last executing test programs:

17.230061232s ago: executing program 2 (id=13):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002000b33f00000000000010000a000000000000000000000008001a"], 0x24}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
creat(&(0x7f00000002c0)='./file0\x00', 0x109)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1})
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xac2b9}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x4c}}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
listen(r4, 0x0)
shutdown(r4, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
dup3(r4, r5, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x5, 0x7, 0x2})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@gettaction={0x1f8, 0x32, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xad6}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xfffffffffffffd28, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff000}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80002}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x40b, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3d9}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa6b}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff7}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x27}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x800}, 0x20044001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket(0x2c, 0x4, 0x0)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)

17.130232501s ago: executing program 2 (id=14):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x10)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={<r4=>0x0, 0xcd, "b25b486c2b46d4400d7c76274247a4a5d187601dbd55c0b16d7cec8fefd9a4d375e28d0e14d3b930e059b81dade49d615c61849caa7ca823e961c7cdec7b62f588b964a3d7abcd92f6035ed92648d707a173f62d90a362dbfcc8331a9265274a9444348ea57b609c6606cf7a66807c495379e87eb71836ba551e638af1a9feacc598b70d59cb3c5396505296b26519ce0914abeb7f88b6967b0866675e4cadd3947be311100a39f609d032210437b72d47d8cdee4bf768b7b36ff430266f06c2e9ab3d77890547e167042912de"}, &(0x7f0000000280)=0xd5)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$video4linux(&(0x7f0000000000), 0x3fe, 0x0)
socket$packet(0x11, 0xa, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00')
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r6 = dup(r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x3)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000002c0)={r4, 0xd4d, 0x8, 0x81, 0xa93, 0x7}, 0x14)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="02"], 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[], 0x10)

16.771132541s ago: executing program 2 (id=16):
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x4)
r0 = syz_io_uring_setup(0x18d7, 0x0, &(0x7f0000ffe000), 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r1 = openat$binderfs(0xffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x802, 0x0)
mmap$binder(&(0x7f00000a6000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xb9)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) (fail_nth: 6)

14.61126661s ago: executing program 2 (id=42):
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x6800a000)
syz_emit_vhci(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, 0x0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$pokeuser(0x6, r2, 0x3f, 0x10000003)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000000)=0x9, 0x4)
sendmmsg(r3, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @loopback}, 0x80, 0x0}, 0x5b4}], 0x1, 0x800)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x152b000, 0x83e, 0x0, 0x4}, 0x1c)

8.498369484s ago: executing program 2 (id=42):
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x6800a000)
syz_emit_vhci(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, 0x0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$pokeuser(0x6, r2, 0x3f, 0x10000003)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000000)=0x9, 0x4)
sendmmsg(r3, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @loopback}, 0x80, 0x0}, 0x5b4}], 0x1, 0x800)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x152b000, 0x83e, 0x0, 0x4}, 0x1c)

3.024442777s ago: executing program 1 (id=103):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYRES8=r1, @ANYRESOCT=r0], 0x18}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0xffff}, 0x1c)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r3, 0x0)
socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newqdisc={0x0, 0x24, 0x8, 0xf, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x10, 0xfff1}, {0x5, 0x6}, {0x9, 0xd}}, [@qdisc_kind_options=@q_red={{}, {0x0, 0x2, [@TCA_RED_PARMS={0x0, 0x1, {0x4, 0x4, 0x6, 0x11, 0x0, 0x11, 0x5}}, @TCA_RED_FLAGS={0x0, 0x4, {0xf}}, @TCA_RED_FLAGS={0x0, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x0, 0x6, 0x29}, @TCA_RED_STAB={0x0, 0x2, "49ac26d4f498a64404118ea23d5deb11372255d66b04a1818c226a2b6d4a1595efb14c843252ccf5e58caa6023e16d0ad385c9bc05e9b507637d559acc2d9fb61892fa47c7f3ca2c12f0ef48e01ee6c3c50ee5b903d57c04afd19a604cc9689d95a7c76a265b98865e8e45b619c5282cde8f56cb106d04e8d7e285df8008854a142ad7457b770de5597810237b93b8c192f8abf47346e73cd6bf29655a3ae0f18584054431a702d8527c395eaddb9da2ce4fdd2a4699ae2b00e78995d11fb22f2fe65e94053184177d8b9a844ec9f5b05bb63cd2922f33edea4f80dba6afcf15f14fad8fb514ba030404b1143e4435ac9f76d1728ba5de9092eab7598ae4b123"}, @TCA_RED_STAB={0x0, 0x2, "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"}, @TCA_RED_MARK_BLOCK={0x0, 0x6, 0xb46}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$media(&(0x7f0000000340), 0xff, 0x102)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000780)})
socket$kcm(0x10, 0x2, 0x0)
r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)

2.070782502s ago: executing program 1 (id=107):
openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0xc}}], 0xc, 0x4000010}, 0x0)
recvmmsg$unix(r2, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@abs, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/146}], 0x0, &(0x7f0000000280)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred, @cred, @cred, @cred, @cred, @rights]}}, {{&(0x7f0000000340), 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/111}], 0x0, &(0x7f0000000480)=[@rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights]}}, {{&(0x7f0000000540)=@abs, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/28}, {&(0x7f0000000680)=""/3}], 0x0, &(0x7f0000000700)=[@rights, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}, {{&(0x7f0000000780), 0x0, &(0x7f0000000e00)=[{&(0x7f0000000800)=""/190}, {&(0x7f00000008c0)=""/64}, {&(0x7f0000000900)=""/99}, {&(0x7f0000000980)=""/222, 0xffffffffffffff19}, {&(0x7f0000000a80)=""/224}, {&(0x7f0000000b80)=""/4}, {&(0x7f0000000bc0)=""/237}, {&(0x7f0000000cc0)=""/60}, {&(0x7f0000000d00)=""/226}], 0x0, &(0x7f0000000e80)=[@cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}], 0x7e4, 0x2, 0x0)

1.89091427s ago: executing program 0 (id=108):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db7", 0x2d}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5", 0x7a}], 0x2}, 0x0)
recvmmsg(r0, &(0x7f0000002dc0)=[{{&(0x7f00000006c0)=@alg, 0x80, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/166, 0xa6}], 0x1, &(0x7f0000000d40)=""/10, 0xa}, 0x5b5}, {{&(0x7f0000000d80)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000e00)=""/83, 0x53}], 0x2019, &(0x7f0000000ec0)=""/106, 0x6a}, 0x8}, {{&(0x7f0000000f40)=@caif=@dbg, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000fc0)=""/219, 0xdb}], 0x1}, 0x401}, {{&(0x7f0000001100)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000001180)=""/12, 0xc}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/213, 0xd5}, {&(0x7f00000022c0)=""/143, 0x8f}, {&(0x7f0000002f00)=""/167, 0xa7}, {&(0x7f0000002440)=""/34, 0x22}, {&(0x7f0000002480)=""/182, 0xb6}, {&(0x7f0000002540)=""/124, 0x7c}, {&(0x7f00000025c0)=""/136, 0x88}, {&(0x7f0000002680)=""/89, 0x59}], 0xa, &(0x7f0000002780)=""/94, 0x5e}, 0x634}, {{&(0x7f0000002800)=@hci, 0x80, &(0x7f0000002940)=[{&(0x7f0000002880)=""/108, 0x6c}, {&(0x7f0000002900)=""/26, 0x1a}], 0x2}, 0x5d}, {{&(0x7f0000002980)=@isdn, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002a00)=""/12, 0xc}, {&(0x7f0000002a40)=""/203, 0xcb}, {&(0x7f0000002b40)=""/97, 0x61}, {&(0x7f0000002bc0)=""/227, 0xe3}], 0x4, &(0x7f0000002d00)=""/169, 0xa9}, 0x3}], 0x6, 0x20, &(0x7f0000002e80)={0x77359400})

1.890618492s ago: executing program 0 (id=109):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000015c0)=[@in={0x2, 0x4e23, @private=0xa010101}], 0x10)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/163, 0xa3}], 0x1}, 0x166)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000040)={'wlan1\x00'})

1.779900367s ago: executing program 1 (id=110):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003400000034"], 0x0, 0x52, 0x0, 0xfffffffd, 0x0, 0x0, @void, @value}, 0x28)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
r0 = openat$ttynull(0xffffff9c, &(0x7f0000000100), 0x20002, 0x0)
ioctl$TIOCCONS(r0, 0x541d)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x50041, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', <r8=>0x0, 0x29, 0xf3, 0x3, 0x2, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7800, 0x40, 0x1, 0x970}})
r9 = openat$sr(0xffffff9c, &(0x7f0000000000), 0x80200, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xca, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x35, 0x8, 0x8, &(0x7f0000000240)}}, 0x10)
setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f00000002c0)={0x0, 0x0, 0x6, r10, 0x1}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00', <r11=>0x0})
r12 = socket(0x10, 0x3, 0x0)
r13 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xf1ffffff, 0x0, 0x800000, 0x0, 0xffffffff}, 0x20, 0x0, 0x7, 0x8, 0x101, 0x14, 0x0, 0x0, 0x0, 0x0, {0x200}}}}]}, 0x78}}, 0x4080)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, <r15=>0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x17, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x9c, 0x8, 0x8, &(0x7f0000000500)}}, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xd0, r7, 0x928, 0x6, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000000100000000000000000000e80000000000000000ff"])
r16 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r16, 0x10e, 0x2, &(0x7f0000000040)=0x1e, 0x4)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[])

1.77950571s ago: executing program 1 (id=111):
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x4600, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffdd2)
syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340), &(0x7f0000000280))
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000080))
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x8)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r9], 0x5c}}, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x2)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="0100000001000000"], 0x3c}}, 0x0)
pipe(&(0x7f0000000080)={<r13=>0xffffffffffffffff})
splice(r13, 0x0, r3, 0x0, 0x1000, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0)

1.718683874s ago: executing program 2 (id=42):
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x6800a000)
syz_emit_vhci(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, 0x0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$pokeuser(0x6, r2, 0x3f, 0x10000003)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000000)=0x9, 0x4)
sendmmsg(r3, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @loopback}, 0x80, 0x0}, 0x5b4}], 0x1, 0x800)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x152b000, 0x83e, 0x0, 0x4}, 0x1c)

