Warning: Permanently added '[localhost]:20383' (ECDSA) to the list of known hosts.
[   55.481507][   T36] audit: type=1400 audit(1677973642.118:75): avc:  denied  { execute } for  pid=5133 comm="sh" name="syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   55.497716][   T36] audit: type=1400 audit(1677973642.118:76): avc:  denied  { execute_no_trans } for  pid=5133 comm="sh" path="/syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
2023/03/04 23:47:22 fuzzer started
2023/03/04 23:47:22 dialing manager at localhost:43499
[   56.305043][   T36] audit: type=1400 audit(1677973642.948:77): avc:  denied  { mounton } for  pid=5144 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   56.314270][ T5144] cgroup: Unknown subsys name 'net'
[   56.325017][   T36] audit: type=1400 audit(1677973642.948:78): avc:  denied  { mount } for  pid=5144 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   56.351537][   T36] audit: type=1400 audit(1677973642.988:79): avc:  denied  { unmount } for  pid=5144 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   56.473604][ T5144] cgroup: Unknown subsys name 'rlimit'
[   56.660471][   T36] audit: type=1400 audit(1677973643.298:80): avc:  denied  { mounton } for  pid=5144 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
2023/03/04 23:47:23 syscalls: 3859
2023/03/04 23:47:23 code coverage: enabled
2023/03/04 23:47:23 comparison tracing: enabled
2023/03/04 23:47:23 extra coverage: enabled
2023/03/04 23:47:23 delay kcov mmap: enabled
2023/03/04 23:47:23 setuid sandbox: enabled
2023/03/04 23:47:23 namespace sandbox: enabled
2023/03/04 23:47:23 Android sandbox: enabled
2023/03/04 23:47:23 fault injection: enabled
2023/03/04 23:47:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2023/03/04 23:47:23 net packet injection: enabled
2023/03/04 23:47:23 net device setup: enabled
2023/03/04 23:47:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2023/03/04 23:47:23 devlink PCI setup: PCI device 0000:00:10.0 is not available
2023/03/04 23:47:23 NIC VF setup: PCI device 0000:00:11.0 is not available
2023/03/04 23:47:23 USB emulation: enabled
2023/03/04 23:47:23 hci packet injection: enabled
2023/03/04 23:47:23 wifi device emulation: enabled
2023/03/04 23:47:23 802.15.4 emulation: enabled
2023/03/04 23:47:23 fetching corpus: 0, signal 0/2000 (executing program)
[   56.678096][   T36] audit: type=1400 audit(1677973643.298:81): avc:  denied  { mount } for  pid=5144 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   56.699955][   T36] audit: type=1400 audit(1677973643.308:82): avc:  denied  { setattr } for  pid=5144 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
2023/03/04 23:47:23 fetching corpus: 50, signal 40160/43862 (executing program)
2023/03/04 23:47:24 fetching corpus: 100, signal 64013/69326 (executing program)
2023/03/04 23:47:24 fetching corpus: 150, signal 78005/84850 (executing program)
2023/03/04 23:47:24 fetching corpus: 200, signal 96065/104320 (executing program)
2023/03/04 23:47:24 fetching corpus: 250, signal 107046/116675 (executing program)
2023/03/04 23:47:25 fetching corpus: 300, signal 114194/125227 (executing program)
2023/03/04 23:47:25 fetching corpus: 350, signal 122695/135071 (executing program)
2023/03/04 23:47:25 fetching corpus: 400, signal 128385/142145 (executing program)
2023/03/04 23:47:25 fetching corpus: 450, signal 134612/149662 (executing program)
2023/03/04 23:47:26 fetching corpus: 500, signal 139984/156316 (executing program)
2023/03/04 23:47:26 fetching corpus: 550, signal 143628/161311 (executing program)
2023/03/04 23:47:26 fetching corpus: 600, signal 148837/167777 (executing program)
2023/03/04 23:47:26 fetching corpus: 650, signal 156962/176914 (executing program)
2023/03/04 23:47:27 fetching corpus: 700, signal 162894/183979 (executing program)
2023/03/04 23:47:27 fetching corpus: 750, signal 167411/189638 (executing program)
2023/03/04 23:47:27 fetching corpus: 800, signal 172250/195539 (executing program)
2023/03/04 23:47:27 fetching corpus: 850, signal 178378/202614 (executing program)
2023/03/04 23:47:28 fetching corpus: 900, signal 182052/207342 (executing program)
2023/03/04 23:47:28 fetching corpus: 950, signal 185289/211656 (executing program)
2023/03/04 23:47:28 fetching corpus: 1000, signal 188622/216020 (executing program)
2023/03/04 23:47:28 fetching corpus: 1050, signal 194628/222823 (executing program)
2023/03/04 23:47:29 fetching corpus: 1100, signal 196746/225998 (executing program)
