last executing test programs:

1m51.950283986s ago: executing program 2 (id=584):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = fanotify_init(0x1, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r3 = fanotify_init(0x4, 0x0)
dup3(r3, r1, 0x80000)
fanotify_mark(r1, 0x61, 0x40001002, r2, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r2], 0x528}, 0x1, 0x0, 0x0, 0x4004}, 0x200408a1)

1m51.948361648s ago: executing program 2 (id=585):
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2c, 0x0, {0xa, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x4}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e23}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2c, 0x0, {0xa, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x4}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e23}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x800, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}, @IFLA_NET_NS_PID={0x8, 0x13, r1}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x60}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x800, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}, @IFLA_NET_NS_PID={0x8, 0x13, r1}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x60}}, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000088}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000088}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFBR(r3, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2})
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_PHYS(r4, 0x4008556c, 0x0)
sendmsg$netlink(r2, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000280)=@ethtool_regs={0x4, 0x9}}) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000280)=@ethtool_regs={0x4, 0x9}})

1m51.891581728s ago: executing program 2 (id=586):
r0 = socket(0x2d, 0x2, 0x24) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) (async)
r1 = syz_open_dev$radio(&(0x7f0000000080), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000040)={0x98f904, 0x1, @value=0xf})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000800000000000000063012001000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) (async)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15)
ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async)
syz_emit_ethernet(0x12, &(0x7f0000000240)={@broadcast, @broadcast, @void, {@generic={0x29, "b44338e9"}}}, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="62138d58", 0x4)

1m51.822000482s ago: executing program 2 (id=587):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) (async)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]})
read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000001c0), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m51.755015622s ago: executing program 2 (id=590):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='nilfs2\x00', 0x8080, &(0x7f0000000100)='discard')
recvmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x1140)

1m51.421809289s ago: executing program 2 (id=591):
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00', @ANYBLOB="1c007a800c0003"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x840)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0x9, 0xe55, 0x6, 0x2, 0x1040, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x5, 0x6a], 0x1, 0x1000d6})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = inotify_init1(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x24000420)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.current\x00', 0x275a, 0x0)
dup3(r3, r4, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0xf8, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0xe1, 0x7, 0x1, 0x0, "16d344f0e64c53b0cc607470b321668777cfa76b59281facd185338f740ec5d211ca3b853988a4520af43219a53621004472fb33482a134d5a90aec29d0050e30eedd1ff51a4ea23566cfba3acd1d3cadb7f28dcbd1a965d0fc3ee8736629a7370b7dd5eea88e06a2b076d47dce7648dccba77115690e1d985bdb2688a239bc6eafa3e65b1bbdaa7af16812455be8540b4bbfeeeaaf78226c4800db1ca5eec3f3465eefefef3408ec36942bb344c1f6afc27dd11e7a60c25f7a81e80fb196a1c763c51ef6f833789f37fdc201dd577d79ae51b32f86356254cb2bcb1d2"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x120}, 0x1, 0x0, 0x0, 0x20000085}, 0x40000)

1m51.421521589s ago: executing program 32 (id=591):
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00', @ANYBLOB="1c007a800c0003"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x840)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0x9, 0xe55, 0x6, 0x2, 0x1040, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x5, 0x6a], 0x1, 0x1000d6})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = inotify_init1(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x24000420)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.current\x00', 0x275a, 0x0)
dup3(r3, r4, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0xf8, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0xe1, 0x7, 0x1, 0x0, "16d344f0e64c53b0cc607470b321668777cfa76b59281facd185338f740ec5d211ca3b853988a4520af43219a53621004472fb33482a134d5a90aec29d0050e30eedd1ff51a4ea23566cfba3acd1d3cadb7f28dcbd1a965d0fc3ee8736629a7370b7dd5eea88e06a2b076d47dce7648dccba77115690e1d985bdb2688a239bc6eafa3e65b1bbdaa7af16812455be8540b4bbfeeeaaf78226c4800db1ca5eec3f3465eefefef3408ec36942bb344c1f6afc27dd11e7a60c25f7a81e80fb196a1c763c51ef6f833789f37fdc201dd577d79ae51b32f86356254cb2bcb1d2"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x120}, 0x1, 0x0, 0x0, 0x20000085}, 0x40000)

1m50.06016526s ago: executing program 0 (id=614):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x4a)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000040), 0x4)
connect$llc(r2, &(0x7f0000000000)={0x1a, 0x1, 0x1, 0x1, 0x3f, 0x0, @remote}, 0x10)
mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
link(&(0x7f0000000000)='./file1\x00', 0x0)
linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0)
unlink(&(0x7f00000001c0)='./file0\x00')

1m48.989853836s ago: executing program 0 (id=616):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x10000, 0x80)
mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x0)
socket(0x1d, 0x2, 0x4e69)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000540), 0x800201, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, 0x0)
r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, r5, 0x3, 0x0, @val=@iter={0x0}}, 0x20)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000001c0)={'dvmrp0\x00', @random="76321038886a"})
syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$mixer_OSS_ALSAEMULVER(r8, 0x80044df9, &(0x7f0000000080))
close_range(r1, r7, 0x2)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newtfilter={0x38, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x16}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x893}, 0x24040084)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c})

1m48.889641401s ago: executing program 0 (id=618):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0x4f, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x2)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
close(r3)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x10, &(0x7f0000001100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000000c0)={<r7=>r6, 0x7}, &(0x7f0000000140)=0x8)
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES16=r5, @ANYRES32=r6, @ANYRESOCT=r1, @ANYRES16=r2, @ANYRES64=r7, @ANYRES16=r1, @ANYRES16=r0, @ANYRES32=r5, @ANYRES8=r1])

1m48.820523533s ago: executing program 0 (id=621):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x200000000000005)
syz_usb_disconnect(r0)
socketpair(0x6, 0x800, 0x4, 0x0)
poll(&(0x7f00000000c0)=[{r1, 0x2220}], 0x1, 0x800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
read$alg(r4, &(0x7f0000000240)=""/4096, 0xfffffdef)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000000100)=0x8)
sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004009959e40c16c39e100", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x4)
r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000001240)={{r3}, 0x0, 0x0, @unused=[0x2, 0x5, 0x0, 0xffff], @subvolid=0x9})

1m47.310591644s ago: executing program 0 (id=640):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0xd6bec4e45a6aa0ed, 0x0, <r1=>0xffffffffffffffff})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x2, {0x7, 0x7f, "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", 0x3, 0x7, 0x4, 0x5, 0xe, 0xc1, 0x81, 0x1}, r2}}, 0x128)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {r2, 0x200}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={<r3=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280), r3, 0x0, 0x1, 0x4}}, 0x20)
setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000380)='\x00', 0x1)
write$binfmt_misc(r1, &(0x7f00000003c0)="e02beb2292586caaf10358390d29c6324f171f35ef99cdba267eedaad215b6e3c73c08de97c0ea9ff8d7cd4fca5ffee07699a994682c01913b63ed6cd35b572debba1e87a9148b1f6ee7575b85deb945a0efbc04b853166907b1a1b416e9d68d7c42cdd633aa587123d40ae07ce69200cdade00e400f348cec6962f8eaf7de3bc1e048b5d37d7954e927af242061cb72421d6722ccb215e5768299e63a1f5c33338d78b9e3346a72a010976388ace1a8bf3b0a90d429f5dcbeaf83652cdbdefed463cca04f6a162c9b6cc5", 0xcb)
splice(r1, &(0x7f00000004c0)=0x9, r1, &(0x7f0000000500)=0x81, 0xffffffffffffffff, 0x1)
io_uring_enter(r1, 0x3a99, 0x877e, 0x2, &(0x7f0000000540)={[0x7fff]}, 0x8)
write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000580)={0x9, 0x108, 0xfa00, {r2, 0x7, "6b864c", "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"}}, 0x110)
setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f00000006c0)={0x0, 0xea60}, 0x10)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000700)={0x0, 0x6, 0x9a73, 0xfff, 0x8000, 0x8, 0x4, 0x6, 0x9, 0x3e35, 0x3})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000007c0)={0x1, 0x0, 'client1\x00', 0x2, "0239ca4ee8c49807", "17e29ecc64fb23a2164b04b23c06951efea33afeefb08ac1058912c617bd9fed", 0x6, 0x4})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000980)={&(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[<r4=>0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0], 0x9, 0x1, 0x3, 0x2})
ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f00000009c0)={0x1, r4, 0xbe9, 0x4, 0x1, 0x10000, 0x1, 0xfffffff7, 0x6})
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000a00)={0x87, @multicast2, 0x4e22, 0x4, 'sed\x00', 0x0, 0x5, 0x30}, 0x2c)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000a40)={0x8, 0x8, 0x4, 0x0, 0x0, [{{r1}, 0x7}, {{r0}, 0x200}, {{r1}, 0xba}, {{r0}, 0x2}]})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000b00)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r5=>0x0, 0x1})
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000b80)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000c00)={0x28, 0x1, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000bc0)})
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000d00)={0xb, 0x10, 0xfa00, {&(0x7f0000000c40), r3, 0x3}}, 0x18)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000d40)=0x1)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000d80))
ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000dc0)=""/4096)
setsockopt$inet_dccp_int(r1, 0x21, 0xb, &(0x7f0000001dc0)=0x5, 0x4)
sendmmsg$unix(r1, &(0x7f0000002540)=[{{&(0x7f0000001e00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002480)=[{&(0x7f0000001e80)="30fe06d6a45356de00e9c496af63", 0xe}, {&(0x7f0000001ec0)="13ed81276575ec99c308786ed7e65c5f1dbe200059a2bdb8509a862c64cabea2a5904a2d24981254a19e36633f2b9574cc523a66b66a869f89cd22d0d518afeeb226642d0e3bc3f2eeece9ad9fad6b8264b0bf0c0a7d8393b2e81220b129bec285f5f7b1ca541695cc89b8f067fc69271825e31cf88b7de9121255a5f68ecb68cad6ab745ef9123f141435ed63d7892f595b32f3a578a216b2efbd13134033e554732b4c19a0f677921bf343706da33c237d51fdbe7d51ebc370e1ee43feb5194ca824b152d049eae8c4d041b77f7f0ced29abcb19406317684a", 0xda}, {&(0x7f0000001fc0)="6b96c2", 0x3}, {&(0x7f0000002000)="65f6c7ad663c04330498a1347e0b778abea01c397b538b797c42470a88db09b4851eb079b8908bf7037a5b40b18ba46aa3ddc8160d8a5b7eee906ad4576be24bc8647933de2807", 0x47}, {&(0x7f0000002080)="60cb9f97faa3b355bc49ee62ca6645dc893cbbbef6c067e7f66f402d28d4b1a254974b506c35565f35fa3f645b12f2d07f4f3dc494225319a6a6aa6089e1edbb5ab2fcf566b6ebb7e3153b283ccbb4af163171d12d3fde6c51727c5ee116041b7c246b8bf72cf75e72dd358dab88db4797b81b129d3dbdc1ce70f21397c02cd09cfbdaf541a4783bd244674ee5b68cb174e3b2", 0x93}, {&(0x7f0000002140)="a1741271659d2e6880092207863aad3f0606f2f8432735155f9dc2d578913ef178cff0f0dd4208c90c050493b8543e3a644fd8f0e33c3606506cbadbea124006102673ce34c6447a62b9e236a1d2c0cd5e8762f3164cc622630b66e3acbd79d213dbaee056e935ceab95f286e151dca7dda2791e6a26a4634498c245fe696e6d7f5783b8b3e9383e5d8eeaba3ac2959b14bdc6f65805c3d738e0192fab39d1939acc4bcfbe47ddc9ead82dde6cfce5957cf5d75ef744e6b646b879fc578d3f94db83ca", 0xc3}, {&(0x7f0000002240)="5ea00bdf448afec40b93f549f3f1fb4a81b2ec1dcb6ad692ef243a322165cc2276582788b21a1ccbd2aa473b456222db25b872568e5f80cfedf36ecc526710f106d61e891a9bfbd7b858bb2cf2fb8478f3d45e0fd58ad25de6229eff18320c575c22793627f22fd4c33296f17107a3cd001bdd4d39eae82c7f8b5305454f83ff307a76be0ff7fe67643dc48d785f92a4a732be606efb8249f672202fd14cdbdb1c08dae38a73d0d56945eb543ec548a0464fd1172cb4564798419ea450df5a6f59a8fce5cd405175f32c0e9b91fe0c3f62b481a59973954376", 0xd9}, {&(0x7f0000002340)="377e86e4fdc7519321cabb50a3757163e3585919c5cb5955ad844a4f48adfaf629b586ff6ac549a68319945131f2ea98cdb89b813fa37c951bff49f585737bebb8331e231f325440b516bb42c74684702d60ca27356829a6d7f0dfb1ee25c3ede2efc2acbc1373cc088b54e786d8aa51e28d8f4dbcbb8534bb8c6c281796c40d9f6f5a668ef8efdb344016c989dd8110dd4ebfb7df386911ef4304cd1181f36461631b3a8e2deb7a4813e02ad0f7c72549ad9e69b5bd2beaa1c2cb392a05b2d7ffdefdc0", 0xc4}, {&(0x7f0000002440)}], 0x9, 0x0, 0x0, 0x800}}], 0x1, 0x4)
setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88)
lseek(r1, 0x1, 0x1)

1m47.090818025s ago: executing program 0 (id=643):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100), 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600080000fc020000000000000000000000000000fe800000000000a2223427d5c9a46b9f0000000000000000"], 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600080000fc020000000000000000000000000000fe800000000000a2223427d5c9a46b9f0000000000000000"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0xfff}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1)

1m47.090411616s ago: executing program 33 (id=643):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100), 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600080000fc020000000000000000000000000000fe800000000000a2223427d5c9a46b9f0000000000000000"], 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600080000fc020000000000000000000000000000fe800000000000a2223427d5c9a46b9f0000000000000000"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0xfff}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1)

27.97329613s ago: executing program 1 (id=742):
set_mempolicy(0x3, &(0x7f00000000c0)=0x7, 0xa)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000001580)={0x2020}, 0x2020)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x2, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x2, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d)

27.973245947s ago: executing program 1 (id=742):
set_mempolicy(0x3, &(0x7f00000000c0)=0x7, 0xa)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000001580)={0x2020}, 0x2020)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x2, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x2, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d)

26.818718382s ago: executing program 1 (id=742):
set_mempolicy(0x3, &(0x7f00000000c0)=0x7, 0xa)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000001580)={0x2020}, 0x2020)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x2, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x2, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d)

19.410610842s ago: executing program 1 (id=742):
set_mempolicy(0x3, &(0x7f00000000c0)=0x7, 0xa)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000001580)={0x2020}, 0x2020)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x2, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x2, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d)

11.866080519s ago: executing program 1 (id=742):
set_mempolicy(0x3, &(0x7f00000000c0)=0x7, 0xa)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000001580)={0x2020}, 0x2020)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x2, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x2, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d)

4.512898053s ago: executing program 5 (id=1623):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8}]}}]}, 0x3c}}, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', r4, 0x1, 0x40, 0x81, 0x35fcf504, {{0x20, 0x4, 0x3, 0x6, 0x80, 0x64, 0x0, 0x7, 0x4, 0x0, @private=0xa010100, @broadcast, {[@ssrr={0x89, 0x7, 0xe7, [@local]}, @lsrr={0x83, 0x27, 0x32, [@rand_addr=0x64010100, @remote, @remote, @multicast1, @loopback, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @noop, @cipso={0x86, 0x3b, 0x1, [{0x6, 0x6, "8959601c"}, {0x6, 0x9, "9da7744d045e68"}, {0x6, 0x11, "5c4e21873f3a75d82f754fccf581f4"}, {0x5, 0x7, "41587e87ea"}, {0x1, 0x5, "f749b2"}, {0x5, 0x9, "fd208f1d73246a"}]}]}}}}})
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) (async)
sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) (async)
mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1)

4.511716942s ago: executing program 5 (id=1625):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
r1 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x8082, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000180))
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000007c0)={'broute\x00', 0x0, 0x4, 0x77, [0x9040, 0x7, 0xab, 0x6, 0x4], 0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000740)=""/119}, &(0x7f0000000500)=0x78)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000004c0)=@generic={0x2, 0x3, 0x5})
connect$inet6(r0, &(0x7f0000000140)={0xa, 0xfffd, 0x96, @remote, 0x1}, 0x1c)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000002c0)="adcdc36e961ed00fe41bf7ad693b1058bc21977082debaf54da5d805a2ebe9b950e1db2104def19f4908d2462e0697c58566b7eaf6b8179923a0a5494a0919709389de18904b24d41c4e86b2", 0x4c)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
read$alg(r4, &(0x7f0000001540)=""/4131, 0x1023)
sendmsg$alg(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@assoc={0x18, 0x117, 0x4, 0x400}], 0x18, 0x48845}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x887dab077f141882, 0x0)
ptrace(0x10, r2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
pipe(&(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r8)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r9=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r9, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r7, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)

4.420594964s ago: executing program 1 (id=742):
set_mempolicy(0x3, &(0x7f00000000c0)=0x7, 0xa)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000001580)={0x2020}, 0x2020)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x2, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x2, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d)

2.788425684s ago: executing program 5 (id=1627):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x24008800)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getstat={0xe0, 0x15, 0x0, 0x70bd29, 0x0, {{'digest_null-generic\x00'}, '\x00', '\x00', 0x0, 0x2400}}, 0xe0}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000004c0000000c00a600000000000000000008000100"], 0x3c}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f00000016c0)=@x86={0x3, 0x8, 0xd0, 0x0, 0x4, 0xf9, 0x0, 0x2, 0xe3, 0x5, 0x1, 0x10, 0x0, 0x10, 0x0, 0x3, 0xfa, 0x1, 0x7, '\x00', 0xff, 0xffffffff})
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0x8)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004840)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}}], 0x1, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0x9, 0xe55, 0x6, 0x2, 0x1040, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0xffffffffffffffff, 0x6a], 0x1, 0x1000d6})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)

2.730429688s ago: executing program 4 (id=1631):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180abb2344b787828000000000000000180000001800000005000000030000000a00001100"/53], 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'tunl0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000240)={0x0, 0xda0, 0x0, 0x0, 0xfffffffffffffff6})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f00000001c0)={0x50, 0x0, r6, {0x7, 0x5, 0x0, 0x28201080, 0x240, 0x0, 0x4, 0xf24, 0x0, 0x0, 0x8, 0x800}}, 0x50)
rename(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00')
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x28}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0)

2.237124642s ago: executing program 5 (id=1632):
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x800488, &(0x7f0000000940)=ANY=[@ANYBLOB="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"])
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x4, 0x0, 0x4}}, 0x2e)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @loopback}, 0x5, 0x0, 0x2}}, 0x2e)

