last executing test programs:

8.264151087s ago: executing program 1 (id=70):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200))
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002540)=ANY=[], 0xfdef}, 0x1, 0x0, 0x0, 0x20050080}, 0x4000804)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='hpfs\x00', 0x808001, 0x0)
preadv(r2, &(0x7f0000003780)=[{&(0x7f0000001300)=""/170, 0xaa}], 0x1, 0xffff, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x280000, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r5, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000580), 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=<r6=>0x0)
r7 = syz_clone(0x8000, &(0x7f0000000180)="a5c6de4b2ed2d9302070a41f204c2bb55c92b35a8274989fd79ff516ad099e94fb9310b7d89c", 0x26, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="3075568da13549f8947729f7420fb9d45104f26fe0c22830337652f552113386f385a81cba604f7568f05078a0741e4cdca25b82754600b9c0f99fd1f7a9fa30eac9fe631d7c78205c1b137d4775709f72")
setpgid(r6, r7)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/49, 0x31)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010100}, 0x10)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f00000000c0)={0x0}, 0x1, 0x2000000}, 0x8000)

7.804325873s ago: executing program 1 (id=73):
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'})

7.643565539s ago: executing program 1 (id=75):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="4009010000e308"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040))

5.523204249s ago: executing program 0 (id=84):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r1, &(0x7f000000a1c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f000000b580)=""/4093, 0xffd}, {&(0x7f0000000900)=""/85, 0x55}, {&(0x7f0000000700)=""/47, 0x2f}, {&(0x7f00000006c0)=""/23, 0x17}, {&(0x7f00000001c0)=""/135, 0x87}, {&(0x7f0000000b40)=""/206, 0xce}], 0x6}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x2202, 0x0)

4.653011761s ago: executing program 0 (id=87):
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffe58, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000213fe8bfa470ba8b991cadb5c819f1ee47c82e5c20fafdd6ebbd8dc02e9e95e92b49ae2229cab723c8dfc6b8e43dd80f9ef84c78575b605c47b99d", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsopen(0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x18, "000080f100df000000a7d9de16c708db7200"})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4, 0x0, 0x2, 0x2000}, 0x10)
write(r4, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000f00c00000000", 0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newtfilter={0x9d0, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff1}, {0xe, 0x5}, {0xb, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x52b}, @TCA_RATE={0x6, 0x5, {0x3, 0xf}}, @filter_kind_options=@f_bpf={{0x8}, {0x994, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x890, 0x1, [@m_vlan={0x14c, 0x6, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x6c, 0x0, 0x7, 0xb5b}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x1, 0x20000000, 0x4, 0x5}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x9, 0x20000000, 0x7f6, 0xe}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x9, 0x5, 0xb}, 0x3}}]}, {0xa7, 0x6, "17377ebc8994240814827db6e0ce5f79ba83825e0027dc8ad0965978dc8c8ac60eaa94d452f8122a2a8ab9ea58da37444d39965a73a421805fb428bcf2b3455c920f03c6c08b28c89521e0301b5764f692e613ceb074f5e80e7df6b02dffbc9498e63f9920e574401d6e4674e967c0b0dfb9f818d40fda5127c730b3500bb7beee542e509d8a74c5eeb76e89fa7c8be90a0be998d2e2577ec3f37321981e7de695b7ac"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_xt={0x13c, 0xd, 0x0, 0x0, {{0x7}, {0xcc, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x70a0}, @TCA_IPT_INDEX={0x8, 0x3, 0xc1e}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x81, 0x6, {0x1, 'nat\x00', 0xc5, 0x10, "30bc86f3964369750013f42b00ab07db415beb4ea1c989f0c59384a80db6c76717d8906fffadb18bd89b2ee865f0d3206bc1a56e8827b8aa87aa29fd74653caf977311d8c80f3837df758ae1e006d591771673e75c1f5f"}}]}, {0x4b, 0x6, "8983977c28f3c14f90b739449dedd52f50a358cc670c150a611dfe4112f6371e835c9c3f108cab5a768a7bcdd8f50485457680228079337d7337f09eb3d0afc940d1fad10515a5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}, @m_connmark={0x104, 0x7, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x7, 0xffffffffffffffff, 0x1000, 0xfffffffe}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4c, 0x2, 0x10000000, 0x0, 0x9}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x3, 0x5, 0x6}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc21, 0x2, 0x0, 0x800, 0x7fffffff}, 0x4}}]}, {0x63, 0x6, "f81abf97b802a1025f2306ef026ce4640a3156c7185fe93afc3204ac5a4ea1bb90a3629356ec473f4e50846d1ebb5d3c4b06f5a18a26667591d886760b1a9041e865949cde2dbff1fefa8d9aad8c9693cf8950cdda29041d0017b06fe29aca"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x148, 0x18, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b75, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1fab, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0xc2, 0x3ff, 0x10000000, 0xea, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xfffffffa, 0x2, 0x7, 0xb}}]}, {0xd3, 0x6, "22b4a08d458093f396469b38cbaae06bbb2c6504d54be58e17c8cf0684bb51271994a5569bd3c72ce6fb761c9e7ce97934a6d50c128324f54dffe468b1576e27ee4fe93d43cfd76c7726fd2bcd5dea6824c67944b7c90654670bac5a0e886f96d8fde4217f9b3f7599f45e6a03011637aa4a3e3b81709dbe0980433a7c3eda4fba8223a2c9755f6402145e18ec26fa73330b1a1635818fb9e0b3140b2aa315131b38771f5a58547b4827dbc9d8104cf8406aed9323786899df01283541821ffc2b23fb1c0cd42aebdc2d24f0ac51a1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0x150, 0xc, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xb, 0x8001, 0x8, 0x8001, 0x2}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "746cd9e411501f34dd16a2fadb5c4a03"}, @TCA_CT_ACTION={0x6}, @TCA_CT_LABELS={0x14, 0x7, "6b0b9de38c0502866a107a7516f1bcce"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}]}, {0xc8, 0x6, "e095da9cadb664ce7c69d6325ae8ae032b7b3868e9680eba3698feb032dd3e6236ed3dabe216a5e5dc76f26347b765ff3cb0ef669dc62c9790f7fd44556db55cbe8f4162b908b46d922db13914d8ad6c3d8b28fcc8d33ecba0e41a848a4b039afa6281cc7df48fda640533814e6239182d56c70a342e94b155c4721355f4262d0e088701d7a1124c9562d53250cffb2d5ac1e4fa8e477f6bc7cb11dbda7da3ab16116975ca8fa09220523c137a95aa8a4122c13c20aebe37aac6e98d5c93098a8ebed796"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0xe8, 0x1, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x2, 0xff, 0x10}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x7fffffff, 0x10000000, 0x4f20, 0xb0}, 0xfc01}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x5, 0x1, 0xe520}, 0xbfa6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa, 0x200, 0x10000000, 0x7f, 0x208}, 0x401}}]}, {0x46, 0x6, "69e243ab4eee09aa3fbb3a31befe3d5a00c76cc43435c4fdfbb43478043db079bd0f1e89638c40f1b6ee09fe6d50fcb747f43c845d2894d84710572f47b9f2b4d1f2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x64, 0x19, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x2f, 0x6, "00fda0e303945cda52b0684307e4b18d0227ec63059857f49b0e64b658a6afa186e95b8c3a2d82ee85ea28"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x11c, 0x20, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xf9c, 0x7, 0x1, 0x0, 0x20002000}, @remote, @loopback, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xb, 0x20000000, 0x80}, @local, @multicast2, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffff000, 0x7, 0x1, 0x8001, 0x4}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}}]}, {0x7b, 0x6, "26427ce94f2ffd19ffaede1d13191db6319ea1c87e1c66f5e9a4211fad09e82accfd32e2f7b11ee4d86821ab5f1bad5a4567af4471ce96a2882421af3c872ccbefdb6c161105d13e4b88e0b0ad3e677c2fb3ded54d4fc5b8507239719775f17ee324b109ceada7b50b9a2ce56371dc417d9f7e69dde598"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xf000, 0x93, 0x9, 0x40000}]}}, @TCA_BPF_ACT={0xcc, 0x1, [@m_ctinfo={0xc8, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7d83}]}, {0x93, 0x6, "fae0f504b77a9c02b26efa4f291ec7b9da30bb9949f9ddd1da230659c073da77f5ee8cdf77d60ecc68819f590f6d1fa7a036ce191e3cdee1a67cd69ec072dd556229b0a3d3b5cadfb5d579b419aec3fedd25625df9e1d5e26add51d73df7092f6dba691f848e211c8e07995e2a447a8e4f2531cff410e07fb0386e05da363171d9e58fc4d2b5093b0fe8f7ceb7932e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x9d0}}, 0xc0)
recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0xfffffffe}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)

3.591324498s ago: executing program 0 (id=89):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1f}, 0x0)

