last executing test programs:

1.16611534s ago: executing program 0 (id=1):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000040681010000000000000000000000000500050002000000050001000700"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)

1.08165524s ago: executing program 0 (id=5):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0xffff, 0x0, 0x6, 0x6, 0x5})
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x9, @local, 0x12}, 0x1c)

1.020434098s ago: executing program 0 (id=6):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000001000200000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b7543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910ab193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68fe6b7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f8ce659e340c714809ec4d060bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd192595369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d4f17a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9570d730a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b94952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d830e1431ed6d646d13e8e7230300ef0a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000002000000000044ff72f96f084f4b6cdcb1b4a9d8e9f9021b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded5027a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b092b70f77f0f428d2000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634009aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3f19f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19006952fe2724c0105ab158a54a6a73000000000000000000000000b0d135da438cbe303f3ae070def97d6649b5a693ff5c788e5a406e1d06942ed51bff073011f6e6c29d3ea22e5fc26c7fbe37656229a6a12857ae9ed131ccdd513066bc9422ec38a1dc5212986d9bc330a23eb3b200af1a3678c2bfbe4b4ba6e8471495f6e82c5ee425973c590253e875352a3acaee044868f9b80f8fdc9d402007bb4c8df1b69d3d2b364ec9e4ed2f554118684eff1adf5b49b6b29232198e682dfa45dced8b332c404c8f292f36730845dc37dfe7a59e252ddc33ea9072dcd697a700cfac90b487660795f564ddb61fa3e4835f936984200000000000000000008e9f7bc3a00cd72ced7684e264e45398f7087734fcf2023a7a4c880f562f46f14cdc1bf472d74bc0c777b1021ff75de086c08f72a41399d3a3065b2f50a531cc90edbf88370ff50ba1aa6cc59076165a3ab90a3c90527b7c9711cf85bbb0cb0aebc47ab5c65458c40020f2cfb10e5f0a1594ae491e8756446e6873a8b222ae7e58dd7640666e359fc583e17ed6bcb30c0fafbba761e756ca80286d38bb92dd9ba17c1bb628e5b8d52c9a02a67f788ab88dca817cb4886942a279e06f45c8c936f5c46e1a008097471ca0ee26bcfabf7adb9c90a10539d960dec5c84464f6bc68318e7e899acf20ea41b071132d7a5945e941334855ce6149deaae1b5b83045e83bfc208079e6e58ebb4176b126c743111c5a712f465a3007d665ac21c43a544947c9d13e5206a21025f6acd47c2d333e648dcbf2e4989a1d4a176fe8f7a8cf0aeaf9736118b036639cb35810ea88213ff2a0842d420d418d026a101222a4ebd18fc89f04b5a9056ca6c00308936679474fa83bdf6eac126c9be33c551bccd42d8000736ed9a64ff7cb87d44c9bcf821c96dcd34aadfcc42fabd5976cedc9a4eef24764168056d0645c7aa007d69df4fa8de1224a56f0799ad59ee5c84418a1faae590b6c896cdd808376b6b51b217fcad5fbd7e3208d009e37484378df3ee5969f817d715d60fdd02c04e3fdd62a29285ac92f6836cbeb4d04d84c396150b2e17828d924013978173c48635e0b1ad4a0c5956717629794b39cf18d599e723d3c24689a5fea6cc1f59d1ba1fccfba88e02f9907"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
socket$inet(0x2, 0x1, 0x0) (async)
r2 = socket$inet(0x2, 0x1, 0x0)
socket(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r5=>0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) (async)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0)
write$nci(r4, &(0x7f0000000a40)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x0, 0x2, 0x4, 0x1, 0x1}, 0x4)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xf23}, 0x18}}, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x25, &(0x7f0000000780)={0x0, @in={{0x2, 0x0, @empty}}, 0x2}, 0x90) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x25, &(0x7f0000000780)={0x0, @in={{0x2, 0x0, @empty}}, 0x2}, 0x90)
recvfrom$netrom(r3, &(0x7f0000000180)=""/85, 0x55, 0x20, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) (async)
recvfrom$netrom(r3, &(0x7f0000000180)=""/85, 0x55, 0x20, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) (async)
setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
r9 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r9, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r9, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
io_uring_enter(0xffffffffffffffff, 0x1f27, 0x20b7, 0x0, &(0x7f0000000000)={[0x5605111c]}, 0x8) (async)
io_uring_enter(0xffffffffffffffff, 0x1f27, 0x20b7, 0x0, &(0x7f0000000000)={[0x5605111c]}, 0x8)
listen(r9, 0x0)
listen(r2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

898.39633ms ago: executing program 0 (id=7):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = dup(r2)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000fffffff1eccadfd5b584ff16", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x66, 0x0, 0x0, 0x2000000}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000000)=0xc609, 0x4)
r5 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r7 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x1, 0x18e}, &(0x7f0000000000)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
r10 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000440)={r11, 0x3, 0x3, 0xe72}, 0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000480)={r11, @in6={{0xa, 0x4e20, 0x3, @empty, 0x8000}}, 0x7, 0x81}, &(0x7f0000000100)=0x90)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0)
write$char_usb(r6, 0x0, 0x0)
r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r12, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r5)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe)
add_key$user(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffe)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @ioapic={0x2, 0x4, 0x100, 0xb, 0x0, [{0x40, 0x1, 0x9, '\x00', 0xf5}, {0x4, 0x5, 0x3, '\x00', 0x4}, {0xe, 0x8, 0x6f}, {0x10, 0x5c, 0xf, '\x00', 0x8}, {0x4, 0x2, 0x3, '\x00', 0xf9}, {0x0, 0x3, 0xc5, '\x00', 0x2}, {0x1, 0x2, 0xd8, '\x00', 0x5}, {0x7, 0x2e, 0xa, '\x00', 0xe1}, {0x50, 0x1, 0x7, '\x00', 0x6}, {0x6, 0x2, 0x16, '\x00', 0x9}, {0xc, 0x3, 0x2, '\x00', 0xe4}, {0x7, 0x6, 0xe, '\x00', 0x8}, {0x3, 0x9, 0x7f, '\x00', 0x7}, {0x0, 0x4, 0xc}, {0xfa, 0x2f, 0x4, '\x00', 0x7}, {0x8, 0x4, 0x20, '\x00', 0x2}, {0x1, 0x2, 0x2, '\x00', 0x7}, {0x4, 0x8, 0x0, '\x00', 0x4}, {0x0, 0x2e, 0x1, '\x00', 0x3}, {0x7, 0x5, 0x8, '\x00', 0x2}, {0x0, 0xfd, 0x8, '\x00', 0x2}, {0x5, 0x40, 0x5, '\x00', 0x7c}, {0x7f, 0x5, 0x1, '\x00', 0x6}, {0x2, 0x3, 0x81, '\x00', 0x9}]}})
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x434fdd1ac86a44e6, 0x0, [0xfffffffffffffffa, 0x9b, 0x40000ffffffff, 0x9, 0xfffffffffffffff7, 0x6, 0x3000000002, 0xd]})

457.992628ms ago: executing program 2 (id=28):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x30, r2, 0x1, 0x0, 0xfffffffd, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}]}, 0x30}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

