last executing test programs:

27m11.300999806s ago: executing program 2 (id=870):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)=@rc, 0x80, 0x0, 0x0, &(0x7f00000006c0)=""/67, 0x43}, 0x2002)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r5 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0cc5640, 0x0)
r6 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000004380), 0x101602, 0x0)
read$FUSE(r9, &(0x7f00000020c0)={0x2020}, 0xffffffffffffff5c)
sched_setaffinity(r2, 0x8, &(0x7f0000000780)=0x7)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000500)="e306644c2f0b801228a9253e", 0xc, 0xfffffffffffffffd)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x44}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0)

27m9.842189184s ago: executing program 2 (id=875):
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$hpet(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$unix(r6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x18, 0x1, 0x1, [r5, r5]}}], 0x18}, 0x0)
recvmmsg$unix(r5, &(0x7f0000006f00)=[{{&(0x7f00000071c0)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000200)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x2, 0x2, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400})
ioctl$TUNSETTXFILTER(r4, 0x401054d5, &(0x7f0000000380)=ANY=[])
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'wg1\x00', 0x200})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r7, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

27m8.882203536s ago: executing program 1 (id=877):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(0xffffffffffffffff, 0x0)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0x40046f41, 0x20000502)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket(0x10, 0x2, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10)
r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0xc0842)
r8 = dup(r7)
ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000240)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0})
write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)

27m8.527288312s ago: executing program 2 (id=878):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'tunl0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5f", @ANYRES32=r5, @ANYRES64=r0], 0x40}}, 0x0)
sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001340)="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", 0x769}], 0x1}}], 0x1, 0x11)
syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x0, 0x800}, &(0x7f0000000280), &(0x7f0000000200))

26m58.764236928s ago: executing program 1 (id=880):
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_DO_IT(r0, 0xab00)
r1 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0be6ffff060000e400000100090000008c9b0c4100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ptrace$PTRACE_SETSIGMASK(0x420b, r2, 0x8, &(0x7f0000000180)={[0xffffffff, 0x7]})
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
socket(0x15, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
close(r5)
r7 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x2b8, 0x182, 0x0, 0x0, 0x1d8, 0x3a8, 0x3a8, 0x1d8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec, 0x0, {0x0, 0xe0ffff00000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xf7db, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2fc)

26m58.763876184s ago: executing program 2 (id=881):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045503, &(0x7f0000000340)={0x1, 0x1})
r1 = openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r7)
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0xc0ed0000, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x0, 0x1, 0x1, 0x0, 0x4})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005c40)=[{{&(0x7f00000000c0)={0xa, 0x4620, 0xe5f8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000002000000000000000000"], 0x10}}], 0x1, 0x24000804)

26m57.66469459s ago: executing program 1 (id=883):
r0 = openat$userio(0xffffff9c, &(0x7f00000001c0), 0x301000, 0x0)
ioctl$int_out(r0, 0x5462, &(0x7f0000000240))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'wg1\x00', 0x40001}, 0x18)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000580)={0x1, 'dummy0\x00'}, 0x18)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$unix(0x1, 0x2, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x70}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

26m57.614414362s ago: executing program 1 (id=884):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x2)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0)
ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000100)=0x1)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000800", "90be8b1c551265406c7f306003d8a0f4bd00"}})
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="70000000000905030000000000000000000000000900010073797a31000000000c00048004000140000000003c0002000c0002800500010000005b002c000180140000000000000006000000000000000000000014000400fe8000000000000000000000000000bb080005000000000061919ee653972286f6806fcd5043e0c8733d229281951f6965e331c86cb30f38a81c91a3b2f0fa851430426515b546badf"], 0x70}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r5)
r6 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5', 0x0)
pwritev(r7, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'geneve0\x00'})
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x0)
sendfile(r6, r6, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x9, 0x9, 0x1f, 0x14, "522530d6e597ca54b72437f1295d3513b07ad78ca88090d709b29ee7c21514bb1f066e71674e1cf500", "0109000000e14cbe4623c5ce6a392e161ffa301eabda93c62aa2000000000008", [0x7, 0xb]})
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000001180)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
write$UHID_INPUT(r5, &(0x7f00000011c0)={0x8, {"a91601391fec55f5d740df483fef8ed6e51d2688ee075bc2cf134c893ef6b36ea10dc7b1f344a3f1ed459d870eaa81253eab93ec865a626e751c3d4f317c24847461a0282614790bfcb6a0fc5b81c07d8f93d12135bdd1f02978eb1ae29eca5cde239a89aa835da3ad354ac844ded4092777e13bcc4297e10fb1390e775527d545437e250a13bc44cc3f7733778b8a93fb73b3cade15009a07fa2ec1d552bda2799a36dd0e98bf66e1b3d6ba638520a0ea6c3c875275cbf05f44f1f9222f4c08a63f40b1425d1027d04700b04afecfb07d1805e45290b55e2c017245000d735419b1532bcaaf59f03c4e6a0d33c0ba949396fde479fd0b13e5f8677d0bc22d4550c5273c84129a3992e0a168b29d4b0b4b68df80a38527a704f122ac6a3f8e3fa011482aae707a054f242ebd88afb003d4690cc78dee3cff7617411dd182cf405aec5ff630d9880f82f2ceb0a14caa6d11e8dd6c6fb69b7c855230ee459cc590a431892ffa523557663721712f3ed9f61bf180032e5998de2a4b004079b74ceb384ea396ee61f7b0f11fd1ed4be11f7b02110f1c8b10ace98b3cda1497a1fd39ab05483f5368adbe02deab54fe9fa9724f658f129a130e0c8b8f95203cfdf7ebffb4b2b6c60899723d440e2c7cf85993b8d6d6441061bdb4ab2b37092cd57f07f476f36b6a590200001feb3849429c5d33cd4a7188ce229830fac27868dfb0ea464d18ad1d5ee5b6b28a68fd068b5c77d03ce44eff6e48444f2552a4776a758f056373e8864a1a0ae7265e37b297e98bb7db86ad0de447ac802b8271cd830cd587b04e0c85c2fabd3abcc72edb4390808206e7ae1acb16b522eca7a453b93d53831221fc59c5ac72bd659b70ded473aaaecbb978375514056bb2c16068e3ac7b04e2a37347d14b8523c8d20eebfadc8b96cb3a29f051cf6dcd2f6f03696f6594dca3393631051ca8a02c383595581e8dcd7d277dfc2458d736edf98df3c8fb8795e9ee3a96f7b7bb41d557d9ff11071f62e1ef7ff85eeaa82477538681a4ce9fd736fbe058cca689f4225eae94b7687b7ba841d2816bf309fa2ee1c18a07e516f76aaa590a4734044b07b425fe89809a5782d56b22e84e45fba4848a2d529303b710ee26ac1096198c50d59da3461af3a80a48c6793ca9470c596b5e4526eb023c0b07515c66d483fbeb39b53288179f6c8595c80991d5dfb6a13ad3f10989e045a9426cc1b504a995c45459419ec589bb6392c481816db063df1205af6d1313bcf6f568e9b25a642a9970490f18e781e411a9316283d0c19d65e5a490bb3b3777f6c26a03786151609bdf105013dc767cba0fa9edcc81a2fbd11b7dd25be8c2be57ad22cf327cbe0e585f29cbcdbf177916ed1c932ed6e1064116d1914cfc3f6d0577dee0f00edbc8f6649e67a11fd0b0e65387f104b632c6ce37f64f92f11481c3e7943a2e29f6e8a583df603379347b877d446c1953bf93e127f123f6747f4f09389c73bb5b8b890ad1018386e54cd98d55fe8869c54145c4590273234e0f699b76b31f7b3da967f791b5a1e2831fcf877d8f207ffe047ebd63a295e2735ded8532b226ef48886a1e9e405f4e81591d29f842da0af954cee869ccc3b62ecaed2e4b190f9c8c54d7c117c49c99f8caef42a3024c315fdb90ac0b3ecc1cee6f32331d2ff35c410a7e6594c1e7203bbd3d5ea4dd351a2d843e073f32ca8e6660889eb7696e993e3f079641f9524506978e78d0e477e438e871cfb8c70c7848c3f91c8a34eedeb4faa9d85001cc6dd7920ba72f672faf5edb0a37f9cd0ecc35fc74ea1d858c0ead575fff04cc4e6e1fbe92a841e4b9920560e4e13376a85cbb0f1e6ac1133c23d49595ebba27022a15d7603e8931fa5e647f02dc9052a55126bd83d56eadcb2ef3b964a372eeb9dc9fcab7ab6df71f138537d848b91cbd86f87a8a7ae087d654844a0b33e3622b167dcae0c3f0549b7534442deea9cb92f252386a0b50a452702385a5a4850c12dea9d6d535f5c456b8e398ae43205dea889b35d5f693006821b45ac6ca623ec6e4bc5bf4c7fb27c1c93bf7abb93885ca700180667fca65923ac3c348936081d18f1722c31b6239eadb4aa11e199cf1666559c28d83e0b997d2496282e119c8e0f4fa2cd4a34eecb8bfa0515f8f7ce1bc07a54e88ce1232e09000be77ea474ae1ea43b2b684930a510eb0a8287a7dd6283730dd153fca1017365114b8430aff43677334250b8654411205dbd6acbd4b73ff6a83dcd81c692209392d75677bf8f4c522d6a4d75d5fb28161b9889b9ac280abf0208d9f3fa82649096ddd5b28195036bb740107bf4da02a14172b33240658a096ccd4185f6410f601bd4efef02c52783f2bc5bf0ad80d17b2684afea6f92f61ed13724ce8144093624a903ff8c13f6da86bbc5285b380662533172a6cf7203942a9e0277a22160952a6164af997d44cca1eaa5ec2a56f8b8f92acb25f2438ff5a04510e3572d57730216336de398a5f2f480531852deaf6aed90f8e1fe6e4cf632c5ff2d34248f9c91fb6f3506402f8c4e2ad2dab484d0e153fc6b71d11d8484acc506eed02a38f4db83f6a74cf1c2ecebe55e52342f54f1fc2e4700b17778b2a6c51b0407533f50daeb426ae89b94a91762b0c3f4c1881e444656f3589c52ac197c0c15ce96e5fd8c0b88c68e8309f6982c9ce83f93b2ca9ed4f10d1d0760b46d9dec31afb7175bfaa03e55a27316d77f70a5d4a59c27576049adf51957e7835c201346dd50700d1170cbcec60d5ce2ba5bee0440727c5cb3a93495cb54838e832e59dda5c0804b13166fa8c970e9d04226cd17b16974a4e7f95bf158c8a2684342afa0214159311343631be7203e2d62f3946d38b2bb90fde648393c8c12694053e9932ee4e9f5174a371cce6cba02a58f45b19940b84f175d8ef791bd503782b6277933d8310d15dd22638efa1ef6b0ee7b3a7d8dded316cd1dc5bdb3475f05c42369fbb153eb2a1a4fe39ec0b71b8ff109f9cf834d3476c3e31076b915f981a443d3f20dd19405c2fadb9167308dc781b54cbadf81e08013a35639020617d7fc194df9b308c4161315a0f1437e93f6ce465175c0e76519657c031cd269cf054cf27c66c62fca2ec6b15d7455aa14fda995e931f5668ba59b2a67f6c0bc5efb844fe886a503133a895bb63acec03acea39a4eb7b871d1cdc648b01e438a46ad83bcb358c0c98089c7d85eb6804c9524af334d3102cc7fc5b33dd2beed3f1f5487b225b141e8d04a01e5d45d23669915158c44cb25574d2689e0f69ed200d490b7f6e7d2f9e5d2a07c0d1864e679f22228a241c03c912a27d0f314b71effbf4bc1c1c257d500d0f94a2b015e63a64bef58ec86389b1c318c12fc3e41dbb6f9e18f1e3e2e4f2fef2fd608e96096356414647f0868c2ef25806134cbf915ebed42ce609566f3d45d6486baf047fbfef20d265e5d7d4eb4f4e25d23c7187a06156911c25da4a521b2506bd054aeb18b8131b600e73dfed4740075ba09e9c701c380f9bf548017e2f2973e61b8fb00c7548b887c8f8c397fa1f82b8668bd9b733dc8aad54a05df146c81fc2bfb23351af9b74368525f701839ca37cce1a6ae03a8b537e6009da11fedf0818203e00bdfe96b428bf2a83d9e9c798ea7a138d0a1e9c76ee332155b706a639632aa7778a2430b6dcfb84147aecdcbfc6d55d1175ecd34c1d8d393296da47d8afcea34e53c52b2e03f0a8503660ec73183678d70ccf69fd8ec0b6b2280238bb33fcaaafbee6c792730a77ed68e373caecdaaa6b0ddc82a4bdda2d099cff502a2d4c3c6081c9ccbce08ee2335d6fb2a824c78a38f5af4b630804a0ec129df1f2230b297df959606631b91d0e1e99886337c570dc4ab1d25859a02f50f82da46fb514b612a54c94546367a34020873063a849acb01289f40a4d67632850d85b50dcc87bc2c3f7a0c1f0c5b1afd443dc1fe0f48cd9d042046a9cfcf288f4a46f08b85313750b2f1425b2127f6043cb5791af988d4ac5acb7dbb3b12a7bb50d925d534d26ff90b709d61bdaafa873d4e30ac4650edf1bf4fd6b82118891ad83895a44b23d62dac737c781f09d66fa92367ab6dabc7640490ea7515f05c6de3b000ad15d08af419d20c2c1db730c27fb6bd7cb9ce9cabd08f14701f03a164b93ea339c7329120a30ff0cc8daddf61c3f7d5f5c78bd2b5c7686e9d9050b32416c0454583aadc59db3a5da2b6c8e52b02a5f20b60829e5ed98725249139e0f0c1096e9f2cdcfd3328cf71948df2c5d435134b7bc74a615d17a797b5db9d6e086f6cf9c13adc96b9f335b5af0243b4f789ffe2e8d4e501c241a89bde6ca1003caf94999242bdfa491e35e65790fdcdfd034accaa857f08391443fb01afa14fe8f6c3e3ead3f4999bf0e653ea3ab74c275d48f4bc4df27de336d42b72bbb37a0ee3bf4a5c97799608fb66933f1a80989154a2605285f1c1e9d661bb5288acbae64d99b4e9bf4da7975d6fd36677be2dfb0a6d3ea84e4ea13cedd140ff6e3312b13cd34cf01731474efeebece428605b4022852b109fa849effde7d1c99020d74d163182d2effc711f087a48ada815642922de01c8ad112b99407b0349be21fb655e9e6921d60b8e7cbb42ae55cc10007f380db83c49d39dcafb430b5f476e9c95d937b6104f8d427df9e36590a3fed3350389ff4639de6be1bea96645e91114eec6991213ab6cc4a768580ba7604d92f9d535d815e95072a55633bb705a860d40d74a461df5e6a95d02698a317bd3b3485c0d0e78759ef5b22b418b2a507d4c59bd1246c1340a2ead5d32f327cdc6b0be3cb5bd499565069a294210530e330fd2e8452df593cd5274eb28bcdc8a8eb0e7abc6b4be7283ea0262cb2b0e792f697ec42042738aae47bcbd7b330e9a58ba5fff6d7f83510532f69ed5a41e0ca17b3378b829763475d5e6536a6fe0c3768070707dece07ea76075afe2ef5e9df48357e9237b17993805357b5c972100eee46b2c1c0b22e062b75efbdfb2bd696d74c9adeb477f6edaf430caec1f990d26c0508daf3d8dac223319d66880f5f16712fa0548df82f10638371c0c5c1d1ece3c2784b8a4829649bb9e2e8d7cacd1414e53f333c504f2d683ab64c7d84973105a426422c60d585743b0f4aa2f65dee9ec22b555ce39450c48e8f7e0e08d6e1564c6499ffb1bb645cc6055e9016fc8de035052d65800079fbe14d01fa9a150cc30132db4ffa3749c0676c8d62a6c8dda67a7bb9fa188a30c1fdaf8b6b565b5c546c6b7c8ec8065f8817e90d8edeeb20457ae0f39ca16fce70e3e6d2214be9ea542dfd5e91abf67f66fac581ecce89d7e5cce1a35679c2e264ecde57359671cbbef8db527dbb9564a74e316bc4c055423a0113e690c225427a1b64ae8c3eb1dc4bda75ec8fbe727a8baf2289cb5afb9d463d69200721d8a2d314b842f06291b658045c807018c941c9f78a22f560a4f0a339ab5fdda7a9e24b676e0cce338cce1b07661bb701ee880a18eee70171fa80fa6337a1a33159aaad54da46a4ac354a21effacb4abf817b0fdf7925e36d9ae82f43b5f5bb3a6888aed34b8619061ad5bc7d8962aec41507a4504488b9ff4376e1d175d73d2f59a1de908d0431796404122c3b4ba18172798be4b2c73e115d3021ef3d90e9a108a84a5eea183f0bbb572b29453cc836f8bf38137808d8522f1ae883b2503eeae7cba7b4ac504fb47674e660884cee3da201828b1890081d286863ab3be079b5667adf7226e59bad65e0e739f8ebdfc6d27972e409beef6c", 0x1000}}, 0x1006)

26m53.962840984s ago: executing program 1 (id=888):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @local}, 0x0, 0x0)
getsockopt$inet6_buf(r4, 0x29, 0x2e, &(0x7f00000003c0)=""/119, &(0x7f0000000440)=0x77)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYBLOB='\x00'/15, @ANYBLOB], 0x48)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}})
ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}})
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_open_dev$loop(&(0x7f00000001c0), 0x5749, 0x408882)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r9, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c)

26m52.591292749s ago: executing program 2 (id=890):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xc0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil)
shmat(r4, &(0x7f00003e8000/0x1000)=nil, 0x4000)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
write$apparmor_exec(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='stac'], 0xb1)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = syz_open_dev$radio(&(0x7f0000001500), 0x2, 0x2)
ioctl$VIDIOC_S_TUNER(r7, 0x4054561e, &(0x7f0000001540)={0x80000000, "f7927bb2926221ddef9bc53d083af7ef8fe2de50e5ffc9113f80820ab33b9795", 0x1, 0x0, 0x6, 0x9, 0x1, 0x2, 0x8, 0x3})
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000a80)="3dfeb167f3ccc51b8ec0ba896a6d39292279e90f7abfdaee0f52b8a3554c9122ce1f6ed327282ad8c2d74bb1a770183e755b9f37cc301f5392a0e4831635410fe4b2a8e6bdb04d5d", 0x1f00, 0x48)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000004001000040000000500", @ANYBLOB], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r8}, 0x38)

26m50.850412579s ago: executing program 1 (id=892):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x2000000000000376, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xb1, &(0x7f0000000140)=""/177, 0x41100, 0xb4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2008, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x57c91000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={<r6=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000680)={0x13, 0x10, 0x10f, {0x0, r6, 0x2}}, 0x18)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x800005d, 0x4810)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d500, 0x0)
r7 = fsopen(&(0x7f0000000280)='smb3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
readv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000080)}, {&(0x7f0000000400)=""/222, 0xde}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000000740)=""/64, 0x40}, {&(0x7f0000000600)=""/103, 0x67}, {0x0}, {0x0}], 0x7)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500080001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x20000044)

26m50.083985052s ago: executing program 2 (id=893):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x8000004, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
sched_setscheduler(r0, 0x0, &(0x7f0000000280)=0x8)
syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5c, 0x80, 0x0, 0x89}, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
process_vm_writev(r0, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1, &(0x7f0000000a80)=[{&(0x7f0000000600)=""/201, 0xc9}, {&(0x7f0000000700)=""/110, 0x6e}, {&(0x7f0000000780)=""/130, 0x82}, {&(0x7f0000000840)=""/247, 0xf7}, {&(0x7f0000000940)=""/84, 0x54}, {&(0x7f00000009c0)=""/185, 0xb9}], 0x6, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
r5 = socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000400)=@assoc_value, &(0x7f0000000440)=0x8)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x0, 0x0, 0x148, 0x268, 0x148, 0x2fc, 0x240, 0x240, 0x2fc, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'erspan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x20c, 0x268, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bridge_slave_1\x00', {0x21, 0x0, 0x0, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@sctp={{0x144}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@local}}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@unspec=@NFQUEUE1={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3ec)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}}], 0x80000000000020c, 0x0)
setsockopt$inet_int(r3, 0x0, 0xb, 0x0, 0x0)
r6 = socket(0x1000000000000010, 0x80802, 0x0)
write(r6, &(0x7f0000000080)="240000005200010000eef4f9002304000a04f51108000108020000fb0700028001000000", 0x24)

26m48.283204687s ago: executing program 0 (id=894):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getrlimit(0xf, &(0x7f0000000280))
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
madvise(&(0x7f0000907000/0x1000)=nil, 0x1000, 0xb)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file1\x00', 0x0, 0x4010, r2}, 0x14)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8)
sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
setfsuid(0xee01)
write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12)
r5 = memfd_create(&(0x7f0000000940)='\x00\x00\x04\x00\x1f\xd7\xdc1\x02{-3yE7\xb4\xa4\xc4\x85s\xedz\xef\x96\xe4:\xec>\xa2\x14\xb9\xa0\xfeA\x7f0\xee\xdeR\x94\x1f\xb8j\xc8;\x03\xfa):h\xffmkK\xef\x90\xfaC\f\x99\x18%\xaaa\b\xd8\f\xfb\xae\x0e\xb6\r\x04\x16\xb3\xdb\xf0\x97c\xddO\xceZD\xee/\xf7\xe3\xd5B\x88T\xc9\xf0\x8bJ\\\x1c\xa2&\f\xf7\x8eK\x9d\xe9\xca\x82\xd7\xa0b\xf4\xd2\xac&]\xe8&Knp\xd9\xe1\xe5F2\xf8\xa6+H\xc8\xa3\xe1[\xe3\xae\xcd\xd2\x89\xc1\x96<\xf0\xdf\xb8\xed\xa2\xb1\x9a\xf1vU9\xa9\xb9\x01\xc9\xf9\xcd\xf0]\x14I\xb4\x7f2\x84\xdb\xb7\x05\x8d\xa5\xf7{ww\xc8\xb8B\x90\xeci\x9bc{\xd0M\b%\x06\xd7\x17\xff\xc6\x8be\x9e\a\xe4\xb5 \xd9\x1c\xceM55\x99!\xcc\xac\\\b\xdc\x82\xf9\x87\x1em|\xc7\a,Fg4\x1d\xd9\xee\xd0|8\f\xcc\x7f\x15<8YW\x16zO9\xa7\x8a\xdd\xcc|\xbe\xda\x14\xf8\x8f\x94\xad\x90\xa51\xc6\xd0\xd7\x86\xb1\x15x\x12\xd2_?\xfa\xf8\xcd\xcf\xb7\x95\x1a\xd2Ue\xd5\xfb\\\x89\x11\xd0\xde\x04\x88L\x17Q\x94\x14\x0f\xc7\xdb\x86\x16|\xe9=\xee\x06U\x8a\xe8=\xe0\xf9\xce\xe4\xebM\a3\xba\x98\x9dv\xba\xfb\x7fk\xf0\x9a\xbf\x91KCC.B_:w\xff<z\xba\xbe\xaa\x1a\xde6\x8dz9]\xa3\xdbX\x1e\t\xb9\xa6N\xce\x1aH\x90\x01\xe1\xb4\x85\xf1\x8b\xe3$\a$\xb7\xc3\x9c\x06Tpe4\x80o\x87M\xc2\x18\xaa\x8c\x0f\x7f\x15p!\xa7\xe5\x82\x01O\x85\x8fx\xb9\xff\xd6qXX\x85\xd6\x00\x00\x00\x00\x00\x00\x00\x00', 0x1)
execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

26m44.530642474s ago: executing program 0 (id=895):
io_setup(0x8, &(0x7f0000000680))
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040))
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=<r6=>0x0, &(0x7f0000000340)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r5, 0x2ded, 0xee43, 0x0, 0x0, 0x0)
read(r2, &(0x7f0000000140)=""/109, 0x6d)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x3a4})
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
shutdown(r0, 0x1)
socket$alg(0x26, 0x5, 0x0)
sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0)
recvfrom$x25(0xffffffffffffffff, &(0x7f0000000180)=""/20, 0x14, 0x2, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x4}]}}]}, 0x3c}}, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000480)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x36, 0x8, 0x1000, 0x6, 0xfffffff9, 0x3, "648e6d175afcafa5cb0853a234f440d29043049158af8c3fb3695784c405e0bd9b0eff2a16c4a4b837d0ea0166d206a58eee3cec33bd"}}, 0x14e)
close(r0)

