674832][ T8404]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  131.674851][ T8404]  ? netlink_deliver_tap+0x1ae/0xcc0
[  131.674872][ T8404]  genl_rcv+0x28/0x40
[  131.674883][ T8404]  netlink_unicast+0x585/0x850
[  131.674897][ T8404]  ? __pfx_netlink_unicast+0x10/0x10
[  131.674908][ T8404]  ? aa_sk_perm+0x389/0xab0
[  131.674925][ T8404]  netlink_sendmsg+0x8b0/0xda0
[  131.674940][ T8404]  ? __pfx_netlink_sendmsg+0x10/0x10
[  131.674953][ T8404]  ? apparmor_socket_sendmsg+0x165/0x280
[  131.674975][ T8404]  ____sys_sendmsg+0xa4d/0xbe0
[  131.674991][ T8404]  ? __pfx_netlink_sendmsg+0x10/0x10
[  131.675004][ T8404]  ? __pfx_____sys_sendmsg+0x10/0x10
[  131.675023][ T8404]  ? plist_check_list+0x1b8/0x280
[  131.675037][ T8404]  ? plist_del+0x308/0x510
[  131.675053][ T8404]  ___sys_sendmsg+0x190/0x1e0
[  131.675071][ T8404]  ? __pfx____sys_sendmsg+0x10/0x10
[  131.675089][ T8404]  ? futex_wake+0x220/0x5e0
[  131.675111][ T8404]  ? find_held_lock+0x2b/0x80
[  131.675134][ T8404]  __sys_sendmsg+0x160/0x210
[  131.675148][ T8404]  ? __pfx___sys_sendmsg+0x10/0x10
[  131.675170][ T8404]  __do_fast_syscall_32+0x13a/0x8b0
[  131.675181][ T8404]  ? lockdep_hardirqs_on+0x7d/0x110
[  131.675199][ T8404]  do_fast_syscall_32+0x32/0x70
[  131.675211][ T8404]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  131.675226][ T8404] RIP: 0023:0xf73fefec
[  131.675239][ T8404] Code: Unable to access opcode bytes at 0xf73fefc2.
[  131.675245][ T8404] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  131.675256][ T8404] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800017c0
[  131.675263][ T8404] RDX: 0000000004044084 RSI: 0000000000000000 RDI: 0000000000000000
[  131.675270][ T8404] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  131.675277][ T8404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  131.675283][ T8404] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  131.675299][ T8404]  </TASK>
[  131.826203][ T8404] memory: usage 96kB, limit 96kB, failcnt 51
[  131.826218][ T8404] memory+swap: usage 100kB, limit 9007199254740988kB, failcnt 0
[  131.826226][ T8404] kmem: usage 92kB, limit 9007199254740988kB, failcnt 0
[  131.826232][ T8404] Memory cgroup stats for /syz5/test:
[  131.826331][ T8404] cache 0
[  131.826336][ T8404] rss 0
[  131.826340][ T8404] rss_huge 0
[  131.826344][ T8404] shmem 0
[  131.826348][ T8404] mapped_file 0
[  131.826352][ T8404] dirty 0
[  131.826355][ T8404] writeback 0
[  131.826945][ T8404] workingset_refault_anon 0
[  131.826953][ T8404] workingset_refault_file 0
[  131.826958][ T8404] swap 0
[  131.826961][ T8404] swapcached 0
[  131.826965][ T8404] pgpgin 0
[  131.826969][ T8404] pgpgout 0
[  131.826973][ T8404] pgfault 0
[  131.826976][ T8404] pgmajfault 0
[  131.826981][ T8404] inactive_anon 0
[  131.826985][ T8404] active_anon 0
[  131.826989][ T8404] inactive_file 0
[  131.826992][ T8404] active_file 0
[  131.826996][ T8404] unevictable 0
[  131.827000][ T8404] hierarchical_memory_limit 98304
[  131.827005][ T8404] hierarchical_memsw_limit 9223372036854771712
[  131.827010][ T8404] total_cache 0
[  131.827014][ T8404] total_rss 0
[  131.827018][ T8404] total_rss_huge 0
[  131.827022][ T8404] total_shmem 0
[  131.827026][ T8404] total_mapped_file 0
[  131.827030][ T8404] total_dirty 0
[  131.827034][ T8404] total_writeback 0
[  131.827039][ T8404] total_workingset_refault_anon 0
[  131.827043][ T8404] total_workingset_refault_file 0
[  131.827048][ T8404] total_swap 0
[  131.827052][ T8404] total_swapcached 0
[  131.827056][ T8404] total_pgpgin 0
[  131.827060][ T8404] total_pgpgout 0
[  131.827064][ T8404] total_pgfault 0
[  131.827068][ T8404] total_pgmajfault 0
[  131.827072][ T8404] total_inactive_anon 0
[  131.827076][ T8404] total_active_anon 0
[  131.827080][ T8404] total_inactive_file 0
[  131.827084][ T8404] total_active_file 0
[  131.827088][ T8404] total_unevictable 0
[  131.827092][ T8404] anon_cost 0
[  131.827096][ T8404] file_cost 0
[  131.827101][ T8404] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.637,pid=8403,uid=0
[  131.827283][ T8404] Memory cgroup out of memory: Killed process 8403 (syz.5.637) total-vm:102036kB, anon-rss:1304kB, file-rss:23784kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000
[  132.335953][ T5096] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  132.336254][ T5096] Bluetooth: hci4: Injecting HCI hardware error event
[  132.339257][ T5743] Bluetooth: hci4: hardware error 0x00
[  132.348080][ T1436] ieee802154 phy0 wpan0: encryption failed: -22
[  132.348125][ T1436] ieee802154 phy1 wpan1: encryption failed: -22
[  132.737949][ T8441] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.877491][ T8458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.650'.
[  133.009441][   T44] audit: type=1326 audit(1791548273.197:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.4.659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  133.012090][   T44] audit: type=1326 audit(1791548273.197:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.4.659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  133.013243][   T44] audit: type=1326 audit(1791548273.197:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.4.659" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  133.013281][   T44] audit: type=1326 audit(1791548273.197:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.4.659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  133.013308][   T44] audit: type=1326 audit(1791548273.197:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.4.659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  133.021861][   T44] audit: type=1326 audit(1791548273.207:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.4.659" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  133.021901][   T44] audit: type=1326 audit(1791548273.207:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.4.659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  133.021935][   T44] audit: type=1326 audit(1791548273.207:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.4.659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  133.022423][   T44] audit: type=1326 audit(1791548273.207:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.4.659" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  133.022458][   T44] audit: type=1326 audit(1791548273.207:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.4.659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  133.584933][ T5738] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  134.134053][ T8525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.666'.
[  134.237535][ T8537] netlink: 24 bytes leftover after parsing attributes in process `syz.5.670'.
[  134.427886][ T5743] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  135.635003][ T8560] netlink: 48 bytes leftover after parsing attributes in process `syz.2.674'.
[  136.524180][   T35] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  136.677949][ T8591] fuse: Bad value for 'fd'
[  136.686493][   T35] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  136.687307][   T35] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  136.687322][   T35] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  136.688588][   T35] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  136.688600][   T35] usb 10-1: SerialNumber: syz
[  136.691640][ T8585] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  136.822570][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.685'.
[  136.903051][ T8585] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  137.167397][ T8596] FAULT_INJECTION: forcing a failure.
[  137.167397][ T8596] name failslab, interval 1, probability 0, space 0, times 0
[  137.167419][ T8596] CPU: 0 UID: 0 PID: 8596 Comm: syz.2.687 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  137.167436][ T8596] Tainted: [L]=SOFTLOCKUP
[  137.167441][ T8596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  137.167449][ T8596] Call Trace:
[  137.167454][ T8596]  <TASK>
[  137.167459][ T8596]  dump_stack_lvl+0x100/0x190
[  137.167479][ T8596]  should_fail_ex.cold+0x5/0xa
[  137.167495][ T8596]  should_failslab+0xc2/0x120
[  137.167514][ T8596]  __kmalloc_cache_noprof+0x91/0x6d0
[  137.167530][ T8596]  ? gfs2_init_fs_context+0x47/0x400
[  137.167551][ T8596]  gfs2_init_fs_context+0x47/0x400
[  137.167569][ T8596]  alloc_fs_context+0x60c/0xf40
[  137.167584][ T8596]  path_mount+0xdbd/0x24c0
[  137.167597][ T8596]  ? __pfx_path_mount+0x10/0x10
[  137.167607][ T8596]  ? lockdep_hardirqs_on+0x7d/0x110
[  137.167626][ T8596]  ? putname+0xb1/0x110
[  137.167641][ T8596]  ? kmem_cache_free+0x127/0x6c0
[  137.167659][ T8596]  ? __ia32_sys_mount+0x292/0x310
[  137.167669][ T8596]  __ia32_sys_mount+0x292/0x310
[  137.167680][ T8596]  ? __pfx___ia32_sys_mount+0x10/0x10
[  137.167695][ T8596]  __do_fast_syscall_32+0x13a/0x8b0
[  137.167708][ T8596]  do_fast_syscall_32+0x32/0x70
[  137.167719][ T8596]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  137.167735][ T8596] RIP: 0023:0xf745efec
[  137.167749][ T8596] Code: Unable to access opcode bytes at 0xf745efc2.
[  137.167754][ T8596] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015
[  137.167765][ T8596] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 00000000800001c0
[  137.167779][ T8596] RDX: 0000000080000680 RSI: 0000000000200000 RDI: 00000000800006c0
[  137.167786][ T8596] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  137.167794][ T8596] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  137.167801][ T8596] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  137.167816][ T8596]  </TASK>
[  137.188372][ T8596] 9p: Bad value for 'wfdno'
[  137.409038][   T35] cdc_ether 10-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42
[  137.849974][ T6073] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  137.858665][ T8585] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  137.913182][ T8624] netlink: 6136 bytes leftover after parsing attributes in process `syz.0.693'.
[  138.062835][ T3263] usb 10-1: USB disconnect, device number 3
[  138.067000][ T3263] cdc_ether 10-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device
[  138.290050][ T8640] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  138.293436][ T8642] futex_wake_op: syz.4.697 tries to shift op by 144; fix this program
[  138.341331][ T8642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.697'.
[  138.373272][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.701'.
[  138.509772][ T8673] Device name cannot be null; rc = [-22]
[  138.510575][ T8672] Device name cannot be null; rc = [-22]
[  138.511509][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.706'.
[  139.156827][ T8696] 9p: Bad value for 'rfdno'
[  139.157498][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.713'.
[  139.475110][ T5881] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  139.626931][ T5881] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  139.627967][ T5881] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  139.627990][ T5881] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  139.629642][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  139.629662][ T5881] usb 7-1: SerialNumber: syz
[  139.658584][ T8702] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  139.856084][ T8718] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size.
[  139.863784][ T8702] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  139.978775][ T8723] netlink: 20 bytes leftover after parsing attributes in process `syz.4.723'.
[  140.513333][ T5881] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42
[  140.571780][ T8736] FAULT_INJECTION: forcing a failure.
[  140.571780][ T8736] name failslab, interval 1, probability 0, space 0, times 0
[  140.571801][ T8736] CPU: 3 UID: 0 PID: 8736 Comm: syz.5.728 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  140.571817][ T8736] Tainted: [L]=SOFTLOCKUP
[  140.571821][ T8736] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  140.571827][ T8736] Call Trace:
[  140.571831][ T8736]  <TASK>
[  140.571836][ T8736]  dump_stack_lvl+0x100/0x190
[  140.571855][ T8736]  should_fail_ex.cold+0x5/0xa
[  140.571870][ T8736]  should_failslab+0xc2/0x120
[  140.571888][ T8736]  __kmalloc_noprof+0xfc/0x840
[  140.571902][ T8736]  ? lockdep_init_map_type+0x5c/0x250
[  140.571921][ T8736]  ? nft_trans_alloc+0x1d/0x2d0
[  140.571935][ T8736]  nft_trans_alloc+0x1d/0x2d0
[  140.571946][ T8736]  nf_tables_newtable+0x1363/0x1a90
[  140.571965][ T8736]  ? __pfx_nf_tables_newtable+0x10/0x10
[  140.571978][ T8736]  ? net_generic+0x25/0x2a0
[  140.571995][ T8736]  ? __nla_parse+0x40/0x60
[  140.572012][ T8736]  nfnetlink_rcv_batch+0x1410/0x2880
[  140.572034][ T8736]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[  140.572049][ T8736]  ? find_held_lock+0x2b/0x80
[  140.572063][ T8736]  ? __local_bh_enable_ip+0xa5/0x120
[  140.572081][ T8736]  ? lockdep_hardirqs_on+0x7d/0x110
[  140.572098][ T8736]  ? __dev_queue_xmit+0xa60/0x4a40
[  140.572134][ T8736]  ? __nla_parse+0x40/0x60
[  140.572151][ T8736]  nfnetlink_rcv+0x3bd/0x440
[  140.572165][ T8736]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  140.572183][ T8736]  netlink_unicast+0x585/0x850
[  140.572196][ T8736]  ? __pfx_netlink_unicast+0x10/0x10
[  140.572211][ T8736]  netlink_sendmsg+0x8b0/0xda0
[  140.572225][ T8736]  ? __pfx_netlink_sendmsg+0x10/0x10
[  140.572237][ T8736]  ? apparmor_socket_sendmsg+0x165/0x280
[  140.572258][ T8736]  ____sys_sendmsg+0xa4d/0xbe0
[  140.572273][ T8736]  ? __pfx_netlink_sendmsg+0x10/0x10
[  140.572285][ T8736]  ? __pfx_____sys_sendmsg+0x10/0x10
[  140.572306][ T8736]  ___sys_sendmsg+0x190/0x1e0
[  140.572324][ T8736]  ? __pfx____sys_sendmsg+0x10/0x10
[  140.572360][ T8736]  ? find_held_lock+0x2b/0x80
[  140.572395][ T8736]  __sys_sendmsg+0x160/0x210
[  140.572416][ T8736]  ? __pfx___sys_sendmsg+0x10/0x10
[  140.572441][ T8736]  ? __pfx_ksys_write+0x10/0x10
[  140.572464][ T8736]  __do_fast_syscall_32+0x13a/0x8b0
[  140.572475][ T8736]  ? lockdep_hardirqs_on+0x7d/0x110
[  140.572492][ T8736]  do_fast_syscall_32+0x32/0x70
[  140.572503][ T8736]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  140.572517][ T8736] RIP: 0023:0xf73fefec
[  140.572531][ T8736] Code: Unable to access opcode bytes at 0xf73fefc2.
[  140.572536][ T8736] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  140.572548][ T8736] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[  140.572555][ T8736] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  140.572561][ T8736] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  140.572567][ T8736] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  140.572574][ T8736] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  140.572602][ T8736]  </TASK>
[  140.770600][  T104] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  140.771305][ T8702] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  140.891955][ T5881] usb 7-1: USB disconnect, device number 12
[  140.893241][ T5881] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device
[  140.986809][ T8766] 8021q: adding VLAN 0 to HW filter on device bond1
[  140.997743][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'.
[  140.997756][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.733'.