1.570406794s ago: executing program 3 (id=112):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000004, 0x42031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040), 0x6)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = fanotify_init(0x200, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)=<r3=>0x0)
sched_setscheduler(r3, 0x5, &(0x7f0000000140)=0x400)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
readv(r4, &(0x7f0000000040)=[{&(0x7f0000000200)=""/227, 0xe3}], 0x1)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000800000001"], 0x114}], 0x1}, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r5 = socket$netlink(0x10, 0x3, 0x4)
write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
listen(r6, 0x0)
r7 = openat$vicodec1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_EDID(r7, 0xc0245628, &(0x7f00000000c0)={0x3, 0x0, 0x100, '\x00', &(0x7f0000000100)=0xfe})
r8 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x92940)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000640)={0x0, 0x28, 0xfa00, {0x1, &(0x7f0000000180), 0x2, 0x1}}, 0x20)
socket$inet6_sctp(0xa, 0x5, 0x84)
r9 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=<r10=>0x0, &(0x7f0000000280))
io_uring_register$IORING_REGISTER_PBUF_RING(r9, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)

1.409126664s ago: executing program 3 (id=113):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600001900000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x2c, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r2 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x80000)
ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000380)={0x1a, "41b1369b9d27b8e36d2c0102d45480b5abc1633e48dd9a3ec340310a7b8960e3c3f179e0f75fac3cb0de38550f7f5f6b8f3c2b7ccba7d13cbb6446848227e8d9b30901c1ca852cae53952d17a6d9a1eb59d6a3315357a2d720bb1a84400dd5b4765a6f7aa810ff452d5c1885a86ecf2d899203c63316a1084e7f575b10de44f9"})

1.250861369s ago: executing program 3 (id=114):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8000000010000304000003000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}}, 0x8000)

1.20017618s ago: executing program 3 (id=115):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x284})
unshare(0x20000400)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7000000, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x1000000}, 0x0, 0x0)

982.955701ms ago: executing program 0 (id=116):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
socket$nl_generic(0x10, 0x3, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe)
r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r6, r7, r6}, &(0x7f0000000580)=""/253, 0xfd, &(0x7f00000001c0)={&(0x7f0000000080)={'sha3-224-generic\x00'}})
io_getevents(0x0, 0x2, 0x2, &(0x7f0000000a40)=[{}, {}], 0x0)
io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r5, 0x0}])

866.652491ms ago: executing program 1 (id=117):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x24, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock2(&(0x7f00004cb000/0x4000)=nil, 0x4000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

569.555344ms ago: executing program 1 (id=118):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = openat$hpet(0xffffff9c, &(0x7f0000000000), 0x80200, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
mount(&(0x7f00000002c0)=@filename='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='vfat\x00', 0x228002, &(0x7f0000000400)='\xaa\xaa\xaa\xaa\xaa')
sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd0, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}]}, 0xd0}}, 0x8000)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
r8 = syz_clone(0x200, &(0x7f0000001880)="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", 0x1000, &(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)="25e4a32f2abd568779aeff188d94df6436e8d898018965839473904c1eec576bbc84d7575dee393c83c699085bedb44fe1f14246f071c5a4b8cc459933772d216fa65737555777455bff52e266ea6e3af3e059a40295024f1f0eeadbae6e26915bcf175c3d1d6c100dc6751c848fe924b116129b086499df83d0ff09247d637b2dca66c85fafd0cd5679725882501c4b7465ea558b3e604f4e06fdd78defa598dbecfaee7f38190197d5e38fc97e1823b382e0220b9af9d202f0")
prctl$PR_SCHED_CORE(0x3e, 0x2, r8, 0x0, 0x0)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000004, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c9b41, 0x8)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'veth1_vlan\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x32, 0xb, 0x6, {0x0, @hdata="c3b467aca79221c2e4d626bfd283e0a10e23d2fa504990e9ce34004c56937b82a7c45294652cad4e6b3175264e735c411738e756", {0x0, @remote, 0x7f, 0xb6, [0x8, 0x7]}, @esp_ip6_spec={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x9, 0x40}, {0x0, @link_local, 0x5, 0xd6, [0x1ff, 0x8]}, 0xad, 0xf1}}})
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)
write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)

300.973979ms ago: executing program 3 (id=119):
socket$kcm(0x21, 0x2, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0xb0, 0x16, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'batadv0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_NEWSET={0x84, 0x9, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DESC={0x4}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x84}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xf7}, @NFTA_BYTEORDER_DREG={0x8}]}}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELCHAIN={0x6c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_USERDATA={0x4b, 0xc, "cc8237df1121bef6a6d05cfe683d40d97b060bd218405a7677b020287397c774ebc84a9a4a108e99c38aa379307d3c9029dfd22fe72f01ff5ecd7f4e21b67ac3e56c7d78775b0c"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x214}, 0x1, 0x0, 0x0, 0x14}, 0x4000080)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x1}, 0x2000000}], 0x2, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r4}, 0x10)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x25, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="000000000300f3a9a0c712800b00010062726964676500000c0002800600270003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x8884)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061196c00000000009500080400000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

240.840367ms ago: executing program 3 (id=120):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
mkdir(&(0x7f0000000440)='./file0\x00', 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x8}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="f800000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000f2ffffffffffffff000000000000000000010000004400050920010000000000000000000000000000000000022b0000000a000000fc010000000000000000000000000000000000000100"/176], 0xf8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x216821, 0x0)
r4 = dup(r0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0xc000)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00')
r6 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0xfffffffd, 0x0, 0x0, r4}, &(0x7f0000000080)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}})
io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r9 = socket(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r9, 0x6, 0x401, &(0x7f0000000240)="b852cd4425e3b2d493800f3b26d8969d7f32a7cc9bfe", 0x16)
connect$inet(r9, &(0x7f0000000400)={0x10, 0x4e24}, 0xffffffffffffff64)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0xc02063a1, 0x0)
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82)
syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0)

122.237615ms ago: executing program 0 (id=121):
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='loginuid\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbff, {{0x12}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x49}]}, 0x2c}, 0x1, 0x0, 0x0, 0x45}, 0x0)
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}, {0x0, 0x3}], 0x2, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r6, @ANYBLOB="080003"], 0x80}}, 0x8000)