26m43.676011133s ago: executing program 32 (id=879):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, 0x0, 0x2, 0xb, 0x0, 0x41000, 0x21, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x84040, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ftruncate(r0, 0x401)
mmap(&(0x7f0000980000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x50, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="043e1a0d01130000aaaaaaaaaa120836ff090c000009ffffffffffff00f0d6d5f8c6efdf2058c73da1307ab9b27edf01508c2afce34852f4005caff1f5537c082de3619341ec20b0239466193e6cb512b050f9a36eeebea554949e57349a3fe3c9ab652d94d5166e0ecd4ac3feb41aeb4cfa35d6649bdeff79d63838244324df"], 0x1d)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58)
r5 = syz_io_uring_setup(0x1442, &(0x7f0000000140)={0x0, 0xcc1a, 0x80, 0x3, 0x46}, &(0x7f0000000440)=<r6=>0x0, &(0x7f0000000300)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r4, 0x0, 0x0, 0x0, 0x80800})
io_uring_enter(r5, 0x3516, 0xc2de, 0x8, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback}, 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000880)=""/182, 0xb6}], 0x1}, 0xc45a}], 0x1, 0x10100, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x80000, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
creat(0x0, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)

26m43.38243538s ago: executing program 0 (id=897):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000000000000000000000000007a40e02940bdd84d71bc6b10ba70591fac3a3fc2ddb826e72718ecfd110f944d087e30a38f6ef6db55d9e1e1fcba0da7a503f6fc1314eac5ba360102425cf94401d413d174bd03136aee48af5878a91f95ea1159370fc7b0d2e748e5f90332e21095106709ff189a6ad32492cc154ea081448aab280437426d9f709d35815844f5b3027b6b690c3db8ef03f7f8ab221a0ebe7ed777c570d92f59c8982cbd73bc1490a463c64b937becf01cf4c03b", @ANYRES32=0x0, @ANYBLOB="0198000000000000"], 0x20}}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000040), 0x3ff, 0x0)
r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioperm(0x0, 0x9, 0x5)
inotify_init1(0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_getscheduler(0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x316}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0)
ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x1, 0xff, 0x5, 0xfffc, 0x0, "f682756c98cc948c"})
writev(r2, &(0x7f0000000040), 0x200000000000019f)
ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000200)=0x1)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, 0x0, 0x0)

26m42.202206053s ago: executing program 0 (id=898):
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000fef000/0x1000)=nil})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet6(r3, &(0x7f0000004900), 0x0, 0x11)
syz_io_uring_setup(0x117, &(0x7f0000000300), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$lock(r5, 0x7, 0x0)
fcntl$lock(r5, 0x24, &(0x7f0000000000)={0x2, 0x0, 0x10001})

26m41.939683833s ago: executing program 4 (id=896):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x1}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
connect$unix(r5, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff85000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x50, 0x2, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)

26m35.651228475s ago: executing program 33 (id=892):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x2000000000000376, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xb1, &(0x7f0000000140)=""/177, 0x41100, 0xb4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2008, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x57c91000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={<r6=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000680)={0x13, 0x10, 0x10f, {0x0, r6, 0x2}}, 0x18)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x800005d, 0x4810)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d500, 0x0)
r7 = fsopen(&(0x7f0000000280)='smb3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
readv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000080)}, {&(0x7f0000000400)=""/222, 0xde}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000000740)=""/64, 0x40}, {&(0x7f0000000600)=""/103, 0x67}, {0x0}, {0x0}], 0x7)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500080001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x20000044)

26m34.670209439s ago: executing program 34 (id=893):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x8000004, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
sched_setscheduler(r0, 0x0, &(0x7f0000000280)=0x8)
syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5c, 0x80, 0x0, 0x89}, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
process_vm_writev(r0, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1, &(0x7f0000000a80)=[{&(0x7f0000000600)=""/201, 0xc9}, {&(0x7f0000000700)=""/110, 0x6e}, {&(0x7f0000000780)=""/130, 0x82}, {&(0x7f0000000840)=""/247, 0xf7}, {&(0x7f0000000940)=""/84, 0x54}, {&(0x7f00000009c0)=""/185, 0xb9}], 0x6, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
r5 = socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000400)=@assoc_value, &(0x7f0000000440)=0x8)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x0, 0x0, 0x148, 0x268, 0x148, 0x2fc, 0x240, 0x240, 0x2fc, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'erspan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x20c, 0x268, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bridge_slave_1\x00', {0x21, 0x0, 0x0, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@sctp={{0x144}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@local}}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@unspec=@NFQUEUE1={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3ec)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}}], 0x80000000000020c, 0x0)
setsockopt$inet_int(r3, 0x0, 0xb, 0x0, 0x0)
r6 = socket(0x1000000000000010, 0x80802, 0x0)
write(r6, &(0x7f0000000080)="240000005200010000eef4f9002304000a04f51108000108020000fb0700028001000000", 0x24)

26m31.936013117s ago: executing program 0 (id=901):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x1a, 0x100})
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
syz_emit_ethernet(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000004c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3})
ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000})
r5 = syz_open_dev$usbfs(&(0x7f00000001c0), 0xd, 0x0)
r6 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000340)=<r7=>0x0, &(0x7f0000000200)=<r8=>0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc})
io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0)
ioctl$BLKTRACESETUP(r5, 0xc0401273, 0x0)

26m31.698461179s ago: executing program 4 (id=902):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x5, 0x12, r1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0xffffffff, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil)
shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffafff)
mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xbb2fcc7bf1753f70, 0x10010, r1, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000088000000060a010400000000000000000100000008000b400000000060000480280001800e000100636f6e6e6c696d69740000001400028008000140000006e508000240000000003400018008000100636d7000280002800800024000000001140003800400010009000100efbb17b799000000080001400000000e0900010073797a30"], 0xfc}}, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x0, "4ef7289910e0843a8f13f2fe244b73fb24e0fe49951c925bca907f6a609d8f49"}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@remote, @empty, 0x0, "e798888beab3af341dbec4427a73b0cd44814c5f5cd6f92215f46e0b091038f9", 0x0, 0x0, 0x0, 0x10}, 0x3c)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x50, 0xffffffffffffffff, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000000), 0x101000, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00')
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x100, &(0x7f0000006680))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001400))

26m31.226961989s ago: executing program 5 (id=899):
socket$rxrpc(0x21, 0x2, 0xa)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_uring_setup(0x29d5, &(0x7f0000000100)={0x0, 0x9255})
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r3, 0x0, 0x0)
connect$inet(r3, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[], 0x10}}, 0x0)
r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000340)={0x5, &(0x7f0000000280)=[{0x200, 0x9, 0xff, 0xe}, {0x1000, 0xd4, 0x4, 0x3}, {0x6, 0xdb, 0x3d, 0x1}, {0x1, 0x40, 0xd, 0x1}, {0x0, 0x80, 0x5, 0x3}]}, 0x8)
io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0)
ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000380)={0x30, 0x140, 0x30, 0x78, 0xfffffff8, 0x0, 0x1, 0x1, {0x3}, {0x4, 0x6, 0x1}, {0x1, 0xcd3, 0x1}, {0x6}, 0x1, 0x10, 0x4, 0x2, 0x1, 0xffffff81, 0x81, 0x0, 0x7, 0xffd7, 0xb, 0x10001, 0xdf32df659123099, 0x100, 0x0, 0x6})
r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x401c2, 0xbe452c0e68e5cff1)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r8, 0x400, 0x0)

26m27.037518613s ago: executing program 4 (id=903):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0004, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0xa)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0xffffff7e, 0x10, 0x1c, 0x200, &(0x7f0000000040)="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"})
fsopen(0x0, 0x0)
syz_emit_ethernet(0x2a4, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r6 = syz_io_uring_setup(0x25a, &(0x7f00000003c0)={0x0, 0xb906, 0x0, 0x3, 0x69}, &(0x7f0000000380)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x5, 0xb}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x138}}, 0x0)
io_uring_enter(r6, 0x3f70, 0x0, 0x0, 0x0, 0x0)
mount$afs(&(0x7f0000000540)=ANY=[@ANYBLOB='#syz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)

26m26.330112973s ago: executing program 0 (id=904):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x0, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r2 = syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0)
r3 = io_uring_setup(0x79ae, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r2})
r4 = socket$inet6(0xa, 0x40000080806, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1}}], 0xfdef, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c)
listen(r4, 0x20000005)
r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001800), 0x80000, 0x0)
read$FUSE(r7, &(0x7f0000003380)={0x2020}, 0x2020)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)=@deltaction={0xb0, 0x31, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe9}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe00}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000)
socket$inet6(0xa, 0x6, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

26m16.138005603s ago: executing program 35 (id=899):
socket$rxrpc(0x21, 0x2, 0xa)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_uring_setup(0x29d5, &(0x7f0000000100)={0x0, 0x9255})
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r3, 0x0, 0x0)
connect$inet(r3, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[], 0x10}}, 0x0)
r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000340)={0x5, &(0x7f0000000280)=[{0x200, 0x9, 0xff, 0xe}, {0x1000, 0xd4, 0x4, 0x3}, {0x6, 0xdb, 0x3d, 0x1}, {0x1, 0x40, 0xd, 0x1}, {0x0, 0x80, 0x5, 0x3}]}, 0x8)
io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0)
ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000380)={0x30, 0x140, 0x30, 0x78, 0xfffffff8, 0x0, 0x1, 0x1, {0x3}, {0x4, 0x6, 0x1}, {0x1, 0xcd3, 0x1}, {0x6}, 0x1, 0x10, 0x4, 0x2, 0x1, 0xffffff81, 0x81, 0x0, 0x7, 0xffd7, 0xb, 0x10001, 0xdf32df659123099, 0x100, 0x0, 0x6})
r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x401c2, 0xbe452c0e68e5cff1)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r8, 0x400, 0x0)

26m11.63910102s ago: executing program 36 (id=903):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000000000006a0a00ff00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2f01806fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c77f0979b34e1ad837ff0d10b97163c1d6d0e196bf02f46c7953ab1abda45cbe8d0d23abff0feef91bfa0f76b74635fc9f9de9ca3c0ec8cb9bf4e418d076df4c7df0a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74135b29194e533583412dff048f0000000000000007b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc9d6ddb88d2f313c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8500"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0004, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0xa)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0xffffff7e, 0x10, 0x1c, 0x200, &(0x7f0000000040)="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"})
fsopen(0x0, 0x0)
syz_emit_ethernet(0x2a4, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r6 = syz_io_uring_setup(0x25a, &(0x7f00000003c0)={0x0, 0xb906, 0x0, 0x3, 0x69}, &(0x7f0000000380)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x5, 0xb}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x138}}, 0x0)
io_uring_enter(r6, 0x3f70, 0x0, 0x0, 0x0, 0x0)
mount$afs(&(0x7f0000000540)=ANY=[@ANYBLOB='#syz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)

26m11.139764938s ago: executing program 37 (id=904):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x0, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r2 = syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0)
r3 = io_uring_setup(0x79ae, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r2})
r4 = socket$inet6(0xa, 0x40000080806, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1}}], 0xfdef, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c)
listen(r4, 0x20000005)
r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001800), 0x80000, 0x0)
read$FUSE(r7, &(0x7f0000003380)={0x2020}, 0x2020)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)=@deltaction={0xb0, 0x31, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe9}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe00}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000)
socket$inet6(0xa, 0x6, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

22m47.937375783s ago: executing program 7 (id=1321):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000002c0)={<r1=>0x0, 0x3}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e24, 0x10000, @empty, 0xbb191ec}}}, &(0x7f0000000400)=0x84)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
chdir(0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x78)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x240080c4)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x5}, &(0x7f0000000240)=<r5=>0x0, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000000)=""/152, &(0x7f0000000100)=0x98)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x84)
dup(r0)
syz_io_uring_submit(r5, 0x0, 0x0)
io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003)

22m46.107047799s ago: executing program 7 (id=1326):
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
pipe2(&(0x7f0000000400)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x880)
r1 = syz_io_uring_setup(0x4396, &(0x7f0000000640)={0x0, 0x8f6, 0x80, 0x3, 0x382, 0x0, r0}, &(0x7f00000004c0)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x58)
clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x6, 0x0, 0x1, 0xfffffffe, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2a, 0x80, 0xd, 0xfffffffffffffff9, 0x1, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffffe})
mknod$loop(&(0x7f0000000280)='./file0/../file0\x00', 0x400, 0x1)
execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={[&(0x7f0000000240)='.\xc0:\x00', &(0x7f00000002c0)='#.\x01\'-[-\x00']}, &(0x7f0000000580)={[&(0x7f0000000440)='/dev/radio#\x00']})
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0xffc0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003b0007010000000000000000017c00000400fc800c00018006000600800a00000800028004007280080005"], 0x34}}, 0x4000)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
io_uring_enter(r1, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x14b101, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
flistxattr(r9, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f00007a4000/0x4000)=nil})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00'})

22m45.881794862s ago: executing program 7 (id=1327):
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0xfffffffffffffead, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x3}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xa)
r5 = dup(r4)
r6 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x40)
ftruncate(r6, 0x200004)
sendfile(r5, r6, 0x0, 0x80001d00c0d1)
getsockname$l2tp(r0, &(0x7f0000000300)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10)
recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)

22m43.076146231s ago: executing program 7 (id=1333):
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000580), &(0x7f0000000480)='./file0\x00', &(0x7f0000000100), 0x1000816, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"])
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ptrace$ARCH_GET_FS(0x1e, r1, &(0x7f00000004c0), 0x1003)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
syz_genetlink_get_family_id$nl80211(0x0, r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x20000240, 0x20000270, 0x200002a0], 0x0, 0x0, &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0xe0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x380b}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3aa755b6)
chdir(&(0x7f0000000280)='./file0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x5)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f0000000500))
writev(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)="14", 0x1}], 0x1)

22m42.731525215s ago: executing program 7 (id=1334):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="e4000000260001000000000000000000d40000800c000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b50464dad7f2a778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086c"], 0xe4}], 0x1}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8)
sendto$inet(0xffffffffffffffff, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f80)="f4c44888112286b0fcc69bd757ce93cb07d0fc06a737181e6d631bd33a045797a61ef10ed40bacc74ba22a30e95fee563e80a7b72785c9228135c08735074fa67b37265ed7c02c4ef3daa92203a132a03495015e1851e0c1ae6dbc065e5ce1a13628125962461d87568872f86754722903d8ea82ad4cc576bf23aa3c6e7698d4b1782e73437f4d3764fa218a906fece5ac822b235c663e8bab4b2a97d17de35fed53d6c3975d49c1b70a818a3b4b0b817611fd3e35cb404fbae19a2ccd774555fa4114264ee3f816868884152efbe74d74e848d99bcd3dadb274deb9dc820c78eaf983dfc234154e0b719c1e0a07710ffed4e0b283973e0d045ba23381c5ece9a52bec1937d95cec17e6ea7c387eef4a3412c18a78678283c97d20cd5860f0bd35e629cb541a965d5c1437f2580abdc1153e58614d2e8fd41478a5ee9aca37864e0a9f918c95e5dc45e011d60e53fed228f181f9fa80b1c9737c484298652b92ef7a0508fde423e178c6acfc33b67fcf516c4d93475715e908451ecc559152b20ac01da50697da05effe671f960a5b4b5392a95dd99fbf0b7fb0bd9d8077dad3a5e268dd8a013ef4014b4f1c11e0072d8f537fd6590317c3e9435ef43a7093d87694d7cbf0a35edca939294e580f2a7b04dd2884186c0e5977b7c836749d00c6ffa8c0796a4be2db5b14d83f843b7df9dc8bd7d09b24ac70221284042898b1c60b863a3ee69a8d78c7c5f851beef3fb7f33a0556eac8156d78e9b4945fa403cd84d1da7617daa4e8007f3a8acd", 0x22d}, {0x0}], 0x2}}], 0x1, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r2, @ANYRES64=r0, @ANYRES32=r1, @ANYRES32], 0x48)

22m42.312166063s ago: executing program 7 (id=1336):
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
pipe2(&(0x7f0000000400)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x880)
r1 = syz_io_uring_setup(0x4396, &(0x7f0000000640)={0x0, 0x8f6, 0x80, 0x3, 0x382, 0x0, r0}, &(0x7f00000004c0)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x58)
clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x6, 0x0, 0x1, 0xfffffffe, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2a, 0x80, 0xd, 0xfffffffffffffff9, 0x1, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffffe})
mknod$loop(&(0x7f0000000280)='./file0/../file0\x00', 0x400, 0x1)
execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={[&(0x7f0000000240)='.\xc0:\x00', &(0x7f00000002c0)='#.\x01\'-[-\x00']}, &(0x7f0000000580)={[&(0x7f0000000440)='/dev/radio#\x00']})
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0xffc0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003b0007010000000000000000017c00000400fc800c00018006000600800a00000800028004007280080005"], 0x34}}, 0x4000)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
io_uring_enter(r1, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x14b101, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
flistxattr(r9, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f00007a4000/0x4000)=nil})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00'})

22m42.26461237s ago: executing program 38 (id=1336):
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
pipe2(&(0x7f0000000400)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x880)
r1 = syz_io_uring_setup(0x4396, &(0x7f0000000640)={0x0, 0x8f6, 0x80, 0x3, 0x382, 0x0, r0}, &(0x7f00000004c0)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x58)
clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x6, 0x0, 0x1, 0xfffffffe, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2a, 0x80, 0xd, 0xfffffffffffffff9, 0x1, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffffe})
mknod$loop(&(0x7f0000000280)='./file0/../file0\x00', 0x400, 0x1)
execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={[&(0x7f0000000240)='.\xc0:\x00', &(0x7f00000002c0)='#.\x01\'-[-\x00']}, &(0x7f0000000580)={[&(0x7f0000000440)='/dev/radio#\x00']})
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0xffc0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003b0007010000000000000000017c00000400fc800c00018006000600800a00000800028004007280080005"], 0x34}}, 0x4000)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
io_uring_enter(r1, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x14b101, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
flistxattr(r9, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f00007a4000/0x4000)=nil})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00'})

6.629910291s ago: executing program 9 (id=5675):
r0 = creat(&(0x7f0000019080)='./file0\x00', 0xecf86c37d530494c)
close(r0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000019140)={[&(0x7f0000000380)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x03\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\xdch\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc'], 0x20000000}, &(0x7f0000019100)={[&(0x7f0000000200)=' ']})

6.569968422s ago: executing program 9 (id=5676):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x1, 0xc})

6.569770268s ago: executing program 9 (id=5677):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180), &(0x7f0000000240)=0x4)

6.515657711s ago: executing program 9 (id=5678):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10)
socket$l2tp(0x2, 0x2, 0x73)

6.515431352s ago: executing program 9 (id=5679):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="ada8c2b8bffe179d84126fcf34973f1cf2b78d7a7fcd84573e7dabe0ea07b54f8a2eeb2b9c434c2996741c48ce27d6e4f01798afc2ee25f2eccfd2cbd4554e3052b6fddfc72904a98699fe985ea3e4fc124bdc4ba02ee285cab43332ade86df944", @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESDEC=r0], &(0x7f0000000580)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x200002)
r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
r4 = openat$rdma_cm(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r5)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0xaa)
r8 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000000)={'fscrypt:', @auto=[0x0, 0x62, 0xed387c4ce0ae6b0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x63, 0x35, 0x0, 0x0, 0x66, 0x32]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412e712305c9da91699b5a02c1295596f0fd9ec78f2fd"}, 0x48, r5)
keyctl$KEYCTL_MOVE(0x1e, r8, r5, r6, 0x0)
keyctl$dh_compute(0x17, &(0x7f00000007c0)={0x0, 0x0, r8}, &(0x7f0000000500)=""/45, 0x2d, &(0x7f0000000940)={&(0x7f0000000540)={'sha1-generic\x00'}, &(0x7f0000000880)="3055a6bbf5a75cf2a61730ae46db44aa9264c6b1a105bba3b50a8becc30fcb06d8562e3cf70486532c6866a968c1863c4511d6b22db5d4a428b29d30a99d96952a3665997505187002c08fd7d1cb6b47618cfc18e339e6b5d025ae41e7dc3ca9f069e745427af77779656a7bd810f172759f6cb4ba7e9f58c3cd719f878a2ddef394d7eaa7f75f2f787038eced34c3425e19d6ffc41095dc163bcb1e0b9baac93af5e94b0bbac36559b32462198c", 0xae})
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xd, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @local}, @ib={0x1b, 0x5, 0x6, {"db222fedf9bd54687b2bae83a6d7585c"}, 0x742, 0x7, 0xb85e}}}, 0x118)
ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x44)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

6.265040136s ago: executing program 9 (id=5687):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="ada8c2b8bffe179d84126fcf34973f1cf2b78d7a7fcd84573e7dabe0ea07b54f8a2eeb2b9c434c2996741c48ce27d6e4f01798afc2ee25f2eccfd2cbd4554e3052b6fddfc72904a98699fe985ea3e4fc124bdc4ba02ee285cab43332ade86df944", @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESDEC=r0], &(0x7f0000000580)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x200002)
r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
r4 = openat$rdma_cm(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r5)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0xaa)
r8 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000000)={'fscrypt:', @auto=[0x0, 0x62, 0xed387c4ce0ae6b0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x63, 0x35, 0x0, 0x0, 0x66, 0x32]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412e712305c9da91699b5a02c1295596f0fd9ec78f2fd"}, 0x48, r5)
keyctl$KEYCTL_MOVE(0x1e, r8, r5, r6, 0x0)
keyctl$dh_compute(0x17, &(0x7f00000007c0)={0x0, 0x0, r8}, &(0x7f0000000500)=""/45, 0x2d, &(0x7f0000000940)={&(0x7f0000000540)={'sha1-generic\x00'}, &(0x7f0000000880)="3055a6bbf5a75cf2a61730ae46db44aa9264c6b1a105bba3b50a8becc30fcb06d8562e3cf70486532c6866a968c1863c4511d6b22db5d4a428b29d30a99d96952a3665997505187002c08fd7d1cb6b47618cfc18e339e6b5d025ae41e7dc3ca9f069e745427af77779656a7bd810f172759f6cb4ba7e9f58c3cd719f878a2ddef394d7eaa7f75f2f787038eced34c3425e19d6ffc41095dc163bcb1e0b9baac93af5e94b0bbac36559b32462198c", 0xae})
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xd, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @local}, @ib={0x1b, 0x5, 0x6, {"db222fedf9bd54687b2bae83a6d7585c"}, 0x742, 0x7, 0xb85e}}}, 0x118)
ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x44)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

5.039711889s ago: executing program 3 (id=5698):
unshare(0x8000000)
r0 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]})
syz_open_dev$vcsa(0x0, 0x1, 0x45c0)
close_range(r0, 0xffffffffffffffff, 0x0)

4.189709916s ago: executing program 3 (id=5701):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="04"], 0x10)
close(r0)
close(0x4)

4.129943526s ago: executing program 3 (id=5702):
r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b06, 0x0)

2.469747815s ago: executing program 6 (id=5709):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x5d54, 0x4)
bind$bt_hci(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41201}}, 0x20}}, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0xfe}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[<r9=>0x0], &(0x7f00000000c0), 0x0, 0x1, 0x0, 0x0, r8})
ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f00000002c0)=[r8], &(0x7f0000000140)=[0x7], &(0x7f0000000800)=[r9], &(0x7f0000000100), 0x0, 0x400000000})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r8, 0xeeeeeeee})

1.570039316s ago: executing program 6 (id=5710):
r0 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc04c560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x1, {}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, "5c0a0551"}, 0x0, 0x1, {0x0}, 0x2, 0x20000000})

1.479835174s ago: executing program 6 (id=5711):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000100)={0x0})