2.160823937s ago: executing program 5 (id=1634):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000000)=0x7)
r2 = memfd_create(&(0x7f0000000700)='[\v\xdbX\xae[\x1a\xa9\xff\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xcfT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8 \xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8f\x87\x90\xde\xd5\x00\n\xd3=\a\xa6\xb6\v,\x03\xa6\xfe\x92p\xea/\x0f\xd0c)\x9c \xbd\xd4\xc27\xb5\x8cT\xa8\x0f\x04\xbc\x97\x1f\x10\x02\xbb\x99O\x96\xb2\x81\xce\xc3\xcf\xd6\xff\x98\xab\xddfH5/W\xbc\xed\xe0\xc3\xe3e1\x9bwY\x8d\r\f\x19KF\r\x93!\xf0E\xac\xf44\xbf\xe4\xab\xe5\x1e\xdbK\xe5$HF\x18\'\xedo\x854\xc4..\xc1\xdf\xc1Q\x01I\xd0h#\xa3\x10z\f\xa1\xd7\xef\xf7\xd5\xb6o\xb4\xcb\xb8\xecQ\xe3+_B:[\x87\xa5\x8c\xe7\x8d\xfdF\xd4N\x9dv\r.\xa3\x18\xec\xcc.\xc5\xa7!\rcGQTC ;\xdc\xf6\xed\x9eN\x92K\x16\xd8$\xc8Q#\xf3K\x82\x16\xf9\xb5\xeb\xb4\xa1\f\xd0\xab^\xd1\xed4K\xf5g=\x89/\xe6a\xdf\xdf\x96%=\xc1\xef\xe3r3\xc2#\xd4<u\xcf\xf8\xd5\xe2{b\xca\x12e\xdf\xfay\x00\x02\xae\x97#\x93>\f\"\x9dH>\xa5,\xba\x00\x00\x00\x89\x98P\x0e\x0f\x82\xec6\x01qM?\x0e\xee\xc9\x12\x82&\"UPR\x94\xc22\x1d\tBN\xde\xa0r\xde;\x13\xfe\x19!\xab\xbdp\xcb^\xcc\xc2\"\xf9]\xe8V\xb2\xcb\xeeS\x057\xf3\xedg\"X\xff\x7f\x00\x00\x0f\xcdYG\xb1\x7f\xbb1$\xa5\xdb\x19\x9f:\x8a\x88\xf8=\x1e\x8a\xdd\xfa\n\x18I\x15^\xa3\xf7(\xf8\xff\xc0*x\xf3t\xfa@\x1e\x02Q\xf5\x06\xa6\x9f\x1c~hUh>\xf3:r\n\xcd\xf5:\xbd\xcc\xf4c\xea\x00\xe3\'\x01\xe2\x04\xe8B\xdc\x8c\xd5\xce8\t\xb6X\xc5\xddZkE_\'\xdfX\xff\x1d:\xba\xb0yW\xb6\x14\x9d\xb6\x1d-s\x85\xdf\xb7\x8e\x92\xb2h1L\x95\xa0\xf7\x85 \f*\xf8\x0f2m\xff\xb7\xd03\x9cq\x15\xa2\xee)i\x95@\xccm\xe3~\xf6\x18\xb5\xd4\xc3\xf2\xd9r\x9c\x90\x0fF\x14-\x9b\x18\x91J\xb2D\x99w\xa7\xa6\x16\xdb\x9bWl\x01\xec\'\xfc\x01\xb0\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
syz_open_procfs(r3, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x800)
r6 = getpid()
process_vm_readv(r6, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_GETVERSION(r5, 0x5b01, 0x0)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="420000df", @ANYRES16, @ANYBLOB="01000000000000000000090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000800090000000000"], 0x44}}, 0x0)

1.790725342s ago: executing program 3 (id=1635):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x7, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0xc0010)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000180)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418})
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r4, 0x7ac, &(0x7f0000000040)={0x0, 0xffffffffffffffc2, 0x5})
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x503000, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083871090890e0878f0e1ac6e7049b334c959b669a240d9b67f3988f7ef319520100ffe8d178708c523c921b1b5b31360d3b5d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x7c4}}, 0x1006)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000a0000000a0000000000000e01000000020000000900000000005f0061002e5f612e0000000000000000"], &(0x7f0000000140)=""/205, 0x3e, 0xcd, 0x1, 0x5, 0x10000, @value=r2}, 0x28)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000001c0), 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000001000)={0x0, "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"})
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newtaction={0x44, 0x2e, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0xf}, {0xc}}}]}]}, 0x44}}, 0x0)

1.790250173s ago: executing program 4 (id=1636):
bind$alg(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) (async, rerun: 32)
write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x18, 0x50}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}], {0x95, 0x0, 0x0, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x28)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30040000002c5d2d00030a0102000000000000000001000000090001"], 0xc0}}, 0x0) (rerun: 32)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) (async)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') (async)
bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0x2, 0x3}, 0xfffffffffffffd6b) (async)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
writev(r0, &(0x7f0000001380)=[{&(0x7f0000001300)="89e7ee2c78dad9b4b473fec988ca", 0xe}, {&(0x7f0000001200)="327ac0ed9b4b851103d8fe56d934d07440a4c49defb835d27f2caec85eced1213b9cc81254e89a8836", 0x29}], 0x2) (async)
syz_init_net_socket$ax25(0x3, 0x5, 0xce)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async)
pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000)

1.700372341s ago: executing program 3 (id=1637):
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, <r0=>0x0})
wait4(r0, &(0x7f0000000040), 0x80000000, &(0x7f0000000080))
move_pages(r0, 0x9, &(0x7f0000000140)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil], &(0x7f00000001c0)=[0x5, 0x8fb, 0x4, 0x7], &(0x7f0000000200)=[0x0, 0x0], 0x4) (async)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=<r1=>0x0)
wait4(r1, &(0x7f0000000280), 0x80000004, &(0x7f00000002c0)) (async)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
setns(r2, 0x20000000) (async)
umount2(&(0x7f00000003c0)='./file0\x00', 0xa) (async)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r2)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)={0x278, r3, 0xe00, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa5cf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffeffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x46}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x92, 0x3, "8eab5c67d7394775e550e8167fce30fc7e3ff0afc3720829e203e621f2c8d7d80e2150c33b56bca10e32e4ad6b7083b7248d9e3bc69234c29d2354d98ad0514a11d399d5c6c0315ee4e8903780549e1ecdb8b6e8eff407910ef629bcd8f7e115c5a8b7745dfca930ef5b066f19301b6110071277ab8781ef2fef9d487373351f9179547fd1ac36476e701721cfad"}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "36af28ba6e41d418314d2529944530bed8aa85151d580041"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcec}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "7a696f224db4fc49b34167acaf4ce1d4cec39116"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "a6e39d0d1ebc998f47b38100511cc3b9a23a400cabc77cc3b8a53c05"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc93d}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc14}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async)
getrusage(0x0, &(0x7f0000000780)) (async)
lremovexattr(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)=@random={'system.', 'TIPCv2\x00'}) (async)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000008c0)=0x12) (async)
r4 = open(&(0x7f0000000900)='./file0\x00', 0x500, 0x1a5) (async)
accept4$ax25(r2, &(0x7f0000000940)={{}, [@remote, @rose, @default, @default, @default, @null, @null, @default]}, &(0x7f00000009c0)=0x48, 0x180000) (async)
getrusage(0x1, &(0x7f0000000a00))
execve(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000d00)={[&(0x7f0000000b00)='gcm(aes)\x00', &(0x7f0000000b40)='/dev/sr0\x00', &(0x7f0000000b80)=',\x00', &(0x7f0000000bc0)='udp\x00', &(0x7f0000000c00)='/dev/sr0\x00', &(0x7f0000000c40)='udp\x00', &(0x7f0000000c80)='TIPCv2\x00', &(0x7f0000000cc0)='(\x00']}, &(0x7f0000000ec0)={[&(0x7f0000000d80)='\x00', &(0x7f0000000dc0)='+,]&[:\x00', &(0x7f0000000e00)='-\x00', &(0x7f0000000e40)='udp\x00', &(0x7f0000000e80)=',/-\x00']})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000f00)) (async)
unlink(&(0x7f0000000f40)='./file0\x00') (async)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000f80)={<r5=>0x0, 0xb, "c77bbb91211f3888ded8e8"}, &(0x7f0000000fc0)=0x13)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000001080)={r5, 0x64, &(0x7f0000001000)=[@in6={0xa, 0x4e24, 0x9, @local}, @in6={0xa, 0x4e20, 0x1, @mcast1, 0x7}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x7}]}, &(0x7f00000010c0)=0x10)
r6 = socket$unix(0x1, 0x2, 0x0) (async)
connect$pptp(r2, &(0x7f0000001100)={0x18, 0x2, {0x3, @local}}, 0x1e)
move_mount(r4, &(0x7f0000001140)='./file0\x00', r2, &(0x7f0000001180)='./file0\x00', 0x52) (async)
bind$isdn_base(r2, &(0x7f00000011c0)={0x22, 0xff, 0x0, 0x6d, 0x3}, 0x6) (async)
execve(&(0x7f0000001200)='./file0\x00', &(0x7f00000012c0)={[&(0x7f0000001240)=',\x00', &(0x7f0000001280)='udp\x00']}, &(0x7f0000001480)={[&(0x7f0000001300)='/%}}\x00', &(0x7f0000001340)='/dev/sr0\x00', &(0x7f0000001380)=',-}]}c!\x00', &(0x7f00000013c0)='-\x00', &(0x7f0000001400)='\x00', &(0x7f0000001440)='\'\x00']}) (async)
wait4(r0, &(0x7f00000014c0), 0x80000000, &(0x7f0000001500)) (async)
ptrace$peeksig(0x4209, r0, &(0x7f00000015c0)={0x1, 0x1, 0x4}, &(0x7f0000001600)=[{}, {}, {}, {}]) (async)
waitid$P_PIDFD(0x3, r2, &(0x7f0000001800), 0x1, &(0x7f0000001880))
vmsplice(r6, &(0x7f0000001ac0)=[{&(0x7f0000001940)="d0a00fb762fb4d86453668f98c943bfcf7c0cf775e506296a4bf67d8e9b0a7f0d801a125204583f7", 0x28}, {&(0x7f0000001980)="27a67a5caeb392eb87d359041ff4613ba39e7d7f9c4b409e2226b7f2781994d59e766d780f3ce907001b40eb43f505598c8cfe10fcafcca9ffd68ce17a574ea60da025fc85669c22dfb7050bdbe58a776c101c3ad6051ac911e88d1e4c6f3bd30cf4771b3f0c75c44c30992bfd4257cb838d808c", 0x74}, {&(0x7f0000001a00)="6b98ef79c72bcb9b6ff54031d77b3a0e4195b37b173ab7d4caf2c4733ef78c0331425d9160fd1be5d7185bd5280d03a5b3af72a63d2f0bbe421787d0f6e56929d60c092887fde36886fd8507e90f6baa06e83e59864e1ca0e5776d8658068b5eb1f4e98ffeae1d97996ceebc41f7dd88025ffe0f596d20fe28bd500f887e182bb6ba3909f66cd3a7fee96d65abac5c7da54ba70ec256e0d4018e49c07708b85ef2001c2e", 0xa4}], 0x3, 0x8)

1.623905478s ago: executing program 4 (id=1638):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f00000001c0))
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x11c}], 0x1}, 0x0)

1.622259208s ago: executing program 3 (id=1639):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43000000f45400000015"], 0x14}}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000480)={0x8, 0x0, r5})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r7, &(0x7f00000018c0)={0x2020}, 0x2020) (async)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES16=r7], 0x20dc}}, 0x10) (async)
r8 = io_uring_setup(0x346e, &(0x7f0000000000)={0x0, 0xa8b8, 0x400, 0x2, 0x278})
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r8, 0x1e, &(0x7f00000000c0), 0x1) (async)
r9 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000040)=0x1, 0x12) (async)
r10 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r10, 0x0) (async)
r11 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r11, 0x402, 0x5) (async)
landlock_restrict_self(r10, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) (async, rerun: 32)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=<r12=>0x0) (rerun: 32)
ioctl$TIOCSPGRP(r9, 0x5410, &(0x7f0000000080)=r12) (async, rerun: 32)
r13 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) (async, rerun: 32)
r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0)
sendfile(r13, r14, 0x0, 0x106f)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000047c0000040000000c0001800600060008"], 0x528}}, 0xc000)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa})

1.621963003s ago: executing program 3 (id=1640):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000d, 0x30, r1, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x202, 0x0)
setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@int=0x6, 0x4)
bpf$LINK_DETACH(0x22, 0x0, 0x0)

1.585062518s ago: executing program 4 (id=1641):
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0)
fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f00000000c0)={0x0, "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"})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800b00070066696c746572"], 0xc4}}, 0x0)
ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000300)=0x9)
sendmmsg$inet6(r2, &(0x7f00000000c0), 0x0, 0x44010)
r5 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r5, 0x110, 0x3)

1.460363407s ago: executing program 4 (id=1642):
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/204) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x20, r2, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x15)
writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_int(r4, 0x29, 0x49, &(0x7f0000001840)=0x8, 0x4)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) (async)
r6 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000180)={0x4000, r5}, 0x0) (async)
landlock_restrict_self(r6, 0x0) (async)
truncate(&(0x7f0000000280)='./file1\x00', 0x1) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
sendmsg$NL80211_CMD_DEL_MPATH(r7, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x2c, r8, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xe6df322a3679f391}, 0x20040000) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="400100001a001307000000000000000000000000000000000000000000000001e00000020000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000032000000000000000000000000000000000000000000000000000000fcffffffffffffff007c97000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000a000100000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0006000000"], 0x140}}, 0x0) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) (async)
sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000480)={'team0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x800, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x3, 0xffe0}, {0xa, 0x2}, {0x6, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4006040}, 0x0) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x43, 0x9, 0xffffffff, 0x25dfdbfd, {0x1}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x44850) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0xa4, 0x0, 0x200, 0xf0bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x74, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0xde9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="e4e12f7a797d"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x401}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x41}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x151}, 0x10)

590.902372ms ago: executing program 5 (id=1643):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x41, 0x103603)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000480)=[{0xa0, 0x9, 0x0, 0xfffff020}, {0x6, 0x80, 0x5, 0x8000}]}, 0x10)

92.934207ms ago: executing program 3 (id=1644):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@getpolicy={0x5c, 0x15, 0x1, 0x70bd28, 0x25dfdbfc, {{@in6=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23, 0x0, 0x4e21, 0x9, 0xa, 0x20, 0xa0, 0x6c}, 0x6e6bb5, 0x1}, [@policy_type={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r1) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0), 0x644b7c962908be6f, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8004005}, 0x4800) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) (async)
recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) (async)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)

968.006µs ago: executing program 3 (id=1645):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xb) (async)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xfffffff7, 0x0, 0xf2, 0x80000000}, 0x10) (async)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a008000000000000000000008000200ffffffff080001"], 0x2c}}, 0x0) (async)
r2 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x118}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) (async)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f00000002c0)={@default, @default, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]})
io_uring_enter(r2, 0x1e76, 0x0, 0x0, 0x0, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000004780)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_link_settings={0x8}}) (async)
r8 = socket$inet6(0xa, 0x1, 0x84)
setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
sendto$inet6(r8, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
getsockopt$bt_hci(r8, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000540001d660843b8995bc250807000000c9e4cc8800f449962d2a0e2c208409419f66eee79d14136abbed5d4f3e11e6b0781429892e046437dc683bf041e5e0a43ebcec306bf7c9e3de65600db91bd6fada21fe1ce7b041", @ANYRES32=r9], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x40080) (async)
socket(0x23, 0x2, 0xffffe9ab)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r1}, 0x18) (async)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd6, 0xd6, 0x3, [@volatile={0x4, 0x0, 0x0, 0x9, 0x2}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x3a, 0x0, 0x33, 0x4}, @ptr={0x3, 0x0, 0x0, 0x2, 0x2}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xc}, {0xc}, {0x5, 0x5}, {0x3, 0x5}, {0x7, 0x5}]}, @datasec={0xb, 0x9, 0x0, 0xf, 0x2, [{0x1, 0x7, 0x5}, {0x4, 0x7fffffff, 0x6}, {0x2, 0x200, 0x6}, {0x2, 0x1000, 0x1ff}, {0x2, 0x583bf0c7, 0x5}, {0x1, 0x4, 0x7fffffff}, {0x3, 0x8000, 0x7}, {0x2, 0x3, 0xab73}, {0x4, 0x0, 0x8001}], "a1a2"}]}, {0x0, [0x0]}}, &(0x7f0000000580)=""/218, 0xf3, 0xda, 0x1, 0x5, 0x0, @void, @value}, 0x28)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r12, 0x20, &(0x7f0000000100)={0x0, 0x0, <r13=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r13, 0x4) (async)
r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x27, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x2, 0x3, 0x4, 0x4, 0xb, 0xfffffffffffffff4, 0x10}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x80}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x6, &(0x7f0000000780)=""/6, 0x41100, 0x0, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0xd, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000009c0)=[0xffffffffffffffff], &(0x7f0000000a00)=[{0x1, 0x1, 0x10, 0xa}, {0x4, 0x3, 0xdc, 0xc}, {0x3, 0x5, 0x10, 0x8}, {0x2, 0x3, 0x1, 0xd30251fcc6f3adda}, {0x0, 0x4, 0x4, 0x8}, {0x0, 0x1, 0x8, 0x8}, {0x4, 0x1, 0xd, 0x1}], 0x10, 0x8, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1e, 0x18, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@generic={0xd8, 0x3, 0x3, 0x0, 0xffff2f1b}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}, @jmp={0x5, 0x1, 0x4, 0x7, 0x5, 0xc}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x9, 0x8, &(0x7f0000000440)=""/8, 0x41100, 0x39, '\x00', r9, @sk_lookup=0x77194044642dbf3e, r11, 0x8, &(0x7f00000006c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0xa, 0x10000, 0xf}, 0x10, r13, r14, 0x1, 0x0, &(0x7f0000000b40)=[{0x4, 0x4, 0x8, 0xa}], 0x10, 0x10001, @void, @value}, 0x94)
socket(0x15, 0x4, 0x8)