59.640751ms ago: executing program 0 (id=122):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x60)
write$tun(r1, &(0x7f00000003c0)={@void, @void, @eth={@local, @broadcast, @void, {@generic={0x15, "ab26add8eeda545e0ca1992700c4e6c72a36712aad5182a001a1d08a788573ede16628bf686ba84d013e9816e05ea7b2e3abc4d86ac102a36b6f1708e775c3f152b8b50334b2c68b8701042e719ec15d9cb6693afd54935f"}}}}, 0x66)
write$binfmt_script(r1, &(0x7f0000000600)={'#! ', './file0', [], 0xa, "03fc8eee296910f45d1ec0471b454d448414a7984983f183fe6d09e46b22772701ef0000000000000000"}, 0x35)
write$UHID_INPUT(r1, &(0x7f0000002140)={0x8, {"0667ac1471a39e7e405a56fad1da33657c469277f43a3fd378bd197d6389e5b1e26f4c915122e6234741a35d5feff45cdaecf6a50ce568e26c3d9ac712395d040b9b422e85f06d1ed229b4e3e770f5ca31715663d60f7676a31a08eb04037a5d5d9c84c4c5eb4a17db2db860efa5c2d3fde2e69719c0b8d2921498e782dece314bf94161b9605b55895e1effd5326f0b9e46b372b1e4baac0c8e16db020ce566951bdcc61e0ae670832749e1792fb39fe2cd227ff0161096699ec99865feed9fff1e39dd7559b3c3452afa897fcd5c22f223d0060007df00fe14c5acfc1247f01874b501e9c95eeb0ea131259fa6711979283752c67a756c12b7b0382e9bed73ffd34202775d3b04cf904fcf445a64ae8408851f648bee65623ac7a56bfe9b7a44c5c848df4f5f508885af98d419e3c019593639c3b35a8fc5874b5f2863357f519b83d9bb37f3b7dc0d85662e83659c2d613078c2dcf580bb45c4099649df8484fa5fbd50e72a75d5a5d4d4cfa2f6a3a4b630a005158289b1e9a193c0f7dd3cfc0ac9f44cff352bf2b3914d24af628a1ede993f8c2c8139341103122d8036cb3b362872a0d5d6603cc5785c7f0917013034501b77ccce1e54d4afc41f94f79c40055c6463dca113367d5dcfb842d947a0f78a798c09a999835f1a591af7ad1d75b0215e41d1406152c674192e1703c614308008abf5228aa17954639565a5dacc1652ef3c0e514ce3fb7c0e218827673c4f710054ec7867869b4c40db2be56de65e0068ed3b21f4f5f138a395819accf412d4f6c903e510894504f066747bd26e4e483531b9330d478cbe7345a7232a684e603f5f6d947f43c5176495cb636c03da75a21b615a35db114095e4c9ae5ccb167153f790bba333ee22375eb454d912f04882c3eb39c9cb55460082b553b728f2afd5dab5e2a2698c7aa48682b46d25600d1f2ffa4b5463e9f5ea82234a683d929aff82164c797a44b07d60f966759eb4f91507c1e4a94c0d359e6ae268f47f269c76251baf3428cf64dfad87732440e15943d9e75e32f7a25ff08c89034b632823d243fc7d4cf068a17625147d99e2f1f79f139165a5b1ea5bcd92480587a7ee9543054ca5baeaad93e10c0f272686762ce75908b0be928125cc0d384dd890b665016fcd3b1f08ba9e35b6dc71b241a914bdc028eef3b1ba6ba397d88ef4fba6a00eb0a62546c4f7c4ec0f321a23feab51d89c9b71641092945bbef97ae87589f9d92e0ac7bd70a3b6ab938044f322935e50a257e04328e387f75042756d32482a0c351e7afe5116b46f64b734a552accb6b0dcd6cbeb0eef2a928eb1ee1cf56d9d0fb247a069a28f28c3462a8ce629c4feae6ad8b211e4f19801f569d0a2cce55fe2a894b9593eda0f696481e64ff481be9755a47a1e7b91c898f0f119203da21e5705b219344fbb48d70c3553e828b9bc4a8195db91168c521803d16aecd320c6e6ce1b0ba7a60af7b6289e4458c0453f81fa760dc37487c4b23e556c81e10efb9f002a2341eaddb3fc3bb55c388b115a7d2af2e8de67dd4cc4cb9a386e2c1b2bfb2e2b28f6d061d00093cb25b0b4d95dd1d01f308414105e575369a57736faba5c41502f8ff5dd27087a467604676f1e7154fffbcafa9464c2d2e4c3806f689285388686a892dd3ee6ccc14e4bb7b7e5bc5692bc28a108af91788e29df4b3eb2ad8a14daf83c75288758b5822bb45f9f531555a5518dabdd756e3bf73e5d4f0477aa250bf1041867734732faffb745018ea635217eadaee22abea004656ae1ef59e57fdb02d615da20b437d37f311f951e0bbb0857c39e537b0bb2c92d01c8a1ddaf493d8fec2e6251be7b3b462c6471330508bfcc7afff1a5dca7e646b297a7814cfdb88ab9c2829d3970a97aa7753c9a14f349ad67d9d68c9c707b8ebac8458a34ffb1ef688f4f9e1ca528578d961c6511888647ac8d3b0480ec3594aa0909b29c2bcddb5d52212f49d5c20cea05704ae75d494792529e0a8d57cf717ab7760b4506f07774ddefc299ee08de21ab44950427b1a25f4d06ac6fac10f8a5c892e02eaaff0ba4ffc992c31abe049458b88c549055d4218231182ef73cdabb51f27fff813caf8ce8651579ad7e1064324939f5ae678a29838d7baaae162f8258086366562a42d9e4952dae09052f222192cc20b16ad9f200b858e2a254d8ecce1f4755ac24aad6fc6199a588a8e2f1f0771ca6616b1271842057cb8f1df82b8c5729d7be61ee967a596627b2e7dad8612f0d35b70c242c825b739e4290d71cb5dc425c2e379958b0a0e2b1f058a4486702c7201080d87bba97537f77820b78448cda801d303c52943353a2d54505d9d99b0428a9ef425312146f74b657a31bd59480750a9f2415465ec9bfd9805a92c52490fe3de55854b1a2bb5cc25c34f95da672c03d1e82043f4daa77956cd5d2039a730f5f3f132c03572d0c7891e50f5eb509ec84205ba1488aab5e950ba439c9c3476feb5c2733e1bb37fa4d3ded8906c781b07c56fa57686a4a4ce8e9ddd778145f06228edb4b89860dabc7d8406dd4df1cd0fbb9974f2a88011e64ce09287c1124ad0afda256b461cfd59cc6f62206781131a2626f3ad8f7779ab68ed54d3d1b0d6f092d1f8d88a508062c1852ccc7bb148d00c9d24a06a30fbb71c1c1e6a1c3d7fd54860b27ac3bbc957b2d5a7cea44b2105d907cf6de1c45cebabdbe7fe98781e33fe9ab2c543a000b992bf79d816ad7f1e134a904d5bf4dd01e20ff28587fa973ceb7f6fdebc2eb3a3b684b12e85f6990b02d4dd7945fbf508529d9db15b2b80b5674cb1f4f33de96ad3a06dedbb6369edd3a8c754d22a0f2de857bfa7fa99c5725cbb2be3f5318032e06766bafd5184e5062c0f523b44526032b5f88ddabcba9721ea6376e14d9f66dd19fa67a684309f53e23cb152c592869cc7c99266123bd36cfdb198032a7085b4f895b1aec00b5d9ba8a9acbc9eb6d43bd3b387b306dcfa93c8be2b854a215b0e6112d45a08153894c070422a643111b5b3a746f83ebc5f7dabbe2f26f95b2005aae8005f92984220f5cf79945d1453e6e1f5ae406eb237b7001f11735d7d4dca2e93ac7136f40552e802585ba61b2f363f468cc9e909efe05512b60595d9070f53db5049acbd7bb5800b7aede84db92dfa0b225bf7f8a1188a9087ee7cf26e280922e67f032d53b82d75f42a2d6b3dba313e069efeed08e1f8dae89aca7575a8191518ef01ea6f649d1090d0902f18378a94b9040c34633b8b78297df1117724824ad3f507bf8c80412d585088c6f5333b39330ed679239185a37123228c1ca5edbcb4e304db7ed927123a42b914c13ff79532e524bfc01f0ee7c4603c4289b213641fffcf0da169383e45d02a18aff9ebd8941a4a6b3d25487908a30520ae95bb91f438c64d77f8f29e66b037e0a8019731a912aa63481c4661169592b7e0c349015c2f5488d85daaaeaf88ed09e53b1f01655c472687d64bc08ca9dc08dcb4630bc23d12ba168d05f67de7014df5232ebef78ec88106db68fbcf35b640ff8fd4c9af6d7cfcd1a9e7f7714c4b689e490f08ba5e9d372cee6bf2b9952ae6fdfc330954b41d1c0153724636dd78cc58849a9e9c13873dd5efd47ccdbe8434e59de9b819b09d1836371805bd2573f96314c233a6fe76bc27d83135219539f29a96a029f59778c44ccc58da759b324f74736494b64ea876373a050a076bc3ebf429a5b292836a0ac5ed2f612209b29d743faba13edcb9662e8bccaf1f926f90f6c8f3537e184beabe2062f9cbce368cbd765f4ef707739aba75aa8aa19121bc94a09748df6a1e08fef0c6f21eb54b66f3b476d0b5630b4e1ba11cd534f9a94917464df45b6d727fba47468eebf0daedbe905ca90400fa7138c24b351c76422152a00c2e1e8a260ba2fcabe1902d4a0a26e185820a1e20b3b3d2c8f96bcec99932ccddbc79f152a38914f0c34e60b0591d3c43c0d33ebd0dfd5665284ccbb67fdbac60ebe748d102f356fa4e69b50c3d61e0a80b1311a83f30c0c8a0f43a18e1226d36a8b2a92cca75544e265f4e0177adcbd4a7c7f38581a645a741754011a8f78e887d84b73918dbd54a95db989adb227fbd5fb69fb7cd45516559de141a2ac2f6897e96469b45e770b92500a75965c33102276255916f7b44c3d31dee5a5232aa321431fce2f274e187e5cd5ba5e2fc8b36c92e042adf270dd88a525bf7d519071896d08470acb754df61a65e115942031fe10fa6d8b0a503c14f32f11189827a2250e1ca4e72692a60b2e55456ea23e9d1b641c8ed6e27e85dc27622e42bce70e3e2b15ea7f9115e81788159d8afd452ce4219c017da79d5d47c6d2a688d0e804805fde5f8d49b024de3104d19aca3096a5879b0cad7dd5b51c98420f60ccd35aa5879900e7ae818b839ec3fa2b62a3175f10750e058b8e04707bb8a35fe73e1d5285be51086d4188cdd1fed0c692c922c24910bf50e07af5218545fcc80790c37d70f54b7ee055e57237e510e7e3f842a2f7d0c03c31d19a6dabb3a9af3fb645af7beda19de3bd41e396f503dcfc6963fe962da731a2c79ec8f5090469a0ba23ec94c990ff0cc576efb9405f86b14c4a856728aeb9f388404fff315ee082235579ef95a9097d007fd8c1d687dceffe2c81a58556408e714b402440611eb8bba32b1215fd0eb5feeda7b77c289d7df44409845bdacc39a2d34b5712ba2eff621462ab08b40d222c063c06d4717261e6a2a4c06f8563096e738695a526f6b4cb03889e29fbb6cd4893ce1f6cf2b1cee52b7b4769a43c24cb1122408b5d9d58208eeeee25af36a6ca9a495676ce3533bb7a1a86619f20ddd3a41d8a9d66de8158d7d146d620ee86402febcce619d2d6122174be9b793e8afcefe4c5e963230eb762cdcd9a9d678176b3f0529bcb147becf0b21eb445bbf24e216947981f8355d4f14c3a19bf24eef760ec828eb6c6919c901f4680467554232b04c0faf2fba629e433e9d0dcfd20ff1aa04a74d7ab239245db9f38bc90cdc94db1a7a77bbaf7832f6f9163b47d8ea6ff9825de9e90d76c18361b64b3ef8f837782dd66e97a2def7da111db56964177a8fda138384e5f3150355d0883be5d5e30f95b17ed19aa040ba0b17546ac05af6991dbeb13d92551e677951d00ee354314bb304dbfaf98cd13469131d935520cd29937ee064ad27504b07affa346d40412511c0d0f9f1d484bc9f8d5fee8e102a1d5126c28211f280e5f6c5373aec44b6cb82dcc46d6b630b7a91dbf7327c016807eb8c004c5d626167332dba018f595f73fb905eba252994f76707fbca30d8b0c0358186eb25c78a74a5cf96aaf9fd428f6328f46ce57551a1104920f36db499552e9d1d2d6f3f8ccec04ba0d1edecb5cb653e41407516941c1c940d6a05e1facd4b6ab8478146b81b58d389557351d7fe4a12a384f4afb48ad0fac63b0b4f66320d32cfdaac67874e4c9b0854a1e91c7982ef028ba61b4ab3fdb061200cecd26f2cfe2f4cd07d695a13617b5d51d40ff8dd24cf9cc84c87d088d922bc6dd12facc2768db3d93dcd6a7926c0e12e8254839bbf21d05acf6e7afb93efcc562da4029259d8f7185bfed0c397e48f8475489477a4952ecfc12a09c89681a30f758198c25208e15cbd1bc0f12b1fba7e2e138d0fa065d6cf66504f4a8d21256e38fdf4db6873b2f6dcca3c5e81f909a86a1a89690bef6e01b2459fe108dd7f0ffcfbfe5dc4c522cd078d9c8ac8dd09a33bb3e5b3c5d04d19e56b69a7692218e8592cbbf521f089ff4522b5", 0x1000}}, 0x1006)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @private}, &(0x7f0000000080)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000010000000000000000000000611224000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x18, 0x3c, 0x107, 0xfffffffc, 0x0, {0x4, 0x7c}, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x18}}, 0xc000)
syz_emit_ethernet(0x82, &(0x7f0000000240)={@random="ebaa9858fc6f", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @loopback, {[@lsrr={0x83, 0x3}, @lsrr={0x83, 0x3, 0x75}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000006}, {@dev}, {@dev}, {@remote}, {@private}, {@remote}, {@rand_addr=0x64010102}]}]}}}}}}}, 0x0)