1.409629766s ago: executing program 6 (id=5712):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.409314848s ago: executing program 8 (id=5713):
r0 = io_uring_setup(0x310f, &(0x7f0000000280)={0x0, 0x5f95, 0x40, 0xfffffffe, 0x2000})
r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.40901499s ago: executing program 6 (id=5714):
mkdir(&(0x7f0000000140)='./file0\x00', 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x92)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0xfffffd00, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$igmp(0x2, 0x3, 0x2)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x26c02, &(0x7f0000001540)='\r\x87\x17^\x981\xd5\x14\xe2\x81\xa6\xcd\t\xa5\xbasG\x88\x7f]\x03\xf3\xd5t\x97\x9f\xee\"\xebU\xccM\x02\x17\x0f[\x9c\x9e\xa6\xd2\xe4(\xea\x7f\xe4\x90K\xcb\xb5;f\x02}\x147\x04=\xe50\x8d;\x90!\x01,\xdb,\xb9\x8e\t\x13\x1eh\xbc^<\xd2\x809G\xe6H\xbb&^\\\x9c\xady\xd9\xb5\xa3\x16\xd0\xdf\x1a\xaa\xfcHz\x89\x19\xe1\xe6+\xf6\xc3\xad\x80\x98\xc2\x10\x91\xec\xf6\x93=\xbe\x10\xfc`\x86\xa7\xe6\xae\x00*R\x92\x05\xf6\x80u\xf9\xb7S{\xd6\x99\x9a\xf3\xcc\x04o\xdd\x91 \x92;\x87\xfb\x82c>\x82VR8\xe5\x0f\xeb\xcdJz\f\xf5.\xd7!\xa1\xfe\xc8\xf0\xb5\\\xc2\xc7\xc7\xaa\xd9:\xa3+\x12\x9f\xfc\xf6@},`=\xea\x91\fJ\xe4\rC\xa9\xe0\x8b%\x9f\'\xbdX\xbfS\x00\x8c\x84\x10\xcf\xf0\xd7\xe0\xf9\xf8E\xa3?\x17\\\x9e\n\xa1h!\x9e\xd8\xe8\xa5\xc5\xbf_\xa7\xc9\x91U\x86=\xa5\xf7g~\xaa\xc8N\"^\x8e%')
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = syz_open_dev$mouse(&(0x7f0000000180), 0x1, 0x84000)
ioctl$SIOCGIFMTU(r5, 0x8921, &(0x7f0000000340)={'team_slave_0\x00'})
ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
listen(r0, 0x3)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000004a5cb823000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES16=r6, @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000140)={@multicast, @link_local, @void, {@arp={0x806, @generic={0x306, 0x19, 0x6, 0x9, 0x1, @multicast, "c4c42df5043c1bc36f", @random="786834771c1e", "e1f014a45e1f5f"}}}}, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
socket$kcm(0x29, 0x2, 0x0)

1.405442518s ago: executing program 8 (id=5715):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40004)

1.340072851s ago: executing program 8 (id=5716):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac, {0x0, 0x9}}, 0x0, @default, 0x1882, @void, @val, @void, @val={0x4, 0x6, {0x7, 0x4, 0x1, 0x4}}, @void, @val={0x5, 0x3, {0x6, 0xac, 0x26}}, @val={0x25, 0x3, {0x0, 0x38, 0x6b}}, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x68}}, 0x0)

1.339816423s ago: executing program 8 (id=5717):
mkdir(&(0x7f0000000140)='./file0\x00', 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x92)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0xfffffd00, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$igmp(0x2, 0x3, 0x2)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='autofs\x00', 0x26c02, &(0x7f0000001540)='\r\x87\x17^\x981\xd5\x14\xe2\x81\xa6\xcd\t\xa5\xbasG\x88\x7f]\x03\xf3\xd5t\x97\x9f\xee\"\xebU\xccM\x02\x17\x0f[\x9c\x9e\xa6\xd2\xe4(\xea\x7f\xe4\x90K\xcb\xb5;f\x02}\x147\x04=\xe50\x8d;\x90!\x01,\xdb,\xb9\x8e\t\x13\x1eh\xbc^<\xd2\x809G\xe6H\xbb&^\\\x9c\xady\xd9\xb5\xa3\x16\xd0\xdf\x1a\xaa\xfcHz\x89\x19\xe1\xe6+\xf6\xc3\xad\x80\x98\xc2\x10\x91\xec\xf6\x93=\xbe\x10\xfc`\x86\xa7\xe6\xae\x00*R\x92\x05\xf6\x80u\xf9\xb7S{\xd6\x99\x9a\xf3\xcc\x04o\xdd\x91 \x92;\x87\xfb\x82c>\x82VR8\xe5\x0f\xeb\xcdJz\f\xf5.\xd7!\xa1\xfe\xc8\xf0\xb5\\\xc2\xc7\xc7\xaa\xd9:\xa3+\x12\x9f\xfc\xf6@},`=\xea\x91\fJ\xe4\rC\xa9\xe0\x8b%\x9f\'\xbdX\xbfS\x00\x8c\x84\x10\xcf\xf0\xd7\xe0\xf9\xf8E\xa3?\x17\\\x9e\n\xa1h!\x9e\xd8\xe8\xa5\xc5\xbf_\xa7\xc9\x91U\x86=\xa5\xf7g~\xaa\xc8N\"^\x8e%')
r4 = socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$mouse(&(0x7f0000000180), 0x1, 0x84000)
ioctl$sock_SIOCBRDELBR(r4, 0x89a2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
listen(r0, 0x3)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000004a5cb823000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES16=r5, @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000140)={@multicast, @link_local, @void, {@arp={0x806, @generic={0x306, 0x19, 0x6, 0x9, 0x1, @multicast, "c4c42df5043c1bc36f", @random="786834771c1e", "e1f014a45e1f5f"}}}}, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
socket$kcm(0x29, 0x2, 0x0)

1.109247974s ago: executing program 3 (id=5718):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0xe)
syz_emit_ethernet(0x66, &(0x7f0000000280)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev}}}}}}}, 0x0)

1.058958097s ago: executing program 3 (id=5719):
socket(0x23, 0x800, 0x401)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002080)=@newtaction={0xe08, 0x30, 0x1, 0x0, 0x0, {}, [{0xdf4, 0x1, [@m_police={0xda8, 0x12, 0x0, 0x0, {{0xb}, {0xcec, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0xab}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7fffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1ff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5c21}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0xc, 0x22f96dd1, 0x14, 0x1, 0x7f, 0x8000, 0x7, 0x3, 0xb3f6, 0x1000, 0x2, 0x9, 0x9, 0xe, 0x80000000, 0x1c2, 0x3, 0x3425, 0x80, 0x7, 0x9, 0xfffffffa, 0x9, 0x1, 0x3, 0x9, 0xd9, 0x401, 0x8001, 0x266a, 0xdf56, 0xfd, 0x6, 0xfffffffc, 0x9, 0xfffffffe, 0x8, 0xf5d2, 0x2, 0x6, 0x9, 0x5, 0x2, 0x8d6, 0xf, 0x6, 0x7, 0x8, 0x6ee5, 0x6, 0xff, 0x8001, 0x0, 0xffff, 0x2dab, 0x9, 0x5, 0x81, 0x0, 0x9, 0x10000, 0x6, 0xfffffe1d, 0x2, 0x0, 0x4, 0xfff, 0x6, 0x7ff, 0x0, 0x2, 0x9, 0x1ff, 0x3, 0x1, 0x2, 0x81, 0x5, 0xf2, 0x1, 0x2, 0x8, 0x2, 0x5, 0x2, 0x5, 0x8, 0x1, 0x7, 0x9, 0xb4, 0x0, 0x5, 0x8, 0xa4, 0x6, 0x3, 0x7ffd, 0x10000, 0xd, 0x7f, 0x111a1245, 0x1, 0x80000001, 0xa94, 0x3, 0x0, 0x1b, 0x9, 0x5, 0x4, 0x7, 0x3, 0x1, 0x2, 0x8, 0xa1, 0xb, 0x8000, 0x2, 0x10000, 0x6, 0x6, 0x0, 0x2, 0x8, 0x7, 0x4, 0xb, 0x7ff, 0x401, 0x93e7, 0x0, 0xc, 0x6f9, 0x4, 0x5, 0x8fb, 0x3, 0x2, 0xf29a, 0x6, 0x6c, 0x70000000, 0x2, 0x9, 0x3, 0x800, 0x14dd, 0x8, 0xb8, 0x5, 0x1, 0x8, 0x1, 0x80000001, 0x8, 0xd1b, 0x4, 0xfffffff4, 0x1ff, 0x0, 0x0, 0x9, 0xd, 0x440, 0x1aa, 0x7, 0x80000000, 0x1, 0x1, 0x7fffffff, 0x5, 0x1, 0x4, 0x7, 0x5, 0x9, 0x5, 0x0, 0xf7, 0x45c, 0x9, 0x56, 0x7, 0x0, 0x200, 0x82a3, 0xe4000000, 0x8, 0x2, 0x2, 0x9, 0x3, 0x7, 0xad, 0x2, 0x3, 0xe, 0xf144, 0x4, 0x4, 0x7, 0x3, 0xffff0762, 0x4915, 0x4, 0x40, 0x80000001, 0xc000, 0x9, 0x1, 0x723, 0xfffffffe, 0xd, 0xfffffff9, 0x0, 0x3cf, 0xf0000000, 0xffffb918, 0x0, 0x4, 0xbda, 0x3ff, 0x2, 0x0, 0x3, 0x401, 0x7, 0x4, 0x9, 0x1, 0x7, 0x2d1b, 0xffffff9a, 0xa, 0x9, 0x4, 0x3, 0x1, 0x800, 0x83, 0xfffff639, 0x5, 0x1, 0x1, 0x9, 0x9, 0x69de, 0x5, 0x80, 0x1, 0x0, 0x4, 0x0, 0xffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x10001, 0xe394, 0x6a0c, 0xbe8e, 0x80, 0x2, 0x10001, 0x4, 0x9, 0x4e73, 0x8, 0x0, 0xbef, 0x9, 0x7ff, 0xfff, 0x1, 0x3, 0x7, 0x7fff, 0x2, 0xff, 0x1ff, 0xa, 0x7, 0x14a, 0x2, 0x1, 0x9, 0x6, 0x7, 0x6, 0x3, 0x1, 0x800, 0xf, 0x3ff, 0x8, 0x7, 0x2, 0x6, 0x3, 0x80000000, 0x8, 0x8, 0x3, 0x200, 0x7ff, 0xfffffffa, 0x3, 0x5, 0xb55d, 0x8, 0x7, 0x101, 0xc, 0x8, 0x3, 0x8, 0xfffffffb, 0xfffff800, 0x2, 0x7, 0x6, 0x85b, 0x8000, 0x8, 0x9, 0x400, 0x2, 0x4, 0x3, 0x100, 0x293e, 0x4b8d, 0xfff, 0x7, 0xfffffffa, 0x356, 0x2, 0x7, 0x0, 0x80000000, 0x2, 0x9, 0xde, 0x7f, 0xf, 0x70, 0x666, 0xa, 0x10000, 0x5, 0x2, 0xb, 0x8000, 0x0, 0x3, 0x3ff, 0xbec8, 0x8, 0x81, 0xfff, 0xda, 0x410e, 0x10000, 0xbd37, 0x9, 0x8, 0x4, 0x6, 0x5, 0xffffff80, 0x100, 0x8001, 0x1, 0x4, 0x0, 0x8, 0x8, 0x10000, 0x6, 0x1, 0x547, 0x0, 0x3, 0xf, 0x4, 0x1, 0x378, 0x4, 0x4, 0x3, 0x2, 0x9, 0xfffffff0, 0x0, 0x7, 0xfffffff7, 0xeb, 0xd8a, 0x1, 0x101, 0x1d5d, 0x9, 0xb168, 0x8, 0x800, 0xfb, 0x5, 0x4, 0x3, 0x9, 0x9, 0x9, 0xc7a8, 0x1000, 0xc, 0x142, 0x81, 0x8, 0x8, 0x8, 0x5, 0xfffffff8, 0x7f, 0x5, 0x6, 0x3, 0xff, 0x0, 0x863, 0x5, 0x10, 0x2, 0x3, 0x8000, 0x5, 0x400, 0x2fad56bb, 0x33, 0x41d, 0x20, 0x5, 0x6, 0x19, 0xed3, 0xb, 0xa, 0x2, 0x1000000, 0x3, 0x0, 0x3ff, 0x9, 0x4, 0xfffffff7, 0x4, 0xac26, 0x4, 0x6, 0xd53, 0x4, 0x3, 0x4, 0xfff, 0xfffffff7, 0x7, 0xc, 0x2d, 0x7, 0xf, 0x4, 0x800, 0x9fef, 0x1, 0x5, 0xfffffffa, 0x1c63, 0x3, 0x6, 0xc, 0xd, 0x1, 0x6, 0xf, 0x9, 0xc8b4, 0x3, 0x8, 0x4, 0xfffff801, 0xb, 0x401, 0x0, 0x80000000, 0x0, 0x0, 0x8001, 0xc316, 0x7, 0xffffff01, 0x7, 0xa, 0x5f, 0x3, 0x5, 0x2, 0x7, 0x3, 0x7, 0x1, 0x4, 0x6, 0x4]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x26, 0x1000, 0x1, 0x7, 0xdf8, 0x6, 0x9, 0x51e, 0xc7, 0x1, 0x7, 0x100, 0xed54, 0x8000, 0x6, 0x10000, 0x0, 0xca, 0x1, 0xe284, 0xfffffff6, 0x3, 0x19, 0x7, 0x8, 0x0, 0x7, 0x6, 0x1bb8, 0x7f, 0xf, 0x9, 0xb, 0x6c00000, 0x8, 0x2e, 0x7, 0x5, 0x2, 0x3, 0x3ff, 0x7, 0x1, 0x6a9d, 0x80000000, 0x9, 0x0, 0x80, 0x80000001, 0x8, 0x7fffffff, 0x3, 0x6, 0xffffffff, 0x7fdbfe54, 0x80, 0x5, 0x9d12, 0x1, 0x2, 0x8, 0x4, 0x6c, 0xc0000000, 0x81, 0x9, 0x0, 0x2, 0x1, 0xfffffff5, 0x6, 0x5, 0x401, 0x3, 0x6, 0x5, 0x5, 0xb9b, 0x3338, 0x9, 0x3, 0x6, 0x8d3, 0x6, 0x5, 0x7, 0x7f, 0x1, 0xff4, 0x0, 0x42ba, 0x8001, 0x7, 0xfffffffe, 0xffffff4e, 0x8, 0x800, 0x9, 0x7ff, 0xfff, 0x101, 0x6, 0x7fff, 0xffff, 0x529d, 0x0, 0x1000, 0x5, 0x101, 0x8, 0xf, 0x7, 0x6, 0x9, 0x58, 0xf99, 0x0, 0x0, 0x2, 0x7, 0x101, 0xc, 0x7fffffff, 0x5, 0x0, 0x3, 0x2, 0x6, 0x14, 0x80000000, 0x7, 0x1, 0xfffffff7, 0x2, 0x3, 0x401, 0x6, 0x3, 0x0, 0x4, 0x9, 0xfffffff8, 0xf2, 0x2, 0x3ff, 0x7e1, 0x2, 0x0, 0x2, 0x4, 0x10, 0x5, 0x8, 0x0, 0x80000001, 0x10000, 0xf1, 0x6, 0x1, 0x8, 0x5, 0x9, 0x2d4, 0x5, 0x7f, 0x80, 0x91, 0x4, 0x6, 0x0, 0x80000001, 0xd7, 0x50000, 0x6, 0xc, 0x400, 0x5, 0x7fffffff, 0x6, 0x8, 0x9, 0x3, 0x5, 0x0, 0x3ff, 0xd883, 0x4f1, 0x3, 0xe, 0x2, 0x4e, 0x6, 0x5, 0x1, 0x2, 0xfff000, 0x2, 0x8, 0x3, 0x4, 0x0, 0x800, 0x0, 0x2, 0x100d, 0x1000, 0x0, 0x3, 0x10000, 0xc9, 0x3eb3, 0x6, 0x7, 0x50, 0x3, 0x5, 0x101, 0xff, 0x9, 0x2, 0x7fffffff, 0x685, 0x80, 0x6, 0x5, 0x4, 0x0, 0x8, 0x8, 0xb, 0x9, 0x10001, 0x4, 0x1, 0x6, 0x3, 0x9, 0x8, 0x1000, 0x10000000, 0x800, 0x2, 0x10000, 0x8, 0x2, 0xfffffff3, 0xfff, 0xfffffff9, 0x8000, 0xffff, 0x9, 0x3, 0x8, 0x1, 0x3, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0xffffffff, 0x3, 0x1, {0x2, 0x0, 0x3, 0x2, 0x3, 0xfffffff2}, {0x9, 0x2, 0x49, 0x6e6, 0x7, 0x3e}, 0x1, 0x6, 0x3}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb2, 0x5, 0x8, 0x7, 0x9, {0x9, 0x0, 0x5, 0x6, 0x40, 0xe}, {0x2, 0x1, 0x7, 0x4, 0x0, 0x1}, 0x6, 0x0, 0x8}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}]]}, {0x91, 0x6, "9f067441e35387f9eb94306756a47884a20ef62fa23b88b803ed5340d0dbfbf4f4417963b2dd479f11d85f0835ce082caede856f4be0f0088387e75d5ff2c1035fbaec1ff557d285787b0b8916f0985145d776df73a6cabb41c5073732efc9a8f1c869506bf69a0fb9dafa2f09aa8e70816f0d555dd6842c001d6d316b922ee0f0bde5cf1ed2c46f45c7a427d6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe08}, 0x1, 0x0, 0x0, 0x804}, 0x0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd28, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000240)='{}k%@\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
ioctl$TCSETSF(r7, 0x5404, &(0x7f00000005c0)={0x8000, 0xc2cf, 0xfffffffc, 0x4, 0xd, "00e4fdab790000fb00"})
write$UHID_INPUT(r7, &(0x7f0000001040)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1010}}, 0x1b7)

489.897883ms ago: executing program 6 (id=5720):
mkdir(&(0x7f0000000140)='./file0\x00', 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x92)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0xfffffd00, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$igmp(0x2, 0x3, 0x2)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='autofs\x00', 0x26c02, &(0x7f0000001540)='\r\x87\x17^\x981\xd5\x14\xe2\x81\xa6\xcd\t\xa5\xbasG\x88\x7f]\x03\xf3\xd5t\x97\x9f\xee\"\xebU\xccM\x02\x17\x0f[\x9c\x9e\xa6\xd2\xe4(\xea\x7f\xe4\x90K\xcb\xb5;f\x02}\x147\x04=\xe50\x8d;\x90!\x01,\xdb,\xb9\x8e\t\x13\x1eh\xbc^<\xd2\x809G\xe6H\xbb&^\\\x9c\xady\xd9\xb5\xa3\x16\xd0\xdf\x1a\xaa\xfcHz\x89\x19\xe1\xe6+\xf6\xc3\xad\x80\x98\xc2\x10\x91\xec\xf6\x93=\xbe\x10\xfc`\x86\xa7\xe6\xae\x00*R\x92\x05\xf6\x80u\xf9\xb7S{\xd6\x99\x9a\xf3\xcc\x04o\xdd\x91 \x92;\x87\xfb\x82c>\x82VR8\xe5\x0f\xeb\xcdJz\f\xf5.\xd7!\xa1\xfe\xc8\xf0\xb5\\\xc2\xc7\xc7\xaa\xd9:\xa3+\x12\x9f\xfc\xf6@},`=\xea\x91\fJ\xe4\rC\xa9\xe0\x8b%\x9f\'\xbdX\xbfS\x00\x8c\x84\x10\xcf\xf0\xd7\xe0\xf9\xf8E\xa3?\x17\\\x9e\n\xa1h!\x9e\xd8\xe8\xa5\xc5\xbf_\xa7\xc9\x91U\x86=\xa5\xf7g~\xaa\xc8N\"^\x8e%')
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = syz_open_dev$mouse(&(0x7f0000000180), 0x1, 0x84000)
ioctl$SIOCGIFMTU(r5, 0x8921, 0x0)
ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
listen(r0, 0x3)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000004a5cb823000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES16=r6, @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000140)={@multicast, @link_local, @void, {@arp={0x806, @generic={0x306, 0x19, 0x6, 0x9, 0x1, @multicast, "c4c42df5043c1bc36f", @random="786834771c1e", "e1f014a45e1f5f"}}}}, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
socket$kcm(0x29, 0x2, 0x0)

340.020284ms ago: executing program 8 (id=5721):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000480)={0x3c, r2, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

289.8167ms ago: executing program 8 (id=5722):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="f7", 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x20000, 0x4)