401.267024ms ago: executing program 1 (id=30):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x140d, 0x2, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000030000000000000018110000144800befbc6c6ad83ee749a83a5c0", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000000660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

400.906559ms ago: executing program 2 (id=31):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r2, 0x8b2d, &(0x7f0000000040))
r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
write(r3, &(0x7f0000000380)="2cd889f03e14f3c3", 0x8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x28, r7, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="0c1a0d1000"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x816)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0xff, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x1, 0x3631564e, 0x9, 0x0, [{0x8, 0xf}, {0x8, 0x5d4}, {0xf, 0x8}, {0x5, 0x8}, {0x5, 0x3}, {0x4, 0x3}, {0x6, 0x40d}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a34277310, 0x1}})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)

305.741422ms ago: executing program 1 (id=32):
io_uring_setup(0x75c5, &(0x7f0000000040)={0x0, 0x4568, 0x100, 0x0, 0x3a2})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = dup(r2)
write$tun(r3, 0x0, 0x1c)
request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='\x00', r1)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x2}}, 0x20)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty, 0x2}, {0xa, 0x0, 0xfffffffd, @rand_addr=' \x01\x00', 0xc6}, r8, 0x1000}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r6}}, 0x48)
r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000008c"])
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1b, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
io_uring_setup(0x75c5, &(0x7f0000000040)={0x0, 0x4568, 0x100, 0x0, 0x3a2}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) (async)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
dup(r2) (async)
write$tun(r3, 0x0, 0x1c) (async)
request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='\x00', r1) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) (async)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty, 0x2}, {0xa, 0x0, 0xfffffffd, @rand_addr=' \x01\x00', 0xc6}, r8, 0x1000}}, 0x48) (async)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r6}}, 0x48) (async)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000008c"]) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1b, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)

303.604384ms ago: executing program 3 (id=34):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000ffffff7f000000000000000085000000210000009500000000000200"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

303.29522ms ago: executing program 2 (id=35):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='.'], 0x20)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mkdir(0x0, 0x0)
chdir(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000110000e006"])
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="88450300000000002c00128009000100626f6e64000000001c000280050001000600000008000200", @ANYRES32=0x0, @ANYBLOB="08001400"], 0x4c}, 0x1, 0x0, 0x0, 0x20000894}, 0x40)

302.690801ms ago: executing program 3 (id=36):
syz_emit_ethernet(0x7a, &(0x7f00000006c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x44, 0x2f, 0x1, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88ca}}}}}}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f2021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x140d, 0x100a, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x20000004)

211.403156ms ago: executing program 3 (id=37):
syz_emit_vhci(&(0x7f0000000880)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}})
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000540)={0x2, {0x2, 0x2301, 0x14ec, 0x2}})
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b, 0x0, 0x78}, 0xe)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r4 = io_uring_setup(0x3b2f, &(0x7f0000000000)={0x0, 0x603b, 0x10, 0x1, 0x2a8})
r5 = socket(0x11, 0x3, 0xffffffed)
setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4)
ppoll(&(0x7f0000000c40)=[{r5, 0x20}], 0x1, 0x0, 0x0, 0x300)
close(r4)
close_range(r3, 0xffffffffffffffff, 0x0)

140.810764ms ago: executing program 2 (id=38):
read(0xffffffffffffffff, &(0x7f0000000000)=""/42, 0x2a)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
dup3(r1, r0, 0x0)
r2 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x400)
ioctl$RTC_WKALM_RD(r2, 0x40187013, &(0x7f0000000440))
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce03d4}, 0x9c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e23, 0x80000001, @empty}}, 0xffffff27, 0xfff8, 0xbd1, 0x2, 0x25, 0x0, 0x6}, &(0x7f0000000000)=0x9c)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x9}, 0xc)
write(r6, &(0x7f0000000180)="c91f3126251a1bc2b3a9dfc1463caf365cbc07e7c3e79cd89aa35134f41bd2a7173ff10aa8731aec93026323450ec6e5936b8e9c27d6fb3c0f5e90b9de39a28142f5de7433c61cea135b5e40508924b11b5d7076b50faadc8e1f5b71a4230065fc15ba628e8e6ae3832c12473c273bfe57a8b2d7dd927a763d65b662f4271621b71e1457cafc999c450f73e3ee78811666aea3bec233d635", 0x98)
r7 = syz_io_uring_setup(0x239, &(0x7f00000001c0)={0x0, 0x0, 0x11900}, &(0x7f0000000000)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8746}})
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e21, 0x40, @empty, 0xfffffff9}, 0x1c)
io_uring_enter(r7, 0x6256, 0x0, 0x0, 0x0, 0x0)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000140)="24000000010006", 0x7)

133.434923ms ago: executing program 2 (id=39):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10)
fcntl$setstatus(r0, 0x4, 0x0) (async)
r1 = dup(r0)
copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r3, &(0x7f0000001640), 0x400000000000062, 0x34000, 0x0) (async)
socket$kcm(0x2, 0xa, 0x2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000640)={'#! ', './file0'}, 0xb) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r4, 0x8, 0x1, 0x6, &(0x7f0000000100)=[0x0], 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', <r6=>0x0}) (async)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)={0x1, <r7=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="23000000600000000000000034dafae0ae6c8897acb5fbdd4394df1ed6a9b51f1c641f7aaba661d466e89162cdf8249d7fb58afe006b10e25e0e9dd592a78a2a69f0fbcec636430fb37118ece0ff91270c2510bbf276567702df80f2d181b053d7a1b6c58c18afb4fb3b23815ebbf884100502c92a65af75b3f720da17ed38c00ae17d1fd61e68d4af46d33c550268616332cbb374c6c85b402a164b6a819bb0c9276d0016da14b83a9af980ce40a6c1b38f9c2e950093139cc8c691dc7d6fc6bfd931de3842b90bc11a427852f24f72000000000000", @ANYRES32=r7, @ANYRES64=r5], 0x20) (async)
syz_io_uring_setup(0x3485, &(0x7f0000000000)={0x0, 0x93d5, 0x200, 0x1, 0x239, 0x0, r4}, &(0x7f0000000080), &(0x7f00000000c0)) (async)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x501800, 0x0)
bind$unix(r8, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0)

132.632778ms ago: executing program 1 (id=40):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000240)={0x8001, 0x56544943, 0x1, @stepwise={0x6, 0x9, 0x7, 0x1000, 0x1, 0x4}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x810000, &(0x7f0000000580)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x38, 0x65]}}]}) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x200400, 0x18a) (async)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
r2 = accept4(r1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x62ea0000, 0x0, 0x80000}}}}}, 0x0) (async)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async)
r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x101200)
ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000001c0)={0x2, 0x6}) (async)
recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @sdr={0x34325258, 0x4}})