3.51275127s ago: executing program 0 (id=90):
syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x7, 0x1000, 0x7ffffffd, 0x0, 0x1000})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000180)={{@my=0x1}, @my=0x1, 0x0, 0x20007, 0x7, 0x40, 0x2, 0x0, 0x9})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'})
epoll_create1(0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$RTC_PIE_ON(r2, 0x7005)
syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x6585, 0x10100}, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {}, {}, {0x1}, {}, {0xfffffffa, 0x6}], 0x0, 0x0, 0x8, 0x0, 0x1}})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000240)={[{0x8000, 0x10, 0xff, 0x91, 0x80, 0xd, 0x9d, 0x0, 0x80, 0x8, 0x3, 0x5, 0x3}, {0x90f, 0x200, 0xd, 0xeb, 0x1, 0x10, 0x2, 0x4f, 0xb, 0x4, 0xf2, 0x7, 0xbc1e}, {0x1, 0x7, 0x73, 0x1, 0x5, 0x7e, 0x8, 0x6, 0x2, 0x3, 0x7, 0x6, 0x100}], 0x8001})
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000000)={0xffffffffffffffff, 0x3a, &(0x7f00000015c0)}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$ax25(0x3, 0x5, 0xc3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0)

3.241836699s ago: executing program 3 (id=91):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
r2 = openat$cdrom(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$CDROM_NEXT_WRITABLE(r2, 0x2284, &(0x7f0000003f80))
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1)
sendto$rose(r1, &(0x7f0000000080)="d215ac579f48f15aaabbda153b7527e23b7cb46655e7d2813ffd1ea23fb5142c3d74c0a3159aabae12c3457f09e6d06c9c808ee43f35bcddf1ba22bad0286ed09bacb9be3cb0281f67fee87b30db3746ba14d2e02a00786a33002529002e52b3d10789b302ae2b95404cf8e8bb8acfda34e0246c", 0x74, 0x4000081, &(0x7f0000000180)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast]}, 0x40)

3.107074599s ago: executing program 3 (id=92):
r0 = memfd_create(&(0x7f0000001d80)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\xea\x82\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\x0f\x8eS\xaeX\x93\x7f\xd3\xb9a\xe4\xe0\xbd\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x84\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1#\xe7N\x89\xf8\xe8+\xa1\x82\x13\xb2\xa9\xef\xa5\xf8\x8b \x00\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)2\xe2\xd6\x81\x00b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|&k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc2Ru2Ht\re\xa1\xf6\xbd\xaa\xb0\x83}i\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf\xa4O\xb4\xed\xc8\xccH\xd1=\x81\x00\x00\x00\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xd6\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\x86C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17U\xf0\x16K\xf9&@\xb1[\xe2j$F1n@\xde\n%t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5#\x7f\xa8\x1f\x14\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebk\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x850\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96\x87\xc0e\xab\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!\xec\xf7$\xc2\xbaU \x98\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\"k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xec\x01\'\t\x89(\xf9\x98B\xaf\xde*\x91\xd5k\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\xdfC\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84\x0e\xa7U\xc7}\xea.U`\x1b*\xcep\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xc9\xcfw\xf3\x02\x1b\xde\xc3\x86\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x13\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcdQ\xdf\x83\xbdjp,\xe8\xbb\xe6\xc6Db\xb8\xd6\xcd\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd4k7L\x8a\xa3Z\xf9%{\xfax\x9a\x04\'/\x90\xe6\xe2\xe9\xf1@o\x0ez\xb8\xce\xbeF\x0fkE\xf4ry\x92n\xff\xcb\xf8e\xf3j\xc5[wK\x91\xdb\xf7-r\xd3\x1bx\x9b$\x91\x03q\x9e@\xd8R\x11\x05|\x8f\xb4\xc9\x16\x87C\xab\x96\xc4\xef\xea\xb9\r\xf5\xf3\xbe\x8a\t\xc7\x88\xc0sL;.\xcf\x1d\xc4^\xb0l\xbb\x97\xc5\xf6n\xca\x18M\xb8\x81\xff\xa9~\xf7\xa3\xa6\xd3\x15I\xecXG\x89\xa8\b\x8b\xcc\xe8\x88\xa07Z\x03\xa8.\x7f\x16qlk\xf1\xf1y\x8c\xde\xd6|\xa1(\xf4\x12O\xca3\xf8%1\x8d\xd7\a\xfeJ\xe6\x8bc\xb3\x1bKC.\xafB\x8d\xdd\xf9\x1e\x9d\xa7\x13\x00\x14\xc7\xa1\xf3\x1e\xcb\x19\x13z`\xac\xf3\xd1x\x1b#}\xfaYR\xc5#Zoag@\x18\xfa*\xb4\xc4\x04\x03V\x87\xc5\xe7\xb5\x9bJ\x85-\x7f\xfe\xc0\xb7g\xe8\'`\x96q\x88[\xf8\xe8L\x12\x85\xf5t\x99\x0e}\xd3H\xed\xda\xf3>\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14<B\x91\xc0{{\x9d@\xb3a\xad\x14\xe9\xcc|\xd7\xa1\xc6\xb9F\x04\xce]\xb9Y\xbd\xbd\f\xa4F;q\xec\x83\x9bM\x93\xa4\x9c\xdd\x93\xa0\x82E\x02d\xd4RAI\xd9O\x17\xa6P#\xa35\a\xf6\xbb\t>p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef\x98\x87\xb5p\xf7\xd7\xeb\xfb\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06', 0x7)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004400000080000000100000080000000", @ANYRES8, @ANYBLOB="0000000000000000000000edff00000000060000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x2a020480)
mq_open(&(0x7f0000000440)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxselin\x05x\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc088cf2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0xc, &(0x7f0000000040)=0x5, 0x4)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)={0x0, 0x1})
r6 = socket$nl_crypto(0x10, 0x3, 0x15)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x8, 0x0, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0)
preadv(r7, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x202, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.903294973s ago: executing program 2 (id=95):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x14ba82, 0x18)
write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140), 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0)
r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000080), 0x4)
r4 = dup(r3)
r5 = socket$igmp(0x2, 0x3, 0x2)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000010100800c000100000000000000000014000300fe"], 0x114}], 0x1}, 0x0)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x4, 0x0, 0x7, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x4, 0x0}, @multicast1}, 0x10)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, 0x0, 0x0)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000180)=0x2e45, 0x4)
shutdown(r7, 0x0)
recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
syz_io_uring_setup(0x239, 0x0, &(0x7f00000002c0), 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2.623132687s ago: executing program 0 (id=96):
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffe58, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000213fe8bfa470ba8b991cadb5c819f1ee47c82e5c20fafdd6ebbd8dc02e9e95e92b49ae2229cab723c8dfc6b8e43dd80f9ef84c78575b605c47b99d", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsopen(0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x18, "000080f100df000000a7d9de16c708db7200"})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4, 0x0, 0x2, 0x2000}, 0x10)
write(r4, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000f00c00000000", 0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newtfilter={0x9d0, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff1}, {0xe, 0x5}, {0xb, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x52b}, @TCA_RATE={0x6, 0x5, {0x3, 0xf}}, @filter_kind_options=@f_bpf={{0x8}, {0x994, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x890, 0x1, [@m_vlan={0x14c, 0x6, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x6c, 0x0, 0x7, 0xb5b}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x1, 0x20000000, 0x4, 0x5}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x9, 0x20000000, 0x7f6, 0xe}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x9, 0x5, 0xb}, 0x3}}]}, {0xa7, 0x6, "17377ebc8994240814827db6e0ce5f79ba83825e0027dc8ad0965978dc8c8ac60eaa94d452f8122a2a8ab9ea58da37444d39965a73a421805fb428bcf2b3455c920f03c6c08b28c89521e0301b5764f692e613ceb074f5e80e7df6b02dffbc9498e63f9920e574401d6e4674e967c0b0dfb9f818d40fda5127c730b3500bb7beee542e509d8a74c5eeb76e89fa7c8be90a0be998d2e2577ec3f37321981e7de695b7ac"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_xt={0x13c, 0xd, 0x0, 0x0, {{0x7}, {0xcc, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x70a0}, @TCA_IPT_INDEX={0x8, 0x3, 0xc1e}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x81, 0x6, {0x1, 'nat\x00', 0xc5, 0x10, "30bc86f3964369750013f42b00ab07db415beb4ea1c989f0c59384a80db6c76717d8906fffadb18bd89b2ee865f0d3206bc1a56e8827b8aa87aa29fd74653caf977311d8c80f3837df758ae1e006d591771673e75c1f5f"}}]}, {0x4b, 0x6, "8983977c28f3c14f90b739449dedd52f50a358cc670c150a611dfe4112f6371e835c9c3f108cab5a768a7bcdd8f50485457680228079337d7337f09eb3d0afc940d1fad10515a5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}, @m_connmark={0x104, 0x7, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x7, 0xffffffffffffffff, 0x1000, 0xfffffffe}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4c, 0x2, 0x10000000, 0x0, 0x9}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x3, 0x5, 0x6}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc21, 0x2, 0x0, 0x800, 0x7fffffff}, 0x4}}]}, {0x63, 0x6, "f81abf97b802a1025f2306ef026ce4640a3156c7185fe93afc3204ac5a4ea1bb90a3629356ec473f4e50846d1ebb5d3c4b06f5a18a26667591d886760b1a9041e865949cde2dbff1fefa8d9aad8c9693cf8950cdda29041d0017b06fe29aca"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x148, 0x18, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b75, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1fab, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0xc2, 0x3ff, 0x10000000, 0xea, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xfffffffa, 0x2, 0x7, 0xb}}]}, {0xd3, 0x6, "22b4a08d458093f396469b38cbaae06bbb2c6504d54be58e17c8cf0684bb51271994a5569bd3c72ce6fb761c9e7ce97934a6d50c128324f54dffe468b1576e27ee4fe93d43cfd76c7726fd2bcd5dea6824c67944b7c90654670bac5a0e886f96d8fde4217f9b3f7599f45e6a03011637aa4a3e3b81709dbe0980433a7c3eda4fba8223a2c9755f6402145e18ec26fa73330b1a1635818fb9e0b3140b2aa315131b38771f5a58547b4827dbc9d8104cf8406aed9323786899df01283541821ffc2b23fb1c0cd42aebdc2d24f0ac51a1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0x150, 0xc, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xb, 0x8001, 0x8, 0x8001, 0x2}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "746cd9e411501f34dd16a2fadb5c4a03"}, @TCA_CT_ACTION={0x6}, @TCA_CT_LABELS={0x14, 0x7, "6b0b9de38c0502866a107a7516f1bcce"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}]}, {0xc8, 0x6, "e095da9cadb664ce7c69d6325ae8ae032b7b3868e9680eba3698feb032dd3e6236ed3dabe216a5e5dc76f26347b765ff3cb0ef669dc62c9790f7fd44556db55cbe8f4162b908b46d922db13914d8ad6c3d8b28fcc8d33ecba0e41a848a4b039afa6281cc7df48fda640533814e6239182d56c70a342e94b155c4721355f4262d0e088701d7a1124c9562d53250cffb2d5ac1e4fa8e477f6bc7cb11dbda7da3ab16116975ca8fa09220523c137a95aa8a4122c13c20aebe37aac6e98d5c93098a8ebed796"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0xe8, 0x1, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x2, 0xff, 0x10}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x7fffffff, 0x10000000, 0x4f20, 0xb0}, 0xfc01}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x5, 0x1, 0xe520}, 0xbfa6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa, 0x200, 0x10000000, 0x7f, 0x208}, 0x401}}]}, {0x46, 0x6, "69e243ab4eee09aa3fbb3a31befe3d5a00c76cc43435c4fdfbb43478043db079bd0f1e89638c40f1b6ee09fe6d50fcb747f43c845d2894d84710572f47b9f2b4d1f2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x64, 0x19, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x2f, 0x6, "00fda0e303945cda52b0684307e4b18d0227ec63059857f49b0e64b658a6afa186e95b8c3a2d82ee85ea28"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x11c, 0x20, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xf9c, 0x7, 0x1, 0x0, 0x20002000}, @remote, @loopback, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xb, 0x20000000, 0x80}, @local, @multicast2, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffff000, 0x7, 0x1, 0x8001, 0x4}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}}]}, {0x7b, 0x6, "26427ce94f2ffd19ffaede1d13191db6319ea1c87e1c66f5e9a4211fad09e82accfd32e2f7b11ee4d86821ab5f1bad5a4567af4471ce96a2882421af3c872ccbefdb6c161105d13e4b88e0b0ad3e677c2fb3ded54d4fc5b8507239719775f17ee324b109ceada7b50b9a2ce56371dc417d9f7e69dde598"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xf000, 0x93, 0x9, 0x40000}]}}, @TCA_BPF_ACT={0xcc, 0x1, [@m_ctinfo={0xc8, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7d83}]}, {0x93, 0x6, "fae0f504b77a9c02b26efa4f291ec7b9da30bb9949f9ddd1da230659c073da77f5ee8cdf77d60ecc68819f590f6d1fa7a036ce191e3cdee1a67cd69ec072dd556229b0a3d3b5cadfb5d579b419aec3fedd25625df9e1d5e26add51d73df7092f6dba691f848e211c8e07995e2a447a8e4f2531cff410e07fb0386e05da363171d9e58fc4d2b5093b0fe8f7ceb7932e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x9d0}}, 0xc0)
recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0xfffffffe}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)

