last executing test programs:

1.310478504s ago: executing program 0 (id=53):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x64, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x13}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8801}, 0x4000844)
setreuid(0xee01, 0xee01)
madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x16)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000001600850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r3, <r5=>0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)=r4}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000b00)={r5, &(0x7f0000000a40)="0b4ad768"}, 0x20)
sendmsg$inet(r2, &(0x7f0000001580)={&(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000001440)=[{&(0x7f0000000040)="e8f8ff078d641d0586e89e180b2f80956b596bc24a65aec5c10c74219adfbdfdbbfbfdce8bac6538cb21a22f15e8eae9be65ab755325fcda9db39d74cad1846a2e9b61002d76db8f18f47ef30e72ff6afe2b8d57dc82b21b61564a9d57f17d7c55d740f5f7282961c9d36c960d248c80bb9cc802bf5c8f873e5d377216aed09fcf4fdce4ccbebce046d3780037608f9500d2c898f9bcb6aacf7e66a91ecf0fe1fcdae7c7389dd21d", 0xa8}, {&(0x7f0000000100)="1fed", 0x2}, {&(0x7f0000000140)="0ce5a20df688bacdda31b027c971f828e79a07ff24cd12a88206333a61fe299a7f849de0c9e6f0f93fa17874395ea167a71eb260ad6d37f0b9986e8b6a85720df800e0a08f153c6a7eaca67be70e6b441dbe9d3bf916d8a14a3c5cfcf8c1931817e219cc99600e1d62761e6051c373e13875e08c4e7b0b60566df36540dcb4", 0x7f}, {&(0x7f0000001680)="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"/4112, 0x1010}, {&(0x7f00000011c0)="0c42570a2cd5546b57f27c7c2eea19ffa94a4af1e409b899c5f446de9fb34d5cfabb43a3f03747fe03581d0433e0b0cb76689eab112c05af3b6eff7cdc4926edc55a24ec2bdfcde15d5ac45e9dda501d3eb807a361c770ccf02ca4abef096ecb2ec409d573af78545414eef3faa140d5a3aabbf2ffb8109e5f4f5357fc", 0x7d}, {&(0x7f0000001240)="9e92e3302dd0de0e3fcbc73ac6a9eb4cf930e3b96f597d3afb1bdc0d140879e2bb0fb806031c8e8104c305b25d9c6733aa04548d3d369d0ab8a5ac3edc8a2ba9d02df82712d74c72e99d110ccf383a272a5a1c7d9370843098aa54ef7258e5472f6f6da88450b73f44afbd7be8a0da601edc7edb666c102e65d71c2810a9b39ba0c599bad42fbaa84f80bb655bfb47aa4c8f2f0b859fc44b89c18554a6384ca207339074733e9a4e95524f7c1934cd06f21dd08b0137798660ec40c564563a7d8c28756ae91d5b", 0xc7}, {&(0x7f0000001340)="75a186ecc335baef13017af70128859527b1d14a8e7e04338fbd415af4849c107016aeaf620c163973192922770fb865560e2361bbb9f0b918097e0b089727453cd699ee37293b483c29de77b1dd76b5f260eee9d1caf5820ef8641c19268ddc357b94ffb4a014eab83b1136a9fedf23a8614cd414d56dce95bde9422c2765e5d74293ad87f6aaf80ddc1cf33d84ce0a767337b498ec52f5465e19aa591469d746428041bbe211ead5e4045e1fe0b494765dd505e97155f0a495d97eff5955169c063f66896bc7f4a1d70fc08e147da5cb16f575c46b90fbe9395032477013b0820eb27dd983f5ea4bd91fd7", 0xec}], 0x7, &(0x7f00000015c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x34, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0xfe, [@multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010101, @multicast2, @private=0xa010100, @local]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x547a}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x98}, 0x4008000)

1.250253006s ago: executing program 0 (id=55):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0) (async)
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$CDROMREADAUDIO(r4, 0x30d, &(0x7f0000002140)={@msf={0xef, 0x3}, 0x2, 0x0, 0x0}) (async)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, &(0x7f00000000c0)={0x1, 0x3, 0x23, 0x6}) (async)
ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, &(0x7f0000000140)={0x1, 0x1}) (async)
timer_create(0x3, 0x0, &(0x7f0000044000)=<r6=>0x0) (async)
timer_create(0x3, 0x0, &(0x7f0000044000)=<r7=>0x0)
timer_settime(r7, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x101}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) (async)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8) (async)
timer_settime(r6, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x1, &(0x7f0000000040)={0x0, 0x3a, 0x4, @tid=r0}, &(0x7f00000000c0))
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x3938700}, {r2, r3+10000000}}, 0x0) (async)
r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, 0x0, 0x0, 0x0) (async)
futex(&(0x7f000000cffc), 0x2, 0x1, 0x0, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r10 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0)
bind$llc(r9, &(0x7f0000000080), 0x10) (async)
getsockopt$llc_int(r9, 0x10c, 0x6, &(0x7f0000000100), &(0x7f0000000180)=0x4) (async)
listen(r9, 0x0)

1.203948452s ago: executing program 0 (id=59):
r0 = userfaultfd(0x80001)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000040))
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0x1a, 0xa, 0x3, "b75c89e7a20c8eac1638b5394c000000000006000000000000e8ff00", 0x32314d54})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0xc0})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
unshare(0x8000000)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r4, 0x40000000af01, 0x0)
shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil)
sendto$x25(r3, &(0x7f0000000000)="4fdd92941551f3c426e0f42971ea421bef3cf7ad9d1678cfa5b5248890969ee7ecd1a3f176566ba164b779b6", 0x2c, 0x4000000, 0x0, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r6 = fanotify_init(0x8, 0x800)
fanotify_mark(r6, 0x105, 0x4800003a, r5, 0x0)
close(0x3)
pipe(&(0x7f00000000c0)={<r7=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000000)={<r8=>0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x80000000})
close_range(r8, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r9=>r3}, './file0\x00'})
ioctl$SIOCRSSL2CALL(r9, 0x89e2, &(0x7f0000000140)=@default)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2})

1.152946445s ago: executing program 1 (id=62):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/38)
ioctl$sock_proto_private(r1, 0x894a, &(0x7f0000000000)) (async)
r2 = socket(0x8000000010, 0x2, 0x0)
write(r2, &(0x7f00000002c0)="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", 0xfc)
r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000500000000000000000f4a55c1"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000100)="7150d2295ad2b2bf9da0792bd02ab7b92eaa62d2f025d1e94d462cc7603d3396d22144e90609d05395c9a13c54ae4a804003151dfcee8c3e54b65ddc2d8c8291ea3b724c20ca90d5", 0x0, 0x48)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000080)={0x8080000, 0x10000})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x8000000000, 0x1, 0x1, 0x8, 0x4002004c5, 0x1000, 0x1, 0x0, 0x7, 0xe, 0x0, 0x6, 0x0, 0x49], 0xdddd1000, 0x1c6256}) (async)
r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) (async)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r9, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r9, 0x80487436, &(0x7f0000000080)) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r10, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) (async)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x1})
ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
fsopen(&(0x7f0000000300)='jfs\x00', 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)

1.152530383s ago: executing program 0 (id=63):
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
socket(0x18, 0x0, 0x0) (async)
socket(0x18, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x34, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0810}, 0x8000)
r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x201, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11011, r3, 0x2000)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0)

1.0734791s ago: executing program 2 (id=65):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@var={0x6, 0x0, 0x0, 0xe, 0x2}, @union]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x2e, 0x5f]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x180)
r2 = dup(r1)
ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x23, 0x17, 0x1c, 0x0, 0x0, 0x0, 0x0})
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000002c0001000000000000000000040000800800188008ac0f"], 0x2c}], 0x1}, 0x0)

1.01387244s ago: executing program 0 (id=68):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x58}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
pselect6(0x40, &(0x7f0000000080)={0x1, 0xf, 0x4, 0x80000000, 0x401, 0x4010000000, 0x1, 0x2}, &(0x7f00000000c0)={0x4, 0x0, 0xffffffffffffffff, 0x10000, 0x4, 0x4, 0x6, 0x26c3fddc}, &(0x7f0000000180)={0x3, 0x937, 0x5, 0x100000000, 0x8001, 0x1, 0x100, 0x9}, &(0x7f00000001c0), &(0x7f0000000400)={&(0x7f00000003c0)={[0xc]}, 0x8})
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)

1.013540633s ago: executing program 2 (id=69):
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5)
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x240c80c0, &(0x7f0000000240)={0xa, 0xe20, 0x0, @mcast2}, 0x1c)
sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x4010, 0x0, 0x0)

1.010832277s ago: executing program 1 (id=70):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000200000004000000065e97cb011b473fd1000000000000006663ecc31f2fc816b0dd4d3d5f6e4307df20bd676e78566e9b9b3f1d9255728ce9fac3c370dec21880abbf7ec0176ac3f13838158a2490d6e5fa8dda1d821f4c5201daede321836694c11b5376b966802472caeb532d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000200000004000000065e97cb011b473fd1000000000000006663ecc31f2fc816b0dd4d3d5f6e4307df20bd676e78566e9b9b3f1d9255728ce9fac3c370dec21880abbf7ec0176ac3f13838158a2490d6e5fa8dda1d821f4c5201daede321836694c11b5376b966802472caeb532d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.time\x00', 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x2d, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) (async)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x2d, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x208000)
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0)
write$P9_RSTATu(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="330200007d00000005f2000000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x233)
write$cgroup_int(r4, &(0x7f0000000300)=0x400, 0x12)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000040)=0x2, &(0x7f0000000180)=r0, 0x2}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000040)=0x2, &(0x7f0000000180)=r0, 0x2}, 0x20)

959.784024ms ago: executing program 2 (id=71):
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xca}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000003c0)=0x1ff, 0x12)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
writev(r2, &(0x7f0000000580), 0x1000000000000297)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000100)={{r2}, 0x1, &(0x7f00000000c0)=[0x4], 0x4, 0x1, 0x1})
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc600900050282c137153e370e0c11000000000000", 0x27}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091e2b14a0778a8123d181d"], 0xfe33)