60.10835ms ago: executing program 2 (id=41):
keyctl$dh_compute(0x17, &(0x7f0000000d80), &(0x7f0000000dc0)=""/229, 0xe5, &(0x7f0000000f00)={&(0x7f0000000ec0)={'cryptd(blake2b-160)\x00'}})
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000070100800c0001"], 0x114}], 0x1}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fc000000000000000000000000000000ff02000000000000000000000000000100004001", @ANYRESOCT=r0, @ANYRES32=0x41424344, @ANYBLOB="2abbaf7200000000"], 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140017eefb020000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x8084)
sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80)
r5 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r6, 0x40025b0c, &(0x7f0000000000))
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r10)
sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x14, r11, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4010044)
r12 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_int(r12, 0x29, 0x50, 0x0, &(0x7f0000000980))
sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x14, r11, 0x800, 0x70bd25, 0x259fdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="7000000018000500000000000000000002000000000200090000000006001500040000004c0016804800088044000180", @ANYRES64=r8], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x20000010)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x101400, 0x0)
ioctl$KVM_GET_API_VERSION(r13, 0xae00, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x13a, &(0x7f0000000500)={{0x12, 0x1, 0x250, 0xe8, 0xce, 0xd8, 0x8, 0x93a, 0x2608, 0x4fa9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x128, 0x2, 0x4, 0x9, 0x60, 0xfe, [{{0x9, 0x4, 0xa9, 0x3, 0x6, 0xca, 0x44, 0xdb, 0xf7, [], [{{0x9, 0x5, 0x7, 0x12, 0x200, 0x4, 0x7, 0x4}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x1e, 0x9, 0xbc}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x1, 0xc8, 0x4}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x5, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x5e, 0x3}, @generic={0x82, 0x10, "6f7d6ff81878cbd7c3e4d9fa29179c837ad5c5622216a38afb416de54a0bd246f6779e5e4e50213db15a11022ab54b5713adf48c6fecbfe5a54133ebff6595f8f446f7325fac5365b48281138976d88d057bf6bface1d0c6ac3f9e5956a074ec26cf96e370b1852bbc1a2ce3aba0889db8717d016751b4f90d4fb10cdec5f8e4"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0xdd, 0xe, 0xc, [@generic={0x6, 0x1b, "5d4fbabd"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x9}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x5, 0x45, 0x7}}]}}, {{0x9, 0x4, 0xe0, 0x5, 0x0, 0x4d, 0xd5, 0xa1, 0x75, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x10}, [@extension_unit={0xd, 0x24, 0x8, 0x1, 0x7fff, 0x8, "81b43bbf4786"}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x10}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x4, 0x4, 0x2, 0x2, 0x7}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x303, 0x1, 0x6, 0x2}, @feature_unit={0x11, 0x24, 0x6, 0x3, 0x2, 0x5, [0x9, 0x9, 0x6, 0x9, 0x2], 0xa7}]}]}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x5, 0x3, 0xfe, 0x40, 0x45}, 0x36, &(0x7f0000000280)={0x5, 0xf, 0x36, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0xff, 0x8, 0x9, 0xd}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1ff, 0xf, 0x7a4f, [0x7f800f, 0xff000f, 0xc0, 0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x3, 0xe}]}, 0x7, [{0x55, &(0x7f0000000640)=@string={0x55, 0x3, "f2385b49f8545e1c899e39c23ea0e842a47776f08d9c402e7ac3088592cdf7e103d19d9d4a06148dbf6273d1043e1d9cb571425606b9ee8b610d1b12dfa48b1af98d4535a93688d193bbc82cd33d3072dca2a9"}}, {0x18, &(0x7f0000000480)=@string={0x18, 0x3, "501f8cc4512a5ab532678acc4f2ac5a716b37cbafa69"}}, {0xe2, &(0x7f00000009c0)=@string={0xe2, 0x3, "63ba24dcc196173eac5df43c69c283f8369bc675b4cea299df6151329da56664ad577a38d7b7e8d8c1b239bdf9bcdc8aa5fe796873fd7b7b9a66e28c8afb6461a931671d5fef8a2956b0e760ac11265c9cf9cbe0c7c020802ce996117e75529814ad25779502dea6a69f5e9cfc0ad914648a8502d627eca455aaa8ed6ece090b132c91dfd0f1b774c83ca6488cd985e13eef70de3a1e224283bb8113b94b131ec6217a099adcd02529711e579b4ac6c0345291c2e0cd27120a8eb9867bf4a089106d7c0e2f87f3e93231f2a9e69123952ac4684ee43fa722d7faf84db8a3fc8f"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x500a}}, {0xe8, &(0x7f0000000ac0)=@string={0xe8, 0x3, "ab63837f76ef0c1988482ec6bdd8be4ae9a98a7ac6820337568295db37429e5a5a85d8070be149a29a1d9729390b065f2988ea7ef8cfb8bce3f08234bd676e6ad7846306b0822db36a5b8e5f8ca32a5f47de3f08226ad7971c6dd3386ffb5d5cad4326186967bcc71debff94a545179df935e0090209a72af99e6de733b1062c31687974acf3326af3f208e00c035735f76f9b21020795494a6ff08ed01fa855bca0c49891b7914202e67906a84703db0f1c4a73048a97f554ccb043d529febf5ddd104ec0d0e28261902e12443b7877e0b9b7755d4e47f6dca78516d20df4b101aca62fc14c"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x4001}}]})

59.813362ms ago: executing program 1 (id=42):
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
readv(r0, &(0x7f0000001f40)=[{0x0}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000540)=""/35, 0x23}, {0x0, 0x2400}, {0x0}], 0x5)
syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="041406"], 0x9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1803000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="840100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="80040000000000000a000100aaaaaaaaaa150000080004"], 0x318}}, 0x20040800)
syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800303afffe8000000000000000000000000000aaff0200000000000000000000000000018700907800000000fe8000000000000000000000000000aa0e02000000000000000000000000000101012025b07f3c58ce970cbc81417e4d064e994ecca84e36887eafc8b30a38bb4cb085ebbff1624c3462ed24586ff41e04aabc3b4b67cfe1163429f9"], 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}, @CTA_NAT_PROTO={0x4}]}]}, 0x74}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
setrlimit(0x8, &(0x7f0000000000))
mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='ac,,'])
socket$nl_generic(0x10, 0x3, 0x10)
r3 = userfaultfd(0x80001)
syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
r5 = socket(0x1e, 0x1, 0x0)
connect$tipc(r5, &(0x7f0000000040)=@id, 0x10)
close_range(r3, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000100000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80154844}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, r6, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x7, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x30004000}, 0x844)

59.596771ms ago: executing program 3 (id=43):
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20000841) (async)
r0 = socket(0x10, 0x80002, 0x0) (async)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00')
pread64(r1, &(0x7f0000000080)=""/237, 0xed, 0x5) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x3069e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001500010029bd7000003037c40000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x400, 0x70bd2c, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000081}, 0xc0)

58.782391ms ago: executing program 3 (id=44):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x8005, 0x103800)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x93}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0x1000, &(0x7f0000001780)=""/4096, 0x81e00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x4, 0x2, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x1], &(0x7f0000000300)=[{0x6, 0x4, 0x5, 0x3}], 0x10, 0x3fa9}, 0x94)
signalfd4(r0, &(0x7f0000000500)={[0x100000001]}, 0x8, 0x80000)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xca, &(0x7f0000000400)=""/202, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4)
sendmmsg(r2, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000011c0)="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", 0x5a2}], 0x1}}], 0x1, 0x4004808)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)
syz_open_dev$video4linux(&(0x7f0000000080), 0x8005, 0x103800) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x93}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0x1000, &(0x7f0000001780)=""/4096, 0x81e00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x4, 0x2, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x1], &(0x7f0000000300)=[{0x6, 0x4, 0x5, 0x3}], 0x10, 0x3fa9}, 0x94) (async)
signalfd4(r0, &(0x7f0000000500)={[0x100000001]}, 0x8, 0x80000) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xca, &(0x7f0000000400)=""/202, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async)
setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) (async)
sendmmsg(r2, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000011c0)="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", 0x5a2}], 0x1}}], 0x1, 0x4004808) (async)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) (async)