2023/03/04 23:47:29 fetching corpus: 1150, signal 202251/232260 (executing program)
2023/03/04 23:47:29 fetching corpus: 1200, signal 204982/235939 (executing program)
2023/03/04 23:47:29 fetching corpus: 1250, signal 209107/240877 (executing program)
2023/03/04 23:47:30 fetching corpus: 1300, signal 212507/245079 (executing program)
2023/03/04 23:47:30 fetching corpus: 1350, signal 215191/248686 (executing program)
2023/03/04 23:47:30 fetching corpus: 1400, signal 221973/255980 (executing program)
2023/03/04 23:47:31 fetching corpus: 1450, signal 225047/259892 (executing program)
2023/03/04 23:47:31 fetching corpus: 1500, signal 227819/263532 (executing program)
2023/03/04 23:47:31 fetching corpus: 1550, signal 229758/266382 (executing program)
2023/03/04 23:47:32 fetching corpus: 1600, signal 232370/269810 (executing program)
2023/03/04 23:47:32 fetching corpus: 1650, signal 235153/273358 (executing program)
2023/03/04 23:47:32 fetching corpus: 1700, signal 237171/276208 (executing program)
2023/03/04 23:47:32 fetching corpus: 1750, signal 239500/279336 (executing program)
2023/03/04 23:47:33 fetching corpus: 1800, signal 241658/282309 (executing program)
2023/03/04 23:47:33 fetching corpus: 1850, signal 244690/286037 (executing program)
2023/03/04 23:47:33 fetching corpus: 1900, signal 247184/289295 (executing program)
2023/03/04 23:47:33 fetching corpus: 1950, signal 250412/293113 (executing program)
2023/03/04 23:47:34 fetching corpus: 2000, signal 251530/295140 (executing program)
2023/03/04 23:47:34 fetching corpus: 2050, signal 254754/298933 (executing program)
2023/03/04 23:47:34 fetching corpus: 2100, signal 256367/301394 (executing program)
2023/03/04 23:47:34 fetching corpus: 2150, signal 258799/304480 (executing program)
2023/03/04 23:47:35 fetching corpus: 2200, signal 260648/307093 (executing program)
2023/03/04 23:47:35 fetching corpus: 2250, signal 262365/309571 (executing program)
2023/03/04 23:47:35 fetching corpus: 2300, signal 264103/312042 (executing program)
2023/03/04 23:47:35 fetching corpus: 2350, signal 266551/315066 (executing program)
2023/03/04 23:47:36 fetching corpus: 2400, signal 268640/317785 (executing program)
2023/03/04 23:47:36 fetching corpus: 2450, signal 272041/321532 (executing program)
2023/03/04 23:47:37 fetching corpus: 2500, signal 274997/324905 (executing program)
2023/03/04 23:47:37 fetching corpus: 2550, signal 276242/326853 (executing program)
2023/03/04 23:47:37 fetching corpus: 2600, signal 278165/329346 (executing program)
2023/03/04 23:47:37 fetching corpus: 2650, signal 280703/332345 (executing program)
2023/03/04 23:47:37 fetching corpus: 2700, signal 283331/335407 (executing program)
2023/03/04 23:47:38 fetching corpus: 2750, signal 285024/337677 (executing program)
2023/03/04 23:47:38 fetching corpus: 2800, signal 286934/340122 (executing program)
2023/03/04 23:47:38 fetching corpus: 2850, signal 287874/341807 (executing program)
2023/03/04 23:47:38 fetching corpus: 2900, signal 290017/344384 (executing program)
2023/03/04 23:47:39 fetching corpus: 2949, signal 291773/346685 (executing program)
2023/03/04 23:47:39 fetching corpus: 2999, signal 293724/349128 (executing program)
2023/03/04 23:47:39 fetching corpus: 3049, signal 295949/351735 (executing program)
2023/03/04 23:47:40 fetching corpus: 3098, signal 298503/354638 (executing program)
2023/03/04 23:47:40 fetching corpus: 3147, signal 299940/356640 (executing program)
2023/03/04 23:47:40 fetching corpus: 3197, signal 300909/358244 (executing program)
2023/03/04 23:47:40 fetching corpus: 3246, signal 302362/360265 (executing program)
2023/03/04 23:47:41 fetching corpus: 3295, signal 303903/362348 (executing program)
2023/03/04 23:47:41 fetching corpus: 3345, signal 305647/364522 (executing program)
2023/03/04 23:47:41 fetching corpus: 3395, signal 306831/366275 (executing program)
2023/03/04 23:47:41 fetching corpus: 3445, signal 308776/368589 (executing program)
2023/03/04 23:47:42 fetching corpus: 3493, signal 310743/370884 (executing program)
2023/03/04 23:47:42 fetching corpus: 3542, signal 312114/372685 (executing program)
2023/03/04 23:47:42 fetching corpus: 3592, signal 313209/374345 (executing program)
2023/03/04 23:47:42 fetching corpus: 3639, signal 314885/376405 (executing program)
2023/03/04 23:47:42 fetching corpus: 3689, signal 317397/379033 (executing program)
2023/03/04 23:47:43 fetching corpus: 3739, signal 318355/380507 (executing program)
