last executing test programs:

5.989279021s ago: executing program 2 (id=27):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e9001, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async)
ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000800)={'vlan1\x00'})
sendfile(r1, r1, 0x0, 0x4) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
sendfile(r4, r4, 0x0, 0x1) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000c40), 0x12)

5.860994821s ago: executing program 2 (id=32):
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={<r0=>0x0, @local, @broadcast}, &(0x7f0000000680)=0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f80100002000000227bd700080000000ff00000000000000000000000000ffff7f000001ff0100000000000000000000000000016e2000014e2100020a0080806c000000", @ANYRES32=r0, @ANYRES32=0xee01, @ANYBLOB="14000e00fe88000000000000000000000000010114000e00ac1414bb0000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="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"], 0x1f8}, 0x1, 0x0, 0x0, 0x4004}, 0x80) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) (async)
r3 = socket(0x10, 0x3, 0x6)
r4 = socket(0x10, 0x3, 0x0) (async)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xff, [0x1, 0x0, 0x0, 0x4, 0x7, 0x4, 0x3, 0xfe, 0x7, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, 0x2], 0xfd, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4000, 0xa18, 0x0, 0x3dc], [0x0, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x80, 0x80]}}}}]}, 0x88}}, 0x8014) (async)
r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0xd755, 0x80c00)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x7fff, 0x1, 0x3, 0xd59f80, 0xb488ab32, 0x7, 0x19ef, 0x3, 0x6, 0x8027ff, 0x2800, 0x101, 0xbb6, 0x9, 0x0, {0x8, 0xfffffffb}, 0xd0, 0xc}})
getsockname$packet(r4, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a00)=0x14) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="85200000030000001800000ee96909f3afdd919300faffff1bb99243b7086061ff000000000600000044440200feffffff8520d8a695a1752dd987b83b39129d"], &(0x7f0000000040)='GPL\x00', 0xd, 0x29, &(0x7f0000000080)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xf, 0x80, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r1, 0x1, 0x1], 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) (async)
r10 = socket$packet(0x11, 0x3, 0x300)
ioctl$I2C_SLAVE(r3, 0x703, 0x3b3) (async)
setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) (async)
syz_emit_ethernet(0xd2, &(0x7f0000000140)=ANY=[@ANYBLOB="03aaaaaaaaaa00000000000086dd602a1c99009c110000000000000000000000000000000000ff02000000000000000000000000000100000000009c90780100000000000000b0575c7b4df2bddabab59df4a56afe54ba6a5d5c0d173509e48143bed8b2860829accf2af44c0e1aaaaf532417a91cadd9e65f82310f80cf64f46c761191fde1bbdc02982c900a03debf0a03000003dc3d73abde0da6c68c8d2dab5346224f905b3b904310b3bd00975f0a9f6cde9c5018586db672628c1415233979ba3df3d8a8490bce9cafc2ab6acde477"], 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r9, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x72, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
r11 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000980)={'geneve1\x00', &(0x7f0000000940)=@ethtool_rxfh_indir={0x38, 0x4, [0x1, 0x0, 0x7, 0xe]}})
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in, 0x0, 0x32}, @in6=@loopback, {0xfffffffffffffffe}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xffffffff}}]}, 0x154}}, 0x0)
ioctl$FS_IOC_GETFSLABEL(r12, 0x800452d3, &(0x7f0000000100))

5.858791613s ago: executing program 2 (id=33):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="140000000000000001000000010000006e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000000000)='logfs\x00', 0x1040, &(0x7f0000590ffe)='v4')

5.808055935s ago: executing program 2 (id=34):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="05116c5afc3a7800aa4e339b02c0c67fcb36e21451f281f2430990feb5397e428582883a2cf84943659b17f1f9caef11fa9e102521c3e33efbcb629a155903e1f8a40c", @ANYRES64=0x0], 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r4, 0x2, 0x0, 0xbb, &(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0xffffffff, 0x12, 0x2, {0x5, @pix_mp={0x5, 0x8, 0x55595659, 0x5, 0x6, [{0x2, 0x131c}, {0x1}, {0xff, 0x9}, {0x3, 0xffff0001}, {0xd1c, 0xd936}, {0x3, 0x9}, {0x7f60, 0xa7}, {0x9, 0x2}], 0x5, 0x3, 0x1, 0x1, 0x5}}})
ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000400000002000000cefd0f0100000000fd20e3e3813a1573f0bfc1ec5dffffff00005f00"], 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'veth0_to_batadv\x00', &(0x7f00000000c0)=@ethtool_stats})

5.680080555s ago: executing program 2 (id=36):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
modify_ldt$write2(0x11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) (async)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
io_setup(0x7, &(0x7f0000000280)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r4=>0x0})
r5 = socket(0x15, 0x5, 0x0)
getsockopt(r5, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) (async)
accept$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) (async)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x204a00, 0x0) (async)
r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
r8 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r7)
keyctl$assume_authority(0x10, r8) (async)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x1) (async)
ioctl$TCSETS(r6, 0x89f1, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="04200000000000000c001a800800058004100180"], 0x2c}}, 0x0)

4.22557724s ago: executing program 2 (id=51):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x8c01, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x40000)

601.526356ms ago: executing program 3 (id=83):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

600.875219ms ago: executing program 3 (id=84):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x0, 0x10}, {0x7, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newaddr={0x17, 0x14, 0x9535393fea6295b5, 0x70bd2c, 0x25dfdbff, {0xa, 0x18}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x595}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) (async)
write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e0f30fa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008840)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x8)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000c00)={r3, 0x0, {0x0, 0x0, 0x0, 0x7, 0x10001, 0x0, 0x4, 0x19, 0x1b, "0d855458783c7f336a36b40dc59ffb6f9d7f642f65ea64821c71813fa9b419ae410399da885b9a7438d1ef825413dfcfc23385fc32d3f9c5ff42c22bc7b56998", "2601e8fc0110d0cacb7ad8f1777d0937bcde7e8c20e98558982979cf982e79eae784d64914693b315bfe16fa1e456e9802345471630f36aa7c63c545267070bf", "1e466e69b372ed9237ce695886a957bdfc96d13b94d1634442c06add7aa6e30d", [0x9, 0x20000000000000]}}) (async)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000c00)={r3, 0x0, {0x0, 0x0, 0x0, 0x7, 0x10001, 0x0, 0x4, 0x19, 0x1b, "0d855458783c7f336a36b40dc59ffb6f9d7f642f65ea64821c71813fa9b419ae410399da885b9a7438d1ef825413dfcfc23385fc32d3f9c5ff42c22bc7b56998", "2601e8fc0110d0cacb7ad8f1777d0937bcde7e8c20e98558982979cf982e79eae784d64914693b315bfe16fa1e456e9802345471630f36aa7c63c545267070bf", "1e466e69b372ed9237ce695886a957bdfc96d13b94d1634442c06add7aa6e30d", [0x9, 0x20000000000000]}})
mremap(&(0x7f00001f4000/0x4000)=nil, 0x4000, 0x2000, 0x4, &(0x7f00003b5000/0x2000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

473.425146ms ago: executing program 1 (id=85):
r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)
syz_emit_ethernet(0x28, &(0x7f00000023c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x40, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "dd9dec79219e"}}}}, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @empty, @empty, 0x0, 0x10}}) (async)
restart_syscall() (async)
tee(r1, r1, 0x6, 0x1) (async)
mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xb7AJ\n\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8\x1cXVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x62, 0x0, 0x0)