2.199970835s ago: executing program 3 (id=97):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x11, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

2.123151301s ago: executing program 3 (id=98):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500"], &(0x7f0000000000)='GPL\x00', 0xffff8000, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0xd0c) (async, rerun: 32)
kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) (rerun: 32)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb635773f06ebbeec, 0x40010, r0, 0x2e94f000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) (async)
chdir(&(0x7f00000000c0)='./bus\x00') (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f00000003c0)) (async)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000040)={0xf3, 0x2, 0x7}) (async, rerun: 32)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0) (rerun: 32)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r3, @ANYRES64=r0, @ANYBLOB="9bb050fd5108034a966141b343d2800eda868a792287a9876c71514315014c8b869510be2d5d4ad7607f35c7c45282eb2020bc56fb1691462d4540cfd1feb60f735fb3fe047457e7ada763b3ec54c6d7e0b2495320ec10109d2b76d569807c863da5f6fdf630e35aa5b8e93e2628f6865bb0eff6595e8f272c61f8fd8a83215a5b4f37e237696c7425c0e2742ffa1655977e79b6400646845c4edebc1d8a5a760f40676930d4980c568402b841644ff5f20e5c21c38e54ecb63f5cd8d65782299aff58fc6cea1a35fa8c39bef90852d5ec", @ANYRES16=0x0, @ANYRES64=0x0], 0x188}, 0x1, 0x0, 0x0, 0x4008081}, 0x4) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.numa_stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000380)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)

2.033257176s ago: executing program 3 (id=99):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x3)
fcntl$addseals(r1, 0x409, 0x7)
ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6})
r2 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="2f9374c96ee3", 0x0, 0x4, 0x0, 0x0, 0x0})
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000440)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x69b8, 0x0, 0x0, 0x0, @ib={0x1b, 0x2, 0x2, {"ef2d64a3d7ed8e742ec0dc332e38c642"}, 0x168c, 0x6, 0x7}, @in={0x2, 0x4e24, @remote}}}, 0x118)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r4, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1354}], 0x1}, 0x80000c0)
socket$netlink(0x10, 0x3, 0x12)
io_uring_setup(0x4d63, &(0x7f0000000300)={0x0, 0xffffffff, 0x20, 0x1, 0x2e0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, r5, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c09425, &(0x7f0000000580)={"a20e99df5c4255da03a8e7f9053593af", 0x0, 0x0, {0x3, 0x10}, {0x8001, 0x7}, 0x0, [0x7, 0x80, 0x9, 0x5, 0x8, 0x8000000000000000, 0x1000, 0x2, 0x0, 0x8, 0x7, 0x4, 0x7, 0x1, 0x3, 0x1]})
munlock(&(0x7f000099f000/0x2000)=nil, 0x2000)
r6 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x9f9, 0x1, 0x4})
bind$bt_l2cap(r3, &(0x7f0000000180)={0x1f, 0x4313, @none, 0xd0a6, 0x1}, 0xe)
ioctl$vim2m_VIDIOC_QUERYBUF(r6, 0xc04c5609, &(0x7f0000000200)=@overlay={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b248c8ea"}})
r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25CTLCON(r7, 0x541b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, 0x2, 0x0, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