[  141.015771][ T8766] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.017891][ T8766] bond1: (slave bond0): making interface the new active one
[  141.019236][ T8766] bond1: (slave bond0): Enslaving as an active interface with an up link
[  141.252810][   T44] kauditd_printk_skb: 25 callbacks suppressed
[  141.252828][   T44] audit: type=1326 audit(1791548283.440:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.4.734" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  141.253170][   T44] audit: type=1326 audit(1791548283.440:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.4.734" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  141.254253][   T44] audit: type=1326 audit(1791548283.450:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.4.734" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf716762b code=0x7ffc0000
[  141.254293][   T44] audit: type=1326 audit(1791548283.450:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.4.734" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  141.254325][   T44] audit: type=1326 audit(1791548283.450:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.4.734" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  141.254778][   T44] audit: type=1326 audit(1791548283.450:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.4.734" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  141.255081][   T44] audit: type=1326 audit(1791548283.450:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.4.734" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  141.255412][   T44] audit: type=1326 audit(1791548283.450:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.4.734" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  141.257676][   T44] audit: type=1326 audit(1791548283.450:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.4.734" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  141.257714][   T44] audit: type=1326 audit(1791548283.450:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.4.734" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  141.258984][ T8789] IPVS: ip_vs_add_dest(): server weight less than zero
[  141.538397][ T8796] netlink: 16 bytes leftover after parsing attributes in process `syz.2.738'.
[  141.798142][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'.
[  142.713160][ T8822] netlink: 'syz.0.748': attribute type 1 has an invalid length.
[  142.713176][ T8822] netlink: 'syz.0.748': attribute type 1 has an invalid length.
[  142.930942][ T8834] __nla_validate_parse: 2 callbacks suppressed
[  142.930959][ T8834] netlink: 28 bytes leftover after parsing attributes in process `syz.5.753'.
[  143.201254][ T8846] FAULT_INJECTION: forcing a failure.
[  143.201254][ T8846] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  143.201275][ T8846] CPU: 0 UID: 0 PID: 8846 Comm: syz.5.757 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  143.201297][ T8846] Tainted: [L]=SOFTLOCKUP
[  143.201301][ T8846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  143.201307][ T8846] Call Trace:
[  143.201324][ T8846]  <TASK>
[  143.201329][ T8846]  dump_stack_lvl+0x100/0x190
[  143.201350][ T8846]  should_fail_ex.cold+0x5/0xa
[  143.201367][ T8846]  _copy_from_user+0x2e/0xd0
[  143.201386][ T8846]  ucma_set_option+0xa5/0x530
[  143.201400][ T8846]  ? __might_fault+0xc5/0x140
[  143.201413][ T8846]  ? __pfx_ucma_set_option+0x10/0x10
[  143.201430][ T8846]  ? __pfx_ucma_set_option+0x10/0x10
[  143.201445][ T8846]  ucma_write+0x1fb/0x330
[  143.201458][ T8846]  ? __pfx_ucma_write+0x10/0x10
[  143.201470][ T8846]  ? bpf_lsm_file_permission+0x9/0x10
[  143.201488][ T8846]  ? security_file_permission+0x76/0x210
[  143.201503][ T8846]  ? rw_verify_area+0xce/0x6d0
[  143.201518][ T8846]  vfs_write+0x2aa/0x1050
[  143.201534][ T8846]  ? __pfx_ucma_write+0x10/0x10
[  143.201546][ T8846]  ? lock_acquire+0x1d1/0x380
[  143.201562][ T8846]  ? __fget_files+0x34/0x3d0
[  143.201577][ T8846]  ? __pfx_vfs_write+0x10/0x10
[  143.201591][ T8846]  ? find_held_lock+0x2b/0x80
[  143.201623][ T8846]  ? __fget_files+0x215/0x3d0
[  143.201638][ T8846]  ? __fget_files+0x215/0x3d0
[  143.201657][ T8846]  ? __fget_files+0x21f/0x3d0
[  143.201677][ T8846]  ksys_write+0x1f8/0x250
[  143.201693][ T8846]  ? __pfx_ksys_write+0x10/0x10
[  143.201712][ T8846]  __do_fast_syscall_32+0x13a/0x8b0
[  143.201726][ T8846]  do_fast_syscall_32+0x32/0x70
[  143.201737][ T8846]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  143.201751][ T8846] RIP: 0023:0xf73fefec
[  143.201763][ T8846] Code: Unable to access opcode bytes at 0xf73fefc2.
[  143.201768][ T8846] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  143.201780][ T8846] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0
[  143.201788][ T8846] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000
[  143.201795][ T8846] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  143.201802][ T8846] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  143.201808][ T8846] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  143.201822][ T8846]  </TASK>
[  143.850974][ T8862] ADFS-fs (nbd5): error: unable to read block 3, try 0
[  143.884654][ T8860] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[  143.884884][ T8860] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[  143.885269][ T8860] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[  143.885428][ T8860] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[  143.954574][ T8865] netlink: 20 bytes leftover after parsing attributes in process `syz.0.763'.
[  143.962905][ T8865] netlink: 132732 bytes leftover after parsing attributes in process `syz.0.763'.
[  144.081098][ T8867] fuse: fd is not a fuse device
[  144.349624][ T8883] 
€Â: renamed from vlan0 (while UP)
[  145.227911][ T8901] FAULT_INJECTION: forcing a failure.
[  145.227911][ T8901] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  145.227933][ T8901] CPU: 3 UID: 0 PID: 8901 Comm: syz.2.776 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  145.227959][ T8901] Tainted: [L]=SOFTLOCKUP
[  145.227964][ T8901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  145.227971][ T8901] Call Trace:
[  145.227975][ T8901]  <TASK>
[  145.227980][ T8901]  dump_stack_lvl+0x100/0x190
[  145.227998][ T8901]  should_fail_ex.cold+0x5/0xa
[  145.228015][ T8901]  _copy_to_user+0x32/0xd0
[  145.228034][ T8901]  simple_read_from_buffer+0xcb/0x170
[  145.228051][ T8901]  proc_fail_nth_read+0x1af/0x230
[  145.228065][ T8901]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  145.228081][ T8901]  ? rw_verify_area+0xce/0x6d0
[  145.228093][ T8901]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  145.228108][ T8901]  vfs_read+0x1e4/0xb40
[  145.228121][ T8901]  ? lock_acquire+0x1d1/0x380
[  145.228138][ T8901]  ? __fget_files+0x34/0x3d0
[  145.228152][ T8901]  ? __pfx_vfs_read+0x10/0x10
[  145.228165][ T8901]  ? find_held_lock+0x2b/0x80
[  145.228178][ T8901]  ? __fget_files+0x215/0x3d0
[  145.228196][ T8901]  ? __fget_files+0x21f/0x3d0
[  145.228214][ T8901]  ksys_read+0x12a/0x250
[  145.228227][ T8901]  ? __pfx_ksys_read+0x10/0x10
[  145.228245][ T8901]  do_int80_emulation+0x166/0x650
[  145.228258][ T8901]  asm_int80_emulation+0x1a/0x20
[  145.228269][ T8901] RIP: 0023:0xf71b762b
[  145.228278][ T8901] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  145.228289][ T8901] RSP: 002b:00000000f54764bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  145.228300][ T8901] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54765d0
[  145.228307][ T8901] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  145.228313][ T8901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  145.228319][ T8901] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  145.228326][ T8901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  145.228340][ T8901]  </TASK>
[  145.452305][ T8915] netlink: 56 bytes leftover after parsing attributes in process `syz.2.780'.
[  145.575609][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.780'.
[  145.575950][ T8916] netlink: 72 bytes leftover after parsing attributes in process `syz.2.780'.
[  145.824503][ T3263] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  145.984794][ T3263] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  145.986324][ T3263] usb 10-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  145.986368][ T3263] usb 10-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61
[  145.986407][ T3263] usb 10-1: config 0 interface 0 has no altsetting 0
[  145.989828][ T3263] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  145.989901][ T3263] usb 10-1: Product: syz
[  145.989973][ T3263] usb 10-1: Manufacturer: syz
[  145.990185][ T3263] usb 10-1: SerialNumber: syz
[  146.007493][ T3263] usb 10-1: config 0 descriptor??
[  146.012034][ T8913] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  146.016913][ T3263] usb 10-1: selecting invalid altsetting 0
[  146.381541][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.789'.
[  146.381566][ T8927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.789'.
[  146.423082][ T8932] FAULT_INJECTION: forcing a failure.
[  146.423082][ T8932] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  146.423103][ T8932] CPU: 3 UID: 0 PID: 8932 Comm: syz.0.783 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  146.423119][ T8932] Tainted: [L]=SOFTLOCKUP
[  146.423123][ T8932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  146.423129][ T8932] Call Trace:
[  146.423133][ T8932]  <TASK>
[  146.423137][ T8932]  dump_stack_lvl+0x100/0x190
[  146.423156][ T8932]  should_fail_ex.cold+0x5/0xa
[  146.423170][ T8932]  _copy_to_user+0x32/0xd0
[  146.423190][ T8932]  bpf_verifier_vlog+0x496/0x6d0
[  146.423205][ T8932]  __btf_verifier_log+0xc3/0x100
[  146.423223][ T8932]  ? __pfx___btf_verifier_log+0x10/0x10
[  146.423241][ T8932]  ? __lock_acquire+0x5c0/0x1f40
[  146.423262][ T8932]  btf_parse_hdr+0x3ed/0xec0
[  146.423273][ T8932]  ? lock_acquire+0x1d1/0x380
[  146.423288][ T8932]  ? __might_fault+0xc5/0x140
[  146.423301][ T8932]  ? find_held_lock+0x2b/0x80
[  146.423314][ T8932]  ? __might_fault+0xc5/0x140
[  146.423325][ T8932]  ? __pfx_btf_parse_hdr+0x10/0x10
[  146.423341][ T8932]  btf_new_fd+0x60d/0x38f0
[  146.423352][ T8932]  ? __lock_acquire+0x5c0/0x1f40
[  146.423375][ T8932]  ? __pfx_btf_new_fd+0x10/0x10
[  146.423385][ T8932]  ? rcu_is_watching+0x13/0xc0
[  146.423398][ T8932]  ? apparmor_capable+0x1d7/0x4d0
[  146.423410][ T8932]  ? bpf_lsm_capable+0x9/0x10
[  146.423422][ T8932]  ? security_capable+0x80/0x260
[  146.423439][ T8932]  ? ns_capable+0xd2/0xf0
[  146.423456][ T8932]  __sys_bpf+0x13ef/0x4a30
[  146.423473][ T8932]  ? __pfx___sys_bpf+0x10/0x10
[  146.423499][ T8932]  ? lock_acquire+0x1d1/0x380
[  146.423515][ T8932]  ? get_pid_task+0x2a/0x250
[  146.423527][ T8932]  ? find_held_lock+0x2b/0x80
[  146.423540][ T8932]  ? get_pid_task+0xfc/0x250
[  146.423551][ T8932]  ? get_pid_task+0xfc/0x250
[  146.423566][ T8932]  ? proc_fail_nth_write+0x9f/0x220
[  146.423580][ T8932]  ? find_held_lock+0x2b/0x80
[  146.423596][ T8932]  ? rcu_read_lock_any_held+0x6a/0x90
[  146.423610][ T8932]  ? find_held_lock+0x2b/0x80
[  146.423622][ T8932]  ? ksys_write+0x190/0x250
[  146.423636][ T8932]  ? ksys_write+0x190/0x250
[  146.423650][ T8932]  ? lock_acquire+0x1d1/0x380
[  146.423675][ T8932]  ? fput+0x7c/0x100
[  146.423693][ T8932]  ? __ia32_sys_bpf+0xcc/0x170
[  146.423706][ T8932]  __ia32_sys_bpf+0xcc/0x170
[  146.423719][ T8932]  ? __do_fast_syscall_32+0xb3/0x8b0
[  146.423732][ T8932]  __do_fast_syscall_32+0x13a/0x8b0
[  146.423742][ T8932]  ? lockdep_hardirqs_on+0x7d/0x110
[  146.423759][ T8932]  do_fast_syscall_32+0x32/0x70
[  146.423774][ T8932]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  146.423788][ T8932] RIP: 0023:0xf742efec
[  146.423801][ T8932] Code: Unable to access opcode bytes at 0xf742efc2.
[  146.423805][ T8932] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  146.423817][ T8932] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080001380
[  146.423824][ T8932] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000
[  146.423830][ T8932] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  146.423837][ T8932] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  146.423843][ T8932] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  146.423857][ T8932]  </TASK>
[  146.535510][ T8939] FAULT_INJECTION: forcing a failure.
[  146.535510][ T8939] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  146.535530][ T8939] CPU: 2 UID: 0 PID: 8939 Comm: syz.0.784 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  146.535545][ T8939] Tainted: [L]=SOFTLOCKUP
[  146.535549][ T8939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  146.535556][ T8939] Call Trace:
[  146.535560][ T8939]  <TASK>
[  146.535564][ T8939]  dump_stack_lvl+0x100/0x190
[  146.535584][ T8939]  should_fail_ex.cold+0x5/0xa
[  146.535599][ T8939]  _copy_to_user+0x32/0xd0
[  146.535619][ T8939]  simple_read_from_buffer+0xcb/0x170
[  146.535635][ T8939]  proc_fail_nth_read+0x1af/0x230
[  146.535651][ T8939]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  146.535666][ T8939]  ? rw_verify_area+0xce/0x6d0
[  146.535678][ T8939]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  146.535692][ T8939]  vfs_read+0x1e4/0xb40
[  146.535706][ T8939]  ? lock_acquire+0x1d1/0x380
[  146.535722][ T8939]  ? __fget_files+0x34/0x3d0
[  146.535742][ T8939]  ? __pfx_vfs_read+0x10/0x10
[  146.535755][ T8939]  ? find_held_lock+0x2b/0x80
[  146.535769][ T8939]  ? __fget_files+0x215/0x3d0
[  146.535786][ T8939]  ? __fget_files+0x21f/0x3d0
[  146.535805][ T8939]  ksys_read+0x12a/0x250
[  146.535818][ T8939]  ? __pfx_ksys_read+0x10/0x10
[  146.535836][ T8939]  do_int80_emulation+0x166/0x650
[  146.535849][ T8939]  asm_int80_emulation+0x1a/0x20
[  146.535860][ T8939] RIP: 0023:0xf718762b
[  146.535869][ T8939] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  146.535880][ T8939] RSP: 002b:00000000f54254bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  146.535891][ T8939] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54255d0
[  146.535898][ T8939] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  146.535904][ T8939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  146.535910][ T8939] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  146.535916][ T8939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  146.535930][ T8939]  </TASK>
[  146.980834][ T8951] kvm: emulating exchange as write
[  146.981248][ T8951] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  147.174581][ T8956] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  147.407255][ T8959] FAULT_INJECTION: forcing a failure.