959.077517ms ago: executing program 0 (id=72):
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x23, 0xa6, {0xa6, 0x1, "96606e5a8adfe2a5cc2a8bc22442be3de72d5d25f7a2935720e5e047fc0028a21e376a6a2e0dd851d1e659272d9321ca23d90bdef76dcca94ecaec57c5795c7ba261828b7f16d7543bca24c4d2e59cc903d5a0d96e5063e143354cb60b219cad8ecf2cdea75de58f7e1fa3ba3198c4c95070f053400aed75e782c9917f8ec46421044ed27dec70f94124eee9bbb21b29e5ecb4400fa043badb5a7a030ae22164b057533f"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x44, &(0x7f0000000140)={0x20, 0x16, 0x61, "4645cb9ac5d7ad37a9f5ed84c475f574b30e341d27ea67a1e930b37b862b6b69413e5e861f031d035f77e8fbdd9e9407bc4bb97765ec2076da7d09b30d2086065bc0219bb3e4a925f9c3b0437950f1c2fcc1225869c5370a623853fa8fc65f02b4"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x6, 0x7, 0x3, 0x1, 0x3, 0xa721, 0x8, 0x10, 0x2, 0x6, 0x648, 0x9860}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x5}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x93f7}, &(0x7f0000000340)={0x20, 0x89, 0x2}})
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x3, [@enum64={0x6, 0x2, 0x0, 0x13, 0x1, 0x0, [{0xe, 0x6, 0x2}, {0x1, 0xb1, 0x4}]}, @enum64={0x9, 0x6, 0x0, 0x13, 0x1, 0x1, [{0x144, 0x14de, 0x8001}, {0xd, 0xffffff01, 0x8}, {0xa, 0x2, 0x4b}, {0x10, 0x5, 0x6}, {0x5, 0x238}, {0x5, 0xedff, 0x3}]}, @fwd={0xe}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x1b, 0x0, 0x31}]}, {0x0, [0x5f]}}, &(0x7f00000004c0)=""/177, 0xaf, 0xb1, 0x1, 0x9, 0x10000, @value}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x18000000, 0x3, 0x2, 0x44060, 0x1, 0x9, '\x00', 0x0, r0, 0x3, 0x3, 0x4, 0x5, @void, @value, @void, @value}, 0x50)
syz_open_dev$char_usb(0xc, 0xb4, 0x7)
fcntl$addseals(r1, 0x409, 0xa)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x8000, 0x0) (async)
r3 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x24d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf6, 0xe0, 0x9, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x6, 0x8, 0x1, {0x22, 0xee2}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x83, 0xe}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x5, 0xd7, 0x2c}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x0, 0x4, 0x10, 0x0, 0x40, 0x5}, 0x3b, &(0x7f0000000700)={0x5, 0xf, 0x3b, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "26304f6aa21974491375360a7cb0835f"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x83, 0x3, 0xa, 0xfffb, 0xd6}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x8, 0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x4, 0x4}]}, 0x8, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x1409}}, {0xb9, &(0x7f0000000780)=@string={0xb9, 0x3, "e20136b710d9a3b1155869d5ccd265ef3101fc6d02afb7a9b8d945d16ddd6715a1d5e3addf4ec4962882dcb45b27daf4240448469aa38ac7f0dba464eec48c201ba3095b6d7dfe67a07a862e4004a6ca434176b4067e8a1c2b9cd2bcda12e736bf0897b80eec472eb12ba3a09efc09aeec810f70d2ca645ebaa39399bcb1290c12be7f4ba6cbce297e8be239fb267a454e82884c0818ae1466671a2ec18a04647712480e9340fc5a190e3db18e4b238a0c1b3ae38f759f"}}, {0x8d, &(0x7f0000000840)=@string={0x8d, 0x3, "37879a62b5d3c53d65e8e175863bbafc67feaf69b702c29dbe7584c23be9ee64023c08102bb9452487daf62fe9dd8c4e4d10fb0e9ea7ea81d7ac2e97ce4bdea1ef1f473758f4df6a173bf5119a5909a7c4493d12b7b232aa5d0f742dd5ac36ec3a8a83b78d20fdc5f76a758f92ec74d78663ae3ed7e9fd8ceee780e8afea8437cd53a5a69fbdd3e0b67156"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x182b}}, {0x31, &(0x7f0000000940)=@string={0x31, 0x3, "825abc3f8c73cc610cbbc3f40b168a5c08403dcea17143a0a11c7b04a6fa5ac66de1018068267b6843f85df473a2af"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x422}}, {0x58, &(0x7f0000000a00)=@string={0x58, 0x3, "d36c46ade53d8af0dbaccc4eaf062e60e205450d80581f6375e5336ddc6c2be3bd00bec8a3f35cfc6976b9f0404958e246c4cb2c520638e5dbbc557a3c90db0315a7080155be9ab0f007e3ae33c8b072a1e1e9253328"}}]})
syz_usb_control_io$hid(r3, &(0x7f0000000c40)={0x24, &(0x7f0000000b00)={0x20, 0x7, 0x14, {0x14, 0x10, "95b77068374520c414196a1328ba65af6ac8"}}, &(0x7f0000000b40)={0x0, 0x3, 0x5d, @string={0x5d, 0x3, "bcc83ef2265e76c8faf09ec9f58ee9795e2d2ae2046cdb58ec5568ce616f6a4f5419aa623c18cf6cc099efe5bb5b021eadff58d62d006d786b2fbeed706bc8a2bb52ee55cb90eaf326dc913421bd5a4d178bb4a7f2346f15a96240"}}, &(0x7f0000000bc0)={0x0, 0x22, 0xc, {[@global=@item_4={0x3, 0x1, 0x0, "f8161472"}, @main=@item_012={0x1, 0x0, 0x8, "a8"}, @local=@item_4={0x3, 0x2, 0x4, "371c623d"}]}}, &(0x7f0000000c00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0xb7, 0x1, {0x22, 0xef6}}}}, &(0x7f0000000e40)={0x2c, &(0x7f0000000c80)={0x20, 0xf, 0x9f, "a415e884cf2aabf4f21f50f71aa39b75c39bccec06f6541eff9c0773c29f2ccb6852188e2f8a0da9cc7e976d7e864f4e5b4ebb73d72bd44a7ce9ec2e5ef3814b39bea9fa973a9a905dbf3c7757ccb8d95c24fe30bc456ec07ddd230393f343615aa7a48e0ab6d0275de7f2635781f29d6c22b01f67ad9930c461ee4e33ad90ac161da2afa53f56c9bcef9270de8c29af73dbf3a19226f65cba0eaaeaf35902"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0xdb}, &(0x7f0000000d80)={0x0, 0x8, 0x1}, &(0x7f0000000dc0)={0x20, 0x1, 0x21, "e46766e9f39aea26ce46d86f8df7749a28d4c7e1a602e3ecc356541ceb8ae8e38d"}, &(0x7f0000000e00)={0x20, 0x3, 0x1}})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000e80)={<r4=>0xffffffffffffffff})
shutdown(r4, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_MSG_GETGEN(r4, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
mount(&(0x7f0000000fc0)=@sg0, &(0x7f0000001000)='./file0\x00', &(0x7f0000001040)='cgroup\x00', 0x2211001, &(0x7f0000001080)='[\x00') (async)
pipe(&(0x7f00000010c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0044d18, &(0x7f0000001100)=0x58)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000001180)={'batadv0\x00', <r9=>0x0})
sendmsg$BATADV_CMD_GET_VLAN(r8, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000084)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IP_SET_OP_VERSION(r10, 0x1, 0x53, &(0x7f0000001280), &(0x7f00000012c0)=0x8) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000001300)={0xfffffeff, 0x584eaf82e7ade313, 0x2, "f95ab163b2da7ee0ccc8e341d92953cfacc6f716c4d3e026e54d1e553a0d4def", 0x494e4f4b}) (async)
sendmsg$key(r7, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={0x2, 0x0, 0xe, 0x3, 0x9, 0x0, 0x40, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x4d3, 0x1, 0x20, 0x94, 0x2, 0x60000003}, @sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00', 0x6, 0x14}]}, 0x48}}, 0x13) (async)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x60, 0x1, 0x1, 0x801, 0x0, 0x0, {0x9, 0x0, 0x1}, [@CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x60}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x81}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3ff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000810) (async)
sendfile(r2, r1, &(0x7f0000001580)=0xfffffffffffffff8, 0x1000)
setsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f00000015c0)=0x63, 0x2) (async, rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000017c0)={{0x1, 0x1, 0x18, <r11=>r4, {0x80000001}}, './file0\x00'}) (rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x11, 0x4, &(0x7f0000001600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}, [@jmp={0x5, 0x0, 0xd, 0x5, 0x3, 0x4, 0x8}]}, &(0x7f0000001640)='syzkaller\x00', 0xfffffe00, 0xa4, &(0x7f0000001680)=""/164, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001740)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001780)={0x0, 0x4, 0x7f, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001800)=[r11, r6, r7], 0x0, 0x10, 0x9, @void, @value}, 0x94)
sendmsg$nl_route(r4, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)=@ipv4_getrule={0x1c, 0x22, 0x10, 0x70bd26, 0x25dfdbfe, {0x2, 0x20, 0x80, 0x7, 0xa, 0x0, 0x0, 0x6}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x6084)
sendmsg$nl_route_sched_retired(r7, &(0x7f0000002e00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x6019000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000001a40)=@newtfilter={0x1344, 0x2c, 0x10, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xe, 0xd}, {0xa, 0xd}}, [@f_rsvp6={{0xa}, {0x1314, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x5901}, {0x2, 0x1, 0xa}, 0x73, 0xff, 0x5}}, @TCA_RSVP_POLICE={0xc34, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6c3, 0x6, 0x1, 0x4, 0xf, 0x2d, 0x8b51, 0x8d, 0x40000, 0x10000, 0x80000000, 0x200, 0x6, 0x9, 0xfab3, 0xffff, 0x3, 0x4800000, 0x0, 0x5, 0x9, 0x9, 0x2c7, 0xc, 0x8000, 0x34d0, 0x17, 0x4, 0x1, 0xc, 0x0, 0x1, 0xca7, 0x2, 0xc, 0x2, 0x8, 0x8, 0x3, 0x6, 0x3, 0x7fff, 0x6, 0x6, 0x9, 0x7, 0x7ff, 0x5, 0x0, 0x9dc6, 0x200, 0xfffffffe, 0x23e, 0x1, 0x6, 0x6, 0x5, 0x6, 0x9, 0x0, 0xfb8d, 0x800, 0x8, 0x200, 0x126d, 0x8, 0x1, 0x2, 0x101, 0x7f, 0xfffffd6f, 0x7, 0x2f9b, 0x2, 0x8000, 0x7, 0x3, 0x5, 0x2a, 0x21, 0x800, 0x6, 0x8, 0xfffffff4, 0x4, 0x7f, 0x7, 0xc, 0x80000001, 0x2, 0x7fff, 0x1ff, 0x8, 0x5, 0x40, 0xffffffff, 0x5, 0x3ff, 0x5, 0x3, 0x7, 0x8, 0x5, 0x3, 0x10, 0x0, 0x3f7, 0x6, 0x5, 0x9, 0x400, 0x8dc, 0x3, 0x60b7ebb4, 0x3755, 0x2, 0x1, 0x9, 0x1, 0x44, 0x8000, 0x5, 0xffff, 0x5c8, 0xffffffff, 0x7a1, 0x7f, 0x3, 0x2, 0x40, 0x3, 0x2, 0x3, 0x1, 0x0, 0xbfea, 0x1, 0x4, 0x2b2, 0x6, 0x1ff, 0x6, 0xe41, 0x4, 0x1, 0x6, 0xffff, 0x96c4, 0x8, 0x4, 0x100, 0xb, 0x8, 0x2, 0x5, 0x401, 0xfffff22b, 0x20000, 0x478, 0x8, 0x7, 0x3, 0x6, 0x19eadeee, 0x4, 0x8, 0x4, 0x7, 0xfffffff2, 0x1, 0x4, 0x46, 0x2, 0x6, 0x6, 0x2, 0x10001, 0x2, 0x0, 0x1, 0x3, 0x6, 0x80f, 0x6, 0x2, 0x7a17, 0x1, 0xa, 0x67e7, 0x4, 0x3, 0x4, 0xb40b, 0x7ff, 0x7, 0x8, 0x9, 0x8, 0x4, 0x721, 0xaea, 0x140000, 0x2, 0xfffffff7, 0x200, 0x7fffffff, 0xffffffff, 0xb1c2, 0xdd54, 0x80000001, 0x5, 0xa6, 0x7, 0x0, 0x7, 0x10, 0x0, 0x1, 0x1, 0xfffffffe, 0xf62c, 0x996, 0x5d9, 0x2, 0xc1c, 0x80000001, 0x5, 0xf88, 0x10000, 0x5, 0x80000001, 0x7, 0x2, 0x8000, 0x10000, 0x3, 0x101, 0x64, 0x8001, 0x2, 0x8, 0x400, 0x0, 0xff1, 0x10001, 0x9, 0x0, 0x10, 0xc, 0x6, 0x7, 0x80000001, 0x1ff, 0x6, 0x48f, 0x19]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7fffffff, 0x7ff, 0x2, 0x7, 0x7, 0x800, 0x2, 0x0, 0x8, 0x3, 0x8, 0x0, 0x2, 0xe0, 0x8, 0xb8f, 0x4, 0x100, 0x8, 0xfffffffe, 0x2, 0xff, 0xa, 0x8, 0xe4, 0x1000, 0x7fff, 0x9, 0x1, 0x2, 0xff, 0x1, 0xe, 0x8000, 0xf, 0x76d9, 0x9d0, 0x8, 0x5, 0x2, 0x8e1e, 0x3, 0x3, 0x1, 0x200, 0x9, 0x2, 0x6, 0x6d14, 0x0, 0x7, 0x2, 0x1, 0xfffffe01, 0xffff, 0x80000001, 0x6, 0x1, 0x5, 0x0, 0xff, 0x135, 0x68, 0x2, 0x1, 0x3, 0x4, 0x6, 0x6, 0x6, 0x0, 0x1, 0x2, 0xfffffffa, 0x41, 0x1, 0x4, 0xbe9, 0x1000, 0x100, 0x4, 0x1, 0x2, 0x8, 0x5, 0x1, 0xfffffff4, 0x7fffffff, 0xffffffff, 0xd6, 0x5, 0x746e, 0x2, 0xff, 0x1, 0xa, 0x8, 0x9, 0x8, 0x8000, 0xffff, 0x8, 0x7, 0xffffffff, 0xd, 0x5, 0x1, 0x2b01, 0xfffffffc, 0x1, 0x6, 0x800, 0x5d0d, 0xfffffffe, 0xac, 0x6, 0x1b57937, 0x14, 0x3ff, 0x2000000, 0x7f9, 0x1, 0x0, 0x401, 0x5, 0x1ff, 0x60, 0x4, 0x5, 0x0, 0x9, 0x0, 0x5, 0x5, 0x800, 0x80000000, 0x5, 0x7, 0x517, 0x0, 0x3, 0x2379, 0x80, 0x4, 0x5, 0x5, 0x9, 0x0, 0x6, 0x1, 0x3b, 0x6, 0x0, 0x8, 0x8, 0x36, 0xb, 0xc, 0xfffffe01, 0x81, 0x5, 0x8, 0x6, 0xdc, 0x80, 0x5, 0x9, 0xfff, 0x1, 0x7, 0x2, 0xf0, 0x3, 0x9, 0x6, 0x1, 0x7, 0x1, 0xa, 0x5, 0x0, 0x1, 0x5, 0x69, 0x10000, 0x5, 0x7eb, 0x7, 0x2, 0x5, 0x8621, 0x3, 0x87, 0x4, 0x7ff, 0x1e2a3268, 0x7, 0x40, 0x2, 0x8, 0x400, 0x9, 0x6, 0x6, 0xfff, 0x1ff, 0x4, 0xffff1df5, 0x6, 0x7fffffff, 0x88df, 0x4, 0x100, 0x0, 0x8, 0x3, 0x80, 0x9, 0x5, 0x7, 0x57, 0x3, 0xca, 0x8, 0xf3c, 0xe3, 0xfffffe27, 0x803, 0x7, 0x32, 0x4, 0x0, 0x0, 0x6, 0x3, 0x50000000, 0x3, 0x9, 0xff, 0x80000000, 0x6, 0x400, 0x10001, 0x7, 0xff, 0x4e2, 0x627, 0x2, 0x5, 0xd, 0x3, 0x1, 0x9, 0x7, 0x0, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x1, 0xffd9, 0x9, 0x7, 0x9, 0x5, 0x7, 0x3, 0x2cb6, 0x76e, 0x0, 0xffffffff, 0x9, 0x2, 0x5, 0xad, 0x5, 0x8, 0xf, 0x2, 0x1, 0x7, 0x8, 0x0, 0x8, 0x5, 0x6, 0x3, 0xe72, 0x2, 0x6, 0x3, 0x1420, 0x8, 0x4, 0x3, 0x9, 0x2, 0x50000, 0xfffffff7, 0x1, 0x400, 0xfc35, 0x3, 0xffff197f, 0x2, 0x4, 0x10001, 0x5, 0x1, 0xbfa, 0x6, 0x800, 0xc, 0x6, 0x1, 0x4, 0x5, 0x6, 0x8, 0x1000, 0x4, 0x3891, 0x8, 0x0, 0x7, 0x6, 0x800, 0x40, 0xeb, 0x1, 0x1, 0xfffffffa, 0x200, 0x79a4, 0xc, 0x7, 0x57, 0x2, 0x3, 0xc, 0xfffffff5, 0x5, 0x8, 0xfff, 0x5, 0x0, 0x0, 0x4, 0x9, 0xe8b, 0x4, 0x10, 0x8, 0x2687, 0x4, 0x10000, 0xa30, 0x3, 0x9, 0x200, 0xffffffff, 0x8, 0x40, 0xff, 0x3, 0x2800000, 0x7, 0x9, 0xebf, 0x9, 0x1, 0xfae, 0x9, 0xfd0, 0x9, 0x2, 0x5a, 0x2, 0xff, 0xffffffff, 0x0, 0x3a, 0x8, 0x2, 0xfffffbff, 0x3427, 0x9, 0x401, 0x5, 0xfffffffc, 0xb, 0x1, 0xf, 0x4, 0x0, 0xff, 0x8, 0xf670000, 0x1ff, 0x10000, 0x8001, 0x10001, 0x9, 0x1, 0x8, 0x9, 0x9, 0x7, 0xb, 0x2, 0x60, 0x2e89, 0x7, 0xffffff37, 0x8, 0x757, 0xa1db, 0x2, 0x2, 0x1, 0xee66, 0x8, 0x0, 0x2, 0xfb100000, 0x953, 0x6, 0x10001, 0xfffffff8, 0x5, 0x4, 0x25b, 0x1, 0x5, 0x10001, 0xffff, 0x9, 0x1, 0x7, 0x8000, 0x8, 0xa53c, 0x400, 0x8, 0x4, 0x4, 0x7, 0x679d7a65, 0x5a7, 0x1, 0x4, 0xfbcf, 0x0, 0x93, 0x6, 0x800, 0x1, 0x4, 0x10001, 0xb43, 0x3, 0x2e, 0x7, 0x39bb, 0x4, 0x7fff, 0x2, 0x4b5f, 0x800, 0x80000000, 0x4, 0x9, 0xf, 0x40, 0x1, 0x1, 0xf81f, 0x1000, 0x7, 0x10000, 0x2, 0x58baf6c5, 0x1, 0x2, 0x0, 0x8, 0x3, 0x4, 0x3ff, 0x2, 0x5, 0x9, 0x2, 0x2, 0x4be0, 0x9, 0x999, 0x5, 0x537, 0xfffffeef, 0x8001, 0x751d, 0xfffffffe, 0x0, 0x8, 0x6, 0x8, 0x8, 0xdff, 0x7, 0x0, 0x9, 0x584]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}, @TCA_RSVP_ACT={0x6bc, 0x6, [@m_skbedit={0x108, 0x7, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x800, 0x2, 0x1, 0xa}}]}, {0xc1, 0x6, "77969bf22725c92c3443f37b970b237456fbc73e63d7c668d203ceba4b9ff10e427c97ca0bac2e73498ccd2ebf20f526e6f5cb161a96dda2cfed349d704931488d7c020067800a253cd70b6b1e16d650a997abae0aa561230e42fc8b510bcc2ad62a62c1d223931d42bdb1df82529766f3e9037b536fe05b5e640dd43a46c39b0920fb50d66874a5f80f7b72ba6c683bbd0f3dbbd774e754b52cca370456fd13c6a2c97801ef378f2fd6f691c394ac3b356f5688adcc695184389dc33c"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x198, 0xd, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1186, 0xffffffffeffffffe}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2653, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x1, 0x10000000, 0xb, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x41, 0x315, 0x10000000, 0x4, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe9e, 0x9, 0x10000000, 0x2, 0x7fffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x8d9, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0xff, 0x7, 0x1, 0x7ff, 0x7b0}}]}, {0xe6, 0x6, "07d96feeadb3c2be6ff84feab4f73cac585443187311d9a705f1e5cb263d04d747307f43199a518700d668f0046652eaeed1f549889242817d99e97c917ec4a3dde8698fa3085ea5ee3e8942fc09296d998ebec0d07b1fd5f1b3b93456d9ae85eb7235646f21e6d6335691fc1995e85aa1251bd28227f2315843481c5ff670dde09ca38bd4e4390a5c3b47fcf6fa9326e3b69a7eab5283c06c097b07bad994e2e87a9d8bab553bba4611231bd09a89d11b5a16f6b39ce41139cfd4e250e73118a83e11e83722928155c5e67234e0421aeb537a374cd59b4e7b0f284c500e6948ff19"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x58, 0x15, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}]}, {0x1c, 0x6, "54e114220af66340dbcec68fe7e070bb42feabbd3aa92637"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x10c, 0xd, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2277, 0x8, 0x20000000, 0x5, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2a5, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x147a, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1975}}, @TCA_GACT_PARMS={0x18, 0x2, {0x400, 0x371c124, 0x5, 0x1, 0xdf2}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffa, 0x8, 0x3, 0x7, 0x4}}]}, {0x73, 0x6, "c613eb713788d11b7b79c8b078d787daf687cb899fc6ebbad0061655ecec52d17a3ceec7d74b2d292f1182fb3da715d20d4bf9856881c1e78966ce55099f954af6ab50b540e1d8c62a3b15bdf5f2494dc1dbed4957b4c56e7933527ed2b51304b7bf40fe6d0f3c445f8e59e6e35d02"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_sample={0xe0, 0x20, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x10001}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xffff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7fff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffffffb}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x101, 0x7f, 0x1, 0x800, 0x9}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}]}, {0x54, 0x6, "61f52412e5aeca4e628336b81b3f84b231ba01d813b7ce16bfbec349a02b1a99f97a31aee36ac28b2444510fa1d3fbc0a5184e1478bb4b1c65c676ecc735d9ce2a9c490e98dd39c4faa70e93dde4cc19"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x90, 0xe, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8808}]}, {0x5c, 0x6, "1ceb3e113cc184813964d904c92a745649410f08adffc9366d218c6f67421c0cfc85b9d3d584f7c18ec3d513d1f4480d379b9f1cc60dbcb83204c48ed9099dd909e2902a1e4864eff96724852bc76b78beda6f03556f7ccb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x144, 0xe, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x1}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}]}, {0xfd, 0x6, "918fff54b7d03e61040547e638affcd048013085f6f3bfb7473bd12c3153ede09e2a122f5038ad7598505547f24cc1e51fb8304bc530ad59c89f9c2065e34248c7076f2bc14627720d07fa90c507893ba4dda2b6a537e70e0168bfb000c9e21ca5c4862e9abdf043045b376a2c8db9279914ea808ca173a00380b5f4d6000c19ec0881e9b455b7504b4d0d8d221c517e8f296dc817384af55ba6eca4bff0b598596579a7e1d318563a24c9c0cbe5ea6f6687194d186b46f6a55cf61703bb5fcc7aa85597e6d4156a61f03fe3bee776acff0447c1cee1b995787acc2889cafd4d6ab55759a6cd0d2ed815a19daaeb897375a4c93caf35a3def8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}}]}, 0x1344}, 0x1, 0x0, 0x0, 0x4}, 0x44010)

