last executing test programs:

2m10.31707741s ago: executing program 0 (id=311):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3}]}, {0x0, [0x30, 0x0, 0x5f]}}, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000500)=@raw=[@cb_func], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x9, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'gretap0\x00', r3, 0x700, 0x700, 0x0, 0x3, {{0xa, 0x4, 0x1, 0x2, 0x28, 0x68, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp_addr={0x44, 0x14, 0x15, 0x1, 0xc, [{@remote, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40}]}]}}}}})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r3, 0x0, 0x11203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x9}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x200000000000011, 0x2, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3}]}, {0x0, [0x30, 0x0, 0x5f]}}, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000500)=@raw=[@cb_func], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x9, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'gretap0\x00', r3, 0x700, 0x700, 0x0, 0x3, {{0xa, 0x4, 0x1, 0x2, 0x28, 0x68, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp_addr={0x44, 0x14, 0x15, 0x1, 0xc, [{@remote, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40}]}]}}}}}) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r3, 0x0, 0x11203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x9}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)

2m10.247750916s ago: executing program 0 (id=312):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x100, 0x80901)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85512, &(0x7f0000000180)={{0x7}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})
r1 = socket$packet(0x11, 0x2, 0x300)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4)
mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f00000000c0)={'trans=virtio,', {[{@afid={'afid', 0x3d, 0x1}}]}})
read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020)
ioctl$sock_ifreq(r1, 0x89fd, &(0x7f0000000100)={'bond0\x00', @ifru_settings={0x5, 0x8002, @sync=0x0}})

2m10.247471786s ago: executing program 0 (id=313):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
process_madvise(r1, &(0x7f0000000700)=[{&(0x7f0000000000)=' ', 0x1}, {&(0x7f0000000580)="9298", 0x2}], 0x2, 0x0, 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
tkill(r0, 0x2b)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)

2m10.108161717s ago: executing program 0 (id=314):
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffff00000800030000000000080001"], 0x44}}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r5}, 0x10)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000d06010200000000000000000000000312000300680773683a6e65742c706f727400000005000100070000000c000300686173683a697000050005000200000005000500000000000500010007000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r7, &(0x7f0000000040), 0xe)
setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CAP_HALT_POLL(r10, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x10000})
ioctl$KVM_CLEAR_DIRTY_LOG(r10, 0xc018aec0, &(0x7f0000000480)={0x10000, 0x240, 0x380, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r8}, 0x10)
r11 = socket(0x18, 0x5, 0x4)
sendto$inet6(r11, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a000000040085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e018d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r2, @ANYRESDEC=r6, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=r5, @ANYBLOB="2d7af7268ca81a5522a69912da1510c055d7e176e285d5504d037579c3f68d32a8e0a2a400623a44068044b644ced3f8f8195dc8b046adb1080fec9be0709b4d"], 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x20000004)
bind$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x9, @none, 0x6f, 0x1}, 0x39)
r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r12, 0x0, 0x1, &(0x7f00000002c0)=0x1, 0x4)
sendmsg$802154_dgram(r12, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4004880}, 0x0)
r13 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r13, 0x500e, 0x0)
connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000a000000080000000000000f0500000000000000000000002e00f0c52cbce51b7b190c19ee069064853087d9db33c361dfa1d5ffb81f794ed9910e6908ca559a78bc58a97a4a9d69a5a8752ea5d575b4151b9f5d4137957b0395dc445a11939e981d34afef17914575118ed1b95faef28cfa8e11c465a349ee966b940bff5e35d224c3f93b875764ecf2352915749ad18b42b966290d2c76a730b4be41971c95ff182d6d7e6adeb28d1420037b84bf63ea1b86ec45d809e8a528eaa5d3291bc12d1b0a009089d79ab17ac40fd69175"], 0x0, 0x2e, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x20)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4)

2m9.957786771s ago: executing program 0 (id=315):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004100090c25bd7000fecbc22505000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x2000000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000480)="827c2f83011b1e957c262c12b37e34f6ec44ebb4608af9a0b609886744c9dabf911cc5de1a034befeab0668b6784ad53f4259bbff3a91711b6ee9c92faa321cabf2c823069554d157ec8e33613a23e412d256f088adc559cc40344a83c71c158ad8db30f27773042c380e3fbcd7e08072fe0058ba2be1d4f2f1d450310d42563c3a73d0d39a76f3f6b78fb071fd88c2fd670d6d7eb3a31bf7faee6b1da0b767324445e55570d19c2d10b3de8fd7388d9", &(0x7f0000000540)=@udp=r4, 0x2}, 0x20)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'sit0\x00', <r5=>r1, 0x7807, 0x700, 0x4, 0x2, {{0xb, 0x4, 0x0, 0x2, 0x2c, 0x66, 0x0, 0xce, 0x4, 0x0, @empty, @loopback, {[@end, @timestamp_prespec={0x44, 0x14, 0x41, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x304}, {@empty, 0x9}]}]}}}}})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000030500000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000500", @ANYRES32=r5, @ANYBLOB="02e271e2b2e46ee89f326e24aaf459e95d45cac0ac279c04db1a7c769a8cc64c0498ebd87a928bb7937c0ad6fd73a3980d762bb0157a515b1768dc5e13ac862360d6fc5e2c7b4cd31fbee80f17225f283be2c1cde1dd617cbcd2197405826555526e2b81946ae82d6b2f1cff753b1f30ae3707d97ec2f0f14c0ed5b78fbfaf89c62addefd53e96f5c8b857d6373b17f9f35fff42b73d9d1eae719477b7d46b5bab2471ddec2ae3a13a86b154158913dd069189ad6e003c68da"], 0x28}}, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0)
write$nbd(r6, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r7 = open(&(0x7f0000000000)='.\x00', 0x141c00, 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, 0x0)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2})
r9 = socket(0x0, 0x1, 0x0)
getsockopt(r9, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000))
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r11=>0x0})
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001c00070c000000000000000007000000", @ANYRES32=r11, @ANYBLOB="ffffffff0a00020001"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
fcntl$notify(r0, 0x402, 0x8)

2m9.907626807s ago: executing program 0 (id=316):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200004, 0x200000})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x70bd27, 0xa5dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x64e10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24064090}, 0x4004002)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x808e}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0x12, 0x60d, 0x148, 0x202, 0x218, 0x2e8, 0x2e8, 0x218, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [], [0xff], 'veth0_to_team\x00', 'macsec0\x00', {}, {}, 0x0, 0x0, 0x0, 0x11}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x445, 0x400, 0x9}}, @common=@srh={{0x30}, {0x21, 0xfd, 0xfa, 0x7, 0x0, 0x43, 0x182}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff, 0xffffff00], [0xff000000, 0xff000000, 0xff], 'nicvf0\x00', 'geneve0\x00', {0xff}, {}, 0x2c, 0x3, 0x6, 0x75}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
bind$netrom(r4, &(0x7f00000000c0)={{0x6, @rose, 0x1}, [@null, @default, @netrom, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48)

1m54.618825325s ago: executing program 32 (id=316):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200004, 0x200000})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x70bd27, 0xa5dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x64e10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24064090}, 0x4004002)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x808e}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0x12, 0x60d, 0x148, 0x202, 0x218, 0x2e8, 0x2e8, 0x218, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [], [0xff], 'veth0_to_team\x00', 'macsec0\x00', {}, {}, 0x0, 0x0, 0x0, 0x11}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x445, 0x400, 0x9}}, @common=@srh={{0x30}, {0x21, 0xfd, 0xfa, 0x7, 0x0, 0x43, 0x182}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff, 0xffffff00], [0xff000000, 0xff000000, 0xff], 'nicvf0\x00', 'geneve0\x00', {0xff}, {}, 0x2c, 0x3, 0x6, 0x75}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
bind$netrom(r4, &(0x7f00000000c0)={{0x6, @rose, 0x1}, [@null, @default, @netrom, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48)

38.277795987s ago: executing program 1 (id=1394):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%ps    \x00'}, 0x20) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x3c, r3, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) (async)
listen(r4, 0x3) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x28, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x7, 0x0, 0x0, 0xf, {[@md5sig={0x13, 0x12, "f6cfdd92e6b85d6c8523509bc592275b"}]}}}}}}}}, 0x0) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000000), &(0x7f0000000140)='%+9llu \x00'}, 0x20)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x28, r6, 0x1, 0x80000000, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}]}]}, 0x28}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1}, 0x4) (async, rerun: 32)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r10 = socket(0x400000000010, 0x3, 0x0) (async)
r11 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async, rerun: 32)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b708000000000e007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 32)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r13, @ANYRES32=0x0, @ANYRES32], 0x31) (async)
r14 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r16=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r14, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r15, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7b}, @val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x400, 0x24}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20000005}, 0x0)

38.275676462s ago: executing program 1 (id=1395):
r0 = socket(0x2b, 0x80801, 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x3ec0) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x3ec0)
close_range(r1, 0xffffffffffffffff, 0x0) (async)
close_range(r1, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x1040, @private0={0xfc, 0x0, '\x00', 0x1}, 0x37592245}, 0x1c)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) (async)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)})
setfsuid(0xee01) (async)
setfsuid(0xee01)
setfsuid(0xee00)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2) (async)
r4 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r5})
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r6 = socket(0xa, 0x1, 0x0)
ioctl(r6, 0x8916, &(0x7f0000000000))
ioctl(r6, 0x8936, &(0x7f0000000000))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000340)=0x400a, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000340)=0x400a, 0x4)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x44, r8, 0x43cc1be0d56558c9, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_VLAN_ID={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x30008000)
r9 = socket(0x10, 0x3, 0x0)
r10 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x7}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x1ff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
r12 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r12, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f00000003c0)="0f01c2c4e3d1cf4a4c0d0f20c06635100000000f22c0baf80c66b8da51fc8666efbafc0cb000ee0fc75ac2660fc5fc56f3ad26d9fb66b84b5867330f23d80f21f86635400000c00f23f8d9e9", 0x4c}], 0x1, 0x40, &(0x7f0000000480)=[@efer={0x2, 0x1000}], 0x1)
ioctl$KVM_SET_CLOCK(r12, 0x4188aec6, &(0x7f0000000040)) (async)
ioctl$KVM_SET_CLOCK(r12, 0x4188aec6, &(0x7f0000000040))

38.275411236s ago: executing program 1 (id=1396):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000800)=0xffffffc0, 0x4) (async)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) (async)
ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x60}]})
close(r1)
read(r1, &(0x7f0000000180)=""/112, 0x70)

37.928409214s ago: executing program 1 (id=1403):
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000040)={0xe986b8687a3303c2, 0x4, "be26f00bc7c53a8f7088d5c3c0d6ebc58f45b4406026c1685b00501d5df8af1f", 0x3, 0x9, 0x800000010001, 0x5, 0x3, 0x4, 0x9, 0xfff, [0x1, 0x4, 0x4, 0xa]})
ptrace(0x10, r1)
ptrace$cont(0x20, r1, 0x0, 0x13)
ptrace(0x11, r1)
setpgid(r0, 0x0)
wait4(r1, &(0x7f0000000100), 0x1000000, &(0x7f0000000440))
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r3, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000002c0))
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = dup(r4)
r6 = fcntl$dupfd(r3, 0x0, r4)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0})
ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5})
r7 = eventfd2(0x8001, 0x0)
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x104000000)
ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f00000000c0)={0x0, r7})
setpgid(0x0, r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)

37.768109935s ago: executing program 1 (id=1405):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$I2C_TENBIT(0xffffffffffffffff, 0x704, 0xfffffffffffffffc)
r4 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
sched_setscheduler(0x0, 0x1, 0x0) (async)
getpid() (async)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x1)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) (async, rerun: 64)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (rerun: 64)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r5 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x800}]}}]}, 0x3c}}, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000360000000e00012ab3f543db006a696d0002000000000000006a3c51e796b0f2926e656f11dd4cb4e03ba5cb2e0020ca2d0447"], 0x34}}, 0x0) (async)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r2], 0x2c}}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r3)

37.669222371s ago: executing program 1 (id=1406):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r0, 0x701, 0x0, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x2c}}, 0x40)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
getpeername$llc(r4, &(0x7f0000000580)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000005c0)=0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
creat(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x166)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, 0x0, &(0x7f0000000540))
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570)

37.668942198s ago: executing program 33 (id=1406):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r0, 0x701, 0x0, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x2c}}, 0x40)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
getpeername$llc(r4, &(0x7f0000000580)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000005c0)=0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
creat(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x166)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, 0x0, &(0x7f0000000540))
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570)

28.168308095s ago: executing program 2 (id=1493):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000140)='grpquota')
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=<r0=>0x0)
r1 = getpgid(0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38)
ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x4000000000003)
sendfile(r3, r4, &(0x7f0000000100)=0x6, 0x100000000010001)
close_range(r2, 0xffffffffffffffff, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a)
r6 = accept4(r5, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
write(r6, &(0x7f0000000580)='$', 0x1)
setpgid(r0, r1)

23.216714882s ago: executing program 2 (id=1493):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000140)='grpquota')
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=<r0=>0x0)
r1 = getpgid(0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38)
ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x4000000000003)
sendfile(r3, r4, &(0x7f0000000100)=0x6, 0x100000000010001)
close_range(r2, 0xffffffffffffffff, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a)
r6 = accept4(r5, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
write(r6, &(0x7f0000000580)='$', 0x1)
setpgid(r0, r1)

18.194919011s ago: executing program 2 (id=1493):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000140)='grpquota')
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=<r0=>0x0)
r1 = getpgid(0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38)
ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x4000000000003)
sendfile(r3, r4, &(0x7f0000000100)=0x6, 0x100000000010001)
close_range(r2, 0xffffffffffffffff, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a)
r6 = accept4(r5, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
write(r6, &(0x7f0000000580)='$', 0x1)
setpgid(r0, r1)

13.168383493s ago: executing program 2 (id=1493):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000140)='grpquota')
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=<r0=>0x0)
r1 = getpgid(0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38)
ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x4000000000003)
sendfile(r3, r4, &(0x7f0000000100)=0x6, 0x100000000010001)
close_range(r2, 0xffffffffffffffff, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a)
r6 = accept4(r5, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
write(r6, &(0x7f0000000580)='$', 0x1)
setpgid(r0, r1)

8.937277713s ago: executing program 4 (id=1682):
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x10000, &(0x7f0000000240)={[{@metacopy_off}, {@verity_on}]})
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_macvtap\x00', &(0x7f0000000300)=@ethtool_gstrings={0x1b, 0x5, 0x156, "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"}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'vxcan1\x00', 0x2100})

