last executing test programs:

2.879616607s ago: executing program 0 (id=156):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0xfffd, 0x3, @loopback}, 0x1c)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001580)={r4, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={r4, 0xf6}, &(0x7f0000000080)=0x8)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x1, 0x7}}, 0xe8)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000000)=0x1a, 0x4)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)

2.800108626s ago: executing program 0 (id=157):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0xcbff9000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000b80)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0xa, 0x0, 0x38}, @fd, @fda={0x66646185, 0xb, 0x1, 0x35}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0}, 0x400)
mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0xc0ed0000, &(0x7f0000000280)=ANY=[@ANYBLOB="661372", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRES32, @ANYBLOB=',\x00'])
r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r6)
keyctl$search(0xa, r6, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff)
ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000600))
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {@in=@rand_addr=0x1, 0x0, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x0, 0xffff, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x2, 0x2, 0x7}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCDELRT(r8, 0x890c, &(0x7f00000075c0)={0x1, @default, @rose={'rose', 0x0}, 0x5333, 'syz0\x00', @bcast, 0x3, 0x0, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]})

2.690093365s ago: executing program 0 (id=158):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0x10000}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffd, 0x5, 0xfc9e, 0x3ff, 0x3d1a, 0x5, 0x0, 0x80000001, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0xfff], 0x0, 0x0, 0x1, 0x1}}, 0x40)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0xffffffffffffffff, <r5=>0xffffffffffffffff}}, './file0\x00'})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
getgid()
write$FUSE_ATTR(r4, &(0x7f0000002080)={0x78, 0x0, 0x0, {0x8, 0x7, 0x0, {0x1, 0xff, 0x1, 0x5, 0x43, 0x1400000000000000, 0xfffffff9, 0x31b, 0x9, 0x4000, 0x0, 0xffffffffffffffff, r5, 0xfffffffc, 0x3}}}, 0x78)
write$binfmt_script(r1, &(0x7f0000002100)={'#! ', './file0', [], 0xa, "ccdf355105e048c3fd6b311d8bd5d4ee8937147f9eefd20f88a20b9a24095afb1110e4591deb2363ef20a8d3eb3aff751dc418594d63679af913afb5ca727f4501c0c34d5b58abe3e2199ad68d0b3710b8d8a9640338e09a97aa173ddae4c36436108e2610befc2e191e1de61c6e1deb5fa4f197d1bae6f2715fcda076ec370821f5b2d1cba6b3d9ecadb251c432443b24ce81f3d4ffd32738e413"}, 0xa6)
lseek(r4, 0x3, 0x1)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002200)={'batadv_slave_0\x00'})
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f00000023c0)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x1081}, 0xc, &(0x7f0000002380)={&(0x7f0000002280)=ANY=[@ANYBLOB="a67d3dfc", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf25170000003c000380080003000000000008000200050000000800030040000000080003000700000008000100ee000000080003000000000008000100020000001c0004800900010073797a31000000000900010073797a3100000000500002800800020006000000080001005f050000080001000200000008000100050000000c00038008000100f70d000008000200040000000800010000020000040004000400040008000200010000801c000380080003000100000008000100020000000800020001000000"], 0xd8}, 0x1, 0x0, 0x0, 0x41}, 0x1)
socket$netlink(0x10, 0x3, 0x8)
r7 = getuid()
mount$tmpfs(0x0, 0x0, 0x0, 0x8c4000, &(0x7f0000002480)=ANY=[@ANYBLOB='mpol=interleave=static:T99\x0091,euid=', @ANYRESDEC=0x0, @ANYBLOB=',permit_directio,euid<', @ANYRESDEC=r7, @ANYBLOB="f4ff"])
syz_emit_vhci(0x0, 0x0)
syz_emit_vhci(&(0x7f00000025c0)=ANY=[@ANYBLOB="043e1d1905c8001c0aa2ea8aec364f084a9e02c081027f9900000900"], 0x20)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
rt_sigqueueinfo(0x0, 0xf, &(0x7f00000026c0)={0x3e, 0x25b, 0x40})
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
syz_emit_ethernet(0x37, 0x0, &(0x7f0000002900)={0x0, 0x1, [0xb30, 0x926, 0x1000d21, 0x88c]})
getgroups(0x3, &(0x7f0000000180)=[r5, r5, r5])
fstat(r4, 0x0)
fstat(r8, 0x0)
r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r9, 0x0)

2.599553798s ago: executing program 0 (id=161):
syz_open_procfs(0x0, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000000000000001000740000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa3d32221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695ec1891223a53600d5031b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a5efe6c7115774effe28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c2511eb0f9600a0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe95bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6d997eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e641036a8afa2ccdb47d7990d5a007faccb2f86664179f2e229723bce870aec3f7f4e529c92add713590ce6c0ea1a0499fb76d32636cfd18b6b39fb48f1a6d46f6ae8f45c47ee8260f9531070d170ab92739be0bdf5b76f8a9b93a5e550dfecab79d2e46085a67024b6be883c79ade2873458fda5a7f4eb62b05634356ee3b45723f4cff19c654ad441ff5b8792df7f18d841c351e195151b1b3532e742a6525c86efdb29653f35ce8e0a41c8c6d39f39531e13aeb1172893eeedd83b6afb939f8e6abc5482696aa48918000000000000002900000037"], 0x590}}], 0x1, 0x8008801)
sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="114ea8a4d911383b6408a961bfc4fba23a0c4fcbb5438b98e686acc8772b31a2ee6d1226199d7b26b0ce5e04962ea6f95828bee9383c881590c574146c399cafb39bcf05e40309d3acaad5142e9f2daefd5aef8e34", 0x55}], 0x1}}], 0x1, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0xa)
write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x52, [0x0, 0x3, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xe1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0xfffffffc, 0xfffffffc, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x5e7, 0x0, 0x0, 0x10000000, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000]}, 0x45c)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5)
ioctl$UI_DEV_CREATE(r2, 0x5501)
writev(r1, 0x0, 0x0)
read$FUSE(r1, &(0x7f0000002a80)={0x2020}, 0x2020)

2.499574964s ago: executing program 0 (id=163):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={<r1=>0x0, @in={{0x2, 0x4e23, @private=0xa010101}}, 0x0, 0x9, 0x9, 0x7, 0x5}, &(0x7f00000000c0)=0x98)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r1, 0x5}, 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="080003000800000008000100", @ANYRES32=r0], 0x60}}, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f00000002c0)={0x100, 0xffb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3})
close(r0)

2.498768528s ago: executing program 0 (id=165):
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="000128bd7000fcdbdf2505000000280006800400050004000200040002000400020008000100ff0f00000800010004000000040005004400028004000400140003800800010006000000080002000500000004000400040004000800010008000000080002000800000008000200060000000800020007000000040001801c0009800800020003000000080002000000000008000200020000000c00098008000100070000008c0005800c0002800800040000000000240002800800030081000000080002000000000008000400234f0000080003000180000008000100756470002c0002800800020006"], 0x138}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg$unix(r2, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1}}], 0x1, 0x40000382, 0x0)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x183000)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800b0007"], 0xc4}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x5, "d88fd87f1ad6eeb75a957fe0213b2e100af028f0030b2eff0b61e6e66b8f37ff"})
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c000180060006006558000004050280ff0411"], 0x528}}, 0xc000)

1.389477436s ago: executing program 3 (id=178):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="fd35000c0000000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
syz_open_dev$dri(0x0, 0x1, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, 0x0, 0x210800, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0)
r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000200)={0xc0000000, 0x9, "93da7238da10376fa7db55ce3890199a14531ccf8b7700854beb90516753d55b", 0x61be, 0x4, 0x0, 0x80, 0x615, 0xfffffff1, 0x3, 0x10001, [0xfffffffa, 0x8, 0x571e27c2, 0x8001]})
accept4$rose(r0, &(0x7f0000000080)=@full={0xb, @remote, @remote, 0x0, [@default, @remote, @rose, @netrom, @null, @null]}, 0x0, 0x0)

1.329636434s ago: executing program 3 (id=179):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FIGETBSZ(r4, 0x5421, &(0x7f0000000040))
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000))
sysfs$1(0x3, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000140)=0x2, 0x4)
timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)=<r7=>0x0)
timer_settime(r7, 0x1, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=<r8=>0x0)
timer_settime(r8, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="b905010040b834980000ba000000000f30440f20c00f01c5440f22c0c4e2f91e7ad366ba4000ec66baf80cb8a16c9081f30f52dd66bafc0cec660f08b805000000b9070000000f01c164260f78b10018000066429600660f5ff2c4c151d04700", 0x60}], 0x8, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
timer_delete(r7)
write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0)
preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)

1.100208241s ago: executing program 1 (id=181):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000040)={0x10, 0x0, "c1b1af744f641314901e587fc0558f51"})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000001c0)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x8000000}, 0x20000d00)

1.099677488s ago: executing program 1 (id=182):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x4, 0x6, 0x7ff, 0x9, 0x6, 0x4000, 0x2]}}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2048080}, 0x40000)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x2, 0x5, 0x3, 0xfffffe00}, {0x2, 0x1, 0x8, 0x401}, {0xe68, 0x8, 0x1, 0x1}, {0x3, 0x30, 0x4, 0x9}, {0x0, 0x3, 0x2, 0x7fff}, {0x0, 0xfb, 0x3, 0x4}]})
ioctl$VT_OPENQRY(r3, 0x4b4c, &(0x7f0000000140))

1.019290426s ago: executing program 1 (id=183):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000005dc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="04010000160001"], 0x104}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r5 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0)
ioctl$RTC_UIE_ON(r5, 0x7003)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)
socket$inet6_sctp(0xa, 0x5, 0x84)
move_mount(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220)
ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x24, 0x2, 0x10, 0x16, 0x4, 0x8000, 0xffffffff}})
ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000000480)={0x10, 0x6, 0x3, 0x2, 0x3, 0xc3, 0x6, 0xf4, 0x1})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x2}, {0x1, 0x4}, {0x6, 0x9}]}]}]}]}, 0x34}}, 0x48080)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x40)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000000)=0x2, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x7, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

905.206628ms ago: executing program 3 (id=184):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
socket$alg(0x26, 0x5, 0x0) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="000000000000000000000000000000000fb114309dd32358f52770a7a789445c0703f2520d19bdf232f0a33c36bda3d4bbc46978b183d38e23c8a8e84905168bc20201c0608f8e8f0b60f45659da2e45dc92ba1f0a9e70b79f37d37686499030f50880f7a4f93873f8d3b494619caa170375f5254429a154d07d7c9cc6d7", 0x7e)
r3 = accept4(r2, 0x0, 0x0, 0x0) (async)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) (async)
connect$inet6(r4, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r4, &(0x7f0000000040)="836ecb1bdf883918819e3a788035fb243486a348e7876388", 0x18)
sendmmsg$unix(r3, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0x1}, {&(0x7f0000000100)="d5", 0xf4240}], 0x2}}], 0x1, 0x0)