1.480714865s ago: executing program 2 (id=100):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4080000000000006b119e00002acc5913b890f8f5f50cc92c0000008510000002000000b7000000000000009500c200"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)=@deltfilter={0x74c, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10, 0xfff3}, {0xf, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xf4, 0x7}}, @filter_kind_options=@f_route={{0xa}, {0x670, 0x2, [@TCA_ROUTE4_ACT={0x160, 0x6, [@m_ct={0x15c, 0x2, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x5}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "468f5591f3556b1873c6d780a628245a"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0xf9, 0x6, "e1cb95d1720d3002e7a47c68c3a8c8d5405eb9ad3ecd9267271ca052f66597b7512f022622880e0fabd233743007c2d229956886195537868dfd5470f1bdac8079b70c603efa8f392c3424c2920d5e272ab27347b15865a81fe254e5d22164b7b4d9728ce46582166c8bf353f81b3db7100c2e5510a1fd217bac1d539b2264288f1889b398db5a6c749be71af3d8a0c34994a92e52069e58075d3d152f585b4d3b6016dfbf56d76817ed857e787bc9540d203fc07b5d2b3d6528118cfe6c2d1d526c2cff076e044ea21e2f4a7899cabf581ceeb95f7c8549fa07d4bb2d37eb8a9001d1b067ec313fe240f8013fd4f927855c689421"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_ROUTE4_ACT={0x490, 0x6, [@m_mirred={0xac, 0xa, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x10, 0x6, 0x1000, 0x2}, 0x3}}]}, {0x5d, 0x6, "dacf116bc5bdf2a24288f132b8652a1391fb45e58c1649281c4e28eed5bfd5e394175a34594566f8a327602989d03ef5c582609ce92519a2ee80a20da0d677876f7da158a49479fbeb9f8e8be64d691082cf087c7251145fde"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0xa0, 0x7, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7, 0x9, 0x6, 0x8, 0x5}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}, @TCA_CT_MARK={0x8, 0x5, 0x5}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xe71a}, @TCA_CT_ZONE={0x6, 0x4, 0x970}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_ZONE={0x6, 0x4, 0x845d}]}, {0x1b, 0x6, "8de35865877207fda49712c5c4ea1f073821bab321fc81"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x70, 0x9, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, {0x2b, 0x6, "327acb3078df7e010c197f3a46854e3adf15aac861b65cffa5d16b1126112cb34572f5f4aaa9fe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x1}}}}, @m_xt={0x190, 0x11, 0x0, 0x0, {{0x7}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x66, 0x6, {0x80b2, 'nat\x00', 0x5, 0x4, "edcb79fe9059c41a6a2872be0c910f7d64c577867aa8caa4e5edb0bc8991b6d20917250b1157117ef5a10f784f0841272bfd5e8ca12f7353abb68f7e"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7ff}]}, {0xf5, 0x6, "1732e7351748810960318f388da029fbf963d152c38a44abbf3ac1a3339782e75247105db3de9e2e55e0e4958888ec8ba532e08367fd92f738bdd2ba687034c47eaa4dd78193206c2cf3f17e0484ed7a9140f5bb2987e89eb85bed4ed05ff8dc3d126958d42c3775a8508650af018178b093a632d6236391dba276f00a94bb588acc4bdbf7353905cce4c5e5510fbb201cf3114c8473dfea6069dd0b9e86e32bfdc71422eb890122d74881324b0cf1f94d93fa82a9f979d7c29c60a4d70bc805b8729f564fd48f36e48dd89a26dbb1ca537269ba1b59f5b34a1d548e1cefdc2863c6a1be2bcf3e190d1087bf96c236669f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x140, 0x11, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x2400000, 0x6, 0x5, 0x2}, @rand_addr=0x64010101, @private=0xa010102}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xc4, 0x2, 0x8, 0x843}, @private=0xa010101, @broadcast, 0xff000000}}]}, {0xc5, 0x6, "5382f4f216ae3a92d0519915d74ae4cd2e9b22e5f6e1263143053effcae6d5df0b12dbd9f1f3b7a09118e0bd770c38073977e0a623e70d1810ec7c8d9740a252c80766d449482b41119acc14e24f609cebb3c207896cb6141440832dc4a791ecf3de0985ed4d2a12ae703b3298975eda238c16d2867cc83964fa6370e658cb5382829d4365011175100fe0952c96184c034406163ca5d8e56dfc250a25b9f0f4a02ef9daa577bc8277178681fb2d61878b7f507114f68bcb0fd1482acd8a3a5d08"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0xd}}, @TCA_ROUTE4_ACT={0x74, 0x6, [@m_ife={0x70, 0x20, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x2, 0x401, 0x7}}}]}, {0x2c, 0x6, "9b97a0bf42c2a0f1281b45c8b812fb90a1d2f78dec92014ee71c4462d005d2c3aa89aa2660c5f70d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0xb9f}, @TCA_CHAIN={0x8, 0xb, 0x206}, @filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xffffffff}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0xfe}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "49a4f6077d6d601dfc36a413a5dc5751"}, @TCA_FLOWER_INDEV={0x14, 0x2, 'team0\x00'}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x74c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0)
ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "004fba7d820000050000f7ffffff00040100"})
r8 = syz_open_pts(r7, 0x400040)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x1a)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="80000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e0000002080002000000000008000740000000001c000580080001"], 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000ac0)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000a00, 0x0, 0x0, 0x20000a90, 0x20000a60], 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x110)
write$cgroup_subtree(r1, 0x0, 0xfe33)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001940)=ANY=[@ANYBLOB="180000002d00130e000000060000a0ce0e8f5bae561309"], 0x18}], 0x1}, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xa, 0x5, 0x7, 0xc1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r11}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r11, &(0x7f0000000340), &(0x7f00000004c0)=""/192}, 0x20)
recvmsg(r1, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)

1.312568986s ago: executing program 1 (id=101):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x1, 0x0, 0x3}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/57, 0x39}], 0x1, 0x4, 0xae)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000005000000030000000400000000000000", @ANYRES32, @ANYBLOB="0000057d00000000000000000000000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1f00000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x1b)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000008a3f6e0000000000000002c934327accf0ea0001000000000000dc3bb548a282ee50bbe4c418d2c0673c6dc31a66fc522588a3aef1b5f175"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r5}, 0xc)
setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x0, [0x802, 0xfffc, 0x0, 0x7ff, 0x1951, 0x51d8, 0x7ff, 0x60f7, 0x100, 0x7, 0x8, 0x4, 0x1006, 0x8000, 0xfffa, 0x0, 0x1, 0x9, 0x4, 0x71, 0x6, 0x1, 0x7, 0x7fff, 0xfffa, 0x2, 0x5, 0x8000, 0x40, 0xfd7d, 0x80, 0x3b, 0x401, 0xe, 0x7, 0xa, 0xfb, 0x5, 0x7, 0x5, 0x1, 0x9, 0xa, 0x7, 0x10, 0x0, 0x2, 0x5], 0xa0000000}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getnexthop={0x24, 0x76, 0xb0d, 0x4000, 0x25dfdbfb, {0x3}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
syz_emit_ethernet(0x2b, &(0x7f0000024140)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbb020000000000000000000000019078ac14141414aa08009078000f00073e"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r8)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r9, 0x701}, 0x14}}, 0x0)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r9, 0x200, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200080c0}, 0x20040000)

1.203279325s ago: executing program 2 (id=102):
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='squashfs\x00', 0x0, 0x0) (fail_nth: 18)

1.115004448s ago: executing program 0 (id=103):
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffe58, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000213fe8bfa470ba8b991cadb5c819f1ee47c82e5c20fafdd6ebbd8dc02e9e95e92b49ae2229cab723c8dfc6b8e43dd80f9ef84c78575b605c47b99d", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsopen(0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x18, "000080f100df000000a7d9de16c708db7200"})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000f00c00000000", 0x14)
socket$nl_route(0x10, 0x3, 0x0)
process_vm_writev(0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/217, 0xd9}], 0x1, &(0x7f0000000880)=[{0x0}], 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0xfffffffe}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)

1.114469863s ago: executing program 2 (id=104):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), r1)

1.043080827s ago: executing program 2 (id=105):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x8c8, 0x0, 0x0})
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r2 = msgget$private(0x0, 0x0)
msgctl$IPC_STAT(r2, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
openat$procfs(0xffffff9c, 0x0, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, 0x0, 0x341200, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$alg(0x26, 0x5, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)

463.341793ms ago: executing program 1 (id=106):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000480)={0x0, 0x1, "00fa00"}) (fail_nth: 4)

412.966299ms ago: executing program 1 (id=107):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{0xfffffffc}, {}, {0x0, 0x3}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000380)={"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"})
r5 = dup(r4)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000000000001000080"])
ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000040b97e7d8e00"/24])
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setregid(0x0, 0x0)
sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000000380)=""/231, 0xe7)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)

95.816256ms ago: executing program 2 (id=108):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0xffffffff, 0x0, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_RECMASK(r3, 0x80044dfd, &(0x7f0000000040))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000040)='./bus\x00', 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000ac0)=""/254, 0xfe}, {&(0x7f0000000240)=""/74, 0x4a}, {&(0x7f0000000c00)=""/195, 0xc3}], 0x3, 0x6, 0x7)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000000))
ioctl$TIOCL_UNBLANKSCREEN(r4, 0x541c, &(0x7f00000000c0))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xfffffffc)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67a15", 0x4)
r6 = accept4$alg(r5, 0x0, 0x0, 0x0)
io_setup(0xff, &(0x7f0000000380)=<r7=>0x0)
sendmsg$alg(r6, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
sendmmsg$alg(r6, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000580)="58750f688dc16a224a6d5986eff155d3ec074b015dcbc52cc97c07111a5efe96965e24476c1ef251eade7dcfe4bf39a6ec59fe90c3a452d1fdbdbfddcab97db52a29caf89a14605ba29a04ec924416dfe08b0767c5ec69b1837a2b603d1ce779cef0211f61f7d3a92c7583a897662f32a338f81612b43f9e8fd3814584bb3b670e21af0773112161bdcbb38bd89ad2795002039e6441a1e4ca8825229c55ef8b7c56ee78867b707d91ca53024f6bfafac372a3ecc2596e77f8325e04f311e928b5fc88a0b2e13ba2f0543d42183fbcce11daa582ba8424e30d69f52ac96f966824f734ead62074557501a2fa429c51", 0xef}, {&(0x7f0000000680)="30386607f22645fd0b4102295249f832cb6c55d8360f18f0d4b8eaa6bb8a733c1eb3d50b08eabd6a49a890525248af4556e7c49088ac1af1992ee922596a0c54e07eef22f4f68c", 0x47}, {0x0}], 0x4}], 0x1, 0x0)
io_submit(r7, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r6, &(0x7f0000000340)}])
syz_io_uring_setup(0x6550, &(0x7f0000000240)={0x0, 0xffffffff, 0x0, 0xfffffffc}, &(0x7f0000006840), &(0x7f0000006880))
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_NOTIFY(r8, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10)