8.015480729s ago: executing program 4 (id=1683):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x4, 0xb2}, 0x2)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={<r1=>0x0, 0x7}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={<r2=>r1, 0x8}, &(0x7f0000000100)=0x8)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r2, 0x7, 0x8}, &(0x7f0000000180)=0xc)
ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000200)={0x0, @qipcrtr={0x2a, 0xffffffff, 0xffffc000}, @phonet={0x23, 0x0, 0x6, 0x6}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, 0x9, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)='ip6_vti0\x00', 0x4, 0xec, 0x3})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000040)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000380)={r1, 0x81}, 0x8)
setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000003c0)={r1, 0x0, 0x8, 0x3}, 0x10)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000007)
getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000400), &(0x7f0000000440)=0xe)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
writev(r4, &(0x7f0000000580)=[{&(0x7f0000000500)="68adf7e5f1c9a1fcb625fcc4b04eadca79df487c5bf5e3eaba2289f9e6ecb6986dcff670d5aaaa4bbcda98b1b83d97e28ff16d11755d8ceab10cb285ccec085ebf2c037d113b1d92cd0d2164a1c13e22ed4df482cb574cafcec940e7c1f6c67454aba37b05206ec7fe0b543b9811b42e5d195e96d60c", 0x76}], 0x1)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000005c0)={r1, 0x1}, &(0x7f0000000600)=0x8)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000640), &(0x7f0000000680)=0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000006c0), 0xc, &(0x7f0000000b00)={&(0x7f0000000700)={0x3cc, 0x2c, 0x4, 0x70bd27, 0x25dfdbfb, {0x7}, [@nested={0x5, 0xab, 0x0, 0x1, [@generic='P']}, @generic="51f9e93cd99e726ebd1c96936d3bdb3ff69708a3fd7b82219fb09a545a2edb9b28409ba6b1c13ed70716945b9b92d7d84f2796f2a09c6e48735136a7389b42a6d5df38d0809c7a1145aafc1028b8c7b95315accf21dc0321528a87b940b42862d26ce7e4ab5501a0b6477f7c1c3b3aa0104cf9c3fe6ac25ec338a0fbb0fb562ad4df64e7d8484fb2ce5dd0a3eacae5a96dbb35a3d7e378ff25f777b43f771473d2cca7243d7c666f63be69f2da7013ab1e8bfd6c3afbb02daa301899bc88c3f018", @typed={0x5, 0x11e, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0xe4, 0x0, 0x1, [@typed={0x8, 0x76, 0x0, 0x0, @str='$q@\x00'}]}, @nested={0x8, 0xb7, 0x0, 0x1, [@nested={0x4, 0x72}]}, @nested={0x2be, 0x4c, 0x0, 0x1, [@nested={0x4, 0xc8}, @generic="df7314088ec2c879c9fa17872d916cc6319677f0f0a09fd611288f51dd2ed0d2ab10a70e84342f535b4c842059f2b773aafcf8404d32c371c556d0b35094935e454ec5f88d3d722082c708e0453328866a7f9da87cc83856c55012b4c37cd48d6f2cac62a7508cd99db2d5f81bdb238d2e60b891cc0ec441bb5e0c54df905a72cd10a7dae8d5cfa2c270190fc52b10648ab42ee977e5c14a53a3e72398770a935b2c67fe2e3fe64daa66caa92792d9e4c6e548c6702b87cbca64193ade9203c558801d", @typed={0x9, 0x77, 0x0, 0x0, @str='[-,\xee\x00'}, @generic="edb074d1438709e404de8e546e90a763a5de7f3cf44cb3cdf3634fff12c8b371162a2f3926787af419a53753755edc2512e6f9d6994f5d116e6c7002fa89b35f7459044c3352ddcb89dc18774f47d9bbddd710d4250fbd62a0467252dbf34d496e67fe6ac956de00310fa9e79c375bc1d1e6983ed7c67ab1a3a30985cfcf38", @generic="b0935d93f25828eb03ea13c62d0c9af5d5f987341238f57ccefa14f30dcadbcad6760bd46a7426c6a7f53c2993aa14c82c735d89e276997ce13213f50fe0b5cea0bf643d678fdd8733e471ce92c6efc6c166dfe2fda6bcf57e07f6c1bd0f34fa95cefc2ab59549c3a899c8a79d3cf81d8ea6bee8", @nested={0x4, 0xc1}, @generic="f27370382b01d712ddc6a1f8142f1b5ba5e9dc4492a8f4f634f9668b7a50050ffe57899dadc3c3704ee43e3978a4583f73c3e59e98950f504c725f6103c34557eeb2a5879fede2fecc4a0b2bc79816886bb611cad25d09397ad81df6cd831c42c55272538207899b1cb5de48a29581980320d11c5c43ae6641ab7baa6fc95fa960b7a0c09239d034764c0065b01cae144f6a6ebc81aa0519d3bdbed7d51a1f29054de38197594e6e856ebef0060a29fd99e7d02a3a28765a3b53827859a3a2059e93e050ea57dfaf0ab97d74ad883296d9162a8d7a44a1040872e1fa3e2896174e407c95d39fd7d0", @typed={0x8, 0xab, 0x0, 0x0, @ipv4=@broadcast}]}, @typed={0x8, 0x6b, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x10c, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x3cc}}, 0x20000011)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b80)={{0x1, 0x1, 0x18, <r5=>r3, {0x0, 0xffffffffffffffff}}, './file0\x00'})
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r6, 0x4, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
close_range(r5, r7, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24008004}, 0x4408e)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e00)={r5}, 0x4)
ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, &(0x7f0000000e40)={"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"})
ioctl$HIDIOCGREPORT(r5, 0x400c4807, &(0x7f0000001240)={0x3, 0xffffffff, 0x8e28})
ioctl$CDROM_SET_OPTIONS(0xffffffffffffffff, 0x5320, 0x1d)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f00000012c0)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f0000001280)={0xd70, 0x5, 0x1}})
ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000001300)=0x4)

7.857443189s ago: executing program 4 (id=1684):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000003700)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000500)=@newchain={0x43c, 0x64, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {0x0, 0xd}, {0xf, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3f, 0x9, 0x9, 0x0, 0xd153, 0x1, 0x0, 0x200, 0xea90, 0x861, 0x1000, 0x5, 0x9, 0xb, 0x1, 0x7, 0x1, 0x0, 0x6090, 0x2000000, 0x6, 0x9, 0x4, 0x7fff, 0x7, 0x7, 0x6a, 0x8, 0xb, 0xa962, 0x932, 0x8, 0x6bf1, 0x480a, 0x6, 0x9da, 0x5, 0x100, 0x9, 0xec6, 0x100, 0xfff, 0x81, 0x7, 0x6, 0xd, 0x6, 0x682, 0x9b2, 0x6, 0x957, 0xfffffbdd, 0x1, 0x7, 0x7, 0x1, 0x3, 0x252b0000, 0x100, 0xfffffffd, 0x401, 0x0, 0x5, 0x401, 0x3, 0x1, 0x5, 0x1, 0x80008, 0x7, 0xffffffff, 0xe, 0x10000000, 0x1, 0x400, 0xd, 0x0, 0x80000001, 0xcb3, 0x7f, 0x1, 0x81, 0x4, 0x0, 0xffffffff, 0x1, 0x27180000, 0x8, 0x7fff, 0xbcf9, 0xf, 0x0, 0x2, 0x4, 0xb5c, 0x6, 0x4ec, 0x3, 0x3, 0x6, 0x9, 0x8, 0x7fffffff, 0x81, 0xabc0, 0x7e, 0x6, 0x2, 0x0, 0x0, 0xf, 0x2, 0x9, 0xff, 0x7631, 0x2, 0x37, 0x81, 0x101, 0x6, 0x3, 0x5, 0xfffffffe, 0x6, 0x5, 0x8, 0x5, 0x6, 0xe8f, 0x4d9a, 0x0, 0x800, 0x7, 0x7f, 0x9, 0x0, 0x6, 0x80, 0xd, 0x4, 0x0, 0xe9e, 0x2, 0x1000, 0x9, 0x4, 0x9, 0x100, 0x3, 0x6, 0x0, 0x6, 0x1ff, 0x7ff, 0xfffff9db, 0x0, 0x6, 0x80, 0x4, 0x200, 0x3, 0x5, 0x3302, 0x7, 0x1, 0x8, 0x9, 0xe, 0x7ac2, 0x6, 0x6, 0x81, 0xfffffffb, 0x2407, 0x2, 0x80000001, 0x8, 0xfffff0d1, 0x3, 0x401, 0x9, 0x5, 0x9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x6, 0x81, 0x1, 0x8, 0x0, 0x8, 0xe, 0x0, 0x100, 0x0, 0x1000, 0x3, 0x0, 0x4, 0x7, 0xff, 0x2, 0x4, 0xe, 0x2a, 0x90, 0x2, 0x0, 0x7fffffff, 0x8, 0x6, 0x4, 0x7, 0x7fffffff, 0x9e, 0x3993, 0x9, 0x6f, 0x2, 0x4, 0x934c, 0x5, 0xfff, 0x4, 0x3, 0xfffffff9, 0x1, 0x1, 0x1, 0x1, 0x5, 0x3, 0x0, 0x1, 0x101, 0x0, 0x4, 0x8, 0x1, 0x8, 0xfffff001, 0x7a, 0x2, 0x6, 0x2, 0x1, 0x1, 0x4, 0x80000001, 0xb, 0xfc, 0x4, 0x7]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203)
ppoll(&(0x7f0000000280), 0x20000000000001e9, 0x0, 0x0, 0x2)

7.855077362s ago: executing program 4 (id=1685):
r0 = syz_open_dev$audion(&(0x7f0000000000), 0x75, 0x10e82)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) (async)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r3) (async)
fchdir(r3)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1d7) (async)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1d7)
r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x111901, 0x0)
mknod$loop(&(0x7f0000000240)='./control\x00', 0x100, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ptrace(0x10, 0x0) (async)
ptrace(0x10, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x18)
mkdir(&(0x7f0000000300)='./bus\x00', 0xa)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]})
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x64)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000018010040"])
r7 = socket$nl_generic(0x10, 0x3, 0x10)
close(r4)
sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) (async)
sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0)

7.392784841s ago: executing program 2 (id=1493):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000140)='grpquota')
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=<r0=>0x0)
r1 = getpgid(0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38)
ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x4000000000003)
sendfile(r3, r4, &(0x7f0000000100)=0x6, 0x100000000010001)
close_range(r2, 0xffffffffffffffff, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a)
r6 = accept4(r5, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
write(r6, &(0x7f0000000580)='$', 0x1)
setpgid(r0, r1)

6.99901895s ago: executing program 4 (id=1690):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000a80)={0xc0}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fedbdf250200000008000c010200000008004000cb884446f348e9e33ef2da9e041a12cb8e0ef132b7b44455f4e1d1d9a56702966067481383cde31da5bc357a8d2522855af5e949a8055f3b58040eaa7849f39fa600000000000000008b"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24048845) (async)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="b43875080eb7810add0c24120d5df0aff2fd7b18b708a201c4f4012a8311726a48067375ffaff54b8e602f8537c4f146d73f3371fd84cf33aa6905637a9e7ce5178cd11e22a1c63c94d1d10e02a49f68284c8dc6712f57bc6b6f897c64ce7027e36bda36e6382899b62421028d16cbc6754fed900ed4c9b9d5fbc4292685d389093c170a6a9dc5f7fda2d527627a5851d2ffffc77c12773caf3c6c00b136"], 0x28}, 0x1, 0x6c00, 0x0, 0x40000}, 0x0) (async)
r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x3)
ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f00000004c0)=ANY=[@ANYBLOB="c20e94fd4520000a000000070f8283878a89"]) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x0) (async)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) (async)
r8 = socket(0x1e, 0x1, 0x0)
connect$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000800)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x14, r2, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xc800)
write$binfmt_misc(r8, &(0x7f0000000080), 0x2000011a) (async)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f00000005c0)={@remote}, 0x14) (async)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x6}, "65d1b91e4eda"}}, 0x9) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r10=>0x0})
setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000000)={@remote, r10}, 0x14) (async)
sendmsg$nl_route(r8, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000b40)=ANY=[@ANYBLOB="240000001d0000022dbd7000fbdbdf2502000000", @ANYRES32=r10, @ANYBLOB="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", @ANYRES64=r1, @ANYRESOCT=r8, @ANYRES8=r6, @ANYRES64=r7], 0x24}, 0x1, 0x0, 0x0, 0x20000048}, 0x42100) (async)
syz_emit_ethernet(0xee, &(0x7f0000000680)={@remote, @local, @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@llc_tr={0x11, {@snap={0x1, 0xab, 'U', "0f036e", 0x800, "e6eed39bb34b9d47cdbf735ea58c53c3d9baf9332b927c1e23d1f0bb80e1f2e11cde208e0e58794b6b48664277fb925cad3fdb61a2bb8af74c96b6564dd0561fcbd8cbf63b6476de175fff022b05dedd51370b2f0c40568d5c30f259313e8b849599cee5f5eccb2039379d91e08e3f8815b7f7d2c15243606863d3a148cafc12f5455e0682c6fa477515be534fa143ad58fa689f6dac06846939b20a7792c0ad1ac1c1560e4bec4297406412586024d1e9d0cb39316e98bed135d3425dbd1dca1ce4f0ff6c2f8e89a92cfa843a7b60b5f849c9d5"}}}}}, &(0x7f0000000780)={0x0, 0x3, [0x8c8, 0x293, 0xc9c, 0x69e]}) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x4, 0x4, 0x3b0, 0xffffffff, 0x1a0, 0x1a0, 0x1a0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @remote, [], [], 'bridge_slave_1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410)

6.998695021s ago: executing program 5 (id=1691):
r0 = socket(0x10, 0x3, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={<r1=>0x0, @remote, @broadcast}, &(0x7f0000000100)=0xc)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r6=>0x0})
bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x20)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}, {&(0x7f0000002f00)={0x11c0, 0x13, 0x300, 0x70bd26, 0x25dfdbff, "", [@nested={0x195, 0xc2, 0x0, 0x1, [@typed={0xe9, 0x29, 0x0, 0x0, @binary="02b875694b6507f3d636951a0e5720f01ffece5bfe975c0fb2924bbe2703d089dffd841da847605b58e48738e05cf7aa1c8b417999856a81563e998f93a2cc93f9c3a4de0c3520b89657b456deb1aa01c4a96fe4ed2ee547b831887fbf8ff7cca80b03d86acec716c042d1ee3abcb3c43de2e9174eb546013626e22aafe150d407f60c9f00f4ab777a8c2e20bd9fce60b326f0c1838759eed0b45aa9cdb2b944432028e1ddd297f72807c2bf061a937830de8166094b6338ba3647b46ac0b567ec2fecef3455d56a4dbfedcb2b489f67d1adf830a5164e97d2bca4758d4a2a10cf3a5aa781"}, @generic="02af41848930287a4a7a5eab0fcc0a658ee8b01ce3ee745f9ca8f22a20f7b4a9e0b9057e133b1f10f93a65ded104671049e06ec4177caa12c8898033279b8b35d2eb7208715b0f8eb11003a07594685ec6c0c26f04d414", @nested={0x4, 0x142}, @nested={0x4, 0xce}, @generic="df899ff943196aebaf858acaa0ad8e68bdf8810fc5df5ec64f5f7bcc48fa9755548263265819ba98a821e7c0c9e35d8451b459561b828102f9ba9e123123", @typed={0x8, 0x8f, 0x0, 0x0, @u32=0x7}]}, @typed={0x8, 0x83, 0x0, 0x0, @fd}, @typed={0x8, 0xee, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x110, 0x0, 0x0, @u32=0x1f9f}, @generic="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"]}, 0x11c0}, {&(0x7f0000004180)={0x1b0, 0x30, 0x400, 0x70bd28, 0x25dfdbfd, "", [@generic="04064f53746c9222548a2210483ce343b63f1df5c3cae2ee94cf781e19d6debb659cdd10148c19a3702eac00baa908fcf234392773350aa46c6c31ef4a3eccc6cf7408c8621b8a80b88a4f3356e72e181957e134c1a06b833509d9f3db31634121628ed974c026127dcaba69b337d85132a382d1d047a8bae2ac5c9bb28f1aa0bd9d554abbd947de11c3037200dc3eb4ecf6c762d7f190a63d17e5ab8a291a31336aba9255246411701633b8dfb0898465253fde4458c696913c8ad0db17", @nested={0x4, 0x9d}, @nested={0x10, 0x124, 0x0, 0x1, [@typed={0x8, 0xaa, 0x0, 0x0, @str='..+\x00'}, @nested={0x4, 0xb6}]}, @nested={0x8, 0xfa, 0x0, 0x1, [@nested={0x4, 0xb3}]}, @typed={0x9, 0x1c, 0x0, 0x0, @binary="fc0f6a85ae"}, @generic="6c4a5708719a8772123687bc2b15d5a8671b0af988f1991f7e6156d1442ab8d23b499f6fe2201c9824104841acc8053bdac2edad7d68e3f6e9a750eb0a53040059acdb642fd251a31b40289ee37d77435ac6101e608646e121282cddcbde926730d07db72787826337a081a8c7936ea702e9ddc3d72a6b0719e7929d8980f9473573560cd9a2ec92dd8559de2264a92812a68b8bb6b30c14ef", @nested={0x10, 0x119, 0x0, 0x1, [@nested={0x4, 0x39}, @typed={0x8, 0x67, 0x0, 0x0, @uid}]}, @typed={0xb, 0x67, 0x0, 0x0, @str='.@\'-\'+\x00'}, @typed={0x4, 0x107}]}, 0x1b0}], 0x3}, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000540), &(0x7f0000000600)=0x80)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, 0x54583, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty}}}], 0x20}}], 0x1, 0x80)
getpeername$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r9=>0x0}, &(0x7f00000001c0)=0x14)
r10 = getuid()
getpeername$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="e80000001900000028bd7000fcdbdf250a301080fc0400000004000008000300", @ANYRES32=0x0, @ANYBLOB="660008802dedeaa5b97640f0109cd2c6d32547d5bd2d51b151983307380148458e8139d235b9b4c1ae5821c994876b0a22718faf02cac2940f422c2ee9b4c3d5c0aeff6066ffad0893efd22b68e1e88cfda238fdccf791055c1cc5ec29350871a861fff86fc400000c000900020016ff", @ANYRES32=r1, @ANYBLOB="fbe54f17000000000000e6ffffff0009000500067f", @ANYRES32=r8, @ANYBLOB="0c00168008000200ac1e010114000500fc0100000000000000000000000000000c000900ff000006", @ANYRES32=r9, @ANYBLOB="080006001000000008001900", @ANYRES32=r10, @ANYBLOB="08000400", @ANYRES32=r11, @ANYBLOB], 0xe8}, 0x1, 0x0, 0x0, 0x40040}, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="8257a7ab20103c0000001040010400"/26, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200e0000002"], 0x3c}, 0x1, 0x4801000000000000}, 0x0)
getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000340)={0x0, @dev, @local}, &(0x7f0000000500)=0xc)