472.521111ms ago: executing program 1 (id=86):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0xb, 0xfffffffd, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETSGCNT_IN6(r7, 0x89e1, &(0x7f0000000080)={@local, @private0={0xfc, 0x0, '\x00', 0x1}})
sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000801}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x13, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0x14, r5, 0x1, 0x70b925, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004050)
mlockall(0x5)

366.651094ms ago: executing program 1 (id=87):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)=@newtaction={0x6c, 0x30, 0x83d79f1e8021ba05, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000000}, @rand_addr=0xffffffff, @rand_addr=0x64010100, 0xff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000500)="7de580695e5ee895c7eea6aa35dba88506c210cb", 0x14, 0x0, &(0x7f0000000540)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', <r6=>0x0})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000580)={'erspan0\x00', 0x8000})
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r6, 0x0, 0x42}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', <r7=>0x0, 0x1, 0x7, 0x525, 0x7ff, {{0x16, 0x4, 0x2, 0x35, 0x58, 0x65, 0x0, 0x0, 0x6, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x2b, 0xea, [@remote, @broadcast, @rand_addr=0x64010101, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @empty, @rand_addr=0x64010102, @empty, @multicast1]}, @ssrr={0x89, 0x17, 0x68, [@empty, @empty, @broadcast, @rand_addr=0x64010102, @multicast2]}]}}}}})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00082abd7000fddbdf251200000008000700090000003800018008000100", @ANYRES32=r6, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="1400020076657f60d56f0000000000000000000000080008000500000008000800350000"], 0x64}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x4000)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000001800128008000100767469000c000280080004000108000d00190800007cc9c5fa0e29e3c4e7c7045799abc36edc2dc1eaab69d7496fc1a1a2f4dfea3d422d90640d442ab03a96e8f5738eb6459a2d24b3ec64450da0ccd99251a3e6aabb7d998d019bd1181fc916a10e66320a8943815ea45cb72b8f66af339bc0bb6418835e2a8ce8b3"], 0x40}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

365.030669ms ago: executing program 3 (id=88):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], [0x5]}}) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 64)
syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) (rerun: 64)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1502000044af0da14eb5cfe2ca59794d9a90bafb2a814d56cae3643b5c348bcb40b5b94dd766d5f35ae4b66fea6d347151ae6d29b03d42974541f415026e56160adfa060d89f1d08072ab5b0939e3b586dfbe9a0dbeb2fa86c3d74c1da7c49", @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000000000000000080005000a0f000005000200fc000000", @ANYRESDEC=r1, @ANYRES8=r0, @ANYRES64=r1, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES16=r1], 0x3c}}, 0x0) (async)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080))

364.741349ms ago: executing program 0 (id=89):
utime(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)={{0x10b, 0x6, 0x56, 0x72, 0x275, 0xffffffff, 0x1a4, 0x1394}, "520cebbd8822f7aaffdf50dae0b7c7334c83e44d94c4d1b872efeb8746c3c961f6fc1a5591a536ad7ede74daf66a58fb234bf9fcda2ca73eba6d60814e62e8d0deec6d807a4e3789372f049ec7860f7eac770dc83a10c4d87a89f5d5579c8099e200e620cc5001aa4a2731eab5f5c230f5fc8907344aa0b67d7b23c4626bba827b325d2d26a873bc86c40ea41902fb4318f41136f29005c7af881430811a60e205392cb7d8", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7c5)

302.672032ms ago: executing program 1 (id=90):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCFLSH(r0, 0x4b63, 0x3) (async)
lseek(0xffffffffffffffff, 0xa, 0x1) (async, rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0)
ioctl$TIOCGSID(r2, 0x5429, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}}, 0x44)
r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
ppoll(&(0x7f0000000300)=[{r3, 0x9209}], 0x1, &(0x7f0000000380)={0x0, 0x989680}, 0x0, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007911b0000000000004000000000000001500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (rerun: 32)
r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x6)
write$tun(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="9a"], 0x8) (async)
read$FUSE(r3, &(0x7f00000003c0)={0x2020, 0x0, 0x0, <r5=>0x0}, 0x2020) (async, rerun: 64)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async, rerun: 64)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x3, 0x3, {}, {<r9=>0xee00}, 0xf7}) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff}) (async, rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000002700)={'gre0\x00', &(0x7f0000002680)={'syztnl2\x00', <r11=>r7, 0x40, 0x80, 0x2, 0x80000000, {{0x10, 0x4, 0x1, 0x4, 0x40, 0x64, 0x0, 0x96, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2}, {[@lsrr={0x83, 0x2b, 0xf9, [@multicast1, @broadcast, @rand_addr=0x64010100, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) (rerun: 64)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000002600)=@base={0x12, 0xc, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x8000, '\x00', r11, r6, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r12}, &(0x7f0000000180), &(0x7f0000000100)=r10}, 0x20) (async, rerun: 64)
sendmsg$nl_generic(r4, &(0x7f00000025c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000002400)={0x188, 0x25, 0x8, 0x70bd26, 0x25dfdbfe, {0x1d}, [@typed={0x8, 0xd1, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x14, 0x72, 0x0, 0x1, [@nested={0x4, 0x2e}, @nested={0x4, 0x36}, @typed={0x8, 0xff, 0x0, 0x0, @uid=r5}]}, @nested={0x26, 0x77, 0x0, 0x1, [@typed={0x8, 0xac, 0x0, 0x0, @ipv4=@loopback}, @generic="347c55ecc199111a7a4cd30b321034ad67eccddc6e6e0c0b540f"]}, @typed={0x8, 0xc4, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x78, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x41, 0x0, 0x0, @ipv4=@private=0xa010102}, @typed={0x8, 0x91, 0x0, 0x0, @uid=r8}]}, @generic="a867cfa3be1aafd7f7a5c70f7511d9d8be6318b7048c8d22565b869d60812d924be3726d7309f5797af7352463538e33dedf66c6", @generic="0e7b942a712303372f9b6b97cffa82d576b56cf3772534824a16ccec0ea5b53e58fd618dae3e314a0e9f03a0d536ae3277c0d2c99dcfa671044c41dd23a1b7e92f19e4ec8bd323a1f55c4e38491d45f4edd39548c4c4eba165051ae16d380158e9dbecf93d84560c4050c3839e0e4a68ef11eb18f702e4db9f692e9fbfaf924be00dc95842b645ee7e3d9b507670ed5147ea269353047bf47b1cfc959394d4f48ff2daeecf784275759448c0bd1aeda0ff54b10a550e99e43d3f54981c8731256834b967f8c791aa", @typed={0x8, 0x38, 0x0, 0x0, @uid=r9}, @typed={0x8, 0xed, 0x0, 0x0, @fd=r12}]}, 0x188}, 0x1, 0x0, 0x0, 0x44}, 0x20000884) (rerun: 64)

302.007465ms ago: executing program 0 (id=91):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
keyctl$restrict_keyring(0x10, 0xffffffffffffffff, 0x0, 0x0)
close(r1)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @sdr={0x3631564e, 0xc62f}})

301.554483ms ago: executing program 0 (id=92):
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="baf80c66b84095f98966efbafc0c66b80000000066ef66b9800000c00f326635000800000f300f20c06635000000400f22c0d9d0baf80c66b876011c8066efbafc0cb80000ef640ff7f1dfc1660f3835a00020f3368f0267ffe5", 0x5a}], 0x1, 0x0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x4000)