1.521009ms ago: executing program 1 (id=45):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]]}, 0x34}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x20000040)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]]}, 0x34}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x20000040) (async)

274.251µs ago: executing program 3 (id=46):
r0 = syz_io_uring_setup(0x40e9, &(0x7f0000000300)={0x0, 0x172a, 0x2, 0x3, 0x35a}, &(0x7f0000000080), &(0x7f0000000280))
mmap$IORING_OFF_SQ_RING(&(0x7f00007dd000/0x2000)=nil, 0x2000, 0x8, 0x10, r0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x2, 0x0, 0x0, &(0x7f0000000440)=""/164, &(0x7f0000000100)=""/47, 0xf000})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340))
r3 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r3})
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f0000000c00), &(0x7f0000002000)=0x2)
syz_io_uring_setup(0x1e1e, &(0x7f00000003c0)={0x0, 0xca45, 0x8000, 0x3, 0x100}, 0x0, 0x0)
r5 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x22000, 0x0)
ioctl$RTC_AIE_OFF(r5, 0x7002)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3)
mlock(&(0x7f0000629000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'pcl726\x00', [0x9e1, 0x2166, 0x4, 0x100000, 0x88d7, 0x8f, 0x0, 0x10, 0x1002, 0xffffffff, 0x200, 0x8, 0x344, 0x1, 0x7, 0xfffffff9, 0x8, 0x3, 0x9, 0xe, 0x100, 0xffffffff, 0x7, 0xe, 0x2, 0x1, 0xb0c4, 0x7df, 0x8, 0x80000000, 0x3]})
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r7, &(0x7f0000a34fff)='H', 0x1, 0x2004a840, &(0x7f00000002c0)={0x2, 0x4e22, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r7, &(0x7f0000000380)="bf", 0x1, 0x24008083, &(0x7f00000000c0)={0x2, 0x4e1f, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r8, 0x0)
shutdown(r7, 0x1)

