last executing test programs:

2.422863307s ago: executing program 2 (id=332):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2b102df4600769d10ce53203", 0x8c}, {&(0x7f0000001a80)="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", 0x5e6}], 0x2, 0x0, 0x0, 0x2c}, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x109, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x42c}]}, 0x28}}, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x90000, 0xa0)

1.85675546s ago: executing program 2 (id=340):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x409, 0x3040b, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000025c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002600)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x20}}, 0x0)

1.811174279s ago: executing program 2 (id=341):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x4c}}, 0x0) (async, rerun: 32)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) (async, rerun: 32)
ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040))
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000800)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) (async)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmmsg$inet6(r5, &(0x7f0000004940)=[{{0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000001fc0)="368f17", 0x3}, {&(0x7f00000033c0)='B', 0x1}], 0x2}}], 0x1, 0x4004004)

1.721097569s ago: executing program 2 (id=345):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x200, "451a95084601614525539dd9d8bba758a246e85ed13b3ad571d21e4384cb5727", <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1, {0x2}}, './file0\x00'})
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0)
close(r3)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r4=>r2}, './file0\x00'})
ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000140)={"12eee6572f9f95640f93553191957fb17318c8a7c139b7eb5330bf69ff7764ca", r1})
openat$cgroup_subtree(r4, &(0x7f0000000180), 0x2, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x10)
ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000200)={0xc, <r6=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000240)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000280)={0x28, 0x7, r6, r7, 0x6, 0x8d29, 0x7})
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000002c0)={0x4, <r8=>0xffffffffffffffff, 0x1})
ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f0000000340)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000300)=0x4dc0c583})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000380)={"0021519f47b0026ce0af6b0a0433eeab3b61887460a72d7f84f4e15d8058ee9e", r2, <r9=>0xffffffffffffffff})
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
read(r10, &(0x7f00000003c0)=""/197, 0xc5)
timerfd_create(0x2e12597cf5b5210c, 0x80800)
ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f00000004c0)={0x7c, 0xfffffffffffffff1, 0x3, 0x2fb, 0x1, 0x8, "3467d5e54f5c29dd68947c8f16776f09", 0x9, 0x41, 0x9, 0xd8, 0xf, 0x3, 0x1})
r11 = syz_io_uring_complete(0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r12=>r11, {0xd}}, './file0\x00'})
connect$vsock_stream(r11, &(0x7f0000000540)={0x28, 0x0, 0x0, @hyper}, 0x10)
ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r12, 0x4068aea3, &(0x7f0000000580))
setsockopt$inet6_dccp_int(r2, 0x21, 0x1a, &(0x7f0000000600)=0x7, 0x4)
r13 = syz_create_resource$binfmt(&(0x7f0000000640)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r13, 0x41, 0x1ff)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r12, 0xc0189379, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r14=>r9}, './file0\x00'})
openat$cgroup_ro(r14, &(0x7f00000006c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)=@ipv6_delrule={0x90, 0x21, 0x1, 0x70bd26, 0x25dfdbfe, {0xa, 0x30, 0x10, 0x6, 0x8, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e22, 0x4e21}}, @FRA_DST={0x14, 0x1, @mcast1}, @FRA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e22}}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x24}}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @FRA_SRC={0x14, 0x2, @loopback}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)

1.5311322s ago: executing program 0 (id=351):
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', <r1=>0x0})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0xd22, 0x4) (async)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x16, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)
sendto$packet(r0, &(0x7f00000002c0)="913dcf3296db5d6d52d2f3b42d66", 0xe, 0x0, 0x0, 0x0) (async)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000)

1.530218319s ago: executing program 0 (id=353):
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r0, r1, 0x4, 0x0, @void}, 0x10)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0xe2)
ftruncate(r3, 0x3f)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, 0x0, 0x30, 0x9, @val=@uprobe_multi={&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900)=[0x4], 0x0, 0x4, 0x1}}, 0x40)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000050601020000000000000000000000020900020073797a32000000000900030073797a30000000000600010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x4000040)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
r6 = io_uring_setup(0x4b00, &(0x7f0000000140)={0x0, 0x97a3})
r7 = syz_open_dev$dri(&(0x7f0000000040), 0x100006, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r8, 0x0, 0x80, 0x5, 0x9, 0x0, {0xa, 0xd6, 0x1c, 0x7, 0xfe, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x5, "cb630dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0a0e5c"}})
close_range(r6, 0xffffffffffffffff, 0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)

1.429175321s ago: executing program 0 (id=354):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f00000077c0)={0x0, 0x0, &(0x7f0000007780)={&(0x7f0000007740)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1)
sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb8, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x99, 0x3, "bad99f80735254a9daae8a232e3c037253a442c1570d9f218db63e48864a6bfa3dcebf135b0df52b136dceda26fc23aff2ccc82b7453fbcfc9949579b05d6e100ac7e6757012724607a15fa1ba63a80c762c74f949bf4edaaae24da00a6f1f306009033b2f4f89efb2fa941aa1bc9c48fa6d90da2e3a5ce3ca6ea6c5ac486a9cddedb5579a5b913497bb136add25fc6a086bfcd59b"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4001}, 0x20004809)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
write$cgroup_int(r5, &(0x7f0000000180)=0x3, 0x12)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xa2f, 0x6c}}}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = dup(r8)
getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b80)=@newtaction={0xb0, 0x30, 0x301, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x1300}, [{0x9c, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffe}, 0x1, r10}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0xe3, 0x8, 0x3, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xb0}}, 0x0)
syz_open_dev$usbmon(&(0x7f0000001980), 0x80000001, 0x12f800)

1.360522975s ago: executing program 0 (id=355):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'rose0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x4, 0x4, 0x3, 0x0, r3, 0x0, '\x00', r1, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
prctl$PR_MCE_KILL(0x48, 0x0, 0x2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c90010000c000500171f08"], 0x15)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil)
r7 = syz_open_procfs$pagemap(0x0, 0x0)
ioctl$PAGEMAP_SCAN(r7, 0xc0606610, 0x0)
dup(r7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000001000000800"/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYRESHEX=r8, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000a80700000050000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1.240004976s ago: executing program 0 (id=356):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
syz_clone3(&(0x7f0000000540)={0x100808900, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340), {0x5}, &(0x7f00000003c0)=""/7, 0x7, &(0x7f0000000400)=""/251, &(0x7f0000000500)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x8001)
r4 = getpgid(0x0)
fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x2, r4})
syz_open_procfs(r4, &(0x7f0000000180)='pagemap\x00')
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="188000000000000000000000000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000c000500ff000000000000000c0002000000020000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r7], 0x90}}, 0x0)

1.211013888s ago: executing program 0 (id=357):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100))
syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pselect6(0x401f, &(0x7f0000000500), 0x0, &(0x7f0000000040)={0xff}, 0x0, 0x0)
syz_usb_disconnect(r0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
syz_clone(0xa00200, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0)

979.652208ms ago: executing program 1 (id=358):
r0 = socket(0x1d, 0x2, 0x3)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0)

977.39763ms ago: executing program 1 (id=359):
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x54, 0x1, 0xfffe, {0x5, 0x1}, {0x4c, 0x2}, @rumble={0x101, 0xffff}})
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x20000fff8, 0x8c2502)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x54, 0x1, 0xfffe, {0x5, 0x1}, {0x4c, 0x2}, @rumble={0x101, 0xffff}}) (async)
syz_open_dev$evdev(&(0x7f0000000000), 0x20000fff8, 0x8c2502) (async)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) (async)

911.221878ms ago: executing program 1 (id=360):
syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) (async)
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x5, @vbi={0x10, 0x1, 0x4, 0x38414261, [0xd, 0xfffffffb], [0x800, 0xffffffff], 0x13a}})

911.007182ms ago: executing program 1 (id=361):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000084)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0300000000000000000003000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0)

861.072798ms ago: executing program 1 (id=362):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1000, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r3, 0xc00c6211, &(0x7f0000000080))
ppoll(&(0x7f0000000000)=[{r3, 0x2108}], 0x1, 0x0, 0x0, 0x0)
r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x4)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
r5 = socket$kcm(0x29, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0xc8, 0x0, &(0x7f0000000600)=[@acquire_done, @dead_binder_done, @enter_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x5, 0x1, 0x3b}, @fda={0x66646185, 0x9, 0x0, 0xb}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}}, @enter_looper, @acquire={0x40046305, 0x1}, @release={0x40046306, 0x1}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x1, &(0x7f00000002c0), 0x0, 0x2, 0x38}, @fd={0x66642a85, 0x0, r5}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}}, &(0x7f0000000300)={0x0, 0x28, 0x40}}, 0x40}], 0xec, 0x0, &(0x7f0000000700)="99839441e0808ef6029f42f071eeffcfbd4db7101ee43d4849c8b72bd737ff5ba2c234ed988412e0098dc61097243f5ef718b893a8789c970eb3fd1858cd25c160a1ae79b90ba3bef7ab4ac5096de67b516c7742fc99ae8050cf112fad9cb6bb87cc4c7575c6fef3b18a0a5c126dcf792a58078547b03e8f907b8881e0b7b82e6927f5df45bcf88e33daa302506e78e679c78ccc641062970e911db3374e808babcfdb6d3899190a739e487eea38a42d222d5e369b91ddb843ed08c3178926cdd9b54d769d94f5c1ed625dfb77ef521e3ad177404be02a48a2a10fea17b525908fccd829b9707059a3422fba"})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x80a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r8, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="280000000b14010026bd7000fddbdf25080001000000000008003f00000000000800030021000000"], 0x28}}, 0x0)
sendmmsg$unix(r7, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)="16", 0x1}], 0x1, 0x0, 0x0, 0x4000000}}], 0x1, 0x0)

847.017603ms ago: executing program 2 (id=363):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x20010, 0xffffffffffffffff, 0x1f1b000) (async)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000020000000000"], &(0x7f0000000180)=""/89, 0x1a, 0x59, 0x0, 0x0, 0x0, @void, @value}, 0x28)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000580)={<r3=>0x0, 0x3, 0x96a53adb79021194, [0xffffffffffffff81, 0xffffffffffffffce, 0xff, 0xffffffff, 0x7], [0x7, 0xfff, 0xe6, 0x65e7, 0x4, 0x100000001, 0x6, 0x5, 0x2, 0xfffffffffffff3ca, 0x5, 0x5, 0x5, 0x1, 0x8001, 0x9, 0x98d, 0xfffffffffffffff9, 0x3, 0xffffffffffffa90d, 0xcba, 0xa877, 0x6, 0x7, 0x80000000, 0x5, 0x6, 0x240000000000, 0x2, 0x8000000000000000, 0x80, 0x86, 0x95b, 0x8, 0x6, 0x7ff, 0x5, 0x58f0, 0x8000000000000001, 0x5, 0x9e, 0x0, 0x1, 0x8, 0x9, 0x2, 0xb1e, 0x10000, 0x1ff, 0x2, 0x800, 0x5, 0xa42e, 0x9, 0xa8a, 0x5, 0x41, 0x9, 0x2, 0x9, 0x80000000, 0x1, 0x4, 0x4, 0x100000000, 0x80000000, 0xe, 0x0, 0x50cf, 0x0, 0x81, 0x7f, 0x8, 0x0, 0x3, 0x0, 0x2, 0x98d, 0x5, 0x8000000000000000, 0x5, 0x5, 0x6, 0x6, 0x36, 0x401, 0x5, 0x156, 0x8, 0x9, 0x3, 0x401, 0x4, 0xd, 0xfffffffffffffff7, 0x401, 0x9, 0x7, 0xa35, 0x61c9, 0x1, 0x2, 0xfff, 0x5, 0xd3c, 0x3, 0x8000000000000000, 0x5, 0x1, 0xffffffffffffff00, 0x7, 0x9, 0x3, 0x2, 0xf434, 0x8, 0x100000000, 0x6, 0x2, 0x4956, 0x8]})
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f00000009c0)={r3, 0xa, 0x1}) (async)
vmsplice(r2, &(0x7f00000001c0), 0x10000000000002d9, 0x0) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0xfffffffe}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "cd6d345ef5da874d"}, 0x38) (async)
splice(r1, 0x0, r4, 0x0, 0xfdef, 0x0)