809.353069ms ago: executing program 3 (id=185):
r0 = socket$netlink(0x10, 0x3, 0x7)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000004c0))
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000340)={0x2, 0x2, 0x2})
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000380)={0x2, @sdr})
syz_emit_ethernet(0x7e, &(0x7f0000000800)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@empty}, {@broadcast, 0x1}, {@remote}, {@private=0xfffffffd}, {@multicast1}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0xfe}}]}, @lsrr={0x83, 0x3}]}}}}}}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f2, 0x10, 0x70bd27, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20000040}, 0x44)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000371efdb9a941e4dab1bb58ab8c98f900", @ANYRES16=r4, @ANYBLOB="ad4300000000000000000d000000"], 0x14}}, 0x0)

808.617249ms ago: executing program 3 (id=186):
vmsplice(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000000000)="bc8e44fb06e159a3048ab2585e3d102ebb4805a7c233657ca238e329691364eeff85a4baadd1975a6cee7d82bc096526df613dbcdef3e45ab6fd86252ca8a03ab61f109e40080494c2dc92b07d8af5773c3bab7766ca9a50bfc16986c1cdf1b64a5be185ab04bc4f0f44ff2e2279eebf48bf6eca4d2b4c08ee12b49c609f2fe7e810a67e31f5a74174183e770979e941fcadc60331fe903cd5db2cf43f1c48a7e1e67e9396934c36b961f0baf1d8a17a9a1fe56935792d716a3ee9f5c8ef08c26a3092d12104c3c45b90eaded3a0955d3ba062091f651c2a9cd8a1043af3cc497e1d4eca8c0c7209bdeeed756b1a2e3cf549e5eb", 0xf4}, {&(0x7f0000000100)="b1c46ba5cfea54b1f14287eed3b54169d1b177a0b8bada71aa249096e17a250bb5bf85d65a77e3767ffb81e15d8be8cb8b9b82ccdb1efdfa421c64e3105788b88884372c2b9de4afcadf6be699c7256a1062b481406d26065e02710f7cce2b3831cee9734a5d3a42a2ba3019e9e5893f9ed883871c11cd87634af292", 0x7c}, {&(0x7f0000000180)="233c561fb5828856f7608aff33a30b6c0bc6cb0da0a682843f85c009727c139d47f5fb53c2e0b8a74c42095f22de541abe9a35f38577ad90166b043cb6e2eaf0c953d52faa615e8714d128cde104a9d62917950b0baa07b11eb605194735cd9c1b6e599593f1d9799facba0e6d99e34295680ff556325c87ff95daf4e60ab7eb71a5e5718a01a2a098ce2fe78a12441ed863acaa07dc8c10e1", 0x99}, {&(0x7f0000000240)="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", 0x1000}], 0x4, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000012c0))
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f0000001340)='memory.low\x00', 0x2, 0x0)
ioctl$sock_proto_private(r1, 0x89e1, &(0x7f0000001380))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x80)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000014c0), 0x40)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4)
r4 = syz_io_uring_setup(0x2c73, &(0x7f0000001500)={0x0, 0x68c3, 0x40, 0x2, 0x18b}, &(0x7f0000001580), &(0x7f00000015c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x10010, r4, 0x10000000)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001640), r3)
sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x40, r5, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8ae6}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x20000000)
io_setup(0x8000, &(0x7f0000001740)=<r6=>0x0)
io_cancel(r6, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x1, 0x401, r0, &(0x7f0000001780)="6e13bcd2994c31096ac10be139d0f69fd5b61768d2bede59107feeef9a8676cb92d38dca98d3936cc308a73c887d663bd4816d0a8875843478035d41fb764dc2b0fbd5deb0329e411f325b3a93585414e32a0b249bc8456d992294d6173e3aac60b29d3853fc86de9e342455543f868c3b4543f9bee90a7450036093b23d4fd27581aaa6ae711a9bbe271509cf3da8d755836c54f3", 0x95, 0x1, 0x0, 0x3}, &(0x7f0000001880))
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000001b40)={&(0x7f0000001ac0)=[0x0, 0x0, 0x0, <r7=>0x0, 0x0], &(0x7f0000001b00)=[0x0, 0x0], 0x5})
ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000001b80)={&(0x7f00000018c0)=[0x0, 0x0], &(0x7f0000001900)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], r7, 0x0, '\x00', 0x2, 0xa})
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x16)
r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001bc0), 0x8800, 0x0)
ioctl$SW_SYNC_IOC_INC(r8, 0x40045701, &(0x7f0000001c00)=0x8001)
sync_file_range(r8, 0x7, 0xea04, 0x2)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), r3)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r9, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x4c, r10, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x81}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000)
r11 = fsmount(0xffffffffffffffff, 0x1, 0x81)
sendmsg$nl_generic(r3, &(0x7f0000002240)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002200)={&(0x7f0000001e00)={0x3f8, 0x33, 0x300, 0x70bd2c, 0x25dfdbfd, {0x15}, [@generic="9cc6888b0d937d82fcdf8cb1218a0537ba406ea1be58fa04da2db91c0b897b13fcac1d9f0e5849484b51ceae0436042e32ddb94b7ad1644b66728d664a772b7a8d825ea5981cb72bfdeb8e9c8d3b230baa509c3c720795bef90fac3a55b260b21f8bd5711ab42b1dced0576d81b84c9d8caeb02fdf8eb950d3e3d31258a90114519d30363e3e23e56419f3d319bd57b9c044c6fb343305e59e9c", @typed={0x8, 0xe7, 0x0, 0x0, @fd=r11}, @generic="a324d9635689fb08a70876f7c29694dfd837005ba7c1c5b09587c5a69213acaeef5e25e3bfba348d6cf424a371a88f68f0616bc86697757a0de8a18318ce1424d54b3c7fef73dd1949d1cfafc1a7c1e30b6bbe0b96fb423a5e2cc9a6438a8f75609b3631cefb96cafbcec3511eb48877bd2c5e7271a3d271ab417171bd39ee90f1da0c73735abd12770d199a5a01af9811e2ce671cc76685847865e319217b33c0e11cb0d13a4f8670e8c9b34ce212128190761b33b702726a2c58364d8429ae5c4d37b00da66461bf22d1697b073e9e87bb9deb411a273561866ab78f", @generic="350af39d9ba075e7eeda1324deeb55d24acf8a55beff8f75c17c9942dc691a51b86800f1aa623f8cd82bdf773e0abf0276a68859219149eaf7b2302b892e30cc73a21376d3e2d9e9909bb05b0ee31104ba49f32afb264d95585603b8ab77d08385a9fc32c693b326a0af174902132d414de2844a02efc4116d4bf7f85c78484a0f8e99c408585135e989d36888e910d1cc57c3001892efd896548006d2fe441c209d2819219b3a974960d1418f5ec912cb6569a70f3ae249200a8b9c963a8e60ba9be705215c350843dd7369be46da983e495c2fac7e58ef94c93211fe9eb0c016b894a54e11704eed3b90a49cc0", @nested={0x173, 0x19, 0x0, 0x1, [@nested={0x4, 0x100}, @typed={0x6c, 0xb2, 0x0, 0x0, @binary="1b28b09f0a9b44e86aa5bc2676e601a30631f2ae42c354031b28e16cb0bf545035ea15bf3d2ca9616a1442489275cb174fc4db57fe931c34fe42196657441e2bb716c9250f1b096800a1299bf1678e1947866391d1ce85dcad576dbc64367a8f95055ac61b0d8662"}, @generic="74af5b0dd41ff0d1652746dad3fef76b19e343ba8ef05820820fe94086cd09e7bdae30657c3498ff30f23b83bb4d1f5ccdbaf8f1af6267357d8c658fb196164780ebe3ea10a4829e5d07e5581aed542c1aefba4c43581e99cc78a77d01649793350c83b6f44dbc3b33757b2b2b434853be581a50c687156ded742a054821821c905ead4ede8b50036a0546ed0cfba37c16137634fe16fea7bdfa29fb70fc173adc0d4c354a2cd2ca7d60983ce00cade7cfcb57521305c0c453cb1e4fdfe4df1bebad86836e3e6e997ae11278bba7aa52989d80cacc19f5854eb91f405c419cb9ca88e247732a144525fc069b429f83e041a23e", @nested={0x4, 0x134}, @nested={0x4, 0x17}, @nested={0x4, 0x110}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x20000}, 0x40)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002280)={'veth0\x00', 0x400})
r12 = openat$autofs(0xffffffffffffff9c, &(0x7f00000022c0), 0x40000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r12, 0xc018937d, &(0x7f0000002340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'})

669.819206ms ago: executing program 3 (id=189):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x98, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32)
ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000340)="6cf798")
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
r4 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
symlinkat(&(0x7f0000000140)='.\x00', r5, &(0x7f00000000c0)='./file0\x00')
r6 = landlock_create_ruleset(&(0x7f0000000140)={0x895, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_create_ruleset(&(0x7f0000000140)={0x46}, 0x10, 0x0)
landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
r7 = gettid()
tkill(r7, 0x7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, 0x1, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000010}, 0x4)
openat(r5, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0)

157.158417ms ago: executing program 1 (id=198):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6(0xa, 0x6, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}], 0x1}}], 0x1, 0x4048841)
close_range(r1, 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r3, 0x10, 0x0, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x4}]}, 0x34}}, 0x48050)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40001)

156.659654ms ago: executing program 2 (id=199):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x40, 0x7800, 0x4, 0x7328, {{0x9, 0x4, 0x0, 0x30, 0x24, 0x68, 0x0, 0x2, 0x2f, 0x0, @local, @loopback, {[@ssrr={0x89, 0xf, 0x81, [@dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x1d}, @rand_addr=0x64010101]}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl2\x00', <r2=>0x0, 0x40, 0x7800, 0x4, 0x7328, {{0x9, 0x4, 0x0, 0x30, 0x24, 0x68, 0x0, 0x2, 0x2f, 0x0, @local, @loopback, {[@ssrr={0x89, 0xf, 0x81, [@dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x1d}, @rand_addr=0x64010101]}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r1, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x82}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0)

156.50362ms ago: executing program 2 (id=200):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
r2 = syz_io_uring_setup(0x6, &(0x7f0000000400)={0x0, 0xa72d, 0x2, 0x0, 0x20e, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r2, 0x21, &(0x7f00000007c0)={r1}, 0x1)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0)
sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2204011}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xfa}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x8}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x40, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)

156.342354ms ago: executing program 1 (id=201):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x280, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x1b0, 0x1398, 0x1398, 0x1b0, 0x1398, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x6, 0x0, 0x0, 0x21}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x4, 0x1}, {0x0, 0x4, 0x4}, {0xffffffffffffffff, 0x5, 0xc}, 0x25, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x7)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@my=0x1})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418})
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)