0s ago: executing program 1 (id=47):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000000)={0x4, 0x6, {0x5b99, @usage=0x8000000000000000, 0x0, 0x8001, 0x9, 0x3, 0xffff, 0x3, 0x63, @struct={0xf7c, 0x1}, 0x6, 0x7f, [0x5, 0x81, 0x31, 0xae, 0x0, 0x8]}, {0xbb72, @usage=0x4, <r1=>0x0, 0x7, 0xfff, 0x3, 0xffffffffffffffff, 0x7, 0x50, @usage=0x10001, 0xfe, 0xa, [0x3, 0xf, 0x6, 0x1, 0x7f]}, {0x0, @usage=0x8ea, 0x0, 0x1, 0xffffffffffff8000, 0x10, 0x3, 0x7, 0x51, @struct={0x4d4, 0x2db1}, 0x3763, 0x8001, [0xe7, 0x2, 0xffff, 0x37, 0x6, 0xffff]}, {0xff, 0x850f, 0x982f}})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000400)={r1, "c89ed12d1c51a6a0ee598675d709c910"})
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000001440)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128-generic\x00'}, 0x58)
write$eventfd(0xffffffffffffffff, &(0x7f00000014c0)=0x6, 0x8)
r3 = gettid()
prctl$PR_SCHED_CORE(0x3e, 0x3, r3, 0x3, &(0x7f0000001500))
r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001540), 0x400000, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x74}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x4000)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000016c0), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001700)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x2c, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000001800))
mq_notify(r4, &(0x7f0000001840)={0x0, 0x1c, 0x2, @tid=r3})
write$nci(r4, &(0x7f0000001880)=@NCI_OP_CORE_INIT_RSP={0x0, 0x1, 0x2, 0x1, 0xd6, {{0x1, 0xb7a, 0x6c, "af3f439ca8c51fbedb082a636726941a4456e6ea451a7befafc486d7c5fa87f6d45957b58008b5c4d5f593f2b07c82b3ee4ca280e75a30528fe394cd99f7069c7cc6b23a330c8cec4e8c0124e382e56ce7a9bf1405e6d1fea9c62f3673e09ec41a35bf1358eca3637447305d"}, {0xcc, 0x6, 0x6, 0x4, 0x0, 0x1}}}, 0x80)
recvmsg(r2, &(0x7f0000001ac0)={&(0x7f0000001900)=@un=@abs, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001980)=""/204, 0xcc}], 0x1}, 0x0)
syz_create_resource$binfmt(&(0x7f0000001b00)='./file0\x00')
sendmsg$inet(r2, &(0x7f0000001e40)={&(0x7f0000001b40)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001dc0)=[{&(0x7f0000001b80)="8a38c1ce8d6d200dcb918ae8c60ac9040aca18b77ed0d266c81df185101fd3619d6a4e245171288441835ef4139c85bb86e364545e3eeb52675e9091bc2001f1a43c102f36856a6eefd5ab42e20a65329c8bc662d86483751f9ab90c01fd826d64dad7e7a0b4ee268fa778d98342499d9ce21b7e4f9d8132aee1e71edb23668443c1dbb63e43a51ca54f02b0f85b4c454ec6fbb367feb9dc7fa192f783a1d6bf1544e8ae8502f762f84b121e5c1523979a53da581327d865781e190e1ca14c685b326bc899365dc710d3ee86430b00f3225bebc5ea371f010e030852e31165b05084d284b27c48bdf6d7eb6d72f405e26e0408", 0xf3}, {&(0x7f0000001c80)="d56bf80412e5680607eb97bbec3e2042026393a69d93ac30044c9ec6f613f4445d208aaa5c3308dd22295d2af3703c4bb1ba57d84af666b08755f545695f7e368f3507592461dc7b33f8c3875fcd6312227f8710672891c357", 0x59}, {&(0x7f0000001d00)="c6d086bec0b84c90ad0d434843022e0163f647e4a62a8f9ce0c72e05baa36dfceaa8d67d1db984cf30256f315e78b793c6b856bc693b8cc56c9585c6e271d9f49e9300ba1b4e54e365c8e7640a8b89ea6ec1d325", 0x54}, {&(0x7f0000001d80)="e308b88c9ee5", 0x6}], 0x4, &(0x7f0000001e00)}, 0x4000010)
r7 = syz_clone(0x1000000, &(0x7f0000001e80)="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", 0xfd, &(0x7f0000001f80), &(0x7f0000001fc0), &(0x7f0000002000)="60a9944ff0f0875f0ace227f8f09acafdf89aab9f654d35be692580a9f086a905e8f6441d926d68da210f5f60bb3054d952a6a2c0e0f0d5359130fbc4d131d5aff4ca7e02eceaa8e7cda711c36ae463bb563ac32adaeb7c1b547b8f0b277fcd373d852")
r8 = syz_open_procfs(r7, &(0x7f0000002080)='net/protocols\x00')
r9 = accept$packet(r4, &(0x7f00000020c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002100)=0x14)
recvmsg(r9, &(0x7f0000004580)={&(0x7f0000002140)=@ax25={{0x3, @default}, [@bcast, @bcast, @rose, @netrom, @bcast, @null, @null, @default]}, 0x80, &(0x7f00000044c0)=[{&(0x7f00000021c0)=""/89, 0x59}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000003240)=""/178, 0xb2}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/201, 0xc9}, {&(0x7f0000004400)=""/152, 0x98}], 0x6, &(0x7f0000004540)=""/54, 0x36}, 0x22)
ioctl$CEC_DQEVENT(r4, 0xc0506107, &(0x7f00000045c0)={0x0, 0x0, 0x0, @lost_msgs})
setsockopt$inet_tcp_buf(r4, 0x6, 0xe, &(0x7f0000004640)="0145e8ec0d2110dc74baa992d924759bd00d6a90164fc5a87a46942bcc812a963c871d0f70b27946f126bea7d5d11f12938618c5ae69a81a25c324dee9cb96711c750f719c682dc7f97a931225ed5c4ef62777c94c65afc0fc63e41ad1ccb9e8564db708123bb50dde5d3c836f09fbed6b0cf2facbabbefa615fe7481904a6b10a4bf47cc347b992db7c41a4b5f3d4db3f5965324df10e148b031ea69e0dd7b90a7d18d960a781d207ad48df1ff752bc79539cb0883920d54fa800fe5c78a34dedc22c2d3b9aa1aac3bba2e72859390622c28d25d424c75d8eab6fea10bab1e5", 0xe0)
r10 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000004740)={'wlan1\x00'})
recvmmsg(0xffffffffffffffff, &(0x7f000000b000)=[{{0x0, 0x0, &(0x7f0000004a80)=[{&(0x7f0000004780)=""/162, 0xa2}, {&(0x7f0000004840)=""/3, 0x3}, {&(0x7f0000004880)=""/55, 0x37}, {&(0x7f00000048c0)=""/13, 0xd}, {&(0x7f0000004900)}, {&(0x7f0000004940)=""/182, 0xb6}, {&(0x7f0000004a00)=""/89, 0x59}], 0x7, &(0x7f0000004b00)=""/229, 0xe5}, 0x7f}, {{&(0x7f0000004c00)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004c80)=""/19, 0x13}], 0x1, &(0x7f0000004d00)=""/4096, 0x1000}, 0x2a4}, {{&(0x7f0000005d00)=@ax25={{0x3, @bcast}, [@null, @bcast, @rose, @remote, @bcast, @netrom, @rose]}, 0x80, &(0x7f0000007140)=[{&(0x7f0000005d80)=""/51, 0x33}, {&(0x7f0000005dc0)=""/214, 0xd6}, {&(0x7f0000005ec0)=""/4096, 0x1000}, {&(0x7f0000006ec0)=""/198, 0xc6}, {&(0x7f0000006fc0)=""/74, 0x4a}, {&(0x7f0000007040)=""/237, 0xed}], 0x6}, 0x3}, {{0x0, 0x0, &(0x7f0000008540)=[{&(0x7f00000071c0)=""/205, 0xcd}, {&(0x7f00000072c0)=""/60, 0x3c}, {&(0x7f0000007300)=""/93, 0x5d}, {&(0x7f0000007380)=""/4096, 0x1000}, {&(0x7f0000008380)=""/242, 0xf2}, {&(0x7f0000008480)=""/13, 0xd}, {&(0x7f00000084c0)=""/59, 0x3b}, {&(0x7f0000008500)=""/40, 0x28}], 0x8, &(0x7f00000085c0)=""/3, 0x3}, 0xcbe}, {{&(0x7f0000008600)=@un=@abs, 0x80, &(0x7f0000009680)=[{&(0x7f0000008680)=""/4096, 0x1000}], 0x1, &(0x7f00000096c0)=""/11, 0xb}, 0xf37}, {{&(0x7f0000009700)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000009ac0)=[{&(0x7f0000009780)=""/37, 0x25}, {&(0x7f00000097c0)=""/224, 0xe0}, {&(0x7f00000098c0)=""/131, 0x83}, {&(0x7f0000009980)=""/164, 0xa4}, {&(0x7f0000009a40)=""/89, 0x59}], 0x5, &(0x7f0000009b40)=""/37, 0x25}, 0x200}, {{&(0x7f0000009b80)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000009d80)=[{&(0x7f0000009c00)=""/219, 0xdb}, {&(0x7f0000009d00)=""/106, 0x6a}], 0x2, &(0x7f0000009dc0)=""/82, 0x52}, 0xab59}, {{0x0, 0x0, &(0x7f000000aec0)=[{&(0x7f0000009e40)=""/4096, 0x1000}, {&(0x7f000000ae40)=""/88, 0x58}], 0x2, &(0x7f000000af00)=""/218, 0xda}, 0x200}], 0x8, 0x100, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f000000b200)=0x20808, 0x4)

kernel console output (not intermixed with test programs):