761.435079ms ago: executing program 3 (id=366):
r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r2 = socket$netlink(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r3, 0x8b2a, &(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x101180, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000480)=@delqdisc={0x0, 0x25, 0x2, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff1}, {0x8, 0x10}, {0x6, 0x8}}, [@TCA_RATE={0x0, 0x5, {0x3}}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x1d51}, @TCA_RATE={0x0, 0x5, {0x38, 0x5}}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x800}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x5}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x0, 0x0, 0xfffd, 0x2e68, 0x1, 0x3, 0x4}}, {0x0, 0x2, [0x7, 0x3]}}, {{0x0, 0x1, {0x86, 0x4, 0x7, 0x5, 0x2, 0x8001, 0x6c}}, {0x0, 0x2, [0x7ff, 0xfffa, 0x2]}}, {{0x0, 0x1, {0x4, 0x10, 0x9, 0xffff, 0x2, 0x1, 0x200008}}, {0x0, 0x2, [0xfff7, 0x4, 0x3, 0x3ff, 0x7, 0x4]}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4810) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x2000}, 0x4) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async)
r6 = accept4(r5, 0x0, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000030a05000000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050e03000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000908000240000000010900010073797a3000000000140000001100010000000000000000000000000a"], 0xd8}}, 0x0) (async)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r8=>0x0})
connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r8, 0x3, {0x0, 0xf0, 0x3}, 0x1}, 0x18) (async)
sendmmsg$unix(r6, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)="e5", 0x1}, {&(0x7f0000000380)="f56e083b2ed241eb727c6ef5298126c2", 0x10}], 0x2, 0x0, 0x0, 0x40884}}], 0x1, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) (async)
sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8040) (async)
sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000001380)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}}, 0x1c, 0x0}}], 0x1, 0x4008040)

680.646335ms ago: executing program 3 (id=367):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x5, 0x3, 0x8000000000000000})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x4, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8848}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5e}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x885}, 0x40)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x140f, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x8044)
r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x20040)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r0) (async)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r0)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40480)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bond\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) (async)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bond\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8080)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)}, 0x10) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@ipv6_getaddr={0x20, 0x16, 0x4, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x92, 0xfe, r3}, [@IFA_FLAGS={0x8, 0x8, 0x204}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000a00)=[{{&(0x7f0000000780)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f0000000980)=[{&(0x7f00000007c0)="7fbb070f101fe0967f404a7a22acbb5711b53cb4324226054287cd72fb9d65dcc8593a1e668fa40dc169a44fce6bb7f70e55f53d9c0e008f0e17f4614c5b4976d744", 0x42}, {&(0x7f0000000840)="a9b4b3ff6617478edad335640ae61d04315393a0d7ebac7dfd9b65097b35400467f939062b5eec25bd62673364c6813d0e3df89de8170f43968b7a5e9b84bb8dc6098da3d0f410f0a06381b858c5696560dba25b77c9e138ad5c22b99c4d31e0e32fda24695d47f35f8067c29f59e6274cc79261c09df4812fc772ad6859811408eb57fd929a92b02caaac68fee732e55ee467add87f29ba6d48a42258edd3c890b85a5f7918f7bbbc62dd57a6c5e7878e50d87219b2d139a81f2a673a2a24189f5902549d6ae32e38130c458291", 0xce}, {&(0x7f0000000940)="0c7d9d6782f0fab5a957d6f0416c7d88fb595b9948c1fda49715", 0x1a}], 0x3, &(0x7f00000009c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}}], 0x1, 0xc090)
ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111)
socket$inet6(0xa, 0x80000, 0xe0a) (async)
socket$inet6(0xa, 0x80000, 0xe0a)
r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000a80))
lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
mount$9p_rdma(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x8, &(0x7f0000000c40)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x2}}, {@rq={'rq', 0x3d, 0x100000001}}, {@timeout}, {@rq={'rq', 0x3d, 0x1}}, {@timeout={'timeout', 0x3d, 0x3}}], [{@smackfsroot={'smackfsroot', 0x3d, '&'}}, {@fowner_lt={'fowner<', r5}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xc5*!(-$!!!@.*-[-^]+!$'}}]}}) (async)
mount$9p_rdma(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x8, &(0x7f0000000c40)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x2}}, {@rq={'rq', 0x3d, 0x100000001}}, {@timeout}, {@rq={'rq', 0x3d, 0x1}}, {@timeout={'timeout', 0x3d, 0x3}}], [{@smackfsroot={'smackfsroot', 0x3d, '&'}}, {@fowner_lt={'fowner<', r5}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xc5*!(-$!!!@.*-[-^]+!$'}}]}})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000d80), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d80), 0xffffffffffffffff)
sendmsg$NFC_CMD_DEP_LINK_UP(r6, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r7, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_COMM_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async)
sendmsg$NFC_CMD_DEP_LINK_UP(r6, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r7, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_COMM_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/power/pm_print_times', 0x4e0200, 0x84)
sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'fowner<'}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'cma\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x44}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x8091)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001040), r0) (async)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001040), r0)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000001300)={&(0x7f0000001000), 0xc, &(0x7f00000012c0)={&(0x7f0000001080)={0x23c, r8, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xba7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc069}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x65}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff96}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x10000, @loopback, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0xc}, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xe8be, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x47}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x169}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffd0}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc85}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x42dd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x39b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0x23c}}, 0x10)
sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1f}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x400d5)
socket$kcm(0x29, 0x5, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=@dellink={0x34, 0x11, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20060, 0x20203}, [@IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_LINK_NETNSID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
execve(&(0x7f0000001540)='./file0\x00', &(0x7f0000001700)={[&(0x7f0000001580)='/selinux/avc/cache_stats\x00', &(0x7f00000015c0)='\x00', &(0x7f0000001600)='\x00', &(0x7f0000001640)='cma\x00', &(0x7f0000001680)='veth1_to_bond\x00', &(0x7f00000016c0)='127.0.0.1\x00']}, &(0x7f00000019c0)={[&(0x7f0000001740)='%\x00', &(0x7f0000001780)='\x00', &(0x7f00000017c0)='\x00', &(0x7f0000001800)='(]\\}/:\xc7#%#\x00', &(0x7f0000001840)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000001880)='issm\x00', &(0x7f00000018c0)='%(+\x00', &(0x7f0000001900)='/{\x00', &(0x7f0000001940)='a\x00', &(0x7f0000001980)='\xaa\xaa\xaa\xaa\xaa']})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_START_REQ(r9, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x54, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0xfc}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xc}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x7}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x1)
fsetxattr$security_selinux(r0, &(0x7f0000001b80), &(0x7f0000001bc0)='system_u:object_r:initrc_exec_t:s0\x00', 0x23, 0x3)

680.393452ms ago: executing program 3 (id=368):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, &(0x7f0000000080)=0x4) (async)
ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, &(0x7f0000000080)=0x4)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44)

530.928128ms ago: executing program 3 (id=369):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', <r2=>0x0})
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @private}, 0x10)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000140))
getsockopt$inet_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3c, &(0x7f0000000180)=[{0x0, 0x80}, {0x1, 0x1}]}, 0x10)
connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x7, {0x43, 0x0, 0x4}}, 0x10)
r5 = syz_open_dev$midi(&(0x7f00000001c0), 0xac, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0205710, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES16=r2, @ANYBLOB="00000000000000000c00028006000900"/36], 0x3c}}, 0x0)
r7 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r7, &(0x7f0000000a00)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="a90500000080f70e0001338bb33501000000002d74f90000000000a3692bc7e6", 0x20}, {&(0x7f00000006c0)="ecdcc499", 0x4}], 0x2}}, {{&(0x7f0000000240)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x2, 0x80)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r2, 0x11, 0x6}, 0x10)
ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000080))

530.490265ms ago: executing program 3 (id=370):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
signalfd(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r3, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000900000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYRES16=r0], 0x20}}, 0x0)
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [""]}, 0xfffffffffffffe95}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000180)=ANY=[])
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x43, 0xa0, 0x90, 0x98, 0x1b0, 0x178, 0x178, 0x1b0, 0x178, 0x49, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'bond_slave_0\x00', 'wlan1\x00'}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp={{0x28}, {0x0, "84a2"}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010102, [0x0, 0xffffffff], 0x4e23, 0x4e21, 0x4e21, 0x4e22, 0x8, 0x101, 0x7507, 0x5, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8)
r9 = socket$inet(0x2, 0x3, 0x2)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1)
setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vlan0\x00'})
r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r11 = socket(0x10, 0x3, 0x0)
write(r11, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24)
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000002c0)=<r12=>0x0)
bind$nfc_llcp(r11, &(0x7f0000000240)={0x27, r12, 0x0, 0x0, 0x0, 0x0, "d9298498abdbb7f061bd1ca44c226af5160e961711a07760760bee55970000008000", 0x13}, 0x60)
readv(r10, &(0x7f0000000000)=[{&(0x7f0000000100)=""/72, 0x48}], 0x100001dd)
socket$kcm(0x10, 0x2, 0x0)

310.719951ms ago: executing program 3 (id=371):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000002140)=0x7ff, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
syz_emit_ethernet(0x16, &(0x7f0000000380)=ANY=[], 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000))
r5 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00')
lseek(r5, 0x1, 0x3)
getsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f00000000c0)=0x8, &(0x7f00000002c0)=0x1)
r6 = semget$private(0x0, 0x6, 0x0)
semtimedop(r6, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0)
semtimedop(r6, &(0x7f0000000040)=[{}, {0x0, 0x0, 0x800}], 0x2, 0x0)
semctl$GETZCNT(r6, 0x5, 0xf, 0x0)
read(r4, &(0x7f0000000140)=""/237, 0x20)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000080), 0x200000, 0x4)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r3, @ANYBLOB="010000000000a3f9185d000000000100000022cc9974f0832f5ee86bc39bacd65c2309a4b567960a8ff6a80f60a67737de49"], 0x14}}, 0x0)

605.621µs ago: executing program 1 (id=372):
r0 = io_uring_setup(0x175c, &(0x7f000009df80))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f0000000b80)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000540)={0x0, <r2=>0x0, "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", "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"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001540)={{r2, 0xffffffffffffff01, 0xa, 0x9433, 0xffffffffffffffff, 0x40f, 0x400, 0x0, 0xb6, 0xfff, 0xfffffff7, 0x5, 0x7f, 0x631a, 0x1}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r3 = socket$l2tp6(0xa, 0x2, 0x73)
r4 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002})
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r4, 0x0)
ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000100))
r5 = syz_open_pts(r1, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000080)={0x8})
dup3(r5, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000280))
close_range(r0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800460000180000000000019078ac1e0001ac1415aa890200000b00907803000000450000000000000000000000ac14140ae0000001"], 0x0)
io_uring_setup(0x175c, &(0x7f000009df80)) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r1, &(0x7f0000000b80)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) (async)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000540)={0x0, 0x0, "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", "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"}) (async)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001540)={{r2, 0xffffffffffffff01, 0xa, 0x9433, 0xffffffffffffffff, 0x40f, 0x400, 0x0, 0xb6, 0xfff, 0xfffffff7, 0x5, 0x7f, 0x631a, 0x1}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) (async)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) (async)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r4, 0x0) (async)
ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000100)) (async)
syz_open_pts(r1, 0x0) (async)
epoll_create1(0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000080)={0x8}) (async)
dup3(r5, r1, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000280)) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800460000180000000000019078ac1e0001ac1415aa890200000b00907803000000450000000000000000000000ac14140ae0000001"], 0x0) (async)