[  147.407255][ T8959] name failslab, interval 1, probability 0, space 0, times 0
[  147.407277][ T8959] CPU: 3 UID: 0 PID: 8959 Comm: syz.0.791 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  147.407292][ T8959] Tainted: [L]=SOFTLOCKUP
[  147.407296][ T8959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  147.407303][ T8959] Call Trace:
[  147.407307][ T8959]  <TASK>
[  147.407311][ T8959]  dump_stack_lvl+0x100/0x190
[  147.407331][ T8959]  should_fail_ex.cold+0x5/0xa
[  147.407346][ T8959]  should_failslab+0xc2/0x120
[  147.407365][ T8959]  __kmalloc_noprof+0xfc/0x840
[  147.407380][ T8959]  ? __pfx_dynamic_dname+0x10/0x10
[  147.407393][ T8959]  ? tomoyo_encode2+0xfb/0x3c0
[  147.407410][ T8959]  tomoyo_encode2+0xfb/0x3c0
[  147.407427][ T8959]  tomoyo_encode+0x29/0x50
[  147.407440][ T8959]  tomoyo_realpath_from_path+0x18c/0x690
[  147.407473][ T8959]  tomoyo_path_number_perm+0x23c/0x580
[  147.407485][ T8959]  ? tomoyo_path_number_perm+0x22e/0x580
[  147.407499][ T8959]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  147.407512][ T8959]  ? get_pid_task+0x106/0x250
[  147.407528][ T8959]  ? __lock_acquire+0x5c0/0x1f40
[  147.407552][ T8959]  ? __fget_files+0x34/0x3d0
[  147.407566][ T8959]  ? find_held_lock+0x2b/0x80
[  147.407579][ T8959]  ? __fget_files+0x215/0x3d0
[  147.407593][ T8959]  ? hook_file_ioctl_common+0x140/0x440
[  147.407607][ T8959]  ? __fget_files+0x215/0x3d0
[  147.407624][ T8959]  ? __fget_files+0x21f/0x3d0
[  147.407640][ T8959]  security_file_ioctl_compat+0xd3/0x230
[  147.407654][ T8959]  __ia32_compat_sys_ioctl+0xc2/0x360
[  147.407669][ T8959]  __do_fast_syscall_32+0x13a/0x8b0
[  147.407680][ T8959]  ? lockdep_hardirqs_on+0x7d/0x110
[  147.407698][ T8959]  do_fast_syscall_32+0x32/0x70
[  147.407709][ T8959]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  147.407723][ T8959] RIP: 0023:0xf742efec
[  147.407736][ T8959] Code: Unable to access opcode bytes at 0xf742efc2.
[  147.407741][ T8959] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  147.407752][ T8959] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80
[  147.407759][ T8959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  147.407766][ T8959] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  147.407772][ T8959] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  147.407779][ T8959] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  147.407793][ T8959]  </TASK>
[  147.407826][ T8959] ERROR: Out of memory at tomoyo_realpath_from_path.
[  147.408184][ T8959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  147.514840][ T8962] syzkaller1: entered promiscuous mode
[  147.514853][ T8962] syzkaller1: entered allmulticast mode
[  147.550774][ T5880] usb 10-1: USB disconnect, device number 4
[  148.219951][ T8987] FAULT_INJECTION: forcing a failure.
[  148.219951][ T8987] name failslab, interval 1, probability 0, space 0, times 0
[  148.219973][ T8987] CPU: 0 UID: 0 PID: 8987 Comm: syz.2.798 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  148.219989][ T8987] Tainted: [L]=SOFTLOCKUP
[  148.219993][ T8987] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  148.220000][ T8987] Call Trace:
[  148.220004][ T8987]  <TASK>
[  148.220008][ T8987]  dump_stack_lvl+0x100/0x190
[  148.220027][ T8987]  should_fail_ex.cold+0x5/0xa
[  148.220042][ T8987]  should_failslab+0xc2/0x120
[  148.220060][ T8987]  __kmalloc_noprof+0xfc/0x840
[  148.220075][ T8987]  ? rcu_is_watching+0x13/0xc0
[  148.220087][ T8987]  ? tomoyo_encode2+0xfb/0x3c0
[  148.220107][ T8987]  tomoyo_encode2+0xfb/0x3c0
[  148.220132][ T8987]  tomoyo_encode+0x29/0x50
[  148.220151][ T8987]  tomoyo_realpath_from_path+0x18c/0x690
[  148.220178][ T8987]  tomoyo_check_open_permission+0x2af/0x3c0
[  148.220200][ T8987]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  148.220230][ T8987]  ? hook_file_open+0x248/0x8e0
[  148.220284][ T8987]  tomoyo_file_open+0x6b/0x90
[  148.220312][ T8987]  security_file_open+0xb5/0x1e0
[  148.220335][ T8987]  do_dentry_open+0x588/0x14d0
[  148.220366][ T8987]  vfs_open+0x82/0x3f0
[  148.220386][ T8987]  path_openat+0x19fa/0x2440
[  148.220416][ T8987]  ? __pfx_path_openat+0x10/0x10
[  148.220449][ T8987]  do_file_open+0x20e/0x430
[  148.220493][ T8987]  ? __pfx_do_file_open+0x10/0x10
[  148.220528][ T8987]  ? __pfx_kfree_link+0x10/0x10
[  148.220555][ T8987]  ? _raw_spin_unlock+0x28/0x50
[  148.220570][ T8987]  ? alloc_fd+0x471/0x7a0
[  148.220590][ T8987]  do_sys_openat2+0x10f/0x1e0
[  148.220601][ T8987]  ? __pfx_do_sys_openat2+0x10/0x10
[  148.220615][ T8987]  ? __ia32_sys_futex_time32+0x2f4/0x470
[  148.220628][ T8987]  ? __ia32_sys_futex_time32+0x2fd/0x470
[  148.220644][ T8987]  __ia32_compat_sys_openat+0x12d/0x210
[  148.220657][ T8987]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  148.220675][ T8987]  do_int80_emulation+0x166/0x650
[  148.220687][ T8987]  asm_int80_emulation+0x1a/0x20
[  148.220698][ T8987] RIP: 0023:0xf71b762b
[  148.220708][ T8987] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  148.220719][ T8987] RSP: 002b:00000000f54764bc EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  148.220730][ T8987] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7282311
[  148.220737][ T8987] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  148.220744][ T8987] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  148.220750][ T8987] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  148.220756][ T8987] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  148.220771][ T8987]  </TASK>
[  148.220819][ T8987] ERROR: Out of memory at tomoyo_realpath_from_path.
[  148.220871][ T8987] FAULT_INJECTION: forcing a failure.
[  148.220871][ T8987] name failslab, interval 1, probability 0, space 0, times 0
[  148.220886][ T8987] CPU: 0 UID: 0 PID: 8987 Comm: syz.2.798 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  148.220901][ T8987] Tainted: [L]=SOFTLOCKUP
[  148.220905][ T8987] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  148.220911][ T8987] Call Trace:
[  148.220915][ T8987]  <TASK>
[  148.220919][ T8987]  dump_stack_lvl+0x100/0x190
[  148.220935][ T8987]  should_fail_ex.cold+0x5/0xa
[  148.220949][ T8987]  should_failslab+0xc2/0x120
[  148.220966][ T8987]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  148.220983][ T8987]  ? hugetlbfs_alloc_inode+0x8c/0x1d0
[  148.220999][ T8987]  hugetlbfs_alloc_inode+0x8c/0x1d0
[  148.221011][ T8987]  ? __pfx_hugetlbfs_alloc_inode+0x10/0x10
[  148.221025][ T8987]  alloc_inode+0x68/0x250
[  148.221037][ T8987]  new_inode+0x22/0x1c0
[  148.221049][ T8987]  hugetlbfs_get_inode+0x39a/0x700
[  148.221065][ T8987]  hugetlb_file_setup+0x15b/0x5b0
[  148.221080][ T8987]  ksys_mmap_pgoff+0x242/0x610
[  148.221098][ T8987]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  148.221113][ T8987]  ? ksys_write+0x1ac/0x250
[  148.221127][ T8987]  ? __pfx_ksys_write+0x10/0x10
[  148.221144][ T8987]  __do_fast_syscall_32+0x13a/0x8b0
[  148.221154][ T8987]  ? lockdep_hardirqs_on+0x7d/0x110
[  148.221171][ T8987]  do_fast_syscall_32+0x32/0x70
[  148.221182][ T8987]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  148.221195][ T8987] RIP: 0023:0xf745efec
[  148.221206][ T8987] Code: Unable to access opcode bytes at 0xf745efc2.
[  148.221211][ T8987] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0
[  148.221221][ T8987] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000ff5000
[  148.221228][ T8987] RDX: 0000000001000003 RSI: 000000000004c831 RDI: 00000000ffffffff
[  148.221235][ T8987] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  148.221245][ T8987] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  148.221252][ T8987] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  148.221265][ T8987]  </TASK>
[  148.395353][ T8991] fuse: fd is not a fuse device
[  148.676000][ T9000] FAULT_INJECTION: forcing a failure.
[  148.676000][ T9000] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  148.676084][ T9000] CPU: 0 UID: 0 PID: 9000 Comm: syz.5.803 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  148.676110][ T9000] Tainted: [L]=SOFTLOCKUP
[  148.676116][ T9000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  148.676127][ T9000] Call Trace:
[  148.676133][ T9000]  <TASK>
[  148.676146][ T9000]  dump_stack_lvl+0x100/0x190
[  148.676175][ T9000]  should_fail_ex.cold+0x5/0xa
[  148.676198][ T9000]  _copy_from_user+0x2e/0xd0
[  148.676228][ T9000]  dma_buf_ioctl+0x57b/0x8a0
[  148.676248][ T9000]  ? __pfx_dma_buf_ioctl+0x10/0x10
[  148.676266][ T9000]  ? find_held_lock+0x2b/0x80
[  148.676286][ T9000]  ? __fget_files+0x215/0x3d0
[  148.676308][ T9000]  ? hook_file_ioctl_common+0x140/0x440
[  148.676336][ T9000]  ? __fget_files+0x21f/0x3d0
[  148.676362][ T9000]  ? __pfx_dma_buf_ioctl+0x10/0x10
[  148.676379][ T9000]  compat_ptr_ioctl+0x6e/0xa0
[  148.676400][ T9000]  ? __pfx_compat_ptr_ioctl+0x10/0x10
[  148.676419][ T9000]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  148.676443][ T9000]  __do_fast_syscall_32+0x13a/0x8b0
[  148.676477][ T9000]  ? lockdep_hardirqs_on+0x7d/0x110
[  148.676505][ T9000]  do_fast_syscall_32+0x32/0x70
[  148.676524][ T9000]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  148.676546][ T9000] RIP: 0023:0xf73fefec
[  148.676566][ T9000] Code: Unable to access opcode bytes at 0xf73fefc2.
[  148.676574][ T9000] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  148.676592][ T9000] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040086200
[  148.676604][ T9000] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000
[  148.676615][ T9000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  148.676625][ T9000] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  148.676637][ T9000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  148.676659][ T9000]  </TASK>
[  149.163787][   T44] kauditd_printk_skb: 29 callbacks suppressed
[  149.163800][   T44] audit: type=1326 audit(1791548291.281:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9015 comm="syz.5.809" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x0
[  149.210154][   T44] audit: type=1326 audit(1791548291.401:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9004 comm="syz.0.805" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf742efec code=0x0
[  149.554576][   T42] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  149.735832][   T42] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  149.738789][   T42] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  149.740297][   T42] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61
[  149.740480][   T42] usb 5-1: config 0 interface 0 has no altsetting 0
[  149.762251][   T42] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  149.762598][   T42] usb 5-1: Product: syz
[  149.762760][   T42] usb 5-1: Manufacturer: syz
[  149.762769][   T42] usb 5-1: SerialNumber: syz
[  149.781386][ T9028] xt_hashlimit: invalid interval
[  149.810253][   T42] usb 5-1: config 0 descriptor??
[  149.838768][ T9021] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  149.981727][   T42] usb 5-1: selecting invalid altsetting 0
[  150.166862][ T9050] netlink: 28 bytes leftover after parsing attributes in process `syz.4.817'.
[  150.482537][ T9057] netlink: 'syz.4.819': attribute type 11 has an invalid length.
[  150.906889][ T9066] netlink: 32 bytes leftover after parsing attributes in process `syz.4.822'.
[  151.403106][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.833'.
[  151.403185][ T9077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.833'.
[  151.514898][ T9079] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0
[  151.607424][ T9081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.826'.
[  151.645816][ T9084] random: crng reseeded on system resumption
[  151.838791][ T5216] usb 5-1: USB disconnect, device number 14
[  151.991226][ T9105] FAULT_INJECTION: forcing a failure.
[  151.991226][ T9105] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  151.991247][ T9105] CPU: 3 UID: 0 PID: 9105 Comm: syz.0.831 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  151.991268][ T9105] Tainted: [L]=SOFTLOCKUP
[  151.991273][ T9105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  151.991279][ T9105] Call Trace:
[  151.991284][ T9105]  <TASK>
[  151.991288][ T9105]  dump_stack_lvl+0x100/0x190
[  151.991308][ T9105]  should_fail_ex.cold+0x5/0xa
[  151.991323][ T9105]  _copy_to_user+0x32/0xd0
[  151.991343][ T9105]  simple_read_from_buffer+0xcb/0x170
[  151.991361][ T9105]  proc_fail_nth_read+0x1af/0x230
[  151.991376][ T9105]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  151.991391][ T9105]  ? rw_verify_area+0xce/0x6d0
[  151.991404][ T9105]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  151.991418][ T9105]  vfs_read+0x1e4/0xb40
[  151.991433][ T9105]  ? lock_acquire+0x1d1/0x380
[  151.991449][ T9105]  ? __fget_files+0x34/0x3d0
[  151.991464][ T9105]  ? __pfx_vfs_read+0x10/0x10
[  151.991476][ T9105]  ? find_held_lock+0x2b/0x80
[  151.991504][ T9105]  ? __fget_files+0x215/0x3d0
[  151.991522][ T9105]  ? __fget_files+0x21f/0x3d0
[  151.991541][ T9105]  ksys_read+0x12a/0x250
[  151.991554][ T9105]  ? __pfx_ksys_read+0x10/0x10
[  151.991572][ T9105]  do_int80_emulation+0x166/0x650
[  151.991585][ T9105]  asm_int80_emulation+0x1a/0x20
[  151.991596][ T9105] RIP: 0023:0xf718762b
[  151.991606][ T9105] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  151.991616][ T9105] RSP: 002b:00000000f54464bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  151.991627][ T9105] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54465d0
[  151.991634][ T9105] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  151.991641][ T9105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  151.991647][ T9105] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  151.991653][ T9105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  151.991668][ T9105]  </TASK>
[  153.246236][   T44] audit: type=1326 audit(1791548295.441:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9122 comm="syz.5.837" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000
[  153.246932][   T44] audit: type=1326 audit(1791548295.441:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9122 comm="syz.5.837" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000
[  153.251515][ T9136] netlink: 260 bytes leftover after parsing attributes in process `syz.4.843'.