0s ago: executing program 3 (id=5723):
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
r1 = socket(0x2b, 0x1, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DISCONNECT(r0, 0xab08)

kernel console output (not intermixed with test programs):

tes leftover after parsing attributes in process `syz.3.4144'.
[ 1571.834533][T28723] syz.8.4143: attempt to access beyond end of device
[ 1571.834533][T28723] nbd8: rw=0, sector=2, nr_sectors = 2 limit=0
[ 1571.840657][T28723] MINIX-fs: unable to read superblock
[ 1572.347012][T28722] team0 (unregistering): Port device team_slave_0 removed
[ 1572.351164][T28722] team0 (unregistering): Port device team_slave_1 removed
[ 1572.388721][T28722] team0 (unregistering): Port device veth0_to_team removed
[ 1573.100275][T28740] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4148'.
[ 1573.196382][T28745] IPVS: Error connecting to the multicast addr
[ 1574.363392][T28770] lo speed is unknown, defaulting to 1000
[ 1575.432026][T28788] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4154'.
[ 1575.445212][T28788] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4154'.
[ 1576.612887][T28803] netfs: Couldn't get user pages (rc=-14)
[ 1577.540335][T28821] netfs: Couldn't get user pages (rc=-14)
[ 1577.818611][T28828] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4163'.
[ 1578.341430][T28832] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4164'.
[ 1578.344134][T28832] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4164'.
[ 1578.617767][T28841] xt_CT: No such helper "syz1"
[ 1579.019378][T28839] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4168'.
[ 1579.097769][T28846] input: syz1 as /devices/virtual/input/input35
[ 1579.694964][T28854] netfs: Couldn't get user pages (rc=-14)
[ 1580.444498][T28861] ipvlan1: entered allmulticast mode
[ 1580.446550][T28861] veth0_vlan: entered allmulticast mode
[ 1580.816904][T28865] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4172'.
[ 1581.558587][T28872] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4174'.
[ 1581.751932][T28868] mkiss: ax0: crc mode is auto.
[ 1581.960944][T28880] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4176'.
[ 1583.725908][T28906] netlink: 'syz.9.4181': attribute type 9 has an invalid length.
[ 1584.720284][T28916] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4183'.
[ 1584.971015][T28922] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4184'.
[ 1584.985371][T28922] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4184'.
[ 1585.693200][T28941] usb usb1: usbfs: process 28941 (syz.3.4187) did not claim interface 0 before use
[ 1586.807249][T28975] ipvlan1: entered allmulticast mode
[ 1586.808834][T28975] veth0_vlan: entered allmulticast mode
[ 1587.248714][T28971] nvme_fabrics: missing parameter 'transport=%s'
[ 1587.250646][T28971] nvme_fabrics: missing parameter 'nqn=%s'
[ 1587.390977][T28983] ipvlan1: entered allmulticast mode
[ 1587.393392][T28983] veth0_vlan: entered allmulticast mode
[ 1588.822195][T29002] syzkaller1: entered promiscuous mode
[ 1588.823938][T29002] syzkaller1: entered allmulticast mode
[ 1589.207349][T29010] syz.8.4201 (29010): drop_caches: 2
[ 1589.210038][T29010] syz.8.4201 (29010): drop_caches: 2
[ 1589.322900][T29014] usb usb1: usbfs: process 29014 (syz.3.4199) did not claim interface 0 before use
[ 1589.625743][T29011] can0: slcan on ttyS3.
[ 1590.202939][T29006] can0 (unregistered): slcan off ttyS3.
[ 1592.784243][T29068] syzkaller1: entered promiscuous mode
[ 1592.786211][T29068] syzkaller1: entered allmulticast mode
[ 1593.805200][T29083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4212'.
[ 1593.812624][T29083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4212'.
[ 1594.317842][T29088] syz.6.4214: attempt to access beyond end of device
[ 1594.317842][T29088] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0
[ 1594.325602][T29088] MINIX-fs: unable to read superblock
[ 1596.222488][T29115] sp0: Synchronizing with TNC
[ 1596.345296][T29115] random: crng reseeded on system resumption
[ 1597.164422][T29130] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4222'.
[ 1597.208109][T29134] syzkaller1: entered promiscuous mode
[ 1597.209846][T29134] syzkaller1: entered allmulticast mode
[ 1598.524550][T29158] infiniband syz0: set down
[ 1598.526159][T29158] infiniband syz0: added bond0
[ 1598.543896][T29158] syz0: rxe_create_cq: returned err = -12
[ 1598.545735][T29158] infiniband syz0: Couldn't create ib_mad CQ
[ 1598.547713][T29158] infiniband syz0: Couldn't open port 1
[ 1598.588285][T29158] RDS/IB: syz0: added
[ 1598.589962][T29158] smc: adding ib device syz0 with port count 1
[ 1598.601227][T29158] smc:    ib device syz0 port 1 has pnetid SYZ2 (user defined)
[ 1599.859944][T29182] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4234'.
[ 1600.166073][T29188] netfs: Couldn't get user pages (rc=-14)
[ 1601.178282][T29205] lo speed is unknown, defaulting to 1000
[ 1601.196608][T29207] overlayfs: missing 'lowerdir'
[ 1601.309292][T29214] netlink: 'syz.9.4241': attribute type 1 has an invalid length.
[ 1601.338486][T29214] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4241'.
[ 1601.348372][T29214] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1601.352171][T29214] bond3: (slave batadv0): Enslaving as a backup interface with an up link
[ 1601.366198][T29214] bond3 (unregistering): (slave batadv0): Releasing backup interface
[ 1601.378037][T29214] bond3 (unregistering): Released all slaves
[ 1602.895268][T29252] blktrace: Concurrent blktraces are not allowed on sg0
[ 1603.697359][T29262] netfs: Couldn't get user pages (rc=-14)
[ 1605.536423][T29294] syz.8.4254: attempt to access beyond end of device
[ 1605.536423][T29294] nbd8: rw=0, sector=2, nr_sectors = 2 limit=0
[ 1605.540910][T29294] MINIX-fs: unable to read superblock
[ 1606.783468][ T1413] ieee802154 phy1 wpan1: encryption failed: -22
[ 1607.472292][T29327] usb usb1: usbfs: process 29327 (syz.3.4259) did not claim interface 0 before use
[ 1607.622091][T24124] usb 14-1: new high-speed USB device number 4 using dummy_hcd
[ 1607.772090][T24124] usb 14-1: Using ep0 maxpacket: 16
[ 1607.785336][T24124] usb 14-1: config 0 interface 0 has no altsetting 0
[ 1607.787437][T24124] usb 14-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[ 1607.790742][T24124] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1607.795604][T24124] usb 14-1: config 0 descriptor??
[ 1608.086088][T29335] lo speed is unknown, defaulting to 1000
[ 1608.091731][T29330] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4261'.
[ 1608.224365][T24124] input: HID 0458:5013 as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/0003:0458:5013.0004/input/input36
[ 1608.318806][T24124] input: HID 0458:5013 as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/0003:0458:5013.0004/input/input37
[ 1608.401354][T24124] kye 0003:0458:5013.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.9-1/input0
[ 1608.440270][T29342] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4263'.
[ 1608.582446][T29342] wireguard0: entered promiscuous mode
[ 1608.587049][T29341] syzkaller1: entered promiscuous mode
[ 1608.589218][T29341] syzkaller1: entered allmulticast mode
[ 1609.009012][T29352] netlink: 'syz.9.4260': attribute type 12 has an invalid length.
[ 1609.214992][T29354] usb usb1: usbfs: process 29354 (syz.6.4265) did not claim interface 0 before use
[ 1609.788691][T29364] syz.3.4266: attempt to access beyond end of device
[ 1609.788691][T29364] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0
[ 1610.234870][T29364] MINIX-fs: unable to read superblock
[ 1610.686626][ T6005] usb 14-1: USB disconnect, device number 4
[ 1610.923626][T29379] random: crng reseeded on system resumption
[ 1610.980563][T29380] syz.6.4269: attempt to access beyond end of device
[ 1610.980563][T29380] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0
[ 1611.232402][ T5988] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 1611.339631][T29380] MINIX-fs: unable to read superblock
[ 1612.053586][T29411] netlink: 'syz.9.4274': attribute type 1 has an invalid length.
[ 1612.056331][T29411] netlink: 'syz.9.4274': attribute type 1 has an invalid length.
[ 1612.233622][T29420] usb usb1: usbfs: process 29420 (syz.3.4273) did not claim interface 0 before use
[ 1614.302098][T12522] Bluetooth: hci0: command 0x0406 tx timeout
[ 1614.305529][T27361] Bluetooth: hci0: Opcode 0x1407 failed: -110
[ 1622.085176][T29469] overlayfs: missing 'lowerdir'
[ 1622.285290][T29477] syz.6.4282: attempt to access beyond end of device
[ 1622.285290][T29477] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0
[ 1622.299298][T29477] MINIX-fs: unable to read superblock
[ 1622.603557][T29483] netlink: 'syz.3.4281': attribute type 1 has an invalid length.
[ 1622.652168][T29483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4281'.
[ 1622.669500][T29483] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1622.677266][T29483] bond0: (slave batadv1): Enslaving as a backup interface with an up link
[ 1622.714949][T29483] bond0 (unregistering): (slave batadv1): Releasing backup interface
[ 1622.720019][T29483] bond0 (unregistering): Released all slaves
[ 1623.455297][T29497] usb usb1: usbfs: process 29497 (syz.3.4285) did not claim interface 0 before use
[ 1624.126130][ T5988] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 1626.195021][   T40] audit: type=1326 audit(1740758961.698:6143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29546 comm="syz.3.4292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000
[ 1626.197044][T29553] netlink: 'syz.9.4293': attribute type 14 has an invalid length.
[ 1626.209808][   T40] audit: type=1326 audit(1740758961.708:6144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29546 comm="syz.3.4292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000
[ 1626.221250][   T40] audit: type=1326 audit(1740758961.708:6145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29546 comm="syz.3.4292" exe="/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf7f37579 code=0x7ffc0000
[ 1626.240147][   T40] audit: type=1326 audit(1740758961.708:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29546 comm="syz.3.4292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000
[ 1626.251244][   T40] audit: type=1326 audit(1740758961.708:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29546 comm="syz.3.4292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000
[ 1626.258031][   T40] audit: type=1326 audit(1740758961.708:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29546 comm="syz.3.4292" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f37579 code=0x7ffc0000
[ 1626.268007][   T40] audit: type=1326 audit(1740758961.708:6149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29546 comm="syz.3.4292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000
[ 1626.278156][   T40] audit: type=1326 audit(1740758961.708:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29546 comm="syz.3.4292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000
[ 1626.288319][   T40] audit: type=1326 audit(1740758961.708:6151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29546 comm="syz.3.4292" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f37579 code=0x7ffc0000
[ 1626.295049][   T40] audit: type=1326 audit(1740758961.708:6152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29546 comm="syz.3.4292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000
[ 1626.725986][T29559] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4295'.
[ 1626.820239][T27361] Bluetooth: hci1: Malformed LE Event: 0x0b
[ 1626.827355][T29549] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4293'.
[ 1634.921902][T29581] netlink: 'syz.8.4299': attribute type 21 has an invalid length.
[ 1634.945236][T29584] capability: warning: `syz.3.4297' uses deprecated v2 capabilities in a way that may be insecure
[ 1635.294310][T29593] block nbd8: shutting down sockets
[ 1636.111713][T29606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4301'.
[ 1636.516264][T29613] random: crng reseeded on system resumption
[ 1636.782456][ T5988] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 1636.872063][T29619] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4304'.
[ 1638.262543][T29647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4306'.
[ 1638.273925][T29647] wireguard0: entered promiscuous mode
[ 1638.287104][T29653] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4308'.
[ 1638.324485][T29654] netlink: 'syz.8.4307': attribute type 14 has an invalid length.
[ 1638.339498][T27361] Bluetooth: hci3: Malformed LE Event: 0x0b
[ 1638.347372][T29654] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4307'.
[ 1650.872014][T12522] Bluetooth: hci3: command 0x0405 tx timeout
[ 1651.876495][T29772] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4334'.
[ 1651.889912][T29772] wireguard1: entered promiscuous mode
[ 1653.000206][T29787] netlink: 'syz.6.4330': attribute type 21 has an invalid length.
[ 1653.566957][T29794] block nbd6: shutting down sockets
[ 1656.098397][T29821] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4337'.
[ 1656.808827][T29834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4339'.
[ 1656.821642][T29834] wireguard1: entered promiscuous mode
[ 1657.511114][T29849] lo speed is unknown, defaulting to 1000
[ 1658.489235][T29863] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4345'.
[ 1658.804323][T29873] loop7: detected capacity change from 0 to 16384
[ 1659.875522][T29883] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4349'.
[ 1660.882952][T29891] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4351'.
[ 1661.386083][   T40] kauditd_printk_skb: 10 callbacks suppressed
[ 1661.386094][   T40] audit: type=1800 audit(1740758996.898:6163): pid=29891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.8.4351" name="/newroot/733/bus" dev="tmpfs" ino=4160 res=0 errno=0
[ 1663.817936][T29929] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4358'.
[ 1666.288744][T29956] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4366'.
[ 1667.975803][T29986] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4371'.
[ 1668.224855][ T1413] ieee802154 phy1 wpan1: encryption failed: -22
[ 1668.340349][T29994] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[ 1668.348959][T29994] overlayfs: overlapping lowerdir path
[ 1669.120770][T29995] sctp: [Deprecated]: syz.3.4372 (pid 29995) Use of int in maxseg socket option.
[ 1669.120770][T29995] Use struct sctp_assoc_value instead
[ 1669.131895][T29995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4372'.
[ 1670.627086][T30023] hub 6-0:1.0: USB hub found
[ 1670.634829][T30023] hub 6-0:1.0: 1 port detected
[ 1672.499493][T30043] lo speed is unknown, defaulting to 1000
[ 1672.702664][T30048] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4383'.
[ 1672.990325][T30050] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4384'.
[ 1673.003860][T30050] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4384'.
[ 1673.885924][T30054] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[ 1673.889143][T30054] overlayfs: overlapping lowerdir path
[ 1674.406654][T30069] netlink: 'syz.9.4387': attribute type 4 has an invalid length.
[ 1674.413890][T30069] netlink: 'syz.9.4387': attribute type 4 has an invalid length.
[ 1675.408257][T30079] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4392'.
[ 1675.707804][T30079] wireguard0: entered promiscuous mode
[ 1675.857414][T30085] netlink: 'syz.8.4393': attribute type 2 has an invalid length.
[ 1675.859760][T30085] netlink: 'syz.8.4393': attribute type 1 has an invalid length.
[ 1675.862454][T30085] netlink: 'syz.8.4393': attribute type 1 has an invalid length.
[ 1675.866987][T30085] loop7: detected capacity change from 0 to 16384
[ 1676.938234][T30092] can0: slcan on ttyS3.
[ 1677.015538][T30089] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4394'.
[ 1677.053641][T30085] loop7: detected capacity change from 16384 to 16383
[ 1677.475417][T30116] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4397'.
[ 1677.584346][T30086] can0 (unregistered): slcan off ttyS3.
[ 1678.348929][T30130] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4399'.
[ 1679.084549][T30137] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4401'.
[ 1680.320979][T30150] syz.8.4404: attempt to access beyond end of device
[ 1680.320979][T30150] nbd8: rw=0, sector=2, nr_sectors = 2 limit=0
[ 1680.325227][T30150] MINIX-fs: unable to read superblock
[ 1681.415410][T30163] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[ 1681.417585][T30163] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1681.420205][T30163] vhci_hcd vhci_hcd.0: Device attached
[ 1681.612092][T29427] vhci_hcd: vhci_device speed not set
[ 1681.967181][T29427] usb 43-1: new full-speed USB device number 4 using vhci_hcd
[ 1682.343942][T30177] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4403'.
[ 1682.640233][T30183] ebtables: wrong size: *len 120, entries_size 48, replsz 48
[ 1683.198121][T30164] vhci_hcd: connection reset by peer
[ 1683.206263][   T77] vhci_hcd: stop threads
[ 1683.208351][   T77] vhci_hcd: release socket
[ 1683.210373][   T77] vhci_hcd: disconnect device
[ 1683.853983][T30197] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4413'.
[ 1683.869986][T30197] wireguard1: entered promiscuous mode
[ 1684.058729][T30199] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4412'.
[ 1684.206642][T26080] libceph: connect (1)[c::]:6789 error -101
[ 1684.208490][T26080] libceph: mon0 (1)[c::]:6789 connect error
[ 1684.257060][T30201] ceph: No mds server is up or the cluster is laggy
[ 1684.844748][T30218] syz.8.4416: attempt to access beyond end of device
[ 1684.844748][T30218] nbd8: rw=0, sector=2, nr_sectors = 2 limit=0
[ 1684.848705][T30218] MINIX-fs: unable to read superblock
[ 1685.882776][T30233] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4418'.
[ 1686.137608][T30241] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4419'.
[ 1686.395327][T30245] netlink: 'syz.6.4421': attribute type 9 has an invalid length.
[ 1686.977854][T30255] lo speed is unknown, defaulting to 1000
[ 1687.092065][T29427] vhci_hcd: vhci_device speed not set
[ 1688.118159][T30274] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4426'.
[ 1688.245943][T30275] syz.3.4427: attempt to access beyond end of device
[ 1688.245943][T30275] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0
[ 1688.249998][T30275] MINIX-fs: unable to read superblock
[ 1690.204135][T30298] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4430'.
[ 1690.236850][T30299] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4431'.
[ 1690.704059][T30307] netlink: 'syz.9.4433': attribute type 2 has an invalid length.
[ 1690.706488][T30307] netlink: 'syz.9.4433': attribute type 1 has an invalid length.
[ 1690.708850][T30307] netlink: 'syz.9.4433': attribute type 1 has an invalid length.
[ 1690.739676][T30307] loop7: detected capacity change from 0 to 16384
[ 1690.875250][T30314] loop7: detected capacity change from 16384 to 16383
[ 1693.500709][T30339] syz.3.4446: attempt to access beyond end of device
[ 1693.500709][T30339] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0
[ 1693.505544][T30339] MINIX-fs: unable to read superblock
[ 1693.778710][T30337] can0: slcan on ttyS3.
[ 1693.841369][T30348] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4438'.
[ 1694.712263][T30331] can0 (unregistered): slcan off ttyS3.
[ 1695.098458][T30391] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4443'.
[ 1698.111039][T30430] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[ 1698.773637][T30439] overlayfs: missing 'lowerdir'
[ 1698.793118][T30439] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4457'.
[ 1698.881815][T30445] "syz.3.4456" (30445) uses obsolete ecb(arc4) skcipher
[ 1701.194691][T30476] syz.6.4462: attempt to access beyond end of device
[ 1701.194691][T30476] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0
[ 1701.198575][T30476] MINIX-fs: unable to read superblock
[ 1701.545477][T30484] netlink: 'syz.3.4463': attribute type 4 has an invalid length.
[ 1701.604384][T30484] netlink: 'syz.3.4463': attribute type 4 has an invalid length.
[ 1701.708536][T10700] lo speed is unknown, defaulting to 1000
[ 1702.220299][   T40] audit: type=1400 audit(1740759037.728:6164): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[ 1702.517363][T30508] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4467'.
[ 1702.542699][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1702.820072][T30508] wireguard2: entered promiscuous mode
[ 1702.958743][T30519] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4469'.
[ 1703.148521][T30523] lo speed is unknown, defaulting to 1000
[ 1704.422496][T29658] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 1704.500302][T30547] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4473'.
[ 1706.125314][T30577] "syz.8.4475" (30577) uses obsolete ecb(arc4) skcipher
[ 1706.702702][T30582] netlink: 'syz.6.4476': attribute type 4 has an invalid length.
[ 1706.711448][T30582] netlink: 'syz.6.4476': attribute type 4 has an invalid length.
[ 1708.120946][T30601] syz.3.4478: attempt to access beyond end of device
[ 1708.120946][T30601] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0
[ 1708.121047][T30601] MINIX-fs: unable to read superblock
[ 1708.626729][T30592] tmpfs: Unknown parameter '0x0000000000000d26'
[ 1712.092839][T30635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4485'.
[ 1712.201275][T30635] wireguard2: entered promiscuous mode
[ 1712.466887][T30633] syz.8.4486: attempt to access beyond end of device
[ 1712.466887][T30633] nbd8: rw=0, sector=2, nr_sectors = 2 limit=0
[ 1712.476199][T30633] MINIX-fs: unable to read superblock
[ 1713.312501][ T1466] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 1714.058118][T30671] "syz.9.4489" (30671) uses obsolete ecb(arc4) skcipher
[ 1714.704472][T30678] syz.8.4491: attempt to access beyond end of device
[ 1714.704472][T30678] nbd8: rw=0, sector=2, nr_sectors = 2 limit=0
[ 1714.715275][T30678] MINIX-fs: unable to read superblock
[ 1715.627321][T30687] netlink: 'syz.8.4492': attribute type 4 has an invalid length.
[ 1715.640775][T30687] netlink: 'syz.8.4492': attribute type 4 has an invalid length.
[ 1716.559352][T30698] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[ 1724.070228][T30726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4497'.
[ 1724.100668][T30720] fuse: Unknown parameter 'grou00000000000000000000'
[ 1724.195385][T30731] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1724.693762][T30739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1724.834937][T30735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1724.891187][T30735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1725.348690][T30753] syz.8.4503: attempt to access beyond end of device
[ 1725.348690][T30753] nbd8: rw=0, sector=2, nr_sectors = 2 limit=0
[ 1725.353857][T30753] MINIX-fs: unable to read superblock
[ 1725.940900][T30760] netlink: 'syz.6.4506': attribute type 4 has an invalid length.
[ 1726.735802][T30771] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4515'.
[ 1726.955696][T29457] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 1728.665303][T30814] cdrom: dropping to single frame dma
[ 1728.938950][T30822] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4516'.
[ 1728.956573][T30822] wireguard1: entered promiscuous mode
[ 1729.669853][ T1413] ieee802154 phy1 wpan1: encryption failed: -22
[ 1734.183541][T30852] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4519'.
[ 1734.188371][T30852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4519'.
[ 1734.195270][T30852] macvtap2: entered promiscuous mode
[ 1734.197292][T30852] bridge0: entered promiscuous mode
[ 1734.199318][T30852] macvtap2: entered allmulticast mode
[ 1734.201316][T30852] bridge0: entered allmulticast mode
[ 1734.209536][T30854] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4521'.
[ 1734.245360][T30852] bridge0: left allmulticast mode
[ 1734.247414][T30852] bridge0: left promiscuous mode
[ 1734.309050][T30858] input: syz1 as /devices/virtual/input/input40
[ 1734.335373][T30858] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4520'.
[ 1734.338855][T30858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4520'.
[ 1735.050652][   T40] audit: type=1326 audit(1740759070.558:6165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30863 comm="syz.9.4523" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x0
[ 1735.275087][T30869] kAFS: unable to lookup cell 'sy>7 ��O-z1'
[ 1735.654333][   T40] audit: type=1800 audit(1740759071.168:6166): pid=30872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.6.4524" name="/newroot/863/bus" dev="tmpfs" ino=4927 res=0 errno=0
[ 1736.148789][T30879] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4525'.
[ 1736.177424][T30883] syzkaller1: entered promiscuous mode
[ 1736.179104][T30883] syzkaller1: entered allmulticast mode
[ 1736.832441][ T5988] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 1737.052271][T30886] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4527'.
[ 1737.070095][T30886] wireguard3: entered promiscuous mode
[ 1737.950149][T30911] lo speed is unknown, defaulting to 1000
[ 1738.134167][T30913] ax25_connect(): syz.9.4532 uses autobind, please contact jreuter@yaina.de
[ 1739.491166][T30935] kAFS: unable to lookup cell 'sy>7 ��O-z1'
[ 1740.441306][T30941] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4538'.
[ 1740.447685][T30941] overlayfs: failed to resolve './file1': -2
[ 1741.268063][T10700] libceph: connect (1)[c::]:6789 error -101
[ 1741.270119][T10700] libceph: mon0 (1)[c::]:6789 connect error
[ 1741.500338][T30952] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4540'.
[ 1741.506891][T30952] overlayfs: failed to resolve './file1': -2
[ 1741.535413][T10700] libceph: connect (1)[c::]:6789 error -101
[ 1741.540865][T10700] libceph: mon0 (1)[c::]:6789 connect error
[ 1741.724140][T30945] ceph: No mds server is up or the cluster is laggy
[ 1742.493631][T30955] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[ 1742.677017][T30964] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5)
[ 1742.679587][T30964] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1742.684005][T30964] vhci_hcd vhci_hcd.0: Device attached
[ 1742.922061][T29433] usb 53-1: new low-speed USB device number 5 using vhci_hcd
[ 1742.995033][T30974] mkiss: ax0: crc mode is auto.
[ 1743.064387][T30976] lo speed is unknown, defaulting to 1000
[ 1743.645198][T30968] vhci_hcd: connection reset by peer
[ 1743.648259][   T11] vhci_hcd: stop threads
[ 1743.649717][   T11] vhci_hcd: release socket
[ 1743.652236][   T11] vhci_hcd: disconnect device
[ 1744.128053][T30989] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4547'.
[ 1744.132148][T30989] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4547'.
[ 1744.137120][T30989] macvtap1: entered promiscuous mode
[ 1744.138710][T30989] bridge0: entered promiscuous mode
[ 1744.140305][T30989] macvtap1: entered allmulticast mode
[ 1744.142259][T30989] bridge0: entered allmulticast mode
[ 1744.173405][T30989] bridge0: left allmulticast mode
[ 1744.174985][T30989] bridge0: left promiscuous mode
[ 1744.231922][T30990] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4548'.
[ 1744.237083][T30990] overlayfs: failed to resolve './file1': -2
[ 1745.086059][T31003] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4551'.
[ 1745.091791][T31003] overlayfs: failed to resolve './file1': -2
[ 1747.699598][T31035] input: syz1 as /devices/virtual/input/input41
[ 1747.744226][T31035] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4558'.
[ 1747.746873][T31035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4558'.
[ 1748.052123][T29433] vhci_hcd: vhci_device speed not set
[ 1748.597444][T29430] libceph: connect (1)[c::]:6789 error -101
[ 1748.599300][T29430] libceph: mon0 (1)[c::]:6789 connect error
[ 1748.852231][T29430] libceph: connect (1)[c::]:6789 error -101
[ 1748.854222][T29430] libceph: mon0 (1)[c::]:6789 connect error
[ 1748.901157][T31045] ceph: No mds server is up or the cluster is laggy
[ 1748.910973][T31044] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4560'.
[ 1748.940883][T31044] overlayfs: failed to resolve './file1': -2
[ 1748.985007][T31053] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4561'.
[ 1748.987685][T31053] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4561'.
[ 1749.230524][T31062] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4562'.
[ 1749.236427][T31062] overlayfs: failed to resolve './file1': -2
[ 1751.166103][T31077] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4566'.
[ 1751.181808][T31077] wireguard4: entered promiscuous mode
[ 1751.998939][T31088] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[ 1752.002044][T31088] overlayfs: overlapping lowerdir path
[ 1753.139137][T31106] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4572'.
[ 1753.149237][T31106] overlayfs: failed to resolve './file0': -2
[ 1753.164981][T31107] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4573'.
[ 1753.170869][T31107] overlayfs: failed to resolve './file0': -2
[ 1754.302063][T27361] Bluetooth: hci0: command 0x0406 tx timeout
[ 1754.720232][T31133] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4580'.
[ 1754.726219][T31133] overlayfs: failed to resolve './file1': -2
[ 1756.288869][T31143] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[ 1756.291926][T31143] overlayfs: overlapping lowerdir path
[ 1757.269770][T31155] syz.3.4584: attempt to access beyond end of device
[ 1757.269770][T31155] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0
[ 1757.456927][T31155] MINIX-fs: unable to read superblock
[ 1757.702655][T31164] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4586'.
[ 1757.707523][T31164] overlayfs: failed to resolve './file0': -2
[ 1758.050169][T31170] kAFS: No cell specified
[ 1759.579910][T31189] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4593'.
[ 1759.583867][T31189] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1759.645860][T31189] netlink: 'syz.6.4593': attribute type 21 has an invalid length.
[ 1759.648169][T31189] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4593'.
[ 1759.650797][T31189] netlink: 'syz.6.4593': attribute type 5 has an invalid length.
[ 1759.656191][T31189] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4593'.
[ 1760.327456][T31187] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[ 1760.330503][T31187] overlayfs: overlapping lowerdir path
[ 1760.384641][T31195] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4594'.
[ 1760.389112][T31195] overlayfs: failed to resolve './file1': -2
[ 1760.596078][T31209] syz_tun: entered allmulticast mode
[ 1760.598151][T31209] syz_tun: left allmulticast mode
[ 1760.734166][T31209] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6)
[ 1760.736147][T31209] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1760.738330][T31209] vhci_hcd vhci_hcd.0: Device attached
[ 1760.775057][T31212] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4598'.
[ 1760.818662][T31212] wireguard5: entered promiscuous mode
[ 1760.831348][T31219] input: syz1 as /devices/virtual/input/input42
[ 1760.897141][T31220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4597'.
[ 1760.900155][T31220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4597'.
[ 1761.272634][T26080] vhci_hcd: vhci_device speed not set
[ 1761.294933][T31214] can0: slcan on ttyS3.
[ 1761.333829][T26080] usb 49-1: new full-speed USB device number 6 using vhci_hcd
[ 1762.509617][T31238] wireguard6: entered promiscuous mode
[ 1762.608387][T31215] vhci_hcd: connection reset by peer
[ 1762.610179][T26826] vhci_hcd: stop threads
[ 1762.611551][T26826] vhci_hcd: release socket
[ 1762.613042][T26826] vhci_hcd: disconnect device
[ 1762.633173][T31199] can0 (unregistered): slcan off ttyS3.
[ 1763.232145][T29656] usb 11-1: new full-speed USB device number 7 using dummy_hcd
[ 1763.461305][T31257] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4603'.
[ 1763.468621][T31257] overlayfs: failed to resolve './file0': -2
[ 1763.593790][T29656] usb 11-1: not running at top speed; connect to a high speed hub