295.831791ms ago: executing program 1 (id=93):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0)
map_shadow_stack(&(0x7f000089e000/0x4000)=nil, 0x4000, 0x1)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x1, @raw_data="8a6528fa2eba577bfa6b99723c0c1b5d143ec74480807edf8b5f010c46c1a6e9ec85449d34fbb88d5483106c6380e37c5e269951bebf29ed14e535fedd9e39d56748d2087da94ef0ee4b44d2815963aa6366ac844175dbe2a195662da79450b8c9a03c50e58f5cd5e570a4777c532b9e2fad1d7ea8572d23d9ce5e60f2eb0b2c4a009998961146866788869040839ff19b3bff10e091a365966500b03513d980d80f1c81f353e0ea0db47f040ae3750900c992d15d2d0c83847a9fb064598446f84f6157fef4e44b"})

295.544103ms ago: executing program 3 (id=94):
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
r1 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\xea\xe8\x015\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz\xc213\x9b\x87\xd5\x99\r\xa2P\x03\x1cl\x0f\xcb)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af', 0x0)
lseek(r0, 0x7, 0x4)
syz_clone(0x20940200, 0x0, 0x9, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendto$packet(r3, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181b", 0x4c, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000004800)={0x2020, 0x0, 0x0, <r6=>0x0}, 0x2020)
quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, r6, &(0x7f00000000c0)={0x0, 0x2, 0xfffffffffffffffd, 0xffffffff, 0x9, 0x9, 0x0, 0xfffffffffffffffb, 0xde})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fchown(r4, 0xee01, 0x0)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

238.284147ms ago: executing program 0 (id=95):
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x4806, 0x4)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x400, 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000380)=0xe9)
pipe2$9p(&(0x7f0000000240), 0x0) (async)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000"], 0xb0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x10048, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="314e890395f79bfe3b2979b0faf122742c047652eeb23f75583201c3d2f86f512916a18094e7f9384f2947ed28e491c4eee95683ca5c0efccfe5fff83ac7de699cb083c21606c7080010000000000000da1c08841881797dfe19c917c4172fde1a2364c73c3dd9868917a73163a2caf023d3eeae10b100976e5d4b00"/135]) (async)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x10048, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="314e890395f79bfe3b2979b0faf122742c047652eeb23f75583201c3d2f86f512916a18094e7f9384f2947ed28e491c4eee95683ca5c0efccfe5fff83ac7de699cb083c21606c7080010000000000000da1c08841881797dfe19c917c4172fde1a2364c73c3dd9868917a73163a2caf023d3eeae10b100976e5d4b00"/135])
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x630, 0x560, 0x208, 0x0, 0x208, 0x2f8, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, &(0x7f0000000180), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xff, 0xffffff00, 0xff000000], [0x0, 0xffffff00, 0x0, 0xffffff00], 'ip6tnl0\x00', 'veth1_to_team\x00', {}, {}, 0x2f, 0xf8, 0x3, 0xd5eb708ec515527c}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@private=0xa010102, 0x24, 0x3e, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv6=@mcast2, 0x15, 0x33}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x9, 0x11, 0x5}}}, {{@ipv6={@private1, @private0, [0x0, 0xffffff00, 0xffffff00, 0xffffff00], [0xff000000, 0xffffffff, 0x0, 0xff000000], 'caif0\x00', 'geneve1\x00', {}, {0xff}, 0x62, 0x3, 0x1, 0x2}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0xc, 0xc6, 0x8, 0xab, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff000000, 0xff, 0xff, 0xffffffff], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], [0xff000000, 0x3c71cebfdaa88c9a, 0xffffff00], 0x0, 0x10}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xe, 0x401, @ipv4=@multicast2, 0x4e22}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@local, 0x22, 0x32, 0xff01}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) (async)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x630, 0x560, 0x208, 0x0, 0x208, 0x2f8, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, &(0x7f0000000180), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xff, 0xffffff00, 0xff000000], [0x0, 0xffffff00, 0x0, 0xffffff00], 'ip6tnl0\x00', 'veth1_to_team\x00', {}, {}, 0x2f, 0xf8, 0x3, 0xd5eb708ec515527c}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@private=0xa010102, 0x24, 0x3e, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv6=@mcast2, 0x15, 0x33}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x9, 0x11, 0x5}}}, {{@ipv6={@private1, @private0, [0x0, 0xffffff00, 0xffffff00, 0xffffff00], [0xff000000, 0xffffffff, 0x0, 0xff000000], 'caif0\x00', 'geneve1\x00', {}, {0xff}, 0x62, 0x3, 0x1, 0x2}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0xc, 0xc6, 0x8, 0xab, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff000000, 0xff, 0xff, 0xffffffff], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], [0xff000000, 0x3c71cebfdaa88c9a, 0xffffff00], 0x0, 0x10}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xe, 0x401, @ipv4=@multicast2, 0x4e22}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@local, 0x22, 0x32, 0xff01}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@lowerdir, 0x5c}]})

237.677498ms ago: executing program 0 (id=96):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000500040000000000090002cb73797a32000000000c00078008000840000000b10500050002000000050001000600000015000300686173683a69702c706f72742c6e657400000000"], 0x5c}}, 0x0)

237.127633ms ago: executing program 1 (id=97):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'erspan0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={<r4=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000580)={0x8, 0x120, 0xfa00, {0x0, {0x1, 0x3, "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", 0xd, 0x1, 0x8, 0x9, 0x6, 0x8, 0x4}, r4}}, 0x128)
pipe2(&(0x7f0000000040), 0x0)
r5 = syz_io_uring_setup(0x4169, &(0x7f0000000400)={0x0, 0x0, 0x200, 0x1}, &(0x7f0000000480), &(0x7f0000000040)=<r6=>0x0)
syz_io_uring_setup(0x7b9c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000340)=<r7=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r5, 0x48e9, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=<r10=>0x0)
timer_settime(r10, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r11 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r12 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r12, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed5100000000000000010000000000000800", <r13=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r11, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r14=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r13, 0xc0303e03, &(0x7f00000000c0)={"3c2486910284ed8b3431e3c5ecfbf500", r14, <r15=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_INC(r12, 0x40045701, &(0x7f0000000040)=0x1ab0)
ioctl$SYNC_IOC_MERGE(r15, 0xc0303e03, &(0x7f00000001c0)={"f9f450a25cab005573eba0f49dd9bb26eb4b4bc39c8500bbda4e052be780eef7", r15})
r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r16, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r16, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00'})

235.973477ms ago: executing program 3 (id=98):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
r2 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\xea\xe8\x015\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz\xc213\x9b\x87\xd5\x99\r\xa2P\x03\x1cl\x0f\xcb)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af', 0x0)
lseek(r1, 0x7, 0x4)
syz_clone(0x20940200, 0x0, 0x9, 0x0, 0x0, 0x0)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x82ca, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0xfffffffa)
bind$inet(r4, &(0x7f0000000240)={0x2, 0x4c20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10)
getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000100))
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001e0001000000000000000000fdff"], 0x1c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000180), 0x2, &(0x7f0000000280)={'trans=virtio,', {[{@dfltuid}]}})
r6 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000140), 0x400081, 0x0)
read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x2020)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
close(r0)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x2}]}}}], 0x30}, 0x800)