0s ago: executing program 3 (id=109):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="4009010000e308"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0xc0105b08, &(0x7f0000000040))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:38235' (ED25519) to the list of known hosts.
[   41.538888][ T5952] cgroup: Unknown subsys name 'net'
[   41.669358][ T5952] cgroup: Unknown subsys name 'cpuset'
[   41.673159][ T5952] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.469501][ T5952] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   44.311635][ T5969] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   44.311636][ T5968] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   44.316556][ T5969] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   44.318357][ T5971] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   44.319233][ T5969] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   44.320735][ T5974] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   44.322961][ T5969] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   44.324346][ T5970] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   44.324540][ T5974] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   44.324905][ T5974] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   44.325562][ T5974] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   44.325669][ T5974] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   44.326173][ T5974] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   44.326487][ T5974] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   44.327177][ T5974] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   44.327502][ T5969] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   44.327707][ T5969] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   44.327807][ T5969] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   44.329101][ T5970] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   44.330561][ T5974] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   44.333974][ T5970] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   44.356690][ T5970] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   44.361563][ T5970] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   44.366433][ T5970] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   44.486398][ T5961] chnl_net:caif_netlink_parms(): no params data found
[   44.500647][ T5972] chnl_net:caif_netlink_parms(): no params data found
[   44.525188][ T5962] chnl_net:caif_netlink_parms(): no params data found
[   44.628502][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.631296][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.633287][ T5961] bridge_slave_0: entered allmulticast mode
[   44.635796][ T5961] bridge_slave_0: entered promiscuous mode
[   44.652807][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.654754][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.656955][ T5972] bridge_slave_0: entered allmulticast mode
[   44.659026][ T5972] bridge_slave_0: entered promiscuous mode
[   44.661984][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.663871][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.665850][ T5972] bridge_slave_1: entered allmulticast mode
[   44.667939][ T5972] bridge_slave_1: entered promiscuous mode
[   44.670197][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.672080][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.673978][ T5961] bridge_slave_1: entered allmulticast mode
[   44.675934][ T5961] bridge_slave_1: entered promiscuous mode
[   44.736151][ T5961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.758573][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.762187][ T5961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.766920][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.780118][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.782303][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.784218][ T5962] bridge_slave_0: entered allmulticast mode
[   44.786337][ T5962] bridge_slave_0: entered promiscuous mode
[   44.805993][ T5963] chnl_net:caif_netlink_parms(): no params data found
[   44.820153][ T5972] team0: Port device team_slave_0 added
[   44.823009][ T5972] team0: Port device team_slave_1 added
[   44.831972][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.834428][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.836458][ T5962] bridge_slave_1: entered allmulticast mode
[   44.838916][ T5962] bridge_slave_1: entered promiscuous mode
[   44.843394][ T5961] team0: Port device team_slave_0 added
[   44.851498][ T5961] team0: Port device team_slave_1 added
[   44.875278][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.877308][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.883840][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.914917][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.917069][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.923747][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.940572][ T5962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.943243][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.945090][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.952090][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.957721][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.959550][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.966290][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.972298][ T5962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.009694][ T5962] team0: Port device team_slave_0 added
[   45.032562][ T5972] hsr_slave_0: entered promiscuous mode
[   45.034423][ T5972] hsr_slave_1: entered promiscuous mode
[   45.045030][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.047439][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.049300][ T5963] bridge_slave_0: entered allmulticast mode
[   45.051309][ T5963] bridge_slave_0: entered promiscuous mode
[   45.053880][ T5962] team0: Port device team_slave_1 added
[   45.062807][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.064958][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.067101][ T5963] bridge_slave_1: entered allmulticast mode
[   45.069050][ T5963] bridge_slave_1: entered promiscuous mode
[   45.088867][ T5961] hsr_slave_0: entered promiscuous mode
[   45.090732][ T5961] hsr_slave_1: entered promiscuous mode
[   45.092701][ T5961] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   45.094733][ T5961] Cannot create hsr debugfs directory
[   45.121330][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.123127][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.130063][ T5962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.149080][ T5963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.151894][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.153733][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.160289][ T5962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.184497][ T5963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.220880][ T5963] team0: Port device team_slave_0 added
[   45.224007][ T5963] team0: Port device team_slave_1 added
[   45.260666][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.262482][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.269029][ T5963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.275329][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.277907][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.284364][ T5963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.296896][ T5962] hsr_slave_0: entered promiscuous mode
[   45.298746][ T5962] hsr_slave_1: entered promiscuous mode
[   45.300411][ T5962] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   45.302358][ T5962] Cannot create hsr debugfs directory
[   45.357124][ T5963] hsr_slave_0: entered promiscuous mode
[   45.358982][ T5963] hsr_slave_1: entered promiscuous mode
[   45.360862][ T5963] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   45.362862][ T5963] Cannot create hsr debugfs directory
[   45.414409][ T5961] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   45.420731][ T5961] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   45.424949][ T5961] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   45.429516][ T5961] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   45.479074][ T5972] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   45.482340][ T5972] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   45.486759][ T5972] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   45.490477][ T5972] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   45.523436][ T5962] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   45.531922][ T5962] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   45.535229][ T5962] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   45.538263][ T5962] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   45.562393][ T5963] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   45.566781][ T5963] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   45.570692][ T5963] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   45.576974][ T5963] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   45.603410][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.632726][ T5961] 8021q: adding VLAN 0 to HW filter on device team0
[   45.645240][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.647233][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.652261][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.654087][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.658898][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.665862][ T5962] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.691776][ T5963] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.696565][ T5972] 8021q: adding VLAN 0 to HW filter on device team0
[   45.701001][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.702849][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.707363][ T5962] 8021q: adding VLAN 0 to HW filter on device team0
[   45.713652][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.715404][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.722495][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.724294][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.728147][ T5963] 8021q: adding VLAN 0 to HW filter on device team0
[   45.733990][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.735826][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.743516][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.745435][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.753459][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.755336][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.808390][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.830475][ T5961] veth0_vlan: entered promiscuous mode
[   45.838076][ T5961] veth1_vlan: entered promiscuous mode
[   45.852301][ T5961] veth0_macvtap: entered promiscuous mode
[   45.855740][ T5961] veth1_macvtap: entered promiscuous mode
[   45.863291][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.868702][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.875651][ T5961] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.878628][ T5961] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.880889][ T5961] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.883135][ T5961] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.888720][ T5962] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.907616][ T5963] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.919052][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.942941][ T5962] veth0_vlan: entered promiscuous mode
[   45.949876][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.952009][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.953348][ T5963] veth0_vlan: entered promiscuous mode
[   45.963446][ T5962] veth1_vlan: entered promiscuous mode
[   45.970204][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.970819][ T5963] veth1_vlan: entered promiscuous mode
[   45.972267][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.989842][ T5962] veth0_macvtap: entered promiscuous mode
[   45.996629][ T5962] veth1_macvtap: entered promiscuous mode
[   45.999480][ T5972] veth0_vlan: entered promiscuous mode
[   46.005353][ T5961] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   46.007298][ T5972] veth1_vlan: entered promiscuous mode
[   46.012837][ T5963] veth0_macvtap: entered promiscuous mode
[   46.015836][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.019422][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.022685][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.026854][ T5963] veth1_macvtap: entered promiscuous mode
[   46.039349][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.042201][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.046807][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.055260][ T5963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.058752][ T5963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.061318][ T5963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.063928][ T5963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.067355][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.069797][ T5962] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.072079][ T5962] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.074318][ T5962] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.076883][ T5962] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.085834][ T5972] veth0_macvtap: entered promiscuous mode
[   46.091142][ T5972] veth1_macvtap: entered promiscuous mode