0s ago: executing program 4 (id=1646):
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x8, @vbi={0x9f9, 0x100, 0xc, 0x5abb37001e896ccd, [0x7, 0x4], [0xe8d4, 0x8], 0x13a}})
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x15}]}}]}, 0x3c}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x2, 0x2}], "a77818"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "c9"}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x44, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000004c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x4, @remote, 0x23}, {0xa, 0x1, 0x0, @private1, 0x4000}, 0xffffffffffffffff, 0xfffffffd}}, 0x48)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x11)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x1, 0x7f, 0x1f, 0x0, 0x83})
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x0)
openat$cgroup_procs(r8, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
r9 = syz_clone(0x10000, &(0x7f00000002c0)="e04ca07c1d6b975a55adffd4ede95936c6b82e240f9471f6", 0x18, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="ecfe0113b34fd69b2083dda8435c2dbc6d893b40ce9894138adfee942cc5a67ea2ac4e1c620c98d443fd0c4582d4442c7ff8f86acaa3a2968576ac9929f4fccc7fdcb4df816ed2094c6bb077e8bf9698e546109e816aeac6bfcb313261ebf0dc2f869b87528826f13deaeec9e72f833b18")
ioctl$BINDER_GET_FROZEN_INFO(r8, 0xc00c620f, &(0x7f0000000440)={r9})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c90010000c00050000"], 0x15)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_emit_ethernet(0x9e, &(0x7f0000000580)={@broadcast, @broadcast, @void, {@llc={0x4, {@llc={0x2, 0xf9, "10", "18be5049f8e3975768e53467444eae3142e6179c91fad69495d2ee69f6433176620aeec1b6859220c8d2233b66ac95a7d0d92325017266177bf62dd40c8ec69cb510c84330b5229082fc277c668b7a352ed787503e520c4666ea434be3a4a22bd64fdc93a53baf952661021a6e50d53847022d744c7a19235599c66c2fb182b0ad95d0c76421625547f86c6611"}}}}}, &(0x7f0000000480)={0x0, 0x1, [0x299, 0xdb8, 0x61c, 0xbdb]})
syz_open_dev$dri(&(0x7f0000000280), 0x7f, 0x210000)

kernel console output (not intermixed with test programs):