0s ago: executing program 2 (id=373):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0) (async)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x5406, &(0x7f0000000340)={0xff02, 0x0, 0x0, 0xffff, 0x0, "5f730000a9003f00"})
ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0x5f) (async)
ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0x5f)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000140)=0x2, 0x4) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000140)=0x2, 0x4)
write$binfmt_script(r2, &(0x7f0000000100), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r3, 0x91a68000)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000080)=""/124, 0x7c}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000700)=""/142, 0x8e}], 0x3, 0x0, 0x0) (async)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000080)=""/124, 0x7c}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000700)=""/142, 0x8e}], 0x3, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x4bbf, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRESHEX=r2], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000380)="490fc71867660fc7708a0f1d250050000048b803000000000000000f23d80f21f835c00000100f23f88f08788749d70066470f38829100100000460f01d1670f2212f2363e450f216c450f01cf", 0x4d}], 0x1, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r5], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='smbus_result\x00', r6, 0x0, 0x6}, 0x18)
r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000002, 0x59032, 0xffffffffffffffff, 0x0)
r8 = userfaultfd(0x80c00)
set_mempolicy(0x3, &(0x7f0000000140)=0x8001, 0x2)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000})
ioctl$I2C_SMBUS(r7, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000080)={0xfc, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)

0s ago: executing program 2 (id=374):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040d1408c8008e00000000050500000008000000e61caf18874dbce1cdc0b769451bf261ad20de61f17286619a31b5b7079527424cc77d0d83fd6beb4ca180e7d56d65a60b5f9574334577e143e0d5d9d4fbaef4b542af34aa89e5a8660878df75df43ea382d18"], 0x17)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0\x00'}]}, 0x30}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0\x00'}]}, 0x30}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r0, {r0}}, './file0\x00'})
ioctl$CDROM_SELECT_DISK(r4, 0x5322, 0x8000000000000000)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="300000000706090000000000000000000200000405000100070000000800064000000da60900020073797a1b00000000"], 0x30}, 0x1, 0x0, 0x0, 0xe957edce102e5824}, 0x10)
sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) (async)
sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r7, 0x0, 0x33, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010003b15000000000000000004000000454f0496558361e2e2ea14b4d2410a0d0b38442b", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028005000d000100000008000a00", @ANYRES32=r2, @ANYBLOB], 0x44}}, 0x0)

kernel console output (not intermixed with test programs):