[   38.177673][   T40] audit: type=1400 audit(1752566827.009:60): avc:  denied  { rlimitinh } for  pid=5853 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   38.183312][   T40] audit: type=1400 audit(1752566827.009:61): avc:  denied  { siginh } for  pid=5853 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '[localhost]:53132' (ED25519) to the list of known hosts.
[   39.612000][   T40] audit: type=1400 audit(1752566828.459:62): avc:  denied  { name_bind } for  pid=5860 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   39.630383][   T40] audit: type=1400 audit(1752566828.479:63): avc:  denied  { write } for  pid=5862 comm="sh" path="pipe:[7188]" dev="pipefs" ino=7188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   39.642224][   T40] audit: type=1400 audit(1752566828.489:64): avc:  denied  { execute } for  pid=5862 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   39.650790][   T40] audit: type=1400 audit(1752566828.489:65): avc:  denied  { execute_no_trans } for  pid=5862 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   41.612428][ T5862] cgroup: Unknown subsys name 'net'
[   41.615400][   T40] audit: type=1400 audit(1752566830.459:66): avc:  denied  { mounton } for  pid=5862 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   41.749160][ T5862] cgroup: Unknown subsys name 'cpuset'
[   41.752807][ T5862] cgroup: Unknown subsys name 'rlimit'
[   41.995433][ T5930] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   42.660629][ T5862] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.467348][   T40] kauditd_printk_skb: 13 callbacks suppressed
[   45.467362][   T40] audit: type=1400 audit(1752566834.319:80): avc:  denied  { execmem } for  pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   45.651564][   T40] audit: type=1400 audit(1752566834.499:81): avc:  denied  { create } for  pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   45.660253][   T40] audit: type=1400 audit(1752566834.499:82): avc:  denied  { read write } for  pid=5945 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   45.667491][   T40] audit: type=1400 audit(1752566834.499:83): avc:  denied  { open } for  pid=5945 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   45.674618][   T40] audit: type=1400 audit(1752566834.509:84): avc:  denied  { ioctl } for  pid=5945 comm="syz-executor" path="socket:[5947]" dev="sockfs" ino=5947 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   45.705195][ T5955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.708042][ T5955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.710417][ T5955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.712975][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.714250][ T5959] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.715545][ T5962] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.720032][ T5959] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.724132][ T5961] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   45.725812][   T40] audit: type=1400 audit(1752566834.569:85): avc:  denied  { read } for  pid=5945 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   45.725830][ T5959] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.727960][ T5961] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   45.730371][ T5960] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.731408][ T5960] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.731728][ T5960] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.732548][   T40] audit: type=1400 audit(1752566834.569:86): avc:  denied  { open } for  pid=5945 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   45.732641][   T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.735553][ T5961] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   45.736773][   T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.738887][   T40] audit: type=1400 audit(1752566834.579:87): avc:  denied  { mounton } for  pid=5945 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   45.740230][ T5961] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   45.740594][ T5961] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   45.741832][   T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.769162][   T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.893475][   T40] audit: type=1400 audit(1752566834.739:88): avc:  denied  { module_request } for  pid=5954 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   45.918643][ T5954] chnl_net:caif_netlink_parms(): no params data found
[   46.061589][ T5947] chnl_net:caif_netlink_parms(): no params data found
[   46.065974][ T5945] chnl_net:caif_netlink_parms(): no params data found
[   46.073102][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.077180][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.079531][ T5954] bridge_slave_0: entered allmulticast mode
[   46.082111][ T5954] bridge_slave_0: entered promiscuous mode
[   46.088506][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.090752][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.092978][ T5954] bridge_slave_1: entered allmulticast mode
[   46.095699][ T5954] bridge_slave_1: entered promiscuous mode
[   46.161030][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.178700][ T5948] chnl_net:caif_netlink_parms(): no params data found
[   46.184119][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.240758][ T5954] team0: Port device team_slave_0 added
[   46.291349][ T5954] team0: Port device team_slave_1 added
[   46.309042][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.311338][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.313498][ T5945] bridge_slave_0: entered allmulticast mode
[   46.316528][ T5945] bridge_slave_0: entered promiscuous mode
[   46.339858][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.342117][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.344328][ T5947] bridge_slave_0: entered allmulticast mode
[   46.347175][ T5947] bridge_slave_0: entered promiscuous mode
[   46.350217][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.352438][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.354635][ T5947] bridge_slave_1: entered allmulticast mode
[   46.357746][ T5947] bridge_slave_1: entered promiscuous mode
[   46.360097][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.362316][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.364567][ T5945] bridge_slave_1: entered allmulticast mode
[   46.367165][ T5945] bridge_slave_1: entered promiscuous mode
[   46.434063][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.436902][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.439215][ T5948] bridge_slave_0: entered allmulticast mode
[   46.441789][ T5948] bridge_slave_0: entered promiscuous mode
[   46.444889][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.447156][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.454986][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.459576][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.461725][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.469645][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.488051][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.504602][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.507825][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.510079][ T5948] bridge_slave_1: entered allmulticast mode
[   46.512629][ T5948] bridge_slave_1: entered promiscuous mode
[   46.519341][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.523881][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.554671][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.570955][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.588773][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.656366][ T5947] team0: Port device team_slave_0 added
[   46.659822][ T5945] team0: Port device team_slave_0 added
[   46.664141][ T5954] hsr_slave_0: entered promiscuous mode
[   46.666773][ T5954] hsr_slave_1: entered promiscuous mode
[   46.684947][ T5947] team0: Port device team_slave_1 added
[   46.688035][ T5945] team0: Port device team_slave_1 added
[   46.704554][ T5948] team0: Port device team_slave_0 added
[   46.746824][ T5948] team0: Port device team_slave_1 added
[   46.765876][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.768687][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.778872][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.782595][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.784769][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.792719][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.823610][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.825949][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.834891][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.840192][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.842361][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.850449][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.876396][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.878556][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.886370][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.892430][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.894578][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.902396][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.981391][ T5947] hsr_slave_0: entered promiscuous mode
[   46.983640][ T5947] hsr_slave_1: entered promiscuous mode
[   46.987515][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.989944][ T5947] Cannot create hsr debugfs directory
[   47.006811][ T5945] hsr_slave_0: entered promiscuous mode
[   47.008966][ T5945] hsr_slave_1: entered promiscuous mode
[   47.010912][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.013238][ T5945] Cannot create hsr debugfs directory
[   47.079954][ T5948] hsr_slave_0: entered promiscuous mode
[   47.082091][ T5948] hsr_slave_1: entered promiscuous mode
[   47.084066][ T5948] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.086469][ T5948] Cannot create hsr debugfs directory
[   47.295076][ T5954] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.302931][ T5954] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.311053][ T5954] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.318796][ T5954] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.351171][ T5945] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.358027][ T5945] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.362183][ T5945] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.375881][ T5945] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.411410][ T5947] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   47.417578][ T5947] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   47.421693][ T5947] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   47.425925][ T5947] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   47.473293][ T5948] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.480591][ T5948] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.484439][ T5948] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.489474][ T5948] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.512505][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.538063][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.550660][ T5954] 8021q: adding VLAN 0 to HW filter on device team0
[   47.564110][ T5945] 8021q: adding VLAN 0 to HW filter on device team0
[   47.574264][  T101] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.576631][  T101] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.580469][  T101] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.582675][  T101] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.593719][  T101] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.596012][  T101] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.600738][  T101] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.602965][  T101] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.619629][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.632149][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.637062][ T5948] 8021q: adding VLAN 0 to HW filter on device team0
[   47.652324][ T1210] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.654530][ T1210] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.664788][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.667111][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.676422][ T5947] 8021q: adding VLAN 0 to HW filter on device team0
[   47.699577][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.701887][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.705498][   T40] audit: type=1400 audit(1752566836.549:89): avc:  denied  { sys_module } for  pid=5945 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   47.705630][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.714010][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.740891][ T5948] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   47.744027][ T5948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.782833][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.796057][   T63] Bluetooth: hci3: command tx timeout
[   47.798226][ T5950] Bluetooth: hci1: command tx timeout
[   47.805377][ T5950] Bluetooth: hci2: command tx timeout
[   47.805874][   T63] Bluetooth: hci0: command tx timeout
[   47.813343][ T5945] veth0_vlan: entered promiscuous mode