162.174677ms ago: executing program 0 (id=99):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="430000000400000004000000070000000000000087e71166e896cda33225dfcf25fdeea0222703d8b218001a2de800317eaa62e529d61f7ed386ca767d309e34c665", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="020000000100"/28], 0x48)
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r2, 0x104, 0x4, 0x0, &(0x7f0000000080))
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x0, 0x0)
readv(r3, &(0x7f0000000380)=[{&(0x7f0000000240)=""/237, 0xed}], 0x1) (async, rerun: 32)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
r4 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x10, 0x8001002, 0x3d7})
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x1, 0x1}, 0x10) (async)
r6 = socket(0x1e, 0x4, 0x0) (async, rerun: 64)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x5c, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x3ffe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x1, 0x16, 0x20000000, 0x4, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x404c451}, 0x8000)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000004000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005"], 0xfc}}, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x90000, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x50080, 0x0) (async)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) (async)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7c004dac}, 0x10)
close_range(r4, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800f20000000000000000000000000018170000", @ANYRES32=r1, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

45.63892ms ago: executing program 3 (id=100):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000001, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x1ff, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0xb, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x0, 0x0, 0x8, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xfffffffc, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0x0, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x8}, {0x3, 0x8, 0x0, 0x6, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x0, 0x401}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x5, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x6}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81, 0x5}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x6, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fde, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8d, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0x6}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x5, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x4, 0x3}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0001, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffff9}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x10, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x1005, 0x1, 0x3a, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x8}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0x0, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0x7, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x8, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x80000001, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2b, 0x1, 0x5, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x7, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x10e, 0x80, 0x7, 0x5}, {0x9a, 0x5, 0x3, 0x3, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x2}, {0x5}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x38, r5, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x49c}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4020000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x9}]}, 0x10)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r7, 0x0, 0x9)
sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r5, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x3, [@enum={0x9, 0x3, 0x0, 0x6, 0x4, [{0x2}, {0xa, 0x10000}, {0xb, 0xf}]}, @func={0x3, 0x0, 0x0, 0xc, 0x5}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x3, 0x4}, @enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0x7, 0x1}, {0x8, 0xb}]}, @struct={0xe, 0x1, 0x0, 0x4, 0x0, 0xc, [{0xe, 0x3, 0x1000}]}, @volatile={0xd, 0x0, 0x0, 0x9, 0x1}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @volatile={0x8, 0x0, 0x0, 0x9, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x2e]}}, &(0x7f00000000c0)=""/124, 0xc7, 0x7c, 0x0, 0x6, 0x0, @void, @value}, 0x28)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x2, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x7, 0x0, 0x3, 0x2, 0x5, 0xffffffffffffffc0, 0x8}], &(0x7f0000000080)='GPL\x00', 0x1000, 0x97, &(0x7f0000000340)=""/151, 0x41100, 0x8c, '\x00', r2, 0x0, r8, 0x8, &(0x7f0000000200)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x4, 0x3, 0x5}, 0x10, 0x30522, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000540)=[{0x5, 0x2, 0x8, 0x1}, {0x3, 0x3, 0x2, 0xb}, {0x0, 0x4, 0x8, 0x1}], 0x10, 0x80fd, @void, @value}, 0x94)
r10 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$sock(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="be96451ee917b482c0b237534a675341588bd8fee8a980291c26b4b7a3c84bdf1ae9c6db7bd944bb06f7d59773a8f8bc1fb4b8879c7f1b5b47443e44923abf85d8ee07f5b3b0a34342518864ad04bb703448dbae4b023b8cf08497b4d9bd8098fb9fe83361fe7751f0c29758225f8a994e945547361f150aff3e8ab8dbfd8561d884e680cbdecefafa9214327efba33f97efdbb536069f80a962199f47d86ad8040f78382ac92aae3243f774f101c3bff7", 0xb1}], 0x1, &(0x7f00000006c0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x78}, 0x8c5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0))
pread64(r9, &(0x7f0000000880)=""/19, 0x13, 0x1cb)
ioctl$FBIOGETCMAP(r10, 0x4604, &(0x7f0000000180)={0xa94e, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

0s ago: executing program 32 (id=100):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000001, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x1ff, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0xb, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x0, 0x0, 0x8, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xfffffffc, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0x0, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x8}, {0x3, 0x8, 0x0, 0x6, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x0, 0x401}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x5, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x6}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81, 0x5}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x6, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fde, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8d, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0x6}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x5, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x4, 0x3}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0001, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffff9}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x10, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x1005, 0x1, 0x3a, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x8}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0x0, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0x7, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x8, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x80000001, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2b, 0x1, 0x5, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x7, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x10e, 0x80, 0x7, 0x5}, {0x9a, 0x5, 0x3, 0x3, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x2}, {0x5}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x38, r5, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x49c}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4020000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x9}]}, 0x10)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r7, 0x0, 0x9)
sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r5, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x3, [@enum={0x9, 0x3, 0x0, 0x6, 0x4, [{0x2}, {0xa, 0x10000}, {0xb, 0xf}]}, @func={0x3, 0x0, 0x0, 0xc, 0x5}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x3, 0x4}, @enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0x7, 0x1}, {0x8, 0xb}]}, @struct={0xe, 0x1, 0x0, 0x4, 0x0, 0xc, [{0xe, 0x3, 0x1000}]}, @volatile={0xd, 0x0, 0x0, 0x9, 0x1}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @volatile={0x8, 0x0, 0x0, 0x9, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x2e]}}, &(0x7f00000000c0)=""/124, 0xc7, 0x7c, 0x0, 0x6, 0x0, @void, @value}, 0x28)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x2, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x7, 0x0, 0x3, 0x2, 0x5, 0xffffffffffffffc0, 0x8}], &(0x7f0000000080)='GPL\x00', 0x1000, 0x97, &(0x7f0000000340)=""/151, 0x41100, 0x8c, '\x00', r2, 0x0, r8, 0x8, &(0x7f0000000200)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x4, 0x3, 0x5}, 0x10, 0x30522, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000540)=[{0x5, 0x2, 0x8, 0x1}, {0x3, 0x3, 0x2, 0xb}, {0x0, 0x4, 0x8, 0x1}], 0x10, 0x80fd, @void, @value}, 0x94)
r10 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$sock(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="be96451ee917b482c0b237534a675341588bd8fee8a980291c26b4b7a3c84bdf1ae9c6db7bd944bb06f7d59773a8f8bc1fb4b8879c7f1b5b47443e44923abf85d8ee07f5b3b0a34342518864ad04bb703448dbae4b023b8cf08497b4d9bd8098fb9fe83361fe7751f0c29758225f8a994e945547361f150aff3e8ab8dbfd8561d884e680cbdecefafa9214327efba33f97efdbb536069f80a962199f47d86ad8040f78382ac92aae3243f774f101c3bff7", 0xb1}], 0x1, &(0x7f00000006c0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x78}, 0x8c5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0))
pread64(r9, &(0x7f0000000880)=""/19, 0x13, 0x1cb)
ioctl$FBIOGETCMAP(r10, 0x4604, &(0x7f0000000180)={0xa94e, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