[   38.309763][   T39] audit: type=1400 audit(1733383839.378:80): avc:  denied  { write } for  pid=5918 comm="sh" path="pipe:[7404]" dev="pipefs" ino=7404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   38.317952][   T39] audit: type=1400 audit(1733383839.378:81): avc:  denied  { rlimitinh } for  pid=5918 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   38.326916][   T39] audit: type=1400 audit(1733383839.378:82): avc:  denied  { siginh } for  pid=5918 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   39.773869][   T39] audit: type=1400 audit(1733383840.848:83): avc:  denied  { read } for  pid=5330 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   39.780311][   T39] audit: type=1400 audit(1733383840.848:84): avc:  denied  { append } for  pid=5330 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   39.787330][   T39] audit: type=1400 audit(1733383840.858:85): avc:  denied  { open } for  pid=5330 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   39.793613][   T39] audit: type=1400 audit(1733383840.858:86): avc:  denied  { getattr } for  pid=5330 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
Warning: Permanently added '[localhost]:11539' (ED25519) to the list of known hosts.
[   40.000587][   T39] audit: type=1400 audit(1733383841.078:87): avc:  denied  { name_bind } for  pid=5922 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   41.562915][ T5924] cgroup: Unknown subsys name 'net'
[   41.727719][ T5924] cgroup: Unknown subsys name 'cpuset'
[   41.731208][ T5924] cgroup: Unknown subsys name 'rlimit'
[   41.977163][ T5927] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   42.614009][ T5924] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   44.317889][   T39] kauditd_printk_skb: 17 callbacks suppressed
[   44.317901][   T39] audit: type=1400 audit(1733383845.398:105): avc:  denied  { execmem } for  pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   44.540123][   T39] audit: type=1400 audit(1733383845.618:106): avc:  denied  { create } for  pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   44.545408][   T39] audit: type=1400 audit(1733383845.618:107): avc:  denied  { create } for  pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   44.550602][   T39] audit: type=1400 audit(1733383845.618:108): avc:  denied  { read write } for  pid=5934 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   44.556768][   T39] audit: type=1400 audit(1733383845.618:109): avc:  denied  { read write } for  pid=5935 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   44.562791][   T39] audit: type=1400 audit(1733383845.618:110): avc:  denied  { read write } for  pid=5933 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   44.568956][   T39] audit: type=1400 audit(1733383845.618:111): avc:  denied  { open } for  pid=5934 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   44.569504][ T5942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   44.571376][ T5937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   44.571962][ T5937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   44.575051][   T39] audit: type=1400 audit(1733383845.618:112): avc:  denied  { open } for  pid=5933 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   44.575068][   T39] audit: type=1400 audit(1733383845.618:113): avc:  denied  { open } for  pid=5935 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   44.575085][   T39] audit: type=1400 audit(1733383845.618:114): avc:  denied  { ioctl } for  pid=5935 comm="syz-executor" path="socket:[2657]" dev="sockfs" ino=2657 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   44.575680][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   44.578202][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   44.579398][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   44.581433][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   44.587497][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   44.594029][ T5942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   44.600846][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   44.602377][ T5942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   44.603433][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   44.604031][ T5943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   44.604776][ T5943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   44.604982][ T5943] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   44.605095][ T5943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   44.605612][ T5942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   44.605848][ T5942] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   44.605964][ T5942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   44.610030][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   44.611902][ T5941] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   44.613456][ T5947] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   44.615114][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   44.616970][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   44.811095][ T5933] chnl_net:caif_netlink_parms(): no params data found
[   44.814454][ T5935] chnl_net:caif_netlink_parms(): no params data found
[   44.850306][ T5945] chnl_net:caif_netlink_parms(): no params data found
[   44.915304][ T5934] chnl_net:caif_netlink_parms(): no params data found
[   44.978843][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.981314][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.983336][ T5933] bridge_slave_0: entered allmulticast mode
[   44.985545][ T5933] bridge_slave_0: entered promiscuous mode
[   44.996521][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.998422][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.000299][ T5935] bridge_slave_0: entered allmulticast mode
[   45.002281][ T5935] bridge_slave_0: entered promiscuous mode
[   45.035777][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.037691][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.039775][ T5933] bridge_slave_1: entered allmulticast mode
[   45.041803][ T5933] bridge_slave_1: entered promiscuous mode
[   45.052111][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.055035][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.057371][ T5935] bridge_slave_1: entered allmulticast mode
[   45.060348][ T5935] bridge_slave_1: entered promiscuous mode
[   45.082334][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.084705][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.086642][ T5945] bridge_slave_0: entered allmulticast mode
[   45.088648][ T5945] bridge_slave_0: entered promiscuous mode
[   45.118593][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.134659][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.136579][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.138475][ T5945] bridge_slave_1: entered allmulticast mode
[   45.140479][ T5945] bridge_slave_1: entered promiscuous mode
[   45.147847][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.153185][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.219543][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.223736][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.226330][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.228694][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.231167][ T5934] bridge_slave_0: entered allmulticast mode
[   45.234160][ T5934] bridge_slave_0: entered promiscuous mode
[   45.256836][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.259347][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.261258][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.263166][ T5934] bridge_slave_1: entered allmulticast mode
[   45.265379][ T5934] bridge_slave_1: entered promiscuous mode
[   45.269859][ T5933] team0: Port device team_slave_0 added
[   45.304636][ T5933] team0: Port device team_slave_1 added
[   45.308872][ T5935] team0: Port device team_slave_0 added
[   45.313133][ T5935] team0: Port device team_slave_1 added
[   45.353165][ T5945] team0: Port device team_slave_0 added
[   45.356216][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.376396][ T5945] team0: Port device team_slave_1 added
[   45.378900][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.381726][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.383554][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.391028][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.395279][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.397117][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.403798][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.408163][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.410513][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.419579][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.451330][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.454762][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.462489][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.467587][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.469545][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.476387][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.491790][ T5934] team0: Port device team_slave_0 added
[   45.498371][ T5934] team0: Port device team_slave_1 added
[   45.500264][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.502086][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.509903][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.567399][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.569277][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.576086][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.598426][ T5945] hsr_slave_0: entered promiscuous mode
[   45.600448][ T5945] hsr_slave_1: entered promiscuous mode
[   45.604421][ T5933] hsr_slave_0: entered promiscuous mode
[   45.606541][ T5933] hsr_slave_1: entered promiscuous mode
[   45.608407][ T5933] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   45.610570][ T5933] Cannot create hsr debugfs directory
[   45.613990][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.615814][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.622973][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.656894][ T5935] hsr_slave_0: entered promiscuous mode
[   45.659450][ T5935] hsr_slave_1: entered promiscuous mode
[   45.661872][ T5935] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   45.664523][ T5935] Cannot create hsr debugfs directory
[   45.676654][ T5934] hsr_slave_0: entered promiscuous mode
[   45.678597][ T5934] hsr_slave_1: entered promiscuous mode
[   45.680351][ T5934] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   45.682356][ T5934] Cannot create hsr debugfs directory
[   45.917343][ T5945] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   45.926972][ T5945] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   45.930990][ T5945] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   45.934274][ T5945] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   45.956395][ T5933] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   45.959690][ T5933] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   45.965292][ T5933] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   45.968793][ T5933] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   45.991291][ T5934] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   45.996162][ T5934] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.000112][ T5934] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.003973][ T5934] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.026316][ T5935] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   46.029892][ T5935] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   46.033507][ T5935] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   46.039073][ T5935] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   46.065509][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.090194][ T5945] 8021q: adding VLAN 0 to HW filter on device team0
[   46.114457][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.117867][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.120032][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.123179][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.125209][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.139773][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.142597][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.159430][ T5933] 8021q: adding VLAN 0 to HW filter on device team0
[   46.165479][ T5935] 8021q: adding VLAN 0 to HW filter on device team0
[   46.171033][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.172891][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.176856][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.178722][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.184819][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.186733][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.199019][ T5934] 8021q: adding VLAN 0 to HW filter on device team0
[   46.201904][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.203836][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.222196][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.224117][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.235021][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.237146][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.272617][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.289996][ T5945] veth0_vlan: entered promiscuous mode
[   46.294933][ T5945] veth1_vlan: entered promiscuous mode
[   46.308032][ T5945] veth0_macvtap: entered promiscuous mode
[   46.311516][ T5945] veth1_macvtap: entered promiscuous mode
[   46.323115][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.326934][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.331227][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.336383][ T5945] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.338791][ T5945] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.341087][ T5945] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.343408][ T5945] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.383504][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.392813][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.402722][ T5933] veth0_vlan: entered promiscuous mode
[   46.425096][ T5933] veth1_vlan: entered promiscuous mode
[   46.431789][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.435411][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.441369][ T5935] veth0_vlan: entered promiscuous mode
[   46.447489][ T5934] veth0_vlan: entered promiscuous mode
[   46.457626][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.458100][ T5935] veth1_vlan: entered promiscuous mode
[   46.459709][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.468761][ T5934] veth1_vlan: entered promiscuous mode
[   46.473864][ T5933] veth0_macvtap: entered promiscuous mode
[   46.478645][ T5933] veth1_macvtap: entered promiscuous mode
[   46.484946][ T5935] veth0_macvtap: entered promiscuous mode
[   46.493443][ T5935] veth1_macvtap: entered promiscuous mode
[   46.495578][ T5945] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   46.497126][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.502416][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.506139][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.510899][ T5934] veth0_macvtap: entered promiscuous mode
[   46.516503][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.519237][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.522614][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.530200][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.533980][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.537304][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.540002][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.543126][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.548067][ T5934] veth1_macvtap: entered promiscuous mode