0s ago: executing program 0 (id=123):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000b00)={0x6, 0x0, [{0x1000, 0xbf, &(0x7f0000000580)=""/191}, {0xdddd0000, 0x5f, &(0x7f00000006c0)=""/95}, {0xdddd1000, 0x54, &(0x7f0000000740)=""/84}, {0x1000, 0x31, &(0x7f0000000180)=""/49}, {0x1000, 0x92, &(0x7f00000007c0)=""/146}, {0x4, 0x0, 0x0}]})
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r5, 0x0, r1})
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000001c0)=0x9)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:2894' (ED25519) to the list of known hosts.
[   40.821948][ T5888] cgroup: Unknown subsys name 'net'
[   40.981440][ T5888] cgroup: Unknown subsys name 'cpuset'
[   40.985080][ T5888] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   41.871325][ T5888] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.016795][ T5953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.020203][ T5953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.023715][ T5953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.026803][ T5953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.029999][ T5953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.032120][ T5958] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   45.033429][ T5956] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.033616][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.034046][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.036513][   T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   45.043968][ T5956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.046126][   T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   45.047701][ T5960] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.048339][ T5960] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.050322][ T5956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.050786][   T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   45.051032][   T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   45.052883][ T5960] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.055412][ T5956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.066621][ T5956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.289111][ T5942] chnl_net:caif_netlink_parms(): no params data found
[   45.357891][ T5952] chnl_net:caif_netlink_parms(): no params data found
[   45.376580][ T5949] chnl_net:caif_netlink_parms(): no params data found
[   45.453617][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.456548][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.460242][ T5942] bridge_slave_0: entered allmulticast mode
[   45.463373][ T5942] bridge_slave_0: entered promiscuous mode
[   45.470093][ T5943] chnl_net:caif_netlink_parms(): no params data found
[   45.499719][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.502651][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.504966][ T5942] bridge_slave_1: entered allmulticast mode
[   45.508450][ T5942] bridge_slave_1: entered promiscuous mode
[   45.570058][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.572510][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.574934][ T5952] bridge_slave_0: entered allmulticast mode
[   45.578328][ T5952] bridge_slave_0: entered promiscuous mode
[   45.630576][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.633510][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.636441][ T5949] bridge_slave_0: entered allmulticast mode
[   45.639868][ T5949] bridge_slave_0: entered promiscuous mode
[   45.643531][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.646475][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.649474][ T5952] bridge_slave_1: entered allmulticast mode
[   45.652657][ T5952] bridge_slave_1: entered promiscuous mode
[   45.670033][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.673252][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.675668][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.678331][ T5949] bridge_slave_1: entered allmulticast mode
[   45.682004][ T5949] bridge_slave_1: entered promiscuous mode
[   45.716293][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.764987][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.798053][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.802413][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.846943][ T5942] team0: Port device team_slave_0 added
[   45.852698][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.898182][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.900713][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.903047][ T5943] bridge_slave_0: entered allmulticast mode
[   45.905631][ T5943] bridge_slave_0: entered promiscuous mode
[   45.911474][ T5942] team0: Port device team_slave_1 added
[   45.946689][ T5952] team0: Port device team_slave_0 added
[   45.949773][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.952123][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.954479][ T5943] bridge_slave_1: entered allmulticast mode
[   45.957098][ T5943] bridge_slave_1: entered promiscuous mode
[   45.974758][ T5949] team0: Port device team_slave_0 added
[   45.978461][ T5952] team0: Port device team_slave_1 added
[   46.025300][ T5949] team0: Port device team_slave_1 added
[   46.054819][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.058422][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.060813][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.070179][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.086791][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.091016][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.101409][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.107578][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.112009][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.114276][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.122484][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.139543][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.141772][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.149904][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.153719][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.155957][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.164246][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.185224][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.187545][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.196029][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.220768][ T5943] team0: Port device team_slave_0 added
[   46.224194][ T5943] team0: Port device team_slave_1 added
[   46.283294][ T5942] hsr_slave_0: entered promiscuous mode
[   46.285679][ T5942] hsr_slave_1: entered promiscuous mode
[   46.305488][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.307786][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.316976][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.359245][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.362074][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.374850][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.396426][ T5952] hsr_slave_0: entered promiscuous mode
[   46.398913][ T5952] hsr_slave_1: entered promiscuous mode
[   46.401133][ T5952] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.403687][ T5952] Cannot create hsr debugfs directory
[   46.407753][ T5949] hsr_slave_0: entered promiscuous mode
[   46.410226][ T5949] hsr_slave_1: entered promiscuous mode
[   46.412366][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.414820][ T5949] Cannot create hsr debugfs directory
[   46.526759][ T5943] hsr_slave_0: entered promiscuous mode
[   46.530887][ T5943] hsr_slave_1: entered promiscuous mode
[   46.533474][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.535931][ T5943] Cannot create hsr debugfs directory
[   46.783082][ T5942] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.788497][ T5942] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.794234][ T5942] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.805486][ T5942] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.825887][ T5949] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   46.830954][ T5949] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   46.834952][ T5949] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   46.847381][ T5949] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   46.873866][ T5943] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.880537][ T5943] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.897311][ T5943] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.901695][ T5943] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.924486][ T5952] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.930460][ T5952] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.935408][ T5952] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.942034][ T5952] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.990116][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.013431][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.022133][ T5942] 8021q: adding VLAN 0 to HW filter on device team0
[   47.034805][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.042066][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.044519][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.058080][ T5949] 8021q: adding VLAN 0 to HW filter on device team0
[   47.067362][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.072796][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.075097][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.078568][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.080894][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.084847][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.087105][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.089382][ T5956] Bluetooth: hci0: command tx timeout
[   47.089409][ T5296] Bluetooth: hci1: command tx timeout
[   47.091340][ T5956] Bluetooth: hci2: command tx timeout
[   47.096624][ T5943] 8021q: adding VLAN 0 to HW filter on device team0
[   47.099200][ T5956] Bluetooth: hci3: command tx timeout
[   47.112342][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.114689][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.117909][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.120256][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.140287][ T5952] 8021q: adding VLAN 0 to HW filter on device team0
[   47.148211][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.150695][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.161393][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.163867][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.239337][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.272645][ T5949] veth0_vlan: entered promiscuous mode
[   47.281287][ T5949] veth1_vlan: entered promiscuous mode
[   47.298340][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.304827][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.309902][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.327250][ T5949] veth0_macvtap: entered promiscuous mode
[   47.339790][ T5949] veth1_macvtap: entered promiscuous mode
[   47.360754][ T5943] veth0_vlan: entered promiscuous mode
[   47.367251][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.373953][ T5942] veth0_vlan: entered promiscuous mode
[   47.377180][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.382505][ T5943] veth1_vlan: entered promiscuous mode
[   47.390807][ T5952] veth0_vlan: entered promiscuous mode
[   47.393158][ T5949] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.396101][ T5949] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.399016][ T5949] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.401910][ T5949] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.406057][ T5942] veth1_vlan: entered promiscuous mode
[   47.416788][ T5952] veth1_vlan: entered promiscuous mode
[   47.438415][ T5943] veth0_macvtap: entered promiscuous mode
[   47.447413][ T5943] veth1_macvtap: entered promiscuous mode
[   47.454425][ T5952] veth0_macvtap: entered promiscuous mode
[   47.458310][ T5952] veth1_macvtap: entered promiscuous mode
[   47.481673][ T5942] veth0_macvtap: entered promiscuous mode
[   47.489005][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.489570][ T5942] veth1_macvtap: entered promiscuous mode