ci2: unexpected cc 0x0c23 length: 249 > 4
[  141.220524][ T5955] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  141.228568][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  141.304372][ T5945] Bluetooth: hci3: command 0x0405 tx timeout
[  141.316887][T10122] chnl_net:caif_netlink_parms(): no params data found
[  141.321949][T10144] SET target dimension over the limit!
[  141.376274][T10122] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.379216][T10122] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.381238][T10122] bridge_slave_0: entered allmulticast mode
[  141.387893][T10122] bridge_slave_0: entered promiscuous mode
[  141.390577][T10122] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.392610][T10122] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.397191][T10122] bridge_slave_1: entered allmulticast mode
[  141.399309][T10122] bridge_slave_1: entered promiscuous mode
[  141.426758][T10122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.435343][T10122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.463539][T10122] team0: Port device team_slave_0 added
[  141.468169][T10122] team0: Port device team_slave_1 added
[  141.487033][T10156] Falling back ldisc for ttyS3.
[  141.493160][T10122] batman_adv: batadv0: Adding interface: batadv_slave_0
[  141.495530][T10122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.503252][T10122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.507551][T10122] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.509453][T10122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.519012][T10122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  141.540320][T10122] hsr_slave_0: entered promiscuous mode
[  141.542203][T10122] hsr_slave_1: entered promiscuous mode
[  141.544013][T10122] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  141.546416][T10122] Cannot create hsr debugfs directory
[  141.612646][T10165] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  141.615209][T10165] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  141.617621][T10165] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  141.620047][T10165] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  141.622532][T10165] vxlan0: entered promiscuous mode
[  141.623995][T10165] vxlan0: entered allmulticast mode
[  141.627078][T10165] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.629554][T10165] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.632042][T10165] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.634552][T10165] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.958928][ T9619] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.026097][ T9619] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.085392][ T9619] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.160340][ T9619] bridge_slave_1: left allmulticast mode
[  142.162037][ T9619] bridge_slave_1: left promiscuous mode
[  142.163675][ T9619] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.166869][ T9619] bridge_slave_0: left allmulticast mode
[  142.168475][ T9619] bridge_slave_0: left promiscuous mode
[  142.170087][ T9619] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.417222][ T9619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.421363][ T9619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.424789][ T9619] bond0 (unregistering): Released all slaves
[  142.459904][T10181] overlayfs: failed to get inode (-116)
[  142.461645][T10181] overlayfs: failed to get inode (-116)
[  142.508002][T10191] i2c i2c-1: Invalid block write size 34
[  142.564772][T10199] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  142.566816][T10199] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  142.583794][T10201] vxfs: WRONG superblock magic 00000000 at 1
[  142.586484][T10201] vxfs: WRONG superblock magic 00000000 at 8
[  142.588178][T10201] vxfs: can't find superblock.
[  142.591704][T10201] sctp: [Deprecated]: syz.4.1109 (pid 10201) Use of int in maxseg socket option.
[  142.591704][T10201] Use struct sctp_assoc_value instead
[  142.651561][T10215] overlayfs: invalid origin (0000)
[  142.661760][T10215] validate_nla: 1 callbacks suppressed
[  142.661770][T10215] netlink: 'syz.5.1116': attribute type 29 has an invalid length.
[  142.679951][T10215] netlink: 'syz.5.1116': attribute type 29 has an invalid length.
[  142.766493][ T9619] hsr_slave_0: left promiscuous mode
[  142.769383][ T9619] hsr_slave_1: left promiscuous mode
[  142.771284][ T9619] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.773366][ T9619] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.778502][ T9619] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.780642][ T9619] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.818757][ T9619] veth1_macvtap: left promiscuous mode
[  142.820397][ T9619] veth0_macvtap: left promiscuous mode
[  142.822082][ T9619] veth1_vlan: left promiscuous mode
[  142.823581][ T9619] veth0_vlan: left promiscuous mode
[  143.317260][ T5308] Bluetooth: hci2: command tx timeout
[  143.387342][T10250] __nla_validate_parse: 4 callbacks suppressed
[  143.387351][T10250] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1121'.
[  143.499247][ T9619] team0 (unregistering): Port device team_slave_1 removed
[  143.571238][ T9619] team0 (unregistering): Port device team_slave_0 removed
[  144.061943][   T40] kauditd_printk_skb: 10 callbacks suppressed
[  144.061958][   T40] audit: type=1400 audit(2000002618.824:49712): avc:  denied  { ioctl } for  pid=10258 comm="syz.3.1124" path="socket:[40215]" dev="sockfs" ino=40215 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  144.120426][T10122] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  144.125044][T10122] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  144.131180][T10122] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  144.137738][T10122] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  144.155094][   T40] audit: type=1400 audit(2000002618.914:49713): avc:  denied  { create } for  pid=10262 comm="syz.5.1126" name="pids.current" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  144.169096][T10268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1128'.
[  144.172187][T10268] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  144.175024][T10122] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.176035][T10270] netlink: 'syz.3.1129': attribute type 11 has an invalid length.
[  144.180511][T10122] 8021q: adding VLAN 0 to HW filter on device team0
[  144.186383][ T9618] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.188730][ T9618] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.191363][ T9618] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.193329][ T9618] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.217292][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1131'.
[  144.281707][T10296] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1135'.
[  144.290391][T10122] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.295930][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1136'.
[  144.306989][T10122] veth0_vlan: entered promiscuous mode
[  144.312302][T10122] veth1_vlan: entered promiscuous mode
[  144.322091][T10122] veth0_macvtap: entered promiscuous mode
[  144.322772][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1136'.
[  144.326561][T10122] veth1_macvtap: entered promiscuous mode
[  144.341346][T10297] loop5: detected capacity change from 0 to 7079
[  144.343865][T10297] loop5: detected capacity change from 7079 to 7367
[  144.348543][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.351431][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.354678][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.357746][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.361051][T10122] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.364692][ T8040] buffer_io_error: 103 callbacks suppressed
[  144.364702][ T8040] Buffer I/O error on dev loop5, logical block 920, async page read
[  144.365545][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  144.371786][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.374743][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  144.375131][   T40] audit: type=1400 audit(2000002619.144:49714): avc:  denied  { bind } for  pid=10304 comm="syz.5.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  144.377476][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.386477][T10122] batman_adv: batadv0: Interface activated: batadv_slave_1
[  144.390358][T10122] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.392796][T10122] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.396011][T10122] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.398446][T10122] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.417986][ T8040] Buffer I/O error on dev loop5, logical block 920, async page read
[  144.443834][ T9627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.445065][ T9628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.446304][ T9627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.450721][ T9628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.546037][T10319] ksmbd: Unknown IPC event: 1, ignore.
[  144.615009][T10326] xt_connbytes: Forcing CT accounting to be enabled
[  144.615234][T10326] Cannot find add_set index 0 as target
[  144.646133][T10326] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1144'.
[  144.673286][T10331] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  144.767745][   T40] audit: type=1400 audit(2000002619.534:49715): avc:  denied  { mount } for  pid=10337 comm="syz.4.1147" name="/" dev="configfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  144.768094][   T40] audit: type=1400 audit(2000002619.534:49716): avc:  denied  { mounton } for  pid=10337 comm="syz.4.1147" path="/187/file0" dev="configfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  144.786532][   T40] audit: type=1400 audit(2000002619.554:49717): avc:  denied  { unmount } for  pid=8002 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  144.828890][   T40] audit: type=1800 audit(2000002619.594:49718): pid=10343 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1149" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  144.850084][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1150'.
[  144.850104][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1150'.
[  144.856766][T10346] openvswitch: netlink: Actions may not be safe on all matching packets
[  145.271737][   T40] audit: type=1400 audit(2000002620.034:49719): avc:  denied  { accept } for  pid=10350 comm="syz.3.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  145.402875][T10354] could not allocate digest TFM handle crct10dif-arm64-ce
[  145.418121][   T40] audit: type=1400 audit(2000002620.184:49720): avc:  denied  { connect } for  pid=10360 comm="syz.5.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  145.579432][T10373] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1158'.
[  145.600635][   T40] audit: type=1400 audit(2000002620.364:49721): avc:  denied  { listen } for  pid=10370 comm="syz.5.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  145.616492][T10371] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  145.625969][T10371] kvm: pic: level sensitive irq not supported
[  145.626511][T10371] kvm: pic: non byte read
[  145.631071][T10371] kvm: pic: level sensitive irq not supported
[  145.631332][T10371] kvm: pic: non byte read
[  145.637046][T10371] kvm: pic: level sensitive irq not supported
[  145.637292][T10371] kvm: pic: non byte read
[  145.639699][T10381] overlayfs: missing 'workdir'
[  145.798905][T10392] netlink: 'syz.5.1163': attribute type 1 has an invalid length.
[  146.000773][T10433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=10433 comm=syz.3.1177
[  146.301292][T10426] macvlan1: entered promiscuous mode
[  146.302871][T10426] macvlan1: entered allmulticast mode
[  146.438098][T10445] netlink: 'syz.5.1181': attribute type 4 has an invalid length.
[  146.471588][T10448] syz.5.1182: attempt to access beyond end of device
[  146.471588][T10448] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0
[  146.477310][T10448] befs: (nbd5): unable to read superblock
[  146.719453][ T9619] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.581007][T10465] tmpfs: Unknown parameter 'grpquota_inode_hit'
[  147.583332][T10468] tmpfs: Unknown parameter 'grpquota_inode_hit'
[  147.699431][ T5945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  147.704159][ T5945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  147.708389][ T5945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  147.711606][ T5945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  147.715035][ T5945] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  147.718078][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  147.743147][ T9617] Bluetooth: Error in BCSP hdr checksum
[  147.791453][T10481] chnl_net:caif_netlink_parms(): no params data found
[  147.869519][T10481] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.871865][T10481] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.873989][T10481] bridge_slave_0: entered allmulticast mode
[  147.877801][T10481] bridge_slave_0: entered promiscuous mode
[  147.880810][T10481] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.883195][T10481] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.885800][T10481] bridge_slave_1: entered allmulticast mode
[  147.888436][T10481] bridge_slave_1: entered promiscuous mode
[  147.928208][T10481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.933642][T10481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.966525][T10481] team0: Port device team_slave_0 added
[  147.971566][T10481] team0: Port device team_slave_1 added
[  147.980801][T10504] netlink: 'syz.5.1198': attribute type 10 has an invalid length.
[  147.989897][T10504] 8021q: adding VLAN 0 to HW filter on device team0
[  147.992930][T10504] bond0: (slave team0): Enslaving as an active interface with an up link
[  148.005544][T10481] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.007501][T10481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.015258][T10481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.018818][T10481] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.020736][T10481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.027872][T10481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.041600][T10512] netlink: 'syz.5.1201': attribute type 10 has an invalid length.
[  148.048495][T10512] hsr0: entered promiscuous mode
[  148.051403][T10512] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  148.054498][T10512] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  148.057920][T10512] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  148.061253][T10481] hsr_slave_0: entered promiscuous mode
[  148.063619][T10481] hsr_slave_1: entered promiscuous mode
[  148.241383][T10539] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96
[  148.588347][ T9619] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.595897][ T5308] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  148.598517][ T5308] Bluetooth: hci0: Injecting HCI hardware error event
[  148.601722][ T5308] Bluetooth: hci0: hardware error 0x00
[  148.664599][ T9619] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.698621][ T5829] usb 10-1: new low-speed USB device number 7 using dummy_hcd
[  148.754990][ T9619] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.845824][ T5829] usb 10-1: No LPM exit latency info found, disabling LPM.
[  148.849104][ T5829] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8
[  148.852489][ T5829] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  148.873505][ T9619] bridge_slave_1: left allmulticast mode
[  148.875922][ T9619] bridge_slave_1: left promiscuous mode
[  148.878439][ T9619] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.885015][ T9619] bridge_slave_0: left allmulticast mode
[  148.887290][ T9619] bridge_slave_0: left promiscuous mode
[  148.889251][ T9619] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.294018][ T9619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  149.298874][ T9619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  149.303623][ T9619] bond0 (unregistering): Released all slaves
[  149.464821][   T40] kauditd_printk_skb: 9 callbacks suppressed
[  149.464832][   T40] audit: type=1400 audit(2000002624.234:49731): avc:  denied  { getopt } for  pid=10587 comm="syz.3.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  149.512440][T10592] sctp: [Deprecated]: syz.3.1228 (pid 10592) Use of int in max_burst socket option.
[  149.512440][T10592] Use struct sctp_assoc_value instead
[  149.554602][T10599] bridge0: port 3(syz_tun) entered blocking state
[  149.557157][T10599] bridge0: port 3(syz_tun) entered disabled state
[  149.559872][T10599] syz_tun: entered allmulticast mode
[  149.562623][T10599] syz_tun: entered promiscuous mode
[  149.565078][T10599] bridge0: port 3(syz_tun) entered blocking state
[  149.567467][T10599] bridge0: port 3(syz_tun) entered forwarding state
[  149.617966][ T9619] hsr_slave_0: left promiscuous mode
[  149.624293][ T9619] hsr_slave_1: left promiscuous mode
[  149.627400][ T9619] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.630006][ T9619] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.635748][ T9619] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.638511][ T9619] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.660967][ T9619] veth1_macvtap: left promiscuous mode
[  149.662684][ T9619] veth0_macvtap: left promiscuous mode
[  149.664508][ T9619] veth1_vlan: left promiscuous mode
[  149.666006][ T9619] veth0_vlan: left promiscuous mode
[  149.785767][ T5945] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  149.785793][ T5955] Bluetooth: hci2: command tx timeout
[  149.859259][T10609] netlink: 'syz.4.1233': attribute type 2 has an invalid length.
[  149.861366][T10609] netlink: 'syz.4.1233': attribute type 1 has an invalid length.
[  149.891527][T10610] [U] 
[  150.237542][ T9619] team0 (unregistering): Port device team_slave_1 removed
[  150.316105][ T9619] team0 (unregistering): Port device team_slave_0 removed
[  150.676128][ T5308] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  150.920239][   T40] audit: type=1400 audit(2000002625.684:49732): avc:  denied  { module_load } for  pid=10624 comm="syz.3.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  150.920286][T10626] Invalid ELF header type: 0 != 1
[  150.960333][T10481] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  150.966215][T10481] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  150.969660][T10481] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  150.973189][T10481] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  150.994263][T10632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  150.996606][T10632] IPv6: NLM_F_CREATE should be set when creating new route
[  150.999321][T10632] lo: entered allmulticast mode
[  151.002012][T10632] tunl0: entered allmulticast mode
[  151.005351][T10632] gre0: entered allmulticast mode
[  151.008979][T10632] gretap0: entered allmulticast mode
[  151.011907][T10632] erspan0: entered allmulticast mode
[  151.014769][T10632] ip_vti0: entered allmulticast mode
[  151.017216][T10632] ip6_vti0: entered allmulticast mode
[  151.019721][T10632] sit0: entered allmulticast mode
[  151.022513][T10632] ip6tnl0: entered allmulticast mode
[  151.025205][T10632] ip6gre0: entered allmulticast mode
[  151.030214][T10632] bridge0: port 3(syz_tun) entered disabled state
[  151.032210][T10632] ip6gretap0: entered allmulticast mode
[  151.033852][T10632] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.035906][T10632] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.039613][T10632] bridge0: entered allmulticast mode
[  151.045608][T10632] bond0: entered allmulticast mode
[  151.047117][T10632] bond_slave_0: entered allmulticast mode
[  151.048692][T10632] bond_slave_1: entered allmulticast mode
[  151.050590][T10632] mac80211_hwsim hwsim9 
: entered allmulticast mode
[  151.059879][T10632] team0: entered allmulticast mode
[  151.061787][T10632] team_slave_0: entered allmulticast mode
[  151.063417][T10632] team_slave_1: entered allmulticast mode
[  151.067710][T10632] dummy0: entered allmulticast mode
[  151.070472][T10632] nlmon0: entered allmulticast mode
[  151.072692][T10632] caif0: entered allmulticast mode
[  151.074532][T10632] batadv0: entered allmulticast mode
[  151.077138][T10632] vxcan0: entered allmulticast mode
[  151.079129][T10632] vxcan1: entered allmulticast mode
[  151.081702][T10632] veth0: entered allmulticast mode
[  151.084917][T10632] veth1: entered allmulticast mode
[  151.088154][T10632] wg0: entered allmulticast mode
[  151.090737][T10632] wg1: entered allmulticast mode
[  151.093049][T10632] wg2: entered allmulticast mode
[  151.095924][T10632] veth0_to_bridge: entered allmulticast mode
[  151.101859][T10632] veth1_to_bridge: entered allmulticast mode
[  151.106909][T10632] veth0_to_bond: entered allmulticast mode
[  151.110625][T10632] veth1_to_bond: entered allmulticast mode
[  151.115400][T10632] veth0_to_team: entered allmulticast mode
[  151.119409][T10632] veth1_to_team: entered allmulticast mode
[  151.123370][T10632] veth0_to_batadv: entered allmulticast mode
[  151.125987][T10632] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.128872][T10632] batadv_slave_0: entered allmulticast mode
[  151.132160][T10632] veth1_to_batadv: entered allmulticast mode
[  151.134733][T10632] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.137582][T10632] batadv_slave_1: entered allmulticast mode
[  151.140223][T10632] xfrm0: entered allmulticast mode
[  151.143162][T10632] veth0_to_hsr: entered allmulticast mode
[  151.145942][T10632] hsr_slave_0: entered allmulticast mode
[  151.148862][T10632] veth1_to_hsr: entered allmulticast mode
[  151.151664][T10632] hsr_slave_1: entered allmulticast mode
[  151.154108][T10632] hsr0: entered allmulticast mode
[  151.158489][T10632] veth1_vlan: entered allmulticast mode
[  151.161061][T10632] veth0_vlan: entered allmulticast mode
[  151.164770][T10632] vlan0: entered allmulticast mode
[  151.166342][T10632] vlan1: entered allmulticast mode
[  151.169996][T10632] macvlan0: entered allmulticast mode
[  151.172783][T10632] macvlan1: entered allmulticast mode
[  151.175365][T10632] ipvlan0: entered allmulticast mode
[  151.176956][T10632] ipvlan1: entered allmulticast mode
[  151.179886][T10632] veth1_macvtap: entered allmulticast mode
[  151.183181][T10632] veth0_macvtap: entered allmulticast mode
[  151.187274][T10632] macvtap0: entered allmulticast mode
[  151.191737][T10632] macsec0: entered allmulticast mode
[  151.196753][T10632] geneve0: entered allmulticast mode
[  151.199436][T10632] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.201915][T10632] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.204598][T10632] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.207068][T10632] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.209658][T10632] geneve1: entered allmulticast mode
[  151.211983][T10632] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  151.215048][T10632] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[  151.218205][T10632] netdevsim netdevsim3 netdevsim2: entered allmulticast mode
[  151.221320][T10632] netdevsim netdevsim3 netdevsim3: entered allmulticast mode
[  151.227940][T10632] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  151.233257][T10632] geneve2: entered allmulticast mode
[  151.235163][T10632] bond1: entered allmulticast mode
[  151.236638][T10632] gretap1: entered allmulticast mode
[  151.240824][T10632] bond2: entered allmulticast mode
[  151.242653][T10632] veth2: entered allmulticast mode
[  151.246006][T10632] veth3: left promiscuous mode
[  151.247420][T10632] veth3: entered allmulticast mode
[  151.249200][T10632] bridge1: entered allmulticast mode
[  151.251051][T10632] ip6gre1: entered allmulticast mode
[  151.259255][T10632] bond3: entered allmulticast mode
[  151.261708][T10632] bond4: entered allmulticast mode
[  151.263466][T10632] bond5: entered allmulticast mode
[  151.266862][ T5829] usb 10-1: New USB device found, idVendor=1477, idProduct=1026, bcdDevice= 0.40
[  151.269303][ T5829] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.272904][T10632] bond6: entered allmulticast mode
[  151.273221][ T5829] usb 10-1: Product: ᐄ
[  151.274786][T10632] veth4: entered allmulticast mode
[  151.275667][ T5829] usb 10-1: Manufacturer: ꨡⓔ݃鉓ﯪ汕ᬤꁣ䳺狃礙᷂﷾互撧얥㍲䬷몃ᔾ䜔廕啦ႈ灚℣睲ꤩҽ䞅ꁞ綪澇廈革ﹶ졬㼸䧧
[  151.277159][T10632] veth5: entered allmulticast mode
[  151.283116][T10632] bond7: entered allmulticast mode
[  151.301434][ T5829] usb 10-1: can't set config #1, error -71
[  151.308091][ T5829] usb 10-1: USB disconnect, device number 7
[  151.311817][T10481] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.328852][T10481] 8021q: adding VLAN 0 to HW filter on device team0
[  151.335017][ T9627] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.336999][ T9627] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.350037][ T9627] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.352132][ T9627] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.437892][T10481] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.438196][T10649] netlink: 'syz.3.1243': attribute type 2 has an invalid length.
[  151.454366][T10481] veth0_vlan: entered promiscuous mode
[  151.454396][T10658] __nla_validate_parse: 8 callbacks suppressed
[  151.454406][T10658] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1244'.
[  151.458589][T10481] veth1_vlan: entered promiscuous mode
[  151.471461][T10481] veth0_macvtap: entered promiscuous mode
[  151.476116][T10481] veth1_macvtap: entered promiscuous mode
[  151.481947][T10481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.486725][T10481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.491134][T10481] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.500836][T10481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.503907][T10481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.509045][T10481] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.515196][T10481] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.517739][T10481] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.520371][T10481] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.524961][T10481] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.527349][T10665] netlink: 'syz.4.1247': attribute type 10 has an invalid length.
[  151.529678][T10665] bridge0: port 3(syz_tun) entered disabled state
[  151.534783][T10665] bridge0: port 3(syz_tun) entered blocking state
[  151.536672][T10665] bridge0: port 3(syz_tun) entered forwarding state
[  151.540244][T10665] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  151.589850][ T9628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.592254][ T9628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.602131][ T9627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.605679][ T9627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.622382][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1250'.
[  151.627417][T10675] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048)
[  151.698499][T10685] netlink: 'syz.5.1255': attribute type 11 has an invalid length.
[  151.788512][T10700] cgroup: Unknown subsys name 'cpuset'
[  151.833449][T10704] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.838936][   T40] audit: type=1400 audit(2000002626.604:49733): avc:  denied  { read } for  pid=10701 comm="syz.5.1261" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  152.057722][T10721] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  152.062436][T10721] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  152.171368][T10731] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1268'.
[  152.173877][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1268'.
[  152.177754][T10731] SELinux:  policydb magic number 0xd97d088c does not match expected magic number 0xf97cff8c
[  152.181068][T10731] SELinux: failed to load policy
[  152.235707][T10704] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  152.238302][T10704] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  152.246129][T10704] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  152.248965][T10704] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  152.251269][T10704] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  152.254860][T10704] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  152.333619][T10734] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.338838][T10734] syz.4.1270: attempt to access beyond end of device
[  152.338838][T10734] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0
[  152.342834][T10734] exFAT-fs (nbd4): unable to read boot sector
[  152.346393][T10734] exFAT-fs (nbd4): failed to read boot sector
[  152.348142][T10734] exFAT-fs (nbd4): failed to recognize exfat type
[  152.437490][T10741] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1271'.
[  152.624271][   T40] audit: type=1400 audit(2000002627.384:49734): avc:  denied  { connect } for  pid=10749 comm="syz.4.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  152.662972][   T40] audit: type=1400 audit(2000002627.424:49735): avc:  denied  { read } for  pid=10749 comm="syz.4.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  152.682107][T10756] overlayfs: conflicting options: userxattr,redirect_dir=on
[  152.686567][T10756] ip6gretap0: entered promiscuous mode
[  152.690349][ T9617] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  152.734938][T10761] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  152.737224][T10761] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  152.741209][   T40] audit: type=1400 audit(2000002627.504:49736): avc:  denied  { setopt } for  pid=10760 comm="syz.3.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  152.935284][ T5955] block nbd5: Receive control failed (result -32)
[  152.935723][ T5308] block nbd5: Receive control failed (result -32)
[  152.950277][T10772] overlayfs: failed to clone upperpath
[  152.974914][T10763] block nbd5: shutting down sockets
[  153.134355][  T833] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  153.294316][  T833] usb 10-1: Using ep0 maxpacket: 8
[  153.297527][  T833] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  153.303134][  T833] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  153.307192][  T833] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  153.310092][  T833] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  153.312910][  T833] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  153.317028][  T833] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  153.320032][  T833] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.530815][  T833] usb 10-1: usb_control_msg returned -32
[  153.532598][  T833] usbtmc 10-1:16.0: can't read capabilities
[  153.569806][T10779] netlink: 696 bytes leftover after parsing attributes in process `syz.4.1284'.
[  153.586090][ T9628] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.592409][T10780] team0: No ports can be present during mode change
[  153.944508][ T5308] Bluetooth: hci1: command 0x0c1a tx timeout
[  154.264637][ T5308] Bluetooth: hci3: command 0x0405 tx timeout
[  154.618840][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  154.622608][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  154.625426][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  154.628542][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  154.631740][ T5955] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  154.634086][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  154.664673][   T40] audit: type=1326 audit(2000002629.434:49737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10790 comm="syz.4.1287" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda6af8d169 code=0x0
[  154.726359][T10788] chnl_net:caif_netlink_parms(): no params data found
[  154.769911][T10788] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.772062][T10788] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.774389][T10788] bridge_slave_0: entered allmulticast mode
[  154.777583][T10788] bridge_slave_0: entered promiscuous mode
[  154.780169][T10788] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.782157][T10788] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.784518][T10788] bridge_slave_1: entered allmulticast mode
[  154.787488][T10788] bridge_slave_1: entered promiscuous mode
[  154.807520][T10788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.811385][T10788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.837577][T10788] team0: Port device team_slave_0 added
[  154.841594][T10788] team0: Port device team_slave_1 added
[  154.869330][T10788] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.873059][T10788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.881803][T10788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.891830][T10788] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.895361][T10788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.906073][T10788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.942625][T10788] hsr_slave_0: entered promiscuous mode
[  154.946539][T10788] hsr_slave_1: entered promiscuous mode
[  154.948993][T10788] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  154.951855][T10788] Cannot create hsr debugfs directory
[  155.308105][ T9628] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.399850][ T9628] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.430275][T10805] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1289'.
[  155.508826][ T9628] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.606963][ T9628] bridge_slave_1: left allmulticast mode
[  155.609089][ T9628] bridge_slave_1: left promiscuous mode
[  155.611177][ T9628] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.615390][ T9628] bridge_slave_0: left allmulticast mode
[  155.617396][ T9628] bridge_slave_0: left promiscuous mode
[  155.619454][ T9628] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.755115][ T6009] usb 10-1: USB disconnect, device number 8
[  155.830433][ T5829] kernel read not supported for file /zero (pid: 5829 comm: kworker/1:3)
[  155.885125][ T9628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.889785][ T9628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.893299][ T9628] bond0 (unregistering): Released all slaves
[  155.930784][T10822] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1294'.
[  155.972858][T10826] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1295'.
[  155.989461][T10826] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  155.992524][T10826] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  155.997671][   T40] audit: type=1400 audit(2000002630.764:49738): avc:  denied  { create } for  pid=10824 comm="syz.5.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  156.024329][ T5308] Bluetooth: hci1: command 0x0c1a tx timeout
[  156.081047][   T40] audit: type=1400 audit(2000002630.844:49739): avc:  denied  { ioctl } for  pid=10824 comm="syz.5.1295" path="socket:[44248]" dev="sockfs" ino=44248 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  156.228471][ T9628] hsr_slave_0: left promiscuous mode
[  156.235517][ T9628] hsr_slave_1: left promiscuous mode
[  156.238023][ T9628] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.240763][ T9628] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.244917][ T9628] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.247790][ T9628] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.257672][T10843] netlink: 'syz.5.1296': attribute type 1 has an invalid length.
[  156.289545][ T9628] veth1_macvtap: left promiscuous mode
[  156.291683][ T9628] veth0_macvtap: left promiscuous mode
[  156.293985][ T9628] veth1_vlan: left promiscuous mode
[  156.296264][ T9628] veth0_vlan: left promiscuous mode
[  156.313664][T10844] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1296'.
[  156.354323][ T5308] Bluetooth: hci3: command 0x0405 tx timeout
[  156.664784][ T5308] Bluetooth: hci2: command tx timeout
[  156.754526][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  157.138231][ T9628] team0 (unregistering): Port device team_slave_1 removed
[  157.238869][ T9628] team0 (unregistering): Port device team_slave_0 removed
[  157.797440][T10843] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  157.889681][T10875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1302'.
[  157.899947][T10875] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  157.949048][T10788] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  157.953193][T10788] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  157.967895][T10878] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1304'.
[  157.968974][T10875] tipc: Started in network mode
[  157.975143][T10875] tipc: Node identity , cluster identity 4711
[  157.977529][T10875] tipc: Failed to set node id, please configure manually
[  157.985317][T10875] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  157.988407][T10788] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  158.014331][T10788] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  158.103163][T10902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1309'.
[  158.117211][ T5308] Bluetooth: hci1: command 0x0c1a tx timeout
[  158.124838][T10902] 8021q: adding VLAN 0 to HW filter on device bond4
[  158.131983][T10902] 8021q: adding VLAN 0 to HW filter on device bond4
[  158.134554][T10902] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address
[  158.137864][T10902] bond4: (slave wireguard0): Error -95 calling set_mac_address
[  158.161923][T10788] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.171513][T10788] 8021q: adding VLAN 0 to HW filter on device team0
[  158.178815][T10904] bond4: entered promiscuous mode
[  158.187482][ T9619] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.189883][ T9619] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.198719][ T9619] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.200717][ T9619] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.225173][T10910] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  158.240638][T10788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  158.253777][T10910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1307'.
[  158.266333][   T40] audit: type=1400 audit(2000002633.034:49740): avc:  denied  { ioctl } for  pid=10916 comm="syz.5.1310" path="pid:[4026532877]" dev="nsfs" ino=4026532877 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  158.310656][T10928] netlink: 'syz.5.1311': attribute type 11 has an invalid length.
[  158.312890][T10928] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1311'.
[  158.319017][T10928] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  158.322896][T10788] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.336154][T10902] bond4: left promiscuous mode
[  158.352087][T10930] xt_TCPMSS: Only works on TCP SYN packets
[  158.362863][T10788] veth0_vlan: entered promiscuous mode
[  158.368296][T10788] veth1_vlan: entered promiscuous mode
[  158.379591][T10788] veth0_macvtap: entered promiscuous mode
[  158.382686][T10788] veth1_macvtap: entered promiscuous mode
[  158.388529][T10788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.391540][T10788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.395261][T10788] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.399722][T10788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.402980][T10788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.406484][T10788] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.411009][T10788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.413684][T10788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.416617][T10788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.419248][T10788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.424401][ T5308] Bluetooth: hci3: command 0x0405 tx timeout
[  158.456759][ T9619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.459628][ T9619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.470051][ T6483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.473029][ T6483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.706644][T10944] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  158.764785][T10946] netlink: 'syz.4.1316': attribute type 3 has an invalid length.
[  158.767497][T10946] netlink: 'syz.4.1316': attribute type 1 has an invalid length.
[  158.770330][T10946] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1316'.
[  158.773667][T10946] NCSI netlink: No device for ifindex 33022
[  158.778496][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1316'.
[  158.905679][T10948] xt_socket: unknown flags 0xc
[  158.949593][ T5829] hid-generic 0003:8000:0002.0005: item fetching failed at offset 0/4
[  158.953023][ T5829] hid-generic 0003:8000:0002.0005: probe with driver hid-generic failed with error -22
[  159.081498][T10957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1327'.
[  159.085719][T10957] netlink: 'syz.5.1327': attribute type 1 has an invalid length.
[  159.092979][T10954] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1318'.
[  159.105067][T10957] 8021q: adding VLAN 0 to HW filter on device bond3
[  159.108448][T10957] bond2: (slave bond3): making interface the new active one
[  159.110766][T10957] bond2: (slave bond3): Enslaving as an active interface with an up link
[  159.256621][   T40] audit: type=1400 audit(2000002634.024:49741): avc:  denied  { connect } for  pid=10978 comm="syz.5.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  159.369303][   T40] audit: type=1400 audit(2000002634.134:49742): avc:  denied  { map } for  pid=10995 comm="syz.3.1329" path="socket:[44598]" dev="sockfs" ino=44598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  159.381036][T10996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1329'.
[  159.413294][T10998] overlayfs: failed to clone upperpath
[  159.416611][T10998] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.419034][T10998] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.469824][T10999] netlink: 'syz.3.1330': attribute type 19 has an invalid length.
[  160.461874][ T9620] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.582891][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  161.586698][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  161.589378][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  161.591834][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  161.595004][ T5955] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  161.599091][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  161.673034][T11015] chnl_net:caif_netlink_parms(): no params data found
[  161.720586][T11015] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.722643][T11015] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.724790][T11015] bridge_slave_0: entered allmulticast mode
[  161.726856][T11015] bridge_slave_0: entered promiscuous mode
[  161.729575][T11015] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.731663][T11015] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.733633][T11015] bridge_slave_1: entered allmulticast mode
[  161.735780][T11015] bridge_slave_1: entered promiscuous mode
[  161.754286][T11015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.758833][T11015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.781390][T11015] team0: Port device team_slave_0 added
[  161.785194][T11015] team0: Port device team_slave_1 added
[  161.803806][T11015] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.806327][T11015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.813391][T11015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.817442][T11015] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.819419][T11015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.828506][T11015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.862970][T11015] hsr_slave_0: entered promiscuous mode
[  161.866388][T11015] hsr_slave_1: entered promiscuous mode
[  162.268449][ T9620] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.346927][ T9620] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.423958][ T9620] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.516617][ T9620] bridge_slave_1: left allmulticast mode
[  162.518264][ T9620] bridge_slave_1: left promiscuous mode
[  162.519902][ T9620] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.523137][ T9620] bridge_slave_0: left allmulticast mode