[ 1763.596619][T29656] usb 11-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64
[ 1763.599807][T29656] usb 11-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1763.603821][T29656] usb 11-1: config 1 interface 0 has no altsetting 0
[ 1763.607177][T29656] usb 11-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40
[ 1763.609591][T29656] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1763.611706][T29656] usb 11-1: Product: syz
[ 1763.612872][T29656] usb 11-1: Manufacturer: syz
[ 1763.614107][T29656] usb 11-1: SerialNumber: syz
[ 1763.622224][T31262] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1764.273342][T31266] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[ 1764.276343][T31266] overlayfs: overlapping lowerdir path
[ 1764.653883][T31280] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4607'.
[ 1764.663767][T31280] overlayfs: failed to resolve './file1': -2
[ 1765.022515][T27361] Bluetooth: hci2: command 0x0405 tx timeout
[ 1765.025278][T31286] lo speed is unknown, defaulting to 1000
[ 1765.571624][T31290] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4610'.
[ 1765.578139][T31290] syz_tun: left promiscuous mode
[ 1765.588777][T31290] mac80211_hwsim hwsim23 wlan1: left promiscuous mode
[ 1765.595080][T31290] mac80211_hwsim hwsim23 wlan1: left allmulticast mode
[ 1765.599309][T31290] gtp0: left promiscuous mode
[ 1765.601820][T31290] gtp0: left allmulticast mode
[ 1765.607969][T31290] macvtap1: left promiscuous mode
[ 1765.612776][T31290] macvtap1: left allmulticast mode
[ 1765.616649][T31290] wireguard0: left promiscuous mode
[ 1765.620404][T31290] wireguard1: left promiscuous mode
[ 1765.625965][T31290] wireguard2: left promiscuous mode
[ 1765.629749][T31290] wireguard3: left promiscuous mode
[ 1765.634887][T31290] wireguard4: left promiscuous mode
[ 1765.641236][T31290] wireguard5: left promiscuous mode
[ 1765.649938][T31290] wireguard6: left promiscuous mode
[ 1765.654726][T31291] team0: No ports can be present during mode change
[ 1765.746162][T29656] usbhid 11-1:1.0: can't add hid device: -71
[ 1765.748042][T29656] usbhid 11-1:1.0: probe with driver usbhid failed with error -71
[ 1765.778439][T29656] usb 11-1: USB disconnect, device number 7
[ 1765.862100][T31291] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4610'.
[ 1766.061611][T31291] team0 (unregistering): Port device team_slave_0 removed
[ 1766.069987][T31291] team0 (unregistering): Port device team_slave_1 removed
[ 1766.860232][T31299] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4612'.
[ 1766.860418][T26080] vhci_hcd: vhci_device speed not set
[ 1766.868251][T31299] overlayfs: failed to resolve './file1': -2
[ 1767.608179][T31306] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4614'.
[ 1767.611687][T31306] overlayfs: failed to resolve './file0': -2
[ 1767.731923][T31310] netlink: 'syz.6.4615': attribute type 9 has an invalid length.
[ 1768.000127][T29433] kernel write not supported for file bpf-map (pid: 29433 comm: kworker/3:7)
[ 1768.003261][T31324] syzkaller1: entered promiscuous mode
[ 1768.005543][T31324] syzkaller1: entered allmulticast mode
[ 1768.349481][T31336] netlink: 4268 bytes leftover after parsing attributes in process `syz.8.4622'.
[ 1768.353404][T31336] netlink: 4268 bytes leftover after parsing attributes in process `syz.8.4622'.
[ 1768.602758][T31333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4621'.
[ 1768.617840][T31333] wireguard3: entered promiscuous mode
[ 1769.139314][ T5988] IPVS: starting estimator thread 0...
[ 1769.302058][T31349] IPVS: using max 38 ests per chain, 91200 per kthread
[ 1770.150161][T31364] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4626'.
[ 1770.158715][T31364] overlayfs: failed to resolve './file0': -2
[ 1770.439430][T31370] syzkaller1: entered promiscuous mode
[ 1770.441628][T31370] syzkaller1: entered allmulticast mode
[ 1771.658365][T31376] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4638'.
[ 1771.667422][T31376] overlayfs: failed to resolve './file1': -2
[ 1771.712032][T31383] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[ 1771.715921][T31383] overlayfs: overlapping lowerdir path
[ 1772.054426][T31391] IPVS: Error connecting to the multicast addr
[ 1772.872071][T31404] /dev/nullb0: Can't open blockdev
[ 1773.564501][T31413] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4637'.
[ 1773.819535][T31419] syzkaller1: entered promiscuous mode
[ 1773.821359][T31419] syzkaller1: entered allmulticast mode
[ 1774.205711][T31431] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4641'.
[ 1774.267108][T31432] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4640'.
[ 1774.272336][T31432] overlayfs: failed to resolve './file0': -2
[ 1774.288049][T31431] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4641'.
[ 1775.068971][T31440] netlink: 'syz.8.4644': attribute type 9 has an invalid length.
[ 1777.488511][T31471] IPVS: Error connecting to the multicast addr
[ 1778.772041][T29433] usb 14-1: new high-speed USB device number 5 using dummy_hcd
[ 1778.922027][T29433] usb 14-1: Using ep0 maxpacket: 8
[ 1778.924715][T29433] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1778.927800][T29433] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1778.930398][T29433] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1779.058388][T29433] usb 14-1: config 0 descriptor??
[ 1779.288985][T29433] iowarrior 14-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1779.797421][T29433] usb 14-1: USB disconnect, device number 5
[ 1779.799240][T31488] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4661'.
[ 1779.801862][T31488] bond_slave_1: entered promiscuous mode
[ 1779.805012][T31488] netlink: 'syz.9.4661': attribute type 2 has an invalid length.
[ 1779.809218][T31510] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4657'.
[ 1781.657855][T31537] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4663'.
[ 1781.672654][T31537] wireguard7: entered promiscuous mode
[ 1781.843601][T31540] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4664'.
[ 1783.056288][T31549] xt_hashlimit: invalid rate
[ 1784.707443][T31582] syz.8.4671: attempt to access beyond end of device
[ 1784.707443][T31582] nbd8: rw=0, sector=2, nr_sectors = 2 limit=0
[ 1784.824630][T31582] MINIX-fs: unable to read superblock
[ 1786.592732][T31604] netlink: 'syz.8.4678': attribute type 15 has an invalid length.
[ 1786.595068][T31604] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4678'.
[ 1786.613670][T31604] 9pnet: Could not find request transport: rfma
[ 1786.617077][T31604] IPVS: ovf: SCTP 127.0.0.1:0 - no destination available
[ 1787.414761][T31613] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4679'.
[ 1787.785185][T31620] ISOFS: Unable to identify CD-ROM format.
[ 1788.662168][T29457] libceph: connect (1)[c::]:6789 error -101
[ 1788.666375][T29457] libceph: mon0 (1)[c::]:6789 connect error
[ 1788.832492][T31634] ceph: No mds server is up or the cluster is laggy
[ 1788.894949][T31643] IPVS: Error connecting to the multicast addr
[ 1789.039700][T31646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4685'.
[ 1789.044788][T31646] wireguard4: entered promiscuous mode
[ 1790.019248][T31661] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1790.442791][T31667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1790.486415][T31665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1790.540857][T31665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1791.103851][ T1413] ieee802154 phy1 wpan1: encryption failed: -22
[ 1791.606177][T31669] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4691'.
[ 1792.301210][T31684] could not allocate digest TFM handle crct10dif-arm64-ce
[ 1792.365729][T31701] syzkaller1: entered promiscuous mode
[ 1792.367423][T31701] syzkaller1: entered allmulticast mode
[ 1792.597913][T31705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4698'.
[ 1792.603507][T31705] wireguard2: entered promiscuous mode
[ 1792.882050][T31708] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1792.885410][T31708] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 1792.894428][T31708] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1792.897296][T31708] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 1792.902202][T31708] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1792.902225][T31708] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[ 1792.916472][T31708] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1792.918819][T31708] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[ 1794.031204][T31723] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[ 1794.034402][T31723] overlayfs: overlapping lowerdir path
[ 1794.563151][T31728] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4703'.
[ 1794.822287][T31736] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4712'.
[ 1794.831714][T31736] wireguard8: entered promiscuous mode
[ 1795.814569][T31748] syzkaller1: entered promiscuous mode
[ 1795.816835][T31748] syzkaller1: entered allmulticast mode
[ 1796.492133][T26080] usb 13-1: new full-speed USB device number 8 using dummy_hcd
[ 1796.773503][T31766] input: syz1 as /devices/virtual/input/input43
[ 1797.392072][T31765] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4711'.
[ 1797.395472][T31765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4711'.
[ 1797.780094][T26080] usb 13-1: config 1 interface 0 altsetting 8 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[ 1797.783371][T26080] usb 13-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1797.787028][T26080] usb 13-1: config 1 interface 0 has no altsetting 0
[ 1797.792967][T26080] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1797.796174][T26080] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1797.798892][T26080] usb 13-1: Product: syz
[ 1797.800558][T26080] usb 13-1: Manufacturer: syz
[ 1797.803402][T26080] usb 13-1: SerialNumber: syz
[ 1797.860810][T31753] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1798.680472][T31771] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[ 1798.683591][T31771] overlayfs: overlapping lowerdir path
[ 1798.696242][   T40] audit: type=1326 audit(1740759134.208:6167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31772 comm="syz.6.4715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[ 1798.697844][T26080] usb 13-1: USB disconnect, device number 8
[ 1798.705497][   T40] audit: type=1326 audit(1740759134.208:6168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31772 comm="syz.6.4715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[ 1798.712337][   T40] audit: type=1326 audit(1740759134.208:6169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31772 comm="syz.6.4715" exe="/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf743e579 code=0x7ffc0000
[ 1798.720287][   T40] audit: type=1326 audit(1740759134.208:6170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31772 comm="syz.6.4715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[ 1798.728477][   T40] audit: type=1326 audit(1740759134.208:6171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31772 comm="syz.6.4715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[ 1798.752056][   T40] audit: type=1326 audit(1740759134.208:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31772 comm="syz.6.4715" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf743e579 code=0x7ffc0000
[ 1798.759774][   T40] audit: type=1326 audit(1740759134.208:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31772 comm="syz.6.4715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[ 1798.771423][   T40] audit: type=1326 audit(1740759134.208:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31772 comm="syz.6.4715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[ 1798.779232][   T40] audit: type=1326 audit(1740759134.208:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31772 comm="syz.6.4715" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf743e579 code=0x7ffc0000
[ 1798.791868][   T40] audit: type=1326 audit(1740759134.208:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31772 comm="syz.6.4715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[ 1798.924932][T31784] syzkaller1: entered promiscuous mode
[ 1798.927108][T31784] syzkaller1: entered allmulticast mode
[ 1799.570487][T31793] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[ 1799.574508][T31793] overlayfs: overlapping lowerdir path
[ 1801.303495][T31832] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4723'.
[ 1801.995143][T31839] syzkaller1: entered promiscuous mode
[ 1801.996918][T31839] syzkaller1: entered allmulticast mode
[ 1802.977889][T31851] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4727'.
[ 1803.594051][T31866] random: crng reseeded on system resumption
[ 1803.665182][T31866] lo speed is unknown, defaulting to 1000
[ 1804.017278][T31848] xt_hashlimit: invalid rate
[ 1804.581049][T31881] syzkaller1: entered promiscuous mode
[ 1804.583207][T31881] syzkaller1: entered allmulticast mode
[ 1805.296800][T31891] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4739'.
[ 1805.468593][T31891] wireguard9: entered promiscuous mode
[ 1806.162630][T29433] usb 11-1: new full-speed USB device number 8 using dummy_hcd
[ 1806.300319][T31906] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4742'.
[ 1806.303530][T31906] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4742'.
[ 1806.308150][T31906] bridge0: port 1(vlan2) entered blocking state
[ 1806.310013][T31906] bridge0: port 1(vlan2) entered disabled state
[ 1806.312203][T31906] vlan2: entered allmulticast mode
[ 1806.340095][T31906] vlan2: left allmulticast mode
[ 1806.381019][T29433] usb 11-1: config 1 interface 0 altsetting 8 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[ 1806.384654][T29433] usb 11-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1806.388348][T29433] usb 11-1: config 1 interface 0 has no altsetting 0
[ 1806.396938][T29433] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1806.399619][T29433] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1806.402624][T29433] usb 11-1: Product: syz
[ 1806.403911][T29433] usb 11-1: Manufacturer: syz
[ 1806.405288][T29433] usb 11-1: SerialNumber: syz
[ 1806.411632][T31898] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1806.993582][T29433] usb 11-1: USB disconnect, device number 8
[ 1807.117805][T31905] xt_hashlimit: invalid rate
[ 1807.218275][T31914] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4741'.
[ 1808.897334][T31935] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4749'.
[ 1808.914012][T31936] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[ 1808.914125][T31936] overlayfs: overlapping lowerdir path
[ 1808.941249][T31935] wireguard2: entered promiscuous mode
[ 1809.582928][T31953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1809.884088][T31959] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4754'.
[ 1809.887775][T31959] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4754'.
[ 1809.893094][T31959] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1811.655278][T31983] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1812.166025][T31990] syzkaller1: entered promiscuous mode
[ 1812.168229][T31990] syzkaller1: entered allmulticast mode
[ 1812.564326][T32001] kAFS: unable to lookup cell 'sy>7 ��O-z1'
[ 1813.426439][T32010] can0: slcan on ttyS3.
[ 1813.579429][T32007] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4765'.
[ 1813.958872][T32027] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[ 1813.965771][T32027] batman_adv: batadv0: Adding interface: gretap1
[ 1813.967780][T32027] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1813.975628][T32027] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[ 1814.282236][T32004] can0 (unregistered): slcan off ttyS3.
[ 1814.497880][T32045] syzkaller1: entered promiscuous mode
[ 1814.499545][T32045] syzkaller1: entered allmulticast mode
[ 1814.550965][T32048] syzkaller1: entered promiscuous mode
[ 1814.552758][T32048] syzkaller1: entered allmulticast mode
[ 1814.638659][   T40] kauditd_printk_skb: 10 callbacks suppressed
[ 1814.638670][   T40] audit: type=1326 audit(1740759150.148:6187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32042 comm="syz.8.4768" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x0
[ 1814.881733][T32061] x_tables: (null)_tables: SNAT.2 target: invalid size 48 (kernel) != (user) 56
[ 1815.182109][T29433] usb 14-1: new high-speed USB device number 6 using dummy_hcd
[ 1815.342103][T29433] usb 14-1: Using ep0 maxpacket: 32
[ 1815.344879][T29433] usb 14-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1815.347718][T29433] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1815.350811][T29433] usb 14-1: config 0 descriptor??
[ 1816.028356][T32075] kAFS: unable to lookup cell 'sy>7 ��O-z1'
[ 1816.858567][T32080] lo speed is unknown, defaulting to 1000
[ 1817.338340][T32089] input: syz1 as /devices/virtual/input/input44
[ 1817.377190][T32089] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4778'.
[ 1817.379986][T32089] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4778'.
[ 1817.833412][T29433] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[ 1817.850854][T29433] usb 14-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[ 1817.854979][T29433] usb 14-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[ 1818.195091][T32099] syz.6.4779: attempt to access beyond end of device
[ 1818.195091][T32099] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0
[ 1818.198480][T32099] MINIX-fs: unable to read superblock
[ 1818.233014][T32096] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4780'.
[ 1819.190098][T32112] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4783'.
[ 1820.961353][T32130] syzkaller1: entered promiscuous mode
[ 1820.963871][T32130] syzkaller1: entered allmulticast mode
[ 1821.118722][T32133] kAFS: unable to lookup cell 'sy>7 ��O-z1'
[ 1821.865796][T32145] siw: device registration error -23
[ 1822.043011][T32147] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[ 1822.046347][T32147] batman_adv: batadv0: Adding interface: gretap2
[ 1822.048701][T32147] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1822.055960][T32147] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active
[ 1822.187291][T32145] lo speed is unknown, defaulting to 1000
[ 1823.057890][T32168] syz.6.4793: attempt to access beyond end of device
[ 1823.057890][T32168] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0
[ 1823.069604][T32168] MINIX-fs: unable to read superblock
[ 1825.622724][T32193] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1828.079693][T32219] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[ 1828.082887][T32219] overlayfs: overlapping lowerdir path
[ 1828.303820][T32218] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4798'.
[ 1832.242800][   T40] audit: type=1400 audit(1740759167.758:6188): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[ 1832.536386][T32291] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[ 1832.565317][T32291] overlayfs: overlapping lowerdir path
[ 1833.826387][T32305] kAFS: unable to lookup cell 'sy>7 ��O-z1'
[ 1833.971785][T32310] lo speed is unknown, defaulting to 1000
[ 1834.094975][T32310] input: syz0 as /devices/virtual/input/input45
[ 1834.336746][T32323] random: crng reseeded on system resumption
[ 1834.384148][T32323] lo speed is unknown, defaulting to 1000
[ 1834.726277][T32316] overlayfs: failed to resolve './file0': -2
[ 1834.860802][T32323] netfs: Couldn't get user pages (rc=-14)
[ 1836.383363][T32350] bridge0: port 1(syz_tun) entered blocking state
[ 1836.385427][T32350] bridge0: port 1(syz_tun) entered disabled state
[ 1836.387779][T32350] syz_tun: entered allmulticast mode
[ 1836.391753][T32350] syz_tun: entered promiscuous mode
[ 1836.409583][T32350] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4824'.
[ 1836.748052][   T40] audit: type=1400 audit(1740759172.258:6189): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[ 1836.848823][    C2] vkms_vblank_simulate: vblank timer overrun
[ 1836.947386][T32360] netlink: 'syz.8.4829': attribute type 1 has an invalid length.
[ 1836.955692][T32360] netlink: 244 bytes leftover after parsing attributes in process `syz.8.4829'.
[ 1839.268524][T32394] random: crng reseeded on system resumption
[ 1839.311242][T32394] lo speed is unknown, defaulting to 1000
[ 1839.563224][T32395] overlayfs: failed to resolve './file0': -2
[ 1839.737622][T32393] netfs: Couldn't get user pages (rc=-14)
[ 1839.867830][T32400] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present
[ 1839.892088][T32400] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1)
[ 1839.914967][T32400] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4836'.
[ 1839.920124][T32400] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4836'.
[ 1840.140339][T32409] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4838'.
[ 1840.161481][T32409] wireguard10: entered promiscuous mode
[ 1842.565746][T32445] bridge0: port 4(syz_tun) entered blocking state
[ 1842.568021][T32445] bridge0: port 4(syz_tun) entered disabled state
[ 1842.571779][T32445] syz_tun: entered allmulticast mode
[ 1842.582313][T32445] syz_tun: entered promiscuous mode
[ 1842.605548][T32445] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4844'.
[ 1843.053540][T32451] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4853'.
[ 1843.566863][T32446] Set syz1 is full, maxelem 65536 reached
[ 1843.676246][T32462] netlink: 3 bytes leftover after parsing attributes in process `syz.8.4848'.
[ 1843.678922][T32462] 0�X���: renamed from caif0
[ 1843.685383][T32462] 0�X���: entered allmulticast mode
[ 1843.686942][T32462] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[ 1844.023315][T32466] random: crng reseeded on system resumption
[ 1844.045095][T32466] lo speed is unknown, defaulting to 1000
[ 1844.340684][T32463] overlayfs: failed to resolve './file0': -2
[ 1844.427454][T32463] netfs: Couldn't get user pages (rc=-14)
[ 1844.864094][T32484] input: syz0 as /devices/virtual/input/input46
[ 1845.639627][T32488] Set syz1 is full, maxelem 65536 reached
[ 1845.893853][T32501] lo speed is unknown, defaulting to 1000
[ 1846.332960][T32511] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4854'.
[ 1847.385079][T32522] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4862'.
[ 1847.429928][T32522] wireguard3: entered promiscuous mode
[ 1847.820393][T32533] netlink: 'syz.9.4864': attribute type 1 has an invalid length.
[ 1847.822911][T32533] netlink: 244 bytes leftover after parsing attributes in process `syz.9.4864'.
[ 1850.416010][T32565] Set syz1 is full, maxelem 65536 reached
[ 1851.270676][T32591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4872'.
[ 1851.313808][T32591] wireguard3: entered promiscuous mode
[ 1851.380808][T32589] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4870'.
[ 1851.657394][T32605] netlink: 'syz.6.4877': attribute type 1 has an invalid length.
[ 1851.659718][T32605] netlink: 244 bytes leftover after parsing attributes in process `syz.6.4877'.
[ 1852.190878][T32606] lo speed is unknown, defaulting to 1000
[ 1852.555142][ T1413] ieee802154 phy1 wpan1: encryption failed: -22
[ 1853.209888][T32627] bridge0: port 3(syz_tun) entered blocking state
[ 1853.209959][T32627] bridge0: port 3(syz_tun) entered disabled state
[ 1853.210046][T32627] syz_tun: entered allmulticast mode
[ 1853.219184][T32627] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4881'.
[ 1853.347017][T32625] netlink: 'syz.9.4879': attribute type 1 has an invalid length.
[ 1853.358610][T32625] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1853.810222][T32635] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4882'.
[ 1853.824333][T32635] wireguard4: entered promiscuous mode
[ 1853.843718][T32620] bond3: (slave gretap1): making interface the new active one
[ 1853.846607][T32620] bond3: (slave gretap1): Enslaving as an active interface with an up link
[ 1853.927335][T32644] x_tables: (null)_tables: SNAT.2 target: invalid size 48 (kernel) != (user) 56
[ 1854.362121][T29430] usb 11-1: new high-speed USB device number 9 using dummy_hcd
[ 1854.512121][T29430] usb 11-1: Using ep0 maxpacket: 32
[ 1854.525215][T29430] usb 11-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1854.527907][T29430] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1854.531426][T29430] usb 11-1: config 0 descriptor??
[ 1855.084768][T32661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4887'.
[ 1855.089783][T32661] macvtap3: entered promiscuous mode
[ 1855.091433][T32661] macvtap3: entered allmulticast mode
[ 1855.093311][T32661] syz_tun: entered allmulticast mode
[ 1855.822926][T32662] lo speed is unknown, defaulting to 1000
[ 1856.102287][T32672] syzkaller1: entered promiscuous mode
[ 1856.103936][T32672] syzkaller1: entered allmulticast mode
[ 1856.363409][T32673] netlink: 'syz.3.4890': attribute type 1 has an invalid length.
[ 1856.366253][T32673] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4890'.
[ 1856.368928][T32673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4890'.
[ 1857.130235][T29430] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[ 1857.254347][T32681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4893'.
[ 1857.270055][T32681] wireguard4: entered promiscuous mode
[ 1857.440571][T32689] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4894'.
[ 1857.447087][T32689] netlink: 177 bytes leftover after parsing attributes in process `syz.6.4894'.
[ 1857.810283][T32696] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1860.224628][T32745] usb usb1: usbfs: process 32745 (syz.8.4904) did not claim interface 0 before use
[ 1860.358465][T32751] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4903'.
[ 1860.404277][T32753] netlink: 240 bytes leftover after parsing attributes in process `syz.8.4906'.
[ 1860.407988][T32753] netlink: 240 bytes leftover after parsing attributes in process `syz.8.4906'.
[ 1860.791187][T32756] netlink: 'syz.8.4906': attribute type 1 has an invalid length.
[ 1860.793514][T32756] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4906'.
[ 1862.603356][  T313] random: crng reseeded on system resumption
[ 1862.666459][  T313] lo speed is unknown, defaulting to 1000
[ 1863.018671][  T312] netfs: Couldn't get user pages (rc=-14)
[ 1863.479953][  T320] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4912'.
[ 1864.743697][  T339] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4915'.
[ 1864.866502][  T341] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4916'.
[ 1864.882658][  T342] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4917'.
[ 1864.908211][  T342] wireguard5: entered promiscuous mode
[ 1865.137891][  T349] afs: Unknown parameter 'd'
[ 1865.209776][  T351] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4)
[ 1865.211813][  T351] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1865.219109][  T351] vhci_hcd vhci_hcd.0: Device attached
[ 1865.452141][ T5988] usb 55-1: new low-speed USB device number 5 using vhci_hcd
[ 1865.902417][T29659] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 1866.228345][  T354] mkiss: ax0: crc mode is auto.
[ 1866.489027][  T352] vhci_hcd: connection reset by peer
[ 1866.492644][ T1138] vhci_hcd: stop threads
[ 1866.493987][ T1138] vhci_hcd: release socket
[ 1866.495510][ T1138] vhci_hcd: disconnect device
[ 1866.515665][T26080] libceph: connect (1)[c::]:6789 error -101
[ 1866.517538][T26080] libceph: mon0 (1)[c::]:6789 connect error
[ 1866.772317][T26080] libceph: connect (1)[c::]:6789 error -101
[ 1866.774886][T26080] libceph: mon0 (1)[c::]:6789 connect error
[ 1867.048861][  T378] netlink: 240 bytes leftover after parsing attributes in process `syz.9.4925'.
[ 1867.053466][  T378] netlink: 240 bytes leftover after parsing attributes in process `syz.9.4925'.
[ 1867.186070][  T361] ceph: No mds server is up or the cluster is laggy
[ 1867.346524][  T382] netlink: 'syz.9.4925': attribute type 1 has an invalid length.
[ 1867.349218][  T382] netlink: 224 bytes leftover after parsing attributes in process `syz.9.4925'.
[ 1867.465346][T26080] libceph: connect (1)[c::]:6789 error -101
[ 1867.484307][T26080] libceph: mon0 (1)[c::]:6789 connect error
[ 1867.593592][  T375] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4923'.
[ 1868.211760][  T398] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4929'.
[ 1868.218038][  T398] wireguard11: entered promiscuous mode
[ 1868.273909][  T396] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4927'.
[ 1868.276688][  T401] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4928'.
[ 1869.439181][  T418] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4933'.
[ 1869.689016][  T422] can0: slcan on ttyS3.
[ 1870.532487][  T417] can0 (unregistered): slcan off ttyS3.
[ 1870.542102][ T5988] vhci_hcd: vhci_device speed not set
[ 1870.584639][  T428] 9pnet_fd: Insufficient options for proto=fd
[ 1870.618666][  T446] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1870.621022][  T446] overlayfs: failed to set xattr on upper
[ 1870.632065][  T446] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1870.634073][  T446] overlayfs: ...falling back to index=off.
[ 1870.635739][  T446] overlayfs: ...falling back to uuid=null.
[ 1870.787303][  T435] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4935'.
[ 1870.789891][  T435] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4935'.
[ 1870.850670][T26080] libceph: connect (1)[c::]:6789 error -22
[ 1870.853043][T26080] libceph: mon0 (1)[c::]:6789 connect error
[ 1871.113167][T26080] libceph: connect (1)[c::]:6789 error -22
[ 1871.115578][T26080] libceph: mon0 (1)[c::]:6789 connect error
[ 1871.402349][  T435] ceph: No mds server is up or the cluster is laggy
[ 1871.888616][  T472] wireguard12: entered promiscuous mode
[ 1871.984923][  T474] wireguard5: entered promiscuous mode
[ 1872.381343][  T481] __nla_validate_parse: 3 callbacks suppressed
[ 1872.381354][  T481] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4940'.
[ 1872.944479][  T491] overlayfs: missing 'lowerdir'
[ 1873.874681][  T498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4946'.
[ 1873.878603][  T498] netlink: 177 bytes leftover after parsing attributes in process `syz.3.4946'.
[ 1874.587418][T29427] libceph: connect (1)[c::]:6789 error -101
[ 1874.589278][T29427] libceph: mon0 (1)[c::]:6789 connect error
[ 1874.842235][T29427] libceph: connect (1)[c::]:6789 error -101
[ 1874.844644][T29427] libceph: mon0 (1)[c::]:6789 connect error
[ 1875.352296][T29427] libceph: connect (1)[c::]:6789 error -101
[ 1875.354822][T29427] libceph: mon0 (1)[c::]:6789 connect error
[ 1875.391839][  T521] ceph: No mds server is up or the cluster is laggy
[ 1875.697994][  T539] random: crng reseeded on system resumption
[ 1875.742749][  T539] lo speed is unknown, defaulting to 1000
[ 1876.210150][  T537] netfs: Couldn't get user pages (rc=-14)
[ 1876.930823][  T544] bridge0: port 4(hsr_slave_1) entered blocking state
[ 1876.933461][  T544] bridge0: port 4(hsr_slave_1) entered disabled state
[ 1876.936094][  T544] hsr_slave_1: entered allmulticast mode
[ 1876.939045][  T544] hsr_slave_1: left allmulticast mode
[ 1876.945220][  T545] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4953'.
[ 1877.004489][  T554] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4957'.
[ 1877.008043][  T554] netlink: 177 bytes leftover after parsing attributes in process `syz.9.4957'.
[ 1878.139253][  T578] netlink: 240 bytes leftover after parsing attributes in process `syz.6.4960'.
[ 1878.145937][T29433] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1878.150326][T29433] dvb_usb_az6027 14-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[ 1878.154931][T29430] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1878.166452][T29430] dvb_usb_az6027 11-1:0.0: probe with driver dvb_usb_az6027 failed with error -2
[ 1878.170413][T29430] usb 11-1: USB disconnect, device number 9
[ 1878.173738][T29433] usb 14-1: USB disconnect, device number 6
[ 1878.179976][  T578] netlink: 240 bytes leftover after parsing attributes in process `syz.6.4960'.
[ 1878.506404][  T581] netlink: 'syz.6.4960': attribute type 1 has an invalid length.
[ 1878.508734][  T581] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4960'.