[   47.491562][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.495320][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.499378][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.503472][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.514183][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.517440][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.521044][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.524328][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.528180][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.531379][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.534607][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.538318][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.549538][ T5943] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.552798][ T5943] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.555939][ T5943] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.559156][ T5943] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.566689][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.570019][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.573120][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.576490][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.580441][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.584242][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.586740][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.586830][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.592331][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.595412][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.599071][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.602122][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.605370][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.609518][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.613196][ T5952] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.615957][ T5952] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.618732][ T5952] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.621440][ T5952] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.632017][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.635503][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.638824][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.642150][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.645232][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.648501][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.653041][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.660254][ T5942] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.663042][ T5942] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.665819][ T5942] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.668588][ T5942] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.675697][ T5949] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.701037][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.705780][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.726499][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.729404][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.737185][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.739962][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.754081][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.762554][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.778337][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.782955][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.783867][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.785546][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.893258][ T6016] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   47.897633][ T6016] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[   48.082671][ T6025] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7'.
[   48.208117][    T9] hid-generic 0005:0B57:0009.0002: collection stack underflow
[   48.224585][    T9] hid-generic 0005:0B57:0009.0002: item 0 0 0 12 parsing failed
[   48.227479][    T9] hid-generic 0005:0B57:0009.0002: probe with driver hid-generic failed with error -22
[   48.318895][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   48.443221][ T6041] capability: warning: `syz.2.13' uses 32-bit capabilities (legacy support in use)
[   48.929059][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   48.931813][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   49.169324][ T5956] Bluetooth: hci3: command tx timeout
[   49.169962][ T5296] Bluetooth: hci2: command tx timeout
[   49.173309][ T5956] Bluetooth: hci0: command tx timeout
[   49.240924][ T6052] input: syz1 as /devices/virtual/input/input5
[   49.282846][ T6057] FAULT_INJECTION: forcing a failure.
[   49.282846][ T6057] name failslab, interval 1, probability 0, space 0, times 1
[   49.286907][ T6057] CPU: 2 UID: 0 PID: 6057 Comm: syz.3.19 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) 
[   49.286920][ T6057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   49.286926][ T6057] Call Trace:
[   49.286930][ T6057]  <TASK>
[   49.286934][ T6057]  dump_stack_lvl+0x16c/0x1f0
[   49.286951][ T6057]  should_fail_ex+0x512/0x640
[   49.286964][ T6057]  ? __kmalloc_noprof+0xbf/0x510
[   49.286976][ T6057]  ? kernfs_fop_write_iter+0x237/0x510
[   49.286988][ T6057]  should_failslab+0xc2/0x120
[   49.287000][ T6057]  __kmalloc_noprof+0xd2/0x510
[   49.287014][ T6057]  kernfs_fop_write_iter+0x237/0x510
[   49.287027][ T6057]  vfs_write+0x5ba/0x1180
[   49.287037][ T6057]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   49.287050][ T6057]  ? __pfx___mutex_lock+0x10/0x10
[   49.287063][ T6057]  ? __pfx_vfs_write+0x10/0x10
[   49.287081][ T6057]  ksys_write+0x12a/0x240
[   49.287089][ T6057]  ? __pfx_ksys_write+0x10/0x10
[   49.287099][ T6057]  ? rcu_is_watching+0x12/0xc0
[   49.287110][ T6057]  __do_fast_syscall_32+0x73/0x120
[   49.287125][ T6057]  do_fast_syscall_32+0x32/0x80
[   49.287138][ T6057]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   49.287150][ T6057] RIP: 0023:0xf70be579
[   49.287158][ T6057] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   49.287167][ T6057] RSP: 002b:00000000f50ae55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004
[   49.287177][ T6057] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000100
[   49.287182][ T6057] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000
[   49.287188][ T6057] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   49.287193][ T6057] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   49.287198][ T6057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   49.287210][ T6057]  </TASK>
[   49.308339][ T6061] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.580424][ T6077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25'.
[   50.309413][ T6096] syz.3.31 uses obsolete (PF_INET,SOCK_PACKET)
[   50.599430][ T6106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.34'.
[   50.876902][ T6115] process 'syz.0.37' launched './file1' with NULL argv: empty string added
[   50.950426][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   51.032658][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.112440][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   51.119708][ T6125] netlink: 'syz.3.41': attribute type 5 has an invalid length.
[   51.121978][ T6125] netlink: 24 bytes leftover after parsing attributes in process `syz.3.41'.
[   51.249015][ T5296] Bluetooth: hci0: command tx timeout
[   51.249309][ T5956] Bluetooth: hci3: command tx timeout
[   51.251348][ T5951] Bluetooth: hci2: command tx timeout
[   51.256912][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   51.271763][ T5951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   51.279514][ T5951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   51.286957][ T5951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   51.293169][ T5951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   51.302945][ T5951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   51.417436][ T6131] chnl_net:caif_netlink_parms(): no params data found
[   51.462056][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   51.467025][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   51.525326][ T6131] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.527769][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.531382][ T6131] bridge_slave_0: entered allmulticast mode
[   51.535087][ T6131] bridge_slave_0: entered promiscuous mode
[   51.538217][ T6131] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.540567][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.543165][ T6131] bridge_slave_1: entered allmulticast mode
[   51.546960][ T6131] bridge_slave_1: entered promiscuous mode
[   51.564075][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   51.581493][ T6131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.586430][ T6131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.623755][ T6131] team0: Port device team_slave_0 added
[   51.628021][ T6131] team0: Port device team_slave_1 added
[   51.662605][ T6131] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.664820][ T6131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.673696][ T6131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   51.678372][ T6131] batman_adv: batadv0: Adding interface: batadv_slave_1
[   51.681132][ T6131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.689434][ T6131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.747595][ T6131] hsr_slave_0: entered promiscuous mode
[   51.750527][ T6131] hsr_slave_1: entered promiscuous mode
[   51.753135][ T6131] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   51.755946][ T6131] Cannot create hsr debugfs directory
[   51.768822][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[   51.768922][    T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!!
[   51.911459][ T6143] ip6tnl1: entered promiscuous mode
[   51.913679][ T6143] ip6tnl1: entered allmulticast mode
[   51.917512][ T6143] team0: Device ip6tnl1 is of different type
[   52.043874][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.234375][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.309646][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.429660][   T13] bridge_slave_1: left allmulticast mode
[   52.431753][   T13] bridge_slave_1: left promiscuous mode
[   52.436369][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.444643][   T13] bridge_slave_0: left allmulticast mode
[   52.446835][   T13] bridge_slave_0: left promiscuous mode
[   52.458898][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.524355][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.48'.
[   52.695161][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   52.702013][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   52.706398][   T13] bond0 (unregistering): Released all slaves
[   53.109652][   T13] hsr_slave_0: left promiscuous mode
[   53.113217][   T13] hsr_slave_1: left promiscuous mode
[   53.115207][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.117541][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.125385][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.127884][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   53.153837][   T13] veth1_macvtap: left promiscuous mode
[   53.156205][   T13] veth0_macvtap: left promiscuous mode
[   53.158099][   T13] veth1_vlan: left promiscuous mode
[   53.160394][   T13] veth0_vlan: left promiscuous mode
[   53.178503][ T6192] FAULT_INJECTION: forcing a failure.
[   53.178503][ T6192] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   53.183434][ T6192] CPU: 2 UID: 0 PID: 6192 Comm: syz.3.54 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) 
[   53.183448][ T6192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   53.183454][ T6192] Call Trace:
[   53.183458][ T6192]  <TASK>
[   53.183461][ T6192]  dump_stack_lvl+0x16c/0x1f0
[   53.183479][ T6192]  should_fail_ex+0x512/0x640
[   53.183495][ T6192]  _copy_to_user+0x32/0xd0
[   53.183510][ T6192]  simple_read_from_buffer+0xcb/0x170
[   53.183526][ T6192]  proc_fail_nth_read+0x197/0x270
[   53.183541][ T6192]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   53.183555][ T6192]  ? rw_verify_area+0xcf/0x680
[   53.183569][ T6192]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   53.183582][ T6192]  vfs_read+0x1de/0xc70
[   53.183593][ T6192]  ? __pfx___mutex_lock+0x10/0x10
[   53.183606][ T6192]  ? __pfx_vfs_read+0x10/0x10
[   53.183618][ T6192]  ? __fget_files+0x20e/0x3c0
[   53.183638][ T6192]  ksys_read+0x12a/0x240
[   53.183646][ T6192]  ? __pfx_ksys_read+0x10/0x10
[   53.183656][ T6192]  ? rcu_is_watching+0x12/0xc0
[   53.183667][ T6192]  __do_fast_syscall_32+0x73/0x120
[   53.183682][ T6192]  do_fast_syscall_32+0x32/0x80
[   53.183696][ T6192]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   53.183707][ T6192] RIP: 0023:0xf70be579
[   53.183715][ T6192] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   53.183724][ T6192] RSP: 002b:00000000f50ae590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[   53.183734][ T6192] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f50ae620
[   53.183739][ T6192] RDX: 000000000000000f RSI: 00000000f7422ff4 RDI: 0000000000000000
[   53.183745][ T6192] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[   53.183750][ T6192] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[   53.183755][ T6192] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   53.183767][ T6192]  </TASK>
[   53.335618][ T5951] Bluetooth: hci1: command tx timeout
[   53.335641][ T5956] Bluetooth: hci2: command tx timeout
[   53.337935][ T5951] Bluetooth: hci0: command tx timeout
[   53.339911][ T5296] Bluetooth: hci3: command tx timeout
[   53.664243][   T13] team0 (unregistering): Port device team_slave_1 removed
[   53.708471][   T13] team0 (unregistering): Port device team_slave_0 removed