80.127699ms ago: executing program 2 (id=202):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000000c0)={0x7, [], 0x6, "433e2b483357de"})
write(r0, &(0x7f0000000040)="09000000010001", 0x7)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000001c0)={{}, @host, 0x0, 0x0, 0x1000000002449, 0x0, 0x0, 0x3})
prctl$PR_GET_NO_NEW_PRIVS(0x35)
syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x2, 0x8, 0x34, 0x65, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@cipso={0x86, 0x8, 0x3, [{0x1, 0x2}]}]}}, {0x4e20, 0x4e24, 0x18, 0x0, @wg=@data={0x4, 0x93e3, 0x1}}}}}}, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000000000)={{}, 0x20000000})

79.306019ms ago: executing program 2 (id=203):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000180)="260fc76e31f30fc7fd9066b9900d00000f320fa80f35360f01c20f2084ba2100b88c00ef0f001f", 0x27}], 0x1, 0x9, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x6, 0x4) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x8, 0x4) (async)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1}, 0x0)

77.227211ms ago: executing program 1 (id=204):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'team_slave_1\x00', {}, 0x5})
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001400), r1)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000000)=0x3)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00012b3d7000fddfdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40081)

74.548472ms ago: executing program 2 (id=205):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000001280)='blkio.bfq.idle_time\x00', 0x0, 0x0)
preadv2(r4, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0)
ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000380)={0x40})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x6, 0x0, 0x0, @generic})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x8, &(0x7f0000000040)="e1", 0x1)
getsockopt$inet_opts(r6, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000340)=0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00'})
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r1, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2c7a16af2f179b679472aaab0f"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x34}}, 0x24040000)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff00000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x0)
close(0x3)

0s ago: executing program 2 (id=206):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="31030000000000000000060000000800030095"], 0x1c}}, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r3 = dup(r2)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0})
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r4 = syz_open_dev$mouse(&(0x7f0000000080), 0xfffffffffffffff9, 0x880)
mmap$qrtrtun(&(0x7f000055f000/0x1000)=nil, 0x1000, 0x8, 0x10010, r4, 0x8)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
listen(r5, 0x9)
accept4(r6, 0x0, 0x0, 0x80800)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
madvise(&(0x7f0000165000/0x1000)=nil, 0x1000, 0x3)

kernel console output (not intermixed with test programs):