6.905713473s ago: executing program 5 (id=1692):
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@ifindex, 0xf, 0x33a445965dc84ca9, 0xa, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], <r1=>0x0}, 0x40)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup=r2, r0, 0x20, 0x4, 0x0, @void, @value=r3, @void, @void, r1}, 0x20)
r4 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000240)={r0, 0x0, 0x1000000, 0x1000000})
ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000000280)={0xb4d, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f00000112c0)={&(0x7f0000011200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000011280)={&(0x7f0000011240)={0x3c, 0xf, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}]}, 0x3c}}, 0x20000080)
chdir(&(0x7f0000011300)='./file0\x00')
getsockname(r2, &(0x7f0000011340)=@sco, &(0x7f00000113c0)=0x80)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000011400), 0x100, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000011440)={0x2, 0xf683, 0x7, 0x80880, <r6=>0xffffffffffffffff})
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockname(r0, &(0x7f0000011480)=@nfc, &(0x7f0000011500)=0x80)
r7 = socket$unix(0x1, 0x3, 0x0)
recvmsg$unix(r7, &(0x7f0000011b40)={&(0x7f0000011540), 0x6e, &(0x7f0000011a40)=[{&(0x7f00000115c0)=""/207, 0xcf}, {&(0x7f00000116c0)=""/194, 0xc2}, {&(0x7f00000117c0)=""/93, 0x5d}, {&(0x7f0000011840)=""/210, 0xd2}, {&(0x7f0000011940)=""/135, 0x87}, {&(0x7f0000011a00)=""/59, 0x3b}], 0x6, &(0x7f0000011ac0)=[@cred={{0x1c, 0x1, 0x2, {<r8=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {<r9=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x12000)
r10 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendto$inet6(r10, &(0x7f0000011b80)="bdb03ba84f41d9c2cb7c05dec22cf6d60a31bf563b04c86b2fda291549f3e608e50248cf993a98ae2450ad283fc92656b9ff86caf9dabc661a3d03eadcb0b6c3bc54d6f1a7b0b536832954110cf00b61b78bd28634f04eccb7f972d50c1e998f7a49abdc0e51241dbb03c09cdcc85458b6f5e4", 0x73, 0x20000041, &(0x7f0000011c00)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c)
mount$9p_fd(0x0, &(0x7f0000011c40)='./file0\x00', &(0x7f0000011c80), 0x804, &(0x7f0000011cc0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}, {@cache_mmap}, {@access_user}, {@version_9p2000}, {@version_9p2000}, {@nodevmap}, {@debug={'debug', 0x3d, 0xfd}}], [{@obj_type={'obj_type', 0x3d, '/selinux/commit_pending_bools\x00'}}]}})
ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000011dc0)={'wg1\x00', 0xfffffffffffffff9, 0x8fe})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000130c0)={0x4, 0x0, [{0x4000, 0x3f, &(0x7f0000011ec0)=""/63}, {0x1, 0xcc, &(0x7f0000011f00)=""/204}, {0x10000, 0xb0, &(0x7f0000012000)=""/176}, {0x100000, 0x1000, &(0x7f00000120c0)=""/4096}]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000131c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000013180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000013300)={&(0x7f0000013200)=[<r12=>0x0], &(0x7f0000013240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000013280)=[0x0, 0x0], &(0x7f00000132c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x2, 0x7})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000013340)={r11, r12, 0x1, 0x5, 0x5})
r13 = syz_open_dev$mouse(&(0x7f0000013380), 0x134, 0x80000)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r13, 0xc01064b5, &(0x7f0000013400)={&(0x7f00000133c0)=[0x0], 0x1})
ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f00000158c0)={0x7, &(0x7f0000013440)=""/4096, &(0x7f0000015800)=[{0x200, 0x62, 0x2, &(0x7f0000014440)=""/98}, {0x2, 0xc9, 0x5, &(0x7f00000144c0)=""/201}, {0x1, 0x63, 0x0, &(0x7f00000145c0)=""/99}, {0x3, 0xbf, 0x0, &(0x7f0000014640)=""/191}, {0x7, 0x2e, 0x1, &(0x7f0000014700)=""/46}, {0x3, 0x1000, 0x9, &(0x7f0000014740)=""/4096}, {0x0, 0x94, 0x7fff, &(0x7f0000015740)=""/148}]})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = syz_open_procfs(r9, &(0x7f0000015940)='cpuset\x00')
sendmsg$nl_route(r14, &(0x7f0000015a40)={&(0x7f0000015900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000015a00)={&(0x7f0000015980)=@RTM_NEWNSID={0x54, 0x58, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, r8}, @NETNSA_FD={0x8, 0x3, r2}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r15}, @NETNSA_FD={0x8, 0x3, r3}, @NETNSA_FD={0x8, 0x3, r0}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040861}, 0x0)

6.841391309s ago: executing program 4 (id=1693):
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, <r0=>0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x4809)
syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r4, &(0x7f0000000100)="632895db72d4ca5cbc9b17cb1c12b49a00fa28648d64bf1e4fecac95f86c54d51faefa5645c718f27f4f148fe17676bb3f54c270f3c270a59808caa1d3378395c59048a4854bce737215bcc244693107a3", 0x51)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
tkill(r0, 0x2b)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x98, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0x0, 0x0, 'ip6gre0\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x64}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'wlan1\x00'}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308)

5.965048494s ago: executing program 5 (id=1694):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmsg$nl_netfilter(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[], 0xffffff70}, 0x1, 0x0, 0x0, 0x200050c0}, 0x4000000)
recvmmsg(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f00000000c0)=""/178, 0xb2}], 0x2}, 0x17ba}, {{&(0x7f0000000180)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/225, 0xe1}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000200)=""/42, 0x2a}, {&(0x7f00000005c0)=""/131, 0x83}], 0x4, &(0x7f0000000500)=""/54, 0x36}, 0x7f}, {{&(0x7f0000000700)=@nl=@proc, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/20, 0x14}, {&(0x7f0000000680)=""/48, 0x30}, {&(0x7f0000000780)=""/159, 0x9f}, {&(0x7f0000001f40)=""/147, 0x93}, {&(0x7f0000000900)=""/175, 0xaf}], 0x5, &(0x7f0000000a40)=""/165, 0xa5}, 0x7}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000b00)=""/94, 0x5e}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/223, 0xdf}, {&(0x7f0000001c80)=""/24, 0x18}, {&(0x7f0000001cc0)=""/90, 0x5a}, {&(0x7f0000001d40)=""/51, 0x33}], 0x6, &(0x7f0000001e00)=""/43, 0x2b}, 0x7}], 0x4, 0x20, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000209010100000000000000000700000740cd5a50bc062f0be6f84ab7db7b5fb95d1ccb3605bf6b526c27c03885406b2df227ce16be383f26a929032ebd1f6e83f37bfbeb1e5211a94b70f08b0ad5903fbd7a23558f350c2e945ad3e0fad7b9a8a32a51948f6a0cfa7641787988f4c290a43ddd0ef745e5d817a4a7ac930b21e9f1ce9472245698552f0744769eb14b"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40040)

5.964731164s ago: executing program 5 (id=1695):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x402)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000040), 0x4)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = dup(r3)
ioctl$KVM_GET_XCRS(r4, 0x8188aea6, &(0x7f0000000240)={0x0, 0xe9d})

4.114277102s ago: executing program 3 (id=1701):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xe, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000040)=0x5, 0x4)

4.06237041s ago: executing program 3 (id=1702):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r0=>0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1, r2+60000000}}, 0x0)
clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) (async)
clock_gettime(0x0, &(0x7f0000000000)) (async)
timer_settime(r0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1, r2+60000000}}, 0x0) (async)
clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) (async)

3.901913129s ago: executing program 3 (id=1703):
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00')
preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x80, 0x0)
r1 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000080), 0x2a00c3, 0x0)
mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x7a)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={<r3=>0x0, 0xf, 0x6, 0xfffffff9, 0xfffffc01, 0x5626dc36}, &(0x7f0000000300)=0x14)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r3, 0x1, 0x10}, 0xc)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(r4)
setgroups(0x0, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2f}, 0x4e20, 0x3, 'sh\x00', 0x1, 0x4, 0x200072}, 0x2c)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x5, 0x0}, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010002, 0x4e23, 0x2000000, 0x0, 0x12d5f, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0)
r7 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r8)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, <r10=>0x0}, &(0x7f0000000280)=0x5)
setuid(r10)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x408, 0x103)

2.992861591s ago: executing program 3 (id=1704):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002180)=ANY=[@ANYBLOB="8400000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128008000100677470004400028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000300", @ANYRES32], 0x84}, 0x1, 0x0, 0x0, 0xc081}, 0x0)

2.992248226s ago: executing program 3 (id=1705):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000040))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)

1.423260024s ago: executing program 2 (id=1493):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000140)='grpquota')
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=<r0=>0x0)
r1 = getpgid(0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38)
ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x4000000000003)
sendfile(r3, r4, &(0x7f0000000100)=0x6, 0x100000000010001)
close_range(r2, 0xffffffffffffffff, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a)
r6 = accept4(r5, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
write(r6, &(0x7f0000000580)='$', 0x1)
setpgid(r0, r1)

363.198951ms ago: executing program 3 (id=1706):
syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, 0x0)
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004740)=@newtaction={0x14, 0x30, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c804}, 0x4091) (async)
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/109, 0x6d}, {&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000140)=""/137, 0x89}, {&(0x7f0000000200)=""/249, 0xf9}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000380)=""/50, 0x32}], 0x6, 0x6, 0x80000000) (async)
close(r0)

266.643927ms ago: executing program 5 (id=1707):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500090000000000050020000100000005"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

0s ago: executing program 5 (id=1708):
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$key(0xf, 0x3, 0x2)
syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000001240)=ANY=[@ANYBLOB="12010000020000102505a1a44000010203010902"], 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00')
userfaultfd(0x801)
syz_open_dev$sndctrl(&(0x7f0000000240), 0x0, 0x2a8600)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x88602, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000380), 0x2, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x40000012})
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
fsetxattr$security_evm(r0, &(0x7f00000001c0), &(0x7f0000000280)=@ng={0x4, 0xd, "e229f13cf3b33b8dec102053f99d91f83ad9"}, 0x14, 0x2)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x201, 0x1, &(0x7f0000000540)=[r2], &(0x7f0000000500)=[0x1], &(0x7f0000000200), &(0x7f0000000580), 0x0, 0x7f})

kernel console output (not intermixed with test programs):