[ 1879.142129][  T594] lo speed is unknown, defaulting to 1000
[ 1879.190273][  T597] ptrace attach of "/syz-executor exec"[15037] was attempted by "/syz-executor exec"[597]
[ 1879.772019][  T609] random: crng reseeded on system resumption
[ 1879.871156][  T609] lo speed is unknown, defaulting to 1000
[ 1880.382036][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1880.456591][  T609] netfs: Couldn't get user pages (rc=-14)
[ 1880.538953][  T608] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4967'.
[ 1880.716172][  T614] 9pnet_fd: Insufficient options for proto=fd
[ 1880.908765][  T621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4969'.
[ 1880.925728][  T621] wireguard5: entered promiscuous mode
[ 1881.414868][  T628] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4970'.
[ 1881.459380][  T628] wireguard6: entered promiscuous mode
[ 1882.701674][  T650] syzkaller1: entered promiscuous mode
[ 1882.706707][  T650] syzkaller1: entered allmulticast mode
[ 1883.023417][  T652] netlink: 'syz.9.4974': attribute type 1 has an invalid length.
[ 1883.026534][  T652] netlink: 228 bytes leftover after parsing attributes in process `syz.9.4974'.
[ 1883.029173][  T652] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4974'.
[ 1883.278306][  T655] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4977'.
[ 1883.785686][  T665] Cannot find add_set index 3 as target
[ 1883.792719][  T665] netlink: 'syz.3.4980': attribute type 6 has an invalid length.
[ 1883.795845][  T665] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4980'.
[ 1884.283368][  T675] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4979'.
[ 1884.602928][  T684] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.4982'.
[ 1884.606072][  T684] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.4982'.
[ 1884.815517][  T688] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4981'.
[ 1884.820697][  T688] netlink: 177 bytes leftover after parsing attributes in process `syz.8.4981'.
[ 1885.380165][  T698] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4989'.
[ 1885.881396][  T703] syzkaller1: entered promiscuous mode
[ 1885.885460][  T703] syzkaller1: entered allmulticast mode
[ 1886.706030][  T707] netlink: 'syz.9.4986': attribute type 4 has an invalid length.
[ 1886.799518][  T707] netlink: 'syz.9.4986': attribute type 4 has an invalid length.
[ 1887.316309][  T720] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4990'.
[ 1888.115446][  T733] capability: warning: `syz.8.4992' uses 32-bit capabilities (legacy support in use)
[ 1889.681203][  T750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4994'.
[ 1889.970694][  T750] wireguard6: entered promiscuous mode
[ 1890.609147][  T757] lo speed is unknown, defaulting to 1000
[ 1890.624690][  T759] netlink: 'syz.8.4999': attribute type 1 has an invalid length.
[ 1890.627004][  T759] netlink: 228 bytes leftover after parsing attributes in process `syz.8.4999'.
[ 1890.629579][  T759] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4999'.
[ 1890.673182][  T760] ptrace attach of "/syz-executor exec"[10740] was attempted by "/syz-executor exec"[760]
[ 1891.374101][  T769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5001'.
[ 1891.376818][  T769] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5001'.
[ 1891.387569][T26080] libceph: connect (1)[c::]:6789 error -22
[ 1891.389998][T26080] libceph: mon0 (1)[c::]:6789 connect error
[ 1891.462506][  T782] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5003'.
[ 1891.696533][T26080] libceph: connect (1)[c::]:6789 error -22
[ 1891.698700][T26080] libceph: mon0 (1)[c::]:6789 connect error
[ 1891.701760][  T769] ceph: No mds server is up or the cluster is laggy
[ 1891.880118][  T790] random: crng reseeded on system resumption
[ 1892.046424][  T790] lo speed is unknown, defaulting to 1000
[ 1892.398107][  T787] netfs: Couldn't get user pages (rc=-14)
[ 1893.128098][  T809] gtp1: entered promiscuous mode
[ 1893.129668][  T809] gtp1: entered allmulticast mode
[ 1893.205438][  T797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5014'.
[ 1893.208860][  T797] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5014'.
[ 1893.310762][T26080] libceph: connect (1)[c::]:6789 error -22
[ 1893.314649][T26080] libceph: mon0 (1)[c::]:6789 connect error
[ 1893.425615][  T797] ceph: No mds server is up or the cluster is laggy
[ 1893.724838][  T817] ebtables: wrong size: *len 264, entries_size 144, replsz 144
[ 1894.199129][  T824] netlink: 'syz.3.5009': attribute type 16 has an invalid length.
[ 1894.201499][  T824] netlink: 'syz.3.5009': attribute type 3 has an invalid length.
[ 1894.204479][  T824] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5009'.
[ 1894.361472][  T822] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5010'.
[ 1894.376019][  T822] wireguard7: entered promiscuous mode
[ 1895.211475][  T831] netlink: 'syz.8.5011': attribute type 4 has an invalid length.
[ 1895.218424][  T831] netlink: 'syz.8.5011': attribute type 4 has an invalid length.
[ 1895.609420][  T841] Cannot find add_set index 3 as target
[ 1895.780148][  T845] /dev/loop6: Can't lookup blockdev
[ 1895.828309][  T841] netlink: 'syz.6.5013': attribute type 6 has an invalid length.
[ 1895.830541][  T841] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5013'.
[ 1895.885260][  T848] bridge0: port 3(hsr_slave_1) entered blocking state
[ 1895.887408][  T848] bridge0: port 3(hsr_slave_1) entered disabled state
[ 1895.889767][  T848] hsr_slave_1: entered allmulticast mode
[ 1895.893835][  T848] hsr_slave_1: left allmulticast mode
[ 1897.044812][  T862] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5015'.
[ 1897.057711][  T863] netlink: 'syz.3.5018': attribute type 10 has an invalid length.
[ 1897.419704][  T867] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5020'.
[ 1897.422887][  T867] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5020'.
[ 1897.603889][T26080] libceph: connect (1)[c::]:6789 error -101
[ 1897.605805][T26080] libceph: mon0 (1)[c::]:6789 connect error
[ 1897.991296][T26080] libceph: connect (1)[c::]:6789 error -101
[ 1897.997333][T26080] libceph: mon0 (1)[c::]:6789 connect error
[ 1898.060284][  T867] ceph: No mds server is up or the cluster is laggy
[ 1898.111109][  T872] ebtables: wrong size: *len 264, entries_size 144, replsz 144
[ 1898.872860][  T893] lo speed is unknown, defaulting to 1000
[ 1899.834582][  T907] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5030'.
[ 1900.900408][  T916] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5033'.
[ 1900.903220][  T916] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5033'.
[ 1900.922899][T26080] libceph: connect (1)[c::]:6789 error -22
[ 1900.924780][T26080] libceph: mon0 (1)[c::]:6789 connect error
[ 1901.185629][T26080] libceph: connect (1)[c::]:6789 error -22
[ 1901.187825][T26080] libceph: mon0 (1)[c::]:6789 connect error
[ 1901.589298][  T916] ceph: No mds server is up or the cluster is laggy
[ 1901.768991][  T937] ipvlan1: left allmulticast mode
[ 1901.770531][  T937] veth0_vlan: left allmulticast mode
[ 1901.965770][  T940] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5038'.
[ 1902.945646][  T961] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5042'.
[ 1903.904617][  T993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5045'.
[ 1903.916126][  T993] input: syz1 as /devices/virtual/input/input47
[ 1904.235191][  T996] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5046'.
[ 1904.237982][  T996] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5046'.
[ 1904.245665][T26080] libceph: connect (1)[c::]:6789 error -22
[ 1904.247580][T26080] libceph: mon0 (1)[c::]:6789 connect error
[ 1904.552210][T26080] libceph: connect (1)[c::]:6789 error -22
[ 1904.555067][T26080] libceph: mon0 (1)[c::]:6789 connect error
[ 1904.952610][ T1014] overlayfs: missing 'lowerdir'
[ 1905.535006][T26080] libceph: connect (1)[c::]:6789 error -22
[ 1905.536826][T26080] libceph: mon0 (1)[c::]:6789 connect error
[ 1905.544062][  T996] ceph: No mds server is up or the cluster is laggy
[ 1905.816418][ T1022] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5049'.
[ 1906.020495][ T1027] ipvlan1: entered allmulticast mode
[ 1906.022912][ T1027] veth0_vlan: entered allmulticast mode
[ 1906.849655][ T1043] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5053'.
[ 1907.270448][   T40] audit: type=1800 audit(1740759242.778:6190): pid=1052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5056" name="SYSV00000000" dev="tmpfs" ino=7 res=0 errno=0
[ 1907.872334][ T1058] input: syz1 as /devices/virtual/input/input48
[ 1907.932957][ T1067] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5060'.
[ 1907.944189][ T1068] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5057'.
[ 1907.947040][ T1068] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5057'.
[ 1907.978821][ T1067] wireguard8: entered promiscuous mode
[ 1908.126432][ T1071] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5061'.
[ 1909.003422][ T1082] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5063'.
[ 1910.822618][ T1131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5072'.
[ 1910.829268][ T1131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5072'.
[ 1910.979517][ T1133] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5073'.
[ 1911.836692][ T1151] random: crng reseeded on system resumption
[ 1911.888266][ T1151] lo speed is unknown, defaulting to 1000
[ 1912.207694][ T1139] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5074'.
[ 1912.237138][ T1139] wireguard9: entered promiscuous mode
[ 1912.237866][ T1150] netfs: Couldn't get user pages (rc=-14)
[ 1914.449172][ T1181] overlay: Unknown parameter '/'
[ 1915.055964][ T1202] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5087'.
[ 1915.066976][ T1203] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5081'.
[ 1915.079910][ T1203] wireguard13: entered promiscuous mode
[ 1915.576088][ T1210] random: crng reseeded on system resumption
[ 1915.656481][ T1210] lo speed is unknown, defaulting to 1000
[ 1915.894696][ T1217] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5090'.
[ 1916.083166][ T1209] netfs: Couldn't get user pages (rc=-14)
[ 1916.088273][ T1217] wireguard6: entered promiscuous mode
[ 1916.476724][ T1220] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5099'.
[ 1916.631683][ T1228] syz.6.5091: attempt to access beyond end of device
[ 1916.631683][ T1228] nbd6: rw=4096, sector=0, nr_sectors = 2 limit=0
[ 1916.734276][ T1228] XFS (nbd6): SB validate failed with error -5.
[ 1916.781139][ T1234] gtp0: entered promiscuous mode
[ 1916.782853][ T1234] gtp0: entered allmulticast mode
[ 1917.503327][ T1226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5092'.
[ 1917.516903][ T1226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5092'.
[ 1917.746521][T26080] libceph: connect (1)[c::]:6789 error -101
[ 1917.748368][T26080] libceph: mon0 (1)[c::]:6789 connect error
[ 1918.212660][ T1252] overlay: Unknown parameter '/'
[ 1918.316694][T26080] libceph: connect (1)[c::]:6789 error -101
[ 1918.318604][T26080] libceph: mon0 (1)[c::]:6789 connect error
[ 1918.361716][ T1226] ceph: No mds server is up or the cluster is laggy
[ 1919.156340][ T1272] befs: (nullb0): No write support. Marking filesystem read-only
[ 1919.159091][ T1272] befs: (nullb0): invalid magic header
[ 1919.165887][ T1272] netlink: 'syz.3.5102': attribute type 1 has an invalid length.
[ 1919.173442][ T1272] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1919.236906][ T1276] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5103'.
[ 1920.175963][ T1288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5107'.
[ 1920.180413][ T1288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5107'.
[ 1920.184451][ T1288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5107'.
[ 1920.187088][ T1288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5107'.
[ 1920.189670][ T1288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5107'.
[ 1920.192447][ T1288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5107'.
[ 1920.195067][ T1288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5107'.
[ 1920.885245][ T1308] program syz.9.5114 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1921.046541][ T1312] netlink: 'syz.8.5112': attribute type 10 has an invalid length.
[ 1921.049719][ T1312] syz_tun: left allmulticast mode
[ 1921.051851][ T1312] bridge0: port 1(syz_tun) entered disabled state
[ 1921.781581][ T1332] wireguard7: entered promiscuous mode
[ 1922.374011][ T1353] netlink: 'syz.6.5129': attribute type 10 has an invalid length.
[ 1922.376492][ T1353] syz_tun: left allmulticast mode
[ 1922.378173][ T1353] bridge0: port 3(syz_tun) entered disabled state
[ 1922.561038][ T1357] __nla_validate_parse: 89 callbacks suppressed
[ 1922.561049][ T1357] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5139'.
[ 1922.898204][ T1374] ip6erspan0: entered promiscuous mode
[ 1923.678304][ T1383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5140'.
[ 1923.698499][ T1383] wireguard7: entered promiscuous mode
[ 1924.005806][ T1399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5142'.
[ 1924.009112][ T1399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5142'.
[ 1924.009721][ T1401] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5146'.
[ 1924.011707][ T1399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5142'.
[ 1924.017611][ T1399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5142'.
[ 1924.020199][ T1399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5142'.
[ 1924.023145][ T1399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5142'.
[ 1924.025828][ T1399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5142'.
[ 1925.472690][ T1422] input: syz1 as /devices/virtual/input/input49
[ 1925.908959][ T1441] wireguard10: entered promiscuous mode
[ 1926.632852][ T1478] syzkaller1: entered promiscuous mode
[ 1926.634537][ T1478] syzkaller1: entered allmulticast mode
[ 1927.123379][ T1499] syzkaller1: entered promiscuous mode
[ 1927.125036][ T1499] syzkaller1: entered allmulticast mode
[ 1927.522927][ T1520] usb usb8: usbfs: process 1520 (syz.8.5190) did not claim interface 0 before use
[ 1927.627925][ T1527] __nla_validate_parse: 50 callbacks suppressed
[ 1927.627938][ T1527] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5193'.
[ 1928.165346][ T1562] nftables ruleset with unbound chain
[ 1928.268771][ T1571] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5202'.
[ 1928.306089][ T1572] VFS: could not find a valid V7 on nullb0.
[ 1928.485003][ T1579] syzkaller1: entered promiscuous mode
[ 1928.486736][ T1579] syzkaller1: entered allmulticast mode
[ 1928.712817][ T1586] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5216'.
[ 1929.083983][ T1606] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5224'.
[ 1929.086782][ T1606] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5224'.
[ 1929.246926][ T1626] syzkaller1: entered promiscuous mode
[ 1929.248615][ T1626] syzkaller1: entered allmulticast mode
[ 1929.407661][ T1629] xt_TCPMSS: Only works on TCP SYN packets
[ 1929.518661][ T1624] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5234'.
[ 1929.752231][ T5988] usb 13-1: new low-speed USB device number 9 using dummy_hcd
[ 1929.800572][ T1668] kernel profiling enabled (shift: 63)
[ 1929.804237][ T1668] profiling shift: 63 too large
[ 1929.948293][ T1672] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5251'.
[ 1930.135355][ T5988] usb 13-1: config 0 has an invalid interface number: 55 but max is 0
[ 1930.137714][ T5988] usb 13-1: config 0 has no interface number 0
[ 1930.139506][ T5988] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1930.142660][ T5988] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[ 1930.146597][ T5988] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1930.150251][ T5988] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1930.153441][ T5988] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[ 1930.156518][ T5988] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1930.160220][ T5988] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1930.162951][ T5988] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1930.166085][ T5988] usb 13-1: config 0 descriptor??
[ 1930.170237][ T1637] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1930.173821][ T1637] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1930.179866][ T5988] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1930.389844][ T5988] usb 13-1: USB disconnect, device number 9
[ 1930.395861][ T5988] ldusb 13-1:0.55: LD USB Device #0 now disconnected
[ 1930.500343][ T1700] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5267'.
[ 1930.927403][ T1705] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5269'.
[ 1930.930995][ T1705] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5269'.
[ 1930.990570][ T1710] syzkaller1: entered promiscuous mode
[ 1930.992756][ T1710] syzkaller1: entered allmulticast mode
[ 1931.256614][ T1724] usb usb8: usbfs: process 1724 (syz.9.5277) did not claim interface 0 before use
[ 1931.332643][ T1719] wireguard8: entered promiscuous mode
[ 1931.497320][ T1739] usb usb8: usbfs: process 1739 (syz.9.5283) did not claim interface 0 before use
[ 1931.897462][ T1761] random: crng reseeded on system resumption
[ 1932.062928][T10600] usb 14-1: new high-speed USB device number 7 using dummy_hcd
[ 1932.666786][ T1754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1932.669410][ T1754] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1932.676608][T10600] usb 14-1: unable to get BOS descriptor or descriptor too short
[ 1932.680178][T10600] usb 14-1: unable to read config index 0 descriptor/start: -71
[ 1932.682615][T10600] usb 14-1: can't read configurations, error -71
[ 1932.692360][ T1769] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[ 1932.695450][ T1769] overlayfs: overlapping lowerdir path
[ 1933.184496][ T1774] syz.8.5296: attempt to access beyond end of device
[ 1933.184496][ T1774] nbd8: rw=4096, sector=0, nr_sectors = 2 limit=0
[ 1933.190876][ T1774] XFS (nbd8): SB validate failed with error -5.
[ 1933.260166][ T1783] gtp1: entered promiscuous mode
[ 1933.261744][ T1783] gtp1: entered allmulticast mode
[ 1933.578554][ T1792] __nla_validate_parse: 1 callbacks suppressed
[ 1933.578632][ T1792] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5299'.
[ 1934.131563][ T1798] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5302'.
[ 1934.429131][ T1803] smc: net device bond0 erased user defined pnetid SYZ2
[ 1934.431640][ T1803] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2
[ 1934.598997][ T1828] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5315'.
[ 1934.932309][ T1848] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5324'.
[ 1935.061181][ T1873] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5325'.
[ 1935.072355][ T1879] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5326'.
[ 1935.475379][ T1893] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5341'.
[ 1936.125235][ T1945] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5361'.
[ 1936.253428][ T1916] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[ 1936.256465][ T1916] overlayfs: overlapping lowerdir path
[ 1936.713463][ T1949] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5364'.
[ 1937.114721][T10600] usb 11-1: new high-speed USB device number 10 using dummy_hcd
[ 1937.272055][T10600] usb 11-1: Using ep0 maxpacket: 32
[ 1937.275180][T10600] usb 11-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1937.278752][T10600] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1937.282942][T10600] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1937.286551][T10600] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1937.293337][T10600] usb 11-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[ 1937.296687][T10600] usb 11-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[ 1937.299816][T10600] usb 11-1: Product: syz
[ 1937.301404][T10600] usb 11-1: Manufacturer: syz
[ 1937.303752][T10600] usb 11-1: SerialNumber: syz
[ 1937.309677][T10600] input: appletouch as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/input/input50
[ 1937.320718][ T1965] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5371'.
[ 1937.511844][T29430] usb 11-1: USB disconnect, device number 10
[ 1937.521990][T29430] appletouch 11-1:1.0: input: appletouch disconnected
[ 1937.662178][ T1971] wireguard14: entered promiscuous mode
[ 1937.747448][ T1983] tipc: Started in network mode
[ 1937.749579][ T1983] tipc: Node identity , cluster identity 4711
[ 1937.753246][ T1983] tipc: Failed to set node id, please configure manually
[ 1937.756250][ T1983] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1938.703406][ T1988] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[ 1938.706342][ T1988] overlayfs: overlapping lowerdir path
[ 1939.027735][ T2024] __nla_validate_parse: 1 callbacks suppressed
[ 1939.027746][ T2024] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5395'.
[ 1939.333825][ T2034] Process accounting resumed
[ 1939.481568][ T2020] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5393'.
[ 1939.481696][ T2019] befs: (nullb0): No write support. Marking filesystem read-only
[ 1939.487328][ T2019] befs: (nullb0): invalid magic header
[ 1939.497704][ T2020] wireguard15: entered promiscuous mode
[ 1939.633490][ T2036] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5400'.
[ 1939.690982][ T2019] netlink: 'syz.6.5390': attribute type 1 has an invalid length.
[ 1939.698767][ T2019] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1939.841552][ T2051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5405'.
[ 1940.016507][ T2074] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5416'.
[ 1940.148759][ T2093] usb usb8: usbfs: process 2093 (syz.9.5424) did not claim interface 0 before use
[ 1940.257826][ T2097] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5426'.
[ 1940.387724][ T2108] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5431'.
[ 1940.390479][ T2108] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5431'.
[ 1940.472876][ T2105] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[ 1940.475920][ T2105] overlayfs: overlapping lowerdir path
[ 1940.787487][ T2131] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[ 1940.843797][ T2136] futex_wake_op: syz.6.5442 tries to shift op by 32; fix this program
[ 1941.053521][ T2139] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5443'.
[ 1941.069527][ T2146] blktrace: Concurrent blktraces are not allowed on sg0
[ 1941.786524][ T2159] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5450'.
[ 1942.010734][ T2179] lo speed is unknown, defaulting to 1000
[ 1942.114123][ T2183] bridge0: port 1(hsr_slave_1) entered blocking state
[ 1942.116239][ T2183] bridge0: port 1(hsr_slave_1) entered disabled state
[ 1942.118634][ T2183] hsr_slave_1: entered allmulticast mode
[ 1942.123361][ T2183] hsr_slave_1: left allmulticast mode
[ 1943.172359][ T2193] wireguard16: entered promiscuous mode
[ 1944.592898][ T2238] __nla_validate_parse: 5 callbacks suppressed
[ 1944.592911][ T2238] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5474'.
[ 1944.963550][ T2233] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5475'.
[ 1945.232835][ T2249] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5476'.
[ 1945.264476][ T2251] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5480'.
[ 1945.533825][ T2249] wireguard11: entered promiscuous mode
[ 1945.555398][ T2251] wireguard17: entered promiscuous mode
[ 1946.248694][ T2275] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5484'.
[ 1946.674252][ T2279] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5488'.
[ 1946.880218][ T5988] usb 11-1: new high-speed USB device number 11 using dummy_hcd
[ 1947.034645][ T5988] usb 11-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1947.037213][ T5988] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1947.040008][ T5988] usb 11-1: Product: syz
[ 1947.041300][ T5988] usb 11-1: Manufacturer: syz
[ 1947.042812][ T5988] usb 11-1: SerialNumber: syz
[ 1947.050078][ T5988] usb 11-1: config 0 descriptor??
[ 1947.154463][ T2283] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5489'.
[ 1947.262994][T29430] usb 11-1: USB disconnect, device number 11
[ 1947.635181][ T2287] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5490'.
[ 1948.376725][ T2304] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5493'.
[ 1948.394916][ T2304] wireguard18: entered promiscuous mode
[ 1948.504162][ T2313] kernel read not supported for file /eth0 (pid: 2313 comm: syz.8.5500)
[ 1948.511495][   T40] audit: type=1800 audit(1740759797.012:6191): pid=2313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5500" name="eth0" dev="mqueue" ino=143532 res=0 errno=0
[ 1948.671223][ T2315] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5498'.
[ 1949.258813][ T2341] input: syz1 as /devices/virtual/input/input51
[ 1949.428310][ T2356] lo speed is unknown, defaulting to 1000
[ 1949.736770][ T2365] set match dimension is over the limit!
[ 1949.878701][ T2375] __nla_validate_parse: 2 callbacks suppressed
[ 1949.878713][ T2375] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5519'.
[ 1949.938868][ T2375] wireguard19: entered promiscuous mode
[ 1949.973898][ T2387] lo speed is unknown, defaulting to 1000
[ 1950.121013][ T2393] Bluetooth: hci0: Opcode 0x0401 failed: -22
[ 1950.381679][ T2402] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5534'.
[ 1950.535086][ T2404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5535'.
[ 1950.558172][ T2404] wireguard9: entered promiscuous mode
[ 1950.584186][ T2407] netlink: 'syz.9.5536': attribute type 1 has an invalid length.
[ 1950.644583][ T2411] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5538'.
[ 1951.233202][ T2431] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5544'.
[ 1951.728991][ T2439] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5545'.
[ 1951.738762][ T2439] wireguard8: entered promiscuous mode
[ 1952.082078][T29656] usb 14-1: new high-speed USB device number 9 using dummy_hcd
[ 1952.142171][T27361] Bluetooth: hci0: command tx timeout
[ 1952.242196][T29656] usb 14-1: Using ep0 maxpacket: 8
[ 1952.248633][T29656] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1952.252638][T29656] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1952.255601][T29656] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1952.258695][T29656] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1952.264161][T29656] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1952.266951][T29656] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1952.394000][ T2455] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5553'.
[ 1952.478477][T29656] usb 14-1: GET_CAPABILITIES returned 0
[ 1952.480243][T29656] usbtmc 14-1:16.0: can't read capabilities
[ 1952.683845][T29430] usb 14-1: USB disconnect, device number 9
[ 1953.226854][ T2463] smc: net device bond0 applied user defined pnetid SYZ0
[ 1953.229861][ T2463] smc: net device bond0 erased user defined pnetid SYZ0
[ 1953.318642][ T2467] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5558'.
[ 1953.659675][ T2473] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5560'.
[ 1953.660170][ T2474] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5559'.
[ 1954.788567][T26080] usb 14-1: new high-speed USB device number 10 using dummy_hcd
[ 1955.032361][ T2509] __nla_validate_parse: 2 callbacks suppressed
[ 1955.032439][ T2509] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5572'.
[ 1955.297537][ T2510] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5573'.
[ 1955.332109][T26080] usb 14-1: Using ep0 maxpacket: 16
[ 1955.343135][T26080] usb 14-1: config 0 has an invalid interface number: 132 but max is 0
[ 1955.353981][T26080] usb 14-1: config 0 has no interface number 0
[ 1955.358434][T26080] usb 14-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[ 1955.362817][T26080] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1955.365856][T26080] usb 14-1: Product: syz
[ 1955.367716][T26080] usb 14-1: Manufacturer: syz
[ 1955.369570][T26080] usb 14-1: SerialNumber: syz
[ 1955.373071][T26080] usb 14-1: config 0 descriptor??
[ 1955.376321][T26080] hub 14-1:0.132: bad descriptor, ignoring hub
[ 1955.378892][T26080] hub 14-1:0.132: probe with driver hub failed with error -5
[ 1955.503089][T26080] input: bcm5974 as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.132/input/input52
[ 1955.713226][T29656] usb 14-1: USB disconnect, device number 10
[ 1956.165745][ T2532] cgroup: fork rejected by pids controller in /syz9
[ 1956.210448][T29672] x86/PAT: syz.9.4308:29672 freeing invalid memtype [mem 0xfed00000-0xfed00fff]
[ 1956.254015][T25314] syz_tun (unregistering): left allmulticast mode
[ 1956.255892][T25314] syz_tun (unregistering): left promiscuous mode
[ 1956.257686][T25314] bridge0: port 4(syz_tun) entered disabled state
[ 1956.368683][ T2542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5579'.
[ 1956.376575][ T2542] wireguard10: entered promiscuous mode
[ 1956.547011][ T2546] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5583'.
[ 1956.745230][T12522] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1956.761468][T12522] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1956.766202][T12522] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1956.770825][T12522] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1956.776526][T12522] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1956.778913][T12522] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1956.794966][T27361] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1956.802427][T27361] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1956.804656][T27361] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1956.807344][T27361] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1956.810033][T27361] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1956.815361][T27361] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1956.856790][ T2550] lo speed is unknown, defaulting to 1000
[ 1956.947934][ T2550] chnl_net:caif_netlink_parms(): no params data found
[ 1956.974612][   T11] netdevsim netdevsim9 netdevsim0 (unregistering): left allmulticast mode
[ 1956.977540][   T11] netdevsim netdevsim9 netdevsim0 (unregistering): left promiscuous mode
[ 1956.982402][   T11] bridge0: port 3(netdevsim0) entered disabled state
[ 1957.042048][ T2550] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1957.044525][ T2550] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1957.048654][ T2550] bridge_slave_0: entered allmulticast mode
[ 1957.050844][ T2550] bridge_slave_0: entered promiscuous mode
[ 1957.058768][ T2550] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1957.060823][ T2550] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1957.063480][ T2550] bridge_slave_1: entered allmulticast mode
[ 1957.065621][ T2550] bridge_slave_1: entered promiscuous mode
[ 1957.096763][ T2550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1957.100597][ T2550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1957.179760][ T2550] team0: Port device team_slave_0 added
[ 1957.181858][   T11] bridge_slave_1: left allmulticast mode
[ 1957.183661][   T11] bridge_slave_1: left promiscuous mode
[ 1957.185356][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1957.188379][   T11] bridge_slave_0: left allmulticast mode
[ 1957.190006][   T11] bridge_slave_0: left promiscuous mode
[ 1957.191699][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1957.359042][   T11] bond3 (unregistering): (slave gretap1): Releasing active interface
[ 1957.387982][ T2568] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5586'.
[ 1957.456610][ T2581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5588'.
[ 1957.459237][ T2581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5588'.
[ 1957.805340][   T11] bond1 (unregistering): Released all slaves
[ 1957.921859][   T11] bond2 (unregistering): Released all slaves
[ 1958.039967][ T1138] smc: removing ib device syz0
[ 1958.040013][   T11] bond0 (unregistering): Released all slaves
[ 1958.168512][   T11] bond3 (unregistering): Released all slaves