[   31.510822][   T39] audit: type=1400 audit(1733377967.128:81): avc:  denied  { rlimitinh } for  pid=5851 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   31.516537][   T39] audit: type=1400 audit(1733377967.128:82): avc:  denied  { siginh } for  pid=5851 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   32.469730][   T39] audit: type=1400 audit(1733377968.108:83): avc:  denied  { read } for  pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   32.477326][   T39] audit: type=1400 audit(1733377968.108:84): avc:  denied  { append } for  pid=5334 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   32.484876][   T39] audit: type=1400 audit(1733377968.108:85): avc:  denied  { open } for  pid=5334 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   32.492617][   T39] audit: type=1400 audit(1733377968.108:86): avc:  denied  { getattr } for  pid=5334 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
Warning: Permanently added '[localhost]:10813' (ED25519) to the list of known hosts.
[   33.128502][   T39] audit: type=1400 audit(1733377968.768:87): avc:  denied  { name_bind } for  pid=5857 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   34.832612][ T5863] cgroup: Unknown subsys name 'net'
[   34.989396][ T5863] cgroup: Unknown subsys name 'cpuset'
[   34.994079][ T5863] cgroup: Unknown subsys name 'rlimit'
[   35.207820][ T5927] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   35.790465][ T5863] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   37.358611][   T39] kauditd_printk_skb: 17 callbacks suppressed
[   37.358622][   T39] audit: type=1400 audit(1733377972.988:105): avc:  denied  { execmem } for  pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   37.526408][   T39] audit: type=1400 audit(1733377973.168:106): avc:  denied  { create } for  pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   37.532213][   T39] audit: type=1400 audit(1733377973.168:107): avc:  denied  { read write } for  pid=5939 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   37.538685][   T39] audit: type=1400 audit(1733377973.168:108): avc:  denied  { open } for  pid=5939 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   37.544692][   T39] audit: type=1400 audit(1733377973.168:109): avc:  denied  { ioctl } for  pid=5939 comm="syz-executor" path="socket:[1623]" dev="sockfs" ino=1623 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   37.577262][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   37.579865][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   37.580496][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   37.585546][ T5949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   37.585773][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   37.587640][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   37.590538][ T5948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   37.591929][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   37.593204][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   37.596090][ T5949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   37.597192][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   37.598764][ T5949] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   37.598771][ T5951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   37.599693][ T5951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   37.599784][ T5951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   37.600299][ T5951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   37.602426][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   37.602463][ T5948] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   37.604243][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   37.604475][ T5951] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   37.604741][ T5951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   37.606322][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   37.607730][   T39] audit: type=1400 audit(1733377973.248:110): avc:  denied  { read } for  pid=5940 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   37.614099][ T5948] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   37.615095][   T39] audit: type=1400 audit(1733377973.248:112): avc:  denied  { mounton } for  pid=5939 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   37.617039][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   37.618669][   T39] audit: type=1400 audit(1733377973.248:111): avc:  denied  { open } for  pid=5940 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   37.727923][   T39] audit: type=1400 audit(1733377973.368:113): avc:  denied  { module_request } for  pid=5939 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   37.761809][ T5939] chnl_net:caif_netlink_parms(): no params data found
[   37.795314][ T5950] chnl_net:caif_netlink_parms(): no params data found
[   37.816207][ T5940] chnl_net:caif_netlink_parms(): no params data found
[   37.860536][ T5945] chnl_net:caif_netlink_parms(): no params data found
[   37.904780][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.906800][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.908825][ T5939] bridge_slave_0: entered allmulticast mode
[   37.910869][ T5939] bridge_slave_0: entered promiscuous mode
[   37.921587][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.923548][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.925610][ T5950] bridge_slave_0: entered allmulticast mode
[   37.927794][ T5950] bridge_slave_0: entered promiscuous mode
[   37.956971][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.958878][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.960766][ T5939] bridge_slave_1: entered allmulticast mode
[   37.962779][ T5939] bridge_slave_1: entered promiscuous mode
[   37.964967][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.966909][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.968777][ T5950] bridge_slave_1: entered allmulticast mode
[   37.970746][ T5950] bridge_slave_1: entered promiscuous mode
[   38.027234][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.039775][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.057399][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.059300][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.061198][ T5940] bridge_slave_0: entered allmulticast mode
[   38.063251][ T5940] bridge_slave_0: entered promiscuous mode
[   38.066532][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.069960][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.079971][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.081882][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.083814][ T5945] bridge_slave_0: entered allmulticast mode
[   38.086141][ T5945] bridge_slave_0: entered promiscuous mode
[   38.088634][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.090507][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.092424][ T5945] bridge_slave_1: entered allmulticast mode
[   38.094603][ T5945] bridge_slave_1: entered promiscuous mode
[   38.097461][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.099460][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.101329][ T5940] bridge_slave_1: entered allmulticast mode
[   38.103328][ T5940] bridge_slave_1: entered promiscuous mode
[   38.163163][ T5939] team0: Port device team_slave_0 added
[   38.166202][ T5950] team0: Port device team_slave_0 added
[   38.168749][ T5939] team0: Port device team_slave_1 added
[   38.171541][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.174974][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.179049][ T5950] team0: Port device team_slave_1 added
[   38.189509][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.192851][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.254165][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.256668][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.263261][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.277558][ T5940] team0: Port device team_slave_0 added
[   38.279647][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.281934][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.290852][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.296592][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.298846][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.307737][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.312079][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.313922][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.320689][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.325288][ T5945] team0: Port device team_slave_0 added
[   38.327833][ T5940] team0: Port device team_slave_1 added
[   38.349201][ T5945] team0: Port device team_slave_1 added
[   38.365281][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.367211][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.374185][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.378100][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.379918][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.386490][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.389896][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.392278][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.401923][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.407187][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.409359][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.416747][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.457339][ T5950] hsr_slave_0: entered promiscuous mode
[   38.459679][ T5950] hsr_slave_1: entered promiscuous mode
[   38.474406][ T5939] hsr_slave_0: entered promiscuous mode
[   38.476557][ T5939] hsr_slave_1: entered promiscuous mode
[   38.478585][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   38.481140][ T5939] Cannot create hsr debugfs directory
[   38.505243][ T5940] hsr_slave_0: entered promiscuous mode
[   38.509292][ T5940] hsr_slave_1: entered promiscuous mode
[   38.511227][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   38.513441][ T5940] Cannot create hsr debugfs directory
[   38.533191][ T5945] hsr_slave_0: entered promiscuous mode
[   38.535093][ T5945] hsr_slave_1: entered promiscuous mode
[   38.537562][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   38.539560][ T5945] Cannot create hsr debugfs directory
[   38.736577][ T5939] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   38.740582][ T5939] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   38.743923][ T5939] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   38.748688][ T5939] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   38.770176][ T5940] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   38.773635][ T5940] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   38.778140][ T5940] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   38.781987][ T5940] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   38.793209][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.795183][ T5939] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.797478][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.799319][ T5939] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.811220][ T5945] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   38.814539][ T5945] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   38.818871][ T5945] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   38.822949][   T96] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.827284][   T96] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.846385][ T5945] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   38.873259][ T5950] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   38.880877][ T5950] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   38.887029][ T5950] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   38.890821][ T5950] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   38.918029][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.940294][ T5939] 8021q: adding VLAN 0 to HW filter on device team0
[   38.944587][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.946482][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.954260][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.956497][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.967187][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.986024][ T5940] 8021q: adding VLAN 0 to HW filter on device team0
[   38.997762][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.000304][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.014375][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.020684][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.022589][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.032035][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.042375][ T5945] 8021q: adding VLAN 0 to HW filter on device team0
[   39.042842][   T39] audit: type=1400 audit(1733377974.678:114): avc:  denied  { sys_module } for  pid=5939 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   39.052482][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.054415][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.061117][ T5950] 8021q: adding VLAN 0 to HW filter on device team0
[   39.068967][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.071006][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.075572][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.077812][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.085027][ T5940] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   39.088118][ T5940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   39.106467][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.109377][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.129736][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.152628][ T5950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   39.177938][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.185395][ T5939] veth0_vlan: entered promiscuous mode
[   39.192179][ T5939] veth1_vlan: entered promiscuous mode
[   39.207748][ T5939] veth0_macvtap: entered promiscuous mode
[   39.210569][ T5939] veth1_macvtap: entered promiscuous mode
[   39.217869][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.227758][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.234667][ T5939] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.238172][ T5939] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.241102][ T5939] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.243819][ T5939] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.249556][ T5940] veth0_vlan: entered promiscuous mode
[   39.264696][ T5940] veth1_vlan: entered promiscuous mode
[   39.268700][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.272186][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.299399][   T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.301445][   T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.316556][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.318326][ T5940] veth0_macvtap: entered promiscuous mode
[   39.318545][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.327512][ T5940] veth1_macvtap: entered promiscuous mode
[   39.339829][ T5950] veth0_vlan: entered promiscuous mode
[   39.349290][ T5945] veth0_vlan: entered promiscuous mode
[   39.350607][ T5939] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   39.352185][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.357704][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.361723][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.365015][ T5950] veth1_vlan: entered promiscuous mode
[   39.374039][ T5945] veth1_vlan: entered promiscuous mode
[   39.377641][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.381014][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.384061][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.390335][ T5940] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.392685][ T5940] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.394908][ T5940] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.396089][ T6002] Driver unsupported XDP return value 0 on prog  (id 2) dev N/A, expect packet loss!
[   39.397597][ T5940] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.420550][ T5950] veth0_macvtap: entered promiscuous mode