0s ago: executing program 1 (id=102):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x8000000001) (async)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xfc) (async)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x40, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r5=>0x0}) (async)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r6, 0x1, 0x0, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x3, 0x1, 0x5}}, 0x28) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r3}, 0x20) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000000), &(0x7f0000000240)=""/88}, 0x20)

kernel console output (not intermixed with test programs):

[   38.153897][   T40] audit: type=1400 audit(1747919519.153:64): avc:  denied  { rlimitinh } for  pid=5839 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   38.163483][   T40] audit: type=1400 audit(1747919519.153:65): avc:  denied  { siginh } for  pid=5839 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '[localhost]:61299' (ED25519) to the list of known hosts.
[   40.525118][   T40] audit: type=1400 audit(1747919521.553:66): avc:  denied  { name_bind } for  pid=5848 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   40.546752][   T40] audit: type=1400 audit(1747919521.573:67): avc:  denied  { write } for  pid=5849 comm="sh" path="pipe:[3718]" dev="pipefs" ino=3718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   40.558635][   T40] audit: type=1400 audit(1747919521.583:68): avc:  denied  { execute } for  pid=5849 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   40.566144][   T40] audit: type=1400 audit(1747919521.583:69): avc:  denied  { execute_no_trans } for  pid=5849 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   42.614630][   T40] audit: type=1400 audit(1747919523.643:70): avc:  denied  { mounton } for  pid=5849 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   42.619417][ T5849] cgroup: Unknown subsys name 'net'
[   42.788023][ T5849] cgroup: Unknown subsys name 'cpuset'
[   42.793251][ T5849] cgroup: Unknown subsys name 'rlimit'
[   43.091802][ T5894] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   43.769755][ T5849] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.721927][   T40] kauditd_printk_skb: 13 callbacks suppressed
[   46.721938][   T40] audit: type=1400 audit(1747919527.743:84): avc:  denied  { execmem } for  pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   46.908168][   T40] audit: type=1400 audit(1747919527.933:85): avc:  denied  { create } for  pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   46.917274][   T40] audit: type=1400 audit(1747919527.933:86): avc:  denied  { read write } for  pid=5933 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   46.925048][   T40] audit: type=1400 audit(1747919527.933:87): avc:  denied  { open } for  pid=5933 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   46.932731][   T40] audit: type=1400 audit(1747919527.943:88): avc:  denied  { ioctl } for  pid=5933 comm="syz-executor" path="socket:[6536]" dev="sockfs" ino=6536 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   46.987935][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.990936][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.993320][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   46.996430][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   46.999193][ T5947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   46.999827][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   47.002129][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   47.006649][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   47.006760][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   47.012121][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   47.013765][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   47.014867][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   47.015758][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   47.016184][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   47.017715][   T40] audit: type=1400 audit(1747919528.043:89): avc:  denied  { read } for  pid=5944 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   47.019042][ T5945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   47.019732][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   47.020131][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   47.020405][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.021826][   T40] audit: type=1400 audit(1747919528.043:90): avc:  denied  { open } for  pid=5944 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   47.025490][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   47.030544][   T40] audit: type=1400 audit(1747919528.043:91): avc:  denied  { mounton } for  pid=5944 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   47.033571][ T5945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   47.241928][   T40] audit: type=1400 audit(1747919528.263:92): avc:  denied  { module_request } for  pid=5938 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   47.297436][ T5938] chnl_net:caif_netlink_parms(): no params data found
[   47.328969][ T5944] chnl_net:caif_netlink_parms(): no params data found
[   47.370134][ T5934] chnl_net:caif_netlink_parms(): no params data found
[   47.502162][ T5933] chnl_net:caif_netlink_parms(): no params data found
[   47.532229][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.536831][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.539298][ T5938] bridge_slave_0: entered allmulticast mode
[   47.542071][ T5938] bridge_slave_0: entered promiscuous mode
[   47.548396][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.551300][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.554047][ T5938] bridge_slave_1: entered allmulticast mode
[   47.557356][ T5938] bridge_slave_1: entered promiscuous mode
[   47.685160][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.688086][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.691149][ T5944] bridge_slave_0: entered allmulticast mode
[   47.695595][ T5944] bridge_slave_0: entered promiscuous mode
[   47.701011][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.705594][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.707861][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.710194][ T5934] bridge_slave_0: entered allmulticast mode
[   47.712829][ T5934] bridge_slave_0: entered promiscuous mode
[   47.720326][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.722953][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.725601][ T5944] bridge_slave_1: entered allmulticast mode
[   47.728695][ T5944] bridge_slave_1: entered promiscuous mode
[   47.746677][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.764117][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.766409][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.768675][ T5934] bridge_slave_1: entered allmulticast mode
[   47.771786][ T5934] bridge_slave_1: entered promiscuous mode
[   47.804548][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.869672][ T5938] team0: Port device team_slave_0 added
[   47.878767][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.910183][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.914108][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.916386][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.918732][ T5933] bridge_slave_0: entered allmulticast mode
[   47.921386][ T5933] bridge_slave_0: entered promiscuous mode
[   47.926837][ T5938] team0: Port device team_slave_1 added
[   47.973696][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.990355][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.992642][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.995214][ T5933] bridge_slave_1: entered allmulticast mode
[   47.997905][ T5933] bridge_slave_1: entered promiscuous mode
[   48.017013][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.019323][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.030438][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.090502][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.092726][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.102733][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.109414][ T5944] team0: Port device team_slave_0 added
[   48.113233][ T5934] team0: Port device team_slave_0 added
[   48.117505][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.126307][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.132317][ T5944] team0: Port device team_slave_1 added
[   48.136336][ T5934] team0: Port device team_slave_1 added
[   48.210537][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.212737][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.220749][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.286560][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.288789][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.297037][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.302597][ T5933] team0: Port device team_slave_0 added
[   48.314923][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.317134][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.326016][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.354968][ T5938] hsr_slave_0: entered promiscuous mode
[   48.357260][ T5938] hsr_slave_1: entered promiscuous mode
[   48.361044][ T5933] team0: Port device team_slave_1 added
[   48.363582][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.365940][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.374295][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.431630][ T5934] hsr_slave_0: entered promiscuous mode
[   48.433999][ T5934] hsr_slave_1: entered promiscuous mode
[   48.436220][ T5934] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   48.438735][ T5934] Cannot create hsr debugfs directory
[   48.466947][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.470020][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.480664][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.486944][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.489370][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.499003][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.577467][ T5944] hsr_slave_0: entered promiscuous mode
[   48.580445][ T5944] hsr_slave_1: entered promiscuous mode
[   48.583336][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   48.586553][ T5944] Cannot create hsr debugfs directory
[   48.731983][ T5933] hsr_slave_0: entered promiscuous mode
[   48.734687][ T5933] hsr_slave_1: entered promiscuous mode
[   48.737253][ T5933] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   48.739649][ T5933] Cannot create hsr debugfs directory
[   48.985266][ T5938] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.992382][ T5938] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.997520][ T5938] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   49.006852][ T5938] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   49.031108][ T5934] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   49.036272][ T5934] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   49.042224][ T5934] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   49.048711][ T5934] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   49.055903][ T5945] Bluetooth: hci2: command tx timeout
[   49.056202][ T5287] Bluetooth: hci1: command tx timeout
[   49.056371][ T5939] Bluetooth: hci3: command tx timeout
[   49.099796][ T5944] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   49.119000][ T5944] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   49.123994][ T5944] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   49.134333][ T5287] Bluetooth: hci0: command tx timeout