[ 1958.173526][ T2550] team0: Port device team_slave_1 added
[ 1958.253199][ T2550] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1958.255284][ T2550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1958.275050][ T2550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1958.294482][ T2550] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1958.296502][ T2550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1958.303754][ T2550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1958.384524][ T2550] hsr_slave_0: entered promiscuous mode
[ 1958.386760][ T2550] hsr_slave_1: entered promiscuous mode
[ 1958.388964][ T2550] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1958.391225][ T2550] Cannot create hsr debugfs directory
[ 1958.607385][   T11] : left promiscuous mode
[ 1958.859554][ T2601] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5595'.
[ 1958.867472][T27361] Bluetooth: hci1: command tx timeout
[ 1958.907200][ T2607] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5596'.
[ 1959.173547][   T11] hsr_slave_0: left promiscuous mode
[ 1959.192072][   T11] hsr_slave_1: left promiscuous mode
[ 1959.613760][ T2643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5597'.
[ 1960.952076][T27361] Bluetooth: hci1: command tx timeout
[ 1961.129353][ T2643] wireguard12: entered promiscuous mode
[ 1961.215184][ T2550] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1961.218670][ T2550] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1961.226536][ T2550] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1961.230436][ T2550] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1961.268295][ T2550] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1961.283710][ T2550] 8021q: adding VLAN 0 to HW filter on device team0
[ 1961.288092][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1961.290206][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1961.296988][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1961.299086][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1961.406207][ T2676] __nla_validate_parse: 1 callbacks suppressed
[ 1961.406220][ T2676] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5607'.
[ 1961.421206][ T2550] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1961.446136][ T5988] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[ 1961.448314][ T5988] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[ 1961.457065][ T5988] hid-generic 0000:0003:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[ 1961.461046][ T2688] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5608'.
[ 1961.468928][ T2679] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5608'.
[ 1961.472504][ T2679] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5608'.
[ 1961.536928][ T2550] veth0_vlan: entered promiscuous mode
[ 1961.543919][ T2550] veth1_vlan: entered promiscuous mode
[ 1961.617408][ T2703] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5606'.
[ 1961.647512][ T2550] veth0_macvtap: entered promiscuous mode
[ 1961.650594][ T2550] veth1_macvtap: entered promiscuous mode
[ 1961.657120][ T2550] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1961.674571][ T2550] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1961.679353][ T2550] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1961.682655][ T2550] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1961.686176][ T2550] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1961.689504][ T2550] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1961.735094][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1961.738122][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1961.752824][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1961.755122][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1961.870904][ T2718] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5613'.
[ 1962.164164][T26080] usb 14-1: new high-speed USB device number 11 using dummy_hcd
[ 1962.362240][T26080] usb 14-1: Using ep0 maxpacket: 8
[ 1962.365083][T26080] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1962.368087][T26080] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1962.370980][T26080] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1962.374480][T26080] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1962.378524][T26080] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1962.382533][T26080] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1962.564279][ T2735] random: crng reseeded on system resumption
[ 1962.678041][T26080] usb 14-1: GET_CAPABILITIES returned 0
[ 1962.680369][T26080] usbtmc 14-1:16.0: can't read capabilities
[ 1962.794945][T29433] usb 14-1: USB disconnect, device number 11
[ 1963.022144][T27361] Bluetooth: hci1: command tx timeout
[ 1963.113550][   T11] IPVS: stop unused estimator thread 0...
[ 1963.541291][ T2767] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5626'.
[ 1963.639929][ T2758] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5627'.
[ 1964.175337][ T2791] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5638'.
[ 1964.473789][ T2785] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5634'.
[ 1965.102049][T27361] Bluetooth: hci1: command tx timeout
[ 1965.114402][ T2832] wireguard9: entered promiscuous mode
[ 1965.176295][ T2835] syzkaller1: entered promiscuous mode
[ 1965.178148][ T2835] syzkaller1: entered allmulticast mode
[ 1966.345936][ T2878] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input53
[ 1966.546917][ T2857] __nla_validate_parse: 4 callbacks suppressed
[ 1966.546928][ T2857] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5654'.
[ 1966.642779][T29433] usb 14-1: new high-speed USB device number 12 using dummy_hcd
[ 1966.792063][T29433] usb 14-1: Using ep0 maxpacket: 8
[ 1966.796321][T29433] usb 14-1: config index 0 descriptor too short (expected 301, got 45)
[ 1966.799135][T29433] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1966.802046][T29433] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1966.804840][T29433] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1966.807854][T29433] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1966.812160][T29433] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1966.815528][T29433] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1966.880672][ T2889] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5663'.
[ 1967.030486][T29433] usb 14-1: GET_CAPABILITIES returned 0
[ 1967.032980][T29433] usbtmc 14-1:16.0: can't read capabilities
[ 1967.234182][T29433] usb 14-1: USB disconnect, device number 12
[ 1968.016767][ T2913] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5670'.
[ 1968.622093][T10600] usb 13-1: new high-speed USB device number 10 using dummy_hcd
[ 1968.783442][T10600] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1968.786954][T10600] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1968.790162][T10600] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1968.793319][T10600] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1968.797184][T10600] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1968.799826][T10600] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1968.803636][T10600] usb 13-1: config 0 descriptor??
[ 1969.004284][ T2922] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5673'.
[ 1969.105108][ T2930] sctp: [Deprecated]: syz.9.5677 (pid 2930) Use of int in maxseg socket option.
[ 1969.105108][ T2930] Use struct sctp_assoc_value instead
[ 1969.218458][T10600] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[ 1969.224101][T10600] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[ 1969.256999][ T2937] @: renamed from vlan0
[ 1969.433118][T25025] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1969.494941][T10600] usb 13-1: USB disconnect, device number 10
[ 1969.543379][ T2969] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[ 1969.546074][ T2969] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1969.550669][ T2969] vhci_hcd vhci_hcd.0: Device attached
[ 1969.559838][ T2970] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4
[ 1969.562640][T10724] vhci_hcd: stop threads
[ 1969.564412][T10724] vhci_hcd: release socket
[ 1969.565806][T10724] vhci_hcd: disconnect device
[ 1969.566405][T25025] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1969.594787][T12522] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1969.602585][T12522] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1969.605483][T12522] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1969.608041][T12522] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1969.611238][T12522] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1969.614926][T12522] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1969.630497][T25025] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1969.648797][ T2972] lo speed is unknown, defaulting to 1000
[ 1969.692334][T25025] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1969.734122][ T2972] chnl_net:caif_netlink_parms(): no params data found
[ 1969.782243][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1969.784501][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1969.786622][ T2972] bridge_slave_0: entered allmulticast mode
[ 1969.788780][ T2972] bridge_slave_0: entered promiscuous mode
[ 1969.791828][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1969.794092][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1969.796212][ T2972] bridge_slave_1: entered allmulticast mode
[ 1969.798480][ T2972] bridge_slave_1: entered promiscuous mode
[ 1969.819719][ T2972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1969.824544][ T2972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1969.825326][ T2987] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5692'.
[ 1969.854238][ T2972] team0: Port device team_slave_0 added
[ 1969.870428][ T2972] team0: Port device team_slave_1 added
[ 1969.903025][ T2972] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1969.905078][ T2972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1969.912847][ T2972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1969.916267][T25025] bridge_slave_1: left allmulticast mode
[ 1969.917919][T25025] bridge_slave_1: left promiscuous mode
[ 1969.919607][T25025] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1969.923332][T25025] bridge_slave_0: left allmulticast mode
[ 1969.924992][T25025] bridge_slave_0: left promiscuous mode
[ 1969.926669][T25025] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1970.040359][ T2991] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5693'.
[ 1970.256691][T25025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1970.260697][T25025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1970.264458][T25025] bond0 (unregistering): Released all slaves
[ 1970.268598][ T2972] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1970.270636][ T2972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1970.278243][ T2972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1970.320931][ T2972] hsr_slave_0: entered promiscuous mode
[ 1970.322453][T29430] usb 11-1: new high-speed USB device number 12 using dummy_hcd
[ 1970.325505][ T2972] hsr_slave_1: entered promiscuous mode
[ 1970.482159][T29430] usb 11-1: Using ep0 maxpacket: 8
[ 1970.486235][T29430] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1970.489138][T29430] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1970.493484][T29430] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1970.496695][T29430] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1970.500425][T29430] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1970.503337][T29430] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1970.540301][ T3017] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5696'.
[ 1970.657664][   T40] audit: type=1326 audit(1740759819.162:6192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3021 comm="syz.3.5698" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x0
[ 1970.710781][T29430] usb 11-1: GET_CAPABILITIES returned 0
[ 1970.712636][T29430] usbtmc 11-1:16.0: can't read capabilities
[ 1970.739652][T25025] hsr_slave_0: left promiscuous mode
[ 1970.741584][T25025] hsr_slave_1: left promiscuous mode
[ 1970.744463][T25025] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1970.746706][T25025] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1970.749181][T25025] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1970.751473][T25025] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1970.786781][T25025] veth1_macvtap: left promiscuous mode
[ 1970.788485][T25025] veth0_macvtap: left promiscuous mode
[ 1970.790125][T25025] veth1_vlan: left promiscuous mode
[ 1970.791726][T25025] veth0_vlan: left promiscuous mode
[ 1970.932400][T26080] usb 11-1: USB disconnect, device number 12
[ 1971.482281][T26080] usb 13-1: new high-speed USB device number 11 using dummy_hcd
[ 1971.643330][T26080] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1971.646203][T26080] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1971.651023][T26080] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1971.656728][T26080] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1971.660373][T26080] usb 13-1: config 0 descriptor??
[ 1971.663912][T26080] usbhid 13-1:0.0: couldn't find an input interrupt endpoint
[ 1971.666333][T27361] Bluetooth: hci1: command tx timeout
[ 1971.845750][T25025] team0 (unregistering): Port device team_slave_1 removed
[ 1971.976917][T25025] team0 (unregistering): Port device team_slave_0 removed
[ 1972.903565][ T3043] bridge_slave_0: default FDB implementation only supports local addresses
[ 1972.926093][ T2972] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1972.929939][ T2972] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1972.934411][ T2972] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1972.938989][ T2972] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1972.992323][ T2972] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1972.999306][ T2972] 8021q: adding VLAN 0 to HW filter on device team0
[ 1973.003659][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1973.005731][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1973.010701][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1973.012923][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1973.076841][ T3060] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5707'.
[ 1973.117703][   T40] audit: type=1800 audit(1740759821.622:6193): pid=3064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5708" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0
[ 1973.140293][ T2972] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1973.244682][ T2972] veth0_vlan: entered promiscuous mode
[ 1973.249168][ T2972] veth1_vlan: entered promiscuous mode
[ 1973.258932][ T2972] veth0_macvtap: entered promiscuous mode
[ 1973.262130][ T2972] veth1_macvtap: entered promiscuous mode
[ 1973.270851][ T2972] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1973.278465][ T2972] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1973.282943][ T2972] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1973.285539][ T2972] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1973.288434][ T2972] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1973.291761][ T2972] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1973.334946][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1973.337837][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1973.347535][T25025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1973.349905][T25025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1974.243468][T29427] usb 13-1: USB disconnect, device number 11
[ 1974.249403][ T3084] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5712'.
[ 1974.252511][ T3084] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5712'.
[ 1974.548416][ T3098] Illegal XDP return value 3043704309 on prog  (id 972) dev syz_tun, expect packet loss!
[ 1974.747353][ T3088] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5714'.
[ 1974.757497][ T3100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5719'.
[ 1974.760211][ T3100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5719'.
[ 1974.781207][T26080] libceph: connect (1)[c::]:6789 error -101
[ 1974.783461][T26080] libceph: mon0 (1)[c::]:6789 connect error
[ 1974.786086][T26080] libceph: connect (1)[c::]:6789 error -101
[ 1974.788199][T26080] libceph: mon0 (1)[c::]:6789 connect error
[ 1974.810988][ T3106] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5717'.
[ 1975.052319][T26080] libceph: connect (1)[c::]:6789 error -101
[ 1975.054206][T26080] libceph: mon0 (1)[c::]:6789 connect error
[ 1975.375097][ T3114] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5720'.
[ 1975.428522][ T3100] ceph: No mds server is up or the cluster is laggy
[ 1975.682915][ T3118] block nbd3: NBD_DISCONNECT
[ 1975.686135][ T3118] 
[ 1975.687046][ T3118] ======================================================
[ 1975.689629][ T3118] WARNING: possible circular locking dependency detected
[ 1975.692391][ T3118] 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 Not tainted
[ 1975.696624][ T3118] ------------------------------------------------------
[ 1975.699536][ T3118] syz.3.5723/3118 is trying to acquire lock:
[ 1975.701191][ T3118] ffff88806967f558 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_sendmsg+0x47/0x520
[ 1975.703624][ T3118] 
[ 1975.703624][ T3118] but task is already holding lock:
[ 1975.705654][ T3118] ffff888023ed7e70 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_disconnect+0x321/0x540
[ 1975.708546][ T3118] 
[ 1975.708546][ T3118] which lock already depends on the new lock.
[ 1975.708546][ T3118] 
[ 1975.711388][ T3118] 
[ 1975.711388][ T3118] the existing dependency chain (in reverse order) is:
[ 1975.713835][ T3118] 
[ 1975.713835][ T3118] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1975.716062][ T3118]        __mutex_lock+0x19b/0xb10
[ 1975.717468][ T3118]        sock_shutdown+0x16f/0x280
[ 1975.718948][ T3118]        nbd_ioctl+0x49b/0xd60
[ 1975.720300][ T3118]        compat_blkdev_ioctl+0x2f4/0x7b0
[ 1975.721917][ T3118]        __do_compat_sys_ioctl+0x1cb/0x2c0
[ 1975.723607][ T3118]        __do_fast_syscall_32+0x73/0x120
[ 1975.725222][ T3118]        do_fast_syscall_32+0x32/0x80
[ 1975.727130][ T3118]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1975.729733][ T3118] 
[ 1975.729733][ T3118] -> #5 (&nbd->config_lock){+.+.}-{4:4}:
[ 1975.732679][ T3118]        __mutex_lock+0x19b/0xb10
[ 1975.734712][ T3118]        refcount_dec_and_mutex_lock+0x51/0xc0
[ 1975.737176][ T3118]        nbd_config_put+0x31/0x750
[ 1975.739175][ T3118]        nbd_release+0xb7/0x190
[ 1975.741141][ T3118]        blkdev_put_whole+0xad/0xf0
[ 1975.743214][ T3118]        bdev_release+0x47e/0x6d0
[ 1975.745252][ T3118]        blkdev_release+0x15/0x20
[ 1975.747300][ T3118]        __fput+0x3ff/0xb70
[ 1975.749089][ T3118]        __fput_sync+0xa1/0xc0
[ 1975.751003][ T3118]        __x64_sys_close+0x86/0x100
[ 1975.753075][ T3118]        do_syscall_64+0xcd/0x250
[ 1975.755070][ T3118]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1975.757607][ T3118] 
[ 1975.757607][ T3118] -> #4 (&disk->open_mutex){+.+.}-{4:4}:
[ 1975.760677][ T3118]        __mutex_lock+0x19b/0xb10
[ 1975.762719][ T3118]        bdev_open+0x41a/0xe20
[ 1975.764651][ T3118]        bdev_file_open_by_dev+0x17d/0x210
[ 1975.766808][ T3118]        disk_scan_partitions+0x1ed/0x320
[ 1975.768956][ T3118]        add_disk_fwnode+0x1006/0x1320
[ 1975.770995][ T3118]        pmem_attach_disk+0x9a1/0x13e0
[ 1975.772984][ T3118]        nd_pmem_probe+0x1a9/0x1f0
[ 1975.774922][ T3118]        nvdimm_bus_probe+0x169/0x5d0
[ 1975.776940][ T3118]        really_probe+0x23e/0xa90
[ 1975.778862][ T3118]        __driver_probe_device+0x1de/0x440
[ 1975.780987][ T3118]        driver_probe_device+0x4c/0x1b0
[ 1975.783168][ T3118]        __driver_attach+0x283/0x580
[ 1975.785214][ T3118]        bus_for_each_dev+0x13c/0x1d0
[ 1975.787315][ T3118]        bus_add_driver+0x2e9/0x690
[ 1975.789277][ T3118]        driver_register+0x15c/0x4b0
[ 1975.791338][ T3118]        __nd_driver_register+0x103/0x1a0
[ 1975.793517][ T3118]        do_one_initcall+0x128/0x700
[ 1975.795042][ T3118]        kernel_init_freeable+0x5c7/0x900
[ 1975.796644][ T3118]        kernel_init+0x1c/0x2b0
[ 1975.798022][ T3118]        ret_from_fork+0x45/0x80
[ 1975.799373][ T3118]        ret_from_fork_asm+0x1a/0x30
[ 1975.800793][ T3118] 
[ 1975.800793][ T3118] -> #3 (&nvdimm_namespace_key){+.+.}-{4:4}:
[ 1975.803022][ T3118]        __mutex_lock+0x19b/0xb10
[ 1975.804400][ T3118]        uevent_show+0x188/0x3b0
[ 1975.805773][ T3118]        dev_attr_show+0x53/0xe0
[ 1975.807134][ T3118]        sysfs_kf_seq_show+0x23e/0x410
[ 1975.808647][ T3118]        seq_read_iter+0x4f4/0x12b0
[ 1975.810108][ T3118]        kernfs_fop_read_iter+0x414/0x580
[ 1975.811706][ T3118]        vfs_read+0x886/0xbf0
[ 1975.813037][ T3118]        ksys_read+0x12b/0x250
[ 1975.814351][ T3118]        do_syscall_64+0xcd/0x250
[ 1975.815759][ T3118]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1975.817493][ T3118] 
[ 1975.817493][ T3118] -> #2 (kn->active#5){++++}-{0:0}:
[ 1975.819501][ T3118]        kernfs_drain+0x48f/0x590
[ 1975.820918][ T3118]        __kernfs_remove+0x281/0x670
[ 1975.822374][ T3118]        kernfs_remove_by_name_ns+0xb2/0x130
[ 1975.824004][ T3118]        device_del+0x381/0x9f0
[ 1975.825373][ T3118]        unregister_netdevice_many_notify+0x13aa/0x1f30
[ 1975.827385][ T3118]        unregister_netdevice_queue+0x307/0x3f0
[ 1975.829166][ T3118]        ser_release+0x195/0x280
[ 1975.830596][ T3118]        process_one_work+0x9c5/0x1ba0
[ 1975.832150][ T3118]        worker_thread+0x6c8/0xf00
[ 1975.833758][ T3118]        kthread+0x3af/0x750
[ 1975.835172][ T3118]        ret_from_fork+0x45/0x80
[ 1975.836647][ T3118]        ret_from_fork_asm+0x1a/0x30
[ 1975.838140][ T3118] 
[ 1975.838140][ T3118] -> #1 (rtnl_mutex){+.+.}-{4:4}:
[ 1975.840161][ T3118]        __mutex_lock+0x19b/0xb10
[ 1975.841605][ T3118]        smc_vlan_by_tcpsk+0x251/0x620
[ 1975.843121][ T3118]        __smc_connect+0x44d/0x4890
[ 1975.844608][ T3118]        smc_connect+0x2fc/0x760
[ 1975.846027][ T3118]        __sys_connect_file+0x13e/0x1a0
[ 1975.847612][ T3118]        __sys_connect+0x14f/0x170
[ 1975.849046][ T3118]        __ia32_sys_connect+0x71/0xb0
[ 1975.850586][ T3118]        __do_fast_syscall_32+0x73/0x120
[ 1975.852177][ T3118]        do_fast_syscall_32+0x32/0x80
[ 1975.853750][ T3118]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1975.855677][ T3118] 
[ 1975.855677][ T3118] -> #0 (sk_lock-AF_SMC){+.+.}-{0:0}:
[ 1975.857802][ T3118]        __lock_acquire+0x249e/0x3c40
[ 1975.859328][ T3118]        lock_acquire.part.0+0x11b/0x380
[ 1975.861091][ T3118]        lock_sock_nested+0x3a/0xf0
[ 1975.862619][ T3118]        smc_sendmsg+0x47/0x520
[ 1975.864018][ T3118]        sock_sendmsg+0x3d3/0x490
[ 1975.865425][ T3118]        __sock_xmit+0x1e8/0x4f0
[ 1975.866854][ T3118]        nbd_disconnect+0x390/0x540
[ 1975.868314][ T3118]        nbd_ioctl+0x8d1/0xd60
[ 1975.869691][ T3118]        compat_blkdev_ioctl+0x2f4/0x7b0
[ 1975.871292][ T3118]        __do_compat_sys_ioctl+0x1cb/0x2c0
[ 1975.872908][ T3118]        __do_fast_syscall_32+0x73/0x120
[ 1975.874503][ T3118]        do_fast_syscall_32+0x32/0x80
[ 1975.876044][ T3118]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1975.877966][ T3118] 
[ 1975.877966][ T3118] other info that might help us debug this:
[ 1975.877966][ T3118] 
[ 1975.880717][ T3118] Chain exists of:
[ 1975.880717][ T3118]   sk_lock-AF_SMC --> &nbd->config_lock --> &nsock->tx_lock
[ 1975.880717][ T3118] 
[ 1975.884374][ T3118]  Possible unsafe locking scenario:
[ 1975.884374][ T3118] 
[ 1975.886425][ T3118]        CPU0                    CPU1
[ 1975.887953][ T3118]        ----                    ----
[ 1975.889448][ T3118]   lock(&nsock->tx_lock);
[ 1975.890737][ T3118]                                lock(&nbd->config_lock);
[ 1975.892725][ T3118]                                lock(&nsock->tx_lock);
[ 1975.894682][ T3118]   lock(sk_lock-AF_SMC);
[ 1975.895918][ T3118] 
[ 1975.895918][ T3118]  *** DEADLOCK ***
[ 1975.895918][ T3118] 
[ 1975.898136][ T3118] 2 locks held by syz.3.5723/3118:
[ 1975.899528][ T3118]  #0: ffff8880243b4198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xd60
[ 1975.902062][ T3118]  #1: ffff888023ed7e70 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_disconnect+0x321/0x540
[ 1975.904636][ T3118] 
[ 1975.904636][ T3118] stack backtrace:
[ 1975.906315][ T3118] CPU: 2 UID: 0 PID: 3118 Comm: syz.3.5723 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0
[ 1975.906329][ T3118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 1975.906336][ T3118] Call Trace:
[ 1975.906341][ T3118]  <TASK>
[ 1975.906346][ T3118]  dump_stack_lvl+0x116/0x1f0
[ 1975.906363][ T3118]  print_circular_bug+0x490/0x760
[ 1975.906378][ T3118]  check_noncircular+0x31a/0x400
[ 1975.906393][ T3118]  ? __pfx_check_noncircular+0x10/0x10
[ 1975.906408][ T3118]  ? finish_task_switch.isra.0+0x217/0xcc0
[ 1975.906424][ T3118]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1975.906438][ T3118]  ? lockdep_lock+0xc6/0x200
[ 1975.906449][ T3118]  ? __pfx_lockdep_lock+0x10/0x10
[ 1975.906460][ T3118]  ? __lock_acquire+0xcc5/0x3c40
[ 1975.906477][ T3118]  __lock_acquire+0x249e/0x3c40
[ 1975.906495][ T3118]  ? __pfx___lock_acquire+0x10/0x10
[ 1975.906510][ T3118]  lock_acquire.part.0+0x11b/0x380
[ 1975.906525][ T3118]  ? smc_sendmsg+0x47/0x520
[ 1975.906540][ T3118]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1975.906554][ T3118]  ? rcu_is_watching+0x12/0xc0
[ 1975.906565][ T3118]  ? trace_lock_acquire+0x14e/0x1f0
[ 1975.906577][ T3118]  ? smc_sendmsg+0x47/0x520
[ 1975.906590][ T3118]  ? lock_acquire+0x2f/0xb0
[ 1975.906604][ T3118]  ? smc_sendmsg+0x47/0x520
[ 1975.906618][ T3118]  lock_sock_nested+0x3a/0xf0
[ 1975.906633][ T3118]  ? smc_sendmsg+0x47/0x520
[ 1975.906647][ T3118]  smc_sendmsg+0x47/0x520
[ 1975.906661][ T3118]  sock_sendmsg+0x3d3/0x490
[ 1975.906673][ T3118]  ? __pfx_sock_sendmsg+0x10/0x10
[ 1975.906686][ T3118]  ? rcu_is_watching+0x12/0xc0
[ 1975.906698][ T3118]  ? trace_contention_end+0xee/0x140
[ 1975.906715][ T3118]  __sock_xmit+0x1e8/0x4f0
[ 1975.906732][ T3118]  ? __pfx___sock_xmit+0x10/0x10
[ 1975.906748][ T3118]  ? __pfx___mutex_lock+0x10/0x10
[ 1975.906765][ T3118]  nbd_disconnect+0x390/0x540
[ 1975.906777][ T3118]  ? __pfx_nbd_disconnect+0x10/0x10
[ 1975.906789][ T3118]  ? __pfx___mutex_lock+0x10/0x10
[ 1975.906804][ T3118]  ? bpf_lsm_capable+0x9/0x10
[ 1975.906817][ T3118]  nbd_ioctl+0x8d1/0xd60
[ 1975.906829][ T3118]  ? __pfx_nbd_ioctl+0x10/0x10
[ 1975.906841][ T3118]  ? __pfx_lock_release+0x10/0x10
[ 1975.906855][ T3118]  ? trace_lock_acquire+0x14e/0x1f0
[ 1975.906868][ T3118]  ? __pfx_nbd_ioctl+0x10/0x10
[ 1975.906879][ T3118]  compat_blkdev_ioctl+0x2f4/0x7b0
[ 1975.906891][ T3118]  ? __pfx_compat_blkdev_ioctl+0x10/0x10
[ 1975.906902][ T3118]  ? __fget_files+0x206/0x3a0
[ 1975.906918][ T3118]  ? __pfx_compat_blkdev_ioctl+0x10/0x10
[ 1975.906929][ T3118]  __do_compat_sys_ioctl+0x1cb/0x2c0
[ 1975.906942][ T3118]  __do_fast_syscall_32+0x73/0x120
[ 1975.906957][ T3118]  do_fast_syscall_32+0x32/0x80
[ 1975.906971][ T3118]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1975.906989][ T3118] RIP: 0023:0xf7f37579
[ 1975.906997][ T3118] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 1975.907008][ T3118] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[ 1975.907018][ T3118] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ab08
[ 1975.907025][ T3118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1975.907031][ T3118] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1975.907037][ T3118] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[ 1975.907043][ T3118] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1975.907052][ T3118]  </TASK>
[ 1976.003604][ T3118] block nbd3: Send disconnect failed -107
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1976.231210][ T3118] syz_tun (unregistering): left allmulticast mode
[ 1976.312693][ T3118] block nbd3: Disconnected due to user request.
[ 1976.314510][ T3118] block nbd3: shutting down sockets
[ 1976.530601][   T11] bridge_slave_1: left allmulticast mode
[ 1976.532102][   T11] bridge_slave_1: left promiscuous mode
[ 1976.533575][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1976.535751][   T11] bridge_slave_0: left allmulticast mode
[ 1976.537227][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1976.886320][   T11] bond0 (unregistering): Released all slaves
[ 1976.945128][   T11] : left promiscuous mode
[ 1977.003247][   T11] tipc: Disabling bearer <eth:vlan0>
[ 1977.013959][   T11] tipc: Left network mode
[ 1977.424116][   T11] hsr_slave_0: left promiscuous mode
[ 1977.425873][   T11] hsr_slave_1: left promiscuous mode
[ 1978.221363][   T11] team0 (unregistering): Port device team_slave_1 removed
[ 1978.323161][   T11] team0 (unregistering): Port device team_slave_0 removed
[ 1980.170599][   T11] IPVS: stop unused estimator thread 0...
[ 1980.345427][   T11] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1980.435396][   T11] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1980.524464][   T11] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1980.564951][   T11] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1981.138409][   T11] bridge_slave_1: left allmulticast mode
[ 1981.140188][   T11] bridge_slave_1: left promiscuous mode
[ 1981.141900][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1981.145389][   T11] bridge_slave_0: left allmulticast mode
[ 1981.147061][   T11] bridge_slave_0: left promiscuous mode
[ 1981.148701][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1981.151881][   T11] bridge_slave_1: left allmulticast mode
[ 1981.153671][   T11] bridge_slave_1: left promiscuous mode
[ 1981.155415][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1981.158051][   T11] bridge_slave_0: left allmulticast mode
[ 1981.159730][   T11] bridge_slave_0: left promiscuous mode
[ 1981.161378][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1981.335567][   T11] batman_adv: batadv0: Removing interface: gretap1
[ 1981.347377][   T11] bond1 (unregistering): (slave gretap1): Releasing active interface
[ 1981.350760][   T11] batman_adv: batadv0: Removing interface: gretap2
[ 1981.995229][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1981.998683][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1982.001766][   T11] bond0 (unregistering): Released all slaves
[ 1982.005340][   T11] bond1 (unregistering): (slave batadv0): Releasing backup interface
[ 1982.008140][   T11] bond1 (unregistering): Released all slaves
[ 1982.115761][   T11] bond0 (unregistering): Released all slaves
[ 1982.221630][   T11] bond0 (unregistering): Released all slaves
[ 1982.225026][   T11] bond1 (unregistering): Released all slaves
[ 1982.306822][   T11] tipc: Left network mode
[ 1982.334007][   T11] IPVS: stopping backup sync thread 22935 ...
[ 1982.737323][   T11] hsr_slave_0: left promiscuous mode
[ 1982.739198][   T11] hsr_slave_1: left promiscuous mode
[ 1982.740949][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1982.743858][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1982.746178][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1982.748274][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1982.752304][   T11] hsr_slave_0: left promiscuous mode
[ 1982.754238][   T11] hsr_slave_1: left promiscuous mode
[ 1982.757034][   T11] hsr_slave_0: left promiscuous mode
[ 1982.758826][   T11] hsr_slave_1: left promiscuous mode
[ 1982.761802][   T11] veth1_macvtap: left promiscuous mode
[ 1982.763653][   T11] veth0_macvtap: left promiscuous mode
[ 1982.765275][   T11] veth1_vlan: left promiscuous mode
[ 1982.766839][   T11] veth0_vlan: left promiscuous mode
[ 1983.011600][   T11] team0 (unregistering): Port device team_slave_1 removed
[ 1983.073838][   T11] team0 (unregistering): Port device team_slave_0 removed
[ 1984.969864][   T11] pim6reg (unregistering): left allmulticast mode
[ 1985.102008][   T11] macvlan0 (unregistering): left allmulticast mode

