last executing test programs:

1.960682403s ago: executing program 2 (id=178):
mlockall(0x1)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x400, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f00000be640)={0x829, &(0x7f00000be500)=[{0xa000006, 0x0, 0x0, 0x1, 0xfffffff8}]})
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fsopen(&(0x7f0000000000)='jfs\x00', 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
mkdir(&(0x7f0000000300)='./file0\x00', 0x4)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00')
r3 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0)
copy_file_range(r2, &(0x7f0000000000), r3, &(0x7f0000000040)=0x8, 0x2, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
name_to_handle_at(r4, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@FILEID_INO32_GEN={0x8, 0x1, {0x10, 0xe4ac}}, &(0x7f0000000240), 0x1e00)

1.890753006s ago: executing program 3 (id=179):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f00000000c0)=""/151, &(0x7f0000000180)=0x97)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c0000"], 0x0, 0x5}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) (async)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r9=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r7, r9, 0x25, 0x4, @val=@tcx={@void, @value=r7}}, 0x1c) (async)
syz_emit_ethernet(0x7a, &(0x7f0000003200)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4e}, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "be6df3", 0x44, 0x2f, 0x1, @mcast2, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x4, {{0x7, 0x1, 0x8, 0x3, 0x1, 0x1, 0x2, 0x1}}}, {0x8, 0x22eb, 0x4, {{0x8, 0x2, 0x92, 0x0, 0x0, 0x2, 0x3, 0x5}, 0x2, {0x1, 0x4, 0x3, 0x3, 0x0, 0x0, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) (async)
bind$can_raw(r0, &(0x7f0000000000), 0x10) (async)
read(r0, &(0x7f00000017c0)=""/4090, 0xffa) (async)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4)
getpriority(0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000040)=[{0x9, 0x1}]})

1.540563093s ago: executing program 2 (id=180):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @loopback, 0x1}}, 0x24)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
recvfrom$rxrpc(r0, 0x0, 0x0, 0xe8ce25b3fffe2042, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, 0x0, 0x24040050)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_opts(r2, 0x29, 0x4d, 0x0, &(0x7f0000000280))

1.450825955s ago: executing program 2 (id=181):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000000)={0x2, r2})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000300)="0f015800260f01d166b88d008ee026470f0748b803000000000000000f23c00f21f83503000b000f23f836260fc7b607000000b805000000b90b0000000f01c1b9800000c00f3235000800000f30b99b010000b88e617cabba000000000f30360fe44b0b", 0x64}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.298852241s ago: executing program 2 (id=182):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={<r1=>0x0, 0x3}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={r1, 0x9, 0x30, 0x4, 0x5}, &(0x7f0000000140)=0x18) (async)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={r1, 0x9, 0x30, 0x4, 0x5}, &(0x7f0000000140)=0x18)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))

850.158051ms ago: executing program 2 (id=185):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
close(r0)
write$UHID_CREATE2(r1, 0x0, 0x1d8)
r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3a8, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3a}]}, 0x3c}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)=ANY=[], 0x9)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x17, 0x1, 0x1, "3271bdf0f2f20d55806b26b1d72197edb1439b1c4200"})

849.674445ms ago: executing program 3 (id=186):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=0x0, @ANYBLOB="ff"], 0x20}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000340)=[@dead_binder_done, @clear_death={0x400c630f, 0x2}, @request_death={0x400c630e, 0x3}], 0xdb, 0x0, &(0x7f0000000380)="4fec31bdf1918a94806c7e208bd8e71b841ff78e423c2c670eff32d4237b88d5ab3226b0f59a3f10c7df8f665eca57505a7476c89d4a1b9a162b41d99e8f9c8167498e78a33dae049a9837a93602b01a8e2a718cc109088a6f402268a9526bf93b0aa25c6c45ec93784749332d2ef3dba70acc4e7057fe149db32b14d5e44d8881f13e2b2dfc4b1672689f51f2421afb0ad9a60d6ce68b029313a8f23dc683c835c1200c8ca4673083a709a43493ba2dd410f47bf98f37a497f33073441869ecdc305907687a7931bc45bc1a00818b1535c45710422ae56487dda1"})
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0xd, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

756.406515ms ago: executing program 0 (id=188):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8, 0x200200)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={<r3=>r2, 0x3}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x5, 0x2, 0xa, 0x2, r3}, 0x10)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000400)={{0x6, 0x0, 0x4f, 0x80000000, 'syz0\x00', 0x3}, 0x1, [0xfffffffffffffe01, 0x2ec, 0x8000000000000001, 0x5499, 0x6f8b, 0x40, 0x3, 0x8, 0x7bcd1ca8, 0x9, 0x3, 0x0, 0x1, 0x8000000000000000, 0x5, 0x9c, 0xd7e, 0xb, 0x6, 0x6f, 0x4, 0x8, 0x3b, 0xfffffffffffffff1, 0x4, 0x0, 0x10000, 0x1, 0x80, 0x800, 0x5, 0x2a, 0x883, 0x7, 0x7f, 0x1, 0x100000001, 0x1, 0x3a9, 0x10001, 0x2, 0x0, 0x5bc, 0x8, 0x66, 0x0, 0x5, 0x5, 0x9, 0x4, 0xbe7, 0x7, 0x8000, 0x5, 0x1, 0x101, 0x100, 0x1000, 0x5, 0x7, 0x6d, 0xffffffff80000000, 0xf36e, 0x5, 0x7f, 0x2, 0xa, 0x9, 0x81, 0x3, 0x4, 0x4, 0x9, 0x2, 0x3, 0x1, 0x5, 0x6, 0x6, 0x1ff, 0x0, 0xfff, 0xb2, 0x80, 0x5, 0xa0, 0xfffffffffffffff9, 0x6, 0x8000000000000000, 0x0, 0x10, 0x7, 0x5, 0x5, 0x5, 0x6, 0x7, 0x2, 0x4, 0xfffffffffffeffff, 0x6, 0x0, 0x3, 0x92a, 0x8, 0x8, 0x9, 0x8, 0x6ef, 0x8, 0xfffffffffffffffe, 0x80000000, 0x3, 0xcbcf, 0x1, 0xd000, 0x7, 0x400bed3c, 0x8, 0x7, 0x1, 0x3, 0x2, 0x300, 0x2, 0xfffffffffffffe01, 0x1ff, 0xfffffffffffffb5a]})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f7465616d"], 0x110}}, 0x0)
finit_module(0xffffffffffffffff, 0x0, 0x1)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c220000100001040000020000000003ce47cab8adcb209c7f00000000003a1c876e732059ddfafcd26e2bcac0b4efdaaf71b5ce2cf3600b7a5ec2e39709648258a47f4be9f956c95646516070c1ab0b957d9271cf19ad40a9a0125bed7a3edd29726e925b5cc9da6c1f4e0dfc92faee83e1d3e657800a7447cfae1dd9db8fdd5a3c4e01f81fa251c54ddaed31c8b2f594787c8b90f28217f77a8e73217d017e", @ANYRESOCT=r4, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)

756.172954ms ago: executing program 0 (id=189):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r1=>0x0})
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000280)=0x3)
waitid$P_PIDFD(0x3, r4, 0x0, 0x8, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x84c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x818, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x337341fef48d726c}, @TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x3, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x3, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x8, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xff, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0x1, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x7, 0xffffffff, 0x9, 0x2, 0x81, 0x9, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x6, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0x5, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}, @TCA_TBF_PTAB={0x404, 0x3, [0x2, 0xb, 0x1, 0x116f, 0x8, 0x4, 0x4, 0x40, 0x1, 0xf, 0x3ff, 0x3079, 0x200, 0x9, 0x8, 0xabce, 0x7, 0x400, 0x4, 0x6, 0xc, 0x8, 0x0, 0xd, 0x0, 0x2000000, 0x80000001, 0x2, 0x10001, 0x1, 0x1, 0x2, 0x5, 0xffffff81, 0x4, 0x7, 0x80000001, 0x8, 0x3ff, 0x3, 0x2, 0x1000, 0x40, 0x1000, 0x7, 0x7fff, 0x5, 0x8, 0x40, 0x7, 0x6, 0x5, 0x5, 0xe, 0x5, 0x6, 0x5, 0x6, 0x8001, 0x0, 0x4, 0x9, 0xa7, 0xe, 0x9, 0x8, 0x3, 0x1, 0xbd, 0x7, 0x6, 0x9, 0xd, 0x10, 0x4, 0x3, 0x8, 0x3, 0x8, 0x3, 0xf, 0x1000, 0x0, 0x3, 0x5, 0x40dc, 0x0, 0x89, 0x7, 0x3, 0x7, 0x40, 0x5, 0x4090000, 0x4, 0x200, 0x6, 0x7, 0x1, 0x5, 0x81, 0x1, 0x800, 0x3e, 0x80, 0x1de3, 0x9, 0x80000001, 0x5, 0x9, 0x4, 0xffffffff, 0x1a, 0x2, 0x2, 0x1, 0xff, 0x4, 0x0, 0x9, 0x5, 0x9, 0x2, 0x5, 0x3, 0x2, 0xffffffff, 0x7, 0x7773276c, 0x7f, 0x8000, 0x4, 0x2, 0xfffffffe, 0xd, 0xf11, 0xd, 0x9, 0x6, 0x5e7c4a39, 0x5, 0x6, 0x22f, 0x2, 0x6, 0x3, 0x6, 0x0, 0x1ff, 0x6, 0xfffffffc, 0xe1, 0x7, 0x4, 0x7ff, 0xa2, 0x5, 0x3, 0x4, 0x7ff, 0x6, 0x4, 0x10000, 0xfffffff8, 0x24, 0x2, 0x3, 0x5944, 0x1, 0x1, 0xe, 0x7, 0x0, 0xbe70, 0x2, 0x7, 0xb9, 0x80000000, 0x0, 0xb, 0xffffffdf, 0x5, 0xa60, 0x4, 0xff, 0x2b, 0x8, 0xffffb2cb, 0x892, 0x9, 0xfffffac7, 0x2, 0x1, 0x1, 0x6, 0xc0ef, 0x40, 0x6, 0x8, 0x6, 0x3, 0x7f, 0x3, 0xfffffffc, 0x6, 0x0, 0x5, 0x42c3, 0x10000, 0x2, 0x1, 0x10000, 0x6, 0x2, 0x0, 0xe, 0x1, 0x1, 0xff, 0x8, 0x284, 0xcd4e, 0x9d, 0x0, 0xd6, 0xfffffffb, 0xd6df, 0x800, 0x71e, 0x5, 0x3ff, 0x5, 0xff, 0x2, 0x3, 0x9, 0x1, 0x3ff, 0x8, 0x9, 0x7, 0x9, 0xd, 0xca, 0x8001, 0x9, 0x6, 0x6, 0x7, 0x2, 0x7fffffff, 0x9, 0x3, 0x5, 0x3, 0x1]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x84c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)