][T10180]  ? xskq_create+0xfb/0x1d0
[  120.598458][T10180]  xskq_create+0xfb/0x1d0
[  120.598469][T10180]  xsk_setsockopt+0x684/0x840
[  120.598478][T10180]  ? __pfx_xsk_setsockopt+0x10/0x10
[  120.598490][T10180]  ? selinux_socket_setsockopt+0x6a/0x80
[  120.598507][T10180]  ? __pfx_xsk_setsockopt+0x10/0x10
[  120.598516][T10180]  do_sock_setsockopt+0x221/0x470
[  120.598531][T10180]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  120.598550][T10180]  __sys_setsockopt+0x1a0/0x230
[  120.598563][T10180]  __x64_sys_setsockopt+0xbd/0x160
[  120.598573][T10180]  ? do_syscall_64+0x91/0x260
[  120.598588][T10180]  ? lockdep_hardirqs_on+0x7c/0x110
[  120.598607][T10180]  do_syscall_64+0xcd/0x260
[  120.598622][T10180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.598633][T10180] RIP: 0033:0x7f577f18d169
[  120.598641][T10180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.598652][T10180] RSP: 002b:00007f5780080038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  120.598662][T10180] RAX: ffffffffffffffda RBX: 00007f577f3a6080 RCX: 00007f577f18d169
[  120.598668][T10180] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000007
[  120.598675][T10180] RBP: 00007f577f20e2a0 R08: 0000000000000004 R09: 0000000000000000
[  120.598681][T10180] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  120.598686][T10180] R13: 0000000000000000 R14: 00007f577f3a6080 R15: 00007fff09df3128
[  120.598697][T10180]  </TASK>
[  120.598701][T10180] Mem-Info:
[  120.689719][T10180] active_anon:29932 inactive_anon:0 isolated_anon:15
[  120.689719][T10180]  active_file:6689 inactive_file:48728 isolated_file:0
[  120.689719][T10180]  unevictable:1777 dirty:63 writeback:0
[  120.689719][T10180]  slab_reclaimable:11864 slab_unreclaimable:80429
[  120.689719][T10180]  mapped:26383 shmem:25521 pagetables:919
[  120.689719][T10180]  sec_pagetables:304 bounce:0
[  120.689719][T10180]  kernel_misc_reclaimable:0
[  120.689719][T10180]  free:413503 free_pcp:11092 free_cma:0
[  120.703901][T10180] Node 0 active_anon:119728kB inactive_anon:0kB active_file:26724kB inactive_file:194840kB unevictable:3540kB isolated(anon):60kB isolated(file):0kB mapped:105524kB dirty:252kB writeback:0kB shmem:98548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12496kB pagetables:3676kB sec_pagetables:1216kB all_unreclaimable? no
[  120.713756][T10180] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:72kB unevictable:3568kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  120.722177][T10180] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  120.731745][T10180] lowmem_reserve[]: 0 1239 1239 1239 1239
[  120.734074][T10180] Node 0 DMA32 free:87748kB boost:2048kB min:29624kB low:36516kB high:43408kB reserved_highatomic:0KB active_anon:119852kB inactive_anon:0kB active_file:26724kB inactive_file:194840kB unevictable:3540kB writepending:252kB present:2080628kB managed:1268936kB mlocked:68kB bounce:0kB free_pcp:12200kB local_pcp:400kB free_cma:0kB
[  120.745494][T10180] lowmem_reserve[]: 0 0 0 0 0
[  120.747287][T10180] Node 1 Normal free:1556132kB boost:0kB min:39660kB low:49572kB high:59484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:72kB unevictable:3568kB writepending:0kB present:2097152kB managed:1781964kB mlocked:32kB bounce:0kB free_pcp:27504kB local_pcp:0kB free_cma:0kB
[  120.757815][T10180] lowmem_reserve[]: 0 0 0 0 0
[  120.759535][T10180] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  120.764020][T10180] Node 0 DMA32: 17*4kB (UME) 39*8kB (UME) 21*16kB (UME) 60*32kB (UME) 13*64kB (UE) 25*128kB (UME) 68*256kB (ME) 27*512kB (UM) 22*1024kB (UME) 9*2048kB (M) 2*4096kB (M) = 87052kB
[  120.771289][T10180] Node 1 Normal: 26*4kB (UE) 17*8kB (UME) 35*16kB (UE) 142*32kB (UE) 58*64kB (UME) 12*128kB (UME) 1*256kB (U) 6*512kB (UME) 2*1024kB (ME) 0*2048kB 376*4096kB (UM) = 1556064kB
[  120.777699][T10180] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  120.781155][T10180] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  120.786363][T10194] xt_nfacct: accounting object `syz0' does not exists
[  120.790091][T10194] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  120.793059][T10180] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  120.795725][T10180] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  120.798281][T10180] 80876 total pagecache pages
[  120.799587][T10180] 0 pages in swap cache
[  120.800719][T10180] Free swap  = 124536kB
[  120.801867][T10180] Total swap = 124996kB
[  120.803039][T10180] 1048443 pages RAM
[  120.804296][T10180] 0 pages HighMem/MovableOnly
[  120.805629][T10180] 281878 pages reserved
[  120.806801][T10180] 0 pages cma reserved
[  120.903594][T10206] sctp: [Deprecated]: syz.1.1251 (pid 10206) Use of int in max_burst socket option deprecated.
[  120.903594][T10206] Use struct sctp_assoc_value instead
[  121.136628][   T40] audit: type=1400 audit(1743241734.215:756): avc:  denied  { ioctl } for  pid=10227 comm="syz.2.1259" path="socket:[34870]" dev="sockfs" ino=34870 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  121.166336][   T40] audit: type=1400 audit(1743241734.243:757): avc:  denied  { mounton } for  pid=10219 comm="syz.4.1255" path="/220/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  121.306677][   T40] audit: type=1400 audit(1743241734.374:758): avc:  denied  { ioctl } for  pid=10238 comm="syz.1.1261" path="socket:[34346]" dev="sockfs" ino=34346 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  121.315537][   T40] audit: type=1400 audit(1743241734.383:759): avc:  denied  { listen } for  pid=10238 comm="syz.1.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  121.322429][   T40] audit: type=1400 audit(1743241734.393:760): avc:  denied  { map } for  pid=10238 comm="syz.1.1261" path="socket:[34346]" dev="sockfs" ino=34346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  121.329133][   T40] audit: type=1400 audit(1743241734.393:761): avc:  denied  { read } for  pid=10238 comm="syz.1.1261" path="socket:[34346]" dev="sockfs" ino=34346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  121.464963][T10243] fuse: Bad value for 'fd'
[  122.111446][T10254] QAT: failed to copy from user cfg_data.
[  122.116277][T10254] QAT: Invalid ioctl -2110754303
[  122.328682][   T40] audit: type=1400 audit(1743241735.337:762): avc:  denied  { setopt } for  pid=10261 comm="syz.3.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  122.445289][T10281] __nla_validate_parse: 5 callbacks suppressed
[  122.445300][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1272'.
[  122.449453][T10281] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.1272'.
[  122.617127][ T7987] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  122.655104][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1279'.
[  122.657717][T10303] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1279'.
[  122.761412][T10309] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1278'.
[  122.792530][ T7987] usb 9-1: Using ep0 maxpacket: 8
[  122.795054][ T7987] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  122.800269][ T7987] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  122.803476][ T7987] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  122.806675][ T7987] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  122.810587][ T7987] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  122.813082][ T7987] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.887108][T10316] 8021q: adding VLAN 0 to HW filter on device bond3
[  123.003055][T10320] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1283'.
[  123.017709][T10320] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1283'.
[  123.020261][T10320] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1283'.
[  123.022850][T10320] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1283'.
[  123.031567][ T7987] usb 9-1: usb_control_msg returned -32
[  123.033167][ T7987] usbtmc 9-1:16.0: can't read capabilities
[  123.053015][ T5983] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  123.224021][ T5983] usb 8-1: Using ep0 maxpacket: 8
[  123.226809][ T5983] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  123.228916][ T5983] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  123.231947][ T5983] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  123.235772][ T5983] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  123.239570][ T5983] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  123.243463][ T5983] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  123.245960][ T5983] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  123.249057][ T5983] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  123.252230][ T5983] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  123.255257][ T5983] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  123.259540][ T5983] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  123.262955][ T5983] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  123.266326][ T5983] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  123.269824][ T5983] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  123.273693][ T5983] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  123.279242][ T5983] usb 8-1: string descriptor 0 read error: -22
[  123.281043][ T5983] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  123.284236][ T5983] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.290204][ T5983] adutux 8-1:168.0: ADU100  now attached to /dev/usb/adutux1
[  123.483726][T10336] tmpfs: Bad value for 'mpol'
[  123.486337][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'.
[  123.505616][ T7987] usb 8-1: USB disconnect, device number 17
[  123.720473][T10311] nr3: entered promiscuous mode
[  123.797429][ T7987] usb 9-1: USB disconnect, device number 5
[  124.367837][ T7987] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  124.542551][ T7987] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  124.545152][ T7987] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.547402][ T7987] usb 7-1: Product: syz
[  124.548673][ T7987] usb 7-1: Manufacturer: syz
[  124.552524][ T7987] usb 7-1: SerialNumber: syz
[  124.561829][ T7987] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  124.573110][ T7987] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  125.030923][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[  125.044417][T10416] veth0_to_batadv: left promiscuous mode
[  125.046750][T10416] bridge0: port 1(vlan2) entered disabled state
[  125.126877][    C1] net_ratelimit: 110772 callbacks suppressed
[  125.126888][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  125.126963][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  125.128709][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  125.132012][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  125.135251][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  125.138456][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  125.141697][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  125.145023][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  125.148364][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  125.151586][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  125.704961][ T7987] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  125.707085][ T7987] ath9k_htc: Failed to initialize the device
[  125.727896][ T7987] usb 7-1: ath9k_htc: USB layer deinitialized
[  125.886843][   T40] audit: type=1400 audit(1743241738.667:763): avc:  denied  { getopt } for  pid=10443 comm="syz.1.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  125.968379][T10449] pim6reg1: entered promiscuous mode
[  125.970025][T10449] pim6reg1: entered allmulticast mode
[  125.997509][T10453] netlink: 'syz.4.1319': attribute type 3 has an invalid length.
[  126.073220][   T40] audit: type=1400 audit(1743241738.836:764): avc:  denied  { mounton } for  pid=10454 comm="syz.1.1320" path="/file0" dev="ramfs" ino=37298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  126.073232][T10455] overlay: ./file0 is not a directory
[  126.176354][T10466] dummy0: entered promiscuous mode
[  126.187906][T10465] ALSA: mixer_oss: invalid OSS volume '˘'
[  126.508616][ T5983] usb 6-1: new low-speed USB device number 12 using dummy_hcd
[  126.644983][ T5983] usb 6-1: device descriptor read/64, error -71
[  126.914167][ T5983] usb 6-1: new low-speed USB device number 13 using dummy_hcd
[  126.958972][T10502] program syz.3.1333 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  126.959377][T10503] program syz.3.1333 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  126.998134][ T1109] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
[  127.000343][ T1109] ata1.00: irq_stat 0x40000000
[  127.001813][ T1109] ata1.00: failed command: ZAC MANAGEMENT OUT
[  127.003552][ T1109] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 4
[  127.003552][ T1109]          res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error)
[  127.008074][ T1109] ata1.00: status: { DRDY ERR }
[  127.011187][ T1109] ata1.00: error: { ABRT }
[  127.012503][ T1109] ata1.00: device reported invalid CHS sector 0
[  127.051272][ T5983] usb 6-1: device descriptor read/64, error -71
[  127.062220][ T1109] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
[  127.065141][ T1109] ata1.00: irq_stat 0x40000000
[  127.066999][ T1109] ata1.00: failed command: ZAC MANAGEMENT OUT
[  127.069262][ T1109] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 5
[  127.069262][ T1109]          res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error)
[  127.077627][ T1109] ata1.00: status: { DRDY ERR }
[  127.079520][ T1109] ata1.00: error: { ABRT }
[  127.081273][ T1109] ata1.00: device reported invalid CHS sector 0
[  127.169483][ T5983] usb usb6-port1: attempt power cycle
[  127.264785][   T59] usb 7-1: USB disconnect, device number 16
[  127.293478][   T40] audit: type=1400 audit(1743241739.977:765): avc:  denied  { setopt } for  pid=10514 comm="syz.2.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  127.421872][   T40] audit: type=1400 audit(1743241740.099:766): avc:  denied  { getopt } for  pid=10524 comm="syz.2.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  127.527799][   T40] audit: type=1400 audit(1743241740.192:767): avc:  denied  { connect } for  pid=10526 comm="syz.2.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  127.542945][ T5983] usb 6-1: new low-speed USB device number 14 using dummy_hcd
[  127.546707][ T1474] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  127.566227][ T5983] usb 6-1: device descriptor read/8, error -71
[  127.716414][ T1474] usb 9-1: Using ep0 maxpacket: 8
[  127.722121][ T1474] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  127.725934][ T1474] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  127.729599][ T1474] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  127.733467][ T1474] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  127.740967][ T1474] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  127.744511][ T1474] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.820893][T10530] __nla_validate_parse: 8 callbacks suppressed
[  127.820909][T10530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1342'.
[  127.821150][ T5983] usb 6-1: new low-speed USB device number 15 using dummy_hcd
[  127.857780][ T5983] usb 6-1: device descriptor read/8, error -71
[  127.967636][ T1474] usb 9-1: GET_CAPABILITIES returned 0
[  127.969641][ T1474] usbtmc 9-1:16.0: can't read capabilities
[  127.972356][ T5983] usb usb6-port1: unable to enumerate USB device
[  128.161171][T10541] netlink: 364 bytes leftover after parsing attributes in process `syz.3.1347'.
[  128.164925][T10541] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1347'.
[  128.246372][T10550] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  128.354680][   T58] usb 9-1: USB disconnect, device number 6
[  128.411471][T10561] ALSA: seq fatal error: cannot create timer (-22)
[  129.874177][ T1109] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[  129.876548][ T1109] ata1: failed to read log page 10h (errno=-5)
[  129.878775][ T1109] ata1.00: exception Emask 0x1 SAct 0x40 SErr 0x0 action 0x0
[  129.881409][ T1109] ata1.00: irq_stat 0x40000000
[  129.883160][ T1109] ata1.00: failed command: WRITE FPDMA QUEUED
[  129.885536][ T1109] ata1.00: cmd 61/08:30:3a:01:00/00:00:00:00:00/40 tag 6 ncq dma 4096 out
[  129.885536][ T1109]          res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[  129.891522][ T1109] ata1.00: status: { DRDY }
[  129.898845][ T1109] ata1.00: configured for UDMA/100
[  129.901177][ T1109] ata1: EH complete
[  130.482854][    C1] net_ratelimit: 106903 callbacks suppressed
[  130.482867][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  130.482955][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  130.484439][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  130.487635][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  130.490483][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  130.493861][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  130.496626][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  130.500934][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  130.503532][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  130.507616][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  134.385088][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  135.838793][    C0] net_ratelimit: 114597 callbacks suppressed
[  135.838806][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  135.838840][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  135.840628][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  135.843596][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  135.846827][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  135.849796][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  135.853015][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  135.855955][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  135.859204][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  135.862195][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  138.661081][    C0] sched: DL replenish lagged too much
[  141.194797][    C0] net_ratelimit: 119061 callbacks suppressed
[  141.194809][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  141.194872][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.196660][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  141.199597][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.202805][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  141.205722][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.208872][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  141.211826][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.215052][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  141.218071][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  143.285601][T10579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1361'.
[  143.312347][   T40] audit: type=1400 audit(1743241754.953:768): avc:  denied  { accept } for  pid=10581 comm="syz.2.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  143.315786][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'.
[  143.372778][   T40] audit: type=1400 audit(1743241755.018:769): avc:  denied  { accept } for  pid=10581 comm="syz.2.1362" lport=130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  143.520749][T10582] hsr_slave_1 (unregistering): left promiscuous mode
[  143.529360][T10587] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  144.185419][   T40] audit: type=1400 audit(1743241755.776:770): avc:  denied  { getopt } for  pid=10614 comm="syz.3.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  144.227300][   T40] audit: type=1400 audit(1743241755.813:771): avc:  denied  { accept } for  pid=10618 comm="syz.3.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  146.550755][    C0] net_ratelimit: 119639 callbacks suppressed
[  146.550768][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  146.550808][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.552619][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  146.555558][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.558736][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  146.561704][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.564938][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  146.567851][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.571027][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  146.574047][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.906806][    C1] net_ratelimit: 122488 callbacks suppressed
[  151.906819][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.906837][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  151.908491][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.911787][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  151.914739][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.918004][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  151.920907][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.924196][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  151.927104][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.930240][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  152.163696][  T834] page_pool_release_retry() stalled pool shutdown: id 29, 1 inflight 60 sec
[  156.219715][T10629] SELinux: syz.4.1377 (10629) set checkreqprot to 1. This is no longer supported.
[  156.254638][T10646] netlink: 'syz.4.1381': attribute type 2 has an invalid length.
[  156.257013][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1381'.
[  156.282746][T10650] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1382'.
[  156.337169][T10654] input: syz0 as /devices/virtual/input/input21
[  156.402123][T10667] fuse: Unknown parameter 'gr_id'
[  156.406897][   T58] Process accounting resumed
[  156.472909][T10669] program syz.2.1387 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  156.533456][   T40] audit: type=1400 audit(1743241767.328:772): avc:  denied  { ioctl } for  pid=10674 comm="syz.3.1392" path="socket:[37751]" dev="sockfs" ino=37751 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  156.569509][T10681] program syz.3.1393 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  156.572214][T10681] ata1.00: invalid transfer count 0
[  157.174157][ T5955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  157.183838][ T5955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  157.187232][ T5955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  157.193849][ T5955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  157.196191][ T5955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  157.262812][    C0] net_ratelimit: 118506 callbacks suppressed
[  157.262824][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  157.262877][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.264600][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  157.267471][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.270521][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  157.273364][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.276565][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  157.279393][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.279926][T10719] chnl_net:caif_netlink_parms(): no params data found
[  157.282459][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  157.285348][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.340961][   T40] audit: type=1400 audit(1743241768.086:773): avc:  denied  { create } for  pid=10736 comm="syz.2.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  157.374129][T10719] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.376195][T10719] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.378210][T10719] bridge_slave_0: entered allmulticast mode
[  157.380477][T10719] bridge_slave_0: entered promiscuous mode
[  157.384409][T10719] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.386417][T10719] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.388376][T10719] bridge_slave_1: entered allmulticast mode
[  157.390550][T10719] bridge_slave_1: entered promiscuous mode
[  157.427160][T10719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.430863][T10719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.472733][T10751] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1413'.
[  157.476274][T10751] netlink: 'syz.4.1413': attribute type 1 has an invalid length.
[  157.497788][T10719] team0: Port device team_slave_0 added
[  157.501145][T10719] team0: Port device team_slave_1 added
[  157.568438][T10719] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.570961][T10719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.581738][T10719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.586952][T10719] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.589447][T10719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.599129][T10719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.643984][T10719] hsr_slave_0: entered promiscuous mode
[  157.645901][T10719] hsr_slave_1: entered promiscuous mode
[  157.650404][T10719] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  157.652536][T10719] Cannot create hsr debugfs directory
[  157.757821][T10719] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  157.768797][T10719] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  157.773530][T10719] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  157.778727][T10719] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  157.817357][T10719] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.848628][T10719] 8021q: adding VLAN 0 to HW filter on device team0
[  157.865641][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.867942][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.880123][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.882515][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.972349][T10719] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.081324][T10719] veth0_vlan: entered promiscuous mode
[  158.086892][T10719] veth1_vlan: entered promiscuous mode
[  158.096565][T10719] veth0_macvtap: entered promiscuous mode
[  158.108994][T10719] veth1_macvtap: entered promiscuous mode
[  158.115402][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.118931][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.121666][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.124559][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.128044][T10719] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.130405][   T40] audit: type=1326 audit(1743241768.815:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10769 comm="syz.4.1415" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934338d169 code=0x7ffc0000
[  158.137145][   T40] audit: type=1326 audit(1743241768.825:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10769 comm="syz.4.1415" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934338d169 code=0x7ffc0000
[  158.147147][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.150739][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.153778][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.156638][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.159853][   T40] audit: type=1326 audit(1743241768.825:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10769 comm="syz.4.1415" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f934338d169 code=0x7ffc0000
[  158.160379][T10719] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.166145][   T40] audit: type=1326 audit(1743241768.825:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10771 comm="syz.4.1415" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f93433bfa25 code=0x7ffc0000