[  153.252627][   T44] audit: type=1326 audit(1791548295.441:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9122 comm="syz.5.837" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf715762b code=0x7ffc0000
[  153.253316][   T44] audit: type=1326 audit(1791548295.451:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9122 comm="syz.5.837" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000
[  153.253456][   T44] audit: type=1326 audit(1791548295.451:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9122 comm="syz.5.837" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000
[  153.256322][   T44] audit: type=1326 audit(1791548295.451:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9122 comm="syz.5.837" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73fefec code=0x7ffc0000
[  153.256989][   T44] audit: type=1326 audit(1791548295.451:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9122 comm="syz.5.837" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000
[  153.257740][   T44] audit: type=1326 audit(1791548295.451:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9122 comm="syz.5.837" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000
[  153.268094][ T9139] IPVS: ip_vs_add_dest(): server weight less than zero
[  153.783378][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.844'.
[  153.783437][ T9143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.844'.
[  153.798747][ T9143] FAULT_INJECTION: forcing a failure.
[  153.798747][ T9143] name failslab, interval 1, probability 0, space 0, times 0
[  153.798810][ T9143] CPU: 1 UID: 0 PID: 9143 Comm: syz.2.844 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  153.798828][ T9143] Tainted: [L]=SOFTLOCKUP
[  153.798832][ T9143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  153.798839][ T9143] Call Trace:
[  153.798844][ T9143]  <TASK>
[  153.798849][ T9143]  dump_stack_lvl+0x100/0x190
[  153.798870][ T9143]  should_fail_ex.cold+0x5/0xa
[  153.798886][ T9143]  should_failslab+0xc2/0x120
[  153.798906][ T9143]  __kmalloc_cache_noprof+0x91/0x6d0
[  153.798920][ T9143]  ? ____ip_mc_inc_group+0x40b/0x10d0
[  153.798937][ T9143]  ____ip_mc_inc_group+0x40b/0x10d0
[  153.798953][ T9143]  ? __pfx_____ip_mc_inc_group+0x10/0x10
[  153.798971][ T9143]  __ip_mc_join_group+0x451/0x5e0
[  153.798988][ T9143]  start_sync_thread+0x13b2/0x2b60
[  153.799004][ T9143]  ? __pfx_sync_thread_backup+0x10/0x10
[  153.799023][ T9143]  ? __pfx_start_sync_thread+0x10/0x10
[  153.799037][ T9143]  ? lock_acquire+0x1d1/0x380
[  153.799056][ T9143]  ? find_held_lock+0x2b/0x80
[  153.799070][ T9143]  ? __might_fault+0xc5/0x140
[  153.799089][ T9143]  ? do_ip_vs_set_ctl+0x471/0xc90
[  153.799106][ T9143]  do_ip_vs_set_ctl+0x471/0xc90
[  153.799126][ T9143]  ? __pfx_do_ip_vs_set_ctl+0x10/0x10
[  153.799142][ T9143]  ? rcu_is_watching+0x13/0xc0
[  153.799159][ T9143]  ? find_held_lock+0x2b/0x80
[  153.799172][ T9143]  ? nf_sockopt_find.isra.0+0x222/0x290
[  153.799198][ T9143]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  153.799226][ T9143]  ? nf_setsockopt+0x8d/0xf0
[  153.799239][ T9143]  nf_setsockopt+0x8d/0xf0
[  153.799254][ T9143]  ip_setsockopt+0xcb/0xf0
[  153.799275][ T9143]  tcp_setsockopt+0xa7/0x100
[  153.799287][ T9143]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  153.799306][ T9143]  do_sock_setsockopt+0xf3/0x1d0
[  153.799324][ T9143]  __sys_setsockopt+0x119/0x190
[  153.799339][ T9143]  __ia32_sys_setsockopt+0xbc/0x160
[  153.799351][ T9143]  ? __do_fast_syscall_32+0xb3/0x8b0
[  153.799362][ T9143]  ? lockdep_hardirqs_on+0x7d/0x110
[  153.799378][ T9143]  __do_fast_syscall_32+0x13a/0x8b0
[  153.799391][ T9143]  do_fast_syscall_32+0x32/0x70
[  153.799402][ T9143]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  153.799417][ T9143] RIP: 0023:0xf745efec
[  153.799431][ T9143] Code: Unable to access opcode bytes at 0xf745efc2.
[  153.799436][ T9143] RSP: 002b:00000000f543450c EFLAGS: 00000292 ORIG_RAX: 000000000000016e
[  153.799448][ T9143] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000000
[  153.799455][ T9143] RDX: 000000000000048b RSI: 0000000080000000 RDI: 0000000000000018
[  153.799462][ T9143] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  153.799468][ T9143] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  153.799475][ T9143] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  153.799489][ T9143]  </TASK>
[  153.800627][ T9144] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0
[  154.018796][ T9147] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.041340][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'.
[  154.041355][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.845'.
[  154.530829][ T9162] 8021q: adding VLAN 0 to HW filter on device bond1
[  154.547965][ T9162] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.550509][ T9162] bond1: (slave bond0): Enslaving as an active interface with a down link
[  154.939845][   T44] kauditd_printk_skb: 30 callbacks suppressed
[  154.939884][   T44] audit: type=1326 audit(1791548297.131:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.4.853" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f73fec code=0x0
[  154.993098][ T5880] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  155.173689][ T5880] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  155.174589][ T5880] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  155.174605][ T5880] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  155.175352][ T5880] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  155.175364][ T5880] usb 10-1: SerialNumber: syz
[  155.177250][ T9167] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  155.382170][ T9167] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  155.791159][ T5880] cdc_ether 10-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42
[  156.139846][ T5881] usb 10-1: USB disconnect, device number 5
[  156.142603][ T5881] cdc_ether 10-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device
[  156.419233][ T9196] __nla_validate_parse: 2 callbacks suppressed
[  156.419246][ T9196] netlink: 260 bytes leftover after parsing attributes in process `syz.0.852'.
[  157.347594][ T9220] netlink: 260 bytes leftover after parsing attributes in process `syz.5.866'.
[  157.493327][   T44] audit: type=1326 audit(1791548299.681:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.2.856" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efec code=0x7ffc0000
[  157.493361][   T44] audit: type=1326 audit(1791548299.681:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.2.856" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efec code=0x7ffc0000
[  157.493383][   T44] audit: type=1326 audit(1791548299.681:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.2.856" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71b762b code=0x7ffc0000
[  157.493404][   T44] audit: type=1326 audit(1791548299.681:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.2.856" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efec code=0x7ffc0000
[  157.493424][   T44] audit: type=1326 audit(1791548299.681:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.2.856" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efec code=0x7ffc0000
[  157.493445][   T44] audit: type=1326 audit(1791548299.681:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.2.856" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf745efec code=0x7ffc0000
[  157.493465][   T44] audit: type=1326 audit(1791548299.681:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.2.856" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efec code=0x7ffc0000
[  157.493484][   T44] audit: type=1326 audit(1791548299.681:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.2.856" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efec code=0x7ffc0000
[  157.494323][   T44] audit: type=1326 audit(1791548299.691:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.2.856" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf745efec code=0x7ffc0000
[  157.503390][ T9231] IPVS: ip_vs_add_dest(): server weight less than zero
[  157.749210][ T9237] FAULT_INJECTION: forcing a failure.
[  157.749210][ T9237] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  157.749233][ T9237] CPU: 2 UID: 0 PID: 9237 Comm: syz.0.860 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  157.749248][ T9237] Tainted: [L]=SOFTLOCKUP
[  157.749252][ T9237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  157.749259][ T9237] Call Trace:
[  157.749263][ T9237]  <TASK>
[  157.749268][ T9237]  dump_stack_lvl+0x100/0x190
[  157.749291][ T9237]  should_fail_ex.cold+0x5/0xa
[  157.749306][ T9237]  _copy_to_user+0x32/0xd0
[  157.749327][ T9237]  bpf_vlog_reverse_ubuf+0x2c3/0x470
[  157.749346][ T9237]  bpf_vlog_finalize+0x20f/0x360
[  157.749360][ T9237]  bpf_log_attr_finalize+0x86/0x1a0
[  157.749374][ T9237]  ? __pfx_bpf_log_attr_finalize+0x10/0x10
[  157.749392][ T9237]  btf_new_fd+0x712/0x38f0
[  157.749405][ T9237]  ? __lock_acquire+0x5c0/0x1f40
[  157.749425][ T9237]  ? lock_acquire+0x1d1/0x380
[  157.749444][ T9237]  ? __pfx_btf_new_fd+0x10/0x10
[  157.749455][ T9237]  ? rcu_is_watching+0x13/0xc0
[  157.749469][ T9237]  ? apparmor_capable+0x1d7/0x4d0
[  157.749483][ T9237]  ? bpf_lsm_capable+0x9/0x10
[  157.749495][ T9237]  ? security_capable+0x80/0x260
[  157.749513][ T9237]  ? ns_capable+0xd2/0xf0
[  157.749551][ T9237]  __sys_bpf+0x13ef/0x4a30
[  157.749570][ T9237]  ? __pfx___sys_bpf+0x10/0x10
[  157.749583][ T9237]  ? find_held_lock+0x2b/0x80
[  157.749597][ T9237]  ? futex_wake+0x4ea/0x5e0
[  157.749633][ T9237]  ? __ia32_sys_futex_time32+0x2f4/0x470
[  157.749647][ T9237]  ? __ia32_sys_futex_time32+0x2fd/0x470
[  157.749663][ T9237]  ? __pfx___ia32_sys_futex_time32+0x10/0x10
[  157.749685][ T9237]  ? __ia32_sys_bpf+0xcc/0x170
[  157.749699][ T9237]  __ia32_sys_bpf+0xcc/0x170
[  157.749713][ T9237]  ? __do_fast_syscall_32+0xb3/0x8b0
[  157.749726][ T9237]  __do_fast_syscall_32+0x13a/0x8b0
[  157.749739][ T9237]  do_fast_syscall_32+0x32/0x70
[  157.749750][ T9237]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  157.749765][ T9237] RIP: 0023:0xf742efec
[  157.749777][ T9237] Code: Unable to access opcode bytes at 0xf742efc2.
[  157.749783][ T9237] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  157.749794][ T9237] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080001380
[  157.749801][ T9237] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000
[  157.749808][ T9237] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  157.749815][ T9237] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  157.749822][ T9237] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  157.749836][ T9237]  </TASK>
[  157.817266][ T9243] fuse: fd is not a fuse device
[  157.822561][   T42] kernel write not supported for file /snd/seq (pid: 42 comm: kworker/2:1)
[  158.355871][ T9265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.871'.
[  158.355890][ T9265] block nbd0: Unsupported socket: should be TCP or UNIX.
[  158.873151][   T42] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  159.102110][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.874'.
[  159.102130][ T9271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.874'.
[  159.116286][ T9270] ovs_dp0: entered promiscuous mode
[  159.119063][ T9271] openvswitch: ovs_dp0: Dropping previously announced user features
[  159.122013][ T9270] fuse: Bad value for 'rootmode'
[  159.122164][ T9270] fuse: Bad value for 'rootmode'
[  159.156392][   T42] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  159.167942][   T42] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  159.167984][   T42] usb 7-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61
[  159.168022][   T42] usb 7-1: config 0 interface 0 has no altsetting 0
[  159.191096][   T42] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  159.192178][   T42] usb 7-1: Product: syz
[  159.192186][   T42] usb 7-1: Manufacturer: syz
[  159.192219][   T42] usb 7-1: SerialNumber: syz
[  159.268488][   T42] usb 7-1: config 0 descriptor??
[  159.270015][ T9266] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  159.520586][   T42] usb 7-1: selecting invalid altsetting 0
[  159.795971][ T9283] FAULT_INJECTION: forcing a failure.
[  159.795971][ T9283] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  159.795993][ T9283] CPU: 1 UID: 0 PID: 9283 Comm: syz.5.878 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  159.796008][ T9283] Tainted: [L]=SOFTLOCKUP
[  159.796012][ T9283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  159.796019][ T9283] Call Trace:
[  159.796023][ T9283]  <TASK>
[  159.796027][ T9283]  dump_stack_lvl+0x100/0x190
[  159.796047][ T9283]  should_fail_ex.cold+0x5/0xa
[  159.796060][ T9283]  ? prepare_alloc_pages+0x16d/0x5b0
[  159.796079][ T9283]  should_fail_alloc_page+0xeb/0x140
[  159.796098][ T9283]  prepare_alloc_pages+0x1f0/0x5b0
[  159.796117][ T9283]  __alloc_frozen_pages_noprof+0x1e9/0x3300
[  159.796136][ T9283]  ? update_load_avg+0x1fd/0x1500
[  159.796153][ T9283]  ? do_raw_spin_lock+0x128/0x260
[  159.796165][ T9283]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  159.796188][ T9283]  ? __lock_acquire+0x5c0/0x1f40
[  159.796205][ T9283]  ? __lock_acquire+0x5c0/0x1f40
[  159.796221][ T9283]  ? __css_rstat_updated+0x1ce/0x590
[  159.796235][ T9283]  ? lock_acquire+0x1d1/0x380
[  159.796251][ T9283]  ? page_table_check_set+0x11d/0x580
[  159.796269][ T9283]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  159.796287][ T9283]  ? policy_nodemask+0xed/0x4f0
[  159.796306][ T9283]  alloc_pages_mpol+0x201/0x550
[  159.796325][ T9283]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  159.796343][ T9283]  ? __page_table_check_ptes_set+0x1d5/0x530
[  159.796364][ T9283]  folio_alloc_mpol_noprof+0x36/0x260
[  159.796377][ T9283]  vma_alloc_folio_noprof+0xed/0x1d0
[  159.796390][ T9283]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  159.796403][ T9283]  ? rcu_read_unlock+0x2d/0xb0
[  159.796418][ T9283]  do_anonymous_page+0xac9/0x2050
[  159.796434][ T9283]  ? __pfx_do_anonymous_page+0x10/0x10
[  159.796445][ T9283]  ? rcu_read_unlock+0x2d/0xb0
[  159.796456][ T9283]  ? rcu_read_unlock+0x2d/0xb0
[  159.796468][ T9283]  ? __pte_offset_map+0x179/0x310
[  159.796485][ T9283]  __handle_mm_fault+0x1ff3/0x2f60
[  159.796500][ T9283]  ? __pfx___handle_mm_fault+0x10/0x10
[  159.796511][ T9283]  ? __pfx_mt_find+0x10/0x10
[  159.796530][ T9283]  ? find_vma+0xbf/0x140
[  159.796545][ T9283]  ? __pfx_find_vma+0x10/0x10
[  159.796561][ T9283]  handle_mm_fault+0x363/0xa20
[  159.796576][ T9283]  do_user_addr_fault+0x745/0x12f0
[  159.796593][ T9283]  exc_page_fault+0x6f/0xd0
[  159.796610][ T9283]  asm_exc_page_fault+0x26/0x30
[  159.796621][ T9283] RIP: 0010:_copy_to_user+0x9f/0xd0
[  159.796638][ T9283] Code: 89 ee 48 89 ef e8 f1 f7 e0 fc 4d 85 ff 75 26 e8 07 fe e0 fc 89 de 4c 89 e7 e8 5d 4a 54 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 <f3> a4 0f 1f 00 0f 01 ca 48 89 cb e8 e1 fd e0 fc 48 89 d8 5b 5d 41
[  159.796649][ T9283] RSP: 0000:ffffc900262f7bb8 EFLAGS: 00050297
[  159.796658][ T9283] RAX: 0000000000000001 RBX: 000000000000fffc RCX: 00000000000071bc
[  159.796665][ T9283] RDX: 0000000000000001 RSI: ffff888068958e40 RDI: 000000008000a000
[  159.796672][ T9283] RBP: 00000000800011c0 R08: 0000000000000000 R09: ffffed100d12bfff
[  159.796679][ T9283] R10: 0000000000000003 R11: 0000000000000400 R12: ffff888068950000
[  159.796686][ T9283] R13: 00000000800111bc R14: 00007ffffffff000 R15: 0000000000000000
[  159.796700][ T9283]  ? _copy_to_user+0x93/0xd0
[  159.796718][ T9283]  snd_pcm_oss_read2+0x294/0x400
[  159.796735][ T9283]  ? __pfx_snd_pcm_oss_read2+0x10/0x10
[  159.796749][ T9283]  ? snd_pcm_kernel_ioctl+0x12e/0x280
[  159.796767][ T9283]  ? snd_pcm_oss_prepare+0x11e/0x240
[  159.796783][ T9283]  snd_pcm_oss_read+0x5aa/0x730
[  159.796800][ T9283]  ? __pfx_snd_pcm_oss_read+0x10/0x10
[  159.796816][ T9283]  vfs_read+0x1e4/0xb40
[  159.796834][ T9283]  ? lock_acquire+0x1d1/0x380
[  159.796856][ T9283]  ? __fget_files+0x34/0x3d0
[  159.796877][ T9283]  ? __pfx_vfs_read+0x10/0x10
[  159.796896][ T9283]  ? find_held_lock+0x2b/0x80
[  159.796914][ T9283]  ? __fget_files+0x215/0x3d0
[  159.796928][ T9283]  ? __fget_files+0x215/0x3d0
[  159.796945][ T9283]  ? __fget_files+0x21f/0x3d0
[  159.796964][ T9283]  ksys_read+0x12a/0x250
[  159.796977][ T9283]  ? __pfx_ksys_read+0x10/0x10
[  159.796990][ T9283]  ? ksys_write+0x1ac/0x250
[  159.797004][ T9283]  ? __pfx_ksys_write+0x10/0x10
[  159.797021][ T9283]  __do_fast_syscall_32+0x13a/0x8b0
[  159.797031][ T9283]  ? lockdep_hardirqs_on+0x7d/0x110
[  159.797048][ T9283]  do_fast_syscall_32+0x32/0x70
[  159.797059][ T9283]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  159.797085][ T9283] RIP: 0023:0xf73fefec
[  159.797100][ T9283] Code: Unable to access opcode bytes at 0xf73fefc2.