[   46.098533][ T5963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.101334][ T5963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.103863][ T5963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.106768][ T5963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.110574][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.119809][ T5963] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.122443][ T5963] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.125457][ T5963] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.136561][ T5963] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.149222][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.157751][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.160319][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.164201][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.168385][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.172940][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.177601][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.189202][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.192536][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.195553][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.199549][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.202120][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.204847][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.208203][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.216723][ T5972] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.219463][ T5972] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.221940][ T5972] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.224450][ T5972] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.232749][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.235262][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.266099][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.268347][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.268822][   T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.273707][   T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.294460][   T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.297063][   T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.311507][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.313596][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.319205][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.321292][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.427202][ T5970] Bluetooth: hci2: command tx timeout
[   46.427205][ T5966] Bluetooth: hci0: command tx timeout
[   46.427236][ T5974] Bluetooth: hci1: command tx timeout
[   46.427493][ T5966] Bluetooth: hci3: command tx timeout
[   46.495054][ T5974] block nbd0: Receive control failed (result -107)
[   46.582903][ T6033] block nbd0: shutting down sockets
[   47.046572][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   47.310780][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   47.347748][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   47.406147][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   47.603864][ T6052] syz.1.6: attempt to access beyond end of device
[   47.603864][ T6052] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0
[   47.608556][ T6052] hpfs: hpfs_map_sector(): read error
[   47.660980][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   47.716107][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   47.763385][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   48.316179][ T6070] overlayfs: empty lowerdir
[   48.507128][ T5974] Bluetooth: hci1: command tx timeout
[   48.509203][ T5974] Bluetooth: hci2: command tx timeout
[   48.511181][ T5974] Bluetooth: hci3: command tx timeout
[   48.513709][ T5974] Bluetooth: hci0: command tx timeout
[   48.742404][ T6078] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   48.788992][   T39] audit: type=1326 audit(1732739649.224:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.3.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000
[   48.801110][   T39] audit: type=1326 audit(1732739649.234:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.3.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000
[   48.809848][   T39] audit: type=1326 audit(1732739649.234:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.3.12" exe="/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf740e579 code=0x7ffc0000
[   48.816763][   T39] audit: type=1326 audit(1732739649.234:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.3.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000
[   48.823304][   T39] audit: type=1326 audit(1732739649.234:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.3.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000
[   48.836446][   T39] audit: type=1326 audit(1732739649.234:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.3.12" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf740e579 code=0x7ffc0000
[   48.842640][   T39] audit: type=1326 audit(1732739649.234:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.3.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000
[   48.852588][   T39] audit: type=1326 audit(1732739649.234:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.3.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000
[   48.861792][   T39] audit: type=1326 audit(1732739649.234:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.3.12" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf740e579 code=0x7ffc0000
[   48.927187][   T39] audit: type=1326 audit(1732739649.234:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.3.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000
[   48.976261][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   48.992191][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   49.056123][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   49.162862][ T6090] syz.0.13: attempt to access beyond end of device
[   49.162862][ T6090] nbd0: rw=0, sector=0, nr_sectors = 8 limit=0
[   49.168883][ T6090] hpfs: hpfs_map_sector(): read error
[   49.179697][ T6087] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.359377][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'.
[   50.586123][ T5970] Bluetooth: hci0: command tx timeout
[   50.587633][ T5970] Bluetooth: hci3: command tx timeout
[   50.588889][ T5974] Bluetooth: hci2: command tx timeout
[   50.588920][ T5319] Bluetooth: hci1: command tx timeout
[   50.671960][ T6087] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.751757][ T6108] netlink: 44 bytes leftover after parsing attributes in process `syz.3.19'.
[   50.755811][ T6108] netlink: 59 bytes leftover after parsing attributes in process `syz.3.19'.
[   50.785928][ T6087] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.847290][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'.
[   50.894180][ T6087] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.013363][ T6087] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.025640][ T6087] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.030036][ T6087] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.044985][ T6087] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.497074][ T6122] syz.1.22: attempt to access beyond end of device
[   51.497074][ T6122] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0
[   51.500400][ T6122] hpfs: hpfs_map_sector(): read error
[   52.129813][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'.
[   52.176606][ T6023] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   52.209808][ T6134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26'.
[   52.225785][ T6134] bridge_slave_1: left allmulticast mode
[   52.228028][ T6134] bridge_slave_1: left promiscuous mode
[   52.230693][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.330292][ T6023] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   52.336567][ T6023] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   52.341061][ T6143] netlink: 'syz.0.29': attribute type 3 has an invalid length.
[   52.344196][ T6143] netlink: 224 bytes leftover after parsing attributes in process `syz.0.29'.
[   52.347777][ T6023] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   52.351270][ T6023] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.357327][ T6023] usb 8-1: config 0 descriptor??
[   52.368093][ T6143] pimreg: entered allmulticast mode
[   52.666099][ T5974] Bluetooth: hci3: command tx timeout
[   52.666348][ T5970] Bluetooth: hci1: command tx timeout
[   52.666385][ T5966] Bluetooth: hci0: command tx timeout
[   52.676156][ T5974] Bluetooth: hci2: command tx timeout
[   53.433576][ T6023] usbhid 8-1:0.0: can't add hid device: -71
[   53.437261][ T6023] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[   53.449267][ T6023] usb 8-1: USB disconnect, device number 2
[   53.485054][ T6158] process 'syz.2.32' launched './file0' with NULL argv: empty string added
[   54.174600][ T6165] ata1.00: invalid command format 189
[   54.525024][ T6170] syz.2.35: attempt to access beyond end of device
[   54.525024][ T6170] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[   54.528414][ T6170] hpfs: hpfs_map_sector(): read error
[   54.791621][   T39] kauditd_printk_skb: 30 callbacks suppressed
[   54.791632][   T39] audit: type=1326 audit(1732739655.224:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.3.36" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x0
[   54.998886][ T6176] netlink: 'syz.3.36': attribute type 10 has an invalid length.
[   55.018533][ T6176] team0: Port device geneve1 added
[   55.140885][ T6179] syz.2.37: attempt to access beyond end of device
[   55.140885][ T6179] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[   55.144120][ T6179] hpfs: hpfs_map_sector(): read error
[   55.426082][ T6005] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   55.586058][ T6005] usb 5-1: Using ep0 maxpacket: 8
[   55.588668][ T6005] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   55.591129][ T6005] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   55.594078][ T6005] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   55.597338][ T6005] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   55.600654][ T6005] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   55.603065][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.669022][ T6176] syz.3.36 (6176) used greatest stack depth: 21312 bytes left
[   55.810714][ T6005] usb 5-1: usb_control_msg returned -32
[   55.812229][ T6005] usbtmc 5-1:16.0: can't read capabilities
[   55.826955][ T6191] syz.3.41: attempt to access beyond end of device
[   55.826955][ T6191] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[   55.834664][ T6191] hpfs: hpfs_map_sector(): read error
[   56.418435][   T67] usb 5-1: USB disconnect, device number 2
[   56.986864][ T6201] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.274761][ T6208] qrtr: Invalid version 255
[   57.332887][ T6208] netlink: 44 bytes leftover after parsing attributes in process `syz.1.44'.
[   57.411414][ T6211] warning: `syz.0.43' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.599439][ T6215] fuse: Bad value for 'fd'
[   57.948590][ T6219] trusted_key: syz.2.48 sent an empty control message without MSG_MORE.
[   58.031024][ T6222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.49'.
[   58.357516][ T6227] netlink: 'syz.0.50': attribute type 4 has an invalid length.
[   58.381574][ T6227] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   58.383425][ T6227] overlayfs: failed to set xattr on upper
[   58.384868][ T6227] overlayfs: ...falling back to redirect_dir=nofollow.
[   58.387254][ T6227] overlayfs: ...falling back to index=off.
[   58.388886][ T6227] overlayfs: ...falling back to uuid=null.
[   58.746766][ T6227] syz.0.50 (6227) used greatest stack depth: 20832 bytes left
[   60.527363][ T6256] syz.1.58: attempt to access beyond end of device
[   60.527363][ T6256] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0
[   60.531343][ T6256] hpfs: hpfs_map_sector(): read error
[   61.093078][ T6265] syz.1.60: attempt to access beyond end of device
[   61.093078][ T6265] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0
[   61.097633][ T6265] hpfs: hpfs_map_sector(): read error
[   61.266033][ T5848] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   61.378843][ T6270] syz.2.62: attempt to access beyond end of device
[   61.378843][ T6270] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[   61.382232][ T6270] hpfs: hpfs_map_sector(): read error
[   61.416017][ T5848] usb 8-1: Using ep0 maxpacket: 8
[   61.418645][ T5848] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   61.421195][ T5848] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   61.423503][ T5848] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   61.426340][ T5848] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   61.433199][ T5848] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   61.437962][ T5848] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.673140][ T5848] usb 8-1: usb_control_msg returned -32
[   61.674596][ T5848] usbtmc 8-1:16.0: can't read capabilities
[   61.809139][ T6273] capability: warning: `syz.2.63' uses deprecated v2 capabilities in a way that may be insecure
[   61.827078][ T6273] Zero length message leads to an empty skb
[   62.179741][ T6277] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[   62.182116][ T6277] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   62.185627][ T6277] vhci_hcd vhci_hcd.0: Device attached
[   62.605520][ T6029] vhci_hcd: vhci_device speed not set
[   62.744495][ T6029] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[   63.076122][ T5344] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   63.114622][ T6293] xt_CT: No such helper "pptp"
[   63.231907][ T5344] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   63.235560][ T5344] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   63.238931][ T5344] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   63.241945][ T5344] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.251997][ T5344] usb 7-1: config 0 descriptor??
[   63.455405][ T6283] vhci_hcd: connection reset by peer
[   63.462109][ T1140] vhci_hcd: stop threads
[   63.463924][ T1140] vhci_hcd: release socket
[   63.466215][ T1140] vhci_hcd: disconnect device
[   63.671497][ T5344] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[   63.674194][ T5344] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[   63.689312][ T5344] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0D8C:0022.0002/input/input5
[   63.710566][ T5344] cm6533_jd 0003:0D8C:0022.0002: input,hiddev1,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[   63.868994][ T6023] usb 7-1: USB disconnect, device number 2
[   64.029199][   T35] usb 8-1: USB disconnect, device number 3
[   64.292478][ T6301] syz.1.70: attempt to access beyond end of device
[   64.292478][ T6301] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0
[   64.296823][ T6301] hpfs: hpfs_map_sector(): read error
[   64.917121][ T5344] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   65.130305][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   65.176035][ T5344] usb 5-1: Using ep0 maxpacket: 8
[   65.179266][ T5344] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[   65.181605][ T5344] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[   65.184253][ T5344] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   65.186712][ T5344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.421640][  T831] usb 5-1: USB disconnect, device number 3
[   65.503703][ T6330] netlink: 'syz.0.78': attribute type 3 has an invalid length.
[   65.507389][ T6330] netlink: 224 bytes leftover after parsing attributes in process `syz.0.78'.