[  158.175005][   T40] audit: type=1326 audit(1743241768.825:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10769 comm="syz.4.1415" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934338d169 code=0x7ffc0000
[  158.179008][T10719] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.182072][   T40] audit: type=1326 audit(1743241768.834:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10769 comm="syz.4.1415" exe="/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f934338d169 code=0x7ffc0000
[  158.187115][T10719] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.200503][T10719] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.203284][T10719] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.248706][ T1229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.251006][ T1229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.261802][ T1229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.264024][ T1229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.298133][   T40] audit: type=1326 audit(1743241768.974:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10771 comm="syz.4.1415" exe="/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f934338d169 code=0x7ffc0000
[  158.310290][   T40] audit: type=1326 audit(1743241768.984:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10769 comm="syz.4.1415" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934338d169 code=0x7ffc0000
[  158.365833][T10775] Cannot find add_set index 4 as target
[  158.481385][T10786] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1416'.
[  158.484269][T10786] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1416'.
[  158.486742][T10786] netlink: 'syz.2.1416': attribute type 6 has an invalid length.
[  158.489027][T10786] netlink: 'syz.2.1416': attribute type 5 has an invalid length.
[  158.491172][T10786] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1416'.
[  158.663255][ T7987] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  158.827346][ T7987] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  158.830603][ T7987] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  158.835437][ T7987] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[  158.838020][ T7987] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.841133][ T7987] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.846995][ T7987] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  158.849520][ T7987] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  158.851789][ T7987] usb 10-1: Product: syz
[  158.852977][ T7987] usb 10-1: Manufacturer: syz
[  158.856096][ T7987] cdc_wdm 10-1:1.0: skipping garbage
[  158.857688][ T7987] cdc_wdm 10-1:1.0: skipping garbage
[  158.861010][ T7987] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  158.862712][ T7987] cdc_wdm 10-1:1.0: Unknown control protocol
[  158.973647][ T5963] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  159.077649][T10784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.080257][T10784] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.083108][ T1474] usb 10-1: USB disconnect, device number 2
[  159.401016][ T5963] Bluetooth: hci1: command tx timeout
[  159.712123][T10796] overlay: filesystem on ./bus not supported as upperdir
[  160.711645][T10804] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  161.415865][T10834] 9pnet_fd: Insufficient options for proto=fd
[  161.595327][T10846] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  161.626024][ T5963] Bluetooth: hci1: command tx timeout
[  161.678652][ T7987] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  161.843003][ T7987] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  161.845849][ T7987] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  161.859834][ T7987] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  161.863161][ T7987] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.897595][T10834] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  161.905967][ T7987] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  162.128170][   T40] kauditd_printk_skb: 6 callbacks suppressed
[  162.128186][   T40] audit: type=1400 audit(1743241772.557:788): avc:  denied  { read append } for  pid=10828 comm="syz.4.1429" name="midi3" dev="devtmpfs" ino=2905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  162.143163][ T5983] usb 9-1: USB disconnect, device number 7
[  162.162326][   T40] audit: type=1400 audit(1743241772.557:789): avc:  denied  { open } for  pid=10828 comm="syz.4.1429" path="/dev/midi3" dev="devtmpfs" ino=2905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  162.168621][   T40] audit: type=1400 audit(1743241772.576:790): avc:  denied  { read write } for  pid=5951 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  162.181428][   T40] audit: type=1400 audit(1743241772.576:791): avc:  denied  { open } for  pid=5951 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  162.188314][   T40] audit: type=1400 audit(1743241772.576:792): avc:  denied  { ioctl } for  pid=5951 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  162.195229][   T40] audit: type=1400 audit(1743241772.576:793): avc:  denied  { append } for  pid=5341 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  162.201388][   T40] audit: type=1400 audit(1743241772.613:794): avc:  denied  { unmount } for  pid=10719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  162.354550][   T40] audit: type=1400 audit(1743241772.772:795): avc:  denied  { create } for  pid=10828 comm="syz.4.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  162.448493][   T40] audit: type=1400 audit(1743241772.866:796): avc:  denied  { mounton } for  pid=10872 comm="syz.3.1443" path="/401/file0" dev="tmpfs" ino=2229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  162.458237][   T40] audit: type=1400 audit(1743241772.866:797): avc:  denied  { mount } for  pid=10872 comm="syz.3.1443" name="/" dev="9p" ino=36831364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  162.503842][T10873] 9pnet_virtio: no channels available for device syz
[  162.618738][    C1] net_ratelimit: 107858 callbacks suppressed
[  162.618750][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  162.618787][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  162.620359][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  162.623538][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  162.626281][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  162.629336][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  162.632163][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  162.635252][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  162.638069][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  162.641239][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  162.800598][T10881] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 25
[  162.964082][T10885] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1445'.
[  162.981822][T10883] process '/newroot/382/file0' started with executable stack
[  162.999852][T10888] overlayfs: failed to resolve './file0': -2
[  163.009373][T10888] overlayfs: failed to resolve './file0': -2
[  163.052554][T10891] uprobe: syz.2.1447:10891 failed to unregister, leaking uprobe
[  163.544290][T10915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  163.853037][ T5963] Bluetooth: hci1: command tx timeout
[  164.233144][ T1474] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  164.404125][ T1474] usb 8-1: Using ep0 maxpacket: 32
[  164.407228][ T1474] usb 8-1: config 0 has an invalid interface number: 67 but max is 0
[  164.410120][ T1474] usb 8-1: config 0 has no interface number 0
[  164.413936][ T1474] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  164.417129][ T1474] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.419871][ T1474] usb 8-1: Product: syz
[  164.421339][ T1474] usb 8-1: Manufacturer: syz
[  164.422600][ T1474] usb 8-1: SerialNumber: syz
[  164.425176][ T1474] usb 8-1: config 0 descriptor??
[  164.428162][ T1474] smsc95xx v2.0.0
[  164.429390][ T1474] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  164.432026][ T1474] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -22
[  164.435396][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'.
[  164.439063][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'.
[  164.442283][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'.
[  164.445464][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'.
[  164.457940][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'.
[  164.461152][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'.
[  164.464366][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'.
[  164.467608][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'.
[  164.474403][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'.
[  164.519194][T10952] input: syz1 as /devices/virtual/input/input22
[  164.576661][T10956] IPv6: Can't replace route, no match found
[  164.585418][T10956] netlink: 'syz.2.1469': attribute type 5 has an invalid length.
[  164.665936][T10935] Invalid source name
[  164.667115][T10935] UBIFS error (pid: 10935): cannot open "/dev/sg0", error -22
[  164.696045][T10960] dlm: no locking on control device
[  164.740788][ T5996] usb 8-1: USB disconnect, device number 18
[  164.959141][T10979] ip6gretap0: entered promiscuous mode
[  165.150246][T10992] tmpfs: Bad value for 'mpol'
[  165.157237][T10993] tmpfs: Bad value for 'mpol'
[  165.682596][T11009] macvlan1: entered promiscuous mode
[  165.684381][T11009] macvlan1: entered allmulticast mode
[  165.975733][ T1474] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  166.072046][ T5963] Bluetooth: hci1: command tx timeout
[  166.138499][ T1474] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  166.141719][ T1474] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  166.145382][ T1474] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[  166.148769][ T1474] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  166.152614][ T1474] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  166.157858][ T1474] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  166.161071][ T1474] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  166.163824][ T1474] usb 8-1: Product: syz
[  166.165295][ T1474] usb 8-1: Manufacturer: syz
[  166.171524][ T1474] cdc_wdm 8-1:1.0: skipping garbage
[  166.173490][ T1474] cdc_wdm 8-1:1.0: skipping garbage
[  166.175918][ T1474] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[  166.178096][ T1474] cdc_wdm 8-1:1.0: Unknown control protocol
[  166.201740][T11011] 9pnet_virtio: no channels available for device 127.0.0.1
[  166.388981][ T1474] usb 8-1: USB disconnect, device number 19
[  166.750651][ T5955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  166.754891][ T5955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  166.759730][ T5955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  166.763067][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  166.765895][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  166.792377][T11036] sp0: Synchronizing with TNC
[  166.802467][T11035] [U] č
[  166.881948][T11033] chnl_net:caif_netlink_parms(): no params data found
[  166.961299][T11049] Bluetooth: MGMT ver 1.23
[  167.015506][T11033] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.017610][T11033] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.019535][T11033] bridge_slave_0: entered allmulticast mode
[  167.022352][T11033] bridge_slave_0: entered promiscuous mode
[  167.025765][T11033] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.028697][T11033] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.031278][T11033] bridge_slave_1: entered allmulticast mode
[  167.034554][T11033] bridge_slave_1: entered promiscuous mode
[  167.250155][T11033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  167.253734][T11033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  167.325580][T11033] team0: Port device team_slave_0 added
[  167.338178][T11033] team0: Port device team_slave_1 added
[  167.388276][T11033] batman_adv: batadv0: Adding interface: batadv_slave_0
[  167.390201][T11033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.397208][T11033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  167.410070][T11033] batman_adv: batadv0: Adding interface: batadv_slave_1
[  167.415115][T11033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.424609][T11033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.471243][T11033] hsr_slave_0: entered promiscuous mode
[  167.474176][T11033] hsr_slave_1: entered promiscuous mode
[  167.476112][T11033] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  167.478951][T11033] Cannot create hsr debugfs directory
[  167.647873][   T40] kauditd_printk_skb: 153 callbacks suppressed
[  167.647885][   T40] audit: type=1400 audit(1743241777.720:951): avc:  denied  { mounton } for  pid=11080 comm="syz.5.1508" path="/21/bus" dev="tmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  167.649386][T11081] JFS: discard option not supported on device
[  167.676153][T11081] syz.5.1508: attempt to access beyond end of device
[  167.676153][T11081] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0
[  167.679559][T11081] syz.5.1508: attempt to access beyond end of device
[  167.679559][T11081] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0
[  167.681612][T11033] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.683107][T11081] Mount JFS Failure: -5
[  167.743552][   T40] audit: type=1400 audit(1743241777.814:952): avc:  denied  { mounton } for  pid=11082 comm="syz.5.1509" path="/proc/73/task" dev="proc" ino=40634 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  167.754477][   T40] audit: type=1400 audit(1743241777.814:953): avc:  denied  { mount } for  pid=11082 comm="syz.5.1509" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  167.768634][   T40] audit: type=1400 audit(1743241777.823:954): avc:  denied  { write } for  pid=11082 comm="syz.5.1509" name="task" dev="proc" ino=40634 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  167.775104][   T40] audit: type=1400 audit(1743241777.823:955): avc:  denied  { add_name } for  pid=11082 comm="syz.5.1509" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  167.780448][   T40] audit: type=1400 audit(1743241777.823:956): avc:  denied  { create } for  pid=11082 comm="syz.5.1509" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1
[  167.787091][   T40] audit: type=1400 audit(1743241777.823:957): avc:  denied  { associate } for  pid=11082 comm="syz.5.1509" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  167.895633][   T40] audit: type=1400 audit(1743241777.954:958): avc:  denied  { name_bind } for  pid=11090 comm="syz.5.1511" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  167.959272][T11033] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.974868][    C1] net_ratelimit: 111977 callbacks suppressed
[  167.974884][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  167.974928][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  167.977244][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  167.982076][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  167.985261][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  167.988471][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  167.991617][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  167.994714][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  167.997950][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  168.001222][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  168.134355][   T40] audit: type=1400 audit(1743241778.179:959): avc:  denied  { getopt } for  pid=11093 comm="syz.5.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  168.159271][T11033] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.431483][T11033] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.623690][T11033] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  168.632465][T11033] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  168.646417][T11033] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  168.660528][T11033] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  168.694849][T11098] xt_hashlimit: invalid rate
[  168.731290][T11033] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.740361][T11033] 8021q: adding VLAN 0 to HW filter on device team0
[  168.744120][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.746089][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.767667][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.769563][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.775276][T11103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.779936][   T40] audit: type=1400 audit(1743241778.787:960): avc:  denied  { read } for  pid=11102 comm="syz.3.1515" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  168.795126][T11033] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  168.799072][T11103] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.802016][T11033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  168.854093][T11111] __nla_validate_parse: 44 callbacks suppressed
[  168.854104][T11111] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1516'.
[  168.899120][T11033] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.943204][T11033] veth0_vlan: entered promiscuous mode
[  168.949486][T11117] geneve2: entered promiscuous mode
[  168.951057][T11117] geneve2: entered allmulticast mode
[  168.992145][ T5963] Bluetooth: hci0: command tx timeout
[  169.073762][T11033] veth1_vlan: entered promiscuous mode
[  169.099922][T11033] veth0_macvtap: entered promiscuous mode
[  169.105053][T11033] veth1_macvtap: entered promiscuous mode
[  169.111008][T11124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1520'.
[  169.120104][T11033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.122940][T11033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.125655][T11033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.128435][T11033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.131508][T11033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.134333][T11033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.138473][T11033] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.143949][T11033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.146911][T11033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.149636][T11033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.152694][T11033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.155295][T11033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.158381][T11033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.162483][T11126] netlink: 372 bytes leftover after parsing attributes in process `syz.4.1521'.
[  169.163175][T11033] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.169290][T11033] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.171630][T11033] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.176232][T11033] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.178788][T11033] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.281713][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.283839][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.299557][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.302815][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.352828][T11133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  169.724959][T11142] overlayfs: failed to resolve './bus': -2
[  169.755543][T11142] netfs: Couldn't get user pages (rc=-14)
[  170.254805][T11151] overlayfs: failed to resolve './file1': -2
[  170.301470][T11157] netlink: 'syz.4.1530': attribute type 10 has an invalid length.
[  170.372441][T11157] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  170.487589][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1534'.
[  170.490126][T11173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1534'.
[  170.492650][T11173] netlink: 'syz.4.1534': attribute type 18 has an invalid length.
[  171.557532][ T5996] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  171.668872][T11206] 8021q: adding VLAN 0 to HW filter on device bond1
[  171.672198][T11206] bond0: (slave bond1): Enslaving as an active interface with an up link
[  171.720388][ T5996] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  171.723818][ T5996] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.726798][ T5996] usb 8-1: Product: syz
[  171.730955][ T5996] usb 8-1: Manufacturer: syz
[  171.732305][ T5996] usb 8-1: SerialNumber: syz
[  171.735796][ T5996] usb 8-1: config 0 descriptor??
[  171.979807][ T5955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  171.983223][ T5955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  171.986941][ T5955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  171.990080][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  171.992422][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  172.046141][T11222] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32)
[  172.049402][T11222] xt_NFQUEUE: number of queues (65534) out of range (got 131068)
[  172.067930][T11224] input: syz0 as /devices/virtual/input/input24
[  172.077740][T11215] chnl_net:caif_netlink_parms(): no params data found
[  172.148406][T11215] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.150451][T11215] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.152544][T11215] bridge_slave_0: entered allmulticast mode
[  172.154673][T11215] bridge_slave_0: entered promiscuous mode
[  172.157854][T11215] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.159846][T11215] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.161799][T11215] bridge_slave_1: entered allmulticast mode
[  172.163976][T11215] bridge_slave_1: entered promiscuous mode
[  172.202332][T11215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.205987][T11215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.231327][ T5996] usb 8-1: USB disconnect, device number 20
[  172.268552][T11215] team0: Port device team_slave_0 added
[  172.271269][T11215] team0: Port device team_slave_1 added
[  172.325048][T11215] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.329077][T11215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.330260][T11238] hpfs: hpfs_map_sector(): read error
[  172.338189][T11215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.345368][T11236] netlink: 'syz.4.1549': attribute type 1 has an invalid length.
[  172.346293][T11215] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.350746][T11215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.351130][T11239] netlink: 'syz.4.1549': attribute type 1 has an invalid length.
[  172.361607][T11215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.398272][T11241] sg_write: data in/out 440207358/4056 bytes for SCSI command 0x45-- guessing data in;
[  172.398272][T11241]    program syz.5.1551 not setting count and/or reply_len properly
[  172.404809][T11236] bond5: entered promiscuous mode
[  172.405629][T11236] 8021q: adding VLAN 0 to HW filter on device bond5
[  172.461807][T11253] evm: overlay not supported
[  172.486791][T11215] hsr_slave_0: entered promiscuous mode
[  172.488737][T11215] hsr_slave_1: entered promiscuous mode
[  172.490856][T11215] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  172.492888][T11215] Cannot create hsr debugfs directory
[  172.635610][T11269] sg_write: data in/out 489/14 bytes for SCSI command 0x0-- guessing data in;
[  172.635610][T11269]    program syz.4.1557 not setting count and/or reply_len properly
[  172.662789][T11215] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.839020][ T7987] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  173.022204][ T7987] usb 10-1: config 0 has no interfaces?
[  173.028430][ T7987] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  173.032319][ T7987] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.035395][ T7987] usb 10-1: Product: syz
[  173.037038][ T7987] usb 10-1: Manufacturer: syz
[  173.038817][ T7987] usb 10-1: SerialNumber: syz
[  173.041891][ T7987] usb 10-1: config 0 descriptor??
[  173.183900][   T40] kauditd_printk_skb: 49 callbacks suppressed
[  173.183916][   T40] audit: type=1400 audit(1743241782.903:1010): avc:  denied  { ioctl } for  pid=11295 comm="syz.3.1568" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  173.330796][    C1] net_ratelimit: 93583 callbacks suppressed
[  173.330809][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  173.330988][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  173.332725][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  173.335995][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  173.339945][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  173.343547][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  173.346603][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  173.349873][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  173.353217][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  173.356691][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  173.621545][T11215] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.734851][T11215] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.869603][T11215] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.978359][T11215] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  173.983886][T11215] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  173.989642][T11215] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  173.996944][T11215] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  174.034164][T11215] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.046503][T11215] 8021q: adding VLAN 0 to HW filter on device team0
[  174.051113][ T1247] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.053902][ T1247] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.064252][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.067077][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.198192][ T5955] Bluetooth: hci0: command tx timeout
[  174.220044][T11215] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.245460][T11215] veth0_vlan: entered promiscuous mode
[  174.251564][T11215] veth1_vlan: entered promiscuous mode
[  174.262873][   T40] audit: type=1400 audit(1743241783.894:1011): avc:  denied  { setcheckreqprot } for  pid=11316 comm="syz.4.1573" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  174.270606][T11215] veth0_macvtap: entered promiscuous mode
[  174.275407][T11215] veth1_macvtap: entered promiscuous mode
[  174.286588][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.290469][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.294437][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.298240][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.301422][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.305342][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.308253][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.311238][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.314697][T11215] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.322531][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.326726][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.330388][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.334007][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.336982][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.339896][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.342583][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.346085][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.347406][T11322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1574'.