[   39.430933][ T5950] veth1_macvtap: entered promiscuous mode
[   39.436318][ T5945] veth0_macvtap: entered promiscuous mode
[   39.452017][ T5945] veth1_macvtap: entered promiscuous mode
[   39.457210][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.459300][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.464188][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.469923][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.473861][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.478275][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.482143][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.485192][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.489026][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.492223][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.495830][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.498938][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.502396][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.507201][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.516736][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.517692][ T6007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6'.
[   39.519532][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.519540][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.519547][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.520111][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.535678][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.536057][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.539070][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.539082][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.541867][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.545096][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.545106][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.558037][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.561774][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.565800][ T5945] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.568849][ T5945] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.571788][ T5945] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.574711][ T5945] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.581009][ T5950] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.583446][ T5950] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.585816][ T5950] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.588305][ T5950] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.646481][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.648712][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.675605][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.677710][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.679417][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.682266][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.684728][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.687523][ T5947] Bluetooth: hci1: command tx timeout
[   39.687547][ T5948] Bluetooth: hci2: command tx timeout
[   39.688215][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.696956][ T5947] Bluetooth: hci3: command tx timeout
[   39.697225][ T5948] Bluetooth: hci0: command tx timeout
[   39.826558][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'.
[   39.829148][ T6028] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   39.831071][ T6028] batman_adv: batadv0: Removing interface: batadv_slave_0
[   39.833801][ T6028] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   39.838403][ T6028] batman_adv: batadv0: Removing interface: batadv_slave_1
[   39.883222][ T6034] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11'.
[   39.932186][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.965954][   T62] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   39.986522][ T6049] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   40.014651][ T6053] MTD: Couldn't look up 'mountinfo': -2
[   40.020290][ T6053] process 'syz.0.18' launched '/dev/fd/3' with NULL argv: empty string added
[   40.135529][   T62] usb 6-1: Using ep0 maxpacket: 8
[   40.145702][   T62] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   40.148354][   T62] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[   40.150641][   T62] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[   40.153410][   T62] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[   40.157842][   T62] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   40.160102][   T62] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.168731][   T62] hub 6-1:1.0: bad descriptor, ignoring hub
[   40.170408][   T62] hub 6-1:1.0: probe with driver hub failed with error -5
[   40.172570][   T62] cdc_wdm 6-1:1.0: skipping garbage
[   40.173943][   T62] cdc_wdm 6-1:1.0: skipping garbage
[   40.177936][   T62] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[   40.179522][   T62] cdc_wdm 6-1:1.0: Unknown control protocol
[   40.345434][  T832] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   40.496070][  T832] usb 5-1: Using ep0 maxpacket: 16
[   40.499268][  T832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   40.501887][  T832] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[   40.504221][  T832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.507668][  T832] usb 5-1: config 0 descriptor??
[   40.511475][  T832] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input5
[   40.567498][ T1019] usb 6-1: USB disconnect, device number 2
[   40.714414][ T6062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.717554][ T6062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.741396][ T6062] input: syz0 as /devices/virtual/input/input6
[   40.835498][   T35] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   40.846643][ T5337] bcm5974 5-1:0.0: could not read from device
[   40.851826][ T5337] bcm5974 5-1:0.0: could not read from device
[   40.852995][  T832] usb 5-1: USB disconnect, device number 2
[   41.007662][   T35] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   41.010328][   T35] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[   41.012706][   T35] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   41.017762][   T35] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   41.020197][   T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.022283][   T35] usb 8-1: Product: syz
[   41.023431][   T35] usb 8-1: Manufacturer: syz
[   41.024654][   T35] usb 8-1: SerialNumber: syz
[   41.028881][   T35] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found
[   41.030764][   T35] cdc_ncm 8-1:1.0: bind() failure
[   41.229442][ T6107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.232600][ T6107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.235804][ T6107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.239902][ T6107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.243265][ T6107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.246264][ T6107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.248693][ T6107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.251003][ T6107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.253685][ T6107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.256675][ T6107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.382416][ T6120] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   41.421118][ T6125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   41.616441][ T6129] Invalid logical block size (585)
[   41.618257][ T2220] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   41.623366][ T6133] Invalid logical block size (585)
[   41.624964][ T6132] ptm ptm1: ldisc open failed (-12), clearing slot 1
[   41.632192][ T6000] usb 8-1: USB disconnect, device number 2
[   41.656724][ T6136] 9pnet_fd: Insufficient options for proto=fd
[   41.707073][ T6138] kvm: emulating exchange as write
[   41.765953][ T5948] Bluetooth: hci0: command tx timeout
[   41.765993][ T5947] Bluetooth: hci1: command tx timeout
[   41.766019][ T5949] Bluetooth: hci2: command tx timeout
[   41.766095][ T5943] Bluetooth: hci3: command tx timeout
[   41.775046][ T2220] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   41.778860][ T2220] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   41.782064][ T2220] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   41.785024][ T2220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   41.789662][ T6118] raw-gadget.6 gadget.0: fail, usb_ep_enable returned -22
[   41.799029][ T2220] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[   41.846242][ T6151] netlink: 28 bytes leftover after parsing attributes in process `syz.2.34'.
[   41.909687][ T6155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.36'.
[   41.947842][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'.
[   41.950237][ T6160] netlink: 24 bytes leftover after parsing attributes in process `syz.1.37'.
[   42.005423][ T6000] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   42.037140][ T6169] block device autoloading is deprecated and will be removed.
[   42.044840][ T6171] xt_nat: multiple ranges no longer supported
[   42.047036][ T6171] syz.1.40 uses obsolete (PF_INET,SOCK_PACKET)
[   42.053025][ T1019] IPVS: starting estimator thread 0...
[   42.146051][ T6172] IPVS: using max 39 ests per chain, 93600 per kthread
[   42.155484][ T6000] usb 8-1: Using ep0 maxpacket: 8
[   42.160589][ T6000] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   42.163612][ T6000] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[   42.166905][ T6000] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[   42.169836][ T6000] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[   42.171384][ T6176] netlink: 48 bytes leftover after parsing attributes in process `syz.1.42'.
[   42.172698][ T6000] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   42.172711][ T6000] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.175835][ T6000] hub 8-1:1.0: bad descriptor, ignoring hub
[   42.182606][ T6000] hub 8-1:1.0: probe with driver hub failed with error -5
[   42.184604][ T6000] cdc_wdm 8-1:1.0: skipping garbage
[   42.186047][ T6000] cdc_wdm 8-1:1.0: skipping garbage
[   42.188153][ T6000] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[   42.189786][ T6000] cdc_wdm 8-1:1.0: Unknown control protocol
[   42.280701][ T6179] /dev/sg0: Can't lookup blockdev
[   42.284776][ T6179] netlink: 16 bytes leftover after parsing attributes in process `syz.1.43'.
[   42.291554][ T6179] /dev/sg0: Can't lookup blockdev
[   42.556462][ T5982] usb 8-1: USB disconnect, device number 3
[   42.661590][   T62] usb 5-1: USB disconnect, device number 3
[   42.810906][   T39] kauditd_printk_skb: 121 callbacks suppressed
[   42.810917][   T39] audit: type=1400 audit(1733377978.448:236): avc:  denied  { unmount } for  pid=5950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   42.813090][ T6193] trusted_key: encrypted_key: hex blob is missing
[   42.818308][   T39] audit: type=1400 audit(1733377978.448:237): avc:  denied  { unmount } for  pid=5950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   42.849906][ T6200] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   42.862071][   T39] audit: type=1400 audit(1733377978.498:238): avc:  denied  { create } for  pid=6202 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   42.865049][ T6202] delete_channel: no stack
[   42.867248][   T39] audit: type=1400 audit(1733377978.498:239): avc:  denied  { setopt } for  pid=6202 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   42.874077][   T39] audit: type=1400 audit(1733377978.498:240): avc:  denied  { ioctl } for  pid=6202 comm="syz.1.50" path="socket:[10597]" dev="sockfs" ino=10597 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   42.949076][   T39] audit: type=1326 audit(1733377978.588:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.2.54" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc0f7ff19 code=0x7ffc0000
[   42.955723][   T39] audit: type=1326 audit(1733377978.588:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.2.54" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc0f7ff19 code=0x7ffc0000
[   42.958061][ T6218] sp0: Synchronizing with TNC
[   42.961804][   T39] audit: type=1326 audit(1733377978.588:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.2.54" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc0f7ff19 code=0x7ffc0000
[   42.970919][   T39] audit: type=1326 audit(1733377978.588:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.2.54" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc0f7ff19 code=0x7ffc0000
[   42.980372][   T39] audit: type=1326 audit(1733377978.588:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.2.54" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fefc0f7ff19 code=0x7ffc0000
[   43.010460][ T6220] Zero length message leads to an empty skb
[   43.077507][ T6231] capability: warning: `syz.3.59' uses 32-bit capabilities (legacy support in use)
[   43.275521][  T832] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   43.425470][  T832] usb 6-1: Using ep0 maxpacket: 8
[   43.428078][  T832] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   43.430821][  T832] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[   43.434361][  T832] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[   43.438506][  T832] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[   43.442063][  T832] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   43.444334][  T832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.449183][  T832] hub 6-1:1.0: bad descriptor, ignoring hub
[   43.450936][  T832] hub 6-1:1.0: probe with driver hub failed with error -5
[   43.452871][  T832] cdc_wdm 6-1:1.0: skipping garbage
[   43.454299][  T832] cdc_wdm 6-1:1.0: skipping garbage
[   43.458265][  T832] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[   43.460709][  T832] cdc_wdm 6-1:1.0: Unknown control protocol
[   43.846688][ T5982] usb 6-1: USB disconnect, device number 3
[   43.847811][ T5948] Bluetooth: hci1: command tx timeout
[   43.848744][ T5943] Bluetooth: hci0: command 0x040f tx timeout
[   43.850439][ T5948] Bluetooth: hci3: command tx timeout
[   43.852465][ T5943] Bluetooth: hci2: command tx timeout
[   43.949283][ T6250] binder: 6249:6250 ioctl c0306201 200002c0 returned -14
[   44.007928][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'.
[   44.014804][ T6252] netlink: 'syz.3.65': attribute type 2 has an invalid length.
[   44.017186][ T6252] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   44.163225][ T6262] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   44.169350][ T6262] batadv_slave_0: entered promiscuous mode
[   44.995499][ T5985] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   45.126129][ T5947] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[   45.155530][ T5985] usb 8-1: Using ep0 maxpacket: 8
[   45.159993][ T5985] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   45.163776][ T5985] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[   45.167130][ T5985] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[   45.170721][ T5985] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[   45.174088][ T5985] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   45.177115][ T5985] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.184261][ T5985] hub 8-1:1.0: bad descriptor, ignoring hub
[   45.186924][ T5985] hub 8-1:1.0: probe with driver hub failed with error -5
[   45.188756][ T6311] program syz.2.83 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   45.189655][ T5985] cdc_wdm 8-1:1.0: skipping garbage
[   45.194089][ T5985] cdc_wdm 8-1:1.0: skipping garbage
[   45.197023][ T5985] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[   45.198721][ T5985] cdc_wdm 8-1:1.0: Unknown control protocol
[   45.404595][ T6321] xt_hashlimit: size too large, truncated to 1048576
[   45.530983][ T6330] __nla_validate_parse: 2 callbacks suppressed
[   45.530995][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'.
[   45.535250][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'.
[   45.595650][ T5981] usb 8-1: USB disconnect, device number 4
[   45.693029][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.91'.
[   45.695325][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.91'.