[   47.818193][ T5945] veth1_vlan: entered promiscuous mode
[   47.835661][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.841275][ T5945] veth0_macvtap: entered promiscuous mode
[   47.859212][ T5945] veth1_macvtap: entered promiscuous mode
[   47.863902][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.888710][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.893836][ T5954] veth0_vlan: entered promiscuous mode
[   47.899113][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.907319][ T5954] veth1_vlan: entered promiscuous mode
[   47.916409][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.934623][ T5948] veth0_vlan: entered promiscuous mode
[   47.937697][ T5945] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.940446][ T5945] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.943125][ T5945] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.946063][ T5945] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.961557][ T5947] veth0_vlan: entered promiscuous mode
[   47.972204][ T5954] veth0_macvtap: entered promiscuous mode
[   47.975046][ T5948] veth1_vlan: entered promiscuous mode
[   47.983147][ T5947] veth1_vlan: entered promiscuous mode
[   47.990261][ T5954] veth1_macvtap: entered promiscuous mode
[   48.014042][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.018229][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.023466][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.030084][ T5947] veth0_macvtap: entered promiscuous mode
[   48.036789][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.040598][ T5947] veth1_macvtap: entered promiscuous mode
[   48.044801][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.047689][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.049575][ T5948] veth0_macvtap: entered promiscuous mode
[   48.055127][ T5948] veth1_macvtap: entered promiscuous mode
[   48.058605][ T5954] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.061314][ T5954] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.063992][ T5954] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.067485][ T5954] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.078300][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.082536][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.088798][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.100588][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.103588][ T5947] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.106577][ T5947] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.109270][ T5947] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.111943][ T5947] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.118511][ T5945] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.130624][ T5948] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.133350][ T5948] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.136329][ T5948] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.139010][ T5948] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.162159][ T6034] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1'.
[   48.176508][ T1210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.179534][ T1210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.197984][ T6036] netlink: 'syz.0.5': attribute type 10 has an invalid length.
[   48.201772][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.204461][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.211270][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.213474][ T6036] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.216088][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.218279][ T6036] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.222231][ T6036] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   48.229539][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.231990][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.241102][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.243550][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.252848][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.257918][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.283172][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.290307][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.298387][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.301320][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.333128][ T6051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'.
[   48.416818][ T6065] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10'.
[   48.499266][ T6079] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.512174][ T6079] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15'.
[   48.512544][ T6081] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16'.
[   48.520824][ T6081] tipc: Started in network mode
[   48.522547][ T6081] tipc: Node identity aaaaaaaaaa17, cluster identity 4711
[   48.525038][ T6081] tipc: Enabled bearer <eth:bond_slave_0>, priority 6
[   48.645535][ T5994] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   48.817351][ T5994] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   48.819293][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'.
[   48.820053][ T5994] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   48.826117][ T5994] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[   48.828928][ T5994] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   48.832246][ T5994] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   48.840699][ T5994] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   48.843792][ T5994] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   48.847176][ T5994] usb 5-1: Product: syz
[   48.848500][ T5994] usb 5-1: Manufacturer: syz
[   48.861587][ T5994] cdc_wdm 5-1:1.0: skipping garbage
[   48.863373][ T5994] cdc_wdm 5-1:1.0: skipping garbage
[   48.873260][ T5994] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[   48.875798][ T5994] cdc_wdm 5-1:1.0: Unknown control protocol
[   48.895966][ T6116] (syz.1.30,6116,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory.
[   48.908546][ T6118] warning: `syz.2.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   48.934735][ T6123] netlink: 'syz.3.33': attribute type 11 has an invalid length.
[   48.934758][ T6124] netlink: 'syz.3.33': attribute type 11 has an invalid length.
[   48.942091][ T6121] netlink: 32 bytes leftover after parsing attributes in process `syz.3.33'.
[   49.019189][ T6134] netlink: 9 bytes leftover after parsing attributes in process `syz.3.36'.
[   49.022013][ T6134] 0·: renamed from hsr0 (while UP)
[   49.025601][ T6134] 0·: entered allmulticast mode
[   49.027197][ T6134] hsr_slave_0: entered allmulticast mode
[   49.029077][ T6134] hsr_slave_1: entered allmulticast mode
[   49.031137][ T6134] A link change request failed with some changes committed already. Interface 
70· may have been left with an inconsistent configuration, please check.
[   49.036206][ T6132] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6)
[   49.036956][ T6134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=6134 comm=syz.3.36
[   49.144120][ T6139] Bluetooth: MGMT ver 1.23
[   49.169985][ T6144] syz.2.39 uses obsolete (PF_INET,SOCK_PACKET)
[   49.194159][    C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[   49.196312][    C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[   49.197722][   T59] usb 5-1: USB disconnect, device number 2
[   49.198141][    C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[   49.204395][ T6059] cdc_wdm 5-1:1.0: Tx URB error: -19
[   49.214880][ T6153] netlink: 700 bytes leftover after parsing attributes in process `syz.1.42'.
[   49.223032][ T6157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=6157 comm=syz.3.43
[   49.226693][ T6153] Zero length message leads to an empty skb
[   49.274275][ T6172] netlink: 'syz.2.41': attribute type 1 has an invalid length.
[   49.283605][ T6172] netlink: 244 bytes leftover after parsing attributes in process `syz.2.41'.
[   49.302299][ T6158] could not allocate digest TFM handle cryptd(blake2b-160)
[   49.357435][ T6183] ------------[ cut here ]------------
[   49.359259][ T6183] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl726.c:331:46
[   49.361893][ T6183] shift exponent 8550 is too large for 32-bit type 'int'
[   49.365934][ T6183] CPU: 3 UID: 0 PID: 6183 Comm: syz.3.46 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) 
[   49.365950][ T6183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   49.365956][ T6183] Call Trace:
[   49.365961][ T6183]  <TASK>
[   49.365965][ T6183]  dump_stack_lvl+0x16c/0x1f0
[   49.365986][ T6183]  __ubsan_handle_shift_out_of_bounds+0x27f/0x420
[   49.366011][ T6183]  pcl726_attach.cold+0x19/0x1e
[   49.366029][ T6183]  comedi_device_attach+0x3b0/0x900
[   49.366048][ T6183]  do_devconfig_ioctl+0x1a7/0x580
[   49.366065][ T6183]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[   49.366091][ T6183]  ? find_held_lock+0x2b/0x80
[   49.366108][ T6183]  comedi_unlocked_ioctl+0x15bb/0x2e90
[   49.366123][ T6183]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   49.366136][ T6183]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[   49.366147][ T6183]  ? do_vfs_ioctl+0x523/0x1a60
[   49.366160][ T6183]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   49.366175][ T6183]  ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540
[   49.366191][ T6183]  ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540
[   49.366208][ T6183]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   49.366228][ T6183]  ? hook_file_ioctl_common+0x145/0x410
[   49.366242][ T6183]  ? selinux_file_ioctl+0x180/0x270
[   49.366256][ T6183]  ? selinux_file_ioctl+0xb4/0x270
[   49.366271][ T6183]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[   49.366284][ T6183]  __x64_sys_ioctl+0x18e/0x210
[   49.366297][ T6183]  do_syscall_64+0xcd/0x4c0
[   49.366314][ T6183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.366325][ T6183] RIP: 0033:0x7f3ef5d8e929
[   49.366334][ T6183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   49.366343][ T6183] RSP: 002b:00007f3ef6cca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   49.366354][ T6183] RAX: ffffffffffffffda RBX: 00007f3ef5fb5fa0 RCX: 00007f3ef5d8e929
[   49.366360][ T6183] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 000000000000000a
[   49.366367][ T6183] RBP: 00007f3ef5e10b39 R08: 0000000000000000 R09: 0000000000000000
[   49.366373][ T6183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   49.366379][ T6183] R13: 0000000000000000 R14: 00007f3ef5fb5fa0 R15: 00007ffd3ca56498
[   49.366392][ T6183]  </TASK>
[   49.366395][ T6183] ---[ end trace ]---
[   49.439686][ T6183] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[   49.441941][ T6183] CPU: 2 UID: 0 PID: 6183 Comm: syz.3.46 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) 
[   49.445547][ T6183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   49.448830][ T6183] Call Trace:
[   49.449880][ T6183]  <TASK>
[   49.450820][ T6183]  dump_stack_lvl+0x3d/0x1f0
[   49.452295][ T6183]  panic+0x71c/0x800
[   49.453532][ T6183]  ? __pfx_panic+0x10/0x10
[   49.454950][ T6183]  ? __pfx__printk+0x10/0x10
[   49.456420][ T6183]  check_panic_on_warn+0xab/0xb0
[   49.457965][ T6183]  __ubsan_handle_shift_out_of_bounds+0x2a6/0x420
[   49.459967][ T6183]  pcl726_attach.cold+0x19/0x1e
[   49.461498][ T6183]  comedi_device_attach+0x3b0/0x900
[   49.463130][ T6183]  do_devconfig_ioctl+0x1a7/0x580
[   49.464706][ T6183]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[   49.466434][ T6183]  ? find_held_lock+0x2b/0x80
[   49.467918][ T6183]  comedi_unlocked_ioctl+0x15bb/0x2e90
[   49.469626][ T6183]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   49.471527][ T6183]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[   49.473364][ T6183]  ? do_vfs_ioctl+0x523/0x1a60
[   49.474869][ T6183]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   49.476454][ T6183]  ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540
[   49.478457][ T6183]  ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540
[   49.480466][ T6183]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   49.482582][ T6183]  ? hook_file_ioctl_common+0x145/0x410
[   49.484314][ T6183]  ? selinux_file_ioctl+0x180/0x270
[   49.485923][ T6183]  ? selinux_file_ioctl+0xb4/0x270
[   49.487466][ T6183]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[   49.489279][ T6183]  __x64_sys_ioctl+0x18e/0x210
[   49.490782][ T6183]  do_syscall_64+0xcd/0x4c0
[   49.492239][ T6183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.494073][ T6183] RIP: 0033:0x7f3ef5d8e929
[   49.495478][ T6183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   49.501354][ T6183] RSP: 002b:00007f3ef6cca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   49.503931][ T6183] RAX: ffffffffffffffda RBX: 00007f3ef5fb5fa0 RCX: 00007f3ef5d8e929
[   49.506361][ T6183] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 000000000000000a
[   49.508797][ T6183] RBP: 00007f3ef5e10b39 R08: 0000000000000000 R09: 0000000000000000
[   49.511259][ T6183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   49.513704][ T6183] R13: 0000000000000000 R14: 00007f3ef5fb5fa0 R15: 00007ffd3ca56498
[   49.516155][ T6183]  </TASK>
[   49.517807][ T6183] Kernel Offset: disabled
[   49.519200][ T6183] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:07:18  Registers:
info registers vcpu 0