700.646522ms ago: executing program 3 (id=190):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r2, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e1d, 0x280000, @dev={0xfe, 0x80, '\x00', 0x19}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000010)
getdents64(r1, &(0x7f0000000b80)=""/111, 0x6f) (async)
getdents64(r1, &(0x7f0000000b80)=""/111, 0x6f)

700.213725ms ago: executing program 0 (id=191):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0)
ftruncate(r1, 0x3)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012)
recvmsg$can_raw(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/34, 0x22}], 0x1}, 0xf0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0xb1f, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x1b}]}}]}, 0x3c}}, 0x400c4)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x1, 0x0, 0x4}, 0x2c)
r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5)
accept$ax25(r8, 0x0, 0x0)
gettid()
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r12=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000840)={0x2c, r10, 0x1, 0x0, 0x4, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)={0x208, r10, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x138, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vcan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.]]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '#\\/.(]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x172c}, @ETHTOOL_A_BITSET_MASK={0xc0, 0x5, "abbc288bed4b2d0c89c5df51b462ebc5757cc1246ddd03778a22859e4e7c841a14726cdfed988828839779ea8ff56c99c1cd27e8120092d2062c85c79749e7b7d97a8e418d78fd8fab541337edd344383b151f9c023038c3237e0d2fef06760da7d2554d1c1be6f0fad4a9a916d94488726842381225c443f288fe3f5bd0724161288fc99f9900d48389addfde02b216cd84744a1cd5c0955e8daf3d2ab518daa66ad8d6745bd6f67c09b352edb2ab8fd7eb8aa0ec78d2b1925e3eb9"}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x50, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xe2-&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'fq_pie\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000)
r13 = socket$kcm(0xa, 0x3, 0x0)
sendmsg$sock(r13, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r14=>0x0})
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x4d, &(0x7f0000000280)={&(0x7f0000000140)=@can_delroute={0x1c, 0x19, 0x200, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0xe13ce9dc386cb52f}, [@CGW_SRC_IF={0x8, 0x9, r14}]}, 0x1c}}, 0x0)

699.832075ms ago: executing program 3 (id=192):
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0x5, {}, 0x1, 0x2, 0x4}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x80000001}}}, 0x118)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a6c42)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600"}})
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)
r5 = syz_clone(0x5104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)
r6 = syz_open_procfs(r5, &(0x7f0000000100)='numa_maps\x00')
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
getrusage(0x0, &(0x7f0000000000))
sendmmsg$unix(r8, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100f08dec27", @ANYRES32=r9, @ANYBLOB="2e003300d000000008021100000108021100000050505050505020000004250301640f3e01017606030c060000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846)
read$FUSE(r6, &(0x7f00000004c0)={0x2020}, 0x2020)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/3465], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

587.835182ms ago: executing program 0 (id=193):
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0xc8, 0x8, 0x6, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x1c0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5"}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c00080008"], 0x178}}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c00080008"], 0x178}}, 0x0)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x48302, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x46a00, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3b)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f00000002c0)={'\x00', 0x2, 0xe, 0x7, 0x0, 0xff00, 0xdddd0000, 0xdddd1000, '\x00', 0x9fef}) (async)
ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f00000002c0)={'\x00', 0x2, 0xe, 0x7, 0x0, 0xff00, 0xdddd0000, 0xdddd1000, '\x00', 0x9fef})

587.625504ms ago: executing program 0 (id=194):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'team_slave_1\x00', &(0x7f0000000140)=@ethtool_wolinfo={0x6, 0x813, 0x0, "e27353083536"}})
r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req={0x2, 0x0, 0xa, 0x7fff}, 0x10)

527.013024ms ago: executing program 0 (id=196):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000043c0)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x9, 0x8, 0x4, 0x7, 0x5}, &(0x7f0000004480)=0x98)

300.349996ms ago: executing program 1 (id=199):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000080))
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r5, @ANYBLOB="0b1b050000000000440012800b0001006970366773650000340061b485028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010)
sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0)

297.054322ms ago: executing program 3 (id=200):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280))
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r3, 0xaea2, 0x100000000006)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"})
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0x1)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000b40)=0xe)
r7 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r7, 0xc0884123, &(0x7f0000000040)={0x7, "22137db85f41ef29adb4b040d114e316de8eb9b938318fe290e89d23c321b297713a54e97dfdf1884a1db3938874f2668385bc34e2b68afddd9da92f27310cea", {0x5, 0x6}})
r8 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f00000002c0)={<r9=>0xffffffffffffffff}, 0x80)
pipe2$watch_queue(&(0x7f0000000140)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r8, r10, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r8, r9, 0xb3)
keyctl$KEYCTL_WATCH_KEY(0x20, r8, r11, 0xa6)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000300)={{0x1009, 0x0, 0x0, 0x80, '\x00', 0x8}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0})
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r5, 0x0)
r12 = syz_open_dev$tty1(0xc, 0x4, 0x1)
close_range(r0, r3, 0x2)
ioctl$TIOCL_SETSEL(r12, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x5, 0x2, 0x40, 0x204, 0x300}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x20010, r12, 0x0)

210.541181ms ago: executing program 1 (id=201):
syz_open_dev$vim2m(&(0x7f0000000040), 0xd71, 0x2) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@arm64={0x7, 0x0, 0x9, '\x00', 0x800}) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async, rerun: 64)
r0 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) (async, rerun: 64)
r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) (rerun: 32)
preadv(r2, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) (async, rerun: 32)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0xffffff94) (rerun: 32)

210.255692ms ago: executing program 1 (id=202):
r0 = socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0xa002a0, 0x0, 0xf, 0x0, &(0x7f0000000100)=""/15, 0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0xfffd, 0xffda}, 0x40, [0x6, 0xc95a, 0xfffffff7, 0x9, 0x7f, 0x80002, 0x801, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x3, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x3, 0x24, 0xfffffffd, 0xfffffffe, 0x4, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0xffffffff, 0xa, 0x0, 0x1000071, 0x7, 0x7, 0x80000001, 0x0, 0x5, 0x6, 0x91, 0x7, 0x0, 0x3, 0x5, 0x7, 0x8, 0x0, 0x1372, 0x3, 0x2005, 0x6, 0x8, 0x4, 0x40000001, 0x40], [0x10000004, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xc, 0x2bf, 0x6c9, 0x9, 0x1, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x1, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x4, 0x4, 0x4, 0x6, 0x4, 0x19, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0xc681, 0x2, 0x7fff, 0xffff, 0x2, 0x7f, 0x9, 0x101, 0x10005, 0x4, 0x1, 0x7, 0xb, 0xf, 0x48c9368e, 0x2, 0xff], [0x4, 0x4, 0x0, 0x64e, 0x3eb, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x6, 0x5, 0x5, 0x2, 0x1001ef, 0x5, 0x8, 0x86, 0xf, 0x665, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x4, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0xff, 0x53cf697b, 0x205, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x2, 0xfffffff9, 0x0, 0x6, 0x5, 0xfffffffc, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x1004, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x8001, 0x6, 0x81, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x8ad, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x9, 0x2, 0x14c, 0x40060a7, 0x26, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x2, 0x4, 0x9, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0xe, 0x1, 0x10000, 0x1, 0x800008, 0x2b91, 0xa1f, 0x7ff, 0x3, 0x1, 0x6c1b, 0x8001, 0xb, 0x5, 0x200c, 0x0, 0x200, 0xffff3441, 0xffff0001]}, 0x45c)
openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180100002100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
write$char_usb(r2, &(0x7f0000000040)="e2", 0x918)
ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400000100626f6e640000000014000280050001000500000005001b0000000000"], 0x44}}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x10, '\x00', 0x5, 0x40000003, 0x200, 0x8001}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4005820)

139.81362ms ago: executing program 3 (id=203):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
r1 = dup(r0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38011, r3, 0x0)
dup(r3)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x61, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2, 0x2}}, "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", "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"})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r7 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000001280), 0x101001, 0x0)
fcntl$setstatus(r7, 0x4, 0x40400)
write$6lowpan_enable(r7, &(0x7f00000000c0)='0', 0x1)
ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000980)=0x4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