[  174.355328][T11215] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.380656][T11215] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.384800][T11215] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.389007][T11215] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.392314][T11215] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.395634][   T40] audit: type=1400 audit(1743241784.034:1012): avc:  denied  { ioctl } for  pid=11323 comm="syz.4.1575" path="/dev/sg1" dev="devtmpfs" ino=727 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  174.405966][   T40] audit: type=1400 audit(1743241784.044:1013): avc:  denied  { listen } for  pid=11323 comm="syz.4.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  174.422439][   T40] audit: type=1400 audit(1743241784.044:1014): avc:  denied  { write } for  pid=11323 comm="syz.4.1575" name="snmp6" dev="proc" ino=4026533902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  174.474254][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.482144][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.495012][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.501736][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.546214][   T40] audit: type=1400 audit(1743241784.175:1015): avc:  denied  { write } for  pid=11330 comm="syz.3.1577" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  174.590407][T11334] overlayfs: failed to resolve './file1': -2
[  174.605275][T11334] overlayfs: failed to resolve './file1': -2
[  174.823072][   T40] audit: type=1400 audit(1743241784.437:1016): avc:  denied  { create } for  pid=11349 comm="syz.3.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  174.829430][   T40] audit: type=1400 audit(1743241784.446:1017): avc:  denied  { bind } for  pid=11349 comm="syz.3.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  175.084107][ T1474] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  175.265864][ T1474] usb 8-1: Using ep0 maxpacket: 8
[  175.271894][ T1474] usb 8-1: config 1 has an invalid descriptor of length 82, skipping remainder of the config
[  175.275814][ T1474] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[  175.279525][ T1474] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 124, changing to 7
[  175.283331][ T1474] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8896, setting to 1024
[  175.287864][ T1474] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  175.291375][ T1474] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.297095][ T1474] hub 8-1:1.0: bad descriptor, ignoring hub
[  175.299560][ T1474] hub 8-1:1.0: probe with driver hub failed with error -5
[  175.302727][ T1474] cdc_wdm 8-1:1.0: skipping garbage
[  175.304893][ T1474] cdc_wdm 8-1:1.0: skipping garbage
[  175.307037][ T1474] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22
[  175.511527][   T40] audit: type=1400 audit(1743241785.073:1018): avc:  denied  { create } for  pid=11349 comm="syz.3.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  175.517011][   T40] audit: type=1400 audit(1743241785.082:1019): avc:  denied  { write } for  pid=11349 comm="syz.3.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  175.629643][ T1474] usb 8-1: USB disconnect, device number 21
[  175.780626][ T5996] usb 10-1: USB disconnect, device number 3
[  175.992844][ T1474] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  176.153120][ T1474] usb 8-1: Using ep0 maxpacket: 8
[  176.155882][ T1474] usb 8-1: config 1 has an invalid descriptor of length 82, skipping remainder of the config
[  176.158680][ T1474] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[  176.161126][ T1474] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 124, changing to 7
[  176.166112][ T1474] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8896, setting to 1024
[  176.169098][ T1474] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  176.171543][ T1474] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.176607][ T1474] hub 8-1:1.0: bad descriptor, ignoring hub
[  176.178337][ T1474] hub 8-1:1.0: probe with driver hub failed with error -5
[  176.181484][ T1474] cdc_wdm 8-1:1.0: skipping garbage
[  176.182981][ T1474] cdc_wdm 8-1:1.0: skipping garbage
[  176.184457][ T1474] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22
[  176.527575][ T1474] usb 8-1: USB disconnect, device number 22
[  177.005507][ T5963] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  177.009327][ T5963] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  177.011807][ T5963] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  177.014168][ T5963] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  177.020296][ T5963] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  177.023220][T11389] fuse: Unknown parameter 'smackfshaäˇ''
[  177.048087][T11393] ubi31: attaching mtd0
[  177.050852][T11393] ubi31: scanning is finished
[  177.052311][T11393] ubi31: empty MTD device detected
[  177.096455][T11384] chnl_net:caif_netlink_parms(): no params data found
[  177.128989][T11410] Bluetooth: MGMT ver 1.23
[  177.203185][T11384] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.205236][T11384] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.207894][T11384] bridge_slave_0: entered allmulticast mode
[  177.210096][T11384] bridge_slave_0: entered promiscuous mode
[  177.213016][T11384] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.215089][T11384] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.217179][T11384] bridge_slave_1: entered allmulticast mode
[  177.220326][T11384] bridge_slave_1: entered promiscuous mode
[  177.257567][T11384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.262927][T11384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.304792][T11384] team0: Port device team_slave_0 added
[  177.310223][T11384] team0: Port device team_slave_1 added
[  177.348121][T11384] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.350117][T11384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.357308][T11384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.362403][T11384] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.364330][T11384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.371343][T11384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.418267][T11384] hsr_slave_0: entered promiscuous mode
[  177.420911][T11384] hsr_slave_1: entered promiscuous mode
[  177.423343][T11384] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  177.425527][T11384] Cannot create hsr debugfs directory
[  177.546288][T11384] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.606101][T11393] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  177.611119][T11393] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  177.613453][T11393] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  177.615524][T11393] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  177.619870][T11393] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  177.622632][T11393] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  177.625813][T11393] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3416174434
[  177.630196][T11393] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  177.634288][T11417] ubi31: background thread "ubi_bgt31d" started, PID 11417
[  177.972360][ T5996] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[  178.132589][ T5996] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  178.136953][ T5996] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2
[  178.139448][ T5996] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  178.142230][ T5996] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.145212][ T5996] usb 9-1: config 0 descriptor??
[  178.148047][ T5996] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  178.150121][ T5996] dvb-usb: bulk message failed: -22 (3/0)
[  178.161731][ T5996] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  178.167698][ T5996] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  178.169781][ T5996] usb 9-1: media controller created
[  178.174980][ T5996] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  178.183731][ T5996] dvb-usb: bulk message failed: -22 (6/0)
[  178.189539][ T5996] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  178.192706][ T5996] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input25
[  178.197164][ T5996] dvb-usb: schedule remote query interval to 150 msecs.
[  178.199097][ T5996] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  178.280605][T11436] nbd: must specify a size in bytes for the device
[  178.370142][   T58] usb 9-1: USB disconnect, device number 8
[  178.382084][   T58] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  178.386078][T11449] Bluetooth: MGMT ver 1.23
[  178.589106][   T40] kauditd_printk_skb: 10 callbacks suppressed
[  178.589118][   T40] audit: type=1400 audit(1743241787.954:1030): avc:  denied  { mounton } for  pid=11454 comm="syz.5.1610" path="/58/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1
[  178.686752][    C0] net_ratelimit: 84938 callbacks suppressed
[  178.686764][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  178.686859][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  178.688785][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  178.691800][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  178.694988][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  178.699289][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  178.702467][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  178.706582][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  178.710086][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  178.713199][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  178.735574][T11384] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.848303][T11384] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.922093][T11384] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.928271][   T40] audit: type=1400 audit(1743241788.272:1031): avc:  denied  { view } for  pid=11458 comm="syz.4.1611" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  178.993760][T11384] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  178.999999][T11384] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  179.006476][T11384] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  179.012352][T11384] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  179.053826][T11384] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.064442][T11384] 8021q: adding VLAN 0 to HW filter on device team0
[  179.068648][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.070615][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.076159][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.078126][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.092795][T11384] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  179.096178][T11384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  179.167602][T11384] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.186420][T11384] veth0_vlan: entered promiscuous mode
[  179.193568][T11384] veth1_vlan: entered promiscuous mode
[  179.206304][T11384] veth0_macvtap: entered promiscuous mode
[  179.209314][T11384] veth1_macvtap: entered promiscuous mode
[  179.217792][T11384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.220907][T11384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.224093][T11384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.226912][T11384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.229598][T11384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.233263][T11384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.235946][T11384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.238767][T11384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.241424][T11384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.244670][ T5955] Bluetooth: hci0: command tx timeout
[  179.247251][T11384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.250537][T11384] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.257435][T11384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.263047][T11384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.268534][T11384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.271538][T11384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.274335][T11384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.277654][T11384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.280655][T11384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.283799][T11384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.288020][T11384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.291300][T11384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.294596][T11384] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.299606][T11384] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.302019][T11384] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.304413][T11384] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.306953][T11384] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.309851][   T40] audit: type=1400 audit(1743241788.637:1032): avc:  denied  { read append } for  pid=11486 comm="syz.3.1614" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  179.321732][   T40] audit: type=1400 audit(1743241788.637:1033): avc:  denied  { open } for  pid=11486 comm="syz.3.1614" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  179.330363][   T40] audit: type=1400 audit(1743241788.637:1034): avc:  denied  { map } for  pid=11486 comm="syz.3.1614" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  179.336825][   T40] audit: type=1400 audit(1743241788.637:1035): avc:  denied  { write execute } for  pid=11486 comm="syz.3.1614" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  179.375044][ T1247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.381198][ T1247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.382754][T11488] netlink: 'syz.3.1614': attribute type 2 has an invalid length.
[  179.385442][T11488] netlink: 'syz.3.1614': attribute type 1 has an invalid length.
[  179.387608][T11488] netlink: 'syz.3.1614': attribute type 1 has an invalid length.
[  179.394959][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.397836][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.027595][T11555] fuse: Invalid rootmode
[  180.054752][T11559] netlink: 'syz.4.1620': attribute type 1 has an invalid length.
[  180.057377][T11559] netlink: 'syz.4.1620': attribute type 4 has an invalid length.
[  180.059757][T11559] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1620'.
[  180.085860][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1621'.
[  180.329093][   T40] audit: type=1400 audit(1743241789.581:1036): avc:  denied  { connect } for  pid=11569 comm="syz.4.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  180.345471][T11571] kvm: kvm [11569]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000
[  180.348025][   T40] audit: type=1400 audit(1743241789.591:1037): avc:  denied  { ioctl } for  pid=11569 comm="syz.4.1624" path="socket:[45075]" dev="sockfs" ino=45075 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  180.359044][T11571] kvm: kvm [11569]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000
[  180.403711][T11571] kvm: kvm [11569]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000
[  180.420550][T11571] kvm: kvm [11569]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000
[  180.425069][T11571] kvm: kvm [11569]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111
[  180.638537][T11574] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1625'.
[  180.991184][T11577] netlink: 'syz.5.1626': attribute type 10 has an invalid length.
[  182.346530][T11591] overlay: filesystem on ./bus not supported as upperdir
[  182.421059][ T5963] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  182.425198][ T5963] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  182.427825][ T5963] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  182.432068][ T5963] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  182.435001][ T5963] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  182.502477][T11594] chnl_net:caif_netlink_parms(): no params data found
[  182.574523][T11594] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.577130][T11594] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.584076][T11594] bridge_slave_0: entered allmulticast mode
[  182.586748][T11594] bridge_slave_0: entered promiscuous mode
[  182.592008][T11594] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.594038][T11594] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.596105][T11594] bridge_slave_1: entered allmulticast mode
[  182.598188][T11594] bridge_slave_1: entered promiscuous mode
[  182.635850][T11594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  182.639484][T11594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  182.678568][T11594] team0: Port device team_slave_0 added
[  182.682775][T11594] team0: Port device team_slave_1 added
[  182.716710][T11594] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.719077][T11594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.726237][T11594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  182.733074][T11594] batman_adv: batadv0: Adding interface: batadv_slave_1
[  182.735067][T11594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.742353][T11594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.785363][T11594] hsr_slave_0: entered promiscuous mode
[  182.787339][T11594] hsr_slave_1: entered promiscuous mode
[  182.789116][T11594] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  182.791555][T11594] Cannot create hsr debugfs directory
[  182.906638][T11594] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.105041][   T40] audit: type=1400 audit(1743241792.182:1038): avc:  denied  { create } for  pid=11611 comm="syz.5.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  183.114549][   T40] audit: type=1400 audit(1743241792.191:1039): avc:  denied  { create } for  pid=11613 comm="syz.3.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  183.121088][T11614] input: syz1 as /devices/virtual/input/input26
[  183.376005][   T34] hid-generic 0003:8000:0002.000B: item fetching failed at offset 0/4
[  183.378433][   T34] hid-generic 0003:8000:0002.000B: probe with driver hid-generic failed with error -22
[  183.393152][T11645] block device autoloading is deprecated and will be removed.
[  183.394339][T11647] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.395765][T11645] syz.3.1640: attempt to access beyond end of device
[  183.395765][T11645] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  183.490383][T11652] cgroup: noprefix used incorrectly
[  183.564489][T11594] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.586529][T11659] block nbd5: NBD_DISCONNECT
[  183.643862][T11594] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.034237][T11594] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.042738][    C1] net_ratelimit: 89643 callbacks suppressed
[  184.042749][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.042981][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  184.044582][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.047826][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  184.051085][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.054302][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  184.057542][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.060932][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  184.063998][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.067700][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  184.136785][   T40] kauditd_printk_skb: 5 callbacks suppressed
[  184.136795][   T40] audit: type=1400 audit(1743241793.145:1045): avc:  denied  { map } for  pid=11688 comm="syz.4.1657" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  184.144115][T11689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1657'.
[  184.147661][   T40] audit: type=1400 audit(1743241793.145:1046): avc:  denied  { execute } for  pid=11688 comm="syz.4.1657" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  184.255932][T11594] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  184.266787][T11594] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  184.291299][T11594] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  184.297671][T11594] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  184.349958][T11691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1658'.
[  184.359105][T11594] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.360689][   T40] audit: type=1400 audit(1743241793.351:1047): avc:  denied  { mount } for  pid=11690 comm="syz.4.1658" name="/" dev="hugetlbfs" ino=45424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  184.368240][T11594] 8021q: adding VLAN 0 to HW filter on device team0
[  184.379608][   T40] audit: type=1400 audit(1743241793.351:1048): avc:  denied  { remount } for  pid=11690 comm="syz.4.1658" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  184.386040][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.388027][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.393417][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.395413][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.483954][T11594] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.502358][T11594] veth0_vlan: entered promiscuous mode
[  184.509124][T11594] veth1_vlan: entered promiscuous mode
[  184.526365][T11594] veth0_macvtap: entered promiscuous mode
[  184.529831][T11594] veth1_macvtap: entered promiscuous mode
[  184.540292][T11594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.543625][T11594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.547110][T11594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.550030][T11594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.552774][T11594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.555659][T11594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.558824][T11594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.561764][T11594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.564552][T11594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.567622][T11594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.570385][T11594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.576171][T11594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.580899][T11594] batman_adv: batadv0: Interface activated: batadv_slave_0
[  184.585626][T11594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.597839][T11594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.598212][   T40] audit: type=1400 audit(1743241793.575:1049): avc:  denied  { unmount } for  pid=7779 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  184.603104][T11594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.608735][T11594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.611554][T11594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.614156][T11594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.616610][T11594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.619193][T11594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.621797][T11594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.624461][T11594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.626926][T11594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.629491][T11594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.631310][   T40] audit: type=1400 audit(1743241793.613:1050): avc:  denied  { accept } for  pid=11698 comm="syz.5.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  184.632298][ T5963] Bluetooth: hci0: command tx timeout
[  184.640572][T11594] batman_adv: batadv0: Interface activated: batadv_slave_1
[  184.649990][T11594] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.652656][T11594] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.654829][T11594] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.657002][T11594] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.688057][T11704] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  184.691209][   T40] audit: type=1400 audit(1743241793.669:1051): avc:  denied  { mount } for  pid=11702 comm="syz.5.1661" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  184.710354][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.717418][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.727437][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.729614][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.736603][   T40] audit: type=1804 audit(1743241793.706:1052): pid=11706 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1662" name="/newroot/80/file0" dev="tmpfs" ino=466 res=1 errno=0
[  184.744745][T11706] ref_ctr increment failed for inode: 0x1d2 offset: 0x7 ref_ctr_offset: 0x4 of mm: 0xffff8880323f6e00
[  184.746823][   T40] audit: type=1400 audit(1743241793.716:1053): avc:  denied  { ioctl } for  pid=11700 comm="syz.4.1660" path="socket:[45617]" dev="sockfs" ino=45617 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  184.756525][   T40] audit: type=1400 audit(1743241793.725:1054): avc:  denied  { setopt } for  pid=11700 comm="syz.4.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  184.811813][T11712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1663'.
[  184.820785][T11712] overlayfs: missing 'lowerdir'
[  184.951060][T11705] uprobe: syz.5.1662:11705 failed to unregister, leaking uprobe
[  185.053018][T11729] tipc: Failed to remove unknown binding: 66,1,1/0:2439193417/2439193419
[  185.056229][T11729] tipc: Failed to remove unknown binding: 66,1,1/0:2439193417/2439193419
[  185.060038][T11729] tipc: Failed to remove unknown binding: 66,1,1/0:2439193417/2439193419
[  185.207857][T11739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1673'.
[  185.213111][T11739] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1673'.
[  185.863066][T11746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=11746 comm=syz.4.1676
[  186.003679][T11760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1681'.
[  186.003684][T11759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1681'.
[  186.056440][T11763] pimreg: entered allmulticast mode
[  186.059151][T11763] pimreg: left allmulticast mode
[  186.881715][T11767] vxcan1: entered promiscuous mode
[  186.942760][ T5955] Bluetooth: hci1: command 0x0406 tx timeout
[  187.141298][T11774] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  187.148429][T11775] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only
[  187.151912][T11775] overlayfs: conflicting lowerdir path
[  187.163152][T11774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1685'.
[  187.179343][T11774] IPVS: Error joining to the multicast group
[  187.182173][T11775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1685'.
[  187.188156][T11775] IPVS: Error joining to the multicast group
[  187.231305][T11781] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=27419 sclass=netlink_xfrm_socket pid=11781 comm=syz.5.1686
[  187.354656][T11783] overlayfs: failed to verify upper (85/file1, ino=501, err=-116)
[  187.358424][T11783] overlayfs: failed to verify index dir 'upper' xattr
[  187.360529][T11783] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  188.023193][T11790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1690'.
[  188.110876][ T5955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  188.114346][ T5955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  188.118488][ T5955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  188.122029][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  188.130794][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  188.206212][T11796] chnl_net:caif_netlink_parms(): no params data found
[  188.302816][T11796] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.305477][T11796] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.307600][T11796] bridge_slave_0: entered allmulticast mode