[  162.524891][ T9620] bridge_slave_0: left promiscuous mode
[  162.526560][ T9620] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.779920][ T9620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  162.784935][ T9620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  162.789199][ T9620] bond0 (unregistering): Released all slaves
[  163.109663][ T9620] hsr_slave_0: left promiscuous mode
[  163.112115][ T9620] hsr_slave_1: left promiscuous mode
[  163.113808][ T9620] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.116751][ T9620] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.119201][ T9620] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.121323][ T9620] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.146592][ T9620] veth1_macvtap: left promiscuous mode
[  163.148214][ T9620] veth0_macvtap: left promiscuous mode
[  163.149785][ T9620] veth1_vlan: left promiscuous mode
[  163.151328][ T9620] veth0_vlan: left promiscuous mode
[  163.634401][ T5308] Bluetooth: hci2: command tx timeout
[  163.702974][ T9620] team0 (unregistering): Port device team_slave_1 removed
[  163.770811][ T9620] team0 (unregistering): Port device team_slave_0 removed
[  164.406221][T11015] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  164.412047][T11015] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  164.417342][T11015] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  164.422013][T11015] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  164.480891][T11015] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.491655][T11015] 8021q: adding VLAN 0 to HW filter on device team0
[  164.496657][ T9628] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.499417][ T9628] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.514236][ T9618] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.517033][ T9618] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.539647][T11015] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  164.543392][T11015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  164.623949][T11015] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.641734][T11015] veth0_vlan: entered promiscuous mode
[  164.646954][T11015] veth1_vlan: entered promiscuous mode
[  164.661343][T11015] veth0_macvtap: entered promiscuous mode
[  164.664726][T11015] veth1_macvtap: entered promiscuous mode
[  164.670849][T11015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.674866][T11015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.678540][T11015] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.683569][T11015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.686708][T11015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.689969][T11015] batman_adv: batadv0: Interface activated: batadv_slave_1
[  164.695004][T11015] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.698163][T11015] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.701302][T11015] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.703897][T11015] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.734511][ T9628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.737378][ T9628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.748487][ T9620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.751343][ T9620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.146753][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  167.250463][ T9628] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.478454][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  168.483758][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  168.487617][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  168.491852][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  168.495843][ T5955] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  168.498893][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  168.598702][ T9628] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.608220][T11058] chnl_net:caif_netlink_parms(): no params data found
[  168.679770][ T9628] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.724706][T11058] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.727326][T11058] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.729943][T11058] bridge_slave_0: entered allmulticast mode
[  168.732872][T11058] bridge_slave_0: entered promiscuous mode
[  168.736565][T11058] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.739035][T11058] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.741610][T11058] bridge_slave_1: entered allmulticast mode
[  168.744630][T11058] bridge_slave_1: entered promiscuous mode
[  168.777329][ T9628] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.797596][T11058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.802758][T11058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.836005][T11058] team0: Port device team_slave_0 added
[  168.841563][T11058] team0: Port device team_slave_1 added
[  168.871365][T11058] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.876114][T11058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.887402][T11058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  168.892549][T11058] batman_adv: batadv0: Adding interface: batadv_slave_1
[  168.896062][T11058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.906160][T11058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  168.960803][T11058] hsr_slave_0: entered promiscuous mode
[  168.963676][T11058] hsr_slave_1: entered promiscuous mode
[  168.966420][T11058] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  168.969347][T11058] Cannot create hsr debugfs directory
[  168.999400][ T9628] bridge_slave_1: left allmulticast mode
[  169.001515][ T9628] bridge_slave_1: left promiscuous mode
[  169.003792][ T9628] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.008019][ T9628] bridge_slave_0: left allmulticast mode
[  169.010165][ T9628] bridge_slave_0: left promiscuous mode
[  169.012409][ T9628] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.333586][ T9628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.340155][ T9628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.345168][ T9628] bond0 (unregistering): Released all slaves
[  169.686000][ T9628] hsr_slave_0: left promiscuous mode
[  169.687967][ T9628] hsr_slave_1: left promiscuous mode
[  169.689677][ T9628] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.691781][ T9628] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.695172][ T9628] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.697454][ T9628] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.719010][ T9628] veth1_macvtap: left promiscuous mode
[  169.720554][ T9628] veth0_macvtap: left promiscuous mode
[  169.722176][ T9628] veth1_vlan: left promiscuous mode
[  169.723658][ T9628] veth0_vlan: left promiscuous mode
[  170.520622][ T9628] team0 (unregistering): Port device team_slave_1 removed
[  170.585254][ T5308] Bluetooth: hci2: command tx timeout
[  170.596891][ T9628] team0 (unregistering): Port device team_slave_0 removed
[  171.325730][T11058] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  171.330244][T11058] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  171.335352][T11058] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  171.339959][T11058] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  171.384864][T11058] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.392146][T11058] 8021q: adding VLAN 0 to HW filter on device team0
[  171.397480][ T6483] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.399521][ T6483] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.406729][ T9619] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.409665][ T9619] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.499967][T11058] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.521959][T11058] veth0_vlan: entered promiscuous mode
[  171.528599][T11058] veth1_vlan: entered promiscuous mode
[  171.545729][T11058] veth0_macvtap: entered promiscuous mode
[  171.550226][T11058] veth1_macvtap: entered promiscuous mode
[  171.559480][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.563584][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.569700][T11058] batman_adv: batadv0: Interface activated: batadv_slave_0
[  171.575745][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.579814][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.584640][T11058] batman_adv: batadv0: Interface activated: batadv_slave_1
[  171.590524][T11058] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.594001][T11058] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.598022][T11058] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.601384][T11058] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.642353][ T9620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.644734][ T9620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.658282][ T9620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.660515][ T9620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.881801][T11101] openvswitch: netlink: Multiple metadata blocks provided
[  172.887521][T11101] netlink: 'syz.3.1338': attribute type 10 has an invalid length.
[  172.888247][   T40] audit: type=1400 audit(2000002647.654:49743): avc:  denied  { map } for  pid=11100 comm="syz.4.1337" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  172.890755][T11101] __nla_validate_parse: 5 callbacks suppressed
[  172.890771][T11101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1338'.
[  172.908542][T11101] geneve0: left allmulticast mode
[  172.911843][T11101] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.921123][T11101] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.925288][T11101] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.928915][T11101] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.941236][T11101] geneve0: entered allmulticast mode
[  172.945757][T11101] team0: Port device geneve0 added
[  172.958283][T11107] x_tables: duplicate underflow at hook 1
[  173.298243][   T40] audit: type=1400 audit(2000002648.064:49744): avc:  denied  { read } for  pid=11117 comm="syz.5.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  173.788223][T11123] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode
[  173.831571][T11128] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  173.887154][T11132] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=30 sclass=netlink_tcpdiag_socket pid=11132 comm=syz.3.1348
[  173.972355][T11140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'.
[  174.035201][T11144] xt_l2tp: v2 doesn't support IP mode
[  174.035345][ T9619] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.039596][   T40] audit: type=1400 audit(2000002648.804:49745): avc:  denied  { create } for  pid=11139 comm="syz.3.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  174.047170][   T40] audit: type=1400 audit(2000002648.804:49746): avc:  denied  { sys_admin } for  pid=11139 comm="syz.3.1353" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  174.078592][   T40] audit: type=1400 audit(2000002648.844:49747): avc:  denied  { associate } for  pid=11147 comm="syz.3.1353" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  174.086511][T11140] netlink: 2896 bytes leftover after parsing attributes in process `syz.3.1353'.
[  175.336542][   T40] audit: type=1404 audit(2000002650.104:49748): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  175.339766][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
May 18 04:17:30 [  175.347879][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
syzkaller kern.n[  175.350632][   T40] audit: type=1400 audit(2000002650.114:49749): avc:  denied  { read } for  pid=5339 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
otice kernel: [ [  175.351872][   T40] audit: type=1400 audit(2000002650.114:49750): avc:  denied  { read } for  pid=5339 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
 175.336542][   [  175.363221][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
T40] audit: type[  175.368451][   T40] audit: type=1404 audit(2000002650.114:49751): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
=1404 audit(2000[  175.371015][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
002650.104:49748[  175.376769][   T40] audit: type=1400 audit(2000002650.124:49752): avc:  denied  { prog_load } for  pid=11165 comm="syz.4.1360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
): enforcing=1 o[  175.381310][  T834] libceph: connect (1)[c::]:6789 error -101
[  175.382186][ T5955] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
ld_enforcing=0 a[  175.382284][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
uid=4294967295 ses=4294967295 en[  175.395101][  T834] libceph: mon0 (1)[c::]:6789 connect error
abled=1 old-enabled=1 lsm=selinux res=1
May 18 04:17:30 syzkaller kern.warn kernel: [  175.339766][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  175.483295][T11167] chnl_net:caif_netlink_parms(): no params data found
[  175.537703][T11167] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.539998][T11167] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.541380][T11191] xt_ipcomp: unknown flags 12
[  175.542058][T11167] bridge_slave_0: entered allmulticast mode
[  175.546077][T11167] bridge_slave_0: entered promiscuous mode
[  175.548704][T11167] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.550656][T11167] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.552645][T11167] bridge_slave_1: entered allmulticast mode
[  175.554799][T11167] bridge_slave_1: entered promiscuous mode
[  175.574086][T11167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  175.577631][T11167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.598999][T11167] team0: Port device team_slave_0 added
[  175.601705][T11167] team0: Port device team_slave_1 added
[  175.619870][T11167] batman_adv: batadv0: Adding interface: batadv_slave_0
[  175.622755][T11167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.633193][T11167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  175.638815][T11167] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.641430][T11167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.651550][T11167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.656620][  T834] libceph: connect (1)[c::]:6789 error -101
[  175.659003][  T834] libceph: mon0 (1)[c::]:6789 connect error
[  175.687340][T11167] hsr_slave_0: entered promiscuous mode
[  175.690158][T11167] hsr_slave_1: entered promiscuous mode
[  175.756866][ T9619] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.842589][ T9619] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.937732][ T9619] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.963986][T11221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1372'.
[  175.975220][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1372'.
[  176.063598][ T9619] bridge_slave_1: left allmulticast mode
[  176.065407][ T9619] bridge_slave_1: left promiscuous mode
[  176.067663][ T9619] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.075910][ T9619] bridge_slave_0: left allmulticast mode
[  176.077520][ T9619] bridge_slave_0: left promiscuous mode
[  176.079173][ T9619] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.144436][T11239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1375'.
[  176.167872][T11169] ceph: No mds server is up or the cluster is laggy
[  176.174593][   T69] libceph: connect (1)[c::]:6789 error -101
[  176.177334][   T69] libceph: mon0 (1)[c::]:6789 connect error
[  176.391341][ T9619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.395540][ T9619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.398823][ T9619] bond0 (unregistering): Released all slaves
[  176.777574][T11284] x_tables: duplicate underflow at hook 2
[  176.789687][T11288] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1387'.
[  176.851844][T11298] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1389'.
[  176.904443][ T9619] hsr_slave_0: left promiscuous mode
[  176.911097][ T9619] hsr_slave_1: left promiscuous mode
[  176.912972][ T9619] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.916188][ T9619] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.918021][T11305] netlink: 'syz.3.1390': attribute type 2 has an invalid length.
[  176.922867][ T9619] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.925878][ T9619] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.952745][ T9619] veth1_macvtap: left promiscuous mode
[  176.954537][ T9619] veth0_macvtap: left promiscuous mode
[  176.956402][ T9619] veth1_vlan: left promiscuous mode
[  176.958050][ T9619] veth0_vlan: left promiscuous mode
[  177.272638][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.285016][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.287395][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.289701][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.292081][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.294631][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.298990][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.302542][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.306113][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.309481][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.312769][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.316402][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.319700][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.323169][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.326554][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.330579][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.333599][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.337168][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.340228][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.343329][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.346544][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.349623][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.352816][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.356682][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.359829][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.363077][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.368914][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.372182][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.375367][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.378520][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.381645][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.386744][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.389854][T11321] block nbd5: Unsupported socket: shutdown callout must be supported.
[  177.476710][ T5308] Bluetooth: hci2: command tx timeout
[  177.863202][ T9619] team0 (unregistering): Port device team_slave_1 removed
[  177.954941][   T40] kauditd_printk_skb: 125 callbacks suppressed
[  177.954953][   T40] audit: type=1400 audit(2000002652.724:49878): avc:  denied  { ioctl } for  pid=11331 comm="syz.3.1398" path="socket:[49218]" dev="sockfs" ino=49218 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  177.992540][ T9619] team0 (unregistering): Port device team_slave_0 removed
[  178.587404][T11329] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  178.590000][T11329] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  178.592316][T11329] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  178.594795][T11329] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  178.597148][T11329] vxlan0: entered promiscuous mode
[  178.598603][T11329] vxlan0: entered allmulticast mode
[  178.601255][T11329] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  178.603834][T11329] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  178.606932][T11329] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  178.609880][T11329] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  178.641017][T11167] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  178.644553][T11167] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  178.648977][T11167] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  178.659262][T11167] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  178.689539][T11167] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.700776][T11167] 8021q: adding VLAN 0 to HW filter on device team0
[  178.706520][ T9628] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.709321][ T9628] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.729420][ T9620] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.733562][ T9620] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.945655][T11167] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.959993][   T40] audit: type=1400 audit(2000002653.724:49879): avc:  denied  { getopt } for  pid=11357 comm="syz.4.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  178.969322][T11358] overlayfs: missing 'workdir'
[  178.974786][T11167] veth0_vlan: entered promiscuous mode
[  178.980468][T11167] veth1_vlan: entered promiscuous mode
[  178.995468][T11167] veth0_macvtap: entered promiscuous mode
[  178.999953][T11167] veth1_macvtap: entered promiscuous mode
[  179.011012][T11167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.015375][T11167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.020703][T11167] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.028254][T11167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.032305][T11167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.037311][T11167] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.042837][T11167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.044415][   T40] audit: type=1400 audit(2000002653.814:49880): avc:  denied  { shutdown } for  pid=11357 comm="syz.4.1400" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  179.045994][T11167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.055731][T11167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.058182][T11167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.064328][   T40] audit: type=1400 audit(2000002653.824:49881): avc:  denied  { read } for  pid=11360 comm="syz.5.1403" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  179.069418][T11363] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1403'.
[  179.070859][   T40] audit: type=1400 audit(2000002653.824:49882): avc:  denied  { open } for  pid=11360 comm="syz.5.1403" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  179.070881][   T40] audit: type=1400 audit(2000002653.824:49883): avc:  denied  { ioctl } for  pid=11360 comm="syz.5.1403" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  179.074671][T11363] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1403'.
[  179.162536][ T9617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.174318][ T9617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.194957][   T40] audit: type=1400 audit(2000002653.954:49884): avc:  denied  { ioctl } for  pid=11368 comm="syz.3.1406" path="socket:[46618]" dev="sockfs" ino=46618 ioctlcmd=0x8b21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  179.206930][ T9620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.209956][ T9620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.225708][   T40] audit: type=1400 audit(2000002653.984:49885): avc:  denied  { mounton } for  pid=11167 comm="syz-executor" path="/syzkaller.odPqRh/syz-tmp" dev="sda1" ino=1955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  179.238315][T11369] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1406'.
[  179.241646][   T40] audit: type=1400 audit(2000002653.994:49886): avc:  denied  { mount } for  pid=11167 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  179.251577][   T40] audit: type=1400 audit(2000002654.004:49887): avc:  denied  { mount } for  pid=11167 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  179.293945][ T5308] Bluetooth: hci3: unexpected event for opcode 0x080f
[  179.460541][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1413'.
[  179.467294][T11389] gtp0: entered promiscuous mode
[  179.469190][T11389] gtp0: entered allmulticast mode
[  179.908940][T11425] misc userio: Invalid payload size
[  180.017787][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1427'.
[  180.086338][ T9620] tipc: Subscription rejected, illegal request
[  180.127957][T11435] ntfs3(nbd4): try to read out of volume at offset 0x0
[  180.336553][T11446] netlink: 'syz.3.1432': attribute type 8 has an invalid length.
[  180.350128][T11446] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.1432'.
[  180.354138][T11446] openvswitch: netlink: Missing key (keys=40, expected=80)
[  180.389428][T11448] netlink: 'syz.3.1433': attribute type 11 has an invalid length.
[  180.503179][T11457] netlink: 'syz.5.1437': attribute type 5 has an invalid length.
[  180.659042][T11472] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  180.809312][T11489] xt_hashlimit: invalid interval
[  180.856788][T11497] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  180.890448][T11500] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.1450'.
[  180.893972][T11500] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.1450'.
[  180.900563][T11500] openvswitch: netlink: Actions may not be safe on all matching packets
[  181.015991][T11511] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  181.144313][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  181.201187][T11537] : entered promiscuous mode
[  181.227910][T11541] xt_hashlimit: size too large, truncated to 1048576
[  181.256608][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1462'.
[  181.351300][ T9618] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.782286][T11559] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  182.833625][T11566] overlay: ./file0 is not a directory
[  182.871914][T11569] Set syz0 is full, maxelem 0 reached
[  182.875021][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  182.879261][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  182.883032][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  182.890409][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  182.895279][ T5955] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  182.904754][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  182.999438][   T40] kauditd_printk_skb: 73 callbacks suppressed
[  182.999449][   T40] audit: type=1400 audit(2000002657.764:49961): avc:  denied  { create } for  pid=11581 comm="syz.5.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  183.001884][T11570] chnl_net:caif_netlink_parms(): no params data found
[  183.007105][   T40] audit: type=1400 audit(2000002657.764:49962): avc:  denied  { setopt } for  pid=11581 comm="syz.5.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  183.039593][   T40] audit: type=1400 audit(2000002657.804:49963): avc:  denied  { read } for  pid=11590 comm="syz.4.1477" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  183.066384][T11570] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.068823][T11570] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.071387][T11570] bridge_slave_0: entered allmulticast mode
[  183.074473][   T40] audit: type=1400 audit(2000002657.834:49964): avc:  denied  { listen } for  pid=11598 comm="syz.4.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  183.074890][T11570] bridge_slave_0: entered promiscuous mode
[  183.082864][T11570] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.086336][T11570] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.088358][T11570] bridge_slave_1: entered allmulticast mode
[  183.092100][T11570] bridge_slave_1: entered promiscuous mode
[  183.136499][T11570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.142270][T11570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.173230][ T9618] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.195981][T11570] team0: Port device team_slave_0 added
[  183.204514][T11570] team0: Port device team_slave_1 added
[  183.212480][T11609] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1480'.
[  183.262637][T11570] batman_adv: batadv0: Adding interface: batadv_slave_0
[  183.265224][T11570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.274060][T11570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  183.275984][   T40] audit: type=1400 audit(2000002658.044:49965): avc:  denied  { read } for  pid=11615 comm="syz.4.1482" path="socket:[46911]" dev="sockfs" ino=46911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  183.280533][T11570] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.288115][T11570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.298667][T11570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.306542][ T5955] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  183.310731][ T5955] Bluetooth: hci3: Injecting HCI hardware error event
[  183.319207][   T40] audit: type=1400 audit(2000002658.084:49966): avc:  denied  { write } for  pid=11619 comm="syz.5.1483" dev="sockfs" ino=46915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  183.319992][ T5955] Bluetooth: hci3: hardware error 0x00
[  183.327353][   T40] audit: type=1400 audit(2000002658.084:49967): avc:  denied  { setattr } for  pid=11619 comm="syz.5.1483" name="X25" dev="sockfs" ino=46915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  183.342475][ T9618] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.343364][   T40] audit: type=1400 audit(2000002658.084:49968): avc:  denied  { ioctl } for  pid=11619 comm="syz.5.1483" path="socket:[46915]" dev="sockfs" ino=46915 ioctlcmd=0xf515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  183.355069][   T40] audit: type=1400 audit(2000002658.084:49969): avc:  denied  { listen } for  pid=11619 comm="syz.5.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  183.373115][T11625] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  183.378137][T11625] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  183.408188][ T9618] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.414232][T11570] hsr_slave_0: entered promiscuous mode
[  183.416590][T11570] hsr_slave_1: entered promiscuous mode
[  183.419387][T11570] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  183.422799][T11570] Cannot create hsr debugfs directory
[  183.460336][ T5308] Bluetooth: hci3: unexpected event for opcode 0x202f
[  183.466162][T11635] tipc: Started in network mode
[  183.468039][T11635] tipc: Node identity 4, cluster identity 4711
[  183.470347][T11635] tipc: Node number set to 4
[  183.500183][T11635] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  183.513519][   T40] audit: type=1400 audit(2000002658.274:49970): avc:  denied  { getopt } for  pid=11633 comm="syz.4.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  183.558318][ T9618] bridge_slave_1: left allmulticast mode
[  183.560497][ T9618] bridge_slave_1: left promiscuous mode
[  183.562548][ T9618] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.570051][ T9618] bridge_slave_0: left allmulticast mode
[  183.572105][ T9618] bridge_slave_0: left promiscuous mode
[  183.574127][ T9618] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.786455][ T5308] Bluetooth: hci1: unexpected event for opcode 0x200d
[  183.855765][ T9618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  183.859416][ T9618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  183.862709][ T9618] bond0 (unregistering): Released all slaves
[  183.886981][T11661] pimreg: entered allmulticast mode
[  183.888854][T11662] pimreg: left allmulticast mode
[  184.012127][T11672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  184.205874][ T9618] hsr_slave_0: left promiscuous mode
[  184.207835][ T9618] hsr_slave_1: left promiscuous mode
[  184.209605][ T9618] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.211763][ T9618] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.217176][ T9618] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.219505][ T9618] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.242326][ T9618] veth1_macvtap: left promiscuous mode
[  184.243871][ T9618] veth0_macvtap: left promiscuous mode
[  184.245860][ T9618] veth1_vlan: left promiscuous mode
[  184.247456][ T9618] veth0_vlan: left promiscuous mode
[  184.942092][ T6009] libceph: connect (1)[c::]:6789 error -101
[  184.944318][ T6009] libceph: mon0 (1)[c::]:6789 connect error
[  184.984610][ T5308] Bluetooth: hci2: command tx timeout
[  184.989750][ T9618] team0 (unregistering): Port device team_slave_1 removed
[  185.103289][ T9618] team0 (unregistering): Port device team_slave_0 removed
[  185.207279][ T6009] libceph: connect (1)[c::]:6789 error -101
[  185.209014][ T6009] libceph: mon0 (1)[c::]:6789 connect error
[  185.374492][ T6008] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  185.384550][ T5955] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  185.524308][ T6008] usb 10-1: Using ep0 maxpacket: 8
[  185.530873][ T6008] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  185.535290][ T6008] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[  185.538725][ T6008] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  185.543248][ T6008] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  185.548457][ T6008] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  185.551263][ T6008] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.569022][ T6008] hub 10-1:1.0: bad descriptor, ignoring hub
[  185.571331][ T6008] hub 10-1:1.0: probe with driver hub failed with error -5
[  185.574239][ T6008] cdc_wdm 10-1:1.0: skipping garbage
[  185.575804][ T6008] cdc_wdm 10-1:1.0: skipping garbage
[  185.585586][ T6008] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  185.587888][ T6008] cdc_wdm 10-1:1.0: Unknown control protocol
[  185.726659][ T6009] libceph: connect (1)[c::]:6789 error -101
[  185.728278][T11728] ceph: No mds server is up or the cluster is laggy
[  185.729072][ T6009] libceph: mon0 (1)[c::]:6789 connect error
[  185.768641][T11734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.776280][T11734] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.778850][T11735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.783666][T11735] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.059747][T11735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.066537][T11735] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.128098][T11570] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  186.144558][T11570] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  186.149285][T11570] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  186.160054][T11570] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  186.199143][T11771] __nla_validate_parse: 2 callbacks suppressed
[  186.199153][T11771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1516'.
[  186.219268][T11734] usb 10-1: reset high-speed USB device number 9 using dummy_hcd
[  186.226949][T11570] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.243129][T11570] 8021q: adding VLAN 0 to HW filter on device team0
[  186.251943][ T9627] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.254790][ T9627] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.259079][ T9627] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.261960][ T9627] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.381302][T11570] 8021q: adding VLAN 0 to HW filter on device batadv0
[  186.405690][T11570] veth0_vlan: entered promiscuous mode
[  186.411245][T11570] veth1_vlan: entered promiscuous mode
[  186.413534][T11797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1521'.
[  186.429971][T11570] veth0_macvtap: entered promiscuous mode
[  186.434713][T11570] veth1_macvtap: entered promiscuous mode
[  186.442783][T11570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.446600][T11570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.450793][T11570] batman_adv: batadv0: Interface activated: batadv_slave_0
[  186.467558][T11570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.471154][T11570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.476725][T11570] batman_adv: batadv0: Interface activated: batadv_slave_1
[  186.491822][T11570] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.494834][T11570] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.497508][T11803] syz.4.1521: attempt to access beyond end of device
[  186.497508][T11803] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0
[  186.497621][T11570] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.501807][T11803] syz.4.1521: attempt to access beyond end of device
[  186.501807][T11803] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0
[  186.504896][T11570] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.509772][T11803] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  186.518526][T11803] syz.4.1521: attempt to access beyond end of device
[  186.518526][T11803] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0
[  186.524224][T11803] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  186.528261][T11803] syz.4.1521: attempt to access beyond end of device
[  186.528261][T11803] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0
[  186.532009][T11803] syz.4.1521: attempt to access beyond end of device
[  186.532009][T11803] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0
[  186.536240][T11803] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  186.538861][T11803] syz.4.1521: attempt to access beyond end of device
[  186.538861][T11803] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0
[  186.542995][T11803] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  186.556587][ T9619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.559520][ T9619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.564446][T11803] syz.4.1521: attempt to access beyond end of device
[  186.564446][T11803] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0
[  186.568239][T11803] syz.4.1521: attempt to access beyond end of device
[  186.568239][T11803] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0
[  186.571983][T11803] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  186.580158][ T9619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.583206][ T9619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.593272][T11803] syz.4.1521: attempt to access beyond end of device
[  186.593272][T11803] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0
[  186.604256][T11803] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  186.607198][T11803] syz.4.1521: attempt to access beyond end of device
[  186.607198][T11803] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0
[  186.611139][T11803] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  186.616324][T11803] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  186.619424][T11803] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1)
[  186.818365][T11818] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  186.822305][T11818] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.1526'.
[  186.825125][T11818] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  187.292620][T11828] netlink: 'syz.4.1530': attribute type 1 has an invalid length.
[  187.296431][T11828] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1530'.
[  187.624383][   T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  187.774309][   T10] usb 9-1: Using ep0 maxpacket: 8
[  187.777677][   T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  187.782022][   T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  187.786286][   T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.790509][   T10] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  187.794299][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.800930][   T10] hub 9-1:1.0: bad descriptor, ignoring hub
[  187.802765][   T10] hub 9-1:1.0: probe with driver hub failed with error -5
[  187.805830][   T10] cdc_wdm 9-1:1.0: skipping garbage
[  187.807830][   T10] cdc_wdm 9-1:1.0: skipping garbage
[  187.810036][   T10] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22
[  188.114390][   T10] usb 9-1: USB disconnect, device number 3
[  188.369400][   T40] kauditd_printk_skb: 20 callbacks suppressed
[  188.369414][   T40] audit: type=1400 audit(2000002664.141:49991): avc:  denied  { setopt } for  pid=11844 comm="syz.3.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  188.404383][   T40] audit: type=1400 audit(2000002664.171:49992): avc:  denied  { mount } for  pid=11846 comm="syz.3.1538" name="/" dev="autofs" ino=48990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  188.474615][   T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  188.634305][   T10] usb 9-1: Using ep0 maxpacket: 8
[  188.637726][   T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  188.641701][   T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  188.645331][   T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.648902][   T10] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  188.652360][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.658415][   T10] hub 9-1:1.0: bad descriptor, ignoring hub
[  188.660757][   T10] hub 9-1:1.0: probe with driver hub failed with error -5
[  188.664003][   T10] cdc_wdm 9-1:1.0: skipping garbage
[  188.666241][   T10] cdc_wdm 9-1:1.0: skipping garbage
[  188.668307][   T10] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22
[  188.888192][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1532'.
[  188.937470][ T9627] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.134374][ T6769] usb 9-1: USB disconnect, device number 4
[  190.393024][ T9627] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.429291][   T40] audit: type=1400 audit(2000002666.201:49993): avc:  denied  { bind } for  pid=11861 comm="syz.3.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  190.433584][T11863] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.1541'.
[  190.434960][   T40] audit: type=1400 audit(2000002666.201:49994): avc:  denied  { name_bind } for  pid=11861 comm="syz.3.1542" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  190.438438][T11863] openvswitch: netlink: Flow key attribute not present in set flow.
[  190.448244][   T40] audit: type=1400 audit(2000002666.201:49995): avc:  denied  { node_bind } for  pid=11861 comm="syz.3.1542" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1
[  190.475069][ T9627] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.550789][ T5308] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  190.556345][ T5308] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  190.561610][ T5308] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  190.572576][ T5308] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  190.578503][ T9627] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.579230][ T5308] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  190.586159][ T5308] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  190.675301][T11867] chnl_net:caif_netlink_parms(): no params data found
[  190.741169][ T9627] bridge_slave_1: left allmulticast mode
[  190.742906][ T9627] bridge_slave_1: left promiscuous mode
[  190.745197][ T9627] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.748305][ T9627] bridge_slave_0: left allmulticast mode
[  190.749987][ T9627] bridge_slave_0: left promiscuous mode
[  190.751643][ T9627] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.013837][ T9627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  191.019387][ T9627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  191.023734][ T9627] bond0 (unregistering): Released all slaves
[  191.053566][T11867] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.056337][T11867] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.059024][T11867] bridge_slave_0: entered allmulticast mode
[  191.061951][T11867] bridge_slave_0: entered promiscuous mode
[  191.065705][T11867] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.068386][T11867] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.071060][T11867] bridge_slave_1: entered allmulticast mode
[  191.073993][T11867] bridge_slave_1: entered promiscuous mode
[  191.118227][T11867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  191.123897][T11867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.179310][T11867] team0: Port device team_slave_0 added
[  191.185415][T11867] team0: Port device team_slave_1 added
[  191.213964][T11867] batman_adv: batadv0: Adding interface: batadv_slave_0
[  191.217089][T11867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.227373][T11867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  191.233048][T11867] batman_adv: batadv0: Adding interface: batadv_slave_1