[   54.064830][ T6204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'.
[   54.554027][ T6131] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.560406][ T6131] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.566557][ T6131] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.577165][ T6131] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.627822][ T6131] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.638264][ T6131] 8021q: adding VLAN 0 to HW filter on device team0
[   54.647707][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.650143][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.661199][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.664012][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.702456][ T6210] netlink: 'syz.3.59': attribute type 12 has an invalid length.
[   54.706164][ T6210] netlink: 248 bytes leftover after parsing attributes in process `syz.3.59'.
[   54.710484][ T6210] Zero length message leads to an empty skb
[   54.815567][ T6131] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.836251][ T6131] veth0_vlan: entered promiscuous mode
[   54.849878][ T6131] veth1_vlan: entered promiscuous mode
[   54.862613][ T6131] veth0_macvtap: entered promiscuous mode
[   54.869637][ T6131] veth1_macvtap: entered promiscuous mode
[   54.877604][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.881908][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.885486][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.889003][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.892124][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.895336][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.899495][ T6131] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.904561][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.907782][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.912061][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.915318][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.918269][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.921839][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.925684][ T6131] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.930498][ T6131] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.933292][ T6131] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.936081][ T6131] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.939006][ T6131] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.975976][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.978555][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.002203][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.004706][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.398784][  T834] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[   55.552368][  T834] usb 6-1: config 1 interface 0 has no altsetting 0
[   55.556986][  T834] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   55.561417][ T6004] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   55.565088][  T834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.569057][  T834] usb 6-1: Product: syz
[   55.570899][  T834] usb 6-1: Manufacturer: syz
[   55.572884][  T834] usb 6-1: SerialNumber: syz
[   55.718845][ T6004] usb 8-1: Using ep0 maxpacket: 32
[   55.722089][ T6004] usb 8-1: config 0 has an invalid descriptor of length 168, skipping remainder of the config
[   55.725560][ T6004] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   55.728521][ T6004] usb 8-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[   55.731821][ T6004] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.737046][ T6004] usb 8-1: config 0 descriptor??
[   55.948828][ T6240] warning: `syz.3.65' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   55.957287][ T6004] usb 8-1: string descriptor 0 read error: -71
[   55.968194][ T6004] usb 8-1: USB disconnect, device number 2
[   56.025688][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.66'.
[   56.186956][ T6235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.192292][ T6235] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.192850][  T834] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[   56.500822][ T6251] tmpfs: Bad value for 'mpol'
[   56.553552][ T5951] Bluetooth: hci0: unexpected event 0x1d length: 14 > 5
[   56.595271][ T6256] syz.3.70: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   56.606441][ T6256] CPU: 3 UID: 0 PID: 6256 Comm: syz.3.70 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) 
[   56.606464][ T6256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   56.606473][ T6256] Call Trace:
[   56.606479][ T6256]  <TASK>
[   56.606486][ T6256]  dump_stack_lvl+0x16c/0x1f0
[   56.606513][ T6256]  warn_alloc+0x248/0x3a0
[   56.606538][ T6256]  ? __pfx_warn_alloc+0x10/0x10
[   56.606564][ T6256]  ? __get_vm_area_node+0x1b9/0x300
[   56.606587][ T6256]  ? __get_vm_area_node+0x1e5/0x300
[   56.606614][ T6256]  __vmalloc_node_range_noprof+0x1110/0x1540
[   56.606647][ T6256]  ? vb2_vmalloc_alloc+0x135/0x3f0
[   56.606668][ T6256]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   56.606699][ T6256]  ? vb2_vmalloc_alloc+0x135/0x3f0
[   56.606714][ T6256]  vmalloc_user_noprof+0x6b/0x90
[   56.606738][ T6256]  ? vb2_vmalloc_alloc+0x135/0x3f0
[   56.606752][ T6256]  vb2_vmalloc_alloc+0x135/0x3f0
[   56.606767][ T6256]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[   56.606781][ T6256]  __vb2_queue_alloc+0x8c6/0x1280
[   56.606817][ T6256]  vb2_core_reqbufs+0xa90/0xfe0
[   56.606846][ T6256]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[   56.606876][ T6256]  ? trace_contention_end+0xdd/0x130
[   56.606899][ T6256]  ? __mutex_lock+0x1ca/0xb90
[   56.606924][ T6256]  vb2_reqbufs+0x1a3/0x1f0
[   56.606945][ T6256]  ? __pfx_vb2_reqbufs+0x10/0x10
[   56.606968][ T6256]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   56.606991][ T6256]  v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0
[   56.607016][ T6256]  v4l_reqbufs+0x14f/0x1e0
[   56.607034][ T6256]  __video_do_ioctl+0xb3d/0xfc0
[   56.607056][ T6256]  ? __might_fault+0xe3/0x190
[   56.607074][ T6256]  ? __pfx___video_do_ioctl+0x10/0x10
[   56.607101][ T6256]  video_usercopy+0x47c/0x1440
[   56.607122][ T6256]  ? __pfx___video_do_ioctl+0x10/0x10
[   56.607142][ T6256]  ? __pfx_video_usercopy+0x10/0x10
[   56.607171][ T6256]  ? hook_file_ioctl_common+0x145/0x410
[   56.607195][ T6256]  v4l2_ioctl+0x1ba/0x250
[   56.607215][ T6256]  v4l2_compat_ioctl32+0x214/0x2c0
[   56.607232][ T6256]  ? __pfx_v4l2_compat_ioctl32+0x10/0x10
[   56.607249][ T6256]  __ia32_compat_sys_ioctl+0x24c/0x360
[   56.607274][ T6256]  __do_fast_syscall_32+0x73/0x120
[   56.607298][ T6256]  do_fast_syscall_32+0x32/0x80
[   56.607320][ T6256]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   56.607339][ T6256] RIP: 0023:0xf70be579
[   56.607351][ T6256] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   56.607365][ T6256] RSP: 002b:00000000f50ae55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[   56.607379][ T6256] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 00000000c0145608
[   56.607388][ T6256] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[   56.607397][ T6256] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   56.607405][ T6256] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[   56.607414][ T6256] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   56.607434][ T6256]  </TASK>
[   56.607439][ T6256] Mem-Info:
[   56.712231][ T6256] active_anon:12662 inactive_anon:0 isolated_anon:0
[   56.712231][ T6256]  active_file:10707 inactive_file:38168 isolated_file:0
[   56.712231][ T6256]  unevictable:1768 dirty:139 writeback:0
[   56.712231][ T6256]  slab_reclaimable:10082 slab_unreclaimable:54425
[   56.712231][ T6256]  mapped:26585 shmem:9439 pagetables:720
[   56.712231][ T6256]  sec_pagetables:297 bounce:0
[   56.712231][ T6256]  kernel_misc_reclaimable:0
[   56.712231][ T6256]  free:49020 free_pcp:1815 free_cma:0
[   56.726776][ T6256] Node 0 active_anon:4956kB inactive_anon:0kB active_file:60kB inactive_file:12816kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:5404kB dirty:8kB writeback:0kB shmem:4296kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8892kB pagetables:1056kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB
[   56.739891][ T6256] Node 1 active_anon:45692kB inactive_anon:0kB active_file:42768kB inactive_file:139856kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:100936kB dirty:548kB writeback:0kB shmem:33460kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3068kB pagetables:1824kB sec_pagetables:68kB all_unreclaimable? no Balloon:0kB
[   56.752566][ T6256] Node 0 DMA free:3060kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB
[   56.763203][ T6256] lowmem_reserve[]: 0 293 293 293 293
[   56.765268][ T6256] Node 0 DMA32 free:21204kB boost:4096kB min:17544kB low:20904kB high:24264kB reserved_highatomic:4096KB active_anon:4956kB inactive_anon:0kB active_file:60kB inactive_file:12816kB unevictable:3536kB writepending:8kB present:1032196kB managed:300228kB mlocked:0kB bounce:0kB free_pcp:2520kB local_pcp:1604kB free_cma:0kB
[   56.776211][ T6256] lowmem_reserve[]: 0 0 0 0 0
[   56.777776][ T6256] Node 1 DMA32 free:172744kB boost:0kB min:47148kB low:58932kB high:70716kB reserved_highatomic:0KB active_anon:45692kB inactive_anon:0kB active_file:42768kB inactive_file:139856kB unevictable:3536kB writepending:548kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:3556kB local_pcp:160kB free_cma:0kB
[   56.787769][ T6256] lowmem_reserve[]: 0 0 0 0 0
[   56.789892][ T6256] Node 0 DMA: 29*4kB (UE) 24*8kB (UE) 10*16kB (UE) 13*32kB (UE) 6*64kB (UE) 0*128kB 1*256kB (E) 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 3060kB
[   56.796133][ T6256] Node 0 DMA32: 44*4kB (UMEH) 45*8kB (UEH) 70*16kB (UEH) 209*32kB (UEH) 75*64kB (UEH) 20*128kB (UME) 9*256kB (UE) 4*512kB (UE) 1*1024kB (U) 0*2048kB 0*4096kB = 21080kB
[   56.803146][ T6256] Node 1 DMA32: 129*4kB (UME) 44*8kB (UME) 42*16kB (UME) 23*32kB (UME) 170*64kB (UME) 52*128kB (UME) 31*256kB (UM) 13*512kB (UM) 9*1024kB (M) 9*2048kB (UME) 27*4096kB (M) = 172644kB
[   56.809976][ T6256] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   56.814091][ T6256] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   56.818463][ T6256] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   56.823908][ T6256] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   56.827772][ T6256] 58316 total pagecache pages
[   56.829965][ T6256] 0 pages in swap cache
[   56.831689][ T6256] Free swap  = 124996kB
[   56.833809][ T6256] Total swap = 124996kB
[   56.836650][ T6256] 524155 pages RAM
[   56.839005][ T6256] 0 pages HighMem/MovableOnly
[   56.841269][ T6256] 208187 pages reserved
[   56.844059][ T6256] 0 pages cma reserved
[   57.186811][ T1173] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.451389][ T5296] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   57.454448][ T5296] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   57.457296][ T5296] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   57.461879][ T5296] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   57.464566][ T5296] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   57.719094][ T6271] chnl_net:caif_netlink_parms(): no params data found
[   57.782763][ T6271] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.785140][ T6271] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.787576][ T6271] bridge_slave_0: entered allmulticast mode
[   57.791382][ T6271] bridge_slave_0: entered promiscuous mode
[   57.795087][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.797658][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.800173][ T6271] bridge_slave_1: entered allmulticast mode
[   57.802822][ T6271] bridge_slave_1: entered promiscuous mode
[   57.834664][ T6271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.840261][ T6271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.871745][ T6271] team0: Port device team_slave_0 added
[   57.874983][ T6271] team0: Port device team_slave_1 added
[   57.907629][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.911388][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.921262][ T6271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.925544][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.927807][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.935919][ T6271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.952195][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.75'.
[   57.976114][ T6271] hsr_slave_0: entered promiscuous mode
[   57.979177][ T6271] hsr_slave_1: entered promiscuous mode
[   58.172954][ T1322] usb 6-1: USB disconnect, device number 2
[   58.176823][ T1322] usblp0: removed
[   58.259554][   T40] audit: type=1804 audit(1746588124.596:2): pid=6288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.76" name="/newroot/28/bus" dev="tmpfs" ino=166 res=1 errno=0
[   58.369889][ T6294] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.77' sets config #1
[   58.746242][ T6287] syz.1.77 (6287): drop_caches: 2