958.785604ms ago: executing program 1 (id=73):
remap_file_pages(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x800)
mq_open(&(0x7f0000000040)='\x00', 0x40, 0x100, &(0x7f0000000080)={0x9, 0x6, 0x8, 0x1})
setrlimit(0x5, &(0x7f0000000000))
io_setup(0x2008, &(0x7f00000007c0))
mlockall(0x2)
munmap(&(0x7f0000003000/0x1000)=nil, 0x1000)
remap_file_pages(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x3, 0xef, 0x8000)
remap_file_pages(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x800) (async)
mq_open(&(0x7f0000000040)='\x00', 0x40, 0x100, &(0x7f0000000080)={0x9, 0x6, 0x8, 0x1}) (async)
setrlimit(0x5, &(0x7f0000000000)) (async)
io_setup(0x2008, &(0x7f00000007c0)) (async)
mlockall(0x2) (async)
munmap(&(0x7f0000003000/0x1000)=nil, 0x1000) (async)
remap_file_pages(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x3, 0xef, 0x8000) (async)

883.943616ms ago: executing program 2 (id=74):
r0 = socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400c4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000140), 0x4)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'hsr0\x00', <r6=>0x0})
sendto$inet6(r2, &(0x7f0000000240)="9760e3d622feb0e8d8649c1f4c632726cceb7399ddaa0d79802924e9ab85649174bb7f1fff614563b8a0fb2500c52f8fccb521b65b3834b5615cd6a8547c40185d20a618ab7943111682cc60f307f8d2536777a97006401a80a3a079622ff711284cf1ee79b6e3d12b270139c917e5c5bd1f721aa30089be153393c69deee520b3f0669933826b7de950e789b0e7d1cea4f156556bdf2ba4e39ac92250670d8f2479afe3ff11f580c6015a9c0220ada12a8910588015263bebc30eb46f947d0b96cac5c9f1d24cff1eaf58383c7d2848c7b73b354609f8bcc039bb2235790ad100e5517af6999d49a21e86", 0xeb, 0x800, &(0x7f00000000c0)={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xec}, 0x1c)
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, r6, 0x1, 0x1, 0x6, @multicast}, 0x14)

806.313093ms ago: executing program 1 (id=75):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r1, r0}}, 0x18) (async)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r1, r0}}, 0x18)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0404020b00000000002a4c3f02"], 0xd)

806.131244ms ago: executing program 1 (id=76):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000200)=0x7, 0x4)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000201bb100000000000000000000000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00"/115], 0xb8}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) (async)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000014"], 0xb8}}, 0x0)

733.991933ms ago: executing program 1 (id=77):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="b4b473fec9000dfbe863cac50580cd00000000000000", 0x16}, {&(0x7f00000006c0)="8dbf5a", 0x3}], 0x2)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYRES64=r1, @ANYRES64=r0, @ANYRES32=r3])
getuid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00')
pread64(r5, &(0x7f0000002240)=""/237, 0xed, 0x4eb)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000faffffffff38ec3b2e000201f8ffff008da70060a84a535427f70a1bef5fb12aaea364de72d225e27ae9fecc0a64d050db006eb627a516eb10ccb7ec5978806b6e8282d4312460ef53c4869126bf89a42ee1dae7c1d89b689efc8c874e938fae79e1450143fc82"], &(0x7f00000000c0)=""/209, 0x1a, 0xd1, 0x1, 0x0, 0x0, @void, @value}, 0x28)
lsm_get_self_attr(0x67, &(0x7f0000000440)={0x0, 0x0, 0x8c, 0x6c, ""/108}, &(0x7f00000000c0)=0x8c, 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000800)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef)

373.518753ms ago: executing program 3 (id=80):
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0xd]}, 0x8)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}}, 0x40) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800791207000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

323.909631ms ago: executing program 3 (id=81):
r0 = open(&(0x7f0000000000)='./file1\x00', 0x80000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r1)
execveat(r0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0)

322.490792ms ago: executing program 3 (id=82):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl0\x00', <r1=>0x0, 0x0, 0x51, 0x8, 0x3, 0x10, @mcast1, @local, 0x20, 0x10, 0x269, 0x7}})
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@delchain={0x1dd8, 0x65, 0x800, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xb, 0x5}, {0xfff1, 0xd}, {0x5, 0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x1da8, 0x2, [@TCA_BASIC_POLICE={0x840, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10000, 0x1, 0x8, 0x5, 0x2, 0x5, 0x9, 0x100, 0x5, 0x3, 0x5, 0x0, 0x1, 0x8, 0x6, 0x5, 0x2, 0x5, 0x10, 0xcb, 0x2b, 0x7, 0x10000, 0x1, 0x81, 0x10000, 0x8, 0x5, 0x9, 0x3, 0x1cc, 0x200, 0x7, 0x8, 0x4, 0xff, 0x1, 0x401, 0xb, 0xfffffffd, 0x7, 0xffffffff, 0x64, 0x40, 0x59a, 0x0, 0xfffffffc, 0x2, 0x8, 0x3, 0x6, 0x800, 0x1, 0x1, 0x0, 0x8001, 0xb707, 0x0, 0x100, 0x2, 0x8, 0x3, 0x8, 0x4, 0xfffff61a, 0xffffff43, 0xfffffc21, 0x7, 0xf, 0x60, 0x9, 0xffffffff, 0x10, 0x9, 0x2, 0x80, 0x2, 0x1, 0x6, 0xffffffff, 0x0, 0x1ff, 0xa40, 0x8, 0x0, 0x0, 0x6, 0x9, 0x3, 0x9, 0x7d, 0xe, 0xfffffffe, 0x0, 0x0, 0xff, 0x52, 0x81f, 0x5, 0x4, 0xfb970249, 0xb, 0x9, 0x0, 0x7, 0xa9, 0x8, 0xfffffff2, 0x7, 0xfffff801, 0x4, 0x80, 0x6c4, 0x5, 0xfffffff9, 0x9, 0x6, 0xbeb5, 0x39b71993, 0x8001, 0x8001, 0x9, 0x2, 0x3, 0xa, 0x7fff, 0xffff, 0x7, 0x9, 0x7ff, 0xff, 0x3, 0x4, 0xfff, 0x5, 0x7, 0x5, 0x0, 0x81, 0xfffffffe, 0x139, 0xfff, 0x45b2a4a1, 0x100, 0xfffffff9, 0x10001, 0x80000001, 0x80000001, 0x26, 0x7f, 0x5, 0x5, 0x7, 0x2, 0x29, 0x0, 0x9, 0xc521, 0xec, 0x9, 0x99, 0x3, 0x1ff, 0xf8a, 0x3, 0x2, 0x7, 0x456e22f8, 0xfa, 0x306, 0x8, 0x3, 0x3, 0x9b, 0xc4, 0x1, 0x823e, 0x7fff, 0x6, 0xb602, 0x200, 0x1, 0x4b3, 0x4, 0xffff, 0x82, 0x7fff, 0xe, 0xd, 0x5, 0x2e, 0xfffffffd, 0x8, 0x9, 0x7, 0x2, 0x8, 0x5, 0x6, 0x0, 0x9, 0x79a072e3, 0x6, 0x2, 0xfc2e, 0x6, 0x10, 0x0, 0xb375, 0x4, 0x8, 0x80, 0x5, 0x0, 0x0, 0x3, 0x8fec, 0x1, 0x9, 0x198, 0x7, 0x100, 0x0, 0x7ff, 0xdab8, 0x40, 0x281, 0x0, 0x39df, 0x6, 0x3, 0xffff, 0xd, 0x200, 0x8, 0x6, 0x7, 0x7, 0x7, 0xd45, 0x40, 0x0, 0x150, 0x8000, 0x80, 0x81, 0xe0e2, 0x0, 0x0, 0x788, 0x1400, 0x400, 0xf0e, 0x10001, 0x8, 0xe]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xb69e, 0x502, 0x8, 0xfffffff9, 0x35, 0x0, 0x95, 0xfffffffd, 0x7, 0xf, 0x401, 0x9, 0x3, 0x7fffffff, 0x9, 0x6, 0x8, 0x7, 0x7fffffff, 0x7c, 0x3, 0xd9, 0x0, 0xf, 0x3, 0x9, 0xffffffff, 0x81, 0x4, 0x3, 0x3, 0x7, 0x8, 0x81, 0x8, 0x60000000, 0x8000, 0xffff602d, 0x97, 0x4, 0xd, 0x4, 0x50000, 0x0, 0xf7, 0x6, 0x5, 0x1, 0x3, 0xa, 0x8001, 0x2, 0x587e, 0x8001, 0x2, 0x7, 0x5, 0x2, 0x9, 0x8, 0x80000000, 0x7fffffff, 0x8000, 0xfffffffd, 0x4, 0x4, 0xc, 0x7c, 0x1a8, 0xf87c, 0x7, 0x2, 0x1, 0x8, 0xfffffff7, 0x729b, 0x2, 0x2ba1, 0x480, 0x6, 0x6ae, 0x8001, 0x10000, 0x4, 0x3, 0x3, 0xfff, 0x4, 0x9, 0x4, 0x9, 0x1000, 0xfffff000, 0x6, 0x3, 0xe5fc89b4, 0x3, 0xa56, 0x7f, 0x9, 0xfffffffc, 0x5, 0x45, 0x7ff, 0x8, 0x528, 0x6, 0x1, 0x6, 0x4, 0x3, 0xa, 0x7fc00, 0x200, 0x62f00, 0x5, 0x1, 0x3, 0x8, 0x4, 0x8, 0x5, 0x24, 0xffffff80, 0x4, 0xa, 0x0, 0x10000, 0x4, 0x4000fc9, 0x27, 0x3ff, 0x100, 0x8, 0xfffffff5, 0x80000001, 0x0, 0x7, 0x45, 0x80, 0x1a5, 0xfffffffb, 0xb, 0x1, 0x7, 0x6, 0x5, 0x5, 0x6, 0x4, 0x7, 0x9, 0x0, 0x80000001, 0xfffffff6, 0x28f5615c, 0x800, 0x5, 0x8, 0x9, 0x40, 0x7, 0x4, 0xc, 0x4, 0x2, 0xb, 0xe6, 0x8, 0x0, 0x10000, 0x8e, 0x4, 0x7ff, 0x3, 0x72, 0x9, 0x5, 0x1, 0x10001, 0x3, 0xb9, 0x8, 0x2, 0xf2, 0x67f, 0x0, 0x2, 0x2, 0xff3, 0x4, 0x3, 0x1fd, 0x5, 0x401, 0x0, 0x3, 0x8c, 0x94c, 0x7f, 0x5, 0x80000000, 0x7, 0xce9, 0x10001, 0x7, 0xfffffffc, 0x6, 0x6, 0xa8, 0x7, 0x6, 0x8000, 0x2, 0xfffffff7, 0x400, 0x77edb701, 0x80000001, 0xffffffff, 0x7, 0xff, 0xf87a, 0x3, 0x5, 0x5, 0x1, 0x1, 0xdf30, 0x8, 0xff, 0xfffffffc, 0xfffffff1, 0xfffffffa, 0x5, 0x25744e03, 0x3ff, 0x2, 0x7f25, 0x4, 0x3ff, 0x6, 0x9, 0x9, 0x8001, 0x9, 0xb, 0x53ae, 0x52, 0x89dc, 0x6, 0x5, 0x5, 0x6, 0x0, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0xf}}, @TCA_BASIC_POLICE={0x10, 0x4, [@TCA_POLICE_RATE64={0xc}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xe, 0xe}}, @TCA_BASIC_EMATCHES={0x153c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x29df, 0x1, 0x7ff}, {0x6, 0x10000, 0xd5, 0x3, 0xd, 0x1, 0x2}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x9, 0x8, 0x1}, {0xffffffffffffffff, 0x0, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x124, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x3, 0x7, 0xa}, {{0x2, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}, @TCF_EM_META={0x18, 0x3, 0x0, 0x0, {{0x101, 0x4, 0x9}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xb04, 0x66, 0x2}, {0x3, 0x8, 0x2}}}]}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0xde, 0x2, 0x400}, {0x401, 0x6, 0x2, "baebaa0c48fc"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xde1, 0x3, 0xcd}, {0x7fffffff, 0x81, 0x9, 0x3}}}, @TCF_EM_CONTAINER={0x64, 0x2, 0x0, 0x0, {{0x7, 0x0, 0x2f}, "4dec11fe504f5a9a6a1f641f4581b1195b996b481c996bf321e465371b4330b875580eb60e3cec572ef0dab78d99e652ed688903b8e4c5c0dbd8d0241a80b2222709b1a8db538be7ab6f16f388ea37998f0f84be96"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0xd67}, {{0x4}, {0x1, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x48, 0x3, 0x0, 0x0, {{0xd6, 0x4, 0x401}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x1}, {0x8, 0x4}}}, @TCA_EM_META_LVALUE={0xa, 0x2, [@TCF_META_TYPE_VAR='}r', @TCF_META_TYPE_VAR="09d56099"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0xfd, 0x1}, {0x5, 0x7f, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xd5, 0x1}, {0x8, 0x7, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x3, 0x3}, {0x6f7, 0xc, 0x3}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x7c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x64, 0x1, 0x0, 0x0, {{0x8001, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xffff, 0x7, 0x6}, {{0x1, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0xe0, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xfff7, 0x8, 0x7ff}, {0x1, 0x5, 0x8}}}, @TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0x5, 0x9, 0xffff}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xf17b, 0x8, 0xa9}, {0x4, 0x4, 0x4}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x8, 0x71d, 0x8000, 0x8}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x81, 0x7, 0xf01}, {{0x0, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_META={0x40, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x4}, {0x0, 0xfc, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0xc, 0x1}, {0x1}}}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_VAR="d3cae47b04cb", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x9}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5d}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xd0d, 0x7, 0xf69}, {{0x2, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x1234, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x106c, 0x2, 0x0, 0x0, {{0x8, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "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"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4c, 0x5, "513fc464dd65d3b59133d73849bf508509b50ec964cc38d60a162578c882b8fd9becb1cfda222228c22693ce75e242e81a7f8850a2f97d6ea4ca00020be484ce39700ea42398e15c"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x6}, {{0x3, 0x0, 0x1, 0x1}, {0x8, 0x1, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1}, {0x9, 0x9, 0x10, 0xc}}}, @TCF_EM_META={0x70, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x9}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0xfd, 0x1}, {0xe, 0x94, 0x2}}}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_VAR="2bb3", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x1f, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="02d186190532bf7b8939", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="06ee561efc", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="0c194ca0", @TCF_META_TYPE_VAR="e37ca62e26396063", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR='Nk', @TCF_META_TYPE_VAR="c565", @TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_IPT={0x3c, 0x1, 0x0, 0x0, {{0x5, 0x9, 0xfa}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CONTAINER={0xe8, 0x2, 0x0, 0x0, {{0x1e}, "dae8523cd7cf49b32ceee7d2a475e4ddcc872092fff6dd76dd0d7753b7a8916424940a7912212f134b52fe888120fe0890754198458805c10cdbae5544723bf6019fa03979b44040ee13bd96aa5d83feb8bf63e73dff6b43af87ff06a8673f40df8de7c9b1d50b63733cfe7fbbe1e881b85bb4864623015f72202d57cb2c1643bbdb9e288d5bdc09fe0da05e994824086dffbc61ad9b523e0ebe4d61558321ea9708c690b4fe5997018ab4de454f3ac09cccd2192fdd72ce67fde13871f5b3545e6123322fefedb86bbf5a7e72ae8ff287009e7862e0d79bc950"}}]}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3, 0x1, 0x80}, {0x4, 0x5, 0x5, 0x0, 0x6, 0x1, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xd5, 0x1, 0x6}, {0x5, 0x7f, 0x8, 0x4, 0xe, 0x0, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0xf}, {{0x1, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0x2}}]}}]}, 0x1dd8}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket(0x840000000002, 0x3, 0xff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="5825be57aff9352b356be67ca2746357d1787935", 0x14}], 0x1}}], 0x2, 0xa00)