[  191.237127][T11867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.248292][T11867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  191.303249][T11876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1543'.
[  191.306943][T11876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1543'.
[  191.333587][T11867] hsr_slave_0: entered promiscuous mode
[  191.338336][T11867] hsr_slave_1: entered promiscuous mode
[  191.395765][ T9627] hsr_slave_0: left promiscuous mode
[  191.400522][ T9627] hsr_slave_1: left promiscuous mode
[  191.403366][ T9627] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.407496][ T9627] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.412030][ T9627] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.413857][T11880] overlayfs: failed to clone upperpath
[  191.415126][ T9627] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.434544][T11734] usb 10-1: device descriptor read/64, error -110
[  191.460835][ T9627] veth1_macvtap: left promiscuous mode
[  191.463094][ T9627] veth0_macvtap: left promiscuous mode
[  191.465621][ T9627] veth1_vlan: left promiscuous mode
[  191.467776][ T9627] veth0_vlan: left promiscuous mode
[  191.550973][   T40] audit: type=1400 audit(2000002667.321:49996): avc:  denied  { map } for  pid=11890 comm="syz.4.1549" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  191.694344][T11734] usb 10-1: reset high-speed USB device number 9 using dummy_hcd
[  191.694590][   T40] audit: type=1400 audit(2000002667.461:49997): avc:  denied  { read } for  pid=11903 comm="syz.4.1552" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  191.705164][   T40] audit: type=1400 audit(2000002667.461:49998): avc:  denied  { open } for  pid=11903 comm="syz.4.1552" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  191.834344][T11734] usb 10-1: device descriptor read/64, error -32
[  192.084342][T11734] usb 10-1: reset high-speed USB device number 9 using dummy_hcd
[  192.114616][T11734] usb 10-1: device descriptor read/8, error -32
[  192.251013][ T9627] team0 (unregistering): Port device team_slave_1 removed
[  192.357275][T11734] usb 10-1: reset high-speed USB device number 9 using dummy_hcd
[  192.363130][ T9627] team0 (unregistering): Port device team_slave_0 removed
[  192.375861][T11734] usb 10-1: device descriptor read/8, error -32
[  192.485323][T11734] raw-gadget.0 gadget.5: failed to queue suspend event
[  192.487527][T11734] cdc_wdm 10-1:1.0: Error autopm - -16
[  192.487646][ T6009] usb 10-1: USB disconnect, device number 9
[  192.501448][T11734] raw-gadget.0 gadget.5: failed to queue disconnect event
[  192.668210][ T5955] Bluetooth: hci2: command tx timeout
[  193.141176][   T40] audit: type=1400 audit(2000002668.911:49999): avc:  denied  { mount } for  pid=11927 comm="syz.3.1557" name="/" dev="ramfs" ino=52371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  193.164073][   T40] audit: type=1400 audit(2000002668.911:50000): avc:  denied  { compute_member } for  pid=11928 comm="syz.5.1559" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  193.206523][T11935] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5)
[  193.222910][T11936] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5)
[  193.439512][   T40] kauditd_printk_skb: 2 callbacks suppressed
[  193.439525][   T40] audit: type=1400 audit(2000002669.211:50003): avc:  denied  { read write } for  pid=11943 comm="syz.5.1563" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  193.452542][   T40] audit: type=1400 audit(2000002669.221:50004): avc:  denied  { open } for  pid=11943 comm="syz.5.1563" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  193.454018][T11960] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1567'.
[  193.463960][   T40] audit: type=1400 audit(2000002669.221:50005): avc:  denied  { map } for  pid=11943 comm="syz.5.1563" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  193.485082][   T40] audit: type=1400 audit(2000002669.251:50006): avc:  denied  { ioctl } for  pid=11959 comm="syz.4.1567" path="socket:[51821]" dev="sockfs" ino=51821 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  193.564947][   T40] audit: type=1400 audit(2000002669.341:50007): avc:  denied  { create } for  pid=11969 comm="syz.3.1569" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  193.579205][   T40] audit: type=1400 audit(2000002669.351:50008): avc:  denied  { write } for  pid=11969 comm="syz.3.1569" name="file0" dev="tmpfs" ino=2449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  193.588819][   T40] audit: type=1400 audit(2000002669.351:50009): avc:  denied  { open } for  pid=11969 comm="syz.3.1569" path="/450/file0" dev="tmpfs" ino=2449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  193.598923][   T40] audit: type=1400 audit(2000002669.351:50010): avc:  denied  { map } for  pid=11969 comm="syz.3.1569" path="/450/file0" dev="tmpfs" ino=2449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  193.607964][   T40] audit: type=1400 audit(2000002669.351:50011): avc:  denied  { read } for  pid=11969 comm="syz.3.1569" path="/450/file0" dev="tmpfs" ino=2449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  193.632825][   T40] audit: type=1400 audit(2000002669.351:50012): avc:  denied  { ioctl } for  pid=11969 comm="syz.3.1569" path="/450/file0" dev="tmpfs" ino=2449 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  193.711563][T11867] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  193.722713][T11867] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  193.728436][T11867] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  193.743733][T11976] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1571'.
[  193.747927][T11867] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  193.793042][T11867] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.797329][T11989] netlink: 'syz.4.1573': attribute type 1 has an invalid length.
[  193.810627][T11989] 8021q: adding VLAN 0 to HW filter on device bond7
[  193.816610][T11867] 8021q: adding VLAN 0 to HW filter on device team0
[  193.825819][ T9619] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.828151][ T9619] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.832877][ T9620] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.835353][ T9620] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.849521][T11989] 8021q: adding VLAN 0 to HW filter on device bond7
[  193.852092][T11989] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  193.863061][T11989] bond7: (slave vxcan1): Error -95 calling set_mac_address
[  193.955614][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  193.957521][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  194.057537][T11867] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.090224][T11867] veth0_vlan: entered promiscuous mode
[  194.096983][T11867] veth1_vlan: entered promiscuous mode
[  194.124037][T11867] veth0_macvtap: entered promiscuous mode
[  194.129770][T11867] veth1_macvtap: entered promiscuous mode
[  194.137189][T11867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.140290][T11867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.143812][T11867] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.154480][T11867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.158004][T11867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.162059][T11867] batman_adv: batadv0: Interface activated: batadv_slave_1
[  194.169754][T11867] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.172309][T11867] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.175476][T11867] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.177987][T11867] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.234613][ T6483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.237232][ T6483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.253125][ T9627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.256003][ T9627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.391223][T12031] nftables ruleset with unbound chain
[  194.490755][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1585'.
[  194.652746][T12048] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  194.689660][T12051] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  194.954279][  T835] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  194.996559][ T5955] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  195.105710][  T835] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  195.109338][  T835] usb 10-1: config 0 interface 0 has no altsetting 0
[  195.113616][  T835] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  195.118516][  T835] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  195.121519][  T835] usb 10-1: Product: syz
[  195.123135][  T835] usb 10-1: Manufacturer: syz
[  195.125163][  T835] usb 10-1: SerialNumber: syz
[  195.134821][  T835] usb 10-1: config 0 descriptor??
[  195.143766][  T835] usb 10-1: selecting invalid altsetting 0
[  195.344221][  T835] usb 10-1: USB disconnect, device number 11
[  195.821715][T12100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1606'.
[  195.936172][T12125] Invalid source name
[  195.937342][T12125] UBIFS error (pid: 12125): cannot open "./file0", error -22
[  195.952187][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1613'.
[  196.014067][T12137] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  196.060520][T12137] kvm: pic: single mode not supported
[  196.062879][T12143] xt_hashlimit: Unknown mode mask 180, kernel too old?
[  196.135598][T12146] openvswitch: netlink: nsh attr 2970 is out of range max 3
[  196.138501][T12146] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.177277][T12148] "syz.5.1619" (12148) uses obsolete ecb(arc4) skcipher
[  196.206893][T12155] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1621'.
[  196.219004][T12155] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1621'.
[  196.222801][T12155] openvswitch: netlink: Key type 8215 is out of range max 32
[  196.332487][T12176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1626'.
[  196.336238][T12176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1626'.
[  196.394940][ T6483] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.965701][T12183] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1628'.
[  197.966150][T12184] netlink: 'syz.3.1629': attribute type 13 has an invalid length.
[  198.002508][ T6009] IPVS: starting estimator thread 0...
[  198.035338][T12194] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1627'.
[  198.040838][ T5308] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  198.046301][ T5308] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  198.048946][ T5308] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  198.051964][ T5308] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  198.056330][ T5308] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  198.058637][ T5308] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  198.104301][T12191] IPVS: using max 44 ests per chain, 105600 per kthread
[  198.139420][T12195] chnl_net:caif_netlink_parms(): no params data found
[  198.170125][ T6483] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.215008][T12195] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.218509][T12195] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.220710][T12195] bridge_slave_0: entered allmulticast mode
[  198.223256][T12195] bridge_slave_0: entered promiscuous mode
[  198.243746][ T6483] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.250369][T12195] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.252676][T12195] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.255055][T12195] bridge_slave_1: entered allmulticast mode
[  198.257341][T12195] bridge_slave_1: entered promiscuous mode
[  198.277105][T12195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.281946][T12195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.317818][T12195] team0: Port device team_slave_0 added
[  198.328229][ T6483] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.335333][T12195] team0: Port device team_slave_1 added
[  198.362871][T12195] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.365708][T12195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.376894][T12195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.386826][T12195] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.390454][T12195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.401453][T12195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.442981][T12195] hsr_slave_0: entered promiscuous mode
[  198.446106][T12195] hsr_slave_1: entered promiscuous mode
[  198.448024][T12195] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.450147][T12195] Cannot create hsr debugfs directory
[  198.500512][T12205] 9pnet: Found fid 0 not clunked
[  198.503980][ T6483] bridge_slave_1: left allmulticast mode
[  198.506190][ T6483] bridge_slave_1: left promiscuous mode
[  198.507843][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.511025][ T6483] bridge_slave_0: left allmulticast mode
[  198.514308][ T6483] bridge_slave_0: left promiscuous mode
[  198.516044][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.809319][ T6483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  198.813495][ T6483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  198.818412][ T6483] bond0 (unregistering): Released all slaves
[  198.854302][  T834] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  198.974848][T12217] netlink: 'syz.3.1635': attribute type 10 has an invalid length.
[  198.978355][T12217] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1635'.
[  198.982249][   T40] kauditd_printk_skb: 36 callbacks suppressed
[  198.982261][   T40] audit: type=1400 audit(2000002674.751:50049): avc:  denied  { unmount } for  pid=8002 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  199.014379][  T834] usb 10-1: Using ep0 maxpacket: 8
[  199.021595][  T834] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  199.024970][  T834] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  199.028218][  T834] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 41760, setting to 1024
[  199.031925][  T834] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  199.035923][  T834] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  199.039535][  T834] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  199.043126][  T834] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.124801][T12242] sctp: [Deprecated]: syz.3.1640 (pid 12242) Use of int in max_burst socket option deprecated.
[  199.124801][T12242] Use struct sctp_assoc_value instead
[  199.147844][ T6483] hsr_slave_0: left promiscuous mode
[  199.149928][ T6483] hsr_slave_1: left promiscuous mode
[  199.152067][ T6483] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.154350][ T6483] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.166883][ T6483] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.169150][ T6483] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.170700][T12233] netlink: 'syz.4.1638': attribute type 11 has an invalid length.
[  199.175026][T12233] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1638'.
[  199.213266][ T6483] veth1_macvtap: left promiscuous mode
[  199.215680][ T6483] veth0_macvtap: left promiscuous mode
[  199.218026][ T6483] veth1_vlan: left promiscuous mode
[  199.220162][ T6483] veth0_vlan: left promiscuous mode
[  199.250803][  T834] usb 10-1: usb_control_msg returned -32
[  199.252683][  T834] usbtmc 10-1:16.0: can't read capabilities
[  199.611512][T12255] usbtmc 10-1:16.0: usb_control_msg returned -32
[  199.622156][ T6009] usb 10-1: USB disconnect, device number 12
[  200.008606][ T6483] team0 (unregistering): Port device team_slave_1 removed
[  200.090122][ T6483] team0 (unregistering): Port device team_slave_0 removed
[  200.117176][ T5955] Bluetooth: hci2: command tx timeout
[  200.404277][ T6009] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  200.554368][ T6009] usb 10-1: Using ep0 maxpacket: 32
[  200.558076][ T6009] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  200.564975][ T6009] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  200.568693][ T6009] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  200.571934][ T6009] usb 10-1: Product: syz
[  200.573752][ T6009] usb 10-1: Manufacturer: syz
[  200.575974][ T6009] usb 10-1: SerialNumber: syz
[  200.579481][ T6009] usb 10-1: config 0 descriptor??
[  200.582719][T12257] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  200.586968][ T6009] hub 10-1:0.0: bad descriptor, ignoring hub
[  200.589344][ T6009] hub 10-1:0.0: probe with driver hub failed with error -5
[  200.711405][   T40] audit: type=1400 audit(2000002676.481:50050): avc:  denied  { nlmsg_read } for  pid=12258 comm="syz.3.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  200.742682][   T40] audit: type=1400 audit(2000002676.511:50051): avc:  denied  { create } for  pid=12263 comm="syz.3.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  200.750922][T12266] netlink: 'syz.3.1645': attribute type 16 has an invalid length.
[  200.753903][T12266] netlink: 'syz.3.1645': attribute type 17 has an invalid length.
[  200.765057][T12269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1646'.
[  200.789184][T12266] bridge0: port 3(syz_tun) entered blocking state
[  200.791775][T12266] bridge0: port 3(syz_tun) entered forwarding state
[  200.795522][ T9628] 
[  200.796532][T12266] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.796771][ T9628] =============================
[  200.800721][T12266] 8021q: adding VLAN 0 to HW filter on device team0
[  200.801060][ T9628] WARNING: suspicious RCU usage
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  200.805466][ T9628] 6.14.0-syzkaller-01103-g2df0c02dab82 #0 Not tainted
[  200.809175][ T9628] -----------------------------
[  200.811869][ T9628] net/sched/sch_generic.c:1251 suspicious rcu_dereference_protected() usage!
[  200.814973][   T40] audit: type=1400 audit(2000002676.581:50052): avc:  denied  { write } for  pid=5930 comm="syz-executor" path="pipe:[6802]" dev="pipefs" ino=6802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  200.821332][ T9628] 
[  200.821332][ T9628] other info that might help us debug this:
[  200.821332][ T9628] 
[  200.824876][ T9628] 
[  200.824876][ T9628] rcu_scheduler_active = 2, debug_locks = 1
[  200.827210][ T9628] 3 locks held by kworker/u32:63/9628:
[  200.829182][ T9628]  #0: ffff88804e537948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  200.832965][ T9628]  #1: ffffc9000367fd18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  200.837291][ T9628]  #2: ffffffff8e3be0c0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0
[  200.840345][ T9628] 
[  200.840345][ T9628] stack backtrace:
[  200.841990][ T9628] CPU: 2 UID: 0 PID: 9628 Comm: kworker/u32:63 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  200.842005][ T9628] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  200.842012][ T9628] Workqueue: bond0 bond_mii_monitor
[  200.842031][ T9628] Call Trace:
[  200.842035][ T9628]  <TASK>
[  200.842040][ T9628]  dump_stack_lvl+0x16c/0x1f0
[  200.842065][ T9628]  lockdep_rcu_suspicious+0x166/0x260
[  200.842082][ T9628]  dev_activate+0x455/0x12b0
[  200.842092][ T9628]  ? ethtool_op_get_link+0x1d/0x70
[  200.842105][ T9628]  ? bond_check_dev_link+0x196/0x490
[  200.842118][ T9628]  ? bond_mii_monitor+0x3c0/0x2dc0
[  200.842132][ T9628]  ? process_one_work+0x9cc/0x1b70
[  200.842142][ T9628]  ? worker_thread+0x6c1/0xef0
[  200.842151][ T9628]  ? kthread+0x3a4/0x760
[  200.842159][ T9628]  ? ret_from_fork+0x45/0x80
[  200.842169][ T9628]  ? __pfx_dev_activate+0x10/0x10
[  200.842179][ T9628]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  200.842198][ T9628]  linkwatch_do_dev+0x13d/0x160
[  200.842214][ T9628]  linkwatch_sync_dev+0x181/0x210
[  200.842230][ T9628]  ? __pfx_ethtool_op_get_link+0x10/0x10
[  200.842242][ T9628]  ethtool_op_get_link+0x1d/0x70
[  200.842255][ T9628]  bond_check_dev_link+0x196/0x490
[  200.842268][ T9628]  ? __pfx_bond_check_dev_link+0x10/0x10
[  200.842285][ T9628]  bond_mii_monitor+0x3c0/0x2dc0
[  200.842304][ T9628]  ? __pfx_bond_mii_monitor+0x10/0x10
[  200.842322][ T9628]  ? rcu_is_watching+0x12/0xc0
[  200.842334][ T9628]  process_one_work+0x9cc/0x1b70
[  200.842347][ T9628]  ? __pfx_batadv_nc_worker+0x10/0x10
[  200.842362][ T9628]  ? __pfx_process_one_work+0x10/0x10
[  200.842375][ T9628]  ? assign_work+0x1a0/0x250
[  200.842384][ T9628]  worker_thread+0x6c1/0xef0
[  200.842398][ T9628]  ? __pfx_worker_thread+0x10/0x10
[  200.842408][ T9628]  kthread+0x3a4/0x760
[  200.842417][ T9628]  ? __pfx_kthread+0x10/0x10
[  200.842425][ T9628]  ? __pfx_kthread+0x10/0x10
[  200.842433][ T9628]  ? __pfx_kthread+0x10/0x10
[  200.842456][ T9628]  ? __pfx_kthread+0x10/0x10
[  200.842464][ T9628]  ? rcu_is_watching+0x12/0xc0
[  200.842475][ T9628]  ? __pfx_kthread+0x10/0x10
[  200.842483][ T9628]  ret_from_fork+0x45/0x80
[  200.842492][ T9628]  ? __pfx_kthread+0x10/0x10
[  200.842500][ T9628]  ret_from_fork_asm+0x1a/0x30
[  200.842520][ T9628]  </TASK>
[  200.842635][ T9628] 
[  200.864447][ T5955] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  200.865622][ T9628] =============================
[  200.915013][ T9628] WARNING: suspicious RCU usage
[  200.916907][ T9628] 6.14.0-syzkaller-01103-g2df0c02dab82 #0 Not tainted
[  200.919223][ T9628] -----------------------------
[  200.921071][ T9628] net/sched/sch_generic.c:1229 suspicious rcu_dereference_protected() usage!
[  200.924477][ T9628] 
[  200.924477][ T9628] other info that might help us debug this:
[  200.924477][ T9628] 
[  200.928309][ T9628] 
[  200.928309][ T9628] rcu_scheduler_active = 2, debug_locks = 1
[  200.930877][ T9628] 3 locks held by kworker/u32:63/9628:
[  200.932706][ T9628]  #0: ffff88804e537948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  200.936874][ T9628]  #1: ffffc9000367fd18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  200.940353][ T9628]  #2: ffffffff8e3be0c0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0
[  200.943798][ T9628] 
[  200.943798][ T9628] stack backtrace:
[  200.945938][ T9628] CPU: 2 UID: 0 PID: 9628 Comm: kworker/u32:63 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  200.945959][ T9628] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  200.945969][ T9628] Workqueue: bond0 bond_mii_monitor
[  200.945992][ T9628] Call Trace:
[  200.945998][ T9628]  <TASK>
[  200.946005][ T9628]  dump_stack_lvl+0x16c/0x1f0
[  200.946031][ T9628]  lockdep_rcu_suspicious+0x166/0x260
[  200.946058][ T9628]  transition_one_qdisc+0x1d4/0x210
[  200.946083][ T9628]  dev_activate+0x20f/0x12b0
[  200.946099][ T9628]  ? worker_thread+0x6c1/0xef0
[  200.946113][ T9628]  ? kthread+0x3a4/0x760
[  200.946124][ T9628]  ? ret_from_fork+0x45/0x80
[  200.946136][ T9628]  ? __pfx_dev_activate+0x10/0x10
[  200.946151][ T9628]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  200.946176][ T9628]  linkwatch_do_dev+0x13d/0x160
[  200.946198][ T9628]  linkwatch_sync_dev+0x181/0x210
[  200.946220][ T9628]  ? __pfx_ethtool_op_get_link+0x10/0x10
[  200.946238][ T9628]  ethtool_op_get_link+0x1d/0x70
[  200.946253][ T9628]  bond_check_dev_link+0x196/0x490
[  200.946273][ T9628]  ? __pfx_bond_check_dev_link+0x10/0x10
[  200.946299][ T9628]  bond_mii_monitor+0x3c0/0x2dc0
[  200.946326][ T9628]  ? __pfx_bond_mii_monitor+0x10/0x10
[  200.946348][ T9628]  ? rcu_is_watching+0x12/0xc0
[  200.946366][ T9628]  process_one_work+0x9cc/0x1b70
[  200.946385][ T9628]  ? __pfx_batadv_nc_worker+0x10/0x10
[  200.946406][ T9628]  ? __pfx_process_one_work+0x10/0x10
[  200.946421][ T9628]  ? assign_work+0x1a0/0x250
[  200.946436][ T9628]  worker_thread+0x6c1/0xef0
[  200.946457][ T9628]  ? __pfx_worker_thread+0x10/0x10
[  200.946472][ T9628]  kthread+0x3a4/0x760
[  200.946485][ T9628]  ? __pfx_kthread+0x10/0x10
[  200.946496][ T9628]  ? __pfx_kthread+0x10/0x10
[  200.946504][ T9628]  ? __pfx_kthread+0x10/0x10
[  200.946517][ T9628]  ? __pfx_kthread+0x10/0x10
[  200.946528][ T9628]  ? rcu_is_watching+0x12/0xc0
[  200.946543][ T9628]  ? __pfx_kthread+0x10/0x10
[  200.946556][ T9628]  ret_from_fork+0x45/0x80
[  200.946569][ T9628]  ? __pfx_kthread+0x10/0x10
[  200.946580][ T9628]  ret_from_fork_asm+0x1a/0x30
[  200.946600][ T9628]  </TASK>
[  200.950274][  T834] usb 10-1: USB disconnect, device number 13
[  200.964252][ T9628] 
[  201.012222][ T9628] =============================
[  201.013524][ T9628] WARNING: suspicious RCU usage
[  201.014947][ T9628] 6.14.0-syzkaller-01103-g2df0c02dab82 #0 Not tainted
[  201.016802][ T9628] -----------------------------
[  201.018163][ T9628] ./include/linux/rtnetlink.h:162 suspicious rcu_dereference_protected() usage!
[  201.020680][ T9628] 
[  201.020680][ T9628] other info that might help us debug this:
[  201.020680][ T9628] 
[  201.023545][ T9628] 
[  201.023545][ T9628] rcu_scheduler_active = 2, debug_locks = 1
[  201.025798][ T9628] 3 locks held by kworker/u32:63/9628:
[  201.027323][ T9628]  #0: ffff88804e537948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  201.030211][ T9628]  #1: ffffc9000367fd18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  201.033572][ T9628]  #2: ffffffff8e3be0c0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0
[  201.036310][ T9628] 
[  201.036310][ T9628] stack backtrace:
[  201.037998][ T9628] CPU: 0 UID: 0 PID: 9628 Comm: kworker/u32:63 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  201.038013][ T9628] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  201.038021][ T9628] Workqueue: bond0 bond_mii_monitor
[  201.038037][ T9628] Call Trace:
[  201.038040][ T9628]  <TASK>
[  201.038045][ T9628]  dump_stack_lvl+0x16c/0x1f0
[  201.038060][ T9628]  lockdep_rcu_suspicious+0x166/0x260
[  201.038075][ T9628]  dev_activate+0x7ea/0x12b0
[  201.038086][ T9628]  ? worker_thread+0x6c1/0xef0
[  201.038096][ T9628]  ? kthread+0x3a4/0x760
[  201.038104][ T9628]  ? ret_from_fork+0x45/0x80
[  201.038114][ T9628]  ? __pfx_dev_activate+0x10/0x10
[  201.038125][ T9628]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  201.038143][ T9628]  linkwatch_do_dev+0x13d/0x160
[  201.038160][ T9628]  linkwatch_sync_dev+0x181/0x210
[  201.038176][ T9628]  ? __pfx_ethtool_op_get_link+0x10/0x10
[  201.038189][ T9628]  ethtool_op_get_link+0x1d/0x70
[  201.038202][ T9628]  bond_check_dev_link+0x196/0x490
[  201.038216][ T9628]  ? __pfx_bond_check_dev_link+0x10/0x10
[  201.038233][ T9628]  bond_mii_monitor+0x3c0/0x2dc0
[  201.038252][ T9628]  ? __pfx_bond_mii_monitor+0x10/0x10
[  201.038270][ T9628]  ? rcu_is_watching+0x12/0xc0
[  201.038282][ T9628]  process_one_work+0x9cc/0x1b70
[  201.038295][ T9628]  ? __pfx_batadv_nc_worker+0x10/0x10
[  201.038309][ T9628]  ? __pfx_process_one_work+0x10/0x10
[  201.038322][ T9628]  ? assign_work+0x1a0/0x250
[  201.038332][ T9628]  worker_thread+0x6c1/0xef0
[  201.038346][ T9628]  ? __pfx_worker_thread+0x10/0x10
[  201.038356][ T9628]  kthread+0x3a4/0x760
[  201.038364][ T9628]  ? __pfx_kthread+0x10/0x10
[  201.038372][ T9628]  ? __pfx_kthread+0x10/0x10
[  201.038380][ T9628]  ? __pfx_kthread+0x10/0x10
[  201.038388][ T9628]  ? __pfx_kthread+0x10/0x10
[  201.038396][ T9628]  ? rcu_is_watching+0x12/0xc0
[  201.038407][ T9628]  ? __pfx_kthread+0x10/0x10
[  201.038415][ T9628]  ret_from_fork+0x45/0x80
[  201.038424][ T9628]  ? __pfx_kthread+0x10/0x10
[  201.038432][ T9628]  ret_from_fork_asm+0x1a/0x30
[  201.038451][ T9628]  </TASK>
[  201.038486][ T9628] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523
[  201.096082][ T9628] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 9628, name: kworker/u32:63
[  201.098641][ T9628] preempt_count: 0, expected: 0
[  201.099989][ T9628] RCU nest depth: 1, expected: 0
[  201.101428][ T9628] 3 locks held by kworker/u32:63/9628:
[  201.102956][ T9628]  #0: ffff88804e537948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  201.105896][ T9628]  #1: ffffc9000367fd18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  201.109226][ T9628]  #2: ffffffff8e3be0c0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0
[  201.111954][ T9628] CPU: 0 UID: 0 PID: 9628 Comm: kworker/u32:63 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  201.111968][ T9628] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  201.111976][ T9628] Workqueue: bond0 bond_mii_monitor
[  201.111992][ T9628] Call Trace:
[  201.111997][ T9628]  <TASK>
[  201.112001][ T9628]  dump_stack_lvl+0x16c/0x1f0
[  201.112016][ T9628]  __might_resched+0x3c0/0x5e0
[  201.112029][ T9628]  ? __pfx___might_resched+0x10/0x10
[  201.112044][ T9628]  down_read+0x74/0x480
[  201.112058][ T9628]  ? __pfx_down_read+0x10/0x10
[  201.112071][ T9628]  ? dev_map_notification+0x6a/0xb00
[  201.112082][ T9628]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  201.112101][ T9628]  wireless_nlevent_flush+0x1b/0x100
[  201.112113][ T9628]  wext_netdev_notifier_call+0xe/0x20
[  201.112124][ T9628]  notifier_call_chain+0xb9/0x410
[  201.112137][ T9628]  ? __pfx_wext_netdev_notifier_call+0x10/0x10
[  201.112150][ T9628]  call_netdevice_notifiers_info+0xbe/0x140
[  201.112168][ T9628]  netdev_state_change+0x113/0x150
[  201.112184][ T9628]  ? __pfx_netdev_state_change+0x10/0x10
[  201.112201][ T9628]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  201.112218][ T9628]  linkwatch_do_dev+0x12b/0x160
[  201.112234][ T9628]  linkwatch_sync_dev+0x181/0x210
[  201.112251][ T9628]  ? __pfx_ethtool_op_get_link+0x10/0x10
[  201.112264][ T9628]  ethtool_op_get_link+0x1d/0x70
[  201.112276][ T9628]  bond_check_dev_link+0x196/0x490
[  201.112290][ T9628]  ? __pfx_bond_check_dev_link+0x10/0x10
[  201.112308][ T9628]  bond_mii_monitor+0x3c0/0x2dc0
[  201.112327][ T9628]  ? __pfx_bond_mii_monitor+0x10/0x10
[  201.112345][ T9628]  ? rcu_is_watching+0x12/0xc0
[  201.112357][ T9628]  process_one_work+0x9cc/0x1b70
[  201.112370][ T9628]  ? __pfx_batadv_nc_worker+0x10/0x10
[  201.112385][ T9628]  ? __pfx_process_one_work+0x10/0x10
[  201.112398][ T9628]  ? assign_work+0x1a0/0x250
[  201.112408][ T9628]  worker_thread+0x6c1/0xef0
[  201.112422][ T9628]  ? __pfx_worker_thread+0x10/0x10
[  201.112432][ T9628]  kthread+0x3a4/0x760
[  201.112441][ T9628]  ? __pfx_kthread+0x10/0x10
[  201.112449][ T9628]  ? __pfx_kthread+0x10/0x10
[  201.112457][ T9628]  ? __pfx_kthread+0x10/0x10
[  201.112465][ T9628]  ? __pfx_kthread+0x10/0x10
[  201.112473][ T9628]  ? rcu_is_watching+0x12/0xc0
[  201.112483][ T9628]  ? __pfx_kthread+0x10/0x10
[  201.112492][ T9628]  ret_from_fork+0x45/0x80
[  201.112502][ T9628]  ? __pfx_kthread+0x10/0x10
[  201.112510][ T9628]  ret_from_fork_asm+0x1a/0x30
[  201.112530][ T9628]  </TASK>
[  201.112535][ T9628] 
[  201.179446][ T9628] =============================
[  201.180811][ T9628] [ BUG: Invalid wait context ]
[  201.182195][ T9628] 6.14.0-syzkaller-01103-g2df0c02dab82 #0 Tainted: G        W         
[  201.184452][ T9628] -----------------------------
[  201.185860][ T9628] kworker/u32:63/9628 is trying to lock:
[  201.187416][ T9628] ffffffff900e27d0 (net_rwsem){++++}-{4:4}, at: wireless_nlevent_flush+0x1b/0x100
[  201.189958][ T9628] other info that might help us debug this:
[  201.191737][ T9628] context-{5:5}
[  201.192913][ T9628] 3 locks held by kworker/u32:63/9628:
[  201.194801][ T9628]  #0: ffff88804e537948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  201.198692][ T9628]  #1: ffffc9000367fd18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  201.202093][ T9628]  #2: ffffffff8e3be0c0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0
[  201.204750][ T9628] stack backtrace:
[  201.205854][ T9628] CPU: 0 UID: 0 PID: 9628 Comm: kworker/u32:63 Tainted: G        W          6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  201.205871][ T9628] Tainted: [W]=WARN
[  201.205875][ T9628] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  201.205883][ T9628] Workqueue: bond0 bond_mii_monitor
[  201.205903][ T9628] Call Trace:
[  201.205908][ T9628]  <TASK>
[  201.205913][ T9628]  dump_stack_lvl+0x116/0x1f0
[  201.205927][ T9628]  __lock_acquire+0x3ff/0x1ba0
[  201.205942][ T9628]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  201.205961][ T9628]  lock_acquire+0x179/0x350
[  201.205975][ T9628]  ? wireless_nlevent_flush+0x1b/0x100
[  201.205986][ T9628]  ? __pfx___might_resched+0x10/0x10
[  201.206000][ T9628]  down_read+0x9b/0x480
[  201.206014][ T9628]  ? wireless_nlevent_flush+0x1b/0x100
[  201.206024][ T9628]  ? __pfx_down_read+0x10/0x10
[  201.206037][ T9628]  ? dev_map_notification+0x6a/0xb00
[  201.206048][ T9628]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  201.206068][ T9628]  wireless_nlevent_flush+0x1b/0x100
[  201.206079][ T9628]  wext_netdev_notifier_call+0xe/0x20
[  201.206089][ T9628]  notifier_call_chain+0xb9/0x410
[  201.206103][ T9628]  ? __pfx_wext_netdev_notifier_call+0x10/0x10
[  201.206115][ T9628]  call_netdevice_notifiers_info+0xbe/0x140
[  201.206137][ T9628]  netdev_state_change+0x113/0x150
[  201.206158][ T9628]  ? __pfx_netdev_state_change+0x10/0x10
[  201.206177][ T9628]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  201.206193][ T9628]  linkwatch_do_dev+0x12b/0x160
[  201.206208][ T9628]  linkwatch_sync_dev+0x181/0x210
[  201.206224][ T9628]  ? __pfx_ethtool_op_get_link+0x10/0x10
[  201.206238][ T9628]  ethtool_op_get_link+0x1d/0x70
[  201.206250][ T9628]  bond_check_dev_link+0x196/0x490
[  201.206268][ T9628]  ? __pfx_bond_check_dev_link+0x10/0x10
[  201.206288][ T9628]  bond_mii_monitor+0x3c0/0x2dc0
[  201.206305][ T9628]  ? __pfx_bond_mii_monitor+0x10/0x10
[  201.206322][ T9628]  ? rcu_is_watching+0x12/0xc0
[  201.206335][ T9628]  process_one_work+0x9cc/0x1b70
[  201.206352][ T9628]  ? __pfx_batadv_nc_worker+0x10/0x10
[  201.206372][ T9628]  ? __pfx_process_one_work+0x10/0x10
[  201.206384][ T9628]  ? assign_work+0x1a0/0x250
[  201.206393][ T9628]  worker_thread+0x6c1/0xef0
[  201.206405][ T9628]  ? __pfx_worker_thread+0x10/0x10
[  201.206415][ T9628]  kthread+0x3a4/0x760
[  201.206424][ T9628]  ? __pfx_kthread+0x10/0x10
[  201.206432][ T9628]  ? __pfx_kthread+0x10/0x10
[  201.206440][ T9628]  ? __pfx_kthread+0x10/0x10
[  201.206448][ T9628]  ? __pfx_kthread+0x10/0x10
[  201.206456][ T9628]  ? rcu_is_watching+0x12/0xc0
[  201.206466][ T9628]  ? __pfx_kthread+0x10/0x10
[  201.206478][ T9628]  ret_from_fork+0x45/0x80
[  201.206492][ T9628]  ? __pfx_kthread+0x10/0x10
[  201.206504][ T9628]  ret_from_fork_asm+0x1a/0x30
[  201.206562][ T9628]  </TASK>
[  201.289585][    C0] vkms_vblank_simulate: vblank timer overrun
[  201.302343][T12266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  201.306649][T12266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  201.310005][T12266] veth1_vlan: left promiscuous mode
[  201.311955][T12266] veth0_vlan: left promiscuous mode
[  201.313655][T12266] veth0_vlan: entered promiscuous mode
[  201.316822][T12266] veth1_vlan: entered promiscuous mode
[  201.319658][T12266] veth1_macvtap: left promiscuous mode
[  201.321501][T12266] veth0_macvtap: left promiscuous mode
[  201.323386][T12266] veth0_macvtap: entered promiscuous mode
[  201.325739][T12266] veth1_macvtap: entered promiscuous mode
[  201.332095][T12266] 8021q: adding VLAN 0 to HW filter on device bond1
[  201.335356][T12266] 8021q: adding VLAN 0 to HW filter on device bond2
[  201.344739][T12266] 8021q: adding VLAN 0 to HW filter on device bond3
[  201.347797][T12266] 8021q: adding VLAN 0 to HW filter on device bond4
[  201.361740][T12266] 8021q: adding VLAN 0 to HW filter on device bond5
[  201.365501][T12266] 8021q: adding VLAN 0 to HW filter on device bond6
[  201.368684][T12266] 8021q: adding VLAN 0 to HW filter on device bond7
[  201.371019][T12266] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  201.373493][T12266] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  201.376780][T12266] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  201.379191][T12266] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  201.382304][T12266] veth0_to_batadv: entered promiscuous mode
[  201.390677][ T9627] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.393459][ T9627] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.405157][ T9627] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.408056][ T9627] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.486247][T12269] bridge0: port 3(syz_tun) entered disabled state
[  201.495094][T12269] syz_tun (unregistering): left allmulticast mode
[  201.496944][T12269] syz_tun (unregistering): left promiscuous mode
[  201.498770][T12269] bridge0: port 3(syz_tun) entered disabled state
[  201.526119][ T9620] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  201.529316][ T9620] bond2: (slave veth3): making interface the new active one
[  201.532293][ T9620] bond2: active interface up!
[  201.548872][T12266] bridge0: port 3(syz_tun) entered disabled state
[  201.575899][T12266] syz_tun (unregistering): left promiscuous mode
[  201.577967][T12266] bridge0: port 3(syz_tun) entered disabled state
[  202.205335][ T9619] bridge_slave_1: left allmulticast mode
[  202.206966][ T9619] bridge_slave_1: left promiscuous mode
[  202.208568][ T9619] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.210998][ T9619] bridge_slave_0: left allmulticast mode
[  202.212621][ T9619] bridge_slave_0: left promiscuous mode
[  202.214352][ T9619] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.219109][ T9619] bridge_slave_1: left allmulticast mode
[  202.221301][ T9619] bridge_slave_1: left promiscuous mode
[  202.223388][ T9619] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.226519][ T9619] bridge_slave_0: left allmulticast mode
[  202.228760][ T9619] bridge_slave_0: left promiscuous mode
[  202.231050][ T9619] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.382404][ T9619] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  202.895434][ T9619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.899457][ T9619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  202.903505][ T9619] bond0 (unregistering): (slave team0): Releasing backup interface
[  202.908907][ T9619] bond0 (unregistering): Released all slaves
[  203.017564][ T9619] bond1 (unregistering): Released all slaves
[  203.020863][ T9619] bond2 (unregistering): Released all slaves
[  203.024083][ T9619] bond3 (unregistering): Released all slaves
[  203.098049][ T9619] bond4 (unregistering): Released all slaves
[  203.101305][ T9619] bond5 (unregistering): Released all slaves
[  203.104745][ T9619] bond6 (unregistering): Released all slaves
[  203.186178][ T9619] bond7 (unregistering): Released all slaves
[  203.189412][ T9619] bond8 (unregistering): Released all slaves
[  203.193312][ T9619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  203.196763][ T9619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  203.199843][ T9619] bond0 (unregistering): Released all slaves
[  203.294795][ T9619] : left promiscuous mode
[  203.415533][ T9619] tipc: Left network mode
[  203.563764][ T9619] hsr_slave_0: left promiscuous mode
[  203.566366][ T9619] hsr_slave_1: left promiscuous mode
[  203.568718][ T9619] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.571937][ T9619] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.577538][ T9619] hsr_slave_0: left promiscuous mode
[  203.579968][ T9619] hsr_slave_1: left promiscuous mode
[  203.582338][ T9619] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.585976][ T9619] batman_adv: batadv0: Removing interface: batadv_slave_1
[  204.218336][ T9619] team0 (unregistering): Port device team_slave_1 removed
[  204.317253][ T9619] team0 (unregistering): Port device team_slave_0 removed
[  205.061245][ T9619] team0 (unregistering): Port device team_slave_1 removed
[  205.111326][ T9619] team0 (unregistering): Port device team_slave_0 removed
[  205.282765][   T40] audit: type=1400 audit(2000002681.051:50053): avc:  denied  { sys_chroot } for  pid=12313 comm="dhcpcd" capability=18  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  205.290291][   T40] audit: type=1400 audit(2000002681.051:50054): avc:  denied  { setgid } for  pid=12313 comm="dhcpcd" capability=6  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  205.298209][   T40] audit: type=1400 audit(2000002681.051:50055): avc:  denied  { setrlimit } for  pid=12313 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1
[  205.841095][ T9619] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.908250][ T9619] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.988057][ T9619] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.049373][ T9619] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.122958][ T9619] bridge_slave_1: left allmulticast mode
[  206.125254][ T9619] bridge_slave_1: left promiscuous mode
[  206.127692][ T9619] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.132054][ T9619] bridge_slave_0: left allmulticast mode
[  206.134951][ T9619] bridge_slave_0: left promiscuous mode
[  206.137295][ T9619] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.358582][ T9619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  206.362891][ T9619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  206.368116][ T9619] bond0 (unregistering): (slave team0): Releasing backup interface
[  206.371982][ T9619] bond0 (unregistering): Released all slaves
[  206.376579][ T9619] bond1 (unregistering): Released all slaves
[  206.381348][ T9619] bond2 (unregistering): (slave bond3): Releasing backup interface
[  206.384755][ T9619] bond2 (unregistering): Released all slaves
[  206.456423][ T9619] bond3 (unregistering): Released all slaves
[  206.760810][ T9619] hsr_slave_0: left promiscuous mode
[  206.763132][ T9619] hsr_slave_1: left promiscuous mode
[  206.765367][ T9619] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.767932][ T9619] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.770832][ T9619] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.773428][ T9619] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.777521][ T9619] veth1_macvtap: left promiscuous mode
[  206.779481][ T9619] veth0_macvtap: left promiscuous mode
[  206.781447][ T9619] veth1_vlan: left promiscuous mode
[  206.783328][ T9619] veth0_vlan: left promiscuous mode
[  206.983585][ T9619] team0 (unregistering): Port device team_slave_1 removed
[  207.019578][ T9619] team0 (unregistering): Port device team_slave_0 removed
[  207.493226][ T9619] IPVS: stop unused estimator thread 0...
[  207.595183][ T9619] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.599063][ T9619] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.664687][ T9619] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.668569][ T9619] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.734041][ T9619] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.737982][ T9619] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.797031][ T9619] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.801641][ T9619] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.899173][ T9619] bridge_slave_1: left promiscuous mode
[  207.900919][ T9619] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.904448][ T9619] bridge_slave_0: left promiscuous mode
[  207.906145][ T9619] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.019843][ T9619] bond1 (unregistering): (slave gretap1): Releasing backup interface
[  208.054527][ T9619] geneve0 (unregistering): left allmulticast mode
[  208.057701][ T9619] team0: Port device geneve0 removed
[  208.070056][ T9619] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  208.316697][ T9619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  208.320758][ T9619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.325061][ T9619] bond0 (unregistering): (slave 
): Releasing backup interface
[  208.329727][ T9619] bond0 (unregistering): Released all slaves
[  208.425083][ T9619] bond1 (unregistering): Released all slaves
[  208.497704][ T9619] bond2 (unregistering): (slave veth3): Releasing active interface
[  208.500297][ T9619] bond2 (unregistering): Released all slaves
[  208.569955][ T9619] bond3 (unregistering): Released all slaves
[  208.633888][ T9619] bond4 (unregistering): Released all slaves
[  208.637702][ T9619] bond5 (unregistering): Released all slaves
[  208.719163][ T9619] bond6 (unregistering): Released all slaves
[  208.725475][ T9619] bond7 (unregistering): Released all slaves
[  210.704584][ T9619] hsr_slave_0: left promiscuous mode
[  210.707061][ T9619] hsr_slave_1: left promiscuous mode
[  210.710913][ T9619] veth0_to_batadv: left promiscuous mode
[  210.713360][ T9619] veth1_macvtap: left promiscuous mode
[  210.715716][ T9619] veth0_macvtap: left promiscuous mode
[  210.717893][ T9619] veth1_vlan: left promiscuous mode
[  210.720130][ T9619] veth0_vlan: left promiscuous mode