[  159.797105][ T9283] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003
[  159.797115][ T9283] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800011c0
[  159.797122][ T9283] RDX: 00000000200021d5 RSI: 0000000000000000 RDI: 0000000000000000
[  159.797128][ T9283] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  159.797135][ T9283] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  159.797141][ T9283] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  159.797156][ T9283]  </TASK>
[  160.265143][ T9294] IPVS: ip_vs_add_dest(): server weight less than zero
[  160.325332][   T44] kauditd_printk_skb: 90 callbacks suppressed
[  160.325375][   T44] audit: type=1326 audit(1791548302.431:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.0.879" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000
[  160.325486][   T44] audit: type=1326 audit(1791548302.431:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.0.879" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000
[  160.325596][   T44] audit: type=1326 audit(1791548302.441:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.0.879" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf718762b code=0x7ffc0000
[  160.325676][   T44] audit: type=1326 audit(1791548302.441:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.0.879" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000
[  160.325755][   T44] audit: type=1326 audit(1791548302.441:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.0.879" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000
[  160.325835][   T44] audit: type=1326 audit(1791548302.441:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.0.879" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf742efec code=0x7ffc0000
[  160.325913][   T44] audit: type=1326 audit(1791548302.441:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.0.879" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000
[  160.325992][   T44] audit: type=1326 audit(1791548302.441:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.0.879" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000
[  160.326075][   T44] audit: type=1326 audit(1791548302.451:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.0.879" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf742efec code=0x7ffc0000
[  160.326307][   T44] audit: type=1326 audit(1791548302.451:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.0.879" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000
[  161.034309][ T9338] FAULT_INJECTION: forcing a failure.
[  161.034309][ T9338] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  161.034330][ T9338] CPU: 1 UID: 0 PID: 9338 Comm: syz.0.897 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  161.034346][ T9338] Tainted: [L]=SOFTLOCKUP
[  161.034350][ T9338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  161.034357][ T9338] Call Trace:
[  161.034361][ T9338]  <TASK>
[  161.034365][ T9338]  dump_stack_lvl+0x100/0x190
[  161.034385][ T9338]  should_fail_ex.cold+0x5/0xa
[  161.034400][ T9338]  _copy_to_user+0x32/0xd0
[  161.034419][ T9338]  simple_read_from_buffer+0xcb/0x170
[  161.034439][ T9338]  proc_fail_nth_read+0x1af/0x230
[  161.034454][ T9338]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  161.034469][ T9338]  ? rw_verify_area+0xce/0x6d0
[  161.034482][ T9338]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  161.034496][ T9338]  vfs_read+0x1e4/0xb40
[  161.034510][ T9338]  ? lock_acquire+0x1d1/0x380
[  161.034526][ T9338]  ? __fget_files+0x34/0x3d0
[  161.034541][ T9338]  ? __pfx_vfs_read+0x10/0x10
[  161.034553][ T9338]  ? find_held_lock+0x2b/0x80
[  161.034567][ T9338]  ? __fget_files+0x215/0x3d0
[  161.034583][ T9338]  ? __fget_files+0x21f/0x3d0
[  161.034602][ T9338]  ksys_read+0x12a/0x250
[  161.034615][ T9338]  ? __pfx_ksys_read+0x10/0x10
[  161.034633][ T9338]  do_int80_emulation+0x166/0x650
[  161.034646][ T9338]  asm_int80_emulation+0x1a/0x20
[  161.034657][ T9338] RIP: 0023:0xf718762b
[  161.034667][ T9338] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  161.034678][ T9338] RSP: 002b:00000000f54464bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  161.034689][ T9338] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54465d0
[  161.034696][ T9338] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  161.034705][ T9338] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  161.034711][ T9338] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  161.034718][ T9338] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  161.034732][ T9338]  </TASK>
[  161.130510][ T9343] openvswitch: netlink: Missing key (keys=40, expected=100)
[  161.130581][ T9343] openvswitch: netlink: Missing key (keys=40, expected=100)
[  161.130636][ T9343] openvswitch: netlink: Missing key (keys=40, expected=100)
[  161.130692][ T9343] openvswitch: netlink: Missing key (keys=40, expected=100)
[  161.130748][ T9343] openvswitch: netlink: Missing key (keys=40, expected=100)
[  161.130803][ T9343] openvswitch: netlink: Missing key (keys=40, expected=100)
[  161.130858][ T9343] openvswitch: netlink: Missing key (keys=40, expected=100)
[  161.130917][ T9343] openvswitch: netlink: Missing key (keys=40, expected=100)
[  161.130978][ T9343] openvswitch: netlink: Missing key (keys=40, expected=100)
[  161.131115][ T9343] openvswitch: netlink: Missing key (keys=40, expected=100)
[  161.311728][ T1038] usb 7-1: USB disconnect, device number 13
[  161.415004][ T9364] 9p: Bad value for 'rfdno'
[  161.416910][ T9364] netlink: 'syz.2.904': attribute type 11 has an invalid length.
[  161.563518][ T9375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.907'.
[  161.701356][ T9384] netlink: 60 bytes leftover after parsing attributes in process `syz.0.910'.
[  162.137027][ T9393] overlayfs: failed to clone upperpath
[  162.284777][ T9401] FAULT_INJECTION: forcing a failure.
[  162.284777][ T9401] name failslab, interval 1, probability 0, space 0, times 0
[  162.284813][ T9401] CPU: 1 UID: 0 PID: 9401 Comm: syz.5.915 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  162.284840][ T9401] Tainted: [L]=SOFTLOCKUP
[  162.284848][ T9401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  162.284859][ T9401] Call Trace:
[  162.284866][ T9401]  <TASK>
[  162.284872][ T9401]  dump_stack_lvl+0x100/0x190
[  162.284904][ T9401]  should_fail_ex.cold+0x5/0xa
[  162.284929][ T9401]  should_failslab+0xc2/0x120
[  162.284959][ T9401]  __kmalloc_cache_noprof+0x91/0x6d0
[  162.284981][ T9401]  ? allocate_file_region_entries+0x15d/0x630
[  162.285002][ T9401]  ? allocate_file_region_entries+0x1a0/0x630
[  162.285045][ T9401]  allocate_file_region_entries+0x1a0/0x630
[  162.285084][ T9401]  ? __pfx_allocate_file_region_entries+0x10/0x10
[  162.285121][ T9401]  region_chg+0x85/0x140
[  162.285145][ T9401]  __vma_reservation_common+0x34b/0x6f0
[  162.285170][ T9401]  ? find_held_lock+0x2b/0x80
[  162.285193][ T9401]  ? __pfx___vma_reservation_common+0x10/0x10
[  162.285218][ T9401]  ? filemap_get_entry+0x22d/0x450
[  162.285245][ T9401]  alloc_hugetlb_folio+0x594/0x870
[  162.285269][ T9401]  ? __pfx_alloc_hugetlb_folio+0x10/0x10
[  162.285283][ T9401]  ? rcu_is_watching+0x13/0xc0
[  162.285311][ T9401]  ? __filemap_get_folio_mpol+0x369/0x1280
[  162.285329][ T9401]  ? lock_acquire+0x1d1/0x380
[  162.285362][ T9401]  hugetlb_no_page+0x1099/0x1c20
[  162.285390][ T9401]  ? __pfx_down_read+0x10/0x10
[  162.285408][ T9401]  ? __pfx_hugetlb_no_page+0x10/0x10
[  162.285429][ T9401]  ? huge_pte_alloc+0x39f/0x5a0
[  162.285453][ T9401]  hugetlb_fault+0x5a7/0x1650
[  162.285480][ T9401]  ? __pfx_hugetlb_fault+0x10/0x10
[  162.285501][ T9401]  ? lock_acquire+0x1d1/0x380
[  162.285554][ T9401]  ? hugetlb_vma_lock_read+0xaa/0x120
[  162.285590][ T9401]  ? rcu_is_watching+0x13/0xc0
[  162.285611][ T9401]  ? __up_read+0x333/0x980
[  162.285632][ T9401]  ? __pfx___up_read+0x10/0x10
[  162.285650][ T9401]  ? hugetlb_vma_unlock_read+0xaa/0x120
[  162.285695][ T9401]  handle_mm_fault+0x604/0xa20
[  162.285723][ T9401]  __get_user_pages+0x8ae/0x2c30
[  162.285761][ T9401]  ? __pfx___get_user_pages+0x10/0x10
[  162.285798][ T9401]  populate_vma_page_range+0x267/0x3f0
[  162.285824][ T9401]  ? __pfx_populate_vma_page_range+0x10/0x10
[  162.285851][ T9401]  ? __pfx_find_vma_intersection+0x10/0x10
[  162.285885][ T9401]  __mm_populate+0x107/0x3a0
[  162.285914][ T9401]  ? __pfx___mm_populate+0x10/0x10
[  162.285944][ T9401]  ? up_write+0x2dc/0x5b0
[  162.285962][ T9401]  vm_mmap_pgoff+0x441/0x470
[  162.285991][ T9401]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  162.286015][ T9401]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  162.286045][ T9401]  ksys_mmap_pgoff+0x285/0x610
[  162.286083][ T9401]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  162.286116][ T9401]  __do_fast_syscall_32+0x13a/0x8b0
[  162.286140][ T9401]  do_fast_syscall_32+0x32/0x70
[  162.286160][ T9401]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  162.286185][ T9401] RIP: 0023:0xf73fefec
[  162.286205][ T9401] Code: Unable to access opcode bytes at 0xf73fefc2.
[  162.286216][ T9401] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0
[  162.286236][ T9401] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000ff5000
[  162.286245][ T9401] RDX: 0000000001000003 RSI: 000000000004c831 RDI: 00000000ffffffff
[  162.286258][ T9401] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  162.286270][ T9401] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  162.286281][ T9401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  162.286307][ T9401]  </TASK>
[  162.399214][ T9408] nbd2: detected capacity change from 0 to 63
[  162.418365][   T68] block nbd2: Receive control failed (result -104)
[  162.561243][ T9419] netlink: 172 bytes leftover after parsing attributes in process `syz.2.922'.
[  162.583252][ T5880] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  162.743324][ T5880] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  162.744236][ T5880] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  162.744250][ T5880] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  162.745101][ T5880] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  162.745113][ T5880] usb 10-1: SerialNumber: syz
[  162.747331][ T9403] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  162.942662][   T35] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  162.951497][ T9403] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  163.044905][ T9426] tipc: Cannot configure node identity twice
[  163.093969][   T35] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  163.094928][   T35] usb 7-1: config 0 has an invalid interface number: 50 but max is 0
[  163.094948][   T35] usb 7-1: config 0 has no interface number 0
[  163.094979][   T35] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  163.096983][   T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.097002][   T35] usb 7-1: Product: syz
[  163.097014][   T35] usb 7-1: Manufacturer: syz
[  163.097026][   T35] usb 7-1: SerialNumber: syz
[  163.099283][   T35] usb 7-1: config 0 descriptor??
[  163.108075][   T35] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0
[  163.159557][ T9403] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[  163.159580][ T9403] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  163.161111][ T9403] vhci_hcd vhci_hcd.0: Device attached
[  163.246082][ T9403] netlink: 44 bytes leftover after parsing attributes in process `syz.5.916'.
[  163.248131][ T9427] vhci_hcd: connection closed
[  163.248516][ T5812] vhci_hcd vhci_hcd.5: stop threads
[  163.248531][ T5812] vhci_hcd vhci_hcd.5: release socket
[  163.248542][ T5812] vhci_hcd vhci_hcd.5: disconnect device
[  163.249899][ T5880] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71
[  163.253735][ T5880] usb 10-1: USB disconnect, device number 6
[  164.287689][ T9453] netlink: 'syz.5.933': attribute type 1 has an invalid length.
[  164.287741][ T9453] netlink: 224 bytes leftover after parsing attributes in process `syz.5.933'.
[  164.440690][ T9459] FAULT_INJECTION: forcing a failure.