78.421591ms ago: executing program 1 (id=204):
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x1}, 0x18)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
close_range(r0, r1, 0x0)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xbf)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0xf319, 0x5})
r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x5000, 0x1, 0x9, 0x4, 0x0, [{0x8, 0x84, 0x3f, '\x00', 0x2}, {0x2, 0x80, 0x7, '\x00', 0xc0}, {0x1, 0x6, 0x1, '\x00', 0xff}, {0x25, 0xff, 0xd8, '\x00', 0x2}, {0x94, 0x6, 0x4, '\x00', 0x7}, {0x8, 0x1, 0x4}, {0x5, 0x4, 0x5, '\x00', 0x8}, {0x55, 0x7, 0x6}, {0x5, 0x7, 0x7, '\x00', 0x7}, {0x5, 0x9, 0x1, '\x00', 0x5}, {0x9, 0x4, 0x9, '\x00', 0x2}, {0x6, 0x5, 0x6, '\x00', 0xe}, {0xa, 0x1, 0x0, '\x00', 0x6}, {0xff, 0xbe, 0x2, '\x00', 0x7}, {0x4, 0xa, 0x0, '\x00', 0x4}, {0x3a, 0x3, 0x3, '\x00', 0xb}, {0x9, 0x0, 0xd, '\x00', 0xff}, {0x7, 0x85, 0xf, '\x00', 0x1}, {0xf9, 0x8, 0x2, '\x00', 0x6}, {0x8, 0x6, 0x1, '\x00', 0x6}, {0x2, 0x4, 0x5, '\x00', 0x6}, {0x38, 0x7, 0x8, '\x00', 0x9}, {0xfd, 0x6, 0x2}, {0x1, 0x9, 0x3, '\x00', 0x61}]}})
setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000340)=0x4, 0x4)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000003c0)=""/23)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000400), &(0x7f0000000440)=0x30)
ioctl$BSG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0)
pwrite64(r3, &(0x7f0000000480)="24891741da5e2ce173573451fa5484e64f510eb0f5cde54936a8e272de164bb428d8606bf23dd4744ac320573d6973d15d6121e7a85901ed15dc73b4e82beeb05ed16a8e8cb4a6c433f3bf62a38be03fbc499e0e5666d77fb3dff61f9fc77ae77b3030e383654fb471cce7cc45c0a934b022d8ce85f57e0c9c04fcb71aa50f7b9db2585b43a6116fc7ad16b17b82f9375e0c145702769514bd905ed494c3cab7fa420eab22c376760604770c13d1159bf0eceed81d110de09ea8429d236337db7fa4e8b7b5707f9a5b13ff514697c20d72db7e558aa323b96c35d7788253585760e904bd661efc963c7789598a95ba666e7f670efaf7962775ec29334125ddf14b07e896af613e668fc0c7f78bdcd42a79bcdf325e0c84ab3855b3b8ac992187637f1f45d875b84a7418bd12ffb1a3093013d0ed57ea2d00598077d567abb52e7348fe5706ddd5118ef84925778f8433ace4dd761e7d686e41ab15f5bec81a240a677d57f66e13cc1e0de7b24650f31e1c6cf8b37dd74cf44f0515a838f67f9ab22f5cb030a73d309d0a2f2e85e352ca2eaf3bec5ba1b55e9982f169e7b01b966d5ad8f945c1536357f2d6f321c20af63c68479eca5aee99bf30462a1a706482c1548f7d0f131a3484a60cbbd7645e4e1648be7fb27d19e70c7c0766d88d5334328e93779ad4942b266e78273935c0cf3b00cea97068c2aba4046eff4610b1318da9f971d327544d5486f4e22999f9e0ec444c308f252517565ebe74ac51b19ba4d3f5997b86f91bc06acea2d782a8f322a63b9f2e43e2bcc5e02d0cef004fbb3692844641052031474de777d24fb672434237624c7c2913587eaf9dbb2ec5a8bdc426b8d44a5fdcc576fc0f4943ae697619177325dbb74975017fc6c991041bf77cd8eaf0514c96b8705c5312abc8dcfbd31604093194520c11bf17597394b09c983dc7a00165e85159e495f5c8f0d8df0b682f5f1d4106424d1275bb9baa85266c4ccb04190f6065a6fc8ceac3a514a5992314738e1fb639815d2661e6e0fb016ea40125c3ede194232d83e9d2c5b24047e595ee2fe852bb85430ceb04ecba114aabf16de6dec8b01b1182d05baba21d7b811783e008f2f69624174661747884d4fb01a10ebf812b55af040c6e5e23762228803d9f3f655098e251f630da09dd2764a2be2bd91f344e39b7a2aa67be3a9ea17e3ed72d961d7180289cb04102792cd8e7c48be2b9d41f763a7a90593f649cf684c559f59831792ea9a96acb11e9955ef0e8dd252c6133137f776c9b342fc86a30d51e52a6173045c3ffc8da3b24f92b1de1de43224a553636a7dea74195790f5b450970a794664ea35d0fecfa3f5d625e9d73ea60142aff58c6afbac6f21e20c9a2500e5e657a4f3483695e5744014a53bbb0bebdc168afe20ab3b00eaa3c5affa2db218763868d14330568320c18402b5742924044927964cef5fa292359e9754b5b7f9df8f6452bf234de6df7adf8912a9d148c990252fb7ba4b08ac04354ae7fbbf6ccfd32bc88915fa291b20999c254d2ca66d3c8c01c86b6ff1609abd0d40a80d67d23a24d80c854dbf467331074a69324811d1254aac195902d46c55d670ce9a238179293228c2b2bfd135a36710abe74b602001b062c515eedb825358d33ca9aeb0c8e40027fc627d1c6b30fab35f6509af3fea71813b53a1e7d5b5c789a0af29ba1f9f2f2646c866405bc32e4a6a4e5361d917698e70c79631357d0873955bc5f6193f0c8eacacab243cb09101befe7c7cfc1cd61e04b46592b5a0553855003cbce808009569e634ca7e804fb0107c472e0471c82dd23dd483d7547a0489949d48e570835ff787b21957024ee8f5abbe444f5832fee974984071ac16b1f4a544d0df628b3e15ca0b1f9644479716d9c8bf02bb5a65a5611e3d8989e88f23d2486ec16d5ab2073711061b59d3ebae849869934251edc74f6f96fe84a9354ae861a1841299a0c360e150241c7ff76cc6acd8ec7979f91ea4ea1203bdb74114a24c54fe5511136075a3b141dc7f4b80de9ce3a4646e2ade684617068314d83638d6e0b732644c954b7b34a564321037dc4c7ba17346c82bdabeb01fb40f73e9b3d17af4c3a1f03b21e63f87247b9655f811d937413683585fffa7aadfbdf2f6d95fef71585cd29bb866b535778e632c8734d2005b727e7fde0f9c6b7444a0572af58d92fea7991c91e1da5a0d3e51332f95dff8db0cee4ba3f6e40b539c73f9eb9205f932a06994cef8d85516e7d1cde0816b5bdd93266926a4aee5364e75593f5ff117d40e9abc3891efc19c3f6ca847e6918657aa4a11b9c946a4a2be8993a86427dde5f1753bae1eda7687a7531683a1f1d6a3ca53fbcc0cf5856f047ba6c9868004b4f29ff337c01abbafe3046dbb0f78d0f02d8c8351d64e7e5f1d1748e8b0d7188c60e3689daec9580dcd7e1a8e4aa80601ee8da5a82fe79a8be4f0aa5b6db594e39c097adbbbe45386d4bb6b2524018ca53677061a0d7882eff7b84ff4a8eacd377922f5c57c6ad895931d57f0788fc9f2e998263d904c7b0cf13f12464144713f71c936e61e5b5f89beaefeaa8cce94fc7d1860b2c317476280d3bcf925bf1ef569b98af6c823949c655b6266588e22df40b51e0a61ae88aa5f4cd1faad69635c62fd1cadf1233f34f66ef1906d5472dff1d0d890bc69344ba0c8f13590cc0209b7a1c1d3c32048f38bb43551eca37000e4eaf9c3ee90868d49ac086b54816451e1e01e06eba339dd061b456f78893b6f1a97f101755994a42f16e6b619c0e63bb234b39467e1a8423acbabd15244296a6a2822d834ad4e014308567c3fdeca9fa2a1ee86f853f40a7341b757344a3f1edcbabe64fdbfa20ac7f95da77a12569dc896ecb9db5f44f22b7886dcd85d5f2b62479b3bec82edfd7dc9462ee13fc23e3f7ee3a17245a0ad1d290b5ec1f2c7c8079d93f5962e1f5efd9862c025719246fcb84a46e25a3bb308d6dbded25d004578b2097a9e62f3528f6c24b255d9d68fa1ec6d84bfa716171d7bc406dcbdc4e5cae2db1c4a5c9773d54d89e71df0532a791e72ba6b067662acd3f8971589a71ee7f355c8c7de83e56775afd757e5d6207a89b9e29c43a77e5f178c89c6b05f07884b16c2b5c0d988425f4a9560905d4a09d6c082e136e5d400c76ecd47a0289075c3ee8cdb0c9456dbde740009302a1adf95d641b2ab34e564698c086e067284f3ae6dfb7c8dc308761a1b4dd7390f21aecfe28e8fa95f951f25a46d105b02841a4bf8c2f859ae6219746137b3f0d9b01ecae54a054480ab6b884790d6e731a0cbe51703991cc1959dc774691456d663c182795fe9f9b4f41a58cd96c1a216c8ce02d247bf654a337b48cb84c9af8479786e8785d57708866fe76cad422fccb017d829fdc12ab407463fc2155b5ded36af01d8e97799e64622c3f806b5b2fcd042d9d145d1a278f74659dd1e46248f00c872fa1dec6c6ae930d9ec08658ab526d598842b8124fe06bb210229f33a0cc204a4f907e5e505dfe743ffb7f9d3705f1ad2678cfc257296ad020cff8959a9e03247a7b1ad23f0101b112050a389410f05c969c4d239287e816cc4e089c268547511a5499eb65ad913cb8993c712a819c99fd167d8244d7ebbf5ebce2e0686c4b8ddd050a4a0abe92db555b37bdd5b33e831a319f74355d3a3c1f4776f9186e452aa6c1f678d1734d7552eb8b34375b31e8ff7670f9c047ced67f047a9284fef6faabcad96f46775ac021593d218dae6c113aa7408b364765fb6164ddd045e0c3f0b89ac4371d7c130419e84082315f4d443076f1786f8d3ee95942d785809f9888d10b3a01d6571ce1238bf7b467a07c2d1fd9880dfbefa55659c31d23c1a5713331d33c2a73c0b828f37eed7b81fd7b4dfc133647d68db2d613b0da85d0de97d8d9cd29362981f6a95991289207891e388006f8021096795baf8883689a9bb98cfabf61889b787861de68b90e8d9e0af8bd45b1a783ead386e60fa24245ca1f09a22c29ecdf85e461ab3337e56970c88976abb6d390787b791b55ef3a5f83ad9ce8355b52c38ba4d3fda627de2267a82b0a5e89d2a959d5ef29305f1b2751483010e77105f3113a291c510a2bbac6a2b586db507455680fa0d49c994abd8e9b1a66dafb8996edffe9746ed250eb529e1560f12b905176598b4baa2eade86e7874d92f168cc7b033cbc2c65df9f10c7fc5ad4d028ea40d0ba89a6f25f0fcff2764a57d30f89662ed1b212de51aefc322f3d30ee6e76be724b5494833cc4eeced98db938cd4ac38baf1577e0c0a52d40c34ec36e750c69de7947b3ef3708313104dda5eccbfb1a4a3181b35e02fba08f441ceb3d1b069062b89847d9c5adaade959893ca40205825e128166add9483778458172ee811549550430a4c9d1836d944305917df6d591298d7f268d834b4fe043393659eedaaca1712206434e6469b8c380a449ef7f3a958e8866a1899dc3eb45478d69b6ddded098e6ff327397055480bb91255a32e84464fc0c5a6efefc12b54b054f30e7d0291f31ea67ebbe307d45d6576afc049eecab76d6df65081a5677eb4928d6d49687b3cf3c58e1f7e8062b9086bd4806fece2d02d790b29e6910610ce608663ffc5d4f7ffefe2bfbb2b3da8e974603647eec3d9d89cb652c9b311e0fcd0bfc62eb2214332e038ca9ea5cde402737bea8e27f0b1f72f25b10ff403027626cc8af56fbfddb3958a2d42c3b25140bdd4570212e1e0872f81d5756fae56cc0837a90b75972c35ceb7db8e0105113aaa917030cf3ae955936d05ba2a61449fd948e8c4eedd815038e281f04dbda039abef466530e80dadb14d0ed6e627609324bcdd953c17b9d2aa8e753bccc8e72707a493bc13f7bcb1de59be3608fca2b7264b5d3ad625fbaec46b9f1ab98faeba75713bc8ba427c559c98952675c87a360291355d98e15dbd5f206b7504b665f5d4f1be70ebfa305da6813a79a9d8d07e0fa13b1159fa2ca9b224e403a84763c08709f533ee6d2bd524fea7e99c714cbb928977abe0937e7cc37b3d3a4100a4d255ad3ac96b7e4da9128f59829b0092b42b5dbccb48b197a4462ef5a3764e6ad575a032a9d711c2bc1534865f71f0f34fbf3492c95d677673c3f470a45eed678f99430b34aa8b0f0cf663d51c414fd88fafb6fb5eba06fec89c9b9e36cef807216bc45333067090ef63249301345aa8ed54a27fa91dd92fd7635ef7dd6c7ecb2ae345050386542e14a04f11fcc024e0060f28f9390c5701f94ef690977a3945ba9683947fc3be185476f9209d1efd230449532bf5dfcc62d08a72df30b2bdd2bed4fa94deb67167b7d5e8fc9a29692f4c9132cfab7a6a6a2374d0018fc1a591e2c3b2dfbf5799cae240a204a53f0d07c8c39576f7d5e17bc243d0e1bfbdf9e6b35b62c36666a800ec7323fce2a1cfc5476fb2e6a33498721327220dd9f544090e88bbcda9ae18ef10bf701596b9970cdb6be9aff88ecf11a29ed4efb18d2aea67afe57c719d2740132a16be33b63fea384f5f71cd65edcdff45b1028aea25524c0b9a45234f6bfe2dfe4dab9249c17e3dfde6b9c2e2d4342679807756c395ab56c1abb4929b0e505f6948d4578bb34ac3629c407a9aa289ecdc7bcd12f1d15f9aa78f69b873f5bc956644a0baf8ced92ef38f58834d551e514708f97e4acf26cef38fc85ceddd6a242d8949b5582341077bb29fc0e6605412465b24b963008036e134fee393372c387d33160a8c646cb83e20eda5d553488f5ddfbcce24ddb77d49ff5", 0x1000, 0x7)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000014c0)={<r6=>r5, 0x9, 0x100, 0x8})
sendto$inet6(r6, &(0x7f0000001500)="1359383cdde2d6783d5512d9e55aa9436a146be8c32c9e67ce117816d150ba4038e67510f346b123fd", 0x29, 0x8840, &(0x7f0000001540)={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x37}, 0x7f}, 0x1c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000015c0), r6)
sendmsg$SMC_PNETID_GET(r7, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x34, r8, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000010)
sendmsg$tipc(r3, &(0x7f0000001940)={&(0x7f00000016c0)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x2}}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001700)="bcb57e1f0d065f52e0dad22b18b3a19ca155ae6f4e3e96f76edaf8c3b48f968b27ac85466dd18c9be3d07987af895e16d5d44b885cb8f7314b16ebd13434a38b2cae5e62b195c48f37fd17ce80793067c76198d41dfb47df80515e817378b59f2df09a271f2bc2d5d75adc6be028c8938e1848b72295771f3a6c407bfc4628aaac8ed8ff2dd8e190f5006582f2e5aa17d14321e853007c602293a34bc3b021d93632f1b8223883b36e8d3a90531633c7243b5066c9986c62d8fcd80bc86dc96d531213dee2bbd19a5333814ae0", 0xcd}], 0x1, &(0x7f0000001840)="3744a7e272605d3e4766d1e16577ce2698ee6a0b09d0b50c8af0151702e7b49c63dddbe1ec9a2e1e0f73aa6cfdfc8c35f1cf112929465fe16725eeec871ecb79ae216d58098c2d30b77c1404ad4ff71ed666252b783ba55e731b1c2967db2dbc2faff35abcbfc6ce5593015be0ea07dd1ca0cf6b6b9355867f9fe0ae2f0086d908253201a679d9345a6e9d7c11efa8e94a602c1d29010c5bc6a65f4e5c09cf30aa493eb90268ecac27bc65b1fae343c0ea39d3b35f67f15ce69653d53483068c820616543fb1c7eb9e43d0975ece6d446faaf0facc164db0dcd4db32", 0xdc, 0x40080}, 0x0)
fstatfs(r6, &(0x7f0000001980)=""/4096)
r9 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCGSERIAL(r9, 0x541e, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002980)=""/157})
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000002ac0)={r2, r5})
ioctl$sock_inet_SIOCGIFADDR(r6, 0x8915, &(0x7f0000002b00)={'veth1_to_team\x00', {0x2, 0x0, @broadcast}})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000002b40)={0x1, 0x800})