[   46.550623][ T5933] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.552979][ T5933] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.555394][ T5933] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.557717][ T5933] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.564574][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.567345][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.570016][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.572890][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.577215][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.584494][ T5935] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.586945][ T5935] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.589261][ T5935] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.591917][ T5935] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.597033][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.599815][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.602375][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.605399][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.607951][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.610662][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.614268][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.621088][ T6001] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   46.629096][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   46.633043][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.636328][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.639987][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.642747][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.645647][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.648454][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.651680][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.654577][ T5947] Bluetooth: hci2: command tx timeout
[   46.654585][ T5286] Bluetooth: hci3: command tx timeout
[   46.655642][ T5934] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.655717][ T5934] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.655739][ T5934] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.655758][ T5934] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.664244][ T5947] Bluetooth: hci1: command tx timeout
[   46.666513][ T5941] Bluetooth: hci0: command tx timeout
[   46.715525][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.717922][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.728838][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.730917][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.741056][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.743156][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.752620][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.758160][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.766655][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.768868][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.790994][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.794829][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.836999][ T6006] netlink: 'syz.3.4': attribute type 9 has an invalid length.
[   46.839195][ T6006] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4'.
[   46.855483][ T6005] netlink: 'syz.1.2': attribute type 3 has an invalid length.
[   46.857533][ T6005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'.
[   46.865614][ T6008] netlink: 'syz.0.1': attribute type 4 has an invalid length.
[   46.867655][ T6008] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1'.
[   46.908206][ T6012] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5'.
[   46.910566][ T6012] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5'.
[   46.915528][ T6012] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5'.
[   46.924251][ T6012] netlink: 'syz.3.5': attribute type 25 has an invalid length.
[   46.926740][ T6018] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~ 
[   46.980725][ T6018] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[   46.991862][ T6030] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   47.076158][ T6049] capability: warning: `syz.0.13' uses deprecated v2 capabilities in a way that may be insecure
[   47.166026][ T6062] xt_bpf: check failed: parse error
[   47.175713][ T6064] netlink: 'syz.1.16': attribute type 4 has an invalid length.
[   47.181130][ T6064] netlink: 17 bytes leftover after parsing attributes in process `syz.1.16'.
[   47.257139][ T6080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20'.
[   47.532372][ T6094] /dev/sg0: Can't lookup blockdev
[   47.573723][   T25] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[   47.725970][   T25] usb 8-1: config index 0 descriptor too short (expected 156, got 27)
[   47.728793][   T25] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   47.731771][   T25] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 16383, setting to 64
[   47.735574][   T25] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   47.739805][   T25] usb 8-1: config 0 interface 0 has no altsetting 0
[   47.745780][   T25] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   47.748772][   T25] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   47.751514][   T25] usb 8-1: Product: syz
[   47.753018][   T25] usb 8-1: Manufacturer: syz
[   47.755293][   T25] usb 8-1: SerialNumber: syz
[   47.759686][   T25] usb 8-1: config 0 descriptor??
[   47.763352][ T6083] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   47.769761][   T25] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   47.778480][   T25] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   47.821508][ T6098] Process accounting resumed
[   47.822951][ T6098] kernel write not supported for file /asound/timers (pid: 6098 comm: syz.2.23)
[   47.856454][ T6102] binfmt_misc: register: failed to install interpreter file ./file0/file0
[   47.976799][   T58] usb 8-1: USB disconnect, device number 2
[   47.985988][   T58] ldusb 8-1:0.0: LD USB Device #0 now disconnected
[   47.996372][ T6121] netlink: 1320 bytes leftover after parsing attributes in process `syz.0.27'.
[   48.005469][ T6121] input: syz0 as /devices/virtual/input/input5
[   48.007523][ T6121] input: failed to attach handler leds to device input5, error: -6
[   48.237852][ T6123] kernel profiling enabled (shift: 63)
[   48.240408][ T6123] profiling shift: 63 too large
[   48.282901][ T6125] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.733887][ T5947] Bluetooth: hci3: command tx timeout
[   48.734245][ T5286] Bluetooth: hci0: command tx timeout
[   48.734279][   T66] Bluetooth: hci2: command tx timeout
[   48.734314][   T66] Bluetooth: hci1: command tx timeout
[   48.756548][ T6169] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[   48.900251][ T6186] overlayfs: failed to decode file handle (len=7, type=251, flags=0, err=-22)
[   48.937877][ T6190] Zero length message leads to an empty skb
[   48.973813][ T5941] Bluetooth: hci1: Opcode 0x206a failed: -110
[   49.081939][ T6205] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[   49.179434][ T6221] random: crng reseeded on system resumption
[   49.179508][ T6222] syz.3.54 uses obsolete (PF_INET,SOCK_PACKET)
[   49.389434][   T39] kauditd_printk_skb: 160 callbacks suppressed
[   49.389443][   T39] audit: type=1400 audit(1733383850.468:275): avc:  denied  { ioctl } for  pid=6227 comm="syz.3.56" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9681 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   49.411691][   T39] audit: type=1400 audit(1733383850.488:276): avc:  denied  { read } for  pid=6229 comm="syz.0.57" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   49.415965][ T6232] binder_alloc: 6229: binder_alloc_buf, no vma
[   49.419050][   T39] audit: type=1400 audit(1733383850.488:277): avc:  denied  { open } for  pid=6229 comm="syz.0.57" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   49.428215][   T39] audit: type=1400 audit(1733383850.488:278): avc:  denied  { ioctl } for  pid=6229 comm="syz.0.57" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   49.436856][   T39] audit: type=1400 audit(1733383850.488:279): avc:  denied  { set_context_mgr } for  pid=6229 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   49.442202][   T39] audit: type=1400 audit(1733383850.498:280): avc:  denied  { call } for  pid=6229 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   49.447434][   T39] audit: type=1400 audit(1733383850.508:281): avc:  denied  { write } for  pid=6229 comm="syz.0.57" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   49.453258][   T39] audit: type=1400 audit(1733383850.508:282): avc:  denied  { open } for  pid=6229 comm="syz.0.57" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   49.459559][   T39] audit: type=1400 audit(1733383850.508:283): avc:  denied  { ioctl } for  pid=6229 comm="syz.0.57" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   49.688244][   T39] audit: type=1400 audit(1733383850.768:284): avc:  denied  { create } for  pid=6241 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   49.866268][ T6267] overlayfs: cannot append lower layer
[   50.481582][ T6292] kvm: user requested TSC rate below hardware speed
[   50.484064][ T6292] kvm: user requested TSC rate below hardware speed
[   50.504230][   T45] wlan1: Trigger new scan to find an IBSS to join
[   50.737409][ T6305] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~ 
[   50.784130][ T6310] sg_write: process 78 (syz.2.79) changed security contexts after opening file descriptor, this is not allowed.
[   50.790747][ T6310] program syz.2.79 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   50.813883][ T5941] Bluetooth: hci0: command tx timeout
[   50.813903][ T5286] Bluetooth: hci1: command 0x040f tx timeout
[   50.814899][ T5944] Bluetooth: hci3: command tx timeout
[   50.814944][ T5947] Bluetooth: hci2: command tx timeout
[   50.835231][ T6316] xt_socket: unknown flags 0x8
[   50.839959][ T6315] i2c i2c-1: Invalid block write size 34
[   50.842496][ T6315] No such timeout policy "syz1"
[   50.965323][ T6335] netlink: 'syz.1.85': attribute type 4 has an invalid length.
[   50.975226][ T6335] netlink: 'syz.1.85': attribute type 4 has an invalid length.
[   50.982198][ T6335] 9pnet_fd: Insufficient options for proto=fd
[   50.985643][ T6335] overlayfs: overlapping lowerdir path
[   51.071724][ T6350] MTD: Couldn't look up 'mountinfo': -2
[   51.109793][ T6357] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.256697][ T6367] xt_NFQUEUE: number of total queues is 0
[   51.263820][ T6367] tc_dump_action: action bad kind
[   51.325387][ T6371] ip6t_srh: unknown srh match flags  4000
[   51.377232][ T6376] Illegal XDP return value 4036720828 on prog  (id 79) dev syz_tun, expect packet loss!
[   51.499136][ T6388] befs: (nullb0): No write support. Marking filesystem read-only
[   51.502609][ T6388] befs: (nullb0): invalid magic header
[   51.559084][ T6395] Invalid logical block size (1048576)
[   51.684329][ T6412] UHID_CREATE from different security context by process 108 (syz.3.109), this is not allowed.
[   51.712065][ T6416] __nla_validate_parse: 12 callbacks suppressed
[   51.712076][ T6416] netlink: 24 bytes leftover after parsing attributes in process `syz.3.111'.
[   51.776534][ T6420] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[   51.973362][ T6439] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   51.977238][ T6439] overlayfs: overlapping lowerdir path
[   52.570884][ T6448] team0: Cannot enslave team device to itself
[   52.606300][ T6457] netlink: 'syz.2.122': attribute type 10 has an invalid length.
[   52.612612][ T6457] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.615761][ T6457] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   52.619504][ T6457] netlink: 'syz.2.122': attribute type 10 has an invalid length.
[   52.625490][ T6457] 8021q: adding VLAN 0 to HW filter on device team0
[   52.628590][ T6457] bond0: (slave team0): Enslaving as an active interface with an up link
[   52.631740][ T6457] netlink: 'syz.2.122': attribute type 10 has an invalid length.
[   52.634883][ T6457] netlink: 40 bytes leftover after parsing attributes in process `syz.2.122'.
[   52.637498][ T6457] batadv0: entered promiscuous mode
[   52.638989][ T6457] batadv0: entered allmulticast mode
[   52.641220][ T6457] bond0: (slave batadv0): Releasing backup interface
[   52.644706][ T6457] bridge0: port 3(batadv0) entered blocking state
[   52.646457][ T6457] bridge0: port 3(batadv0) entered disabled state
[   52.711856][ T6466] netlink: 1275 bytes leftover after parsing attributes in process `syz.0.126'.
[   52.714008][ T6471] overlayfs: overlapping lowerdir path
[   52.715192][ T6466] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   52.716152][ T6470] overlayfs: overlapping lowerdir path
[   52.724408][ T6470] =======================================================
[   52.724408][ T6470] WARNING: The mand mount option has been deprecated and
[   52.724408][ T6470]          and is ignored by this kernel. Remove the mand
[   52.724408][ T6470]          option from the mount to silence this warning.
[   52.724408][ T6470] =======================================================
[   52.783105][ T6473] trusted_key: syz.3.129 sent an empty control message without MSG_MORE.
[   52.817885][ T6485] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   52.821010][ T6485] xt_CHECKSUM: unsupported CHECKSUM operation f4
[   52.823111][ T6485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6485 comm=syz.3.134
[   52.827423][ T6485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.134'.
[   52.830413][ T6485] dlm: Unknown command passed to DLM device : 8
[   52.830413][ T6485] 
[   52.849309][ T6491] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5123 sclass=netlink_xfrm_socket pid=6491 comm=syz.0.135
[   52.852022][ T6494] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5123 sclass=netlink_xfrm_socket pid=6494 comm=syz.0.135
[   52.894601][ T5286] Bluetooth: hci1: command 0x040f tx timeout
[   52.896238][ T5286] Bluetooth: hci0: command tx timeout
[   52.897714][ T5286] Bluetooth: hci2: command tx timeout
[   52.897740][ T5941] Bluetooth: hci3: command tx timeout
[   52.912305][ T6512] netlink: 256 bytes leftover after parsing attributes in process `syz.3.140'.
[   52.912995][ T6510] usb usb8: usbfs: process 6510 (syz.2.141) did not claim interface 0 before use
[   52.915502][ T6512] netlink: 56 bytes leftover after parsing attributes in process `syz.3.140'.
[   53.017838][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.147'.
[   53.021167][ T6527] netlink: 'syz.0.147': attribute type 3 has an invalid length.
[   53.029575][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.148'.
[   53.038760][ T5311] IPVS: starting estimator thread 0...
[   53.118663][ T6547] 9pnet_virtio: no channels available for device syz
[   53.122283][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'.
[   53.134733][ T6531] IPVS: using max 39 ests per chain, 93600 per kthread
[   53.136640][ T1139] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   53.139854][ T1139] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   53.150795][ T6547] 9pnet: Unknown protocol version 9p200
[   53.155641][ T6523] ALSA: seq fatal error: cannot create timer (-22)
[   53.210479][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[   53.441003][ T6575] QAT: failed to copy from user.
[   53.534888][  T219] wlan1: Trigger new scan to find an IBSS to join
[   53.790701][ T6602] binder: 6601:6602 ioctl c0306201 0 returned -14
[   53.880109][ T6611] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.170'.
[   53.882540][ T6611] openvswitch: netlink: EtherType 0 is less than min 600
[   54.300727][ T6657] input: syz0 as /devices/virtual/input/input6
[   54.399076][   T39] kauditd_printk_skb: 19418 callbacks suppressed
[   54.399087][   T39] audit: type=1326 audit(1733383855.478:19701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6535 comm="syz.2.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882157ff19 code=0x7ff00000
[   54.407086][   T39] audit: type=1326 audit(1733383855.468:19651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6535 comm="syz.2.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882157ff19 code=0x7ff00000
[   54.412923][   T39] audit: type=1326 audit(1733383855.478:19702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6535 comm="syz.2.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882157ff19 code=0x7ff00000
[   54.423035][   T39] audit: type=1326 audit(1733383855.478:19703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6535 comm="syz.2.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882157ff19 code=0x7ff00000