[  164.440690][ T9459] name failslab, interval 1, probability 0, space 0, times 0
[  164.440711][ T9459] CPU: 3 UID: 0 PID: 9459 Comm: syz.0.935 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  164.440726][ T9459] Tainted: [L]=SOFTLOCKUP
[  164.440731][ T9459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  164.440737][ T9459] Call Trace:
[  164.440741][ T9459]  <TASK>
[  164.440745][ T9459]  dump_stack_lvl+0x100/0x190
[  164.440765][ T9459]  should_fail_ex.cold+0x5/0xa
[  164.440780][ T9459]  should_failslab+0xc2/0x120
[  164.440797][ T9459]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[  164.440828][ T9459]  ? key_alloc+0x423/0x1310
[  164.440843][ T9459]  kmemdup_noprof+0x29/0x60
[  164.440856][ T9459]  key_alloc+0x423/0x1310
[  164.440872][ T9459]  ? __kmalloc_noprof+0x350/0x840
[  164.440887][ T9459]  ? __pfx_key_alloc+0x10/0x10
[  164.440904][ T9459]  keyring_alloc+0x44/0xc0
[  164.440920][ T9459]  lookup_user_key+0x9b8/0x1300
[  164.440934][ T9459]  ? __pfx_lookup_user_key+0x10/0x10
[  164.440950][ T9459]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  164.440964][ T9459]  ? __do_sys_add_key+0x1a0/0x460
[  164.440979][ T9459]  ? __do_sys_add_key+0x20d/0x460
[  164.440994][ T9459]  ? kfree+0x22b/0x6d0
[  164.441005][ T9459]  ? memdup_user+0x82/0xe0
[  164.441019][ T9459]  __do_sys_add_key+0x2a6/0x460
[  164.441036][ T9459]  ? __pfx___do_sys_add_key+0x10/0x10
[  164.441051][ T9459]  ? fput+0x7c/0x100
[  164.441068][ T9459]  ? __pfx_ksys_write+0x10/0x10
[  164.441084][ T9459]  __do_fast_syscall_32+0x13a/0x8b0
[  164.441096][ T9459]  ? lockdep_hardirqs_on+0x7d/0x110
[  164.441113][ T9459]  do_fast_syscall_32+0x32/0x70
[  164.441123][ T9459]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  164.441137][ T9459] RIP: 0023:0xf742efec
[  164.441149][ T9459] Code: Unable to access opcode bytes at 0xf742efc2.
[  164.441154][ T9459] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e
[  164.441165][ T9459] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000080000040
[  164.441172][ T9459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ffffffff
[  164.441179][ T9459] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  164.441185][ T9459] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  164.441191][ T9459] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  164.441205][ T9459]  </TASK>
[  165.375140][    C3] usb 7-1: yurex_control_callback - control failed: -2
[  165.381063][    C3] usb 7-1: yurex_control_callback - control failed: -32
[  165.383568][ T5881] usb 7-1: USB disconnect, device number 14
[  165.394372][ T5881] yurex 7-1:0.50: USB YUREX #0 now disconnected
[  165.856200][ T9486] geneve2: entered promiscuous mode
[  166.094385][ T9500] FAULT_INJECTION: forcing a failure.
[  166.094385][ T9500] name failslab, interval 1, probability 0, space 0, times 0
[  166.094415][ T9500] CPU: 1 UID: 0 PID: 9500 Comm: syz.5.949 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  166.094438][ T9500] Tainted: [L]=SOFTLOCKUP
[  166.094444][ T9500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  166.094454][ T9500] Call Trace:
[  166.094460][ T9500]  <TASK>
[  166.094467][ T9500]  dump_stack_lvl+0x100/0x190
[  166.094497][ T9500]  should_fail_ex.cold+0x5/0xa
[  166.094518][ T9500]  should_failslab+0xc2/0x120
[  166.094543][ T9500]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  166.094569][ T9500]  ? __alloc_skb+0x140/0x710
[  166.094592][ T9500]  __alloc_skb+0x140/0x710
[  166.094609][ T9500]  ? __alloc_skb+0x5b7/0x710
[  166.094628][ T9500]  ? __pfx___alloc_skb+0x10/0x10
[  166.094647][ T9500]  ? find_held_lock+0x2b/0x80
[  166.094675][ T9500]  netlink_dump+0x194/0xd00
[  166.094706][ T9500]  ? ip_set_dump_start+0x2e9/0x460
[  166.094733][ T9500]  ? __pfx_netlink_dump+0x10/0x10
[  166.094776][ T9500]  __netlink_dump_start+0x6d6/0x990
[  166.094806][ T9500]  ip_set_dump+0x1c2/0x200
[  166.094832][ T9500]  ? __pfx_ip_set_dump+0x10/0x10
[  166.094856][ T9500]  ? __pfx_ip_set_dump_start+0x10/0x10
[  166.094881][ T9500]  ? __pfx_ip_set_dump_do+0x10/0x10
[  166.094898][ T9500]  ? __pfx_ip_set_dump_done+0x10/0x10
[  166.094936][ T9500]  nfnetlink_rcv_msg+0x9d5/0x11e0
[  166.094967][ T9500]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  166.094989][ T9500]  ? skb_release_data+0x65e/0x860
[  166.095013][ T9500]  ? kfree_skbmem+0x19f/0x210
[  166.095066][ T9500]  ? __pfx___dev_queue_xmit+0x10/0x10
[  166.095105][ T9500]  netlink_rcv_skb+0x159/0x420
[  166.095124][ T9500]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  166.095149][ T9500]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  166.095180][ T9500]  ? ns_capable+0xd2/0xf0
[  166.095210][ T9500]  nfnetlink_rcv+0x1b3/0x440
[  166.095231][ T9500]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  166.095253][ T9500]  ? netlink_deliver_tap+0x1ae/0xcc0
[  166.095287][ T9500]  netlink_unicast+0x585/0x850
[  166.095309][ T9500]  ? __pfx_netlink_unicast+0x10/0x10
[  166.095336][ T9500]  netlink_sendmsg+0x8b0/0xda0
[  166.095360][ T9500]  ? __pfx_netlink_sendmsg+0x10/0x10
[  166.095382][ T9500]  ? apparmor_socket_sendmsg+0x165/0x280
[  166.095417][ T9500]  ____sys_sendmsg+0xa4d/0xbe0
[  166.095441][ T9500]  ? __pfx_netlink_sendmsg+0x10/0x10
[  166.095462][ T9500]  ? __pfx_____sys_sendmsg+0x10/0x10
[  166.095500][ T9500]  ___sys_sendmsg+0x190/0x1e0
[  166.095529][ T9500]  ? __pfx____sys_sendmsg+0x10/0x10
[  166.095569][ T9500]  ? find_held_lock+0x2b/0x80
[  166.095609][ T9500]  __sys_sendmsg+0x160/0x210
[  166.095632][ T9500]  ? __pfx___sys_sendmsg+0x10/0x10
[  166.095661][ T9500]  ? __pfx_ksys_write+0x10/0x10
[  166.095690][ T9500]  __do_fast_syscall_32+0x13a/0x8b0
[  166.095708][ T9500]  ? lockdep_hardirqs_on+0x7d/0x110
[  166.095737][ T9500]  do_fast_syscall_32+0x32/0x70
[  166.095755][ T9500]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  166.095777][ T9500] RIP: 0023:0xf73fefec
[  166.095797][ T9500] Code: Unable to access opcode bytes at 0xf73fefc2.
[  166.095806][ T9500] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  166.095824][ T9500] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0
[  166.095835][ T9500] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000
[  166.095846][ T9500] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  166.095856][ T9500] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  166.095867][ T9500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  166.095892][ T9500]  </TASK>
[  167.189791][ T9541] net_ratelimit: 23 callbacks suppressed
[  167.189803][ T9541] sock: sock_set_timeout: `syz.2.962' (pid 9541) tries to set negative timeout
[  167.357531][ T9557] FAULT_INJECTION: forcing a failure.
[  167.357531][ T9557] name fail_futex, interval 1, probability 0, space 0, times 0
[  167.357571][ T9557] CPU: 3 UID: 0 PID: 9557 Comm: syz.2.969 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  167.357599][ T9557] Tainted: [L]=SOFTLOCKUP
[  167.357605][ T9557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  167.357616][ T9557] Call Trace:
[  167.357623][ T9557]  <TASK>
[  167.357632][ T9557]  dump_stack_lvl+0x100/0x190
[  167.357664][ T9557]  should_fail_ex.cold+0x5/0xa
[  167.357690][ T9557]  get_futex_key+0x1d0/0x14f0
[  167.357713][ T9557]  ? __pfx_get_futex_key+0x10/0x10
[  167.357732][ T9557]  ? find_held_lock+0x2b/0x80
[  167.357753][ T9557]  ? futex_wake+0x4ea/0x5e0
[  167.357783][ T9557]  futex_wake+0xf4/0x5e0
[  167.357805][ T9557]  ? futex_wait+0x11e/0x370
[  167.357832][ T9557]  ? __pfx_futex_wake+0x10/0x10
[  167.357860][ T9557]  ? rcu_read_lock_any_held+0x6a/0x90
[  167.357883][ T9557]  ? find_held_lock+0x2b/0x80
[  167.357904][ T9557]  ? ksys_write+0x190/0x250
[  167.357928][ T9557]  ? ksys_write+0x190/0x250
[  167.357954][ T9557]  do_futex+0x2b2/0x440
[  167.357977][ T9557]  ? __pfx_do_futex+0x10/0x10
[  167.358000][ T9557]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  167.358034][ T9557]  __ia32_sys_futex_time32+0x2f4/0x470
[  167.358063][ T9557]  ? xfd_validate_state+0x129/0x190
[  167.358091][ T9557]  ? __pfx___ia32_sys_futex_time32+0x10/0x10
[  167.358128][ T9557]  __do_fast_syscall_32+0x13a/0x8b0
[  167.358151][ T9557]  do_fast_syscall_32+0x32/0x70
[  167.358171][ T9557]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  167.358197][ T9557] RIP: 0023:0xf745efec
[  167.358218][ T9557] Code: Unable to access opcode bytes at 0xf745efc2.
[  167.358227][ T9557] RSP: 002b:00000000f54765cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0
[  167.358247][ T9557] RAX: ffffffffffffffda RBX: 00000000f7484f8c RCX: 0000000000000081
[  167.358260][ T9557] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473
[  167.358272][ T9557] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000
[  167.358284][ T9557] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  167.358296][ T9557] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  167.358325][ T9557]  </TASK>
[  168.089836][ T9579] fuse: Unknown parameter '0x0000000000000003'
[  168.146727][ T9581] sock: sock_set_timeout: `syz.4.976' (pid 9581) tries to set negative timeout
[  168.309839][ T9587] netlink: 'syz.0.978': attribute type 1 has an invalid length.
[  168.339860][ T9587] bond1: entered promiscuous mode
[  168.340100][ T9587] 8021q: adding VLAN 0 to HW filter on device bond1
[  168.344392][ T9587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.978'.
[  168.344421][ T9587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.978'.
[  168.361184][ T9587] bond1: (slave bridge3): making interface the new active one
[  168.361198][ T9587] bridge3: entered promiscuous mode
[  168.365747][ T9587] bond1: (slave bridge3): Enslaving as an active interface with an up link
[  168.519542][ T9597] No control pipe specified
[  168.528818][ T9596] sit0: entered promiscuous mode
[  168.528901][ T9596] netlink: 'syz.0.983': attribute type 1 has an invalid length.
[  168.528910][ T9596] netlink: 1 bytes leftover after parsing attributes in process `syz.0.983'.
[  168.895239][ T9619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.988'.
[  168.895331][ T9618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.988'.
[  169.135283][ T9636] netlink: 'syz.0.996': attribute type 5 has an invalid length.
[  169.138603][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.996'.
[  169.497834][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1007'.
[  169.773880][ T9695] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1018'.
[  169.774477][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1018'.
[  169.807463][ T9702] fuse: Unknown parameter '0xffffffffffffffff'
[  169.850580][ T9705] __vm_enough_memory: pid: 9705, comm: syz.2.1022, bytes: 4294963200 not enough memory for the allocation
[  170.569645][ T9719] syzkaller0: entered promiscuous mode
[  170.569658][ T9719] syzkaller0: entered allmulticast mode
[  170.866616][ T9729] FAULT_INJECTION: forcing a failure.
[  170.866616][ T9729] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  170.866637][ T9729] CPU: 2 UID: 0 PID: 9729 Comm: syz.2.1032 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  170.866652][ T9729] Tainted: [L]=SOFTLOCKUP
[  170.866657][ T9729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  170.866663][ T9729] Call Trace:
[  170.866668][ T9729]  <TASK>
[  170.866672][ T9729]  dump_stack_lvl+0x100/0x190
[  170.866694][ T9729]  should_fail_ex.cold+0x5/0xa
[  170.866717][ T9729]  _copy_to_user+0x32/0xd0
[  170.866747][ T9729]  simple_read_from_buffer+0xcb/0x170
[  170.866774][ T9729]  proc_fail_nth_read+0x1af/0x230
[  170.866799][ T9729]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  170.866817][ T9729]  ? rw_verify_area+0xce/0x6d0
[  170.866829][ T9729]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  170.866843][ T9729]  vfs_read+0x1e4/0xb40
[  170.866858][ T9729]  ? lock_acquire+0x1d1/0x380
[  170.866874][ T9729]  ? __fget_files+0x34/0x3d0
[  170.866888][ T9729]  ? __pfx_vfs_read+0x10/0x10
[  170.866901][ T9729]  ? find_held_lock+0x2b/0x80
[  170.866914][ T9729]  ? __fget_files+0x215/0x3d0
[  170.866931][ T9729]  ? __fget_files+0x21f/0x3d0
[  170.866950][ T9729]  ksys_read+0x12a/0x250
[  170.866963][ T9729]  ? __pfx_ksys_read+0x10/0x10
[  170.866981][ T9729]  do_int80_emulation+0x166/0x650
[  170.866994][ T9729]  asm_int80_emulation+0x1a/0x20
[  170.867005][ T9729] RIP: 0023:0xf71b762b
[  170.867015][ T9729] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  170.867039][ T9729] RSP: 002b:00000000f54554bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  170.867051][ T9729] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54555d0
[  170.867058][ T9729] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  170.867065][ T9729] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  170.867071][ T9729] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  170.867077][ T9729] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  170.867091][ T9729]  </TASK>
[  170.909896][ T9733] 9p: Bad value for 'rfdno'
[  170.913990][ T9733] netlink: 'syz.0.1033': attribute type 11 has an invalid length.
[  173.027027][ T9771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1047'.
[  174.126754][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'.
[  174.126774][ T9788] netlink: 'syz.4.1053': attribute type 21 has an invalid length.
[  174.154896][ T9793] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1055'.
[  174.298951][   T44] kauditd_printk_skb: 30 callbacks suppressed
[  174.298964][   T44] audit: type=1800 audit(1791548316.492:3425): pid=9786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1052" name="file1" dev="sda1" ino=2038 res=0 errno=0
[  174.371740][ T9802] netlink: 'syz.4.1057': attribute type 5 has an invalid length.
[  174.371763][ T9802] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1057'.
[  175.007196][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1062'.
[  175.019126][ T9816] ipvlan2: entered allmulticast mode
[  175.019140][ T9816] virt_wifi0: entered allmulticast mode
[  175.078095][   T44] audit: type=1326 audit(1791548317.272:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9819 comm="syz.4.1064" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  175.078130][   T44] audit: type=1326 audit(1791548317.272:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9819 comm="syz.4.1064" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  175.078152][   T44] audit: type=1326 audit(1791548317.272:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9819 comm="syz.4.1064" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  175.078175][   T44] audit: type=1326 audit(1791548317.272:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9819 comm="syz.4.1064" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  175.078195][   T44] audit: type=1326 audit(1791548317.272:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9819 comm="syz.4.1064" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  175.078215][   T44] audit: type=1326 audit(1791548317.272:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9819 comm="syz.4.1064" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  175.078234][   T44] audit: type=1326 audit(1791548317.272:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9819 comm="syz.4.1064" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  175.078254][   T44] audit: type=1326 audit(1791548317.272:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9819 comm="syz.4.1064" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  175.078274][   T44] audit: type=1326 audit(1791548317.272:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9819 comm="syz.4.1064" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000
[  175.392342][ T9829] FAULT_INJECTION: forcing a failure.