[   49.137664][ T5944] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   49.191508][ T5933] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   49.197290][ T5933] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   49.201333][ T5933] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   49.207618][ T5933] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   49.228683][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.241152][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.259241][ T5934] 8021q: adding VLAN 0 to HW filter on device team0
[   49.274145][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.277104][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.287850][ T5938] 8021q: adding VLAN 0 to HW filter on device team0
[   49.292542][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.295449][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.310570][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.313278][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.324025][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.326562][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.381664][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.404570][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.404801][   T40] audit: type=1400 audit(1747919530.433:93): avc:  denied  { sys_module } for  pid=5934 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   49.419534][ T5944] 8021q: adding VLAN 0 to HW filter on device team0
[   49.427851][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.430681][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.441637][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.444514][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.451779][ T5933] 8021q: adding VLAN 0 to HW filter on device team0
[   49.483719][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.486036][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.490077][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.493012][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.500225][ T5944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   49.543751][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.581448][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.592633][ T5934] veth0_vlan: entered promiscuous mode
[   49.608247][ T5934] veth1_vlan: entered promiscuous mode
[   49.638059][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.640386][ T5938] veth0_vlan: entered promiscuous mode
[   49.650206][ T5938] veth1_vlan: entered promiscuous mode
[   49.657389][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.660159][ T5934] veth0_macvtap: entered promiscuous mode
[   49.671040][ T5934] veth1_macvtap: entered promiscuous mode
[   49.696771][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.709509][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.716404][ T5944] veth0_vlan: entered promiscuous mode
[   49.720548][ T5934] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.724020][ T5934] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.727132][ T5934] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.729991][ T5934] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.740533][ T5933] veth0_vlan: entered promiscuous mode
[   49.744490][ T5938] veth0_macvtap: entered promiscuous mode
[   49.750793][ T5944] veth1_vlan: entered promiscuous mode
[   49.759510][ T5938] veth1_macvtap: entered promiscuous mode
[   49.763608][ T5933] veth1_vlan: entered promiscuous mode
[   49.775175][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.779987][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.790801][ T5938] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.794033][ T5938] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.796788][ T5938] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.799518][ T5938] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.831020][  T758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.833774][  T758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.860463][ T5933] veth0_macvtap: entered promiscuous mode
[   49.863998][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.865421][ T5944] veth0_macvtap: entered promiscuous mode
[   49.866510][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.870396][ T5944] veth1_macvtap: entered promiscuous mode
[   49.881822][ T5933] veth1_macvtap: entered promiscuous mode
[   49.891260][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.910118][ T5934] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.916154][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.920382][   T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.922921][   T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.927287][ T5933] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.930128][ T5933] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.932844][ T5933] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.936308][ T5933] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.958984][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.979967][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.980535][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.983254][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.995743][ T5944] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.998616][ T5944] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.001328][ T5944] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.004551][ T5944] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.035738][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.038236][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.076483][ T6004] bond0: entered promiscuous mode
[   50.078247][ T6004] bond_slave_0: entered promiscuous mode
[   50.080143][ T6004] bond_slave_1: entered promiscuous mode
[   50.082833][ T6004] batadv0: entered promiscuous mode
[   50.086645][ T6006] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   50.086982][ T6004] 8021q: adding VLAN 0 to HW filter on device hsr1
[   50.089344][ T6006] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   50.094399][ T6004] bond0: left promiscuous mode
[   50.096010][ T6004] bond_slave_0: left promiscuous mode
[   50.097932][ T6004] bond_slave_1: left promiscuous mode
[   50.100658][ T6004] batadv0: left promiscuous mode
[   50.114761][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.117329][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.151789][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.156219][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.196550][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.196564][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.306179][ T6033] pim6reg0: tun_chr_ioctl cmd 1074812118
[   50.322274][ T6039] xt_l2tp: wrong L2TP version: 0
[   50.346414][ T6040] 8021q: VLANs not supported on gre0
[   50.350087][ T6040] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14'.
[   50.375041][ T6048] vlan0: entered promiscuous mode
[   50.389215][ T6048] team0: Port device vlan0 added
[   50.418274][ T6051] ALSA: mixer_oss: invalid OSS volume ''
[   50.420559][ T6051] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   50.466429][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'.
[   50.531894][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'.
[   50.587852][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'.
[   50.820727][ T5978] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   51.002471][ T5978] usb 6-1: Using ep0 maxpacket: 8
[   51.006626][ T5978] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[   51.009767][ T5978] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   51.012905][ T5978] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   51.016483][ T5978] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   51.019587][ T5978] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   51.023710][ T5978] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   51.026937][ T5978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.059993][ T6109] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.117559][ T6111] Zero length message leads to an empty skb
[   51.195206][ T5287] Bluetooth: hci1: command tx timeout
[   51.206357][ T5287] Bluetooth: hci3: command tx timeout
[   51.206517][ T5945] Bluetooth: hci2: command tx timeout
[   51.248771][ T5978] usb 6-1: GET_CAPABILITIES returned 0
[   51.250705][ T5978] usbtmc 6-1:16.0: can't read capabilities
[   51.467509][ T6002] usb 6-1: USB disconnect, device number 2
[   51.546594][ T6128] process 'syz.0.39' launched './file0' with NULL argv: empty string added
[   51.590065][ T6130] syz.0.40 uses obsolete (PF_INET,SOCK_PACKET)
[   51.817535][ T6140] ip6t_rpfilter: unknown options
[   51.843387][ T6142] netlink: 'syz.3.42': attribute type 13 has an invalid length.
[   51.857317][ T6142] gretap0: refused to change device tx_queue_len
[   51.857752][ T5978] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   51.860298][ T6142] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   51.870314][   T40] kauditd_printk_skb: 97 callbacks suppressed
[   51.870326][   T40] audit: type=1400 audit(1747919532.799:191): avc:  denied  { write } for  pid=6141 comm="syz.3.42" name="tcp6" dev="proc" ino=4026533209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   51.906617][   T40] audit: type=1400 audit(1747919532.827:192): avc:  denied  { setopt } for  pid=6143 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   51.912992][   T40] audit: type=1400 audit(1747919532.827:193): avc:  denied  { bind } for  pid=6143 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   51.918916][   T40] audit: type=1400 audit(1747919532.827:194): avc:  denied  { node_bind } for  pid=6143 comm="syz.3.43" saddr=172.20.20.18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[   51.926195][   T40] audit: type=1400 audit(1747919532.827:195): avc:  denied  { create } for  pid=6143 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   51.932328][   T40] audit: type=1400 audit(1747919532.827:196): avc:  denied  { sys_admin } for  pid=6143 comm="syz.3.43" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   52.030681][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   52.035794][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   52.038866][ T5978] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   52.043205][ T5978] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   52.046037][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.052995][ T5978] usb 5-1: config 0 descriptor??
[   52.378714][   T40] audit: type=1400 audit(1747919533.266:197): avc:  denied  { write } for  pid=6154 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   52.385196][   T40] audit: type=1400 audit(1747919533.266:198): avc:  denied  { connect } for  pid=6154 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   52.391215][   T40] audit: type=1400 audit(1747919533.266:199): avc:  denied  { name_connect } for  pid=6154 comm="syz.1.46" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   52.398563][   T40] audit: type=1400 audit(1747919533.266:200): avc:  denied  { write } for  pid=6154 comm="syz.1.46" lport=38014 faddr=fc01:: fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   52.445100][ T6157] program syz.1.47 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   52.448288][ T6157] ata1.00: non-matching transfer count (32/0)
[   52.488486][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   52.491696][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   52.494268][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   52.496687][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   52.499278][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   52.503028][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   52.506083][ T5978] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[   52.513389][ T5978] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   52.720703][ T5978] usb 5-1: USB disconnect, device number 2