[   58.814718][ T1173] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.935825][ T1173] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.012806][ T6303] netlink: 820 bytes leftover after parsing attributes in process `syz.0.81'.
[   59.024338][ T1173] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.150338][ T1173] bridge_slave_1: left allmulticast mode
[   59.152888][ T1173] bridge_slave_1: left promiscuous mode
[   59.155547][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.161134][ T1173] bridge_slave_0: left allmulticast mode
[   59.163336][ T1173] bridge_slave_0: left promiscuous mode
[   59.165493][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.394398][ T1173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   59.399190][ T1173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   59.406446][ T1173] bond0 (unregistering): Released all slaves
[   59.491117][ T5296] Bluetooth: hci1: command tx timeout
[   59.561148][ T6323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.84'.
[   59.724375][   T40] audit: type=1326 audit(1746588126.066:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.1.85" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000
[   59.737609][   T40] audit: type=1326 audit(1746588126.066:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.1.85" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000
[   59.751587][   T40] audit: type=1326 audit(1746588126.066:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.1.85" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708e579 code=0x7ffc0000
[   59.764592][   T40] audit: type=1326 audit(1746588126.066:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.1.85" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000
[   59.778710][   T40] audit: type=1326 audit(1746588126.066:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.1.85" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000
[   59.787836][   T40] audit: type=1326 audit(1746588126.066:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.1.85" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf708e579 code=0x7ffc0000
[   59.795662][   T40] audit: type=1326 audit(1746588126.066:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.1.85" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000
[   59.804352][   T40] audit: type=1326 audit(1746588126.066:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.1.85" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000
[   59.811470][   T40] audit: type=1326 audit(1746588126.066:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.1.85" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf708e579 code=0x7ffc0000
[   59.821015][ T1173] hsr_slave_0: left promiscuous mode
[   59.823915][ T1173] hsr_slave_1: left promiscuous mode
[   59.826231][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.829805][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.832858][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.835548][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.856441][ T1173] veth1_macvtap: left promiscuous mode
[   59.859069][ T1173] veth0_macvtap: left promiscuous mode
[   59.861000][ T1173] veth1_vlan: left promiscuous mode
[   59.863121][ T1173] veth0_vlan: left promiscuous mode
[   60.418896][ T1173] team0 (unregistering): Port device team_slave_1 removed
[   60.477018][ T1173] team0 (unregistering): Port device team_slave_0 removed
[   60.955554][ T6271] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   60.961432][ T6271] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   60.969815][ T6271] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   60.975472][ T6271] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.036081][ T6271] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.053593][ T6271] 8021q: adding VLAN 0 to HW filter on device team0
[   61.068054][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.071165][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.091621][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.093931][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.203061][ T6371] netlink: 36 bytes leftover after parsing attributes in process `syz.3.93'.
[   61.207168][ T6371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.93'.
[   61.241763][ T6271] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.271985][ T6271] veth0_vlan: entered promiscuous mode
[   61.276871][ T6271] veth1_vlan: entered promiscuous mode
[   61.292519][ T6271] veth0_macvtap: entered promiscuous mode
[   61.296975][ T6271] veth1_macvtap: entered promiscuous mode
[   61.311403][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.315033][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.318013][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.321905][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.325431][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.331034][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.336417][ T6271] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.343243][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.346614][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.353563][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.356938][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.360045][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.363305][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.367223][ T6271] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.376609][ T6271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.380608][ T6271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.384191][ T6271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.387758][ T6271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.425860][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.431202][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.447325][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.453063][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.336260][ T6391] FAULT_INJECTION: forcing a failure.
[   62.336260][ T6391] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   62.340745][ T6391] CPU: 2 UID: 0 PID: 6391 Comm: syz.1.99 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) 
[   62.340758][ T6391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   62.340764][ T6391] Call Trace:
[   62.340768][ T6391]  <TASK>
[   62.340772][ T6391]  dump_stack_lvl+0x16c/0x1f0
[   62.340804][ T6391]  should_fail_ex+0x512/0x640
[   62.340823][ T6391]  _copy_from_user+0x2e/0xd0
[   62.340838][ T6391]  memdup_user+0x6b/0xe0
[   62.340851][ T6391]  strndup_user+0x78/0xe0
[   62.340864][ T6391]  __ia32_sys_mount+0x137/0x310
[   62.340875][ T6391]  ? __pfx___ia32_sys_mount+0x10/0x10
[   62.340886][ T6391]  ? rcu_is_watching+0x12/0xc0
[   62.340897][ T6391]  __do_fast_syscall_32+0x73/0x120
[   62.340912][ T6391]  do_fast_syscall_32+0x32/0x80
[   62.340926][ T6391]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   62.340938][ T6391] RIP: 0023:0xf708e579
[   62.340946][ T6391] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   62.340955][ T6391] RSP: 002b:00000000f507e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[   62.340964][ T6391] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000140
[   62.340970][ T6391] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 00000000800009c0
[   62.340975][ T6391] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   62.340981][ T6391] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   62.340986][ T6391] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   62.340997][ T6391]  </TASK>
[   62.411358][ T6393] netlink: 'syz.0.100': attribute type 1 has an invalid length.
[   62.430866][ T6393] bond1: (slave gretap1): making interface the new active one
[   62.434076][ T6393] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   62.877695][ T5987] libceph: connect (1)[c::]:6789 error -101
[   62.880260][ T5987] libceph: mon0 (1)[c::]:6789 connect error
[   63.118771][ T1322] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[   63.139732][ T5987] libceph: connect (1)[c::]:6789 error -101
[   63.141797][ T5987] libceph: mon0 (1)[c::]:6789 connect error
[   63.270427][ T1322] usb 8-1: config index 0 descriptor too short (expected 156, got 27)
[   63.273117][ T1322] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   63.276621][ T1322] usb 8-1: config 0 interface 0 altsetting 191 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   63.280378][ T1322] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   63.283880][ T1322] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x8F has invalid wMaxPacketSize 0
[   63.286997][ T1322] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   63.291741][ T1322] usb 8-1: config 0 interface 0 has no altsetting 0
[   63.295401][ T1322] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   63.298232][ T1322] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   63.301069][ T1322] usb 8-1: Product: syz
[   63.302439][ T1322] usb 8-1: Manufacturer: syz
[   63.303902][ T1322] usb 8-1: SerialNumber: syz
[   63.307048][ T1322] usb 8-1: config 0 descriptor??
[   63.312237][ T1322] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   63.316260][ T1322] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   63.474802][ T6409] ceph: No mds server is up or the cluster is laggy
[   63.512396][ T6413] ldusb 8-1:0.0: Couldn't submit interrupt_in_urb -90
[   63.517508][ T6413] tmpfs: Bad value for 'mpol'
[   63.519476][ T6416] netlink: 36 bytes leftover after parsing attributes in process `syz.0.106'.
[   63.520819][   T40] kauditd_printk_skb: 206 callbacks suppressed
[   63.520827][   T40] audit: type=1326 audit(1746588129.866:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.3.105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000
[   63.525843][ T6413] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   63.529623][ T6416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.106'.
[   63.534008][   T40] audit: type=1326 audit(1746588129.866:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.3.105" exe="/syz-executor" sig=0 arch=40000003 syscall=234 compat=1 ip=0xf70be579 code=0x7ffc0000
[   63.543974][ T6413] 9pnet_fd: Insufficient options for proto=fd
[   63.552104][   T40] audit: type=1326 audit(1746588129.866:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.3.105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000
[   63.561564][   T40] audit: type=1326 audit(1746588129.866:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.3.105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000
[   63.580114][   T65] usb 8-1: USB disconnect, device number 3
[   63.583796][   T65] ldusb 8-1:0.0: LD USB Device #0 now disconnected
[   63.588092][   T40] audit: type=1326 audit(1746588129.866:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.3.105" exe="/syz-executor" sig=0 arch=40000003 syscall=364 compat=1 ip=0xf70be579 code=0x7ffc0000
[   63.598091][   T40] audit: type=1326 audit(1746588129.866:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.3.105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000
[   63.605330][   T40] audit: type=1326 audit(1746588129.866:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.3.105" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70be579 code=0x7ffc0000
[   63.612111][   T40] audit: type=1326 audit(1746588129.866:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.3.105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000
[   63.619134][   T40] audit: type=1326 audit(1746588129.866:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.3.105" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf70be579 code=0x7ffc0000
[   63.625998][   T40] audit: type=1326 audit(1746588129.866:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.3.105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000
[   63.958215][ T6429] netlink: 'syz.1.111': attribute type 1 has an invalid length.
[   63.972573][ T1173] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.040351][ T6429] 8021q: adding VLAN 0 to HW filter on device bond2
[   64.044470][ T6429] bond1: (slave bond2): making interface the new active one
[   64.047942][ T6429] bond1: (slave bond2): Enslaving as an active interface with an up link
[   64.055528][ T6429] netlink: 60 bytes leftover after parsing attributes in process `syz.1.111'.
[   64.060137][ T6429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.111'.
[   64.193463][ T5951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.196875][ T5951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.200536][ T5951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.203428][ T5951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.207546][ T5951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.307822][ T6435] chnl_net:caif_netlink_parms(): no params data found
[   64.414361][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.417518][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.421377][ T6435] bridge_slave_0: entered allmulticast mode
[   64.424266][ T6435] bridge_slave_0: entered promiscuous mode
[   64.428467][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.431820][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.434188][ T6435] bridge_slave_1: entered allmulticast mode