[   54.429378][   T39] audit: type=1326 audit(1733383855.478:19704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6535 comm="syz.2.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882157ff19 code=0x7ff00000
[   54.436224][   T39] audit: type=1326 audit(1733383855.478:19705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6535 comm="syz.2.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882157ff19 code=0x7ff00000
[   54.449364][   T39] audit: type=1326 audit(1733383855.478:19706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6535 comm="syz.2.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882157ff19 code=0x7ff00000
[   54.465901][   T39] audit: type=1326 audit(1733383855.478:19707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6535 comm="syz.2.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882157ff19 code=0x7ff00000
[   54.471921][   T39] audit: type=1326 audit(1733383855.478:19708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6535 comm="syz.2.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882157ff19 code=0x7ff00000
[   54.478676][   T39] audit: type=1326 audit(1733383855.478:19709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6535 comm="syz.2.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882157ff19 code=0x7ff00000
[   54.491017][ T6342] wlan1: Creating new IBSS network, BSSID 06:af:8e:7a:66:fa
[   54.650608][ T6692] netlink: 'syz.1.186': attribute type 4 has an invalid length.
[   54.653365][ T6693] netlink: 'syz.1.186': attribute type 4 has an invalid length.
[   54.756736][ T6342] Bluetooth: hci4: Frame reassembly failed (-84)
[   54.983790][ T5947] Bluetooth: hci1: command 0x040f tx timeout
[   55.087198][ T6716] input: syz0 as /devices/virtual/input/input7
[   55.691706][ T6739] bond_slave_0: entered promiscuous mode
[   55.693396][ T6739] bond_slave_1: entered promiscuous mode
[   55.703874][ T6739] macvlan2: entered promiscuous mode
[   55.705474][ T6739] bond0: entered promiscuous mode
[   55.708516][ T6739] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   55.771742][ T6750] Bluetooth: MGMT ver 1.23
[   55.849162][ T6756] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore
[   55.861962][ T6756] overlayfs: missing 'lowerdir'
[   55.891838][ T6758] ip6t_srh: unknown srh invflags 7863
[   56.087389][ T6766] kvm: emulating exchange as write
[   56.319402][ T6796] netlink: 'syz.2.215': attribute type 3 has an invalid length.
[   56.348986][ T6799] tmpfs: Unknown parameter 'hugeLØ'
[   56.576848][ T6805] netlink: 'syz.0.219': attribute type 4 has an invalid length.
[   56.814361][ T5947] Bluetooth: hci4: command 0x1003 tx timeout
[   56.818064][ T5941] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   56.900188][ T6839] x_tables: duplicate underflow at hook 3
[   56.902869][ T6839] bridge: RTM_NEWNEIGH with invalid state 0x8
[   57.036755][ T6850] kvm: pic: non byte write
[   57.039028][ T6850] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2758444543 (5516889086 ns) > initial count (4205064 ns). Using initial count to start timer.
[   57.423855][ T1465] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   57.585216][ T1465] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   57.589238][ T1465] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   57.592757][ T1465] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   57.596587][ T1465] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.600978][ T1465] usb 7-1: config 0 descriptor??
[   57.961571][ T6868] __nla_validate_parse: 12 callbacks suppressed
[   57.961582][ T6868] netlink: 20 bytes leftover after parsing attributes in process `syz.3.237'.
[   58.009940][ T1465] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[   58.012056][ T1465] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[   58.017900][ T1465] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0D8C:0022.0002/input/input8
[   58.027546][ T1465] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[   58.216968][   T64] usb 7-1: USB disconnect, device number 2
[   58.286299][ T6894] netlink: 36 bytes leftover after parsing attributes in process `syz.0.244'.
[   58.288726][ T6894] netlink: 16 bytes leftover after parsing attributes in process `syz.0.244'.
[   58.291064][ T6894] netlink: 36 bytes leftover after parsing attributes in process `syz.0.244'.
[   58.293465][ T6894] netlink: 36 bytes leftover after parsing attributes in process `syz.0.244'.
[   58.330079][ T6900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.246'.
[   58.366648][ T6900] xt_hashlimit: size too large, truncated to 1048576
[   58.428345][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.248'.
[   58.783820][ T6917] sock: sock_timestamping_bind_phc: sock not bind to device
[   58.787188][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.251'.
[   58.822309][ T6928] netlink: 'syz.3.253': attribute type 16 has an invalid length.
[   58.827469][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.253'.
[   58.905274][ T6943] netlink: 48 bytes leftover after parsing attributes in process `syz.3.257'.
[   59.166471][ T6980] netlink: 'syz.0.268': attribute type 1 has an invalid length.
[   59.173839][ T6980] 8021q: adding VLAN 0 to HW filter on device bond1
[   59.179000][ T6975] netlink: 'syz.3.266': attribute type 21 has an invalid length.
[   59.184803][ T6980] netlink: 'syz.0.268': attribute type 10 has an invalid length.
[   59.186909][ T6980] bond0: (slave ): no link monitoring support
[   59.189862][ T6980] bond0: (slave ): Enslaving as an active interface with an up link
[   59.448648][   T39] kauditd_printk_skb: 28502 callbacks suppressed
[   59.448659][   T39] audit: type=1400 audit(1733383860.528:48209): avc:  denied  { recv } for  pid=7003 comm="syz.1.274" saddr=fe80::bb daddr=ff02::1 netif=hwsim0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[   59.475768][   T39] audit: type=1400 audit(1733383860.558:48210): avc:  denied  { recv } for  pid=24 comm="ksoftirqd/2" saddr=127.0.0.1 src=45764 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[   59.482828][   T39] audit: type=1400 audit(1733383860.558:48211): avc:  denied  { append } for  pid=7007 comm="syz.1.277" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   59.519148][   T39] audit: type=1400 audit(1733383860.598:48212): avc:  denied  { ioctl } for  pid=7014 comm="syz.2.278" path="socket:[16459]" dev="sockfs" ino=16459 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   59.529519][   T39] audit: type=1400 audit(1733383860.608:48213): avc:  denied  { create } for  pid=7014 comm="syz.2.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   59.536505][ T5947] Bluetooth: hci1: command 0x040f tx timeout
[   59.541863][   T39] audit: type=1400 audit(1733383860.608:48214): avc:  denied  { bind } for  pid=7014 comm="syz.2.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   59.550468][   T39] audit: type=1400 audit(1733383860.608:48215): avc:  denied  { write } for  pid=7014 comm="syz.2.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   59.557660][   T39] audit: type=1400 audit(1733383860.618:48216): avc:  denied  { read } for  pid=7014 comm="syz.2.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   59.562669][   T39] audit: type=1400 audit(1733383860.618:48217): avc:  denied  { egress } for  pid=24 comm="ksoftirqd/2" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[   59.568768][   T39] audit: type=1400 audit(1733383860.618:48218): avc:  denied  { sendto } for  pid=24 comm="ksoftirqd/2" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[   59.633523][ T7010] geneve0: entered promiscuous mode
[   59.634960][ T7010] geneve0: entered allmulticast mode
[   59.938609][  T832] IPVS: starting estimator thread 0...
[   59.954369][ T7050] netlink: 'syz.0.284': attribute type 5 has an invalid length.
[   60.043782][ T7051] IPVS: using max 39 ests per chain, 93600 per kthread
[   60.200861][ T7057] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.287' sets config #0
[   60.499250][ T7065] fuse: Unknown parameter ''
[   60.501388][ T7065] fuse: Unknown parameter 'rootmodeP00000000000000000040000'
[   60.621137][ T7074] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.625968][ T7074] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.821543][ T7093] openvswitch: netlink: IP tunnel dst address not specified
[   60.825662][ T7093] tmpfs: Bad value for 'mpol'
[   61.009350][ T7101] kvm: kvm [7100]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800
[   61.062481][ T7103] Cannot find del_set index 512 as target
[   61.248804][ T7117] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   61.613848][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   61.805816][ T7134] uprobe: syz.0.308:7134 failed to unregister, leaking uprobe
[   61.816488][ T7137] Trying to write to read-only block-device nullb0
[   61.925907][ T7149] overlayfs: statfs failed on './file0'
[   62.030611][ T7167] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.041285][ T7178] netlink: 'syz.1.322': attribute type 10 has an invalid length.
[   62.052735][ T7178] 8021q: adding VLAN 0 to HW filter on device team0
[   62.056238][ T7178] bond0: (slave team0): Enslaving as an active interface with an up link
[   62.234853][ T7207] xt_hashlimit: size too large, truncated to 1048576
[   62.245998][ T7205] netfs: Couldn't get user pages (rc=-14)
[   62.422479][ T7213] capability: warning: `syz.1.334' uses 32-bit capabilities (legacy support in use)
[   62.597156][ T7221] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   62.643550][ T7227] gtp0: entered promiscuous mode
[   62.645968][ T7227] gtp0: entered allmulticast mode
[   62.810486][ T7233] dlm: no local IP address has been set
[   62.812090][ T7233] dlm: cannot start dlm midcomms -107
[   63.089101][ T7273] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[   63.092335][ T7273] __nla_validate_parse: 15 callbacks suppressed
[   63.092344][ T7273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.349'.
[   63.098793][ T7273] netlink: 32 bytes leftover after parsing attributes in process `syz.1.349'.
[   63.150752][ T7281] netlink: 'syz.0.353': attribute type 1 has an invalid length.
[   63.359466][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.356'.
[   63.361942][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.356'.
[   63.368371][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.356'.
[   63.404295][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.356'.
[   63.407669][ T7302] netlink: 'syz.0.356': attribute type 1 has an invalid length.
[   63.409768][ T7302] nbd: error processing sock list
[   63.677110][ T7310] can: request_module (can-proto-3) failed.
[   63.733933][ T1465] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   63.837525][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'.
[   63.907650][ T1465] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   63.910777][ T1465] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   63.915746][ T1465] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[   63.918224][ T1465] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   63.921162][ T1465] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   63.921554][ T7338] netlink: 'syz.3.366': attribute type 10 has an invalid length.
[   63.927050][ T1465] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   63.929488][ T1465] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   63.931667][ T1465] usb 5-1: Product: syz
[   63.932796][ T1465] usb 5-1: Manufacturer: syz
[   63.933231][ T7338] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[   63.936970][ T7338] team0: Failed to send options change via netlink (err -105)
[   63.939028][ T7338] team0: Port device netdevsim0 added
[   63.944411][ T1465] cdc_wdm 5-1:1.0: skipping garbage
[   63.945884][ T1465] cdc_wdm 5-1:1.0: skipping garbage
[   63.949110][ T1465] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[   63.950748][ T1465] cdc_wdm 5-1:1.0: Unknown control protocol
[   64.109307][ T7350] netlink: 28 bytes leftover after parsing attributes in process `syz.3.369'.
[   64.144911][ T7352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7352 comm=syz.3.370
[   64.149487][ T7352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=7352 comm=syz.3.370
[   64.165770][ T7352] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   64.173108][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'.
[   64.207573][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[   64.208558][ T5940] usb 5-1: USB disconnect, device number 2
[   64.209467][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[   64.212541][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[   64.391302][ T7358] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   64.391302][ T7358] The task syz.3.371 (7358) triggered the difference, watch for misbehavior.
[   64.665980][   T39] kauditd_printk_skb: 46 callbacks suppressed
[   64.665990][   T39] audit: type=1400 audit(1733383865.748:48265): avc:  denied  { map } for  pid=7365 comm="syz.2.373" path="/dev/tty24" dev="devtmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[   64.720058][ T7377] netlink: 36 bytes leftover after parsing attributes in process `syz.2.374'.
[   64.724870][    C3] ==================================================================
[   64.727690][    C3] BUG: KASAN: slab-out-of-bounds in selinux_ip_output+0x1e0/0x1f0
[   64.730613][    C3] Read of size 8 at addr ffff888027c22498 by task syz.2.374/7374
[   64.734907][    C3] 
[   64.735755][    C3] CPU: 3 UID: 0 PID: 7374 Comm: syz.2.374 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0
[   64.739387][    C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   64.743070][    C3] Call Trace:
[   64.744250][    C3]  <IRQ>
[   64.745296][    C3]  dump_stack_lvl+0x116/0x1f0
[   64.747020][    C3]  print_report+0xc3/0x620
[   64.748642][    C3]  ? __virt_addr_valid+0x5e/0x590
[   64.750434][    C3]  ? __phys_addr+0xc6/0x150
[   64.752031][    C3]  kasan_report+0xd9/0x110
[   64.753616][    C3]  ? selinux_ip_output+0x1e0/0x1f0
[   64.755425][    C3]  ? selinux_ip_output+0x1e0/0x1f0
[   64.757240][    C3]  selinux_ip_output+0x1e0/0x1f0
[   64.758996][    C3]  ? __pfx_selinux_ip_output+0x10/0x10
[   64.760901][    C3]  nf_hook_slow+0xbb/0x200
[   64.762170][    C3]  nf_hook+0x386/0x6d0
[   64.763235][    C3]  ? __pfx_dst_output+0x10/0x10
[   64.764493][    C3]  ? __pfx_nf_hook+0x10/0x10
[   64.765699][    C3]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[   64.767208][    C3]  ? __pfx_ip_reply_glue_bits+0x10/0x10
[   64.768637][    C3]  ? __pfx_dst_output+0x10/0x10
[   64.769904][    C3]  ? __ip_make_skb+0x1150/0x1d00
[   64.771171][    C3]  ? do_csum+0x26f/0x2d0
[   64.772291][    C3]  __ip_local_out+0x339/0x640
[   64.773516][    C3]  ? __pfx_dst_output+0x10/0x10
[   64.774775][    C3]  ip_push_pending_frames+0xa0/0x5b0
[   64.776150][    C3]  ip_send_unicast_reply+0xd0e/0x1650
[   64.777544][    C3]  ? __pfx_ip_send_unicast_reply+0x10/0x10
[   64.779050][    C3]  ? debug_object_assert_init+0x1c7/0x2f0
[   64.780526][    C3]  ? trace_lock_acquire+0x14e/0x1f0
[   64.781888][    C3]  ? tcp_v4_send_ack+0x627/0x13f0
[   64.783249][    C3]  tcp_v4_send_ack+0x976/0x13f0
[   64.784513][    C3]  ? __pfx___lock_acquire+0x10/0x10
[   64.785873][    C3]  ? __pfx_tcp_v4_send_ack+0x10/0x10
[   64.787251][    C3]  ? find_held_lock+0x2d/0x110
[   64.788488][    C3]  ? tcp_v4_rcv+0x38a6/0x4380
[   64.789687][    C3]  ? mark_held_locks+0x9f/0xe0
[   64.790940][    C3]  ? tcp_v4_rcv+0x2f8e/0x4380
[   64.792176][    C3]  tcp_v4_rcv+0x2f8e/0x4380
[   64.793340][    C3]  ? __pfx_tcp_v4_rcv+0x10/0x10
[   64.794617][    C3]  ? rcu_is_watching+0x12/0xc0
[   64.795878][    C3]  ? __pfx_tcp_v4_rcv+0x10/0x10
[   64.797157][    C3]  ip_protocol_deliver_rcu+0xba/0x4c0
[   64.798549][    C3]  ip_local_deliver_finish+0x316/0x570
[   64.799962][    C3]  ip_local_deliver+0x18e/0x1f0
[   64.801232][    C3]  ? __pfx_ip_local_deliver+0x10/0x10
[   64.802620][    C3]  ip_rcv+0x2c3/0x5d0
[   64.803667][    C3]  ? __pfx_ip_rcv+0x10/0x10
[   64.804859][    C3]  __netif_receive_skb_one_core+0x199/0x1e0
[   64.806407][    C3]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[   64.808040][    C3]  ? rcu_is_watching+0x12/0xc0
[   64.809269][    C3]  ? process_backlog+0x3f1/0x15f0
[   64.810575][    C3]  ? process_backlog+0x3f1/0x15f0
[   64.811866][    C3]  __netif_receive_skb+0x1d/0x160
[   64.813185][    C3]  process_backlog+0x443/0x15f0
[   64.814454][    C3]  __napi_poll.constprop.0+0xb7/0x550