[   65.536123][    T9] usb 6-1: Using ep0 maxpacket: 8
[   65.548030][    T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   65.550596][    T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   65.556128][    T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   65.559516][    T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   65.563146][    T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   65.565591][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.783133][    T9] usb 6-1: GET_CAPABILITIES returned 0
[   65.784546][    T9] usbtmc 6-1:16.0: can't read capabilities
[   66.629587][ T6339] syz.0.81: attempt to access beyond end of device
[   66.629587][ T6339] nbd0: rw=0, sector=0, nr_sectors = 8 limit=0
[   66.633424][ T6339] hpfs: hpfs_map_sector(): read error
[   66.874194][ T6344] random: crng reseeded on system resumption
[   66.889216][ T6344] bridge0: port 3(syz_tun) entered blocking state
[   66.896962][ T6344] bridge0: port 3(syz_tun) entered disabled state
[   66.898778][ T6344] syz_tun: entered allmulticast mode
[   66.908076][ T6344] syz_tun: entered promiscuous mode
[   66.910371][ T6344] bridge0: port 3(syz_tun) entered blocking state
[   66.912516][ T6344] bridge0: port 3(syz_tun) entered forwarding state
[   67.856166][ T6029] vhci_hcd: vhci_device speed not set
[   69.577607][ T6378] capability: warning: `syz.3.92' uses 32-bit capabilities (legacy support in use)
[   69.601360][ T6379] netlink: 'syz.2.95': attribute type 3 has an invalid length.
[   69.603421][ T6379] netlink: 224 bytes leftover after parsing attributes in process `syz.2.95'.
[   69.612837][ T6379] pimreg: entered allmulticast mode
[   70.536497][ T6393] netlink: 172 bytes leftover after parsing attributes in process `syz.3.99'.
[   70.679617][ T1413] ieee802154 phy0 wpan0: encryption failed: -22
[   70.681533][ T1413] ieee802154 phy1 wpan1: encryption failed: -22
[   71.007225][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'.
[   71.009781][ T6396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.100'.
[   71.021186][ T6396] netlink: 16 bytes leftover after parsing attributes in process `syz.2.100'.
[   71.042146][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.100'.
[   71.068384][ T6316] usbtmc 6-1:16.0: usbtmc_ioctl_request failed -110
[   71.083697][  T831] usb 6-1: USB disconnect, device number 2
[   71.102493][ T6396] bond0: (slave bond_slave_0): Releasing backup interface
[   71.237805][ T6403] syz.2.102: attempt to access beyond end of device
[   71.237805][ T6403] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0
[   71.241408][ T6403] SQUASHFS error: Failed to read block 0x0: -5
[   71.243070][ T6403] unable to read squashfs_super_block
[   72.026050][   T39] audit: type=1326 audit(1732739672.454:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.1.107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000
[   72.031662][   T39] audit: type=1326 audit(1732739672.454:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.1.107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000
[   72.046012][   T39] audit: type=1326 audit(1732739672.454:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.1.107" exe="/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf7f35579 code=0x7ffc0000
[   72.054407][   T39] audit: type=1326 audit(1732739672.454:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.1.107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000
[   72.061344][   T39] audit: type=1326 audit(1732739672.454:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.1.107" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f35579 code=0x7ffc0000
[   72.074608][   T39] audit: type=1326 audit(1732739672.454:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.1.107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000
[   72.082469][   T39] audit: type=1326 audit(1732739672.454:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.1.107" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f35579 code=0x7ffc0000
[   72.091763][   T39] audit: type=1326 audit(1732739672.454:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.1.107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000
[   72.099261][   T39] audit: type=1326 audit(1732739672.454:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.1.107" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f35579 code=0x7ffc0000
[   72.107191][   T39] audit: type=1326 audit(1732739672.454:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.1.107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000
[   72.882178][ T6418] ==================================================================
[   72.884219][ T6418] BUG: KASAN: vmalloc-out-of-bounds in push_insn_history+0x615/0x690
[   72.886923][ T6418] Write of size 4 at addr ffffc90025adc010 by task syz.1.107/6418
[   72.890276][ T6418] 
[   72.890910][ T6418] CPU: 3 UID: 0 PID: 6418 Comm: syz.1.107 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0
[   72.893476][ T6418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   72.896169][ T6418] Call Trace:
[   72.897035][ T6418]  <TASK>
[   72.897800][ T6418]  dump_stack_lvl+0x116/0x1f0
[   72.899027][ T6418]  print_report+0xc3/0x620
[   72.900183][ T6418]  ? __virt_addr_valid+0x5e/0x590
[   72.901495][ T6418]  kasan_report+0xd9/0x110
[   72.902654][ T6418]  ? push_insn_history+0x615/0x690
[   72.903975][ T6418]  ? push_insn_history+0x615/0x690
[   72.905291][ T6418]  push_insn_history+0x615/0x690
[   72.906715][ T6418]  do_check_common+0xb78/0xd540
[   72.908386][ T6418]  ? lockdep_hardirqs_on+0x7c/0x110
[   72.910152][ T6418]  ? __pfx_do_check_common+0x10/0x10
[   72.911974][ T6418]  ? kvfree+0x47/0x50
[   72.913356][ T6418]  ? check_cfg+0x403/0x840
[   72.914883][ T6418]  bpf_check+0x77c2/0xc9b0
[   72.916104][ T6418]  ? hlock_class+0x4e/0x130
[   72.917377][ T6418]  ? __pfx_bpf_check+0x10/0x10
[   72.918995][ T6418]  ? find_held_lock+0x2d/0x110
[   72.920241][ T6418]  ? bpf_prog_load+0xd45/0x2670
[   72.921502][ T6418]  ? __pfx_lock_release+0x10/0x10
[   72.922766][ T6418]  ? trace_lock_acquire+0x146/0x1e0
[   72.924178][ T6418]  ? bpf_prog_load+0xd45/0x2670
[   72.925440][ T6418]  ? lockdep_hardirqs_on+0x7c/0x110
[   72.926776][ T6418]  ? read_tsc+0x9/0x20
[   72.927891][ T6418]  ? ktime_get_with_offset+0x20f/0x3a0
[   72.929875][ T6418]  ? bpf_obj_name_cpy+0x156/0x1b0
[   72.931453][ T6418]  bpf_prog_load+0xe3f/0x2670
[   72.932683][ T6418]  ? __pfx_bpf_prog_load+0x10/0x10
[   72.934092][ T6418]  ? find_held_lock+0x2d/0x110
[   72.935259][ T6418]  ? __might_fault+0x13b/0x190
[   72.936432][ T6418]  ? __might_fault+0xe3/0x190
[   72.937624][ T6418]  __sys_bpf+0x5677/0x57a0
[   72.938742][ T6418]  ? __pfx_futex_wake+0x10/0x10
[   72.939943][ T6418]  ? __pfx___sys_bpf+0x10/0x10
[   72.941201][ T6418]  ? do_futex+0x123/0x350
[   72.942283][ T6418]  ? __pfx_do_futex+0x10/0x10
[   72.943499][ T6418]  ? xfd_validate_state+0x5d/0x180
[   72.944806][ T6418]  ? rcu_is_watching+0x12/0xc0
[   72.945993][ T6418]  __ia32_sys_bpf+0x76/0xe0
[   72.947114][ T6418]  __do_fast_syscall_32+0x73/0x120
[   72.948701][ T6418]  do_fast_syscall_32+0x32/0x80
[   72.950434][ T6418]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   72.952158][ T6418] RIP: 0023:0xf7f35579
[   72.953143][ T6418] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   72.957746][ T6418] RSP: 002b:00000000f509557c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[   72.959915][ T6418] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200017c0
[   72.961813][ T6418] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000
[   72.963715][ T6418] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   72.965622][ T6418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   72.967687][ T6418] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   72.970435][ T6418]  </TASK>
[   72.971557][ T6418] 
[   72.972172][ T6418] The buggy address belongs to the virtual mapping at
[   72.972172][ T6418]  [ffffc90025abc000, ffffc90025ade000) created by:
[   72.972172][ T6418]  kvrealloc_noprof+0xfc/0x150
[   72.976442][ T6418] 
[   72.977030][ T6418] The buggy address belongs to the physical page:
[   72.978671][ T6418] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x354e pfn:0x54427
[   72.980912][ T6418] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[   72.983155][ T6418] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000
[   72.986075][ T6418] raw: 000000000000354e 0000000000000000 00000001ffffffff 0000000000000000
[   72.988700][ T6418] page dumped because: kasan: bad access detected
[   72.990329][ T6418] page_owner tracks the page as allocated
[   72.991789][ T6418] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102cc2(GFP_HIGHUSER|__GFP_NOWARN), pid 6418, tgid 6416 (syz.1.107), ts 72882093935, free_ts 72870227402
[   72.995938][ T6418]  post_alloc_hook+0x2d1/0x350
[   72.997268][ T6418]  get_page_from_freelist+0xfce/0x2f80
[   72.999172][ T6418]  __alloc_pages_noprof+0x6a6/0x25a0
[   73.001026][ T6418]  alloc_pages_mpol_noprof+0x2c9/0x610
[   73.002683][ T6418]  __vmalloc_node_range_noprof+0x724/0x1530
[   73.004151][ T6418]  __kvmalloc_node_noprof+0x14f/0x1a0
[   73.005480][ T6418]  kvrealloc_noprof+0xfc/0x150
[   73.006683][ T6418]  push_insn_history+0x2ac/0x690
[   73.007959][ T6418]  do_check_common+0xb78/0xd540
[   73.009456][ T6418]  bpf_check+0x77c2/0xc9b0
[   73.010517][ T6418]  bpf_prog_load+0xe3f/0x2670
[   73.011685][ T6418]  __sys_bpf+0x5677/0x57a0
[   73.012781][ T6418]  __ia32_sys_bpf+0x76/0xe0
[   73.013892][ T6418]  __do_fast_syscall_32+0x73/0x120
[   73.015162][ T6418]  do_fast_syscall_32+0x32/0x80
[   73.016400][ T6418]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   73.018005][ T6418] page last free pid 6418 tgid 6416 stack trace:
[   73.019601][ T6418]  free_unref_folios+0xa7b/0x14f0
[   73.020901][ T6418]  shrink_folio_list+0x3468/0x42d0
[   73.022246][ T6418]  evict_folios+0x6e3/0x19c0
[   73.023834][ T6418]  try_to_shrink_lruvec+0x61e/0xa80
[   73.025590][ T6418]  shrink_one+0x3e3/0x7b0
[   73.027048][ T6418]  shrink_node+0xbf0/0x3f20
[   73.028548][ T6418]  do_try_to_free_pages+0x35f/0x1a30
[   73.029865][ T6418]  try_to_free_pages+0x2ae/0x6b0
[   73.031091][ T6418]  __alloc_pages_noprof+0xb0c/0x25a0
[   73.032424][ T6418]  alloc_pages_mpol_noprof+0x2c9/0x610
[   73.033780][ T6418]  new_slab+0x2e7/0x410
[   73.034809][ T6418]  ___slab_alloc+0xd1d/0x16e0
[   73.035970][ T6418]  __slab_alloc.constprop.0+0x56/0xb0
[   73.037303][ T6418]  __kmalloc_node_track_caller_noprof+0x2ee/0x520
[   73.038844][ T6418]  krealloc_noprof+0x1fb/0x360
[   73.040087][ T6418]  copy_array.constprop.0+0x84/0xf0
[   73.041445][ T6418] 
[   73.042073][ T6418] Memory state around the buggy address:
[   73.043518][ T6418]  ffffc90025adbf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   73.045575][ T6418]  ffffc90025adbf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   73.047620][ T6418] >ffffc90025adc000: 00 00 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   73.049737][ T6418]                          ^
[   73.050900][ T6418]  ffffc90025adc080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   73.052843][ T6418]  ffffc90025adc100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   73.054820][ T6418] ==================================================================
[   73.065409][ T6418] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   73.067765][ T6418] CPU: 3 UID: 0 PID: 6418 Comm: syz.1.107 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0
[   73.070679][ T6418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   73.074264][ T6418] Call Trace:
[   73.075403][ T6418]  <TASK>
[   73.076443][ T6418]  dump_stack_lvl+0x3d/0x1f0
[   73.078030][ T6418]  panic+0x71d/0x800
[   73.079358][ T6418]  ? __pfx_panic+0x10/0x10
[   73.080905][ T6418]  ? preempt_schedule_thunk+0x1a/0x30
[   73.082723][ T6418]  ? preempt_schedule_common+0x44/0xc0
[   73.084564][ T6418]  check_panic_on_warn+0xab/0xb0
[   73.086238][ T6418]  end_report+0x117/0x180
[   73.087725][ T6418]  kasan_report+0xe9/0x110
[   73.089257][ T6418]  ? push_insn_history+0x615/0x690
[   73.091057][ T6418]  ? push_insn_history+0x615/0x690
[   73.092811][ T6418]  push_insn_history+0x615/0x690
[   73.094543][ T6418]  do_check_common+0xb78/0xd540
[   73.096221][ T6418]  ? lockdep_hardirqs_on+0x7c/0x110
[   73.098059][ T6418]  ? __pfx_do_check_common+0x10/0x10
[   73.099905][ T6418]  ? kvfree+0x47/0x50
[   73.101325][ T6418]  ? check_cfg+0x403/0x840
[   73.102903][ T6418]  bpf_check+0x77c2/0xc9b0
[   73.104486][ T6418]  ? hlock_class+0x4e/0x130
[   73.106096][ T6418]  ? __pfx_bpf_check+0x10/0x10
[   73.107766][ T6418]  ? find_held_lock+0x2d/0x110
[   73.109391][ T6418]  ? bpf_prog_load+0xd45/0x2670
[   73.111018][ T6418]  ? __pfx_lock_release+0x10/0x10
[   73.112913][ T6418]  ? trace_lock_acquire+0x146/0x1e0
[   73.114689][ T6418]  ? bpf_prog_load+0xd45/0x2670
[   73.116389][ T6418]  ? lockdep_hardirqs_on+0x7c/0x110
[   73.118148][ T6418]  ? read_tsc+0x9/0x20
[   73.119529][ T6418]  ? ktime_get_with_offset+0x20f/0x3a0
[   73.121406][ T6418]  ? bpf_obj_name_cpy+0x156/0x1b0
[   73.123122][ T6418]  bpf_prog_load+0xe3f/0x2670
[   73.124721][ T6418]  ? __pfx_bpf_prog_load+0x10/0x10
[   73.126412][ T6418]  ? find_held_lock+0x2d/0x110
[   73.128444][ T6418]  ? __might_fault+0x13b/0x190
[   73.130079][ T6418]  ? __might_fault+0xe3/0x190
[   73.131696][ T6418]  __sys_bpf+0x5677/0x57a0
[   73.133252][ T6418]  ? __pfx_futex_wake+0x10/0x10
[   73.134946][ T6418]  ? __pfx___sys_bpf+0x10/0x10
[   73.136610][ T6418]  ? do_futex+0x123/0x350
[   73.138088][ T6418]  ? __pfx_do_futex+0x10/0x10
[   73.139251][ T6418]  ? xfd_validate_state+0x5d/0x180
[   73.140551][ T6418]  ? rcu_is_watching+0x12/0xc0
[   73.142030][ T6418]  __ia32_sys_bpf+0x76/0xe0
[   73.143593][ T6418]  __do_fast_syscall_32+0x73/0x120
[   73.145361][ T6418]  do_fast_syscall_32+0x32/0x80
[   73.147041][ T6418]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   73.149189][ T6418] RIP: 0023:0xf7f35579
[   73.150564][ T6418] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   73.156953][ T6418] RSP: 002b:00000000f509557c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[   73.159122][ T6418] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200017c0
[   73.161194][ T6418] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000
[   73.163269][ T6418] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   73.165350][ T6418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   73.167391][ T6418] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   73.169438][ T6418]  </TASK>
[   73.170821][ T6418] Kernel Offset: disabled
[   73.171913][ T6418] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:34:33  Registers:
info registers vcpu 0