[   52.805794][ T5287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   52.808977][ T5287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   52.812516][ T5287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   52.816272][ T5287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   52.819501][ T5287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   52.926439][ T6177] chnl_net:caif_netlink_parms(): no params data found
[   52.994483][ T6177] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.997305][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.000149][ T6177] bridge_slave_0: entered allmulticast mode
[   53.003590][ T6177] bridge_slave_0: entered promiscuous mode
[   53.007171][ T6177] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.009530][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.011814][ T6177] bridge_slave_1: entered allmulticast mode
[   53.015140][ T6177] bridge_slave_1: entered promiscuous mode
[   53.055665][ T6177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.059068][ T6193] binder: 6192:6193 ioctl c0306201 0 returned -14
[   53.061772][ T6177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.103105][ T6177] team0: Port device team_slave_0 added
[   53.106692][ T6177] team0: Port device team_slave_1 added
[   53.138430][ T6177] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.140838][ T6177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.148836][ T6177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.153097][ T6177] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.155269][ T6177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.163563][ T6177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.202619][ T6177] hsr_slave_0: entered promiscuous mode
[   53.206362][ T6177] hsr_slave_1: entered promiscuous mode
[   53.208429][ T6177] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.210806][ T6177] Cannot create hsr debugfs directory
[   53.228617][ T6197] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[   53.263504][ T6199] input: syz0 as /devices/virtual/input/input5
[   53.349935][ T6177] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.362450][ T6203] evm: overlay not supported
[   53.418654][ T5945] Bluetooth: hci3: command tx timeout
[   53.418796][ T5287] Bluetooth: hci2: command tx timeout
[   53.419032][ T5939] Bluetooth: hci1: command tx timeout
[   53.460354][ T6209] fuseblk: Unknown parameter '�9mQS�{�����5Wӆ�mߋi�'
[   53.464868][ T6209] warning: `syz.3.62' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   53.683996][ T6218] trusted_key: encrypted_key: insufficient parameters specified
[   53.890865][ T6177] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.976158][ T6177] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.011943][ T6229] netlink: 'syz.1.69': attribute type 21 has an invalid length.
[   54.040163][ T6177] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.055430][ T6232] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[   54.058569][ T6232] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[   54.091058][ T6234] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   54.125791][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'.
[   54.128634][ T6236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.72'.
[   54.230107][ T6177] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.238120][ T6177] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.244127][ T6177] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.248828][ T6177] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.255609][ T6241] netlink: 80 bytes leftover after parsing attributes in process `syz.0.74'.
[   54.336871][ T6177] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.345323][ T6177] 8021q: adding VLAN 0 to HW filter on device team0
[   54.352349][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.355218][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.366704][   T85] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.370197][   T85] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.423564][  T836] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   54.440457][ T6258] binder: 6257:6258 ioctl 4018620d 0 returned -22
[   54.443363][ T6258] binder: 6257:6258 ioctl c0306201 0 returned -14
[   54.444535][ T6259] binder: 6257:6259 ioctl c0306201 0 returned -14
[   54.499050][ T6177] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.525777][ T6177] veth0_vlan: entered promiscuous mode
[   54.534465][ T6177] veth1_vlan: entered promiscuous mode
[   54.549100][ T6177] veth0_macvtap: entered promiscuous mode
[   54.554253][ T6177] veth1_macvtap: entered promiscuous mode
[   54.562868][ T6177] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.568659][ T6177] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.573349][ T6177] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.576078][ T6177] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.578796][ T6177] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.581463][ T6177] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.594515][  T836] usb 6-1: Using ep0 maxpacket: 8
[   54.600732][  T836] usb 6-1: config 0 has an invalid interface number: 101 but max is 0
[   54.603500][  T836] usb 6-1: config 0 has no interface number 0
[   54.607204][  T836] usb 6-1: config 0 interface 101 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[   54.610762][  T836] usb 6-1: config 0 interface 101 has no altsetting 0
[   54.617300][  T836] usb 6-1: New USB device found, idVendor=04e8, idProduct=6619, bcdDevice=f5.a6
[   54.621493][  T836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.621553][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.624010][  T836] usb 6-1: Product: 沮핥䩚둔觿뾬瓀묞冢䂣믄䡧퓙훖虲岑ᄔ借츴懟度섘꜐ⲛ᪈萲툠喚╞葍ﾕퟐ虁瓲失턶䅩ꛛ溗ྮⴌЁ蓬缐㻠磉ⲳ㑏噕쁡뙸鞆肟鴥낾퇺볍鮮뮷灅텣ㅺ례禛ᙃ疏钺閐䨆ሼ췷눫ﮛ紆㎨㰘勬壛殾計䄵䉮ò숮䇟풙矒淀ﳱ箬Ë娜箆䯍鐽럲
[   54.626995][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.637461][  T836] usb 6-1: SerialNumber: 彗ﶒ槵輆贘兺㕩쑮釪禵箯迋Ꙥ럳賲糸均倓琓蒂㔣嗹㑄玸뒝Û실脃ࡒ↜輽成鲒槏⾥ঢ়⠱쐾겳졼霤햖皘뛨㊊頖䍰暸㛍僝䛬턍⇜끫沈࢒捡鋥Ⱆ㗨髙썃쑁B瘧岺鄻♢蘲덒頗䴮쎑黚㻩傃醗뽱離䪮專ꩱ翜氥ᜉ紸돗茓庈濮귗ꐞៈ፾阓蒁봪쨷昝릹
[   54.655395][   T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.656047][  T836] usb 6-1: config 0 descriptor??
[   54.659338][   T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.883009][  T836] usb 6-1: USB disconnect, device number 3
[   55.360481][ T6266] ieee802154 phy0 wpan0: encryption failed: -22
[   55.642352][ T5287] Bluetooth: hci2: command tx timeout
[   55.644697][ T5945] Bluetooth: hci3: command tx timeout
[   55.653495][ T5287] Bluetooth: hci1: command tx timeout
[   56.213084][ T6281] netlink: 36 bytes leftover after parsing attributes in process `syz.1.82'.
[   56.216209][ T6281] netlink: 'syz.1.82': attribute type 4 has an invalid length.
[   56.221790][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'.
[   56.448422][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'.
[   56.467804][ T6298] vti0: entered promiscuous mode
[   56.570887][ T6321] capability: warning: `syz.0.95' uses deprecated v2 capabilities in a way that may be insecure
[   56.578004][ T6323] overlayfs: empty lowerdir
[   56.643112][ T6331] tipc: Started in network mode
[   56.644699][ T6331] tipc: Node identity 4, cluster identity 4711
[   56.646670][ T6331] tipc: Node number set to 4
[   56.774546][ T1145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.836917][ T1145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.864196][ T6339] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN NOPTI
[   56.867962][ T6339] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f]
[   56.872850][ T6339] CPU: 2 UID: 0 PID: 6339 Comm: syz.1.102 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) 
[   56.876517][ T6339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   56.879860][ T6339] RIP: 0010:bcsp_recv+0x10a/0x17f0
[   56.882012][ T6339] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 ba 2b 5d f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8
[   56.887961][ T6339] RSP: 0018:ffffc9000469fbf0 EFLAGS: 00010293
[   56.889897][ T6339] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff885e19ea
[   56.892356][ T6339] RDX: ffff88802bbe8000 RSI: ffffffff885e1a36 RDI: 0000000000000005
[   56.894826][ T6339] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000
[   56.897297][ T6339] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc9000469fd88
[   56.899795][ T6339] R13: ffffc9000469fd88 R14: 0000000000000001 R15: ffff8880522f7000
[   56.902265][ T6339] FS:  00007f147efce6c0(0000) GS:ffff8880d6bda000(0000) knlGS:0000000000000000
[   56.905057][ T6339] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   56.907139][ T6339] CR2: 00007f147efcdf98 CR3: 0000000025c70000 CR4: 0000000000352ef0
[   56.909653][ T6339] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   56.912096][ T6339] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   56.914555][ T6339] Call Trace:
[   56.915618][ T6339]  <TASK>
[   56.916562][ T6339]  ? __pfx_bcsp_recv+0x10/0x10
[   56.918087][ T6339]  hci_uart_tty_receive+0x251/0x7e0
[   56.919768][ T6339]  ? __pfx_hci_uart_tty_receive+0x10/0x10
[   56.921562][ T6339]  tty_ioctl+0x580/0x1610
[   56.922959][ T6339]  ? __pfx_tty_ioctl+0x10/0x10
[   56.924459][ T6339]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   56.926656][ T6339]  ? hook_file_ioctl_common+0x145/0x410
[   56.928391][ T6339]  ? selinux_file_ioctl+0x180/0x270
[   56.930038][ T6339]  ? selinux_file_ioctl+0xb4/0x270
[   56.931644][ T6339]  ? __pfx_tty_ioctl+0x10/0x10
[   56.933155][ T6339]  __x64_sys_ioctl+0x190/0x200
[   56.934673][ T6339]  do_syscall_64+0xcd/0x260
[   56.936115][ T6339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.937970][ T6339] RIP: 0033:0x7f147e18e969
[   56.939403][ T6339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   56.945339][ T6339] RSP: 002b:00007f147efce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   56.947951][ T6339] RAX: ffffffffffffffda RBX: 00007f147e3b6080 RCX: 00007f147e18e969
[   56.950424][ T6339] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000004
[   56.952869][ T6339] RBP: 00007f147e210ab1 R08: 0000000000000000 R09: 0000000000000000
[   56.955317][ T6339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   56.957778][ T6339] R13: 0000000000000000 R14: 00007f147e3b6080 R15: 00007ffef7cf2748
[   56.960372][ T6339]  </TASK>
[   56.961359][ T6339] Modules linked in:
[   56.962923][ T6339] ---[ end trace 0000000000000000 ]---
[   56.965641][ T6339] RIP: 0010:bcsp_recv+0x10a/0x17f0
[   56.967268][ T6339] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 ba 2b 5d f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8
[   56.973433][ T6339] RSP: 0018:ffffc9000469fbf0 EFLAGS: 00010293
[   56.975353][ T6339] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff885e19ea
[   56.977806][ T6339] RDX: ffff88802bbe8000 RSI: ffffffff885e1a36 RDI: 0000000000000005
[   56.980597][ T6339] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000
[   56.983078][ T6339] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc9000469fd88
[   56.985527][ T6339] R13: ffffc9000469fd88 R14: 0000000000000001 R15: ffff8880522f7000
[   56.987997][ T6339] FS:  00007f147efce6c0(0000) GS:ffff8880d6bda000(0000) knlGS:0000000000000000
[   56.990932][ T6339] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   56.993069][ T6339] CR2: 00007f147efcdf98 CR3: 0000000025c70000 CR4: 0000000000352ef0
[   56.995590][ T6339] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   56.998506][ T6339] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   56.998612][ T1145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.003051][ T6339] Kernel panic - not syncing: Fatal exception
[   57.004705][ T6339] Kernel Offset: disabled