[   45.698827][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.91'.
[   45.727938][ T6335] xt_l2tp: v2 sid > 0xffff: 150994944
[   45.775508][ T5985] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   45.925480][ T5947] Bluetooth: hci2: command tx timeout
[   45.925501][ T5985] usb 5-1: Using ep0 maxpacket: 16
[   45.925514][ T5943] Bluetooth: hci3: command tx timeout
[   45.925536][ T5943] Bluetooth: hci0: command 0x040f tx timeout
[   45.925554][ T5943] Bluetooth: hci1: command tx timeout
[   45.934935][ T5985] usb 5-1: config 5 has an invalid interface number: 217 but max is 0
[   45.937865][ T5985] usb 5-1: config 5 has no interface number 0
[   45.940003][ T5985] usb 5-1: config 5 interface 217 has no altsetting 0
[   45.943455][ T5985] usb 5-1: New USB device found, idVendor=0bda, idProduct=8811, bcdDevice=10.d1
[   45.945927][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.947915][ T5985] usb 5-1: Product: syz
[   45.949276][ T5985] usb 5-1: Manufacturer: syz
[   45.950553][ T5985] usb 5-1: SerialNumber: syz
[   46.104625][ T6338] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[   46.110254][ T6338] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   46.122204][ T6338] xt_hashlimit: size too large, truncated to 1048576
[   46.174762][ T6340] netlink: 'syz.3.93': attribute type 10 has an invalid length.
[   46.180118][ T5985] usb 5-1: USB disconnect, device number 4
[   46.193492][ T6340] team0: Device hsr_slave_0 failed to register rx_handler
[   46.533201][ T6342] binder: 6341:6342 ioctl 4018aee2 20000380 returned -22
[   46.589164][ T6345] binder: BINDER_SET_CONTEXT_MGR already set
[   46.592046][ T6345] binder: 6341:6345 ioctl 4018620d 20000400 returned -16
[   47.231654][ T6360] Bluetooth: MGMT ver 1.23
[   47.487730][ T5947] Bluetooth: hci0: unexpected event for opcode 0x0c7d
[   47.487960][ T6367] netlink: 'syz.1.104': attribute type 63 has an invalid length.
[   48.139688][ T6386] warning: `syz.3.110' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   48.231155][   T39] kauditd_printk_skb: 115 callbacks suppressed
[   48.231165][   T39] audit: type=1400 audit(1733377983.868:361): avc:  denied  { create } for  pid=6387 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   48.237891][   T39] audit: type=1400 audit(1733377983.868:362): avc:  denied  { getopt } for  pid=6387 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   48.351466][   T39] audit: type=1400 audit(1733377983.988:363): avc:  denied  { create } for  pid=6390 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   48.356654][   T39] audit: type=1400 audit(1733377983.998:364): avc:  denied  { setopt } for  pid=6390 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   48.362186][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.112'.
[   48.368157][   T39] audit: type=1400 audit(1733377983.998:365): avc:  denied  { write } for  pid=6390 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   48.430427][ T6401] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32
[   48.452167][   T39] audit: type=1400 audit(1733377984.088:366): avc:  denied  { create } for  pid=6405 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   48.454328][ T6406] tipc: Started in network mode
[   48.459070][   T39] audit: type=1400 audit(1733377984.098:367): avc:  denied  { connect } for  pid=6405 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   48.465448][ T6406] tipc: Node identity 3a0b13d24391, cluster identity 4711
[   48.467384][ T6406] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   48.481482][ T6406] tipc: Resetting bearer <eth:syzkaller0>
[   48.497896][   T39] audit: type=1400 audit(1733377984.138:368): avc:  denied  { mount } for  pid=6400 comm="syz.3.114" name="/" dev="hugetlbfs" ino=11746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[   48.501020][ T6412] =======================================================
[   48.501020][ T6412] WARNING: The mand mount option has been deprecated and
[   48.501020][ T6412]          and is ignored by this kernel. Remove the mand
[   48.501020][ T6412]          option from the mount to silence this warning.
[   48.501020][ T6412] =======================================================
[   48.504769][   T39] audit: type=1400 audit(1733377984.138:369): avc:  denied  { remount } for  pid=6400 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   48.515064][ T6412] netlink: 1896 bytes leftover after parsing attributes in process `syz.3.114'.
[   48.524983][ T6404] tipc: Resetting bearer <eth:syzkaller0>
[   48.527603][   T39] audit: type=1326 audit(1733377984.168:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.1.117" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb40b7ff19 code=0x0
[   48.542900][ T6416] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[   48.543710][ T6417] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[   48.547514][ T6417] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   48.549953][ T6416] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   49.437739][ T6438] netlink: 'syz.1.122': attribute type 1 has an invalid length.
[   49.443140][ T6438] NCSI netlink: No device for ifindex 0
[   49.448430][ T6404] tipc: Disabling bearer <eth:syzkaller0>
[   49.911426][ T6480] netlink: 'syz.0.135': attribute type 9 has an invalid length.
[   49.913650][ T6480] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.135'.
[   49.993259][ T6486] netlink: 'syz.0.138': attribute type 2 has an invalid length.
[   50.200584][ T6502] can0: slcan on ptm0.
[   50.326247][ T6502] can0 (unregistered): slcan off ptm0.
[   50.425454][ T6221] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   50.449385][ T6532] 9pnet_fd: Insufficient options for proto=fd
[   50.478195][ T6536] netlink: 'syz.0.150': attribute type 10 has an invalid length.
[   50.482664][ T6536] team0: Device hsr_slave_0 failed to register rx_handler
[   50.555865][ T6221] usb 8-1: device descriptor read/64, error -71
[   50.568395][ T6540] netlink: 'syz.0.152': attribute type 1 has an invalid length.
[   50.685464][ T5942] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   50.805419][ T6221] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[   50.835433][ T5942] usb 7-1: Using ep0 maxpacket: 8
[   50.839179][ T5942] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[   50.841375][ T5942] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   50.843946][ T5942] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   50.846764][ T5942] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   50.849319][ T5942] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   50.852930][ T5942] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   50.855518][ T5942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.935494][ T6221] usb 8-1: device descriptor read/64, error -71
[   51.055778][ T6221] usb usb8-port1: attempt power cycle
[   51.064741][ T5942] usb 7-1: usb_control_msg returned -32
[   51.066334][ T5942] usbtmc 7-1:16.0: can't read capabilities
[   51.415498][ T6221] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[   51.418885][ T6546] usbtmc 7-1:16.0: usb_control_msg returned -32
[   51.421582][ T5985] usb 7-1: USB disconnect, device number 2
[   51.445870][ T6221] usb 8-1: device descriptor read/8, error -71
[   51.536004][   T45] wlan1: Trigger new scan to find an IBSS to join
[   51.715533][ T6221] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[   51.737501][ T6221] usb 8-1: device descriptor read/8, error -71
[   51.847210][ T6221] usb usb8-port1: unable to enumerate USB device
[   51.870873][ T6555] binder: 6554:6555 ioctl 81009431 20000600 returned -22
[   51.933857][ T5947] Bluetooth: hci2: Invalid connection link type handle 0x00c8
[   52.045323][ T6570] input: syz0 as /devices/virtual/input/input8
[   52.045842][ T6572] IPVS: sync thread started: state = MASTER, mcast_ifn = netdevsim0, syncid = 4, id = 0
[   52.089326][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'.
[   52.092313][ T6574] netlink: 16 bytes leftover after parsing attributes in process `syz.0.163'.
[   52.097889][ T6574] gtp0: entered promiscuous mode
[   52.099209][ T6574] gtp0: entered allmulticast mode
[   52.117539][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'.
[   52.121755][ T6576] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.164984][ T6576] bridge_slave_1 (unregistering): left allmulticast mode
[   52.167783][ T6576] bridge_slave_1 (unregistering): left promiscuous mode
[   52.170097][ T6576] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.385434][   T35] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   52.475952][ T6590] /dev/sr0: Can't open blockdev
[   52.556833][   T35] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[   52.559079][   T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   52.562489][   T35] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   52.564838][   T35] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   52.567340][   T35] usb 5-1: Manufacturer: syz
[   52.569470][   T35] usb 5-1: config 0 descriptor??
[   52.615846][   T35] rc_core: IR keymap rc-hauppauge not found
[   52.617499][   T35] Registered IR keymap rc-empty
[   52.620190][   T35] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0
[   52.623500][   T35] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input9
[   52.652474][ T6599] 9pnet_fd: Insufficient options for proto=fd
[   52.895743][   T35] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   52.956702][ T6614] xt_TCPMSS: Only works on TCP SYN packets
[   53.065466][   T35] usb 7-1: Using ep0 maxpacket: 8
[   53.074424][   T35] usb 7-1: config 0 has no interfaces?
[   53.078416][   T35] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.57
[   53.081423][   T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   53.083940][   T35] usb 7-1: SerialNumber: syz
[   53.087176][   T35] usb 7-1: config 0 descriptor??
[   53.200395][ T6620] program syz.3.177 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   53.254343][ T6617] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   53.290664][   T35] usb 7-1: USB disconnect, device number 3
[   53.340744][   T39] kauditd_printk_skb: 63 callbacks suppressed
[   53.340758][   T39] audit: type=1400 audit(1733377988.978:434): avc:  denied  { module_load } for  pid=6629 comm="syz.1.180" path="/sys/power/wakeup_count" dev="sysfs" ino=840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[   53.392852][ T6630] binder: BINDER_SET_CONTEXT_MGR already set
[   53.395464][ T6630] binder: 6629:6630 ioctl 4018620d 20000100 returned -16
[   53.397899][ T6630] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   53.566138][ T6639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.183'.
[   53.575712][ T6639] trusted_key: syz.1.183 sent an empty control message without MSG_MORE.
[   53.714382][   T39] audit: type=1400 audit(1733377989.348:435): avc:  denied  { write } for  pid=6641 comm="syz.3.184" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   53.720518][   T39] audit: type=1400 audit(1733377989.348:436): avc:  denied  { map } for  pid=6641 comm="syz.3.184" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   53.729273][   T39] audit: type=1400 audit(1733377989.348:437): avc:  denied  { execute } for  pid=6641 comm="syz.3.184" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   53.782686][ T6648] vim2m vim2m.0: vidioc_s_fmt queue busy
[   53.827963][   T39] audit: type=1400 audit(1733377989.468:438): avc:  denied  { execute } for  pid=6649 comm="syz.3.186" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   53.928544][ T6652] overlayfs: invalid origin (0000)
[   53.988659][   T96] Bluetooth: hci4: Frame reassembly failed (-84)
[   53.992472][   T39] audit: type=1400 audit(1733377989.628:439): avc:  denied  { mount } for  pid=6656 comm="syz.3.189" name="/" dev="ramfs" ino=10103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   53.995165][ T6657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.189'.
[   54.114254][   T39] audit: type=1400 audit(1733377989.748:440): avc:  denied  { watch } for  pid=6664 comm="syz.2.192" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=3083 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   54.123911][   T39] audit: type=1400 audit(1733377989.748:441): avc:  denied  { read } for  pid=6664 comm="syz.2.192" path="socket:[12423]" dev="sockfs" ino=12423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   54.361140][   T39] audit: type=1400 audit(1733377989.998:442): avc:  denied  { connect } for  pid=6677 comm="syz.2.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   54.428412][ T6685] netlink: 108 bytes leftover after parsing attributes in process `syz.2.199'.
[   54.454344][   T39] audit: type=1400 audit(1733377990.088:443): avc:  denied  { sqpoll } for  pid=6687 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   54.459734][ T6691] Cannot find add_set index 2 as target
[   54.465932][ T6691] sp0: Synchronizing with TNC
[   54.726531][ T6707] netlink: 36 bytes leftover after parsing attributes in process `syz.2.206'.
[   54.728962][ T6707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.206'.
[   54.731308][ T6707] netlink: 36 bytes leftover after parsing attributes in process `syz.2.206'.
[   54.733702][ T6707] netlink: 36 bytes leftover after parsing attributes in process `syz.2.206'.
[   54.756751][    C3] ==================================================================
[   54.758890][    C3] BUG: KASAN: slab-out-of-bounds in selinux_ip_output+0x1e0/0x1f0
[   54.760952][    C3] Read of size 8 at addr ffff888030f045f8 by task kworker/3:0/35
[   54.764004][    C3] 
[   54.765007][    C3] CPU: 3 UID: 0 PID: 35 Comm: kworker/3:0 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0
[   54.767675][    C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   54.770458][    C3] Workqueue: events mptcp_worker
[   54.771774][    C3] Call Trace:
[   54.772651][    C3]  <IRQ>
[   54.773409][    C3]  dump_stack_lvl+0x116/0x1f0
[   54.774658][    C3]  print_report+0xc3/0x620
[   54.775839][    C3]  ? __virt_addr_valid+0x5e/0x590
[   54.777123][    C3]  ? __phys_addr+0xc6/0x150
[   54.778316][    C3]  kasan_report+0xd9/0x110
[   54.779493][    C3]  ? selinux_ip_output+0x1e0/0x1f0
[   54.780844][    C3]  ? selinux_ip_output+0x1e0/0x1f0
[   54.782186][    C3]  selinux_ip_output+0x1e0/0x1f0
[   54.783485][    C3]  ? __pfx_selinux_ip_output+0x10/0x10
[   54.784909][    C3]  nf_hook_slow+0xbb/0x200
[   54.786080][    C3]  nf_hook+0x386/0x6d0
[   54.787155][    C3]  ? __pfx_dst_output+0x10/0x10
[   54.788435][    C3]  ? __pfx_nf_hook+0x10/0x10
[   54.789647][    C3]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[   54.791175][    C3]  ? __pfx_ip_reply_glue_bits+0x10/0x10
[   54.792623][    C3]  ? __pfx_dst_output+0x10/0x10
[   54.793911][    C3]  ? __ip_make_skb+0x1150/0x1d00
[   54.795207][    C3]  ? do_csum+0x26f/0x2d0
[   54.796333][    C3]  __ip_local_out+0x339/0x640
[   54.797571][    C3]  ? __pfx_dst_output+0x10/0x10
[   54.798848][    C3]  ip_push_pending_frames+0xa0/0x5b0
[   54.800228][    C3]  ip_send_unicast_reply+0xd0e/0x1650
[   54.801619][    C3]  ? __pfx_ip_send_unicast_reply+0x10/0x10
[   54.803081][    C3]  ? debug_object_assert_init+0x1c7/0x2f0
[   54.804542][    C3]  ? trace_lock_acquire+0x14e/0x1f0
[   54.805876][    C3]  ? tcp_v4_send_ack+0x627/0x13f0
[   54.807161][    C3]  tcp_v4_send_ack+0x976/0x13f0
[   54.808449][    C3]  ? __pfx___lock_acquire+0x10/0x10
[   54.809805][    C3]  ? __pfx_tcp_v4_send_ack+0x10/0x10
[   54.811186][    C3]  ? find_held_lock+0x2d/0x110
[   54.812445][    C3]  ? tcp_v4_rcv+0x38a6/0x4380
[   54.813666][    C3]  ? mark_held_locks+0x9f/0xe0
[   54.814888][    C3]  ? tcp_v4_rcv+0x2f8e/0x4380
[   54.816105][    C3]  tcp_v4_rcv+0x2f8e/0x4380
[   54.817294][    C3]  ? __pfx_tcp_v4_rcv+0x10/0x10
[   54.818560][    C3]  ? rcu_is_watching+0x12/0xc0
[   54.819821][    C3]  ? __pfx_tcp_v4_rcv+0x10/0x10
[   54.821095][    C3]  ip_protocol_deliver_rcu+0xba/0x4c0
[   54.822496][    C3]  ip_local_deliver_finish+0x316/0x570
[   54.823924][    C3]  ip_local_deliver+0x18e/0x1f0
[   54.825200][    C3]  ? __pfx_ip_local_deliver+0x10/0x10
[   54.826592][    C3]  ip_rcv+0x2c3/0x5d0
[   54.827654][    C3]  ? __pfx_ip_rcv+0x10/0x10
[   54.828842][    C3]  __netif_receive_skb_one_core+0x199/0x1e0