[   64.815854][    C3]  net_rx_action+0xa94/0x1010
[   64.817054][    C3]  ? __pfx_net_rx_action+0x10/0x10
[   64.818355][    C3]  ? __pfx_mark_lock+0x10/0x10
[   64.819522][    C3]  ? trace_rcu_utilization+0x106/0x170
[   64.820866][    C3]  ? kvm_sched_clock_read+0x11/0x20
[   64.822101][    C3]  ? sched_clock+0x38/0x60
[   64.823187][    C3]  ? sched_clock_cpu+0x6d/0x4d0
[   64.824394][    C3]  ? mark_held_locks+0x9f/0xe0
[   64.825642][    C3]  handle_softirqs+0x213/0x8f0
[   64.826867][    C3]  ? __pfx_handle_softirqs+0x10/0x10
[   64.828190][    C3]  ? __dev_queue_xmit+0x89b/0x43e0
[   64.829479][    C3]  do_softirq+0xb2/0xf0
[   64.830504][    C3]  </IRQ>
[   64.831236][    C3]  <TASK>
[   64.831989][    C3]  __local_bh_enable_ip+0x100/0x120
[   64.833273][    C3]  ? __dev_queue_xmit+0x89b/0x43e0
[   64.834529][    C3]  __dev_queue_xmit+0x8b0/0x43e0
[   64.835757][    C3]  ? hlock_class+0x4e/0x130
[   64.836935][    C3]  ? __lock_acquire+0x15a9/0x3c40
[   64.838182][    C3]  ? __pfx___dev_queue_xmit+0x10/0x10
[   64.839555][    C3]  ? hlock_class+0x4e/0x130
[   64.840744][    C3]  ? mark_lock+0xb5/0xc60
[   64.841845][    C3]  ? __pfx___lock_acquire+0x10/0x10
[   64.843085][    C3]  ? selinux_ip_postroute+0x73b/0xde0
[   64.844381][    C3]  ? __pfx_mark_lock+0x10/0x10
[   64.845594][    C3]  ? find_held_lock+0x2d/0x110
[   64.846765][    C3]  ? __ip_finish_output+0x49e/0x950
[   64.848085][    C3]  ? __pfx_lock_release+0x10/0x10
[   64.849381][    C3]  ? mark_held_locks+0x9f/0xe0
[   64.850551][    C3]  ip_finish_output2+0xc6c/0x2150
[   64.851820][    C3]  ? __pfx_ip_finish_output2+0x10/0x10
[   64.853196][    C3]  ? ip_skb_dst_mtu+0x3fc/0xc70
[   64.854421][    C3]  ? __pfx_ip_skb_dst_mtu+0x10/0x10
[   64.855720][    C3]  __ip_finish_output+0x49e/0x950
[   64.857159][    C3]  ip_finish_output+0x35/0x380
[   64.858397][    C3]  ip_output+0x13b/0x2a0
[   64.859506][    C3]  ? __pfx_ip_output+0x10/0x10
[   64.860772][    C3]  ip_local_out+0x33e/0x4a0
[   64.861982][    C3]  __ip_queue_xmit+0x777/0x1970
[   64.863269][    C3]  ? __pfx_ip_queue_xmit+0x10/0x10
[   64.864618][    C3]  __tcp_transmit_skb+0x2b39/0x3df0
[   64.865995][    C3]  ? __pfx___tcp_transmit_skb+0x10/0x10
[   64.867440][    C3]  ? __pfx_lock_release+0x10/0x10
[   64.868768][    C3]  ? ktime_get+0x206/0x300
[   64.869949][    C3]  ? lockdep_hardirqs_on+0x7c/0x110
[   64.871328][    C3]  tcp_write_xmit+0x12b1/0x8560
[   64.872589][    C3]  ? tcp_current_mss+0x27e/0x500
[   64.873856][    C3]  __tcp_push_pending_frames+0xaf/0x390
[   64.875256][    C3]  tcp_send_fin+0x154/0xc70
[   64.876407][    C3]  ? __pfx_tcp_send_fin+0x10/0x10
[   64.877647][    C3]  ? mark_held_locks+0x9f/0xe0
[   64.878865][    C3]  tcp_shutdown+0x12b/0x170
[   64.880055][    C3]  mptcp_subflow_shutdown+0x1c3/0x380
[   64.881367][    C3]  mptcp_check_send_data_fin+0x24a/0x450
[   64.882775][    C3]  __mptcp_close+0x8cb/0xb90
[   64.883986][    C3]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   64.885402][    C3]  ? __pfx___mptcp_close+0x10/0x10
[   64.886743][    C3]  ? __local_bh_enable_ip+0xa4/0x120
[   64.888120][    C3]  mptcp_close+0x28/0xe0
[   64.889243][    C3]  inet_release+0x13c/0x280
[   64.890432][    C3]  __sock_release+0xb0/0x270
[   64.891661][    C3]  ? __pfx_sock_close+0x10/0x10
[   64.892938][    C3]  sock_close+0x1c/0x30
[   64.894041][    C3]  __fput+0x3f8/0xb60
[   64.895096][    C3]  ? _raw_spin_unlock_irq+0x23/0x50
[   64.896454][    C3]  task_work_run+0x14e/0x250
[   64.897676][    C3]  ? __pfx_task_work_run+0x10/0x10
[   64.899010][    C3]  ? __pfx___do_sys_close_range+0x10/0x10
[   64.900491][    C3]  syscall_exit_to_user_mode+0x27b/0x2a0
[   64.901954][    C3]  do_syscall_64+0xda/0x250
[   64.903152][    C3]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.904695][    C3] RIP: 0033:0x7f882157ff19
[   64.905877][    C3] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   64.910822][    C3] RSP: 002b:00007ffed8a82f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[   64.912890][    C3] RAX: 0000000000000000 RBX: 000000000000fc6d RCX: 00007f882157ff19
[   64.914876][    C3] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[   64.916898][    C3] RBP: 00007f8821747ba0 R08: 0000000000000001 R09: 00007ffed8a8327f
[   64.918937][    C3] R10: 00007f8821400000 R11: 0000000000000246 R12: 000000000000fca7
[   64.920980][    C3] R13: 00007f8821745fa0 R14: 0000000000000032 R15: ffffffffffffffff
[   64.923029][    C3]  </TASK>
[   64.923807][    C3] 
[   64.924396][    C3] The buggy address belongs to the object at ffff888027c22420
[   64.924396][    C3]  which belongs to the cache tw_sock_TCPv6 of size 288
[   64.927879][    C3] The buggy address is located 120 bytes inside of
[   64.927879][    C3]  allocated 288-byte region [ffff888027c22420, ffff888027c22540)
[   64.931489][    C3] 
[   64.932118][    C3] The buggy address belongs to the physical page:
[   64.933785][    C3] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27c22
[   64.936023][    C3] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   64.938193][    C3] memcg:ffff888026d3d501
[   64.939293][    C3] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   64.941241][    C3] page_type: f5(slab)
[   64.942293][    C3] raw: 00fff00000000040 ffff888108b68640 dead000000000122 0000000000000000
[   64.944493][    C3] raw: 0000000000000000 0000000080170017 00000001f5000000 ffff888026d3d501
[   64.946746][    C3] head: 00fff00000000040 ffff888108b68640 dead000000000122 0000000000000000
[   64.948969][    C3] head: 0000000000000000 0000000080170017 00000001f5000000 ffff888026d3d501
[   64.951200][    C3] head: 00fff00000000001 ffffea00009f0881 ffffffffffffffff 0000000000000000
[   64.953456][    C3] head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000
[   64.955671][    C3] page dumped because: kasan: bad access detected
[   64.957318][    C3] page_owner tracks the page as allocated
[   64.958785][    C3] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 29, tgid 29 (ksoftirqd/1), ts 64723951608, free_ts 64665336645
[   64.963528][    C3]  post_alloc_hook+0x2d1/0x350
[   64.964782][    C3]  get_page_from_freelist+0xfce/0x2f80
[   64.966185][    C3]  __alloc_pages_noprof+0x223/0x25b0
[   64.967521][    C3]  alloc_pages_mpol_noprof+0x2c9/0x610
[   64.968946][    C3]  new_slab+0x2c9/0x410
[   64.970008][    C3]  ___slab_alloc+0xdac/0x1870
[   64.971212][    C3]  __slab_alloc.constprop.0+0x56/0xb0
[   64.972620][    C3]  kmem_cache_alloc_noprof+0xfa/0x3d0
[   64.974018][    C3]  inet_twsk_alloc+0x120/0x970
[   64.975230][    C3]  tcp_time_wait+0x5f/0xe10
[   64.976405][    C3]  tcp_rcv_state_process+0x4935/0x4c40
[   64.977828][    C3]  tcp_v4_do_rcv+0x1ad/0xa90
[   64.979037][    C3]  tcp_v4_rcv+0x33a0/0x4380
[   64.980225][    C3]  ip_protocol_deliver_rcu+0xba/0x4c0
[   64.981637][    C3]  ip_local_deliver_finish+0x316/0x570
[   64.983044][    C3]  ip_local_deliver+0x18e/0x1f0
[   64.984326][    C3] page last free pid 7367 tgid 7365 stack trace:
[   64.985968][    C3]  free_unref_page+0x661/0x1080
[   64.987231][    C3]  __put_partials+0x14c/0x170
[   64.988461][    C3]  qlist_free_all+0x4e/0x120
[   64.989674][    C3]  kasan_quarantine_reduce+0x195/0x1e0
[   64.991082][    C3]  __kasan_slab_alloc+0x69/0x90
[   64.992354][    C3]  __kmalloc_noprof+0x1cd/0x510
[   64.993626][    C3]  tomoyo_encode2+0x100/0x3e0
[   64.994856][    C3]  tomoyo_encode+0x29/0x50
[   64.996024][    C3]  tomoyo_realpath_from_path+0x19d/0x720
[   64.997486][    C3]  tomoyo_path_number_perm+0x248/0x590
[   64.998906][    C3]  security_file_ioctl+0x9b/0x240
[   65.000229][    C3]  __x64_sys_ioctl+0xb7/0x200
[   65.001473][    C3]  do_syscall_64+0xcd/0x250
[   65.002668][    C3]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.004207][    C3] 
[   65.004837][    C3] Memory state around the buggy address:
[   65.006279][    C3]  ffff888027c22380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   65.008297][    C3]  ffff888027c22400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   65.010371][    C3] >ffff888027c22480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   65.012463][    C3]                             ^
[   65.013797][    C3]  ffff888027c22500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   65.015861][    C3]  ffff888027c22580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   65.017924][    C3] ==================================================================
[   65.020068][    C3] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   65.021927][    C3] CPU: 3 UID: 0 PID: 7374 Comm: syz.2.374 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0
[   65.024625][    C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   65.027420][    C3] Call Trace:
[   65.028287][    C3]  <IRQ>
[   65.029041][    C3]  dump_stack_lvl+0x3d/0x1f0
[   65.030248][    C3]  panic+0x71d/0x800
[   65.031277][    C3]  ? mark_held_locks+0x9f/0xe0
[   65.032534][    C3]  ? __pfx_panic+0x10/0x10
[   65.033710][    C3]  ? irqentry_exit+0x3b/0x90
[   65.034931][    C3]  ? lockdep_hardirqs_on+0x7c/0x110
[   65.036277][    C3]  ? check_panic_on_warn+0x1f/0xb0
[   65.037613][    C3]  check_panic_on_warn+0xab/0xb0
[   65.038901][    C3]  end_report+0x117/0x180
[   65.040025][    C3]  kasan_report+0xe9/0x110
[   65.041192][    C3]  ? selinux_ip_output+0x1e0/0x1f0
[   65.042521][    C3]  ? selinux_ip_output+0x1e0/0x1f0
[   65.043856][    C3]  selinux_ip_output+0x1e0/0x1f0
[   65.045149][    C3]  ? __pfx_selinux_ip_output+0x10/0x10
[   65.046560][    C3]  nf_hook_slow+0xbb/0x200
[   65.047735][    C3]  nf_hook+0x386/0x6d0
[   65.048809][    C3]  ? __pfx_dst_output+0x10/0x10
[   65.050085][    C3]  ? __pfx_nf_hook+0x10/0x10
[   65.051295][    C3]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[   65.052824][    C3]  ? __pfx_ip_reply_glue_bits+0x10/0x10
[   65.054265][    C3]  ? __pfx_dst_output+0x10/0x10
[   65.055534][    C3]  ? __ip_make_skb+0x1150/0x1d00
[   65.056828][    C3]  ? do_csum+0x26f/0x2d0
[   65.057944][    C3]  __ip_local_out+0x339/0x640
[   65.059168][    C3]  ? __pfx_dst_output+0x10/0x10
[   65.060437][    C3]  ip_push_pending_frames+0xa0/0x5b0
[   65.061822][    C3]  ip_send_unicast_reply+0xd0e/0x1650
[   65.063214][    C3]  ? __pfx_ip_send_unicast_reply+0x10/0x10
[   65.064730][    C3]  ? debug_object_assert_init+0x1c7/0x2f0
[   65.066224][    C3]  ? trace_lock_acquire+0x14e/0x1f0
[   65.067581][    C3]  ? tcp_v4_send_ack+0x627/0x13f0
[   65.068895][    C3]  tcp_v4_send_ack+0x976/0x13f0
[   65.070174][    C3]  ? __pfx___lock_acquire+0x10/0x10
[   65.071567][    C3]  ? __pfx_tcp_v4_send_ack+0x10/0x10
[   65.072935][    C3]  ? find_held_lock+0x2d/0x110
[   65.074194][    C3]  ? tcp_v4_rcv+0x38a6/0x4380
[   65.075420][    C3]  ? mark_held_locks+0x9f/0xe0
[   65.076670][    C3]  ? tcp_v4_rcv+0x2f8e/0x4380
[   65.077900][    C3]  tcp_v4_rcv+0x2f8e/0x4380
[   65.079086][    C3]  ? __pfx_tcp_v4_rcv+0x10/0x10
[   65.080355][    C3]  ? rcu_is_watching+0x12/0xc0
[   65.081616][    C3]  ? __pfx_tcp_v4_rcv+0x10/0x10
[   65.082883][    C3]  ip_protocol_deliver_rcu+0xba/0x4c0
[   65.084271][    C3]  ip_local_deliver_finish+0x316/0x570
[   65.085684][    C3]  ip_local_deliver+0x18e/0x1f0
[   65.086964][    C3]  ? __pfx_ip_local_deliver+0x10/0x10
[   65.088358][    C3]  ip_rcv+0x2c3/0x5d0
[   65.089424][    C3]  ? __pfx_ip_rcv+0x10/0x10
[   65.090622][    C3]  __netif_receive_skb_one_core+0x199/0x1e0
[   65.092171][    C3]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[   65.093843][    C3]  ? rcu_is_watching+0x12/0xc0
[   65.095107][    C3]  ? process_backlog+0x3f1/0x15f0
[   65.096426][    C3]  ? process_backlog+0x3f1/0x15f0
[   65.097758][    C3]  __netif_receive_skb+0x1d/0x160
[   65.099082][    C3]  process_backlog+0x443/0x15f0
[   65.100358][    C3]  __napi_poll.constprop.0+0xb7/0x550
[   65.101760][    C3]  net_rx_action+0xa94/0x1010
[   65.102984][    C3]  ? __pfx_net_rx_action+0x10/0x10
[   65.104324][    C3]  ? __pfx_mark_lock+0x10/0x10
[   65.105585][    C3]  ? trace_rcu_utilization+0x106/0x170
[   65.106997][    C3]  ? kvm_sched_clock_read+0x11/0x20
[   65.108347][    C3]  ? sched_clock+0x38/0x60
[   65.109520][    C3]  ? sched_clock_cpu+0x6d/0x4d0
[   65.110796][    C3]  ? mark_held_locks+0x9f/0xe0
[   65.112051][    C3]  handle_softirqs+0x213/0x8f0
[   65.113310][    C3]  ? __pfx_handle_softirqs+0x10/0x10
[   65.114679][    C3]  ? __dev_queue_xmit+0x89b/0x43e0
[   65.116012][    C3]  do_softirq+0xb2/0xf0
[   65.117104][    C3]  </IRQ>
[   65.117879][    C3]  <TASK>
[   65.118657][    C3]  __local_bh_enable_ip+0x100/0x120
[   65.120008][    C3]  ? __dev_queue_xmit+0x89b/0x43e0
[   65.121347][    C3]  __dev_queue_xmit+0x8b0/0x43e0
[   65.122645][    C3]  ? hlock_class+0x4e/0x130
[   65.123811][    C3]  ? __lock_acquire+0x15a9/0x3c40
[   65.125075][    C3]  ? __pfx___dev_queue_xmit+0x10/0x10
[   65.126462][    C3]  ? hlock_class+0x4e/0x130
[   65.127660][    C3]  ? mark_lock+0xb5/0xc60
[   65.128786][    C3]  ? __pfx___lock_acquire+0x10/0x10
[   65.130135][    C3]  ? selinux_ip_postroute+0x73b/0xde0
[   65.131530][    C3]  ? __pfx_mark_lock+0x10/0x10
[   65.132787][    C3]  ? find_held_lock+0x2d/0x110
[   65.134096][    C3]  ? __ip_finish_output+0x49e/0x950
[   65.135454][    C3]  ? __pfx_lock_release+0x10/0x10
[   65.136769][    C3]  ? mark_held_locks+0x9f/0xe0
[   65.138030][    C3]  ip_finish_output2+0xc6c/0x2150
[   65.139337][    C3]  ? __pfx_ip_finish_output2+0x10/0x10
[   65.140753][    C3]  ? ip_skb_dst_mtu+0x3fc/0xc70
[   65.142031][    C3]  ? __pfx_ip_skb_dst_mtu+0x10/0x10
[   65.143383][    C3]  __ip_finish_output+0x49e/0x950
[   65.144701][    C3]  ip_finish_output+0x35/0x380
[   65.145957][    C3]  ip_output+0x13b/0x2a0
[   65.147063][    C3]  ? __pfx_ip_output+0x10/0x10
[   65.148311][    C3]  ip_local_out+0x33e/0x4a0
[   65.149498][    C3]  __ip_queue_xmit+0x777/0x1970
[   65.150764][    C3]  ? __pfx_ip_queue_xmit+0x10/0x10
[   65.152103][    C3]  __tcp_transmit_skb+0x2b39/0x3df0
[   65.153437][    C3]  ? __pfx___tcp_transmit_skb+0x10/0x10
[   65.154875][    C3]  ? __pfx_lock_release+0x10/0x10
[   65.156185][    C3]  ? ktime_get+0x206/0x300
[   65.157357][    C3]  ? lockdep_hardirqs_on+0x7c/0x110
[   65.158721][    C3]  tcp_write_xmit+0x12b1/0x8560
[   65.159994][    C3]  ? tcp_current_mss+0x27e/0x500
[   65.161302][    C3]  __tcp_push_pending_frames+0xaf/0x390
[   65.162727][    C3]  tcp_send_fin+0x154/0xc70
[   65.163904][    C3]  ? __pfx_tcp_send_fin+0x10/0x10
[   65.165202][    C3]  ? mark_held_locks+0x9f/0xe0
[   65.166446][    C3]  tcp_shutdown+0x12b/0x170
[   65.167621][    C3]  mptcp_subflow_shutdown+0x1c3/0x380
[   65.169014][    C3]  mptcp_check_send_data_fin+0x24a/0x450
[   65.170478][    C3]  __mptcp_close+0x8cb/0xb90
[   65.171690][    C3]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   65.173086][    C3]  ? __pfx___mptcp_close+0x10/0x10
[   65.174410][    C3]  ? __local_bh_enable_ip+0xa4/0x120
[   65.175783][    C3]  mptcp_close+0x28/0xe0
[   65.176886][    C3]  inet_release+0x13c/0x280
[   65.178075][    C3]  __sock_release+0xb0/0x270
[   65.179280][    C3]  ? __pfx_sock_close+0x10/0x10
[   65.180542][    C3]  sock_close+0x1c/0x30
[   65.181631][    C3]  __fput+0x3f8/0xb60
[   65.182672][    C3]  ? _raw_spin_unlock_irq+0x23/0x50
[   65.184014][    C3]  task_work_run+0x14e/0x250
[   65.185215][    C3]  ? __pfx_task_work_run+0x10/0x10
[   65.186534][    C3]  ? __pfx___do_sys_close_range+0x10/0x10
[   65.188005][    C3]  syscall_exit_to_user_mode+0x27b/0x2a0
[   65.189462][    C3]  do_syscall_64+0xda/0x250
[   65.190648][    C3]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.192180][    C3] RIP: 0033:0x7f882157ff19
[   65.193346][    C3] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   65.198379][    C3] RSP: 002b:00007ffed8a82f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[   65.200519][    C3] RAX: 0000000000000000 RBX: 000000000000fc6d RCX: 00007f882157ff19
[   65.202556][    C3] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[   65.204589][    C3] RBP: 00007f8821747ba0 R08: 0000000000000001 R09: 00007ffed8a8327f
[   65.206624][    C3] R10: 00007f8821400000 R11: 0000000000000246 R12: 000000000000fca7
[   65.208672][    C3] R13: 00007f8821745fa0 R14: 0000000000000032 R15: ffffffffffffffff
[   65.210710][    C3]  </TASK>
[   65.212045][    C3] Kernel Offset: disabled
[   65.213184][    C3] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:31:05  Registers:
info registers vcpu 0