VM DIAGNOSIS:
14:06:28  Registers:
info registers vcpu 0

CPU#0
RAX=0000000004475914 RBX=0000000000000000 RCX=ffffffff8b552469 RDX=ffffed1005686f86
RSI=ffffffff8bd34780 RDI=ffffffff81907409 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20
R8 =0000000000000000 R9 =ffffed1005686f85 R10=ffff88802b437c2b R11=0000000000000001
R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff90627710 R15=0000000000000000
RIP=ffffffff8b55384f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b400000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000003181bffc CR3=000000006c1c2000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000003e4a884 RBX=0000000000000001 RCX=ffffffff8b552469 RDX=ffffed10056a6f86
RSI=ffffffff8bd34780 RDI=ffffffff81907409 RBP=ffffed1003ad2910 RSP=ffffc9000047fe08
R8 =0000000000000000 R9 =ffffed10056a6f85 R10=ffff88802b537c2b R11=0000000000000001
R12=0000000000000001 R13=ffff88801d694880 R14=ffffffff90627710 R15=0000000000000000
RIP=ffffffff8b55384f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b500000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f6c60000 CR3=000000004e554000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff853e6235 RDI=ffffffff9ab6ee60 RBP=ffffffff9ab6ee20 RSP=ffffc90002dc7058
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e34312e36
R12=0000000000000000 R13=0000000000000069 R14=ffffffff9ab6ee20 R15=0000000000000000
RIP=ffffffff853e625f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000056e674c0 CR3=0000000025236000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865
ZMM17=cf3b10ea5e6896a4 dd7c659156932f8f cf3b10ea5e6896a4 dd7c659156932f8f cf3b10ea5e6896a4 dd7c659156932f8f cf3b10ea5e6896a4 dd7c659156932f8f
ZMM18=978131e261f27862 dc26827097e9f38a 978131e261f27862 dc26827097e9f38a 978131e261f27862 dc26827097e9f38a 978131e261f27862 dc26827097e9f38a
ZMM19=8835000000000000 00000000000000ca 8835000000000000 00000000000000c9 8835000000000000 00000000000000c8 8835000000000000 00000000000000c7
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=dd7c6591dd7c6591 dd7c6591dd7c6591 dd7c6591dd7c6591 dd7c6591dd7c6591 dd7c6591dd7c6591 dd7c6591dd7c6591 dd7c6591dd7c6591 dd7c6591dd7c6591
ZMM22=5e6896a45e6896a4 5e6896a45e6896a4 5e6896a45e6896a4 5e6896a45e6896a4 5e6896a45e6896a4 5e6896a45e6896a4 5e6896a45e6896a4 5e6896a45e6896a4
ZMM23=cf3b10eacf3b10ea cf3b10eacf3b10ea cf3b10eacf3b10ea cf3b10eacf3b10ea cf3b10eacf3b10ea cf3b10eacf3b10ea cf3b10eacf3b10ea cf3b10eacf3b10ea
ZMM24=97e9f38a97e9f38a 97e9f38a97e9f38a 97e9f38a97e9f38a 97e9f38a97e9f38a 97e9f38a97e9f38a 97e9f38a97e9f38a 97e9f38a97e9f38a 97e9f38a97e9f38a
ZMM25=dc268270dc268270 dc268270dc268270 dc268270dc268270 dc268270dc268270 dc268270dc268270 dc268270dc268270 dc268270dc268270 dc268270dc268270
ZMM26=61f2786261f27862 61f2786261f27862 61f2786261f27862 61f2786261f27862 61f2786261f27862 61f2786261f27862 61f2786261f27862 61f2786261f27862
ZMM27=978131e2978131e2 978131e2978131e2 978131e2978131e2 978131e2978131e2 978131e2978131e2 978131e2978131e2 978131e2978131e2 978131e2978131e2
ZMM28=000000d0000000cf 000000ce000000cd 000000cc000000cb 000000ca000000c9 000000c8000000c7 000000c6000000c5 000000c4000000c3 000000c2000000c1
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=8835000088350000 8835000088350000 8835000088350000 8835000088350000 8835000088350000 8835000088350000 8835000088350000 8835000088350000
info registers vcpu 3

CPU#3
RAX=000000000112e85c RBX=0000000000000003 RCX=ffffffff8b552469 RDX=ffffed10056e6f86
RSI=ffffffff8bd34780 RDI=ffffffff81907409 RBP=ffffed1003ad5488 RSP=ffffc9000049fe08
R8 =0000000000000000 R9 =ffffed10056e6f85 R10=ffff88802b737c2b R11=0000000000000001
R12=0000000000000003 R13=ffff88801d6aa440 R14=ffffffff90627710 R15=0000000000000000
RIP=ffffffff8b55384f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f73d3cd8 CR3=00000000542a6000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000