[   54.830361][    C3]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[   54.832036][    C3]  ? rcu_is_watching+0x12/0xc0
[   54.833291][    C3]  ? process_backlog+0x3f1/0x15f0
[   54.834639][    C3]  ? process_backlog+0x3f1/0x15f0
[   54.835970][    C3]  __netif_receive_skb+0x1d/0x160
[   54.837292][    C3]  process_backlog+0x443/0x15f0
[   54.838567][    C3]  __napi_poll.constprop.0+0xb7/0x550
[   54.839982][    C3]  net_rx_action+0xa94/0x1010
[   54.841219][    C3]  ? __pfx_net_rx_action+0x10/0x10
[   54.842557][    C3]  ? __pfx_mark_lock+0x10/0x10
[   54.843816][    C3]  ? hw_breakpoint_exceptions_notify+0x340/0x3a0
[   54.845480][    C3]  ? ktime_get+0x1ac/0x300
[   54.846651][    C3]  ? kvm_sched_clock_read+0x11/0x20
[   54.848032][    C3]  ? sched_clock+0x38/0x60
[   54.849199][    C3]  ? sched_clock_cpu+0x6d/0x4d0
[   54.850471][    C3]  ? handle_softirqs+0x213/0x8f0
[   54.851772][    C3]  ? mark_held_locks+0x9f/0xe0
[   54.853011][    C3]  handle_softirqs+0x213/0x8f0
[   54.854223][    C3]  ? __pfx_handle_softirqs+0x10/0x10
[   54.855549][    C3]  ? __dev_queue_xmit+0x89b/0x43e0
[   54.856838][    C3]  do_softirq+0xb2/0xf0
[   54.857894][    C3]  </IRQ>
[   54.858650][    C3]  <TASK>
[   54.859437][    C3]  __local_bh_enable_ip+0x100/0x120
[   54.860799][    C3]  ? __dev_queue_xmit+0x89b/0x43e0
[   54.862142][    C3]  __dev_queue_xmit+0x8b0/0x43e0
[   54.863405][    C3]  ? lockdep_unlock+0x11a/0x290
[   54.864600][    C3]  ? __lock_acquire+0x2077/0x3c40
[   54.865825][    C3]  ? __pfx___dev_queue_xmit+0x10/0x10
[   54.867135][    C3]  ? hlock_class+0x4e/0x130
[   54.868292][    C3]  ? mark_lock+0xb5/0xc60
[   54.869339][    C3]  ? __pfx___lock_acquire+0x10/0x10
[   54.870658][    C3]  ? selinux_ip_postroute+0x73b/0xde0
[   54.872231][    C3]  ? __pfx_mark_lock+0x10/0x10
[   54.873431][    C3]  ? find_held_lock+0x2d/0x110
[   54.874611][    C3]  ? __ip_finish_output+0x49e/0x950
[   54.875914][    C3]  ? __pfx_lock_release+0x10/0x10
[   54.877188][    C3]  ? mark_held_locks+0x9f/0xe0
[   54.878401][    C3]  ip_finish_output2+0xc6c/0x2150
[   54.879714][    C3]  ? __pfx_ip_finish_output2+0x10/0x10
[   54.881089][    C3]  ? ip_skb_dst_mtu+0x3fc/0xc70
[   54.882362][    C3]  ? __pfx_ip_skb_dst_mtu+0x10/0x10
[   54.883693][    C3]  __ip_finish_output+0x49e/0x950
[   54.885001][    C3]  ip_finish_output+0x35/0x380
[   54.886236][    C3]  ip_output+0x13b/0x2a0
[   54.887321][    C3]  ? __pfx_ip_output+0x10/0x10
[   54.888545][    C3]  ip_local_out+0x33e/0x4a0
[   54.889700][    C3]  __ip_queue_xmit+0x777/0x1970
[   54.890926][    C3]  ? __pfx_ip_queue_xmit+0x10/0x10
[   54.892242][    C3]  __tcp_transmit_skb+0x2b39/0x3df0
[   54.893607][    C3]  ? __pfx___tcp_transmit_skb+0x10/0x10
[   54.895019][    C3]  ? __pfx_lock_release+0x10/0x10
[   54.896293][    C3]  ? ktime_get+0x206/0x300
[   54.897430][    C3]  ? lockdep_hardirqs_on+0x7c/0x110
[   54.898743][    C3]  tcp_write_xmit+0x12b1/0x8560
[   54.900004][    C3]  ? tcp_current_mss+0x27e/0x500
[   54.901283][    C3]  __tcp_push_pending_frames+0xaf/0x390
[   54.902663][    C3]  tcp_send_fin+0x154/0xc70
[   54.903823][    C3]  ? __pfx_tcp_send_fin+0x10/0x10
[   54.905083][    C3]  ? __pfx_lock_release+0x10/0x10
[   54.906345][    C3]  __tcp_close+0x96b/0xff0
[   54.907470][    C3]  __mptcp_close_ssk+0x332/0x14e0
[   54.908732][    C3]  ? __pfx___mptcp_close_ssk+0x10/0x10
[   54.910117][    C3]  ? __timer_delete+0xf6/0x1c0
[   54.911373][    C3]  ? __pfx___timer_delete+0x10/0x10
[   54.912690][    C3]  mptcp_destroy_common+0x1bc/0x6c0
[   54.914022][    C3]  mptcp_destroy+0x9d/0x130
[   54.915155][    C3]  __mptcp_destroy_sock+0x11f/0x3f0
[   54.916442][    C3]  mptcp_worker+0xeab/0x1240
[   54.917605][    C3]  ? rcu_is_watching+0x12/0xc0
[   54.918867][    C3]  ? __pfx_mptcp_worker+0x10/0x10
[   54.920174][    C3]  ? process_one_work+0x921/0x1ba0
[   54.921462][    C3]  ? lock_acquire+0x2f/0xb0
[   54.922632][    C3]  ? process_one_work+0x921/0x1ba0
[   54.923961][    C3]  process_one_work+0x9c5/0x1ba0
[   54.925255][    C3]  ? __pfx_lock_acquire.part.0+0x10/0x10
[   54.926738][    C3]  ? __pfx_process_one_work+0x10/0x10
[   54.928136][    C3]  ? rcu_is_watching+0x12/0xc0
[   54.929399][    C3]  ? assign_work+0x1a0/0x250
[   54.930607][    C3]  worker_thread+0x6c8/0xf00
[   54.931771][    C3]  ? __pfx_worker_thread+0x10/0x10
[   54.933113][    C3]  kthread+0x2c1/0x3a0
[   54.934198][    C3]  ? _raw_spin_unlock_irq+0x23/0x50
[   54.935570][    C3]  ? __pfx_kthread+0x10/0x10
[   54.936790][    C3]  ret_from_fork+0x45/0x80
[   54.937978][    C3]  ? __pfx_kthread+0x10/0x10
[   54.939148][    C3]  ret_from_fork_asm+0x1a/0x30
[   54.940419][    C3]  </TASK>
[   54.941238][    C3] 
[   54.941823][    C3] The buggy address belongs to the object at ffff888030f04580
[   54.941823][    C3]  which belongs to the cache tw_sock_TCP of size 288
[   54.945396][    C3] The buggy address is located 120 bytes inside of
[   54.945396][    C3]  allocated 288-byte region [ffff888030f04580, ffff888030f046a0)
[   54.949030][    C3] 
[   54.949667][    C3] The buggy address belongs to the physical page:
[   54.951349][    C3] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30f04
[   54.953620][    C3] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   54.955773][    C3] memcg:ffff888032540201
[   54.956884][    C3] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   54.958838][    C3] page_type: f5(slab)
[   54.959893][    C3] raw: 00fff00000000040 ffff888100ef3540 dead000000000122 0000000000000000
[   54.962108][    C3] raw: 0000000000000000 0000000080170017 00000001f5000000 ffff888032540201
[   54.964321][    C3] head: 00fff00000000040 ffff888100ef3540 dead000000000122 0000000000000000
[   54.966574][    C3] head: 0000000000000000 0000000080170017 00000001f5000000 ffff888032540201
[   54.968826][    C3] head: 00fff00000000001 ffffea0000c3c101 ffffffffffffffff 0000000000000000
[   54.971068][    C3] head: ffff888000000002 0000000000000000 00000000ffffffff 0000000000000000
[   54.973310][    C3] page dumped because: kasan: bad access detected
[   54.974984][    C3] page_owner tracks the page as allocated
[   54.976464][    C3] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6706, tgid 6706 (syz.2.206), ts 54754169237, free_ts 53548615149
[   54.981301][    C3]  post_alloc_hook+0x2d1/0x350
[   54.982555][    C3]  get_page_from_freelist+0xfce/0x2f80
[   54.983987][    C3]  __alloc_pages_noprof+0x223/0x25b0
[   54.985357][    C3]  alloc_pages_mpol_noprof+0x2c9/0x610
[   54.986789][    C3]  new_slab+0x2c9/0x410
[   54.987884][    C3]  ___slab_alloc+0xdac/0x1870
[   54.989109][    C3]  __slab_alloc.constprop.0+0x56/0xb0
[   54.990500][    C3]  kmem_cache_alloc_noprof+0xfa/0x3d0
[   54.991905][    C3]  inet_twsk_alloc+0x120/0x970
[   54.993156][    C3]  tcp_time_wait+0x5f/0xe10
[   54.994351][    C3]  tcp_rcv_state_process+0x4935/0x4c40
[   54.995777][    C3]  tcp_v4_do_rcv+0x1ad/0xa90
[   54.996996][    C3]  tcp_v4_rcv+0x33a0/0x4380
[   54.998189][    C3]  ip_protocol_deliver_rcu+0xba/0x4c0
[   54.999589][    C3]  ip_local_deliver_finish+0x316/0x570
[   55.001007][    C3]  ip_local_deliver+0x18e/0x1f0
[   55.002278][    C3] page last free pid 6637 tgid 6636 stack trace:
[   55.003915][    C3]  free_unref_page+0x661/0x1080
[   55.005188][    C3]  tlb_finish_mmu+0x237/0x7b0
[   55.006422][    C3]  exit_mmap+0x3df/0xb20
[   55.007537][    C3]  __mmput+0x12a/0x4c0
[   55.008569][    C3]  mmput+0x62/0x70
[   55.009528][    C3]  do_exit+0x9bf/0x2d70
[   55.010558][    C3]  do_group_exit+0xd3/0x2a0
[   55.011738][    C3]  get_signal+0x24ed/0x26c0
[   55.012929][    C3]  arch_do_signal_or_restart+0x90/0x7e0
[   55.014375][    C3]  syscall_exit_to_user_mode+0x150/0x2a0
[   55.015857][    C3]  do_syscall_64+0xda/0x250
[   55.017048][    C3]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.018552][    C3] 
[   55.019246][    C3] Memory state around the buggy address:
[   55.021121][    C3]  ffff888030f04480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   55.023229][    C3]  ffff888030f04500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   55.025330][    C3] >ffff888030f04580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   55.027424][    C3]                                                                 ^
[   55.029495][    C3]  ffff888030f04600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   55.031566][    C3]  ffff888030f04680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   55.033657][    C3] ==================================================================
[   55.035833][    C3] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   55.037699][    C3] CPU: 3 UID: 0 PID: 35 Comm: kworker/3:0 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0
[   55.040457][    C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   55.043232][    C3] Workqueue: events mptcp_worker
[   55.044527][    C3] Call Trace:
[   55.045416][    C3]  <IRQ>
[   55.046174][    C3]  dump_stack_lvl+0x3d/0x1f0
[   55.047393][    C3]  panic+0x71d/0x800
[   55.048424][    C3]  ? mark_held_locks+0x9f/0xe0
[   55.049673][    C3]  ? __pfx_panic+0x10/0x10
[   55.050831][    C3]  ? irqentry_exit+0x3b/0x90
[   55.052016][    C3]  ? lockdep_hardirqs_on+0x7c/0x110
[   55.053334][    C3]  ? check_panic_on_warn+0x1f/0xb0
[   55.054676][    C3]  check_panic_on_warn+0xab/0xb0
[   55.055944][    C3]  end_report+0x117/0x180
[   55.057072][    C3]  kasan_report+0xe9/0x110
[   55.058249][    C3]  ? selinux_ip_output+0x1e0/0x1f0
[   55.059577][    C3]  ? selinux_ip_output+0x1e0/0x1f0
[   55.060917][    C3]  selinux_ip_output+0x1e0/0x1f0
[   55.062199][    C3]  ? __pfx_selinux_ip_output+0x10/0x10
[   55.063640][    C3]  nf_hook_slow+0xbb/0x200
[   55.064814][    C3]  nf_hook+0x386/0x6d0
[   55.065883][    C3]  ? __pfx_dst_output+0x10/0x10
[   55.067154][    C3]  ? __pfx_nf_hook+0x10/0x10
[   55.068381][    C3]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[   55.069901][    C3]  ? __pfx_ip_reply_glue_bits+0x10/0x10
[   55.071361][    C3]  ? __pfx_dst_output+0x10/0x10
[   55.072634][    C3]  ? __ip_make_skb+0x1150/0x1d00
[   55.073941][    C3]  ? do_csum+0x26f/0x2d0
[   55.075041][    C3]  __ip_local_out+0x339/0x640
[   55.076236][    C3]  ? __pfx_dst_output+0x10/0x10
[   55.077509][    C3]  ip_push_pending_frames+0xa0/0x5b0
[   55.078897][    C3]  ip_send_unicast_reply+0xd0e/0x1650
[   55.080322][    C3]  ? __pfx_ip_send_unicast_reply+0x10/0x10
[   55.081846][    C3]  ? debug_object_assert_init+0x1c7/0x2f0
[   55.083344][    C3]  ? trace_lock_acquire+0x14e/0x1f0
[   55.084711][    C3]  ? tcp_v4_send_ack+0x627/0x13f0
[   55.086000][    C3]  tcp_v4_send_ack+0x976/0x13f0
[   55.087166][    C3]  ? __pfx___lock_acquire+0x10/0x10
[   55.088525][    C3]  ? __pfx_tcp_v4_send_ack+0x10/0x10
[   55.089907][    C3]  ? find_held_lock+0x2d/0x110
[   55.091170][    C3]  ? tcp_v4_rcv+0x38a6/0x4380
[   55.092420][    C3]  ? mark_held_locks+0x9f/0xe0
[   55.093691][    C3]  ? tcp_v4_rcv+0x2f8e/0x4380
[   55.094921][    C3]  tcp_v4_rcv+0x2f8e/0x4380
[   55.096125][    C3]  ? __pfx_tcp_v4_rcv+0x10/0x10
[   55.097393][    C3]  ? rcu_is_watching+0x12/0xc0
[   55.098641][    C3]  ? __pfx_tcp_v4_rcv+0x10/0x10
[   55.099855][    C3]  ip_protocol_deliver_rcu+0xba/0x4c0
[   55.101234][    C3]  ip_local_deliver_finish+0x316/0x570
[   55.102636][    C3]  ip_local_deliver+0x18e/0x1f0
[   55.103914][    C3]  ? __pfx_ip_local_deliver+0x10/0x10
[   55.105272][    C3]  ip_rcv+0x2c3/0x5d0
[   55.106267][    C3]  ? __pfx_ip_rcv+0x10/0x10
[   55.107463][    C3]  __netif_receive_skb_one_core+0x199/0x1e0
[   55.109013][    C3]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[   55.110662][    C3]  ? rcu_is_watching+0x12/0xc0
[   55.111875][    C3]  ? process_backlog+0x3f1/0x15f0
[   55.113159][    C3]  ? process_backlog+0x3f1/0x15f0
[   55.114459][    C3]  __netif_receive_skb+0x1d/0x160
[   55.115788][    C3]  process_backlog+0x443/0x15f0
[   55.117070][    C3]  __napi_poll.constprop.0+0xb7/0x550
[   55.118481][    C3]  net_rx_action+0xa94/0x1010
[   55.119731][    C3]  ? __pfx_net_rx_action+0x10/0x10
[   55.121071][    C3]  ? __pfx_mark_lock+0x10/0x10
[   55.122302][    C3]  ? hw_breakpoint_exceptions_notify+0x340/0x3a0
[   55.123978][    C3]  ? ktime_get+0x1ac/0x300
[   55.125188][    C3]  ? kvm_sched_clock_read+0x11/0x20
[   55.126546][    C3]  ? sched_clock+0x38/0x60
[   55.127731][    C3]  ? sched_clock_cpu+0x6d/0x4d0
[   55.129016][    C3]  ? handle_softirqs+0x213/0x8f0
[   55.130313][    C3]  ? mark_held_locks+0x9f/0xe0
[   55.131577][    C3]  handle_softirqs+0x213/0x8f0
[   55.132831][    C3]  ? __pfx_handle_softirqs+0x10/0x10
[   55.134220][    C3]  ? __dev_queue_xmit+0x89b/0x43e0
[   55.135568][    C3]  do_softirq+0xb2/0xf0
[   55.136659][    C3]  </IRQ>
[   55.137424][    C3]  <TASK>
[   55.138165][    C3]  __local_bh_enable_ip+0x100/0x120
[   55.139499][    C3]  ? __dev_queue_xmit+0x89b/0x43e0
[   55.140765][    C3]  __dev_queue_xmit+0x8b0/0x43e0
[   55.142045][    C3]  ? lockdep_unlock+0x11a/0x290
[   55.143292][    C3]  ? __lock_acquire+0x2077/0x3c40
[   55.144582][    C3]  ? __pfx___dev_queue_xmit+0x10/0x10
[   55.145948][    C3]  ? hlock_class+0x4e/0x130
[   55.147250][    C3]  ? mark_lock+0xb5/0xc60
[   55.148379][    C3]  ? __pfx___lock_acquire+0x10/0x10
[   55.149647][    C3]  ? selinux_ip_postroute+0x73b/0xde0
[   55.150931][    C3]  ? __pfx_mark_lock+0x10/0x10
[   55.152115][    C3]  ? find_held_lock+0x2d/0x110
[   55.153293][    C3]  ? __ip_finish_output+0x49e/0x950
[   55.154605][    C3]  ? __pfx_lock_release+0x10/0x10
[   55.155873][    C3]  ? mark_held_locks+0x9f/0xe0
[   55.157133][    C3]  ip_finish_output2+0xc6c/0x2150
[   55.158453][    C3]  ? __pfx_ip_finish_output2+0x10/0x10
[   55.159814][    C3]  ? ip_skb_dst_mtu+0x3fc/0xc70
[   55.161065][    C3]  ? __pfx_ip_skb_dst_mtu+0x10/0x10
[   55.162385][    C3]  __ip_finish_output+0x49e/0x950
[   55.163679][    C3]  ip_finish_output+0x35/0x380
[   55.164928][    C3]  ip_output+0x13b/0x2a0
[   55.166054][    C3]  ? __pfx_ip_output+0x10/0x10
[   55.167337][    C3]  ip_local_out+0x33e/0x4a0
[   55.168532][    C3]  __ip_queue_xmit+0x777/0x1970
[   55.169811][    C3]  ? __pfx_ip_queue_xmit+0x10/0x10
[   55.171164][    C3]  __tcp_transmit_skb+0x2b39/0x3df0
[   55.172532][    C3]  ? __pfx___tcp_transmit_skb+0x10/0x10
[   55.173978][    C3]  ? __pfx_lock_release+0x10/0x10
[   55.175263][    C3]  ? ktime_get+0x206/0x300
[   55.176372][    C3]  ? lockdep_hardirqs_on+0x7c/0x110
[   55.177724][    C3]  tcp_write_xmit+0x12b1/0x8560
[   55.178995][    C3]  ? tcp_current_mss+0x27e/0x500
[   55.180210][    C3]  __tcp_push_pending_frames+0xaf/0x390
[   55.181662][    C3]  tcp_send_fin+0x154/0xc70
[   55.182853][    C3]  ? __pfx_tcp_send_fin+0x10/0x10
[   55.184178][    C3]  ? __pfx_lock_release+0x10/0x10
[   55.185497][    C3]  __tcp_close+0x96b/0xff0
[   55.186668][    C3]  __mptcp_close_ssk+0x332/0x14e0
[   55.188026][    C3]  ? __pfx___mptcp_close_ssk+0x10/0x10
[   55.189345][    C3]  ? __timer_delete+0xf6/0x1c0
[   55.190500][    C3]  ? __pfx___timer_delete+0x10/0x10
[   55.191824][    C3]  mptcp_destroy_common+0x1bc/0x6c0
[   55.193184][    C3]  mptcp_destroy+0x9d/0x130
[   55.194389][    C3]  __mptcp_destroy_sock+0x11f/0x3f0
[   55.195732][    C3]  mptcp_worker+0xeab/0x1240
[   55.196935][    C3]  ? rcu_is_watching+0x12/0xc0
[   55.198187][    C3]  ? __pfx_mptcp_worker+0x10/0x10
[   55.199506][    C3]  ? process_one_work+0x921/0x1ba0
[   55.200727][    C3]  ? lock_acquire+0x2f/0xb0
[   55.201882][    C3]  ? process_one_work+0x921/0x1ba0
[   55.203565][    C3]  process_one_work+0x9c5/0x1ba0
[   55.204910][    C3]  ? __pfx_lock_acquire.part.0+0x10/0x10
[   55.206326][    C3]  ? __pfx_process_one_work+0x10/0x10
[   55.207788][    C3]  ? rcu_is_watching+0x12/0xc0
[   55.209270][    C3]  ? assign_work+0x1a0/0x250
[   55.210840][    C3]  worker_thread+0x6c8/0xf00
[   55.212415][    C3]  ? __pfx_worker_thread+0x10/0x10
[   55.214147][    C3]  kthread+0x2c1/0x3a0
[   55.215535][    C3]  ? _raw_spin_unlock_irq+0x23/0x50
[   55.217278][    C3]  ? __pfx_kthread+0x10/0x10
[   55.218863][    C3]  ret_from_fork+0x45/0x80
[   55.220347][    C3]  ? __pfx_kthread+0x10/0x10
[   55.221863][    C3]  ret_from_fork_asm+0x1a/0x30
[   55.223481][    C3]  </TASK>
[   55.225165][    C3] Kernel Offset: disabled
[   55.226570][    C3] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:53:10  Registers:
info registers vcpu 0