[  175.392342][ T9829] name failslab, interval 1, probability 0, space 0, times 0
[  175.392373][ T9829] CPU: 1 UID: 0 PID: 9829 Comm: syz.5.1067 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  175.392398][ T9829] Tainted: [L]=SOFTLOCKUP
[  175.392406][ T9829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  175.392418][ T9829] Call Trace:
[  175.392424][ T9829]  <TASK>
[  175.392433][ T9829]  dump_stack_lvl+0x100/0x190
[  175.392465][ T9829]  should_fail_ex.cold+0x5/0xa
[  175.392488][ T9829]  should_failslab+0xc2/0x120
[  175.392516][ T9829]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  175.392542][ T9829]  ? __alloc_skb+0x140/0x710
[  175.392566][ T9829]  __alloc_skb+0x140/0x710
[  175.392586][ T9829]  ? __alloc_skb+0x5b7/0x710
[  175.392606][ T9829]  ? __pfx___alloc_skb+0x10/0x10
[  175.392625][ T9829]  ? find_held_lock+0x2b/0x80
[  175.392645][ T9829]  ? ip6_dst_check+0x347/0x950
[  175.392664][ T9829]  ? ip6_dst_check+0x347/0x950
[  175.392685][ T9829]  sctp_packet_transmit+0x1d3/0x30f0
[  175.392713][ T9829]  ? __sctp_packet_append_chunk+0xbb/0xd80
[  175.392746][ T9829]  ? sctp_packet_append_chunk+0xeb3/0x1230
[  175.392779][ T9829]  sctp_packet_singleton+0x19e/0x370
[  175.392803][ T9829]  ? __pfx_sctp_packet_singleton+0x10/0x10
[  175.392835][ T9829]  ? sctp_outq_select_transport+0x20d/0x720
[  175.392862][ T9829]  sctp_outq_flush+0x315/0x3380
[  175.392885][ T9829]  ? _raw_spin_unlock_irq_enable+0x71/0x90
[  175.392920][ T9829]  ? __pfx_sctp_outq_flush+0x10/0x10
[  175.392949][ T9829]  ? sctp_outq_tail+0x68c/0xa90
[  175.392976][ T9829]  sctp_do_sm+0xce1/0x5c30
[  175.393009][ T9829]  ? __pfx_sctp_do_sm+0x10/0x10
[  175.393062][ T9829]  ? __kasan_kmalloc+0xaa/0xb0
[  175.393091][ T9829]  ? __sk_mem_raise_allocated+0x789/0x1570
[  175.393119][ T9829]  sctp_primitive_ASSOCIATE+0x9c/0xd0
[  175.393146][ T9829]  sctp_sendmsg_to_asoc+0xa6a/0x1cb0
[  175.393169][ T9829]  ? __asan_memset+0x30/0x50
[  175.393191][ T9829]  ? sctp_assoc_set_primary+0x276/0x310
[  175.393212][ T9829]  ? sctp_assoc_add_peer+0x256/0x1550
[  175.393241][ T9829]  ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10
[  175.393261][ T9829]  ? sctp_connect_new_asoc+0x41e/0x770
[  175.393286][ T9829]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  175.393307][ T9829]  ? sctp_endpoint_lookup_assoc+0x15c/0x2a0
[  175.393326][ T9829]  ? sctp_endpoint_lookup_assoc+0x15c/0x2a0
[  175.393349][ T9829]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  175.393381][ T9829]  sctp_sendmsg+0x1144/0x22e0
[  175.393412][ T9829]  ? __pfx_sctp_sendmsg+0x10/0x10
[  175.393442][ T9829]  ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0
[  175.393504][ T9829]  ? aa_sock_msg_perm+0x11e/0x200
[  175.393536][ T9829]  ? __pfx_sctp_sendmsg+0x10/0x10
[  175.393560][ T9829]  inet_sendmsg+0x11c/0x140
[  175.393590][ T9829]  __sys_sendto+0x453/0x4e0
[  175.393608][ T9829]  ? __pfx_inet_sendmsg+0x10/0x10
[  175.393636][ T9829]  ? __pfx___sys_sendto+0x10/0x10
[  175.393674][ T9829]  ? fput+0x7c/0x100
[  175.393703][ T9829]  ? ksys_write+0x1ac/0x250
[  175.393730][ T9829]  __ia32_sys_sendto+0xdd/0x1b0
[  175.393749][ T9829]  ? __do_fast_syscall_32+0xb3/0x8b0
[  175.393766][ T9829]  ? lockdep_hardirqs_on+0x7d/0x110
[  175.393794][ T9829]  __do_fast_syscall_32+0x13a/0x8b0
[  175.393810][ T9829]  ? lockdep_hardirqs_on+0x7d/0x110
[  175.393837][ T9829]  do_fast_syscall_32+0x32/0x70
[  175.393857][ T9829]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  175.393882][ T9829] RIP: 0023:0xf73fefec
[  175.393902][ T9829] Code: Unable to access opcode bytes at 0xf73fefc2.
[  175.393910][ T9829] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171
[  175.393928][ T9829] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080847fff
[  175.393941][ T9829] RDX: 0000000000034000 RSI: 0000000000000000 RDI: 000000008005ffe4
[  175.393952][ T9829] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000
[  175.393962][ T9829] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  175.393973][ T9829] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  175.393998][ T9829]  </TASK>
[  175.598636][ T9838] netlink: 'syz.2.1071': attribute type 1 has an invalid length.
[  175.599431][ T9837] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  175.634170][ T9840] netlink: 'syz.0.1068': attribute type 5 has an invalid length.
[  175.634188][ T9840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1068'.
[  175.699904][ T9841] ALSA: mixer_oss: invalid OSS volume 'OGAI‹'
[  175.699957][ T9841] ALSA: mixer_oss: invalid OSS volume 'Šä:&ÇBŠG¤`TÝoÄD^z¿‡F?!k''
[  175.700360][ T9841] ALSA: mixer_oss: invalid OSS volume ''
[  176.151288][ T9845] 9p: Bad value for 'rfdno'
[  176.160608][ T9845] netlink: 'syz.4.1073': attribute type 11 has an invalid length.
[  177.068190][ T9865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1080'.
[  177.415811][ T9872] 9p: Bad value for 'rfdno'
[  177.427905][ T9872] netlink: 'syz.4.1082': attribute type 11 has an invalid length.
[  177.634884][ T9879] netlink: 'syz.2.1083': attribute type 1 has an invalid length.
[  177.652626][ T9879] 8021q: adding VLAN 0 to HW filter on device bond2
[  177.658608][ T9879] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1083'.
[  177.676760][ T9879] bond2: (slave geneve3): making interface the new active one
[  177.685508][ T9879] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  177.915095][ T9873] Console: switching to colour dummy device 80x25
[  178.669693][ T9888] netlink: 'syz.5.1086': attribute type 5 has an invalid length.
[  178.669708][ T9888] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1086'.
[  178.695619][ T9893] netlink: 'syz.2.1095': attribute type 1 has an invalid length.
[  178.710910][ T9893] bond3: entered promiscuous mode
[  178.711233][ T9893] 8021q: adding VLAN 0 to HW filter on device bond3
[  178.728222][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1095'.
[  178.728251][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1095'.
[  178.732252][ T9896] ALSA: mixer_oss: invalid OSS volume 'OGAI‹'
[  178.732305][ T9896] ALSA: mixer_oss: invalid OSS volume 'Šä:&ÇBŠG¤`TÝoÄD^z¿‡F?!k''
[  178.732722][ T9896] ALSA: mixer_oss: invalid OSS volume ''
[  178.753744][ T9893] bond3: (slave bridge2): making interface the new active one
[  178.753766][ T9893] bridge2: entered promiscuous mode
[  178.755717][ T9893] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  179.657195][ T9907] syz.0.1092 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  179.837227][ T9914] 9p: Bad value for 'rfdno'
[  179.838921][ T9914] netlink: 'syz.5.1093': attribute type 11 has an invalid length.
[  180.490822][ T9932] syzkaller0: entered promiscuous mode
[  180.490837][ T9932] syzkaller0: entered allmulticast mode
[  180.506926][ T9932] tipc: Started in network mode
[  180.506948][ T9932] tipc: Node identity c25182985b72, cluster identity 4711
[  180.508668][ T9932] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.511143][ T9931] tipc: Resetting bearer <eth:syzkaller0>
[  180.521178][ T9931] tipc: Disabling bearer <eth:syzkaller0>
[  180.581325][ T9934] netlink: 'syz.4.1102': attribute type 1 has an invalid length.
[  180.601042][ T9934] bond2: entered promiscuous mode
[  180.601231][ T9934] 8021q: adding VLAN 0 to HW filter on device bond2
[  180.602496][ T9937] FAULT_INJECTION: forcing a failure.
[  180.602496][ T9937] name failslab, interval 1, probability 0, space 0, times 0
[  180.602515][ T9937] CPU: 0 UID: 0 PID: 9937 Comm: syz.0.1103 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  180.602532][ T9937] Tainted: [L]=SOFTLOCKUP
[  180.602536][ T9937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  180.602543][ T9937] Call Trace:
[  180.602548][ T9937]  <TASK>
[  180.602566][ T9937]  dump_stack_lvl+0x100/0x190
[  180.602588][ T9937]  should_fail_ex.cold+0x5/0xa
[  180.602606][ T9937]  should_failslab+0xc2/0x120
[  180.602630][ T9937]  __kmalloc_cache_noprof+0x91/0x6d0
[  180.602645][ T9937]  ? proc_self_get_link+0x189/0x1f0
[  180.602666][ T9937]  proc_self_get_link+0x189/0x1f0
[  180.602684][ T9937]  pick_link+0xac2/0x13c0
[  180.602699][ T9937]  ? __pfx_proc_self_get_link+0x10/0x10
[  180.602717][ T9937]  step_into_slowpath+0x9ba/0xf90
[  180.602734][ T9937]  ? __pfx_step_into_slowpath+0x10/0x10
[  180.602751][ T9937]  ? lookup_fast+0x2da/0x600
[  180.602763][ T9937]  ? inode_permission+0x374/0x620
[  180.602777][ T9937]  link_path_walk+0xf28/0x1cc0
[  180.602797][ T9937]  path_openat+0x1ac/0x2440
[  180.602816][ T9937]  ? __pfx_path_openat+0x10/0x10
[  180.602837][ T9937]  do_file_open+0x20e/0x430
[  180.602854][ T9937]  ? __pfx_do_file_open+0x10/0x10
[  180.602881][ T9937]  ? _raw_spin_unlock+0x28/0x50
[  180.602896][ T9937]  ? alloc_fd+0x471/0x7a0
[  180.602915][ T9937]  do_sys_openat2+0x10f/0x1e0
[  180.602927][ T9937]  ? __pfx_do_sys_openat2+0x10/0x10
[  180.602941][ T9937]  ? __ia32_sys_futex_time32+0x2f4/0x470
[  180.602958][ T9937]  __ia32_compat_sys_openat+0x12d/0x210
[  180.602971][ T9937]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  180.602990][ T9937]  do_int80_emulation+0x166/0x650
[  180.603002][ T9937]  asm_int80_emulation+0x1a/0x20
[  180.603015][ T9937] RIP: 0023:0xf718762b
[  180.603025][ T9937] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  180.603037][ T9937] RSP: 002b:00000000f54463cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  180.603048][ T9937] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5446490
[  180.603056][ T9937] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  180.603062][ T9937] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  180.603069][ T9937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  180.603076][ T9937] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  180.603090][ T9937]  </TASK>
[  180.611407][   T44] kauditd_printk_skb: 265 callbacks suppressed
[  180.611418][   T44] audit: type=1800 audit(1791548322.802:3700): pid=9937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1103" name="file2" dev="sda1" ino=2040 res=0 errno=0
[  180.619347][ T9934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1102'.
[  180.619375][ T9934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1102'.
[  180.655176][ T9934] bond2: (slave bridge1): making interface the new active one
[  180.655197][ T9934] bridge1: entered promiscuous mode
[  180.660406][ T9934] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  180.680530][ T9941] 9p: Bad value for 'rfdno'
[  180.682337][ T9941] netlink: 'syz.0.1105': attribute type 11 has an invalid length.
[  180.821649][ T3263] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[  180.946885][ T9952] IPVS: rr: TCP 127.0.0.1:21 - no destination available
[  180.972160][ T3263] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  180.973075][ T3263] usb 7-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC
[  180.973100][ T3263] usb 7-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  180.976405][ T3263] usb 7-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  180.976418][ T3263] usb 7-1: Manufacturer: syz
[  180.976426][ T3263] usb 7-1: SerialNumber: syz
[  180.995936][ T9954] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1108'.
[  180.996036][ T5216] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  181.117983][ T9959] syzkaller0: entered promiscuous mode
[  181.117996][ T9959] syzkaller0: entered allmulticast mode
[  181.136885][ T9959] tipc: Started in network mode
[  181.136911][ T9959] tipc: Node identity 06a30c76af56, cluster identity 4711
[  181.137323][ T9959] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.140212][ T9958] tipc: Resetting bearer <eth:syzkaller0>
[  181.155978][ T9958] tipc: Disabling bearer <eth:syzkaller0>
[  181.164682][ T5216] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  181.168415][ T5216] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  181.168440][ T5216] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  181.168454][ T5216] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  181.168475][ T5216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.240034][ T9961] FAULT_INJECTION: forcing a failure.