78.100841ms ago: executing program 1 (id=205):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0xd8dd4ca10dad9f56, 0x38)
r1 = socket$inet6(0xa, 0x80002, 0x0)
r2 = socket(0x2, 0x3, 0xff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, 0x0, 0x10)
setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f00000001c0), 0x4)
write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)={0x38, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r7=>0x0})
syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @loopback, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="40003a000a000200ff"], 0x30}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), 0x0, 0x9f, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x28, 0xffffffffffffff3e, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xa0, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000400)={'team0\x00', <r9=>0x0})
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000440)={<r10=>0x0, @multicast1, @empty}, &(0x7f0000000480)=0xc)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0)=<r11=>0x0, &(0x7f0000000500)=0x4)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'gre0\x00', <r12=>0x0, 0x80, 0x700, 0x3, 0x10, {{0xd, 0x4, 0x1, 0xd, 0x34, 0x64, 0x0, 0x99, 0x2f, 0x0, @remote, @empty, {[@lsrr={0x83, 0x7, 0xa0, [@multicast2]}, @end, @generic={0x88, 0x10, "1a18f3fa2312bb7adc4dcc64ac24"}, @end, @ra={0x94, 0x4}]}}}}})
getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000600)={@dev, <r13=>0x0}, &(0x7f0000000640)=0x14)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x178, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe05e18e27369e927}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4090}, 0x8001)

350.839µs ago: executing program 1 (id=206):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020)
io_setup(0x2, &(0x7f0000000000)=<r2=>0x0)
r3 = eventfd(0x0)
io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x100, r3, &(0x7f0000000100)="0000fd6000000000", 0x8, 0x3}])
io_destroy(r2)
r4 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newlink={0x20, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x20, 0x40e28}}, 0x20}, 0x1, 0x0, 0x0, 0x24008001}, 0x8000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
userfaultfd(0x801) (async)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) (async)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) (async)
syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') (async)
read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) (async)
io_setup(0x2, &(0x7f0000000000)) (async)
eventfd(0x0) (async)
io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x100, r3, &(0x7f0000000100)="0000fd6000000000", 0x8, 0x3}]) (async)
io_destroy(r2) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newlink={0x20, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x20, 0x40e28}}, 0x20}, 0x1, 0x0, 0x0, 0x24008001}, 0x8000) (async)

0s ago: executing program 2 (id=207):
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8010)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'veth1_vlan\x00', 0xdc})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r1 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r1], 0x1}, 0x58)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000500)={0x9, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffd)
r4 = request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)=')\x80', 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000080)=r3)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x10)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000240)=@gcm_128={{0x303}, "4a547732f0dacdda", "a17ce3052913c48073f3978159286600", "9d537c22", "eb774e297478fafc"}, 0x28)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000280)={0x3, 'veth1_to_team\x00', {0xb273}, 0x58})
ioctl$TIOCGPTPEER(r7, 0x40104d14, 0x200000000005)
add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000640)={0x2, 0x0, @c}, 0x29, r4)
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setresuid(0xee01, 0xee00, 0x0)
setsockopt$WPAN_SECURITY(r8, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r7, 0x5761, &(0x7f00000000c0)={0x8, 0x0, [{0x8000008, 0xfffffff8, 0x0, [0x3, 0xfffff005, 0x101, 0xa217, 0x1, 0x7, 0x9, 0x3d4]}, {0x8, 0x8, 0xfffffffc, [0x2, 0x6, 0x100, 0x3ff, 0x9, 0x80000000, 0x10, 0x5]}, {0x4, 0x8001, 0x81, [0x1, 0x3, 0xb, 0xa, 0x2da, 0x7ff, 0x772568a0, 0x8000]}, {0x7, 0xc, 0x2, [0x5, 0x3872, 0x5, 0x4, 0x5, 0x7, 0x9bf7]}, {0x0, 0x1, 0x7, [0x8000, 0x3, 0xa349, 0x1, 0xc9a8, 0x6, 0x0, 0x1]}, {0xfff, 0xfff, 0x3, [0x0, 0x101, 0x8, 0x8, 0x25, 0x7fff, 0x10000, 0x4]}, {0x7, 0x59b, 0x2, [0x80000, 0x7, 0x4, 0x0, 0x7fffffff, 0x1, 0x3, 0xffff]}, {0x1, 0x10000, 0x9, [0x4, 0x4, 0x2, 0x0, 0x9, 0x4, 0x8001, 0x60]}]})
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000400)="e092860cc31eee8e8216985b85f8ab7c824846fe51afec736400e1b34ddfe7d164813f86be1e9e3934f157a7594d9833dfbcc4b9c3a3e07921a754c84a85d7448ecd0d504288e6fd270d98db9c75fdcaceb44469512632a4bdbd178aa20fefaade2a92822e5a8f1b6a660f82d4c06ed95676500d9ab38984d71ef644d68287383c57b47b4f9078122a92532d", 0x8c}], 0x1)
r9 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r9, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}, 0x4008804)

kernel console output (not intermixed with test programs):