CPU#0
RAX=00000000000a6a13 RBX=0000000000000000 RCX=ffffffff8b885c99 RDX=0000000000000000
RSI=ffffffff8de32e3f RDI=ffffffff8c158f60 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08
R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001
R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a98750 R15=0000000000000000
RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6713000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000020000000aec0 CR3=000000002c6db000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000001df8a
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557871c5e1 000055557871c4e0
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555578720910 0000555578720310
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7003121000600304 8082100050030010 00400301ffffffff ffffffffff100030
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04c0848286100002 10000e8004010000 0e08060c0168aa02 00080007000c0008
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e4247312e626c74 6567756801ffffff ffffffffffbf0804 8003201000038004
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004800401c70800 081048dc00736574 79625f6e695f6567 6173752e64767372
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010210000100000e 080604016fec0010 0001000010080620 1000108080801000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4080100000040c01 4180199880100002 8004010000100806 06017c8600100005
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ba8008000100000a 080606011efa0004 00019db408000480 0401c70800081048
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 dc0073657479625f 6e695f6567617375 2e647673722e4247 312e626c74656775
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff914d2a62 RBX=ffffffff90c43758 RCX=dffffc0000000000 RDX=1ffffffff21886eb
RSI=0000000000000000 RDI=ffffffff90c43720 RBP=ffffffff90c43754 RSP=ffffc900045b75b8
R8 =ffffffff914d2ac8 R9 =0000000000000000 R10=0000000000000000 R11=0000000000012296
R12=ffffffff90c43760 R13=ffffffff822296b3 R14=ffffffff90c43720 R15=ffffffff90c43750
RIP=ffffffff816acd40 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6813000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f7f6904f830 CR3=000000002a1e6000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000
Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a 0000003000000012 0004000000080024 0000000000280034
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000037 0000001400000000 0000000000000000 0000000000000015
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c69662f2e01ffff ffffffffffffef08 0780032800000600 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08000a98030785f4 ce08000a9003108a 04000a8c03000400 0a880301c008000a
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80030a8004000300 0402afa003000800 02af90030fffffff ffffff0402af8003
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0108000280040402 7394003131323038 6c6e01ffffffffff ffffffef08028003
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2008000610002010 00060070ca029010 000483fe10000780 04060142fa003065
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 489dcd31b578e642 72f5390aa0c2148b 1c64627da71d933d af002c6c6c65636f
ZMM25=59c2ee4859c2ee48 59c2ee4859c2ee48 59c2ee4859c2ee48 59c2ee4859c2ee48 59c2ee4859c2ee48 59c2ee4859c2ee48 59c2ee4859c2ee48 59c2ee4859c2ee48
ZMM26=1439d8471439d847 1439d8471439d847 1439d8471439d847 1439d8471439d847 1439d8471439d847 1439d8471439d847 1439d8471439d847 1439d8471439d847
ZMM27=b97024a8b97024a8 b97024a8b97024a8 b97024a8b97024a8 b97024a8b97024a8 b97024a8b97024a8 b97024a8b97024a8 b97024a8b97024a8 b97024a8b97024a8
ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=5a0100005a010000 5a0100005a010000 5a0100005a010000 5a0100005a010000 5a0100005a010000 5a0100005a010000 5a0100005a010000 5a0100005a010000
info registers vcpu 2

CPU#2
RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff855bced5 RDI=ffffffff9b0c72a0 RBP=ffffffff9b0c7260 RSP=ffffc900042c74b0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=0000000000000074 R14=ffffffff9b0c7260 R15=ffffffff855bce70
RIP=ffffffff855bceff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 00007f3ef6cca6c0 ffffffff 00c00000
GS =0000 ffff8880d6913000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00005648b9c413f0 CR3=00000000585e5000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f69211b12
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f69211b1f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f69211b19
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f69211b2d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f69211bb3
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f69211c91
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000054a3d RBX=0000000000000003 RCX=ffffffff8b885c99 RDX=0000000000000000
RSI=ffffffff8de32e3f RDI=ffffffff8c158f60 RBP=ffffed1003c58000 RSP=ffffc90000197df8
R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001
R12=0000000000000003 R13=ffff88801e2c0000 R14=ffffffff90a98750 R15=0000000000000000
RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6a13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c360507 CR3=000000000e382000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ef5e11b12
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ef5e11b1f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ef5e11b19
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ef5e11b2d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ef5e11bb3
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ef5e11c91
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000