306.279609ms ago: executing program 3 (id=83):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x17)
write(r0, &(0x7f0000000000)="0a000000010001", 0x7)
r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x0, [0x2], [0x2000], [0x0, 0x0, 0x0, 0x2], [0x400000000000001]})
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)

213.495972ms ago: executing program 3 (id=84):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'dvmrp0\x00', 0x5}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'ipvlan0\x00'}, 0x18)

212.755736ms ago: executing program 3 (id=85):
r0 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0xe1, &(0x7f0000000000)={0x0, 0x1, 0x8})
mq_timedsend(r0, 0x0, 0x0, 0x100000000000000, 0x0)
mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0xe1, &(0x7f0000000000)={0x0, 0x1, 0x8}) (async)
mq_timedsend(r0, 0x0, 0x0, 0x100000000000000, 0x0) (async)

3.685208ms ago: executing program 2 (id=86):
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) (async, rerun: 32)
syz_open_dev$vim2m(&(0x7f0000000180), 0x4, 0x2) (rerun: 32)
syz_emit_ethernet(0xf8, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0xc2, 0x3a, 0xff, @remote, @rand_addr=' \x01\x00', {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}, {0x4, 0x13, "831af50a18eb3628ece2c1d6e5b7a05394f441b1603800cf73e2aab284218b8e0f9d2888c188dd27154b51930360b60bfd6ade54a8dfb3c34c8b62efa631e0ae562a5bc2c519904596aea2d20d0bb3a08cb290aee632349f176d39055c4a9b8d15fef27f6be9692536fdc5ad97a39c7603c0db8d65c6d8af2bb2808ab24b5494f482e5b16ef5548b94ea696f564c9cb68b19d27c92bf4d6a"}]}}}}}}, 0x0) (async)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000)
preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/233, 0xe9}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/209, 0xd1}, {&(0x7f0000000500)=""/184, 0xb8}], 0x4, 0x5, 0x81)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000200)={0x364a, 0x2, 0x8001})

0s ago: executing program 2 (id=87):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600006, 0x8003, &(0x7f0000000000)=0x6, 0x8, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f00003c9000/0x3000)=nil, 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8500, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)

kernel console output (not intermixed with test programs):