CPU#0
RAX=00000000000babdd RBX=0000000000000000 RCX=ffffffff8b29c759 RDX=0000000000000000
RSI=ffffffff8b6cd840 RDI=ffffffff8bd1b4a0 RBP=fffffbfff1bd2ef8 RSP=ffffffff8de07e20
R8 =0000000000000001 R9 =ffffed100d4c6fed R10=ffff88806a637f6b R11=0000000000000000
R12=0000000000000000 R13=ffffffff8de977c0 R14=ffffffff905f0410 R15=0000000000000000
RIP=ffffffff8b29db3f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fefc1d7bfb8 CR3=0000000051334000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc0ff4830
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc0ff483d
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc0ff4837
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc0ff484b
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc0ff48d1
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc0ff49af
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc1110488 00007fefc1110480 00007fefc1110478 00007fefc1110450
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc1c7d100 00007fefc1110440 00007fefc1110458 00007fefc11104a0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc1110498 00007fefc1110490 00007fefc1110488 00007fefc1110480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000088
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff2e0f463 RBX=ffffffff96e88ca8 RCX=1ffffffff2c3c34d RDX=00000000000003dd
RSI=1ffffffff2dd11a0 RDI=ffffffff96e88d04 RBP=ffffffff9707a9b8 RSP=ffffc90003cd6f20
R8 =0000000000000000 R9 =ffffffff96e893e0 R10=0000000000000002 R11=0000000000000032
R12=ffffffff8175b090 R13=ffffffff9707a9a8 R14=dffffc0000000000 R15=ffffffff9707a9a8
RIP=ffffffff8175fffd RFL=00000807 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557be75500 ffffffff 00c00000
GS =0000 ffff88806a700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000000000000 CR3=0000000051334000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555c23ea75 000055555c23ddb0
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555c2314a0
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff88cb10d00
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000125dfdbfb00 0000000001018a08 268c030100001204 0626880300000084
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200058001004800 0000010003000800 0000000005000500 0000000002000800
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0302881000299003 0300080000000300 0600080000000200 0100060000002000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000100806060138 9e0008002ae00300 10002ad003001000 2ac0030210002ab0
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0106100040801000 01b2c0800406012a f004808080801000 2a80040100001008
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060601389e000800 2ae0030010002ad0 030010002ac00302 10002ab003028810
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0029900303000800 0000030006000800 0000020001000600 0000200002000580
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100480000000100 0300080000000000 0500050000000000 0200080000000125
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=000000000005b0d7 RBX=0000000000000002 RCX=ffffffff8b29c759 RDX=0000000000000000
RSI=ffffffff8b6cd840 RDI=ffffffff8bd1b4a0 RBP=ffffed1003ad4000 RSP=ffffc90000197e08
R8 =0000000000000001 R9 =ffffed100d506fed R10=ffff88806a837f6b R11=0000000000000000
R12=0000000000000002 R13=ffff88801d6a0000 R14=ffffffff905f0410 R15=0000000000000000
RIP=ffffffff8b29db3f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a800000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fbb419edfb8 CR3=0000000051334000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000ffffff00 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb40bf4830
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb40bf483d
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb40bf4837
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb40bf484b
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb40bf48d1
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb40bf49af
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff851c98d5 RDI=ffffffff9ab0fbe0 RBP=ffffffff9ab0fba0 RSP=ffffc90000707d30
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552
R12=0000000000000000 R13=0000000000000030 R14=ffffffff851c9870 R15=0000000000000000
RIP=ffffffff851c98ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a900000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c3ae29e CR3=0000000050b02000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000