VM DIAGNOSIS:
13:12:18  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000044d4c RBX=0000000000000000 RCX=ffffffff8b6d3419 RDX=ffffed100d4865be
RSI=ffffffff8bf4a220 RDI=ffffffff8191adf1 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10
R8 =0000000000000000 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000
R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90852e10 R15=0000000000000000
RIP=ffffffff8b6d1caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d69da000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f147efced58 CR3=0000000025c70000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f147e211a8a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f147e211a97
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f147e211a91
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f147e211aa5
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f147e211b2b
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f147e211c09
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f147e383488 00007f147e383480 00007f147e383478 00007f147e383450
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f147eeed100 00007f147e383440 00007f147e383458 0000000500060006
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f147e383498 00007f147e383490 00007f147e383488 00007f147e383480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1111111111111111 RBX=ffff88807ffd6380 RCX=000000000000003c RDX=1ffff1100fffac70
RSI=0000000000000007 RDI=ffff88807ffd65a8 RBP=ffff88807ffd65a0 RSP=ffffc90003faf358
R8 =ffff88806a53f998 R9 =00000000000025d0 R10=ffff88807ffd817f R11=0000000000000000
R12=0000000000000001 R13=ffff88817ffef400 R14=ffffea0001b78b80 R15=dffffc0000000000
RIP=ffffffff8212bd2b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6ada000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f1c0c2e7d60 CR3=0000000031248000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c0b7836a3 00007f1c0b7836a3
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffccbc91f80 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000300000014 0000000200000021
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000007 0000000400000017
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558467dc5f 000055558467d900
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000608066180 036180040da0030a 80040d9003010000 0408060d80035010
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0140100008800402 1000060102ca0010 0008b00309800408 a003000408900301
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000040806088003 4010000d80040410 00060102d0000200 070010000db00301
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000060806618003 6180040da0030a80 040d900301000004 08060d8003501000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004010000020806 060176d000020007 0a10004003021000 3003061000200300
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff854f9bb5 RDI=ffffffff9adfe5a0 RBP=ffffffff9adfe560 RSP=ffffc9000469f5f0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b
R12=0000000000000000 R13=0000000000000030 R14=ffffffff9adfe560 R15=ffffffff854f9b50
RIP=ffffffff854f9bdf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f147efce6c0 ffffffff 00c00000
GS =0000 ffff8880d6bda000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f147efcdf98 CR3=0000000025c70000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f147e211a8a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f147e211a97
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f147e211a91
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f147e211aa5
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f147e211b2b
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f147e211c09
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f147e383488 00007f147e383480 00007f147e383478 00007f147e383450
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f147eeed100 00007f147e383440 00007f147e383458 00007f147e3834a0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f147e383498 00007f147e383490 00007f147e383488 00007f147e383480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=00000000008da000 RCX=0000000000000002 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc90004f175b8
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81bb4130 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558c1f7500 ffffffff 00c00000
GS =0000 ffff8880d6cda000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f8d1adb6038 CR3=0000000046154000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9381c11a8a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9381c11a97
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9381c11a91
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9381c11aa5
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9381c11b2b
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9381c11c09
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0500440000000000 0000010000000000 0000000000000000 0004000700080006
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000