[   44.168506][   T40] audit: type=1400 audit(1761332795.333:60): avc:  denied  { rlimitinh } for  pid=5855 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   44.174648][   T40] audit: type=1400 audit(1761332795.333:61): avc:  denied  { siginh } for  pid=5855 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '[localhost]:45601' (ED25519) to the list of known hosts.
[   45.799574][   T40] audit: type=1400 audit(1761332796.983:62): avc:  denied  { name_bind } for  pid=5912 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   45.820157][   T40] audit: type=1400 audit(1761332797.003:63): avc:  denied  { write } for  pid=5913 comm="sh" path="pipe:[7249]" dev="pipefs" ino=7249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   45.838679][   T40] audit: type=1400 audit(1761332797.023:64): avc:  denied  { execute } for  pid=5913 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   45.846342][   T40] audit: type=1400 audit(1761332797.023:65): avc:  denied  { execute_no_trans } for  pid=5913 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   47.849796][   T40] audit: type=1400 audit(1761332799.033:66): avc:  denied  { mounton } for  pid=5913 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   47.863909][ T5913] cgroup: Unknown subsys name 'net'
[   48.015278][ T5913] cgroup: Unknown subsys name 'cpuset'
[   48.020951][ T5913] cgroup: Unknown subsys name 'rlimit'
[   48.215565][ T5921] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   48.908041][ T5913] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   52.076646][   T40] kauditd_printk_skb: 13 callbacks suppressed
[   52.076656][   T40] audit: type=1400 audit(1761332803.263:80): avc:  denied  { execmem } for  pid=5925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   52.287873][   T40] audit: type=1400 audit(1761332803.473:81): avc:  denied  { create } for  pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   52.301352][   T40] audit: type=1400 audit(1761332803.473:82): avc:  denied  { read write } for  pid=5929 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   52.311005][   T40] audit: type=1400 audit(1761332803.473:83): avc:  denied  { open } for  pid=5929 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   52.323507][   T40] audit: type=1400 audit(1761332803.473:84): avc:  denied  { ioctl } for  pid=5929 comm="syz-executor" path="socket:[6326]" dev="sockfs" ino=6326 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   52.342129][ T5293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   52.345339][ T5293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   52.348023][ T5293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   52.352016][ T5293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   52.354565][ T5293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   52.359362][ T5935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   52.363784][   T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   52.364953][   T40] audit: type=1400 audit(1761332803.553:85): avc:  denied  { read } for  pid=5929 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   52.368231][ T5936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   52.370061][   T65] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   52.374431][   T40] audit: type=1400 audit(1761332803.553:86): avc:  denied  { open } for  pid=5929 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   52.374467][   T40] audit: type=1400 audit(1761332803.553:87): avc:  denied  { mounton } for  pid=5929 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   52.374471][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   52.376242][ T5942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   52.376676][ T5942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   52.377395][ T5942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   52.378777][ T5936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   52.379226][ T5936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   52.380711][ T5936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   52.389550][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   52.398320][ T5936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   52.401541][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   52.419632][ T5293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   52.501266][   T40] audit: type=1400 audit(1761332803.683:88): avc:  denied  { module_request } for  pid=5929 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   52.564300][ T5929] chnl_net:caif_netlink_parms(): no params data found
[   52.724558][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.727335][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.729791][ T5929] bridge_slave_0: entered allmulticast mode
[   52.732960][ T5929] bridge_slave_0: entered promiscuous mode
[   52.737488][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.739778][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.742417][ T5929] bridge_slave_1: entered allmulticast mode
[   52.745140][ T5929] bridge_slave_1: entered promiscuous mode
[   52.817431][ T5929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.826498][ T5932] chnl_net:caif_netlink_parms(): no params data found
[   52.835214][ T5929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.838809][ T5939] chnl_net:caif_netlink_parms(): no params data found
[   52.882347][ T5929] team0: Port device team_slave_0 added
[   52.890582][ T5929] team0: Port device team_slave_1 added
[   52.949477][ T5938] chnl_net:caif_netlink_parms(): no params data found
[   52.984166][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.986397][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   52.994684][ T5929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.003421][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.005998][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.014541][ T5929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.145865][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.149104][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.152215][ T5939] bridge_slave_0: entered allmulticast mode
[   53.155964][ T5939] bridge_slave_0: entered promiscuous mode
[   53.203323][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.206293][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.209435][ T5932] bridge_slave_0: entered allmulticast mode
[   53.213423][ T5932] bridge_slave_0: entered promiscuous mode
[   53.217172][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.219413][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.221712][ T5932] bridge_slave_1: entered allmulticast mode
[   53.224297][ T5932] bridge_slave_1: entered promiscuous mode
[   53.249252][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.251624][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.254695][ T5939] bridge_slave_1: entered allmulticast mode
[   53.258590][ T5939] bridge_slave_1: entered promiscuous mode
[   53.264653][ T5929] hsr_slave_0: entered promiscuous mode
[   53.267015][ T5929] hsr_slave_1: entered promiscuous mode
[   53.344249][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.347040][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.349777][ T5938] bridge_slave_0: entered allmulticast mode
[   53.353636][ T5938] bridge_slave_0: entered promiscuous mode
[   53.399280][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.404291][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.448063][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.450722][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.453903][ T5938] bridge_slave_1: entered allmulticast mode
[   53.456689][ T5938] bridge_slave_1: entered promiscuous mode
[   53.460972][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.468411][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.495565][ T5932] team0: Port device team_slave_0 added
[   53.568100][ T5932] team0: Port device team_slave_1 added
[   53.573874][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.597467][ T5939] team0: Port device team_slave_0 added
[   53.616313][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.641781][ T5939] team0: Port device team_slave_1 added
[   53.679559][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.682716][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.691254][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.732541][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.735432][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.744999][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.754528][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.757093][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.765556][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.769458][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.772319][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.782372][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.787872][ T5938] team0: Port device team_slave_0 added
[   53.794522][ T5938] team0: Port device team_slave_1 added
[   53.862514][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.864733][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.873564][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.912077][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.914238][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.922050][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.955450][ T5939] hsr_slave_0: entered promiscuous mode
[   53.957914][ T5939] hsr_slave_1: entered promiscuous mode
[   53.960355][ T5939] debugfs: 'hsr0' already exists in 'hsr'
[   53.963827][ T5939] Cannot create hsr debugfs directory
[   53.997364][ T5932] hsr_slave_0: entered promiscuous mode
[   53.999533][ T5932] hsr_slave_1: entered promiscuous mode
[   54.002691][ T5932] debugfs: 'hsr0' already exists in 'hsr'
[   54.004395][ T5932] Cannot create hsr debugfs directory
[   54.094119][ T5938] hsr_slave_0: entered promiscuous mode
[   54.097008][ T5938] hsr_slave_1: entered promiscuous mode
[   54.099452][ T5938] debugfs: 'hsr0' already exists in 'hsr'
[   54.101859][ T5938] Cannot create hsr debugfs directory
[   54.302372][ T5929] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.320230][ T5929] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.346166][ T5929] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.361532][ T5935] Bluetooth: hci0: command tx timeout
[   54.388571][ T5929] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.441241][ T5935] Bluetooth: hci1: command tx timeout
[   54.441367][ T5293] Bluetooth: hci3: command tx timeout
[   54.451551][ T5293] Bluetooth: hci2: command tx timeout
[   54.464056][ T5932] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.474334][ T5932] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.480543][ T5932] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.488592][ T5932] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.551176][ T5939] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.557460][ T5939] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.563766][ T5939] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.572210][ T5939] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.650095][ T5938] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   54.656616][ T5938] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   54.663575][ T5938] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   54.669298][ T5938] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   54.698036][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.725661][ T5929] 8021q: adding VLAN 0 to HW filter on device team0
[   54.743272][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.746100][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.750573][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.753150][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.780613][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.823496][ T5932] 8021q: adding VLAN 0 to HW filter on device team0
[   54.837781][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.845914][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.848489][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.860268][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.862752][ T1197] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.877244][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.892573][ T5939] 8021q: adding VLAN 0 to HW filter on device team0
[   54.897940][   T40] audit: type=1400 audit(1761332806.083:89): avc:  denied  { sys_module } for  pid=5929 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   54.914713][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.917845][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.929598][ T5938] 8021q: adding VLAN 0 to HW filter on device team0
[   54.939680][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.942878][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.961140][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.964223][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.978795][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.981078][ T1197] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.010393][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.076910][ T5929] veth0_vlan: entered promiscuous mode