[   39.118227][   T40] audit: type=1400 audit(1742341846.086:83): avc:  denied  { read } for  pid=5332 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   39.125380][   T40] audit: type=1400 audit(1742341846.086:84): avc:  denied  { append } for  pid=5332 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   39.131317][   T40] audit: type=1400 audit(1742341846.086:85): avc:  denied  { open } for  pid=5332 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   39.137508][   T40] audit: type=1400 audit(1742341846.086:86): avc:  denied  { getattr } for  pid=5332 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
Warning: Permanently added '[localhost]:42327' (ED25519) to the list of known hosts.
[   40.246264][   T40] audit: type=1400 audit(1742341847.216:87): avc:  denied  { name_bind } for  pid=5920 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   42.105209][ T5922] cgroup: Unknown subsys name 'net'
[   42.266322][ T5922] cgroup: Unknown subsys name 'cpuset'
[   42.270558][ T5922] cgroup: Unknown subsys name 'rlimit'
[   42.470111][ T5926] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   43.093628][ T5922] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.573274][   T40] kauditd_printk_skb: 17 callbacks suppressed
[   45.573289][   T40] audit: type=1400 audit(1742341852.536:105): avc:  denied  { execmem } for  pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   45.720368][   T40] audit: type=1400 audit(1742341852.686:106): avc:  denied  { create } for  pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   45.731120][   T40] audit: type=1400 audit(1742341852.686:107): avc:  denied  { read write } for  pid=5933 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   45.737968][   T40] audit: type=1400 audit(1742341852.686:108): avc:  denied  { open } for  pid=5933 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   45.745356][   T40] audit: type=1400 audit(1742341852.696:109): avc:  denied  { ioctl } for  pid=5933 comm="syz-executor" path="socket:[6596]" dev="sockfs" ino=6596 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   45.769282][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.771818][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   45.775421][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.777489][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.777701][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.780491][ T5947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.781871][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.783857][ T5947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.786051][ T5944] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   45.787017][ T5945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.788694][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.788739][ T5947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.789237][ T5947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.789923][ T5947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.790243][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.790349][ T5950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   45.791193][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   45.792418][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   45.792642][ T5945] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   45.793084][ T5950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.795577][ T5947] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   45.796674][ T5950] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   45.798781][ T5947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.800521][   T40] audit: type=1400 audit(1742341852.766:110): avc:  denied  { read } for  pid=5937 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   45.805648][ T5936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   45.806377][   T40] audit: type=1400 audit(1742341852.766:111): avc:  denied  { open } for  pid=5937 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   45.839026][   T40] audit: type=1400 audit(1742341852.776:112): avc:  denied  { mounton } for  pid=5937 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   45.948563][   T40] audit: type=1400 audit(1742341852.916:113): avc:  denied  { module_request } for  pid=5933 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   45.981837][ T5933] chnl_net:caif_netlink_parms(): no params data found
[   45.987929][ T5938] chnl_net:caif_netlink_parms(): no params data found
[   45.997097][ T5937] chnl_net:caif_netlink_parms(): no params data found
[   46.050050][ T5943] chnl_net:caif_netlink_parms(): no params data found
[   46.123685][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.126259][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.128386][ T5933] bridge_slave_0: entered allmulticast mode
[   46.130524][ T5933] bridge_slave_0: entered promiscuous mode
[   46.166904][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.168991][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.171215][ T5933] bridge_slave_1: entered allmulticast mode
[   46.173535][ T5933] bridge_slave_1: entered promiscuous mode
[   46.210541][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.212608][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.214567][ T5938] bridge_slave_0: entered allmulticast mode
[   46.216649][ T5938] bridge_slave_0: entered promiscuous mode
[   46.227741][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.229694][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.231637][ T5937] bridge_slave_0: entered allmulticast mode
[   46.233946][ T5937] bridge_slave_0: entered promiscuous mode
[   46.262073][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.264736][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.266825][ T5938] bridge_slave_1: entered allmulticast mode
[   46.269102][ T5938] bridge_slave_1: entered promiscuous mode
[   46.279798][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.281765][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.284078][ T5937] bridge_slave_1: entered allmulticast mode
[   46.286173][ T5937] bridge_slave_1: entered promiscuous mode
[   46.314977][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.318965][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.343120][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.345197][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.347280][ T5943] bridge_slave_0: entered allmulticast mode
[   46.349525][ T5943] bridge_slave_0: entered promiscuous mode
[   46.367154][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.379481][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.383665][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.386000][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.388829][ T5943] bridge_slave_1: entered allmulticast mode
[   46.391258][ T5943] bridge_slave_1: entered promiscuous mode
[   46.402331][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.413338][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.425893][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.445439][ T5933] team0: Port device team_slave_0 added
[   46.464573][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.470231][ T5938] team0: Port device team_slave_0 added
[   46.473098][ T5933] team0: Port device team_slave_1 added
[   46.475988][ T5937] team0: Port device team_slave_0 added
[   46.506766][ T5938] team0: Port device team_slave_1 added
[   46.519460][ T5937] team0: Port device team_slave_1 added
[   46.523118][ T5943] team0: Port device team_slave_0 added
[   46.554680][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.556656][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.563703][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.575653][ T5943] team0: Port device team_slave_1 added
[   46.577594][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.579527][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.586692][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.590100][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.592022][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.599496][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.621804][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.624499][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.632287][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.641118][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.643369][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.650309][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.663292][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.665811][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.672782][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.676771][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.678716][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.685812][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.691908][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.694546][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.701410][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.745328][ T5933] hsr_slave_0: entered promiscuous mode
[   46.748194][ T5933] hsr_slave_1: entered promiscuous mode
[   46.763565][ T5938] hsr_slave_0: entered promiscuous mode
[   46.765524][ T5938] hsr_slave_1: entered promiscuous mode
[   46.767370][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.769647][ T5938] Cannot create hsr debugfs directory
[   46.781549][ T5943] hsr_slave_0: entered promiscuous mode
[   46.783817][ T5943] hsr_slave_1: entered promiscuous mode
[   46.785569][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.787677][ T5943] Cannot create hsr debugfs directory
[   46.818526][ T5937] hsr_slave_0: entered promiscuous mode
[   46.820875][ T5937] hsr_slave_1: entered promiscuous mode
[   46.823559][ T5937] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.825740][ T5937] Cannot create hsr debugfs directory
[   47.083775][ T5933] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.089935][ T5933] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.099572][ T5933] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.104047][ T5933] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.131879][ T5938] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   47.137082][ T5938] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   47.142288][ T5938] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   47.147089][ T5938] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   47.172854][ T5943] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.176808][ T5943] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.180294][ T5943] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.183714][ T5943] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.206039][ T5937] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.215286][ T5937] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.218770][ T5937] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.223401][ T5937] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.240607][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.268561][ T5933] 8021q: adding VLAN 0 to HW filter on device team0
[   47.279778][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.281908][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.285773][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.287834][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.298730][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.325553][ T5938] 8021q: adding VLAN 0 to HW filter on device team0
[   47.334045][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.340833][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.343667][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.348435][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.350468][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.368917][ T5943] 8021q: adding VLAN 0 to HW filter on device team0
[   47.372703][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.378174][   T40] audit: type=1400 audit(1742341854.346:114): avc:  denied  { sys_module } for  pid=5933 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   47.384570][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.384607][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.385624][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.392119][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.413643][ T5937] 8021q: adding VLAN 0 to HW filter on device team0
[   47.419801][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.421749][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.429560][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.431568][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.468278][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.474923][ T5937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.495719][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.506313][ T5933] veth0_vlan: entered promiscuous mode
[   47.517449][ T5933] veth1_vlan: entered promiscuous mode
[   47.530784][ T5938] veth0_vlan: entered promiscuous mode
[   47.549853][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.553715][ T5938] veth1_vlan: entered promiscuous mode
[   47.558755][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.561388][ T5933] veth0_macvtap: entered promiscuous mode
[   47.569396][ T5933] veth1_macvtap: entered promiscuous mode
[   47.594730][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.597817][ T5943] veth0_vlan: entered promiscuous mode
[   47.600933][ T5938] veth0_macvtap: entered promiscuous mode
[   47.604270][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.613195][ T5938] veth1_macvtap: entered promiscuous mode
[   47.615872][ T5933] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.619111][ T5933] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.621486][ T5933] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.624180][ T5933] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.629826][ T5943] veth1_vlan: entered promiscuous mode
[   47.639802][ T5937] veth0_vlan: entered promiscuous mode
[   47.650703][ T5937] veth1_vlan: entered promiscuous mode