VM DIAGNOSIS:
09:35:47  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff110060f5ade RBX=8000000041d62867 RCX=ffffffff82053baf RDX=ffff8880295d2440
RSI=ffffffff82053bbc RDI=0000000000000001 RBP=ffff8880239f5a00 RSP=ffffc9000351f838
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=0000000000000001 R13=ffff8880307ad6f0 R14=dffffc0000000000 R15=0000000000000122
RIP=ffffffff82053bde RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6a54000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f7fe86d7d60 CR3=0000000028784000 CR4=00352ef0
DR0=00000000ffff3800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7fe7b7c6a3 00007f7fe7b7c6a3
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4365c480 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555ef869c8 000055555ef864f0
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555ef0c498
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555ef9018d 000055555ef8d6f0
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0413 c00302100013b003 19ffc01000049003 1b80040480030480
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100014800401 0000060806060164 da00080014e00300 100014d0030fffff
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff0414c003 02100014b00319ff c010005d90033e02 080a80030a80045d
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80035d800414a003 0008001490030fff ffffffffff041480 0300100013800401
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000040806060153 d400020007000800 13e00300100013d0 030fffffffffffff
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000080000000 RBX=0000000000000003 RCX=ffffffff81ff424a RDX=ffff888029adc880
RSI=0000000000000007 RDI=0000000000000005 RBP=ffff888020ab0c00 RSP=ffffc90004bce8e8
R8 =0000000000000005 R9 =0000000000000007 R10=0000000000000003 R11=0000000000000000
R12=ffff888020ab0c80 R13=ffffed1004156190 R14=0000000000000003 R15=dffffc0000000000
RIP=ffffffff81baefec RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5e137d56c0 ffffffff 00c00000
GS =0000 ffff8880d6b54000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fff1d119f98 CR3=0000000062066000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=8f3b48fc8f3b48fc 8f3b48fc8f3b48fc 8f3b48fc8f3b48fc 8f3b48fc8f3b48fc 8f3b48fc8f3b48fc 8f3b48fc8f3b48fc 8f3b48fc8f3b48fc 8f3b48fc8f3b48fc
ZMM22=37b3eaae37b3eaae 37b3eaae37b3eaae 37b3eaae37b3eaae 37b3eaae37b3eaae 37b3eaae37b3eaae 37b3eaae37b3eaae 37b3eaae37b3eaae 37b3eaae37b3eaae
ZMM23=6fc6f2b66fc6f2b6 6fc6f2b66fc6f2b6 6fc6f2b66fc6f2b6 6fc6f2b66fc6f2b6 6fc6f2b66fc6f2b6 6fc6f2b66fc6f2b6 6fc6f2b66fc6f2b6 6fc6f2b66fc6f2b6
ZMM24=9853a19d9853a19d 9853a19d9853a19d 9853a19d9853a19d 9853a19d9853a19d 9853a19d9853a19d 9853a19d9853a19d 9853a19d9853a19d 9853a19d9853a19d
ZMM25=3575baa63575baa6 3575baa63575baa6 3575baa63575baa6 3575baa63575baa6 3575baa63575baa6 3575baa63575baa6 3575baa63575baa6 3575baa63575baa6
ZMM26=2082c5e72082c5e7 2082c5e72082c5e7 2082c5e72082c5e7 2082c5e72082c5e7 2082c5e72082c5e7 2082c5e72082c5e7 2082c5e72082c5e7 2082c5e72082c5e7
ZMM27=6ddaacfb6ddaacfb 6ddaacfb6ddaacfb 6ddaacfb6ddaacfb 6ddaacfb6ddaacfb 6ddaacfb6ddaacfb 6ddaacfb6ddaacfb 6ddaacfb6ddaacfb 6ddaacfb6ddaacfb
ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=c3070000c3070000 c3070000c3070000 c3070000c3070000 c3070000c3070000 c3070000c3070000 c3070000c3070000 c3070000c3070000 c3070000c3070000
info registers vcpu 2