[   55.085553][ T5929] veth1_vlan: entered promiscuous mode
[   55.097336][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.113424][ T5929] veth0_macvtap: entered promiscuous mode
[   55.119293][ T5929] veth1_macvtap: entered promiscuous mode
[   55.139175][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.148203][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.151617][ T5932] veth0_vlan: entered promiscuous mode
[   55.165937][ T1147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.172333][ T5932] veth1_vlan: entered promiscuous mode
[   55.175022][ T1147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.185906][ T1147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.193900][ T1147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.209907][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.217567][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.258094][ T5932] veth0_macvtap: entered promiscuous mode
[   55.260749][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.264034][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.264594][ T5932] veth1_macvtap: entered promiscuous mode
[   55.288232][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.290957][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.307145][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.310676][ T5938] veth0_vlan: entered promiscuous mode
[   55.317463][ T5938] veth1_vlan: entered promiscuous mode
[   55.321623][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.328734][ T5929] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.329991][ T5939] veth0_vlan: entered promiscuous mode
[   55.343856][   T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.346615][   T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.352848][ T5939] veth1_vlan: entered promiscuous mode
[   55.357848][   T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.363658][   T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.418132][ T5938] veth0_macvtap: entered promiscuous mode
[   55.423358][ T5939] veth0_macvtap: entered promiscuous mode
[   55.434736][ T5938] veth1_macvtap: entered promiscuous mode
[   55.441502][ T1197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.444161][ T1197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.449185][ T5939] veth1_macvtap: entered promiscuous mode
[   55.510732][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.513895][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.516946][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.529801][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.536826][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.543188][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.550765][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.563134][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.576598][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.581489][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.585076][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.588504][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.605235][   T72] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.607967][   T72] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.644756][ T6021] Zero length message leads to an empty skb
[   55.648076][ T6021] netlink: 'syz.0.6': attribute type 1 has an invalid length.
[   55.651485][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.653953][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.679875][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.682669][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.700918][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.704293][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.711154][ T5997] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   55.719703][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.722228][ T6025] Sensor A: =================  START STATUS  =================
[   55.722239][ T6025] Sensor A: Test Pattern: 75% Colorbar
[   55.722263][ T6025] Sensor A: Show Information: All
[   55.722273][ T6025] Sensor A: Vertical Flip: false
[   55.722286][ T6025] Sensor A: Horizontal Flip: false
[   55.722325][ T6025] Sensor A: Brightness: 128
[   55.722336][ T6025] Sensor A: Contrast: 128
[   55.722347][ T6025] Sensor A: Hue: 0
[   55.722356][ T6025] Sensor A: Saturation: 
[   55.726111][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.726827][ T6025] 128
[   55.742836][ T6025] Sensor A: ==================  END STATUS  ==================
[   55.800037][ T6034] program syz.0.8 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   55.863464][ T5997] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[   55.866820][ T5997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   55.873850][ T5997] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   55.875490][ T6048] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   55.876662][ T5997] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   55.883702][ T5997] usb 6-1: Manufacturer: syz
[   55.886690][ T5997] usb 6-1: config 0 descriptor??
[   55.894975][ T6048] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[   55.897603][ T6048] UDF-fs: Scanning with blocksize 2048 failed
[   55.901515][ T6048] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[   55.905874][ T6048] UDF-fs: Scanning with blocksize 4096 failed
[   55.940940][ T6053] netlink: 'syz.2.13': attribute type 33 has an invalid length.
[   55.944490][ T6053] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13'.
[   55.951248][ T5997] rc_core: IR keymap rc-hauppauge not found
[   55.959311][ T5997] Registered IR keymap rc-empty
[   55.966973][ T5997] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0
[   55.972363][ T5997] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input5
[   56.098616][ T6065] bond1: entered promiscuous mode
[   56.102108][ T6065] 8021q: adding VLAN 0 to HW filter on device bond1
[   56.102689][ T5997] usb 6-1: USB disconnect, device number 2
[   56.106011][ T6065] bond0: (slave bond1): Enslaving as an active interface with an up link
[   56.173996][ T6073] program syz.3.20 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   56.228394][ T6076] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   56.233907][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'.
[   56.236690][ T6076] CIFS mount error: No usable UNC path provided in device string!
[   56.236690][ T6076] 
[   56.242504][ T6076] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   56.357911][ T6083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   56.441927][ T5293] Bluetooth: hci0: command tx timeout
[   56.521756][ T5293] Bluetooth: hci2: command tx timeout
[   56.521813][ T5935] Bluetooth: hci3: command tx timeout
[   56.531338][ T5935] Bluetooth: hci1: command tx timeout
[   56.711214][ T6023] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   56.715022][ T6092] warning: `syz.0.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   56.851189][ T6023] usb 7-1: device descriptor read/64, error -71
[   56.923264][ T6116] ata1.00: invalid cdb length 6
[   57.091271][ T6023] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   57.136156][   T40] kauditd_printk_skb: 107 callbacks suppressed
[   57.136166][   T40] audit: type=1400 audit(1761332808.323:197): avc:  denied  { write } for  pid=6121 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   57.192280][   T40] audit: type=1400 audit(1761332808.383:198): avc:  denied  { write } for  pid=6124 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   57.204626][   T40] audit: type=1400 audit(1761332808.393:199): avc:  denied  { getattr } for  pid=6124 comm="syz.3.34" name="[io_uring]" dev="anon_inodefs" ino=9993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   57.231190][ T6023] usb 7-1: device descriptor read/64, error -71
[   57.246600][ T6127] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[   57.249007][ T6127] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[   57.254573][ T6127] netlink: 'syz.3.35': attribute type 10 has an invalid length.
[   57.266890][ T6127] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[   57.268948][ T6127] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[   57.278969][ T6127] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   57.354152][ T6023] usb usb7-port1: attempt power cycle
[   57.383750][   T40] audit: type=1400 audit(1761332808.573:200): avc:  denied  { map_read map_write } for  pid=6132 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   57.436352][   T40] audit: type=1400 audit(1761332808.623:201): avc:  denied  { setopt } for  pid=6132 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   57.495266][   T40] audit: type=1400 audit(1761332808.683:202): avc:  denied  { map } for  pid=6134 comm="syz.3.39" path="/dev/comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   57.505174][   T40] audit: type=1400 audit(1761332808.683:203): avc:  denied  { execute } for  pid=6134 comm="syz.3.39" path="/dev/comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   57.595404][   T40] audit: type=1400 audit(1761332808.783:204): avc:  denied  { create } for  pid=6138 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   57.602110][   T40] audit: type=1400 audit(1761332808.783:205): avc:  denied  { setopt } for  pid=6138 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   57.608879][   T40] audit: type=1400 audit(1761332808.783:206): avc:  denied  { bind } for  pid=6138 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   57.711167][ T6023] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   57.743570][ T6023] usb 7-1: device descriptor read/8, error -71
[   57.756956][  T960] cfg80211: failed to load regulatory.db
[   57.791636][ T6156] f2fs: Unknown parameter 'quϫ9'
[   57.837718][ T6156] syzkaller0: entered promiscuous mode
[   57.839451][ T6156] syzkaller0: entered allmulticast mode
[   57.936967][   T60] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   57.989195][ T6166] syz.0.47 uses obsolete (PF_INET,SOCK_PACKET)
[   58.011186][ T6023] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   58.031983][ T6023] usb 7-1: device descriptor read/8, error -71
[   58.147299][ T6023] usb usb7-port1: unable to enumerate USB device
[   58.327880][ T6154] syz.1.45 (6154): drop_caches: 2
[   58.390426][ T6162] syz.1.45 (6162): drop_caches: 2
[   58.521621][ T5935] Bluetooth: hci0: command tx timeout
[   58.601169][ T5935] Bluetooth: hci2: command tx timeout
[   58.611825][ T5935] Bluetooth: hci1: command tx timeout
[   58.611853][ T5293] Bluetooth: hci3: command tx timeout
[   58.743120][ T6186] capability: warning: `syz.1.49' uses 32-bit capabilities (legacy support in use)
[   58.812283][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   58.850796][ T6196] Bluetooth: MGMT ver 1.23
[   58.863029][ T6198] =======================================================
[   58.863029][ T6198] WARNING: The mand mount option has been deprecated and
[   58.863029][ T6198]          and is ignored by this kernel. Remove the mand
[   58.863029][ T6198]          option from the mount to silence this warning.
[   58.863029][ T6198] =======================================================
[   58.874325][ T6198] cgroup2: Unknown parameter 'permit_directio'
[   58.879111][ T6198] fuse: Bad value for 'fd'
[   58.945175][ T6204] kvm: user requested TSC rate below hardware speed
[   58.949852][ T6204] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1523369646 (12186957168 ns) > initial count (699924040 ns). Using initial count to start timer.
[   59.058787][ T6214] netlink: 16 bytes leftover after parsing attributes in process `syz.1.59'.
[   59.154121][ T6227] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.160025][ T6227] fuse: Bad value for 'fd'
[   59.239873][ T6235] netlink: 224 bytes leftover after parsing attributes in process `syz.1.66'.
[   59.245103][ T6235] IPv6: Can't replace route, no match found
[   59.256323][ T6237] random: crng reseeded on system resumption
[   59.311540][   T13] tipc: Subscription rejected, illegal request
[   59.311838][ T5293] Bluetooth: hci2: SCO packet for unknown connection handle 4095
[   59.503967][ T6257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.73'.
[   59.541176][ T1769] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   59.682533][ T6275] netlink: 'syz.2.78': attribute type 21 has an invalid length.
[   59.685643][ T6275] netlink: 128 bytes leftover after parsing attributes in process `syz.2.78'.
[   59.689354][ T6275] netlink: 'syz.2.78': attribute type 6 has an invalid length.
[   59.692878][ T6275] netlink: 3 bytes leftover after parsing attributes in process `syz.2.78'.
[   59.700288][ T6275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.78'.
[   59.704377][ T1769] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[   59.708136][ T1769] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   59.721111][ T1769] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[   59.725277][ T1769] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[   59.732536][ T1769] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[   59.736444][ T1769] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.739593][ T1769] usb 6-1: Product: syz
[   59.741949][ T1769] usb 6-1: Manufacturer: syz