[   47.656519][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.660425][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.664180][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.675594][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.678983][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.682036][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.686080][ T5938] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.689348][ T5938] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.692237][ T5938] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.696224][ T5938] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.715928][ T5943] veth0_macvtap: entered promiscuous mode
[   47.740107][ T5943] veth1_macvtap: entered promiscuous mode
[   47.746267][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.746374][ T5937] veth0_macvtap: entered promiscuous mode
[   47.751490][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.759094][ T5937] veth1_macvtap: entered promiscuous mode
[   47.765298][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.769232][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.773187][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.776387][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.779640][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.794400][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.797632][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.800326][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.803607][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.806775][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.809539][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.811756][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.814603][ T5947] Bluetooth: hci1: command tx timeout
[   47.820372][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.822283][ T5943] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.823186][ T5947] Bluetooth: hci2: command tx timeout
[   47.823301][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.823397][ T5947] Bluetooth: hci0: command tx timeout
[   47.826024][ T5943] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.834441][ T5943] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.837173][ T5943] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.851463][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.854854][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.857561][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.860423][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.864591][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.868552][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.873060][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.882321][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.886525][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.890030][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.894689][ T5948] Bluetooth: hci3: command tx timeout
[   47.897094][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.900516][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.905509][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.910208][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.916410][ T5933] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.925038][ T5937] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.927539][ T5937] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.929930][ T5937] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.932929][ T5937] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.941117][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.944956][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.984234][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.987500][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.028876][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.029855][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.031446][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.038109][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.052210][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.054550][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.126908][ T6027] openvswitch: netlink: IPv6 tunnel dst address is zero
[   48.154829][ T6038] batman_adv: batadv0: Adding interface: dummy0
[   48.156624][ T6038] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.166774][ T6038] batman_adv: batadv0: Interface activated: dummy0
[   48.276183][ T6048] VFS: unable to find oldfs superblock on device nullb0
[   48.349320][ T6075] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.379880][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'.
[   48.482954][ T6101] Zero length message leads to an empty skb
[   48.697912][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'.
[   48.701201][ T6121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.37'.
[   48.749468][ T6129] =======================================================
[   48.749468][ T6129] WARNING: The mand mount option has been deprecated and
[   48.749468][ T6129]          and is ignored by this kernel. Remove the mand
[   48.749468][ T6129]          option from the mount to silence this warning.
[   48.749468][ T6129] =======================================================
[   48.845862][ T6133] xt_hashlimit: size too large, truncated to 1048576
[   49.063936][ T6179] netlink: 28 bytes leftover after parsing attributes in process `syz.0.49'.
[   49.068594][ T6179] Unsupported ieee802154 address type: 0
[   49.070419][ T6179] netlink: 64 bytes leftover after parsing attributes in process `syz.0.49'.
[   49.176120][ T6194] ip6erspan0: entered promiscuous mode
[   49.207024][ T6203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38893 sclass=netlink_route_socket pid=6203 comm=syz.2.58
[   49.289150][ T6217] netlink: 'syz.1.62': attribute type 12 has an invalid length.
[   49.347325][ T6229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.65'.
[   49.474616][ T6259] mmap: syz.1.73 (6259) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   49.481707][ T6255] netlink: 65023 bytes leftover after parsing attributes in process `syz.2.71'.
[   49.712511][ T5981] usb 5-1: new low-speed USB device number 2 using dummy_hcd
[   49.862766][ T5981] usb 5-1: Invalid ep0 maxpacket: 64
[   49.892660][ T5948] Bluetooth: hci0: command tx timeout
[   49.892944][ T5947] Bluetooth: hci2: command tx timeout
[   49.955793][ T6293] warning: `syz.3.78' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   49.964311][ T6293] mac80211_hwsim hwsim4 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   49.972770][ T5947] Bluetooth: hci3: command tx timeout
[   49.982937][ T5992] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   49.992639][ T5981] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[   50.142518][ T5992] usb 6-1: Using ep0 maxpacket: 8
[   50.142648][ T5981] usb 5-1: Invalid ep0 maxpacket: 64
[   50.147403][ T5992] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[   50.149729][ T5992] usb 6-1: config 179 has no interface number 0
[   50.151506][ T5992] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   50.154675][ T5992] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   50.157726][ T5992] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   50.160555][ T5981] usb usb5-port1: attempt power cycle
[   50.160734][ T5992] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   50.161411][ T6313] Bluetooth: MGMT ver 1.23
[   50.167303][ T5992] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   50.171075][ T5992] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   50.174159][ T5992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.178781][ T6285] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   50.206260][ T6316] IPVS: Unknown mcast interface: dvmrp0
[   50.389521][ T6285] syz.1.77 uses obsolete (PF_INET,SOCK_PACKET)
[   50.458419][    C3] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   50.458439][ T5977] usb 6-1: USB disconnect, device number 2
[   50.460746][    C3] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   50.465514][    C3] ==================================================================
[   50.468142][    C3] BUG: KASAN: slab-use-after-free in register_lock_class+0x1033/0x1240
[   50.470430][    C3] Read of size 1 at addr ffff88802a759891 by task syz.1.77/6284
[   50.473794][    C3] 
[   50.475050][    C3] CPU: 3 UID: 0 PID: 6284 Comm: syz.1.77 Not tainted 6.14.0-rc7-syzkaller-00067-g76b6905c11fd #0
[   50.475062][    C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   50.475068][    C3] Call Trace:
[   50.475072][    C3]  <IRQ>
[   50.475076][    C3]  dump_stack_lvl+0x116/0x1f0
[   50.475092][    C3]  print_report+0xc3/0x670
[   50.475104][    C3]  ? __virt_addr_valid+0x5e/0x590
[   50.475114][    C3]  ? __phys_addr+0xc6/0x150
[   50.475124][    C3]  kasan_report+0xd9/0x110
[   50.475134][    C3]  ? register_lock_class+0x1033/0x1240
[   50.475148][    C3]  ? register_lock_class+0x1033/0x1240
[   50.475163][    C3]  register_lock_class+0x1033/0x1240
[   50.475177][    C3]  ? __pfx_register_lock_class+0x10/0x10
[   50.475193][    C3]  __lock_acquire+0x135/0x3c40
[   50.475208][    C3]  ? __pfx___lock_acquire+0x10/0x10
[   50.475222][    C3]  lock_acquire.part.0+0x11b/0x380
[   50.475235][    C3]  ? __wake_up+0x1c/0x60
[   50.475248][    C3]  ? __pfx_lock_acquire.part.0+0x10/0x10
[   50.475261][    C3]  ? rcu_is_watching+0x12/0xc0
[   50.475272][    C3]  ? trace_lock_acquire+0x14e/0x1f0
[   50.475283][    C3]  ? __wake_up+0x1c/0x60
[   50.475295][    C3]  ? lock_acquire+0x2f/0xb0
[   50.475307][    C3]  ? __wake_up+0x1c/0x60
[   50.475319][    C3]  _raw_spin_lock_irqsave+0x3a/0x60
[   50.475330][    C3]  ? __wake_up+0x1c/0x60
[   50.475342][    C3]  __wake_up+0x1c/0x60
[   50.475354][    C3]  usb_anchor_resume_wakeups+0xc2/0xe0
[   50.475366][    C3]  __usb_hcd_giveback_urb+0x3b7/0x6e0
[   50.475380][    C3]  usb_hcd_giveback_urb+0x396/0x450
[   50.475394][    C3]  dummy_timer+0x17f7/0x3960
[   50.475410][    C3]  ? mark_lock+0xb5/0xc60
[   50.475422][    C3]  ? __pfx_lock_release+0x10/0x10
[   50.475436][    C3]  ? lock_acquire+0x2f/0xb0
[   50.475449][    C3]  ? debug_object_deactivate+0x13b/0x370
[   50.475462][    C3]  ? find_held_lock+0x2d/0x110
[   50.475472][    C3]  ? __hrtimer_run_queues+0x53d/0xae0
[   50.475483][    C3]  ? __pfx_lock_release+0x10/0x10
[   50.475496][    C3]  ? __pfx_dummy_timer+0x10/0x10
[   50.475510][    C3]  ? mark_held_locks+0x9f/0xe0
[   50.475523][    C3]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   50.475535][    C3]  ? __pfx_dummy_timer+0x10/0x10
[   50.475549][    C3]  __hrtimer_run_queues+0x20a/0xae0
[   50.475560][    C3]  ? __pfx___hrtimer_run_queues+0x10/0x10
[   50.475569][    C3]  ? read_tsc+0x9/0x20
[   50.475582][    C3]  hrtimer_run_softirq+0x17d/0x350
[   50.475592][    C3]  handle_softirqs+0x213/0x8f0
[   50.475607][    C3]  ? __pfx_handle_softirqs+0x10/0x10
[   50.475622][    C3]  __irq_exit_rcu+0x109/0x170
[   50.475635][    C3]  irq_exit_rcu+0x9/0x30
[   50.475649][    C3]  sysvec_apic_timer_interrupt+0xa4/0xc0
[   50.475662][    C3]  </IRQ>
[   50.475665][    C3]  <TASK>
[   50.475668][    C3]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   50.475683][    C3] RIP: 0010:lock_acquire.part.0+0x155/0x380
[   50.475697][    C3] Code: b8 ff ff ff ff 65 0f c1 05 50 c8 6b 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7
[   50.475707][    C3] RSP: 0018:ffffc90005fa7aa0 EFLAGS: 00000206
[   50.475719][    C3] RAX: 0000000000000046 RBX: 1ffff92000bf4f55 RCX: 00000000f8ed7948
[   50.475726][    C3] RDX: 0000000000000001 RSI: ffffffff8b6cff80 RDI: ffffffff8bd369a0
[   50.475732][    C3] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dd8d98
[   50.475738][    C3] R10: ffffffff96ec6cc7 R11: 0000000000000002 R12: 0000000000000000
[   50.475744][    C3] R13: ffffffff8e1bd080 R14: 0000000000000000 R15: 0000000000000000
[   50.475753][    C3]  ? __pfx_lock_acquire.part.0+0x10/0x10
[   50.475767][    C3]  ? rcu_is_watching+0x12/0xc0
[   50.475777][    C3]  ? trace_lock_acquire+0x14e/0x1f0
[   50.475787][    C3]  ? __virt_addr_valid+0x1a4/0x590
[   50.475797][    C3]  ? lock_acquire+0x2f/0xb0
[   50.475810][    C3]  ? __virt_addr_valid+0x1a4/0x590
[   50.475820][    C3]  __virt_addr_valid+0x1aa/0x590
[   50.475829][    C3]  ? __virt_addr_valid+0x1a4/0x590
[   50.475839][    C3]  ? __pfx___d_free+0x10/0x10
[   50.475849][    C3]  kasan_addr_to_slab+0xd/0x80
[   50.475858][    C3]  kasan_record_aux_stack+0xe/0xd0
[   50.475872][    C3]  __call_rcu_common.constprop.0+0x9a/0x870
[   50.475886][    C3]  ? __dentry_kill+0x2ab/0x600
[   50.475898][    C3]  dentry_free+0xc2/0x160
[   50.475908][    C3]  __dentry_kill+0x498/0x600
[   50.475920][    C3]  dput.part.0+0x4b1/0x9b0
[   50.475932][    C3]  dput+0x1f/0x30
[   50.475943][    C3]  simple_recursive_removal+0x131/0x8e0
[   50.475958][    C3]  ? __pfx_remove_one+0x10/0x10
[   50.475970][    C3]  ? __pfx_kvm_vm_release+0x10/0x10
[   50.475985][    C3]  debugfs_remove+0x5d/0x80
[   50.475995][    C3]  kvm_destroy_vm_debugfs+0xc6/0x250
[   50.476005][    C3]  ? __pfx_kvm_vm_release+0x10/0x10
[   50.476019][    C3]  kvm_put_kvm+0xf1/0xb40
[   50.476032][    C3]  ? lockdep_hardirqs_on+0x7c/0x110
[   50.476045][    C3]  ? __pfx_kvm_vm_release+0x10/0x10
[   50.476059][    C3]  kvm_vm_release+0x3c/0x50
[   50.476073][    C3]  __fput+0x3ff/0xb70
[   50.476085][    C3]  task_work_run+0x14e/0x250
[   50.476098][    C3]  ? __pfx_task_work_run+0x10/0x10
[   50.476111][    C3]  ? __pfx___do_sys_close_range+0x10/0x10
[   50.476123][    C3]  syscall_exit_to_user_mode+0x27b/0x2a0
[   50.476136][    C3]  do_syscall_64+0xda/0x250
[   50.476150][    C3]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.476163][    C3] RIP: 0033:0x7f573f78d169
[   50.476171][    C3] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.476180][    C3] RSP: 002b:00007ffddb964468 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[   50.476189][    C3] RAX: 0000000000000000 RBX: 000000000000c1a1 RCX: 00007f573f78d169
[   50.476195][    C3] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[   50.476200][    C3] RBP: 00007f573f9a7ba0 R08: 0000000000000001 R09: 0000001ddb96475f
[   50.476206][    C3] R10: 00007f573f600000 R11: 0000000000000246 R12: 00007f573f9a5fac
[   50.476212][    C3] R13: 00007f573f9a5fa0 R14: ffffffffffffffff R15: 00007ffddb964580
[   50.476220][    C3]  </TASK>
[   50.476224][    C3] 
[   50.638373][    C3] Allocated by task 5992:
[   50.639586][    C3]  kasan_save_stack+0x33/0x60
[   50.640908][    C3]  kasan_save_track+0x14/0x30
[   50.642260][    C3]  __kasan_kmalloc+0xaa/0xb0
[   50.643552][    C3]  xpad_probe+0x27e/0x1f50
[   50.644813][    C3]  usb_probe_interface+0x300/0x9c0
[   50.646249][    C3]  really_probe+0x23e/0xa90