[  188.312051][T11796] bridge_slave_0: entered promiscuous mode
[  188.314820][T11796] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.316970][T11796] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.319123][T11796] bridge_slave_1: entered allmulticast mode
[  188.321425][T11796] bridge_slave_1: entered promiscuous mode
[  188.355998][T11796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.359797][T11796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.415116][T11796] team0: Port device team_slave_0 added
[  188.418333][T11796] team0: Port device team_slave_1 added
[  188.458844][T11796] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.460907][T11796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.468154][T11796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.474500][T11796] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.476994][T11796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.484999][T11796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.525610][T11796] hsr_slave_0: entered promiscuous mode
[  188.527590][T11796] hsr_slave_1: entered promiscuous mode
[  188.529391][T11796] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  188.531527][T11796] Cannot create hsr debugfs directory
[  188.543560][   T34] usb 9-1: new low-speed USB device number 9 using dummy_hcd
[  188.640725][T11796] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.720160][   T34] usb 9-1: config 0 has an invalid interface number: 55 but max is 0
[  188.722676][   T34] usb 9-1: config 0 has no interface number 0
[  188.724555][   T34] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  188.727788][   T34] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  188.730691][   T34] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  188.733930][   T34] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  188.740469][   T34] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  188.743423][   T34] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  188.747114][   T34] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  188.749605][   T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.752559][   T34] usb 9-1: config 0 descriptor??
[  188.754426][T11809] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  188.756507][T11809] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  188.763927][   T34] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  188.981959][T11799] ipt_REJECT: TCP_RESET invalid for non-tcp
[  189.398737][    C1] net_ratelimit: 88937 callbacks suppressed
[  189.398748][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.398984][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  189.400572][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.403870][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  189.407102][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.410438][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  189.413666][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.417679][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  189.420486][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.423815][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  189.458649][T11796] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.690002][T11796] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.897721][T11796] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.123941][T11796] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  190.131622][T11796] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  190.142854][T11796] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  190.152072][T11796] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  190.184174][T11796] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.191033][T11796] 8021q: adding VLAN 0 to HW filter on device team0
[  190.195918][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.197982][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  190.206325][ T1229] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.208367][ T1229] bridge0: port 2(bridge_slave_1) entered forwarding state
[  190.293609][T11796] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.313156][T11796] veth0_vlan: entered promiscuous mode
[  190.319779][T11796] veth1_vlan: entered promiscuous mode
[  190.338649][T11796] veth0_macvtap: entered promiscuous mode
[  190.343307][T11796] veth1_macvtap: entered promiscuous mode
[  190.352637][T11796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.356527][T11796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.359353][T11796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.363034][ T5963] Bluetooth: hci0: command tx timeout
[  190.368484][T11796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.371369][T11796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.374909][T11796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.377648][T11796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.380556][T11796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.383487][T11796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.386360][T11796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.389081][T11796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.392037][T11796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.395037][T11796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.397921][T11796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.401285][T11796] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.407429][T11796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.410420][T11796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.413179][T11796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.416307][T11796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.419109][T11796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.422089][T11796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.424823][T11796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.427932][T11796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.430755][T11796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.433704][T11796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.436564][T11796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.439559][T11796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.442839][T11796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.445805][T11796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.449203][T11796] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.453927][T11796] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.456407][T11796] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.459187][T11796] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.461760][T11796] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.515982][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.518199][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.531439][ T1229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.538926][ T1229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.637815][   T40] kauditd_printk_skb: 12 callbacks suppressed
[  190.637827][   T40] audit: type=1400 audit(1743241799.225:1067): avc:  denied  { create } for  pid=11819 comm="syz.3.1696" name="#55" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  190.649378][   T40] audit: type=1400 audit(1743241799.235:1068): avc:  denied  { link } for  pid=11819 comm="syz.3.1696" name="#55" dev="tmpfs" ino=2547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  190.657309][   T40] audit: type=1400 audit(1743241799.235:1069): avc:  denied  { rename } for  pid=11819 comm="syz.3.1696" name="#56" dev="tmpfs" ino=2547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  190.701188][   T40] audit: type=1400 audit(1743241799.281:1070): avc:  denied  { create } for  pid=11821 comm="syz.3.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  190.708292][   T40] audit: type=1400 audit(1743241799.291:1071): avc:  denied  { bind } for  pid=11821 comm="syz.3.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  190.714262][   T40] audit: type=1400 audit(1743241799.291:1072): avc:  denied  { name_bind } for  pid=11821 comm="syz.3.1697" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  190.719964][   T40] audit: type=1400 audit(1743241799.291:1073): avc:  denied  { node_bind } for  pid=11821 comm="syz.3.1697" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1
[  190.726629][   T40] audit: type=1400 audit(1743241799.291:1074): avc:  denied  { connect } for  pid=11821 comm="syz.3.1697" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  190.732688][   T40] audit: type=1400 audit(1743241799.291:1075): avc:  denied  { name_connect } for  pid=11821 comm="syz.3.1697" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  190.754473][T11824] ipvlan0: entered promiscuous mode
[  190.756055][T11824] ipvlan0: entered allmulticast mode
[  190.757688][T11824] veth0_vlan: entered allmulticast mode
[  190.880711][   T40] audit: type=1400 audit(1743241799.450:1076): avc:  denied  { read write } for  pid=11832 comm="syz.3.1701" name="btrfs-control" dev="devtmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  191.106378][ T1474] IPVS: starting estimator thread 0...
[  191.195274][T11841] IPVS: using max 47 ests per chain, 112800 per kthread
[  191.962841][T11843] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1704'.
[  191.966129][T11843] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1704'.
[  194.367737][ T5955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  194.371707][ T5955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  194.376256][ T5955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  194.380154][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  194.384836][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  194.453950][T11847] chnl_net:caif_netlink_parms(): no params data found
[  194.597761][T11847] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.600518][T11847] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.603150][T11847] bridge_slave_0: entered allmulticast mode
[  194.612111][T11847] bridge_slave_0: entered promiscuous mode
[  194.619873][T11847] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.623001][T11847] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.625719][T11847] bridge_slave_1: entered allmulticast mode
[  194.639959][T11847] bridge_slave_1: entered promiscuous mode
[  194.696105][T11847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.702579][T11847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.754709][    C3] net_ratelimit: 93792 callbacks suppressed
[  194.754722][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  194.754768][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.754797][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  194.754913][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  194.755232][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  194.755321][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  194.755434][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  194.755740][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  194.755836][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  194.755961][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  194.817799][T11847] team0: Port device team_slave_0 added
[  194.946468][T11847] team0: Port device team_slave_1 added
[  194.994706][T11847] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.996796][T11847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.004877][T11847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  195.008575][T11847] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.010531][T11847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.020672][T11847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.071233][T11847] hsr_slave_0: entered promiscuous mode
[  195.073350][T11847] hsr_slave_1: entered promiscuous mode
[  195.075288][T11847] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  195.081301][T11847] Cannot create hsr debugfs directory
[  195.086176][ T5983] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  195.255123][T11847] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.261959][ T5983] usb 10-1: Using ep0 maxpacket: 16
[  195.265615][ T5983] usb 10-1: config 0 has no interfaces?
[  195.270547][ T5983] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  195.273944][ T5983] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.276147][ T5983] usb 10-1: Product: syz
[  195.277362][ T5983] usb 10-1: Manufacturer: syz
[  195.282328][ T5983] usb 10-1: SerialNumber: syz
[  195.287133][ T5983] usb 10-1: config 0 descriptor??
[  195.529712][ T5983] usb 10-1: USB disconnect, device number 4
[  195.535430][   T75] ==================================================================
[  195.537603][   T75] BUG: KASAN: slab-use-after-free in drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0
[  195.540234][   T75] Read of size 1 at addr ffff888000805009 by task kworker/u32:4/75
[  195.542870][   T75] 
[  195.544159][   T75] CPU: 2 UID: 0 PID: 75 Comm: kworker/u32:4 Not tainted 6.14.0-syzkaller-07540-geff5f16bfd87 #0 PREEMPT(full) 
[  195.544173][   T75] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  195.544181][   T75] Workqueue: events_unbound commit_work
[  195.544196][   T75] Call Trace:
[  195.544200][   T75]  <TASK>
[  195.544204][   T75]  dump_stack_lvl+0x116/0x1f0
[  195.544229][   T75]  print_report+0xc3/0x670
[  195.544242][   T75]  ? __virt_addr_valid+0x5e/0x590
[  195.544257][   T75]  ? __phys_addr+0xc6/0x150
[  195.544271][   T75]  ? drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0
[  195.544285][   T75]  kasan_report+0xe0/0x110
[  195.544298][   T75]  ? drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0
[  195.544313][   T75]  drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0
[  195.544329][   T75]  ? preempt_schedule_thunk+0x16/0x30
[  195.544340][   T75]  ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10
[  195.544354][   T75]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  195.544368][   T75]  ? drm_atomic_helper_commit_hw_done+0x330/0x490
[  195.544383][   T75]  drm_atomic_helper_commit_tail+0xcb/0xf0
[  195.544396][   T75]  commit_tail+0x35b/0x400
[  195.544410][   T75]  process_one_work+0x9cc/0x1b70
[  195.544423][   T75]  ? __pfx_bond_mii_monitor+0x10/0x10
[  195.544435][   T75]  ? __pfx_process_one_work+0x10/0x10
[  195.544448][   T75]  ? assign_work+0x1a0/0x250
[  195.544458][   T75]  worker_thread+0x6c8/0xf10
[  195.544471][   T75]  ? __pfx_worker_thread+0x10/0x10
[  195.544482][   T75]  kthread+0x3c2/0x780
[  195.544492][   T75]  ? __pfx_kthread+0x10/0x10
[  195.544501][   T75]  ? __pfx_kthread+0x10/0x10
[  195.544510][   T75]  ? __pfx_kthread+0x10/0x10
[  195.544519][   T75]  ? __pfx_kthread+0x10/0x10
[  195.544527][   T75]  ? rcu_is_watching+0x12/0xc0
[  195.544540][   T75]  ? __pfx_kthread+0x10/0x10
[  195.544549][   T75]  ret_from_fork+0x45/0x80
[  195.544561][   T75]  ? __pfx_kthread+0x10/0x10
[  195.544570][   T75]  ret_from_fork_asm+0x1a/0x30
[  195.544587][   T75]  </TASK>
[  195.544591][   T75] 
[  195.599236][   T75] Allocated by task 11861:
[  195.600487][   T75]  kasan_save_stack+0x33/0x60
[  195.601833][   T75]  kasan_save_track+0x14/0x30
[  195.603151][   T75]  __kasan_kmalloc+0xaa/0xb0
[  195.604469][   T75]  drm_atomic_helper_crtc_duplicate_state+0x70/0xd0
[  195.606291][   T75]  drm_atomic_get_crtc_state+0x16e/0x450
[  195.607876][   T75]  drm_atomic_get_plane_state+0x436/0x590
[  195.609459][   T75]  drm_atomic_set_property+0xa03/0x3360
[  195.610990][   T75]  drm_mode_atomic_ioctl+0x66f/0x25c0
[  195.612510][   T75]  drm_ioctl_kernel+0x1f1/0x3e0
[  195.613869][   T75]  drm_ioctl+0x5d6/0xc10
[  195.615057][   T75]  __x64_sys_ioctl+0x190/0x200
[  195.616441][   T75]  do_syscall_64+0xcd/0x260
[  195.617691][   T75]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.619326][   T75] 
[  195.620009][   T75] Freed by task 11860:
[  195.621148][   T75]  kasan_save_stack+0x33/0x60
[  195.622484][   T75]  kasan_save_track+0x14/0x30
[  195.623811][   T75]  kasan_save_free_info+0x3b/0x60
[  195.625219][   T75]  __kasan_slab_free+0x51/0x70
[  195.626556][   T75]  kfree+0x2b6/0x4d0
[  195.627669][   T75]  drm_atomic_state_default_clear+0x453/0xe30
[  195.629360][   T75]  __drm_atomic_state_free+0x185/0x2b0
[  195.630884][   T75]  drm_client_modeset_commit_atomic+0x6b2/0x7e0
[  195.632726][   T75]  drm_client_modeset_commit_locked+0x14d/0x580
[  195.634471][   T75]  drm_client_modeset_commit+0x4f/0x80
[  195.636022][   T75]  drm_fb_helper_lastclose+0xc7/0x160
[  195.637517][   T75]  drm_fbdev_client_restore+0x2c/0x40
[  195.639014][   T75]  drm_client_dev_restore+0x183/0x290
[  195.640531][   T75]  drm_release+0x2c2/0x360
[  195.641778][   T75]  __fput+0x3ff/0xb70
[  195.642931][   T75]  task_work_run+0x14d/0x240
[  195.644253][   T75]  syscall_exit_to_user_mode+0x27b/0x2a0
[  195.645824][   T75]  do_syscall_64+0xda/0x260
[  195.647110][   T75]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.648749][   T75] 
[  195.649433][   T75] The buggy address belongs to the object at ffff888000805000
[  195.649433][   T75]  which belongs to the cache kmalloc-512 of size 512
[  195.653115][   T75] The buggy address is located 9 bytes inside of
[  195.653115][   T75]  freed 512-byte region [ffff888000805000, ffff888000805200)
[  195.656829][   T75] 
[  195.657511][   T75] The buggy address belongs to the physical page:
[  195.659293][   T75] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x804
[  195.661648][   T75] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  195.664027][   T75] anon flags: 0x7ff00000000040(head|node=0|zone=0|lastcpupid=0x7ff)
[  195.666219][   T75] page_type: f5(slab)
[  195.667367][   T75] raw: 007ff00000000040 ffff88801b442c80 0000000000000000 dead000000000001
[  195.669710][   T75] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  195.672099][   T75] head: 007ff00000000040 ffff88801b442c80 0000000000000000 dead000000000001
[  195.674477][   T75] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  195.676880][   T75] head: 007ff00000000002 ffffea0000020101 ffffffffffffffff 0000000000000000
[  195.679289][   T75] head: ffff888000000004 0000000000000000 00000000ffffffff 0000000000000000
[  195.681662][   T75] page dumped because: kasan: bad access detected
[  195.683454][   T75] page_owner tracks the page as allocated
[  195.685057][   T75] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 11668, tgid 11667 (syz.5.1651), ts 184273217617, free_ts 183020291108
[  195.690256][   T75]  post_alloc_hook+0x181/0x1b0
[  195.691606][   T75]  get_page_from_freelist+0x10c4/0x34c0
[  195.693167][   T75]  __alloc_frozen_pages_noprof+0x223/0x24d0
[  195.694810][   T75]  alloc_pages_mpol+0x1fb/0x540
[  195.696204][   T75]  new_slab+0x23c/0x330
[  195.697371][   T75]  ___slab_alloc+0xd9c/0x1940
[  195.698675][   T75]  __slab_alloc.constprop.0+0x56/0xb0
[  195.700171][   T75]  __kmalloc_noprof+0x2f2/0x510
[  195.701527][   T75]  hash_ip4_add+0x1f96/0x2a00
[  195.702878][   T75]  hash_ip4_uadt+0x5d9/0x8d0
[  195.704191][   T75]  call_ad.constprop.0+0x16b/0x940
[  195.705615][   T75]  ip_set_ad.constprop.0.isra.0+0x3ce/0x870
[  195.707284][   T75]  nfnetlink_rcv_msg+0x9f9/0x1200
[  195.708688][   T75]  netlink_rcv_skb+0x16a/0x440
[  195.710027][   T75]  nfnetlink_rcv+0x1b3/0x430
[  195.711364][   T75]  netlink_unicast+0x53a/0x7f0
[  195.712731][   T75] page last free pid 58 tgid 58 stack trace:
[  195.714387][   T75]  free_frozen_pages+0x6d8/0xf40
[  195.715780][   T75]  __put_partials+0x16d/0x1c0
[  195.717102][   T75]  qlist_free_all+0x4e/0x120
[  195.718401][   T75]  kasan_quarantine_reduce+0x195/0x1e0
[  195.719895][   T75]  __kasan_slab_alloc+0x69/0x90
[  195.721212][   T75]  __kmalloc_cache_noprof+0x1f1/0x3e0
[  195.722725][   T75]  nsim_fib_event_work+0x17f5/0x2e80
[  195.724206][   T75]  process_one_work+0x9cc/0x1b70
[  195.725585][   T75]  worker_thread+0x6c8/0xf10
[  195.726865][   T75]  kthread+0x3c2/0x780
[  195.728027][   T75]  ret_from_fork+0x45/0x80
[  195.729277][   T75]  ret_from_fork_asm+0x1a/0x30
[  195.730618][   T75] 
[  195.731312][   T75] Memory state around the buggy address:
[  195.732882][   T75]  ffff888000804f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  195.735091][   T75]  ffff888000804f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  195.737323][   T75] >ffff888000805000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  195.739531][   T75]                       ^
[  195.740738][   T75]  ffff888000805080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  195.742956][   T75]  ffff888000805100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  195.745194][   T75] ==================================================================
[  195.763084][   T75] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  195.765127][   T75] CPU: 2 UID: 0 PID: 75 Comm: kworker/u32:4 Not tainted 6.14.0-syzkaller-07540-geff5f16bfd87 #0 PREEMPT(full) 
[  195.768321][   T75] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  195.771282][   T75] Workqueue: events_unbound commit_work
[  195.772812][   T75] Call Trace:
[  195.773742][   T75]  <TASK>
[  195.774540][   T75]  dump_stack_lvl+0x3d/0x1f0
[  195.775799][   T75]  panic+0x71c/0x800
[  195.776897][   T75]  ? __pfx_panic+0x10/0x10
[  195.778148][   T75]  ? irqentry_exit+0x3b/0x90
[  195.779450][   T75]  ? lockdep_hardirqs_on+0x7c/0x110
[  195.780894][   T75]  ? preempt_schedule_thunk+0x16/0x30
[  195.782399][   T75]  ? drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0
[  195.784381][   T75]  ? preempt_schedule_common+0x44/0xc0
[  195.785886][   T75]  ? check_panic_on_warn+0x1f/0xb0
[  195.787337][   T75]  ? drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0
[  195.789325][   T75]  check_panic_on_warn+0xab/0xb0
[  195.790669][   T75]  end_report+0x107/0x170
[  195.791911][   T75]  kasan_report+0xee/0x110
[  195.793160][   T75]  ? drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0
[  195.795147][   T75]  drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0
[  195.797114][   T75]  ? preempt_schedule_thunk+0x16/0x30
[  195.798602][   T75]  ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10
[  195.800693][   T75]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  195.802334][   T75]  ? drm_atomic_helper_commit_hw_done+0x330/0x490
[  195.804115][   T75]  drm_atomic_helper_commit_tail+0xcb/0xf0
[  195.805729][   T75]  commit_tail+0x35b/0x400
[  195.806985][   T75]  process_one_work+0x9cc/0x1b70
[  195.808387][   T75]  ? __pfx_bond_mii_monitor+0x10/0x10
[  195.809874][   T75]  ? __pfx_process_one_work+0x10/0x10
[  195.811377][   T75]  ? assign_work+0x1a0/0x250
[  195.812664][   T75]  worker_thread+0x6c8/0xf10
[  195.813963][   T75]  ? __pfx_worker_thread+0x10/0x10
[  195.815390][   T75]  kthread+0x3c2/0x780
[  195.816539][   T75]  ? __pfx_kthread+0x10/0x10
[  195.817822][   T75]  ? __pfx_kthread+0x10/0x10
[  195.819110][   T75]  ? __pfx_kthread+0x10/0x10
[  195.820403][   T75]  ? __pfx_kthread+0x10/0x10
[  195.821686][   T75]  ? rcu_is_watching+0x12/0xc0
[  195.823034][   T75]  ? __pfx_kthread+0x10/0x10
[  195.824325][   T75]  ret_from_fork+0x45/0x80
[  195.825572][   T75]  ? __pfx_kthread+0x10/0x10
[  195.826869][   T75]  ret_from_fork_asm+0x1a/0x30
[  195.828234][   T75]  </TASK>
[  195.829672][   T75] Kernel Offset: disabled
[  195.830880][   T75] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:07:27  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=1ffff92000000ec4 RCX=ffffffff8987acff RDX=ffff88802347c880
RSI=ffffffff8a2b6ae2 RDI=ffff88802a30c380 RBP=ffffc900000076d0 RSP=ffffc900000075f0
R8 =0000000000000004 R9 =0000000000000005 R10=0000000000000003 R11=0000000000000000
R12=ffff888060775680 R13=ffffc90000007760 R14=ffff88802a30c380 R15=0000000000000000
RIP=ffffffff8a2b6afd RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6a14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f9e7c525440 CR3=000000000e182000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000084000 Opmask01=0000000000000001 Opmask02=00000000ffff3f01 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8566beae7af06002 971c3c7ec1e74470
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 31a957862d5899be 1b75ac04972f6964
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 919593f10e7681f2 c27f94e1cbf05a64
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a6627ab0ca653405 d917f7939ce9765a
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000bd00
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007753666a8ab8 0000776363667254
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9c4be59a7a797300 6beb7a7977636676
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c20000009617f9df 7753d5e8bc6d8200
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 be7a797373000000 00000077695dec3d
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bda093672aa97a86 5dedce1a92563052
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 71620869f647c8e5 26ec9e335727f0e6
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2737386466623631 6635666665672d30 343537302d72656c 6c616b7a79732d30
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 20726f20656c6966 2068637573206f4e
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0079726f74636572 696420726f20656c
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff91a7c238 RDX=ffffc900006770f0
RSI=ffffc90000677d40 RDI=ffffc900006770e8 RBP=ffffc90000677d40 RSP=ffffc90000677050
R8 =0000000000000001 R9 =0000000000000000 R10=ffffc900006770e8 R11=0000000000084381
R12=0000000000000008 R13=ffffc900006770e8 R14=ffffc900006770f0 R15=ffffc9000067711c
RIP=ffffffff8169d61c RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6b14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000001b3201fffc CR3=0000000033378000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865
ZMM17=dfbd9b300c669cee 3cf0c9b568aa19eb dfbd9b300c669cee 3cf0c9b568aa19eb dfbd9b300c669cee 3cf0c9b568aa19eb dfbd9b300c669cee 3cf0c9b568aa19eb
ZMM18=578ae8053260d44a 366d237d5243f635 578ae8053260d44a 366d237d5243f635 578ae8053260d44a 366d237d5243f635 578ae8053260d44a 366d237d5243f635
ZMM19=0908000000000000 0000000000000076 0908000000000000 0000000000000075 0908000000000000 0000000000000074 0908000000000000 0000000000000073
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=3cf0c9b53cf0c9b5 3cf0c9b53cf0c9b5 3cf0c9b53cf0c9b5 3cf0c9b53cf0c9b5 3cf0c9b53cf0c9b5 3cf0c9b53cf0c9b5 3cf0c9b53cf0c9b5 3cf0c9b53cf0c9b5
ZMM22=0c669cee0c669cee 0c669cee0c669cee 0c669cee0c669cee 0c669cee0c669cee 0c669cee0c669cee 0c669cee0c669cee 0c669cee0c669cee 0c669cee0c669cee
ZMM23=dfbd9b30dfbd9b30 dfbd9b30dfbd9b30 dfbd9b30dfbd9b30 dfbd9b30dfbd9b30 dfbd9b30dfbd9b30 dfbd9b30dfbd9b30 dfbd9b30dfbd9b30 dfbd9b30dfbd9b30
ZMM24=5243f6355243f635 5243f6355243f635 5243f6355243f635 5243f6355243f635 5243f6355243f635 5243f6355243f635 5243f6355243f635 5243f6355243f635
ZMM25=366d237d366d237d 366d237d366d237d 366d237d366d237d 366d237d366d237d 366d237d366d237d 366d237d366d237d 366d237d366d237d 366d237d366d237d
ZMM26=3260d44a3260d44a 3260d44a3260d44a 3260d44a3260d44a 3260d44a3260d44a 3260d44a3260d44a 3260d44a3260d44a 3260d44a3260d44a 3260d44a3260d44a
ZMM27=578ae805578ae805 578ae805578ae805 578ae805578ae805 578ae805578ae805 578ae805578ae805 578ae805578ae805 578ae805578ae805 578ae805578ae805
ZMM28=000000800000007f 0000007e0000007d 0000007c0000007b 0000007a00000079 0000007800000077 0000007600000075 0000007400000073 0000007200000071
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0908000009080000 0908000009080000 0908000009080000 0908000009080000 0908000009080000 0908000009080000 0908000009080000 0908000009080000
info registers vcpu 2