[   59.743859][ T1769] usb 6-1: SerialNumber: syz
[   59.750720][ T1769] usb 6-1: config 0 descriptor??
[   59.763935][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'.
[   59.861404][ T6303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.86'.
[   59.875836][ T6298] random: crng reseeded on system resumption
[   59.914388][ T6311] bridge3: entered promiscuous mode
[   59.914405][ T6311] bridge3: entered allmulticast mode
[   59.947346][ T6315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6315 comm=syz.0.89
[   59.953717][ T6314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6314 comm=syz.0.89
[   59.960649][ T1769] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[   59.975566][ T1769] usb 6-1: USB disconnect, device number 3
[   60.075338][ T6329] netlink: 'syz.0.94': attribute type 1 has an invalid length.
[   60.134339][ T6337] syzkaller1: entered promiscuous mode
[   60.136102][ T6337] syzkaller1: entered allmulticast mode
[   60.300472][ T6355] "syz.3.103" (6355) uses obsolete ecb(arc4) skcipher
[   60.362588][ T1117] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[   60.364947][ T1117] ata1: failed to read log page 10h (errno=-5)
[   60.366952][ T1117] ata1.00: exception Emask 0x1 SAct 0x8000000 SErr 0x0 action 0x0
[   60.370670][ T1117] ata1.00: irq_stat 0x40000000
[   60.372939][ T1117] ata1.00: failed command: WRITE FPDMA QUEUED
[   60.375586][ T1117] ata1.00: cmd 61/78:d8:ee:04:10/00:00:00:00:00/40 tag 27 ncq dma 61440 out
[   60.375586][ T1117]          res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[   60.381541][ T1117] ata1.00: status: { DRDY }
[   60.383653][ T1117] ata1.00: error: { ABRT }
[   60.387375][ T1117] ata1.00: configured for UDMA/100
[   60.389188][ T1117] ata1: EH complete
[   60.432898][ T6371] binder: BINDER_SET_CONTEXT_MGR already set
[   60.435571][ T6371] binder: 6365:6371 ioctl 4018620d 200000000040 returned -16
[   60.508774][ T6380] netlink: 'syz.0.108': attribute type 1 has an invalid length.
[   60.519968][ T6380] bond2: entered promiscuous mode
[   60.523322][ T6380] 8021q: adding VLAN 0 to HW filter on device bond2
[   60.573449][ T6384] netlink: 'syz.0.109': attribute type 58 has an invalid length.
[   60.611150][ T5293] Bluetooth: hci0: command tx timeout
[   60.637724][ T6386] capability: warning: `syz.3.110' uses deprecated v2 capabilities in a way that may be insecure
[   60.691503][ T5293] Bluetooth: hci1: command tx timeout
[   60.691651][ T5942] Bluetooth: hci2: command tx timeout
[   60.693991][ T5935] Bluetooth: hci3: command tx timeout
[   60.756448][ T6404] overlay: ./file0/file0 is not a directory
[   60.783619][ T6404] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=983953270 (1967906540 ns) > initial count (914717820 ns). Using initial count to start timer.
[   60.933911][ T6408] program syz.3.118 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   60.974678][ T6411] __nla_validate_parse: 11 callbacks suppressed
[   60.974694][ T6411] netlink: 36 bytes leftover after parsing attributes in process `syz.3.119'.
[   60.980881][ T6412] netlink: 36 bytes leftover after parsing attributes in process `syz.3.119'.
[   61.013429][ T6414] netlink: 'syz.3.120': attribute type 10 has an invalid length.
[   61.018019][ T6414] macvlan0: entered promiscuous mode
[   61.019748][ T6414] macvlan0: entered allmulticast mode
[   61.026893][ T6414] veth1_vlan: entered allmulticast mode
[   61.031257][ T6414] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   61.036768][ T6414] mmap: syz.3.120 (6414) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   61.046875][ T6424] netlink: 132 bytes leftover after parsing attributes in process `syz.1.122'.
[   61.123781][ T6429] netlink: 'syz.2.124': attribute type 12 has an invalid length.
[   61.131371][ T6429] netlink: 224 bytes leftover after parsing attributes in process `syz.2.124'.
[   61.221457][ T6442] netlink: 60 bytes leftover after parsing attributes in process `syz.2.127'.
[   61.225255][ T6442] netlink: 60 bytes leftover after parsing attributes in process `syz.2.127'.
[   61.323207][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'.
[   61.582950][ T6452] No source specified
[   61.677953][ T6455] netlink: 'syz.0.131': attribute type 1 has an invalid length.
[   62.060943][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'.
[   62.161694][ T6473] kernel read not supported for file /policy (pid: 6473 comm: syz.3.137)
[   62.165373][   T40] kauditd_printk_skb: 89 callbacks suppressed
[   62.165389][   T40] audit: type=1400 audit(1761332813.343:296): avc:  denied  { ioctl } for  pid=6472 comm="syz.3.137" path="socket:[12528]" dev="sockfs" ino=12528 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   62.182640][   T40] audit: type=1400 audit(1761332813.343:297): avc:  denied  { module_load } for  pid=6472 comm="syz.3.137" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1
[   62.192850][   T40] audit: type=1400 audit(1761332813.363:298): avc:  denied  { ioctl } for  pid=6474 comm="syz.2.138" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   62.231234][   T40] audit: type=1400 audit(1761332813.413:299): avc:  denied  { append } for  pid=6476 comm="syz.2.139" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   62.240179][ T6479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.140'.
[   62.433048][   T40] audit: type=1400 audit(1761332813.623:300): avc:  denied  { mount } for  pid=6507 comm="syz.1.150" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   62.451485][   T40] audit: type=1400 audit(1761332813.623:301): avc:  denied  { connect } for  pid=6507 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   62.464314][ T6513] tipc: Started in network mode
[   62.466095][ T6513] tipc: Node identity 7, cluster identity 4711
[   62.468037][ T6513] tipc: Node number set to 7
[   62.469924][ T6513] tipc: Cannot configure node identity twice
[   62.501419][ T6515] netlink: 'syz.1.152': attribute type 10 has an invalid length.
[   62.503945][ T6515] netlink: 40 bytes leftover after parsing attributes in process `syz.1.152'.
[   62.680011][   T40] audit: type=1400 audit(1761332813.863:302): avc:  denied  { setopt } for  pid=6524 comm="syz.3.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   62.748054][   T40] audit: type=1400 audit(1761332813.933:303): avc:  denied  { unlink } for  pid=6528 comm="syz.3.156" name="#1" dev="tmpfs" ino=295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   62.847553][   T40] audit: type=1400 audit(1761332814.033:304): avc:  denied  { watch_mount } for  pid=6544 comm="syz.2.160" path="/33" dev="tmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   62.872783][ T6549] binder: 6548:6549 unknown command 0
[   62.874548][ T6549] binder: 6548:6549 ioctl c0306201 200000000080 returned -22
[   63.325071][ T6556] fuse: Bad value for 'fd'
[   63.413211][ T6563] netlink: 'syz.0.164': attribute type 10 has an invalid length.
[   63.571185][ T6529] overlayfs: statfs failed on './file0'
[   63.606512][ T6565] rdma_op ffff88810ad751f0 conn xmit_rdma 0000000000000000
[   63.610845][   T40] audit: type=1400 audit(1761332814.793:305): avc:  denied  { create } for  pid=6564 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   63.722374][ T6572] veth1_to_batadv: entered promiscuous mode
[   63.872683][ T6579] kvm: kvm [6578]: vcpu1, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x5
[   63.893621][ T6579] kvm: kvm [6578]: vcpu1, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x5
[   63.896673][ T6579] kvm: kvm [6578]: vcpu1, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x5
[   63.912622][ T6579] kvm_intel: kvm [6578]: vcpu1, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x5
[   64.151116][ T1769] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   64.244947][ T6603] syzkaller0: entered promiscuous mode
[   64.247281][ T6603] syzkaller0: entered allmulticast mode
[   64.311514][ T1769] usb 6-1: Using ep0 maxpacket: 8
[   64.316216][ T1769] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   64.320841][ T1769] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[   64.325640][ T1769] usb 6-1: config 0 interface 0 has no altsetting 0
[   64.328432][ T1769] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   64.332285][ T1769] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.346153][ T1769] usb 6-1: config 0 descriptor??
[   64.758553][ T6588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.762097][ T6588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.793878][ T1769] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[   64.800730][ T1769] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[   64.804841][ T1769] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[   64.807133][ T1769] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[   64.810292][ T1769] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[   64.818046][ T1769] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[   64.993456][   T24] usb 6-1: USB disconnect, device number 4
[   65.243794][ T6633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=6633 comm=syz.3.186
[   65.264645][ T6633] bond1: Invalid ad_actor_system MAC address.
[   65.267258][ T6633] bond1: option ad_actor_system: invalid value (255)
[   65.271723][ T6633] bond1 (unregistering): Released all slaves
[   65.285544][ T6631] vcan1: entered allmulticast mode
[   65.402348][ T1769] IPVS: starting estimator thread 0...
[   65.403213][ T6650] trusted_key: syz.0.191 sent an empty control message without MSG_MORE.
[   65.414683][ T6654] loop4: detected capacity change from 0 to 2560
[   65.421890][ T5931] Buffer I/O error on dev loop4, logical block 0, async page read
[   65.424831][ T5931] Buffer I/O error on dev loop4, logical block 0, async page read
[   65.427550][ T5931] Buffer I/O error on dev loop4, logical block 0, async page read
[   65.430645][ T5931] Buffer I/O error on dev loop4, logical block 0, async page read
[   65.434375][ T5931] Buffer I/O error on dev loop4, logical block 0, async page read
[   65.501675][ T6651] IPVS: using max 45 ests per chain, 108000 per kthread
[   65.538898][ T6664] fuse: blksize only supported for fuseblk
[   65.802977][ T6679] IPVS: Scheduler module ip_vs_sip not found
[   65.831549][ T6682] kvm: user requested TSC rate below hardware speed
[   65.836170][ T6682] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[   66.014058][ T6692] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x51dd1
[   66.017241][ T6692] memcg:ffff88802b6b0d00
[   66.018781][ T6692] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff)
[   66.019625][ T6699] __nla_validate_parse: 6 callbacks suppressed
[   66.019636][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'.
[   66.021415][ T6692] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000
[   66.029076][ T6692] raw: 0000000000000004 0000000000000000 00000001ffffffff ffff88802b6b0d00
[   66.032191][ T6692] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping))
[   66.035794][ T6692] page_owner tracks the page as allocated
[   66.037818][ T6692] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6692, tgid 6691 (syz.3.203), ts 66014028723, free_ts 66012406836
[   66.046624][ T6692]  post_alloc_hook+0x1c0/0x230
[   66.048168][ T6692]  get_page_from_freelist+0x10a3/0x3a30
[   66.049932][ T6692]  __alloc_frozen_pages_noprof+0x25f/0x2470
[   66.052588][ T6692]  alloc_pages_mpol+0x1fb/0x550
[   66.054185][ T6692]  folio_alloc_noprof+0x20/0x2d0
[   66.055838][ T6692]  filemap_alloc_folio_noprof+0x3a1/0x470
[   66.057727][ T6692]  page_cache_ra_order+0x56f/0xf20
[   66.059344][ T6692]  filemap_fault+0x1583/0x29a0
[   66.060878][ T6692]  __do_fault+0x10d/0x490
[   66.062901][ T6692]  do_pte_missing+0x1a6/0x3ba0
[   66.064445][ T6692]  __handle_mm_fault+0x1556/0x2aa0
[   66.066286][ T6692]  handle_mm_fault+0x589/0xd10
[   66.068288][ T6692]  __get_user_pages+0x54e/0x3530
[   66.070245][ T6692]  get_user_pages_unlocked+0x1ca/0x780
[   66.072538][ T6692]  hva_to_pfn+0x886/0xe60
[   66.074508][ T6692]  kvm_follow_pfn+0x2d4/0x430
[   66.076467][ T6692] page last free pid 6692 tgid 6691 stack trace:
[   66.078952][ T6692]  __free_frozen_pages+0x7df/0x1160
[   66.081006][ T6692]  __folio_put+0x329/0x450
[   66.082971][ T6692]  do_wp_page+0x1de3/0x52b0
[   66.084861][ T6692]  __handle_mm_fault+0x1ae3/0x2aa0
[   66.086848][ T6692]  handle_mm_fault+0x589/0xd10
[   66.088473][ T6692]  __get_user_pages+0x54e/0x3530
[   66.090107][ T6692]  get_user_pages_unlocked+0x1ca/0x780
[   66.092048][ T6692]  hva_to_pfn+0x886/0xe60
[   66.094270][ T6692]  kvm_follow_pfn+0x2d4/0x430
[   66.096129][ T6692]  __kvm_faultin_pfn+0x11c/0x1a0
[   66.097767][ T6692]  kvm_mmu_faultin_pfn+0x54a/0x20b0
[   66.099470][ T6692]  kvm_tdp_page_fault+0x186/0x3f0
[   66.101452][ T6692]  kvm_mmu_do_page_fault+0x588/0x6c0
[   66.103124][ T6692]  kvm_mmu_page_fault+0x225/0x1cb0
[   66.105296][ T6692]  handle_ept_violation+0x2b4/0x6e0
[   66.107556][ T6692]  vmx_handle_exit+0x14bf/0x1c00
[   66.110629][ T6692] ------------[ cut here ]------------
[   66.112946][ T6692] kernel BUG at mm/filemap.c:870!
[   66.115263][ T6692] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[   66.118829][ T6692] CPU: 0 UID: 0 PID: 6692 Comm: syz.3.203 Not tainted syzkaller #0 PREEMPT(full) 