[   50.647525][    C3]  __driver_probe_device+0x1de/0x440
[   50.648984][    C3]  driver_probe_device+0x4c/0x1b0
[   50.650390][    C3]  __device_attach_driver+0x1df/0x310
[   50.651940][    C3]  bus_for_each_drv+0x157/0x1e0
[   50.653296][    C3]  __device_attach+0x1e8/0x4b0
[   50.654648][    C3]  bus_probe_device+0x17f/0x1c0
[   50.656009][    C3]  device_add+0x114b/0x1a70
[   50.657283][    C3]  usb_set_configuration+0x10cb/0x1c50
[   50.658802][    C3]  usb_generic_driver_probe+0xb1/0x110
[   50.660307][    C3]  usb_probe_device+0xec/0x3e0
[   50.661652][    C3]  really_probe+0x23e/0xa90
[   50.662964][    C3]  __driver_probe_device+0x1de/0x440
[   50.664425][    C3]  driver_probe_device+0x4c/0x1b0
[   50.665819][    C3]  __device_attach_driver+0x1df/0x310
[   50.667332][    C3]  bus_for_each_drv+0x157/0x1e0
[   50.668697][    C3]  __device_attach+0x1e8/0x4b0
[   50.670046][    C3]  bus_probe_device+0x17f/0x1c0
[   50.671408][    C3]  device_add+0x114b/0x1a70
[   50.672703][    C3]  usb_new_device+0xd09/0x1a20
[   50.674068][    C3]  hub_event+0x2d9a/0x4e10
[   50.675320][    C3]  process_one_work+0x9c5/0x1ba0
[   50.676709][    C3]  worker_thread+0x6c8/0xf00
[   50.678024][    C3]  kthread+0x3af/0x750
[   50.679169][    C3]  ret_from_fork+0x45/0x80
[   50.680410][    C3]  ret_from_fork_asm+0x1a/0x30
[   50.681747][    C3] 
[   50.682457][    C3] Freed by task 5977:
[   50.683570][    C3]  kasan_save_stack+0x33/0x60
[   50.684880][    C3]  kasan_save_track+0x14/0x30
[   50.686193][    C3]  kasan_save_free_info+0x3b/0x60
[   50.687602][    C3]  __kasan_slab_free+0x51/0x70
[   50.688934][    C3]  kfree+0x2c4/0x4d0
[   50.690040][    C3]  xpad_disconnect+0x1cf/0x580
[   50.691405][    C3]  usb_unbind_interface+0x1e2/0x960
[   50.692827][    C3]  device_remove+0x122/0x170
[   50.694170][    C3]  device_release_driver_internal+0x44a/0x610
[   50.695831][    C3]  bus_remove_device+0x22f/0x420
[   50.697189][    C3]  device_del+0x396/0x9f0
[   50.698388][    C3]  usb_disable_device+0x36c/0x7f0
[   50.699776][    C3]  usb_disconnect+0x2e1/0x920
[   50.701079][    C3]  hub_event+0x1da5/0x4e10
[   50.702323][    C3]  process_one_work+0x9c5/0x1ba0
[   50.703707][    C3]  worker_thread+0x6c8/0xf00
[   50.704997][    C3]  kthread+0x3af/0x750
[   50.706144][    C3]  ret_from_fork+0x45/0x80
[   50.707393][    C3]  ret_from_fork_asm+0x1a/0x30
[   50.708716][    C3] 
[   50.709391][    C3] The buggy address belongs to the object at ffff88802a759800
[   50.709391][    C3]  which belongs to the cache kmalloc-1k of size 1024
[   50.713166][    C3] The buggy address is located 145 bytes inside of
[   50.713166][    C3]  freed 1024-byte region [ffff88802a759800, ffff88802a759c00)
[   50.716891][    C3] 
[   50.717573][    C3] The buggy address belongs to the physical page:
[   50.719335][    C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a758
[   50.721711][    C3] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   50.724042][    C3] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   50.726104][    C3] page_type: f5(slab)
[   50.727229][    C3] raw: 00fff00000000040 ffff88801b042dc0 ffffea0001378c00 dead000000000002
[   50.729553][    C3] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   50.731897][    C3] head: 00fff00000000040 ffff88801b042dc0 ffffea0001378c00 dead000000000002
[   50.734264][    C3] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   50.736659][    C3] head: 00fff00000000003 ffffea0000a9d601 ffffffffffffffff 0000000000000000
[   50.738933][    C3] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[   50.741286][    C3] page dumped because: kasan: bad access detected
[   50.743049][    C3] page_owner tracks the page as allocated
[   50.744610][    C3] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1143, tgid 1143 (kworker/u32:7), ts 47948223901, free_ts 47540046131
[   50.749795][    C3]  post_alloc_hook+0x181/0x1b0
[   50.751140][    C3]  get_page_from_freelist+0xfce/0x2f80
[   50.752655][    C3]  __alloc_frozen_pages_noprof+0x221/0x2470
[   50.754293][    C3]  alloc_pages_mpol+0x1fc/0x540
[   50.755641][    C3]  new_slab+0x23d/0x330
[   50.756807][    C3]  ___slab_alloc+0xc5d/0x1720
[   50.758119][    C3]  __slab_alloc.constprop.0+0x56/0xb0
[   50.759601][    C3]  __kmalloc_noprof+0x2ec/0x510
[   50.760953][    C3]  ieee802_11_parse_elems_full+0x1d0/0x3240
[   50.762593][    C3]  ieee80211_inform_bss+0xfd/0x1100
[   50.764031][    C3]  cfg80211_inform_single_bss_data+0x8f9/0x1df0
[   50.765746][    C3]  cfg80211_inform_bss_data+0x205/0x3ba0
[   50.767179][    C3]  cfg80211_inform_bss_frame_data+0x272/0x7a0
[   50.768864][    C3]  ieee80211_bss_info_update+0x311/0xab0
[   50.770399][    C3]  ieee80211_ibss_rx_queued_mgmt+0x189c/0x2f50
[   50.772120][    C3]  ieee80211_iface_work+0xc15/0xf50
[   50.773557][    C3] page last free pid 5943 tgid 5943 stack trace:
[   50.775301][    C3]  free_frozen_pages+0x6db/0xfb0
[   50.776674][    C3]  qlist_free_all+0x4e/0x120
[   50.777966][    C3]  kasan_quarantine_reduce+0x195/0x1e0
[   50.779469][    C3]  __kasan_slab_alloc+0x69/0x90
[   50.780823][    C3]  kmem_cache_alloc_noprof+0x226/0x3d0
[   50.782335][    C3]  fib_table_insert+0x80d/0x1d70
[   50.783705][    C3]  fib_magic+0x4d6/0x5c0
[   50.784888][    C3]  fib_add_ifaddr+0x4c0/0x560
[   50.786199][    C3]  fib_netdev_event+0x38a/0x710
[   50.787554][    C3]  notifier_call_chain+0xb7/0x410
[   50.788948][    C3]  call_netdevice_notifiers_info+0xbe/0x140
[   50.790580][    C3]  __dev_notify_flags+0x12d/0x2e0
[   50.792012][    C3]  dev_change_flags+0x10c/0x160
[   50.793381][    C3]  do_setlink.constprop.0+0x699/0x3f80
[   50.794906][    C3]  rtnl_newlink+0x1306/0x1d60
[   50.796225][    C3]  rtnetlink_rcv_msg+0x95b/0xea0
[   50.797655][    C3] 
[   50.798360][    C3] Memory state around the buggy address:
[   50.799912][    C3]  ffff88802a759780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   50.802109][    C3]  ffff88802a759800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   50.804307][    C3] >ffff88802a759880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   50.806497][    C3]                          ^
[   50.807793][    C3]  ffff88802a759900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   50.809990][    C3]  ffff88802a759980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   50.812214][    C3] ==================================================================
[   50.815030][    C3] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   50.817558][    C3] CPU: 3 UID: 0 PID: 6284 Comm: syz.1.77 Not tainted 6.14.0-rc7-syzkaller-00067-g76b6905c11fd #0
[   50.821194][    C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   50.824194][    C3] Call Trace:
[   50.825130][    C3]  <IRQ>
[   50.825941][    C3]  dump_stack_lvl+0x3d/0x1f0
[   50.827271][    C3]  panic+0x71d/0x800
[   50.828370][    C3]  ? __pfx_panic+0x10/0x10
[   50.829618][    C3]  ? rcu_is_watching+0x12/0xc0
[   50.830963][    C3]  ? __pfx_lock_release+0x10/0x10
[   50.832382][    C3]  ? check_panic_on_warn+0x1f/0xb0
[   50.833802][    C3]  check_panic_on_warn+0xab/0xb0
[   50.835188][    C3]  end_report+0x117/0x180
[   50.836601][    C3]  kasan_report+0xe9/0x110
[   50.837853][    C3]  ? register_lock_class+0x1033/0x1240
[   50.839388][    C3]  ? register_lock_class+0x1033/0x1240
[   50.840885][    C3]  register_lock_class+0x1033/0x1240
[   50.842367][    C3]  ? __pfx_register_lock_class+0x10/0x10
[   50.843924][    C3]  __lock_acquire+0x135/0x3c40
[   50.845263][    C3]  ? __pfx___lock_acquire+0x10/0x10
[   50.846799][    C3]  lock_acquire.part.0+0x11b/0x380
[   50.848209][    C3]  ? __wake_up+0x1c/0x60
[   50.849393][    C3]  ? __pfx_lock_acquire.part.0+0x10/0x10
[   50.850944][    C3]  ? rcu_is_watching+0x12/0xc0
[   50.852286][    C3]  ? trace_lock_acquire+0x14e/0x1f0
[   50.853718][    C3]  ? __wake_up+0x1c/0x60
[   50.854915][    C3]  ? lock_acquire+0x2f/0xb0
[   50.856179][    C3]  ? __wake_up+0x1c/0x60
[   50.857365][    C3]  _raw_spin_lock_irqsave+0x3a/0x60
[   50.858811][    C3]  ? __wake_up+0x1c/0x60
[   50.859987][    C3]  __wake_up+0x1c/0x60
[   50.861121][    C3]  usb_anchor_resume_wakeups+0xc2/0xe0
[   50.862628][    C3]  __usb_hcd_giveback_urb+0x3b7/0x6e0
[   50.864110][    C3]  usb_hcd_giveback_urb+0x396/0x450
[   50.865548][    C3]  dummy_timer+0x17f7/0x3960
[   50.866853][    C3]  ? mark_lock+0xb5/0xc60
[   50.868056][    C3]  ? __pfx_lock_release+0x10/0x10
[   50.869444][    C3]  ? lock_acquire+0x2f/0xb0
[   50.870697][    C3]  ? debug_object_deactivate+0x13b/0x370
[   50.872259][    C3]  ? find_held_lock+0x2d/0x110
[   50.873585][    C3]  ? __hrtimer_run_queues+0x53d/0xae0
[   50.875076][    C3]  ? __pfx_lock_release+0x10/0x10
[   50.876465][    C3]  ? __pfx_dummy_timer+0x10/0x10
[   50.877844][    C3]  ? mark_held_locks+0x9f/0xe0
[   50.879184][    C3]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   50.880791][    C3]  ? __pfx_dummy_timer+0x10/0x10
[   50.882178][    C3]  __hrtimer_run_queues+0x20a/0xae0
[   50.883609][    C3]  ? __pfx___hrtimer_run_queues+0x10/0x10
[   50.885169][    C3]  ? read_tsc+0x9/0x20
[   50.886311][    C3]  hrtimer_run_softirq+0x17d/0x350
[   50.887720][    C3]  handle_softirqs+0x213/0x8f0
[   50.889049][    C3]  ? __pfx_handle_softirqs+0x10/0x10
[   50.890519][    C3]  __irq_exit_rcu+0x109/0x170
[   50.891974][    C3]  irq_exit_rcu+0x9/0x30
[   50.893283][    C3]  sysvec_apic_timer_interrupt+0xa4/0xc0
[   50.894845][    C3]  </IRQ>
[   50.895674][    C3]  <TASK>
[   50.896517][    C3]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   50.898199][    C3] RIP: 0010:lock_acquire.part.0+0x155/0x380
[   50.899824][    C3] Code: b8 ff ff ff ff 65 0f c1 05 50 c8 6b 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7
[   50.905020][    C3] RSP: 0018:ffffc90005fa7aa0 EFLAGS: 00000206
[   50.906695][    C3] RAX: 0000000000000046 RBX: 1ffff92000bf4f55 RCX: 00000000f8ed7948
[   50.908852][    C3] RDX: 0000000000000001 RSI: ffffffff8b6cff80 RDI: ffffffff8bd369a0
[   50.910973][    C3] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dd8d98
[   50.913140][    C3] R10: ffffffff96ec6cc7 R11: 0000000000000002 R12: 0000000000000000
[   50.915304][    C3] R13: ffffffff8e1bd080 R14: 0000000000000000 R15: 0000000000000000
[   50.917458][    C3]  ? __pfx_lock_acquire.part.0+0x10/0x10
[   50.919016][    C3]  ? rcu_is_watching+0x12/0xc0
[   50.920340][    C3]  ? trace_lock_acquire+0x14e/0x1f0
[   50.921780][    C3]  ? __virt_addr_valid+0x1a4/0x590
[   50.923220][    C3]  ? lock_acquire+0x2f/0xb0
[   50.924485][    C3]  ? __virt_addr_valid+0x1a4/0x590
[   50.925898][    C3]  __virt_addr_valid+0x1aa/0x590
[   50.927290][    C3]  ? __virt_addr_valid+0x1a4/0x590
[   50.928697][    C3]  ? __pfx___d_free+0x10/0x10
[   50.930012][    C3]  kasan_addr_to_slab+0xd/0x80
[   50.931339][    C3]  kasan_record_aux_stack+0xe/0xd0
[   50.932784][    C3]  __call_rcu_common.constprop.0+0x9a/0x870
[   50.934436][    C3]  ? __dentry_kill+0x2ab/0x600
[   50.935771][    C3]  dentry_free+0xc2/0x160
[   50.936976][    C3]  __dentry_kill+0x498/0x600
[   50.938273][    C3]  dput.part.0+0x4b1/0x9b0
[   50.939518][    C3]  dput+0x1f/0x30
[   50.940550][    C3]  simple_recursive_removal+0x131/0x8e0
[   50.942106][    C3]  ? __pfx_remove_one+0x10/0x10
[   50.943454][    C3]  ? __pfx_kvm_vm_release+0x10/0x10
[   50.944899][    C3]  debugfs_remove+0x5d/0x80
[   50.946169][    C3]  kvm_destroy_vm_debugfs+0xc6/0x250
[   50.947632][    C3]  ? __pfx_kvm_vm_release+0x10/0x10
[   50.949090][    C3]  kvm_put_kvm+0xf1/0xb40
[   50.950296][    C3]  ? lockdep_hardirqs_on+0x7c/0x110
[   50.951731][    C3]  ? __pfx_kvm_vm_release+0x10/0x10
[   50.953196][    C3]  kvm_vm_release+0x3c/0x50
[   50.954442][    C3]  __fput+0x3ff/0xb70
[   50.955563][    C3]  task_work_run+0x14e/0x250
[   50.956969][    C3]  ? __pfx_task_work_run+0x10/0x10
[   50.958581][    C3]  ? __pfx___do_sys_close_range+0x10/0x10
[   50.960406][    C3]  syscall_exit_to_user_mode+0x27b/0x2a0
[   50.962363][    C3]  do_syscall_64+0xda/0x250
[   50.963819][    C3]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.965727][    C3] RIP: 0033:0x7f573f78d169
[   50.966996][    C3] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.973313][    C3] RSP: 002b:00007ffddb964468 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[   50.975615][    C3] RAX: 0000000000000000 RBX: 000000000000c1a1 RCX: 00007f573f78d169
[   50.977790][    C3] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[   50.979970][    C3] RBP: 00007f573f9a7ba0 R08: 0000000000000001 R09: 0000001ddb96475f
[   50.982163][    C3] R10: 00007f573f600000 R11: 0000000000000246 R12: 00007f573f9a5fac
[   50.984934][    C3] R13: 00007f573f9a5fa0 R14: ffffffffffffffff R15: 00007ffddb964580
[   50.987735][    C3]  </TASK>
[   52.062198][    C3] Shutting down cpus with NMI
[   52.064100][    C3] Kernel Offset: disabled
[   52.065304][    C3] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:50:57  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff88806a944a80 RCX=ffffffff81ade46a RDX=ffff888024304880
RSI=ffffffff81ade444 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000462f900
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000003
R12=ffffed100d528951 R13=0000000000000001 R14=ffff88806a63fe80 R15=ffff88806a944a88
RIP=ffffffff81ade446 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc3c9afd280 ffffffff 00c00000
GS =0000 ffff88806a600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000055ddd64e0c08 CR3=0000000021742000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000002000002 Opmask01=0000000001fffffe Opmask02=0000000001ffffff Opmask03=0000000000000000
Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ddd645d920 000055ddd6449fa0
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 00ff000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69646165520073 25203a656c696620 7974706d6520676e 697070696b530065
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4245484d4952005f 090c164940454a0c 55585c41490c4b42 455c5c4547530049
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b7036dad5a9ef045 000055d88b99b6cc 0000000000000091 00000000312e7465
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616c702f73656369 7665642f7379732f 0000000000000041 0000000000000031
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382433273f397b27 697a787c69303b7e 69305f474f5b647c 6930382433273f39
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 383a3a263d383a3a 263c383a3a263f38 3a3a263e383a3a26 39383a3a2638383a
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
info registers vcpu 1