CPU#0
RAX=dffffc0000000000 RBX=ffff88802b42ca00 RCX=0000000000000001 RDX=0000000000000001
RSI=ffffffff8b6cda80 RDI=ffff88802b42ca04 RBP=0000000000000046 RSP=ffffc900006c6448
R8 =0000000000000000 R9 =fffffbfff2d7e398 R10=ffffffff96bf1cc7 R11=0000000000000005
R12=ffffed1005687ece R13=0000000000000000 R14=dffffc0000000000 R15=ffff88802b43f670
RIP=ffffffff816b6f6a RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b400000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000f1f2b778 CR3=00000000648ba000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000a60ce07b 00000000cec3662e
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3e796e5e55a7e58a
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff813d09ee RDX=ffff88802407a440
RSI=ffffffff813d0a0b RDI=0000000000000000 RBP=ffff88802b43ebc0 RSP=ffffc90022837898
R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000000
R12=0000000000000003 R13=0000000000000003 R14=ffff88802b53fb00 R15=ffffed1005687d78
RIP=ffffffff813d0a0c RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f50f4548 CR3=000000004b710000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000002 RBX=0000000000042d10 RCX=ffffffff816a0fae RDX=0000000000000002
RSI=ffffffff8bd164e0 RDI=ffffffff8bd16520 RBP=ffff88801ac42780 RSP=ffffc900034a7bc8
R8 =0000000000000000 R9 =fffffbfff2d7e398 R10=ffffffff96bf1cc7 R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=0000000000000002 R15=0000000000000003
RIP=ffffffff81e5eb3f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe0688be280 ffffffff 00c00000
GS =0000 ffff88802b600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000020032000 CR3=00000000664c0000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fed0ff00 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=4000040442002010
Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 003d45444f4d5645 44003d524f4e494d
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1c449840 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff00ffff000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff0000ff00000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff00ffff000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffff0000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 722f766564752f62 696c2f7273752f00 534b4e494c564544 00454d414e564544
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000221 0000000000000000 32706f6f6c2f6b63 6f6c622f6c617574
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 68636163627c2a64 76787c2a64767c2a 72737c2a64737c2a 656d766e7c00312d
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ec109e4420 000055ec109d69d0 000055ec109e44f0 000055ec109e9a60
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ec109e37e0 000055ec10a2dce0 000055ec109ecd30 000055ec109e5f30
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a3a263e383a3a26 39383a3a2638383a 3a263b383a3a263a 383a3a26493b3a3a
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 0000000000000030 682f13746f6f7465 00004e4f4e414552
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 0000000000000030 00001374106f7465 00004e4f4e414552
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff8509bfc0 RDI=ffffffff9a8a1240 RBP=ffffffff9a8a1200 RSP=ffffc900251fef60
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257
R12=0000000000000000 R13=0000000000000060 R14=fffffbfff351429a R15=dffffc0000000000
RIP=ffffffff8509bfe7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000003081fffc CR3=000000006867a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5dcc8e01316a585a b26cce19748ead6c
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 40722cac2ccd40e2 93c52af385129e6b
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8313ee446d5a790b 63c9110ae2a73328
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 551d9a7bb35136de 6d1e2603520bfa43
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000c80
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000002d0000002d 008001000000002d
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 441bbbe644276a0c 4438a0d40000002d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00800100441bfad4 0000002d00800100
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4430272600800100 00800100440e52c4
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 26d5a6bf13d5791a 4ee67ec13182b71b
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2b1446340ad65108 e0e42b3bfd672ebd
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000