CPU#2
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff854a97e5 RDI=ffffffff9adc4620 RBP=ffffffff9adc45e0 RSP=ffffc9000169f508
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030383838666666
R12=0000000000000000 R13=0000000000000020 R14=ffffffff9adc45e0 R15=ffffffff854a9780
RIP=ffffffff854a980f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c375db1 CR3=0000000116728000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d93af8919df95320 10ec8d3bb3f33cf1
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3f280f282
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3f280f28f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3f280f289
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3f280f29d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3f280f323
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3f280f401
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3f297c488 00007ff3f297c480 00007ff3f297c478 00007ff3f297c450
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3f34dd100 00007ff3f297c440 00007ff3f2970004 0000000b000c000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3f297c498 00007ff3f297c490 00007ff3f297c488 00007ff3f297c480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=ffff888036c41e00 RBX=ffffe8fefc7e7010 RCX=1ffffffff1b9a19b RDX=ffff88805d1bd99c
RSI=ffffffff8a2affc7 RDI=ffff888036c41e70 RBP=ffff88805d1bd910 RSP=ffffc900006cec40
R8 =0000000000000005 R9 =0000000000000001 R10=0000000000000008 R11=0000000000000000
R12=00000000001464b0 R13=ffff88805d1bd9b8 R14=dffffc0000000000 R15=0000000000000000
RIP=ffffffff8a2b000a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6d14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fffe62dbe00 CR3=000000001b358000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000c 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000306e616376
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f577f20f282
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f577f20f28f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f577f20f289
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f577f20f29d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f577f20f323
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f577f20f401
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f577f37c488 00007f577f37c480 00007f577f37c478 00007f577f37c450
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f577fedd100 00007f577f37c440 00007f577f37c458 0004000b000c0008
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f577f37c498 00007f577f37c490 00007f577f37c488 00007f577f37c480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 00000000000001a4
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000