CPU#1
RAX=ffff7fffffffffff RBX=ffffffff9a87f2e0 RCX=ffffffff8b5a1b64 RDX=0000000000000000
RSI=0000000000000004 RDI=ffffffff9a87f2e0 RBP=0000000000000003 RSP=ffffc9000350f470
R8 =0000000000000000 R9 =fffffbfff350fe5c R10=ffffffff9a87f2e3 R11=0000000000000004
R12=fffffbfff350fe5c R13=0000000000000000 R14=ffff88806a73fb40 R15=0000000000000001
RIP=ffffffff821d03e9 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555567c6e500 ffffffff 00c00000
GS =0000 ffff88806a700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000555567c895c8 CR3=00000000252e8000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000020081 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed21b2960 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f953000f282
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f953000f28f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f953000f289
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f953000f29d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f953000f323
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f953000f401
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000000 0000000000000738
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff8168943e RDX=ffff88802319c880
RSI=ffffffff8168945b RDI=0000000000000000 RBP=ffffffff9a87f2e0 RSP=ffffc900017ef2f0
R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000005
R12=0000000000000003 R13=0000000000000003 R14=ffff88806a83fb40 R15=fffffbfff350fe5c
RIP=ffffffff8168945c RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a800000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f952ff70f20 CR3=0000000030f9e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=00000000ffbfef77 Opmask03=0000000000000000
Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc553a9180 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000ff0000 ffff000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656e696c5f706c63 73002a5d392d305b 79747400786d7470 0079747400646461
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 54003d534b4e494c 564544003d4d4554 535953425553003d 4854415056454400
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 540018534b4e494c 56454400184d4554 5359534255530018 4854415056454400
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746e6e6f635f666e 000055ddd644a36a 0000000000000031 00000000312e7465
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ddd64e10c0 00007fc3c97f2270 000000000000a961 0000000000000030
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382433273f397b27 697a787c69303b7e 69305f474f5b647c 6930382433273f39
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 383a3a263d383a3a 263c383a3a263f38 3a3a263e383a3a26 39383a3a2638383a
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
info registers vcpu 3

CPU#3
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8540c635 RDI=ffffffff9ab847c0 RBP=ffffffff9ab84780 RSP=ffffc90000718240
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552
R12=0000000000000000 R13=0000000000000020 R14=ffffffff9ab84780 R15=0000000000000000
RIP=ffffffff8540c65f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555597d6500 ffffffff 00c00000
GS =0000 ffff88806a900000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f953019d7e0 CR3=0000000035fe6000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=00000000000000ff Opmask02=000000000000003f Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d8520f282
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d8520f28f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d8520f289
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d8520f29d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d8520f323
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d8520f401
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d8537c488 00007f8d8537c480 00007f8d8537c478 00007f8d8537c450
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d85edd100 00007f8d8537c440 00007f8d8537c458 00007f8d8537c4a0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d8537c498 00007f8d8537c490 00007f8d8537c488 00007f8d8537c480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 000000000000004c
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000