CPU#2
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff854358b5 RDI=ffffffff9ad854c0 RBP=ffffffff9ad85480 RSP=ffffc9000367f428
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=0000000000000020 R14=ffffffff9ad85480 R15=ffffffff85435850
RIP=ffffffff854358df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6c54000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c3a981d CR3=000000002b91c000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000004000040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec71366d0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e15a0f282
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e15a0f28f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e15a0f289
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e15a0f29d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e15a0f323
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e15a0f401
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000216c65 RBX=0000000000000003 RCX=ffffffff8b5da2f9 RDX=0000000000000000
RSI=ffffffff8dbabe7c RDI=ffffffff8bf367e0 RBP=ffffed1003b50000 RSP=ffffc90000197e00
R8 =0000000000000001 R9 =ffffed100d4e65bd R10=ffff88806a732deb R11=0000000000000000
R12=0000000000000003 R13=ffff88801da80000 R14=ffffffff90826e10 R15=0000000000000000
RIP=ffffffff8b5db6ef RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6d54000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000559ae9ecd7d8 CR3=0000000040bdc000 CR4=00352ef0
DR0=00000000ffff3800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5bf83890 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fecbc60f282
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fecbc60f28f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fecbc60f289
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fecbc60f29d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fecbc60f323
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fecbc60f401
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000c4
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000000c4
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000