[   66.122226][ T6692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   66.125668][ T6692] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0
[   66.128074][ T6692] Code: 53 c7 ff 48 c7 c6 a0 6e 99 8b 4c 89 ef e8 bd 6b 11 00 90 0f 0b e8 f5 52 c7 ff 48 c7 c6 00 6f 99 8b 4c 89 ef e8 a6 6b 11 00 90 <0f> 0b e8 de 52 c7 ff 90 0f 0b 90 e9 f2 fb ff ff e8 d0 52 c7 ff 48
[   66.135857][ T6692] RSP: 0018:ffffc9000c916a78 EFLAGS: 00010246
[   66.138326][ T6692] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc90007632000
[   66.141493][ T6692] RDX: 0000000000080000 RSI: ffffffff81f5b76a RDI: ffff888021fd4d84
[   66.144653][ T6692] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001
[   66.147377][ T6692] R10: ffffffff9081f4d7 R11: 0000000000000001 R12: 0000000000000002
[   66.149854][ T6692] R13: ffffea0001477440 R14: 0000000000000000 R15: 1ffff92001922d79
[   66.152357][ T6692] FS:  00007feaca8bb6c0(0000) GS:ffff8880d6a0a000(0000) knlGS:0000000000000000
[   66.155205][ T6692] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   66.157302][ T6692] CR2: 0000200000003a80 CR3: 0000000032786000 CR4: 0000000000352ef0
[   66.159823][ T6692] Call Trace:
[   66.160909][ T6692]  <TASK>
[   66.161931][ T6692]  ? __pfx___filemap_add_folio+0x10/0x10
[   66.163755][ T6692]  filemap_add_folio+0x19a/0x610
[   66.165316][ T6692]  ? __pfx_filemap_add_folio+0x10/0x10
[   66.167023][ T6692]  ? css_rstat_updated+0x1c2/0x510
[   66.168629][ T6692]  page_cache_ra_order+0x635/0xf20
[   66.170268][ T6692]  filemap_fault+0x1583/0x29a0
[   66.171801][ T6692]  ? __pfx_filemap_fault+0x10/0x10
[   66.173451][ T6692]  ? do_wp_page+0x1c59/0x52b0
[   66.174966][ T6692]  ? __pfx_filemap_map_pages+0x10/0x10
[   66.176714][ T6692]  __do_fault+0x10d/0x490
[   66.178109][ T6692]  ? __pfx_filemap_map_pages+0x10/0x10
[   66.179853][ T6692]  do_pte_missing+0x1a6/0x3ba0
[   66.181388][ T6692]  ? find_held_lock+0x2b/0x80
[   66.182910][ T6692]  ? __handle_mm_fault+0x1529/0x2aa0
[   66.184677][ T6692]  __handle_mm_fault+0x1556/0x2aa0
[   66.186349][ T6692]  ? __pfx___handle_mm_fault+0x10/0x10
[   66.188120][ T6692]  ? __pte_offset_map_lock+0x174/0x310
[   66.189867][ T6692]  ? find_held_lock+0x2b/0x80
[   66.191382][ T6692]  ? follow_page_pte+0x5cf/0x1390
[   66.193025][ T6692]  handle_mm_fault+0x589/0xd10
[   66.194562][ T6692]  __get_user_pages+0x54e/0x3530
[   66.196148][ T6692]  ? down_read_killable+0x220/0x4b0
[   66.197820][ T6692]  ? __pfx___get_user_pages+0x10/0x10
[   66.199542][ T6692]  ? __pfx_gup_fast_fallback+0x10/0x10
[   66.201268][ T6692]  ? get_user_pages_unlocked+0x26a/0x780
[   66.203287][ T6692]  ? rcu_is_watching+0x12/0xc0
[   66.204819][ T6692]  get_user_pages_unlocked+0x1ca/0x780
[   66.206594][ T6692]  ? __pfx_get_user_pages_unlocked+0x10/0x10
[   66.208514][ T6692]  ? get_user_pages_fast_only+0xae/0xf0
[   66.210277][ T6692]  ? __pfx_get_user_pages_fast_only+0x10/0x10
[   66.212190][ T6692]  ? __pfx___might_resched+0x10/0x10
[   66.213886][ T6692]  ? check_irq_usage+0x188/0x920
[   66.215496][ T6692]  hva_to_pfn+0x886/0xe60
[   66.216879][ T6692]  ? __lock_acquire+0x622/0x1c90
[   66.218468][ T6692]  ? __pfx_hva_to_pfn+0x10/0x10
[   66.220006][ T6692]  ? __lock_acquire+0x622/0x1c90
[   66.221546][ T6692]  kvm_follow_pfn+0x2d4/0x430
[   66.223064][ T6692]  __kvm_faultin_pfn+0x11c/0x1a0
[   66.224617][ T6692]  ? __pfx___kvm_faultin_pfn+0x10/0x10
[   66.226254][ T6692]  ? __pfx_xa_load+0x10/0x10
[   66.227682][ T6692]  kvm_mmu_faultin_pfn+0x54a/0x20b0
[   66.229331][ T6692]  ? __pfx_fast_page_fault+0x10/0x10
[   66.230965][ T6692]  ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10
[   66.232760][ T6692]  ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10
[   66.234512][ T6692]  ? __kvm_mmu_topup_memory_cache+0x332/0x600
[   66.236450][ T6692]  kvm_tdp_page_fault+0x186/0x3f0
[   66.238048][ T6692]  kvm_mmu_do_page_fault+0x588/0x6c0
[   66.239734][ T6692]  ? __pfx_kvm_mmu_do_page_fault+0x10/0x10
[   66.241615][ T6692]  ? sched_mm_cid_remote_clear+0x41c/0x4f0
[   66.243495][ T6692]  kvm_mmu_page_fault+0x225/0x1cb0
[   66.245105][ T6692]  ? rcu_qs+0x2b/0xe0
[   66.246389][ T6692]  ? __pfx_kvm_mmu_page_fault+0x10/0x10
[   66.248119][ T6692]  ? __lock_acquire+0xb8a/0x1c90
[   66.249689][ T6692]  ? mark_held_locks+0x49/0x80
[   66.251238][ T6692]  handle_ept_violation+0x2b4/0x6e0
[   66.252909][ T6692]  ? __pfx_handle_ept_violation+0x10/0x10
[   66.254708][ T6692]  vmx_handle_exit+0x14bf/0x1c00
[   66.256397][ T6692]  vcpu_run+0x33e1/0x54d0
[   66.257792][ T6692]  ? __pfx_vcpu_run+0x10/0x10
[   66.259338][ T6692]  ? fpu_swap_kvm_fpstate+0x1be/0x410
[   66.261045][ T6692]  ? __local_bh_enable_ip+0xa4/0x120
[   66.262781][ T6692]  ? kvm_arch_vcpu_ioctl_run+0x1023/0x1970
[   66.264646][ T6692]  kvm_arch_vcpu_ioctl_run+0x1023/0x1970
[   66.266441][ T6692]  kvm_vcpu_ioctl+0x5eb/0x1690
[   66.267975][ T6692]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   66.269626][ T6692]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   66.271472][ T6692]  ? do_vfs_ioctl+0x128/0x14f0
[   66.272993][ T6692]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   66.274566][ T6692]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   66.276740][ T6692]  ? hook_file_ioctl_common+0x145/0x410
[   66.278493][ T6692]  ? selinux_file_ioctl+0x180/0x270
[   66.280142][ T6692]  ? selinux_file_ioctl+0xb4/0x270
[   66.281762][ T6692]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   66.283433][ T6692]  __x64_sys_ioctl+0x18e/0x210
[   66.284917][ T6692]  do_syscall_64+0xcd/0xfa0
[   66.286351][ T6692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.288214][ T6692] RIP: 0033:0x7feac998efc9
[   66.289679][ T6692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   66.295520][ T6692] RSP: 002b:00007feaca8bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   66.298081][ T6692] RAX: ffffffffffffffda RBX: 00007feac9be5fa0 RCX: 00007feac998efc9
[   66.300565][ T6692] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a
[   66.303080][ T6692] RBP: 00007feac9a11f91 R08: 0000000000000000 R09: 0000000000000000
[   66.305576][ T6692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   66.308069][ T6692] R13: 00007feac9be6038 R14: 00007feac9be5fa0 R15: 00007ffff7dbca58
[   66.310566][ T6692]  </TASK>
[   66.311562][ T6692] Modules linked in:
[   66.313004][ T6692] ---[ end trace 0000000000000000 ]---
[   66.315131][ T6692] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0
[   66.317119][ T6692] Code: 53 c7 ff 48 c7 c6 a0 6e 99 8b 4c 89 ef e8 bd 6b 11 00 90 0f 0b e8 f5 52 c7 ff 48 c7 c6 00 6f 99 8b 4c 89 ef e8 a6 6b 11 00 90 <0f> 0b e8 de 52 c7 ff 90 0f 0b 90 e9 f2 fb ff ff e8 d0 52 c7 ff 48
[   66.323246][ T6692] RSP: 0018:ffffc9000c916a78 EFLAGS: 00010246
[   66.325219][ T6692] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc90007632000
[   66.327706][ T6692] RDX: 0000000000080000 RSI: ffffffff81f5b76a RDI: ffff888021fd4d84
[   66.330169][ T6692] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001
[   66.332784][ T6692] R10: ffffffff9081f4d7 R11: 0000000000000001 R12: 0000000000000002
[   66.335273][ T6692] R13: ffffea0001477440 R14: 0000000000000000 R15: 1ffff92001922d79
[   66.337757][ T6692] FS:  00007feaca8bb6c0(0000) GS:ffff8880d6a0a000(0000) knlGS:0000000000000000
[   66.340536][ T6692] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   66.343597][ T6692] CR2: 0000200000003a80 CR3: 0000000032786000 CR4: 0000000000352ef0
[   66.346113][ T6692] Kernel panic - not syncing: Fatal exception
[   66.348730][ T6692] Kernel Offset: disabled
[   66.350099][ T6692] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:06:57  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85294ea5 RDI=ffffffff9add6700 RBP=ffffffff9add66c0 RSP=ffffc9000c916410
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f
R12=0000000000000000 R13=0000000000000061 R14=ffffffff9add66c0 R15=ffffffff85294e40
RIP=ffffffff85294ecf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 00007feaca8bb6c0 ffffffff 00c01300
GS =0000 ffff8880d6a0a000 ffffffff 00c01300
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000200000003a80 CR3=0000000032786000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2517812fdb
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2517812fe8
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2517812fe2
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2517812ff6
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f251781307c
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f251781315a
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000002140000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000001a
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000001 0000200000000340 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000001a 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000f0
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff821ceb73 RDX=0000000000000004
RSI=ffffffff821cebda RDI=0000000000000001 RBP=ffffc90001718094 RSP=ffffc90007e8ebc8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffff888025dea800 R13=0000000000000040 R14=1ffff92000fd1d7d R15=0000000000000040
RIP=ffffffff821cec04 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 00007fa5377576c0 ffffffff 00c00000
GS =0000 ffff8880d6b0a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00002000001b3000 CR3=0000000031586000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555575725104 0000555575724640
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555575715498
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557572357e 0000555575723150
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d80040108000601 5ce6208008000de0 030010000dd00300 10000dc003021000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300020012a20300 020012a00304ddfe effe080012980320 00080007000c0008
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004900320b8d008 0012b80340080012 b0030000000c0806 12a80300040012a4
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000704c084808208 0002e00300100002 d00300100002c003 02100002b0034010
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0104808010000280 0401000008080606 0168e00002000704 c0848082080002e0
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300100002d00300 100002c003021000 02b0034010000490 0320b8d0080012b8
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0340080012b00300 00000c080612a803 00040012a4030002 0012a20300020012
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a00304ddfeeffe08 0012980320080012 9003020400128c03 2004001288034008
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=dffffc0000000000 RCX=ffffc9000d8d71c8 RDX=0000000000001000
RSI=0000000000000000 RDI=ffffea00017794c0 RBP=ffffea00017794c0 RSP=ffffc9000d8d6d48
R8 =0000000000000000 R9 =ffffed100aa0f230 R10=ffff888055079187 R11=0000000000015a6b
R12=ffffc9000d8d71c8 R13=1ffff92001b1adbc R14=0000000000000000 R15=0000000000001000
RIP=ffffffff84a24dc0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6c0a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fff9d61cf6f CR3=0000000051051000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6343df40 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa536a12fdb
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa536a12fe8
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa536a12fe2
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa536a12ff6
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa536a1307c
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa536a1315a
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff820a2a9c RDX=ffff8880291d4900
RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000002 RSP=ffffc9000ca27820
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000007cdd
R12=00007f25167fe000 R13=ffff888039e37ff0 R14=dffffc0000000000 R15=0000000000000000
RIP=ffffffff820a2a9c RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6d0a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00002000002b8000 CR3=0000000052a30000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00676e696e6f6973 69766f72702d7470
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2517812fdb
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2517812fe8
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2517812fe2
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2517812ff6
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f251781307c
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f251781315a
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 44d7854ac854a721 79e0a3c3b9c4bcdf 33984d59a757f134 399e1ebe863f8164
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 aaef0fa28a17bdbd a43226516944b4ce cafd759cdb980004 00080000000c000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 388782d644f61ed7 8489b39a0d507656 d96ec0d4820f666a 1b8f5a2e82922ade
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d53922a1278904f 7bb4573c388782d6 44f61ed78489b39a 0d507656d96ec0d4
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 820f666a1b8f5a2e 82922adeaaef0fa2 8a17bdbda4322651 6944b4cecafd759c
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 db980d27fde68842 500dcd8e44d7854a c854a72179e0a3c3 b9c4bcdf33984d59
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a757f134399e1ebe 863f8164d1e7df4d b3e1006473ecaf51 fe4648827cabf885
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000