CPU#0
RAX=00000000000bd4dd RBX=0000000000000000 RCX=ffffffff8b29c759 RDX=0000000000000000
RSI=ffffffff8b6cd840 RDI=ffffffff8bd1b4a0 RBP=fffffbfff1bd2ef8 RSP=ffffffff8de07e20
R8 =0000000000000001 R9 =ffffed100d4c6fed R10=ffff88806a637f6b R11=0000000000000000
R12=0000000000000000 R13=ffffffff8de977c0 R14=ffffffff905f0410 R15=0000000000000000
RIP=ffffffff8b29db3f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f88215b3aa0 CR3=0000000040cf2000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000400001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea40b1e60 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88263f4830
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88263f483d
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88263f4837
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88263f484b
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88263f48d1
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88263f49af
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49de3777a6600fa8 f68f0a9667b5a409 235cd6ac9bc36be8 5e2f83f07499cc22
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620706177 730074616d726f66 207972616e690004 0000000b000c000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305554452 5600514448574a43 055c57444b4c4705 4b524a4b4e4b5000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc90006cc0000 RBX=0000000000000000 RCX=ffff888027b19070 RDX=000000000000009d
RSI=ffffffff865ffee6 RDI=ffff888027b19268 RBP=0000000000000001 RSP=ffffc900006b0b88
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000003
R12=0000000000000001 R13=0000000000004e20 R14=ffff888027b19070 R15=0000000000000001
RIP=ffffffff865fff23 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4a8952dd00 ffffffff 00c00000
GS =0000 ffff88806a700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000001b2e75ffff CR3=0000000028ddc000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865
ZMM17=41df1ae57fad27af b37870450bf3d3e1 41df1ae57fad27af b37870450bf3d3e1 41df1ae57fad27af b37870450bf3d3e1 41df1ae57fad27af b37870450bf3d3e1
ZMM18=07f848524866c6af 6c3ae76012da67d8 07f848524866c6af 6c3ae76012da67d8 07f848524866c6af 6c3ae76012da67d8 07f848524866c6af 6c3ae76012da67d8
ZMM19=7004000000000000 0000000000000005 7004000000000000 0000000000000004 7004000000000000 0000000000000003 7004000000000000 0000000000000002
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=b3787045b3787045 b3787045b3787045 b3787045b3787045 b3787045b3787045 b3787045b3787045 b3787045b3787045 b3787045b3787045 b3787045b3787045
ZMM22=7fad27af7fad27af 7fad27af7fad27af 7fad27af7fad27af 7fad27af7fad27af 7fad27af7fad27af 7fad27af7fad27af 7fad27af7fad27af 7fad27af7fad27af
ZMM23=41df1ae541df1ae5 41df1ae541df1ae5 41df1ae541df1ae5 41df1ae541df1ae5 41df1ae541df1ae5 41df1ae541df1ae5 41df1ae541df1ae5 41df1ae541df1ae5
ZMM24=12da67d812da67d8 12da67d812da67d8 12da67d812da67d8 12da67d812da67d8 12da67d812da67d8 12da67d812da67d8 12da67d812da67d8 12da67d812da67d8
ZMM25=6c3ae7606c3ae760 6c3ae7606c3ae760 6c3ae7606c3ae760 6c3ae7606c3ae760 6c3ae7606c3ae760 6c3ae7606c3ae760 6c3ae7606c3ae760 6c3ae7606c3ae760
ZMM26=4866c6af4866c6af 4866c6af4866c6af 4866c6af4866c6af 4866c6af4866c6af 4866c6af4866c6af 4866c6af4866c6af 4866c6af4866c6af 4866c6af4866c6af
ZMM27=07f8485207f84852 07f8485207f84852 07f8485207f84852 07f8485207f84852 07f8485207f84852 07f8485207f84852 07f8485207f84852 07f8485207f84852
ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=6f0400006f040000 6f0400006f040000 6f0400006f040000 6f0400006f040000 6f0400006f040000 6f0400006f040000 6f0400006f040000 6f0400006f040000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=ffffea00012673c0 RCX=ffffffff81ea0a06 RDX=ffff888023060000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffea00012673c0 RSP=ffffc900063df5f8
R8 =0000000000000006 R9 =00000000000499cf R10=0000000000013794 R11=0000000000000003
R12=00000000000499cf R13=0000000000000001 R14=0000000000000000 R15=0000000000013794
RIP=ffffffff819a0850 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a800000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f882233cd58 CR3=000000000df7e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000e0000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd02cc5c90 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ebd7f4830
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ebd7f483d
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ebd7f4837
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ebd7f484b
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ebd7f48d1
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ebd7f49af
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff851c9990 RDI=ffffffff9ab0fbe0 RBP=ffffffff9ab0fba0 RSP=ffffc90000707cd8
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552
R12=0000000000000000 R13=0000000000000020 R14=fffffbfff3561fce R15=dffffc0000000000
RIP=ffffffff851c99b7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555ba59500 ffffffff 00c00000
GS =0000 ffff88806a900000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000020001100 CR3=0000000027c20000 CR4=00352ef0
DR0=0000000000000000 DR1=00000000872c9164 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea40b20c0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88263f4830
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88263f483d
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88263f4837
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88263f484b
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88263f48d1
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88263f49af
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000