[  181.240034][ T9961] name failslab, interval 1, probability 0, space 0, times 0
[  181.240060][ T9961] CPU: 1 UID: 0 PID: 9961 Comm: syz.5.1114 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  181.240077][ T9961] Tainted: [L]=SOFTLOCKUP
[  181.240081][ T9961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.240088][ T9961] Call Trace:
[  181.240092][ T9961]  <TASK>
[  181.240096][ T9961]  dump_stack_lvl+0x100/0x190
[  181.240126][ T9961]  should_fail_ex.cold+0x5/0xa
[  181.240146][ T9961]  should_failslab+0xc2/0x120
[  181.240164][ T9961]  kmem_cache_alloc_noprof+0x92/0x6a0
[  181.240182][ T9961]  ? security_file_alloc+0x34/0x2c0
[  181.240199][ T9961]  security_file_alloc+0x34/0x2c0
[  181.240213][ T9961]  init_file+0x95/0x480
[  181.240230][ T9961]  alloc_empty_file+0x79/0x1c0
[  181.240242][ T9961]  path_openat+0xdb/0x2440
[  181.240260][ T9961]  ? __pfx_path_openat+0x10/0x10
[  181.240280][ T9961]  do_file_open+0x20e/0x430
[  181.240297][ T9961]  ? __pfx_do_file_open+0x10/0x10
[  181.240323][ T9961]  ? _raw_spin_unlock+0x28/0x50
[  181.240339][ T9961]  ? alloc_fd+0x471/0x7a0
[  181.240358][ T9961]  do_sys_openat2+0x10f/0x1e0
[  181.240370][ T9961]  ? __pfx_do_sys_openat2+0x10/0x10
[  181.240384][ T9961]  ? __ia32_sys_futex_time32+0x2f4/0x470
[  181.240398][ T9961]  ? __ia32_sys_futex_time32+0x2fd/0x470
[  181.240414][ T9961]  __ia32_compat_sys_openat+0x12d/0x210
[  181.240427][ T9961]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  181.240447][ T9961]  do_int80_emulation+0x166/0x650
[  181.240460][ T9961]  asm_int80_emulation+0x1a/0x20
[  181.240471][ T9961] RIP: 0023:0xf715762b
[  181.240482][ T9961] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  181.240493][ T9961] RSP: 002b:00000000f54163cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  181.240505][ T9961] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5416490
[  181.240512][ T9961] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  181.240519][ T9961] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  181.240526][ T9961] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  181.240532][ T9961] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  181.240547][ T9961]  </TASK>
[  181.251949][   T44] audit: type=1800 audit(1791548323.442:3701): pid=9961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1114" name="file2" dev="sda1" ino=2040 res=0 errno=0
[  181.312888][ T9964] 9p: Bad value for 'rfdno'
[  181.314900][ T9964] netlink: 'syz.5.1115': attribute type 11 has an invalid length.
[  181.629018][ T9971] ==================================================================
[  181.629029][ T9971] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320
[  181.629050][ T9971] Read of size 192 at addr ffffffff9ccb5c20 by task syz.5.1117/9971
[  181.629064][ T9971] 
[  181.629072][ T9971] CPU: 1 UID: 0 PID: 9971 Comm: syz.5.1117 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  181.629089][ T9971] Tainted: [L]=SOFTLOCKUP
[  181.629094][ T9971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.629100][ T9971] Call Trace:
[  181.629105][ T9971]  <TASK>
[  181.629121][ T9971]  dump_stack_lvl+0x100/0x190
[  181.629139][ T9971]  print_report+0x13d/0x4b0
[  181.629156][ T9971]  ? __virt_addr_valid+0x239/0x430
[  181.629174][ T9971]  ? usb_copy_descriptors+0x18d/0x320
[  181.629188][ T9971]  kasan_report+0xdf/0x1c0
[  181.629206][ T9971]  ? usb_copy_descriptors+0x18d/0x320
[  181.629221][ T9971]  kasan_check_range+0x10f/0x1e0
[  181.629233][ T9971]  __asan_memcpy+0x23/0x60
[  181.629246][ T9971]  usb_copy_descriptors+0x18d/0x320
[  181.629262][ T9971]  usb_assign_descriptors+0xd2/0x470
[  181.629278][ T9971]  f_audio_bind+0x243a/0x3950
[  181.629297][ T9971]  ? __pfx_f_audio_bind+0x10/0x10
[  181.629313][ T9971]  usb_add_function+0x219/0x890
[  181.629327][ T9971]  ? composite_dev_prepare+0x181/0x420
[  181.629345][ T9971]  configfs_composite_bind+0xd83/0x1960
[  181.629362][ T9971]  ? kernfs_create_link+0x1bd/0x240
[  181.629376][ T9971]  gadget_bind_driver+0x28c/0xbf0
[  181.629387][ T9971]  ? __pfx_gadget_bind_driver+0x10/0x10
[  181.629398][ T9971]  really_probe+0x241/0xa60
[  181.629411][ T9971]  __driver_probe_device+0x210/0x460
[  181.629440][ T9971]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  181.629459][ T9971]  driver_probe_device+0x4a/0x140
[  181.629471][ T9971]  __driver_attach+0x21f/0x5b0
[  181.629484][ T9971]  ? __pfx___driver_attach+0x10/0x10
[  181.629497][ T9971]  bus_for_each_dev+0x13e/0x1d0
[  181.629513][ T9971]  ? __pfx_bus_for_each_dev+0x10/0x10
[  181.629529][ T9971]  ? bus_add_driver+0x2b5/0x5b0
[  181.629548][ T9971]  bus_add_driver+0x305/0x5b0
[  181.629566][ T9971]  driver_register+0x1e2/0x360
[  181.629580][ T9971]  usb_gadget_register_driver_owner+0x132/0x210
[  181.629593][ T9971]  gadget_dev_desc_UDC_store+0x1b0/0x2e0
[  181.629608][ T9971]  configfs_write_iter+0x302/0x4e0
[  181.629626][ T9971]  vfs_write+0x6af/0x1050
[  181.629640][ T9971]  ? __pfx_configfs_write_iter+0x10/0x10
[  181.629658][ T9971]  ? __pfx_vfs_write+0x10/0x10
[  181.629671][ T9971]  ? find_held_lock+0x2b/0x80
[  181.629689][ T9971]  ksys_write+0x12a/0x250
[  181.629702][ T9971]  ? __pfx_ksys_write+0x10/0x10
[  181.629715][ T9971]  ? arch_syscall_is_vdso_sigreturn+0x19b/0x200
[  181.629728][ T9971]  ? syscall_user_dispatch+0x76/0x130
[  181.629742][ T9971]  __do_fast_syscall_32+0x13a/0x8b0
[  181.629754][ T9971]  do_fast_syscall_32+0x32/0x70
[  181.629764][ T9971]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  181.629778][ T9971] RIP: 0023:0xf73fefec
[  181.629791][ T9971] Code: Unable to access opcode bytes at 0xf73fefc2.
[  181.629796][ T9971] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  181.629807][ T9971] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000480
[  181.629815][ T9971] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000
[  181.629821][ T9971] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  181.629828][ T9971] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  181.629834][ T9971] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  181.629845][ T9971]  </TASK>
[  181.629849][ T9971] 
[  181.629851][ T9971] The buggy address belongs to the variable:
[  181.629855][ T9971]  ac_header_desc+0x0/0x40
[  181.629869][ T9971] 
[  181.629872][ T9971] The buggy address belongs to the physical page:
[  181.629876][ T9971] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ccb5
[  181.629886][ T9971] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff)
[  181.629900][ T9971] raw: 00fff00000002000 ffffea0000732d48 ffffea0000732d48 0000000000000000
[  181.629911][ T9971] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  181.629918][ T9971] page dumped because: kasan: bad access detected
[  181.629923][ T9971] page_owner info is not present (never set?)
[  181.629927][ T9971] 
[  181.629929][ T9971] Memory state around the buggy address:
[  181.629935][ T9971]  ffffffff9ccb5b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  181.629942][ T9971]  ffffffff9ccb5b80: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9
[  181.629950][ T9971] >ffffffff9ccb5c00: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9
[  181.629956][ T9971]                                   ^
[  181.629961][ T9971]  ffffffff9ccb5c80: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9
[  181.629968][ T9971]  ffffffff9ccb5d00: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9
[  181.629974][ T9971] ==================================================================
[  181.630020][ T9971] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  181.779181][ T9971] CPU: 1 UID: 0 PID: 9971 Comm: syz.5.1117 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  181.782506][ T9971] Tainted: [L]=SOFTLOCKUP
[  181.783859][ T9971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.786968][ T9971] Call Trace:
[  181.788025][ T9971]  <TASK>
[  181.788987][ T9971]  dump_stack_lvl+0x100/0x190
[  181.790477][ T9971]  vpanic+0x553/0x970
[  181.791731][ T9971]  ? __pfx_vpanic+0x10/0x10
[  181.793157][ T9971]  ? mark_held_locks+0x40/0x70
[  181.794661][ T9971]  ? irqentry_exit+0x24d/0xa10
[  181.796163][ T9971]  ? usb_copy_descriptors+0x18d/0x320
[  181.797835][ T9971]  panic+0xd1/0xe0
[  181.799025][ T9971]  ? __pfx_panic+0x10/0x10
[  181.800423][ T9971]  check_panic_on_warn.cold+0x19/0x34
[  181.802100][ T9971]  end_report.part.0+0x3a/0x90
[  181.803600][ T9971]  kasan_report.cold+0xe/0x18
[  181.805090][ T9971]  ? usb_copy_descriptors+0x18d/0x320
[  181.806764][ T9971]  kasan_check_range+0x10f/0x1e0
[  181.808307][ T9971]  __asan_memcpy+0x23/0x60
[  181.809729][ T9971]  usb_copy_descriptors+0x18d/0x320
[  181.811351][ T9971]  usb_assign_descriptors+0xd2/0x470
[  181.812963][ T9971]  f_audio_bind+0x243a/0x3950
[  181.814400][ T9971]  ? __pfx_f_audio_bind+0x10/0x10
[  181.815970][ T9971]  usb_add_function+0x219/0x890
[  181.817505][ T9971]  ? composite_dev_prepare+0x181/0x420
[  181.819230][ T9971]  configfs_composite_bind+0xd83/0x1960
[  181.820951][ T9971]  ? kernfs_create_link+0x1bd/0x240
[  181.822584][ T9971]  gadget_bind_driver+0x28c/0xbf0
[  181.824157][ T9971]  ? __pfx_gadget_bind_driver+0x10/0x10
[  181.825891][ T9971]  really_probe+0x241/0xa60
[  181.827316][ T9971]  __driver_probe_device+0x210/0x460
[  181.828980][ T9971]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  181.830809][ T9971]  driver_probe_device+0x4a/0x140
[  181.832378][ T9971]  __driver_attach+0x21f/0x5b0
[  181.833886][ T9971]  ? __pfx___driver_attach+0x10/0x10
[  181.835529][ T9971]  bus_for_each_dev+0x13e/0x1d0
[  181.837050][ T9971]  ? __pfx_bus_for_each_dev+0x10/0x10
[  181.838740][ T9971]  ? bus_add_driver+0x2b5/0x5b0
[  181.840270][ T9971]  bus_add_driver+0x305/0x5b0
[  181.841756][ T9971]  driver_register+0x1e2/0x360
[  181.843258][ T9971]  usb_gadget_register_driver_owner+0x132/0x210
[  181.845206][ T9971]  gadget_dev_desc_UDC_store+0x1b0/0x2e0
[  181.846964][ T9971]  configfs_write_iter+0x302/0x4e0
[  181.848581][ T9971]  vfs_write+0x6af/0x1050
[  181.849942][ T9971]  ? __pfx_configfs_write_iter+0x10/0x10
[  181.851691][ T9971]  ? __pfx_vfs_write+0x10/0x10
[  181.853193][ T9971]  ? find_held_lock+0x2b/0x80
[  181.854741][ T9971]  ksys_write+0x12a/0x250
[  181.856100][ T9971]  ? __pfx_ksys_write+0x10/0x10
[  181.857627][ T9971]  ? arch_syscall_is_vdso_sigreturn+0x19b/0x200
[  181.859584][ T9971]  ? syscall_user_dispatch+0x76/0x130
[  181.861253][ T9971]  __do_fast_syscall_32+0x13a/0x8b0
[  181.862879][ T9971]  do_fast_syscall_32+0x32/0x70
[  181.864400][ T9971]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  181.866393][ T9971] RIP: 0023:0xf73fefec
[  181.867689][ T9971] Code: Unable to access opcode bytes at 0xf73fefc2.
[  181.869759][ T9971] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  181.872324][ T9971] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000480
[  181.874786][ T9971] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000
[  181.877228][ T9971] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  181.879682][ T9971] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  181.882129][ T9971] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  181.884569][ T9971]  </TASK>
[  181.886155][ T9971] Kernel Offset: disabled
[  181.887505][ T9971] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:18:41  Registers:
info registers vcpu 0

CPU#0
RAX=000000000034f697 RBX=ffffffff8fa91580 RCX=ffffffff8bd20235 RDX=0000000000000001
RSI=ffffffff8e3e01a1 RDI=ffffffff8c625580 RBP=fffffbfff1f522b0 RSP=ffffffff8fa07cf0
R8 =0000000000000001 R9 =ffffed10056067bd R10=ffff88802b033deb R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1f40fa2 R15=dffffc0000000000
RIP=ffffffff8bd1e76f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88809574d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f53d1da4 CR3=00000000538bf000 CR4=00352ef0
DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000011c00000000 0000000400000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000079 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85b0e345 RDI=ffffffff9cc69ba0 RBP=ffffffff9cc69b60 RSP=ffffc9000e866f20
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6666666666666652
R12=0000000000000000 R13=0000000000000079 R14=000000000000000a R15=ffffc9000e867238
RIP=ffffffff85b0e36f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88809584d000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f73ff000 CR3=0000000060e40000 CR4=00352ef0
DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=000000000039161f RBX=ffff88801df12580 RCX=ffffffff8bd20235 RDX=0000000000000001
RSI=ffffffff8e3e01a1 RDI=ffffffff8c625580 RBP=ffffed1003be24b0 RSP=ffffc9000048fe00
R8 =0000000000000001 R9 =ffffed10056467bd R10=ffff88802b233deb R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000
RIP=ffffffff8bd1e76f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88809594d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7415090 CR3=0000000060e40000 CR4=00352ef0
DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=ffff888072ce6734 RBX=ffffc900048073f8 RCX=0000000000000003 RDX=0000000000000004
RSI=ffff888072ce672d RDI=ffff888072ce6735 RBP=ffff888072ce6734 RSP=ffffc900048071f0
R8 =0000000000000001 R9 =ffffed100e59cce6 R10=ffff888072ce6737 R11=0000000000000000
R12=0000000000000730 R13=0000000000000004 R14=000000000000072c R15=0000000000000000
RIP=ffffffff8bd211ec RFL=00010202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f65e07a9300 ffffffff 00c00000
GS =0000 ffff888095a4d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00005573ab492000 CR3=00000000516a3000 CR4=00352ef0
DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000464 0000001800000000 0000000000000000 0000000000000015
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008001f88030fff ffffff021f800338 00000ec60000001b 0000000100000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00040001aec4030a 040001aec0030204 0001aebc030c0400 01aeb80304040001
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 aeb40302040001ae b00300080001aea8 0300040001aea403 00020001aea20300
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 020001aea00304dd feeff8080001ae98 030785f4ce080001 ae90031080040001
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ae8c0301ca040001 ae88030fd0080001 ae800301ae800212 80031280021f9003
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0201900300080001 88030fffffffff02 0180032808000608 00200800060875bc
ZMM25=9549397995493979 9549397995493979 9549397995493979 9549397995493979 9549397995493979 9549397995493979 9549397995493979 9549397995493979
ZMM26=22e8f31722e8f317 22e8f31722e8f317 22e8f31722e8f317 22e8f31722e8f317 22e8f31722e8f317 22e8f31722e8f317 22e8f31722e8f317 22e8f31722e8f317
ZMM27=20cb6d3520cb6d35 20cb6d3520cb6d35 20cb6d3520cb6d35 20cb6d3520cb6d35 20cb6d3520cb6d35 20cb6d3520cb6d35 20cb6d3520cb6d35 20cb6d3520cb6d35
ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=3e0800003e080000 3e0800003e080000 3e0800003e080000 3e0800003e080000 3e0800003e080000 3e0800003e080000 3e0800003e080000 3e0800003e080000