[   64.436963][ T6435] bridge_slave_1: entered promiscuous mode
[   64.479861][ T6435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.485886][ T6435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.525504][ T6435] team0: Port device team_slave_0 added
[   64.529496][ T6435] team0: Port device team_slave_1 added
[   64.559821][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.562124][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.570813][ T6435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.575197][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.577346][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.586013][ T6435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.636054][ T6435] hsr_slave_0: entered promiscuous mode
[   64.638390][ T6435] hsr_slave_1: entered promiscuous mode
[   64.640687][ T6435] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.643141][ T6435] Cannot create hsr debugfs directory
[   64.717656][ T6453] netlink: 36 bytes leftover after parsing attributes in process `syz.0.116'.
[   64.729066][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.116'.
[   65.352902][ T6465] trusted_key: syz.3.119 sent an empty control message without MSG_MORE.
[   65.360082][ T6465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.119'.
[   65.733406][ T6460] ==================================================================
[   65.736044][ T6460] BUG: KASAN: vmalloc-out-of-bounds in vrealloc_noprof+0x132/0x320
[   65.738577][ T6460] Write of size 4064 at addr ffffc90004ecd020 by task syz.1.118/6460
[   65.742588][ T6460] 
[   65.743374][ T6460] CPU: 0 UID: 0 PID: 6460 Comm: syz.1.118 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) 
[   65.743387][ T6460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   65.743394][ T6460] Call Trace:
[   65.743397][ T6460]  <TASK>
[   65.743401][ T6460]  dump_stack_lvl+0x116/0x1f0
[   65.743418][ T6460]  print_report+0xc3/0x670
[   65.743429][ T6460]  ? __virt_addr_valid+0x5e/0x590
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   65.743444][ T6460]  ? vrealloc_noprof+0x132/0x320
[   65.743452][ T6460]  kasan_report+0xe0/0x110
[   65.743463][ T6460]  ? vrealloc_noprof+0x132/0x320
[   65.743473][ T6460]  kasan_check_range+0xef/0x1a0
[   65.743486][ T6460]  __asan_memset+0x23/0x50
[   65.743501][ T6460]  vrealloc_noprof+0x132/0x320
[   65.743510][ T6460]  push_insn_history+0x2ae/0x6c0
[   65.743522][ T6460]  do_check_common+0xbd3/0xc2a0
[   65.743538][ T6460]  ? __pfx_do_check_common+0x10/0x10
[   65.743547][ T6460]  ? lockdep_hardirqs_on+0x7c/0x110
[   65.743561][ T6460]  ? kfree+0x2b6/0x4d0
[   65.743568][ T6460]  ? bpf_check+0x6c86/0xb460
[   65.743577][ T6460]  ? bpf_check+0x7b2f/0xb460
[   65.743587][ T6460]  bpf_check+0x7f51/0xb460
[   65.743601][ T6460]  ? __pfx_bpf_check+0x10/0x10
[   65.743610][ T6460]  ? pcpu_alloc_noprof+0x949/0x1470
[   65.743623][ T6460]  ? __lock_acquire+0xaa4/0x1ba0
[   65.743639][ T6460]  ? find_held_lock+0x2b/0x80
[   65.743649][ T6460]  ? __asan_memset+0x23/0x50
[   65.743663][ T6460]  ? bpf_obj_name_cpy+0x14a/0x1a0
[   65.743676][ T6460]  bpf_prog_load+0xe41/0x2490
[   65.743690][ T6460]  ? __pfx_bpf_prog_load+0x10/0x10
[   65.743707][ T6460]  ? bpf_lsm_bpf+0x9/0x10
[   65.743717][ T6460]  __sys_bpf+0x433c/0x4d80
[   65.743729][ T6460]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   65.743743][ T6460]  ? __pfx___sys_bpf+0x10/0x10
[   65.743755][ T6460]  ? __lock_acquire+0xaa4/0x1ba0
[   65.743772][ T6460]  ? kcov_ioctl+0x265/0x730
[   65.743785][ T6460]  __ia32_sys_bpf+0x76/0xe0
[   65.743799][ T6460]  __do_fast_syscall_32+0x73/0x120
[   65.743813][ T6460]  do_fast_syscall_32+0x32/0x80
[   65.743826][ T6460]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   65.743838][ T6460] RIP: 0023:0xf708e579
[   65.743846][ T6460] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   65.743855][ T6460] RSP: 002b:00000000f507e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165
[   65.743865][ T6460] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800017c0
[   65.743871][ T6460] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000
[   65.743877][ T6460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   65.743882][ T6460] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   65.743888][ T6460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   65.743896][ T6460]  </TASK>
[   65.743899][ T6460] 
[   65.832326][ T6460] The buggy address belongs to the virtual mapping at
[   65.832326][ T6460]  [ffffc90004ead000, ffffc90004ecf000) created by:
[   65.832326][ T6460]  kvrealloc_noprof+0x7d/0xd0
[   65.837919][ T6460] 
[   65.838768][ T6460] The buggy address belongs to the physical page:
[   65.840790][ T6460] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x429ab
[   65.843541][ T6460] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[   65.845844][ T6460] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000
[   65.848552][ T6460] raw: 0000000000000004 0000000000000000 00000001ffffffff 0000000000000000
[   65.851313][ T6460] page dumped because: kasan: bad access detected
[   65.853334][ T6460] page_owner tracks the page as allocated
[   65.855183][ T6460] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102cc2(GFP_HIGHUSER|__GFP_NOWARN), pid 6460, tgid 6459 (syz.1.118), ts 65733324658, free_ts 65450604898
[   65.860479][ T6460]  post_alloc_hook+0x181/0x1b0
[   65.862035][ T6460]  get_page_from_freelist+0x135c/0x3920
[   65.863794][ T6460]  __alloc_frozen_pages_noprof+0x5a8/0x23a0
[   65.865709][ T6460]  alloc_pages_mpol+0x1fb/0x550
[   65.867267][ T6460]  alloc_pages_noprof+0x131/0x390
[   65.868858][ T6460]  __vmalloc_node_range_noprof+0x732/0x1540
[   65.870777][ T6460]  __kvmalloc_node_noprof+0x2ff/0x600
[   65.872535][ T6460]  kvrealloc_noprof+0x7d/0xd0
[   65.874063][ T6460]  push_insn_history+0x2ae/0x6c0
[   65.875693][ T6460]  do_check_common+0xbd3/0xc2a0
[   65.877325][ T6460]  bpf_check+0x7f51/0xb460
[   65.878749][ T6460]  bpf_prog_load+0xe41/0x2490
[   65.880247][ T6460]  __sys_bpf+0x433c/0x4d80
[   65.881692][ T6460]  __ia32_sys_bpf+0x76/0xe0
[   65.883240][ T6460]  __do_fast_syscall_32+0x73/0x120
[   65.884869][ T6460]  do_fast_syscall_32+0x32/0x80
[   65.886457][ T6460] page last free pid 114 tgid 114 stack trace:
[   65.888385][ T6460]  free_unref_folios+0x999/0x1630
[   65.889983][ T6460]  shrink_folio_list+0x3255/0x40e0
[   65.891656][ T6460]  evict_folios+0x779/0x1b60
[   65.893131][ T6460]  try_to_shrink_lruvec+0x5a3/0x990
[   65.894798][ T6460]  shrink_one+0x3e3/0x7a0
[   65.896231][ T6460]  shrink_node+0x268e/0x3d20
[   65.897765][ T6460]  balance_pgdat+0xba5/0x19c0
[   65.899445][ T6460]  kswapd+0x590/0xb90
[   65.900778][ T6460]  kthread+0x3c2/0x780
[   65.902155][ T6460]  ret_from_fork+0x45/0x80
[   65.903590][ T6460]  ret_from_fork_asm+0x1a/0x30
[   65.905133][ T6460] 
[   65.905912][ T6460] Memory state around the buggy address:
[   65.907758][ T6460]  ffffc90004eccf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   65.910417][ T6460]  ffffc90004eccf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   65.912993][ T6460] >ffffc90004ecd000: 00 00 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   65.915595][ T6460]                                ^
[   65.917253][ T6460]  ffffc90004ecd080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   65.919844][ T6460]  ffffc90004ecd100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   65.922399][ T6460] ==================================================================
[   65.930941][ T1173] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.936176][ T6460] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   65.938776][ T6460] CPU: 0 UID: 0 PID: 6460 Comm: syz.1.118 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) 
[   65.942521][ T6460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   65.946044][ T6460] Call Trace:
[   65.947163][ T6460]  <TASK>
[   65.948178][ T6460]  dump_stack_lvl+0x3d/0x1f0
[   65.949825][ T6460]  panic+0x71c/0x800
[   65.951161][ T6460]  ? __pfx_panic+0x10/0x10
[   65.952641][ T6460]  ? rcu_is_watching+0x12/0xc0
[   65.954236][ T6460]  ? preempt_schedule_thunk+0x16/0x30
[   65.956027][ T6460]  ? vrealloc_noprof+0x132/0x320
[   65.957608][ T6460]  ? preempt_schedule_common+0x44/0xc0
[   65.959429][ T6460]  ? vrealloc_noprof+0x132/0x320
[   65.961083][ T6460]  check_panic_on_warn+0xab/0xb0
[   65.962702][ T6460]  end_report+0x107/0x170
[   65.964091][ T6460]  kasan_report+0xee/0x110
[   65.965622][ T6460]  ? vrealloc_noprof+0x132/0x320
[   65.967265][ T6460]  kasan_check_range+0xef/0x1a0
[   65.968864][ T6460]  __asan_memset+0x23/0x50
[   65.970382][ T6460]  vrealloc_noprof+0x132/0x320
[   65.971972][ T6460]  push_insn_history+0x2ae/0x6c0
[   65.973603][ T6460]  do_check_common+0xbd3/0xc2a0
[   65.975242][ T6460]  ? __pfx_do_check_common+0x10/0x10
[   65.976962][ T6460]  ? lockdep_hardirqs_on+0x7c/0x110
[   65.978688][ T6460]  ? kfree+0x2b6/0x4d0
[   65.980043][ T6460]  ? bpf_check+0x6c86/0xb460
[   65.981575][ T6460]  ? bpf_check+0x7b2f/0xb460
[   65.983108][ T6460]  bpf_check+0x7f51/0xb460
[   65.984601][ T6460]  ? __pfx_bpf_check+0x10/0x10
[   65.986177][ T6460]  ? pcpu_alloc_noprof+0x949/0x1470
[   65.987874][ T6460]  ? __lock_acquire+0xaa4/0x1ba0
[   65.989539][ T6460]  ? find_held_lock+0x2b/0x80
[   65.991105][ T6460]  ? __asan_memset+0x23/0x50
[   65.992625][ T6460]  ? bpf_obj_name_cpy+0x14a/0x1a0
[   65.994261][ T6460]  bpf_prog_load+0xe41/0x2490
[   65.995819][ T6460]  ? __pfx_bpf_prog_load+0x10/0x10
[   65.997499][ T6460]  ? bpf_lsm_bpf+0x9/0x10
[   65.998938][ T6460]  __sys_bpf+0x433c/0x4d80
[   66.000413][ T6460]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   66.002070][ T6460]  ? __pfx___sys_bpf+0x10/0x10
[   66.003643][ T6460]  ? __lock_acquire+0xaa4/0x1ba0
[   66.005265][ T6460]  ? kcov_ioctl+0x265/0x730
[   66.006764][ T6460]  __ia32_sys_bpf+0x76/0xe0
[   66.008272][ T6460]  __do_fast_syscall_32+0x73/0x120
[   66.010033][ T6460]  do_fast_syscall_32+0x32/0x80
[   66.011652][ T6460]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   66.013702][ T6460] RIP: 0023:0xf708e579
[   66.015078][ T6460] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   66.021242][ T6460] RSP: 002b:00000000f507e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165
[   66.023927][ T6460] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800017c0
[   66.026491][ T6460] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000
[   66.029020][ T6460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   66.031543][ T6460] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   66.034044][ T6460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   66.036590][ T6460]  </TASK>
[   66.038230][ T6460] Kernel Offset: disabled
[   66.039650][ T6460] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:22:12  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000007a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff854c2175 RDI=ffffffff9addfbc0 RBP=ffffffff9addfb80 RSP=ffffc90003d4ef00
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3039636666667257
R12=0000000000000000 R13=000000000000007a R14=ffffffff9addfb80 R15=ffffffff854c2110
RIP=ffffffff854c219f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff8880977ec000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000002f21fffc CR3=000000001f19a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004c00000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff88802b241480 RCX=ffffffff81ae9e69 RDX=ffff888021050000
RSI=ffffffff81ae9e43 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000106efe0
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffffed1005648291 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88802b33b180
RIP=ffffffff81ae9e45 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880978ec000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000080a21000 CR3=000000001f19a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000080000000 RBX=0000000000000002 RCX=0000000000000001 RDX=0000000000000000
RSI=ffffffff8dccc386 RDI=ffffffff8bf46c60 RBP=ffffffff8e3bf440 RSP=ffffc900010befe0
R8 =0000000000000007 R9 =000000000007ffff R10=000000000000000a R11=0000000000000000
R12=ffff888044d20000 R13=ffff888044d20af0 R14=00000000ffffffff R15=0000000000000000
RIP=ffffffff8b695b9d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880979ec000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000008021b000 CR3=000000005b259000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=dffffc0000000000 RBX=1ffff920006c4eee RCX=ffffffff81f5bae0 RDX=1ffffd4000267a88
RSI=0000000000000008 RDI=ffffea000133d440 RBP=ffffea000133d440 RSP=ffffc90003627768
R8 =0000000000000000 R9 =fffff94000267a88 R10=ffffea000133d447 R11=0000000000000000
R12=ffffea000133d440 R13=0000018000000000 R14=0000018000000000 R15=0000008000000000
RIP=ffffffff81f5baf5 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888097aec000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7f16e40 CR3=0000000025f41000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73b2ff4
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000