2023/03/04 23:47:43 fetching corpus: 3789, signal 319643/382226 (executing program)
[   76.968517][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[   76.977653][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
2023/03/04 23:47:44 fetching corpus: 3839, signal 320907/383930 (executing program)
2023/03/04 23:47:44 fetching corpus: 3887, signal 321560/385203 (executing program)
2023/03/04 23:47:44 fetching corpus: 3937, signal 322721/386838 (executing program)
2023/03/04 23:47:44 fetching corpus: 3985, signal 323888/388412 (executing program)
2023/03/04 23:47:44 fetching corpus: 4034, signal 325321/390229 (executing program)
2023/03/04 23:47:45 fetching corpus: 4084, signal 327033/392230 (executing program)
2023/03/04 23:47:45 fetching corpus: 4134, signal 328383/393967 (executing program)
2023/03/04 23:47:45 fetching corpus: 4184, signal 329563/395528 (executing program)
2023/03/04 23:47:45 fetching corpus: 4234, signal 330679/397105 (executing program)
2023/03/04 23:47:46 fetching corpus: 4284, signal 333386/399723 (executing program)
2023/03/04 23:47:46 fetching corpus: 4334, signal 334712/401333 (executing program)
2023/03/04 23:47:46 fetching corpus: 4384, signal 336053/402989 (executing program)
2023/03/04 23:47:46 fetching corpus: 4434, signal 337156/404471 (executing program)
2023/03/04 23:47:47 fetching corpus: 4484, signal 338579/406115 (executing program)
2023/03/04 23:47:47 fetching corpus: 4534, signal 339715/407610 (executing program)
2023/03/04 23:47:47 fetching corpus: 4584, signal 341345/409361 (executing program)
2023/03/04 23:47:47 fetching corpus: 4634, signal 342717/410968 (executing program)
2023/03/04 23:47:48 fetching corpus: 4684, signal 343925/412513 (executing program)
2023/03/04 23:47:48 fetching corpus: 4734, signal 344720/413735 (executing program)
2023/03/04 23:47:48 fetching corpus: 4784, signal 345742/415112 (executing program)
2023/03/04 23:47:48 fetching corpus: 4834, signal 346858/416551 (executing program)
2023/03/04 23:47:49 fetching corpus: 4884, signal 348418/418278 (executing program)
2023/03/04 23:47:49 fetching corpus: 4934, signal 349602/419708 (executing program)
2023/03/04 23:47:49 fetching corpus: 4984, signal 350399/420923 (executing program)
2023/03/04 23:47:49 fetching corpus: 5034, signal 352282/422866 (executing program)
2023/03/04 23:47:49 fetching corpus: 5084, signal 353499/424253 (executing program)
2023/03/04 23:47:50 fetching corpus: 5134, signal 354304/425425 (executing program)
2023/03/04 23:47:50 fetching corpus: 5184, signal 355763/427019 (executing program)
2023/03/04 23:47:50 fetching corpus: 5234, signal 357927/429012 (executing program)
2023/03/04 23:47:50 fetching corpus: 5284, signal 358747/430215 (executing program)
2023/03/04 23:47:51 fetching corpus: 5334, signal 360763/432070 (executing program)
2023/03/04 23:47:51 fetching corpus: 5384, signal 361679/433241 (executing program)
2023/03/04 23:47:51 fetching corpus: 5434, signal 362839/434604 (executing program)
2023/03/04 23:47:51 fetching corpus: 5484, signal 363859/435850 (executing program)
2023/03/04 23:47:52 fetching corpus: 5532, signal 365043/437216 (executing program)
2023/03/04 23:47:52 fetching corpus: 5582, signal 366759/438844 (executing program)
2023/03/04 23:47:52 fetching corpus: 5630, signal 368226/440343 (executing program)
2023/03/04 23:47:52 fetching corpus: 5680, signal 369060/441426 (executing program)
2023/03/04 23:47:53 fetching corpus: 5730, signal 370231/442712 (executing program)
2023/03/04 23:47:53 fetching corpus: 5778, signal 371554/444079 (executing program)
2023/03/04 23:47:53 fetching corpus: 5828, signal 372295/445136 (executing program)
[   87.204329][   T21] cfg80211: failed to load regulatory.db
2023/03/04 23:47:53 fetching corpus: 5878, signal 373398/446353 (executing program)
2023/03/04 23:47:54 fetching corpus: 5928, signal 374389/447501 (executing program)
2023/03/04 23:47:54 fetching corpus: 5978, signal 375403/448711 (executing program)
2023/03/04 23:47:54 fetching corpus: 6028, signal 376904/450118 (executing program)
2023/03/04 23:47:54 fetching corpus: 6078, signal 377682/451160 (executing program)
2023/03/04 23:47:55 fetching corpus: 6128, signal 378435/452151 (executing program)
2023/03/04 23:47:55 fetching corpus: 6178, signal 379213/453156 (executing program)
2023/03/04 23:47:55 fetching corpus: 6227, signal 380092/454227 (executing program)
2023/03/04 23:47:56 fetching corpus: 6277, signal 381084/455335 (executing program)
2023/03/04 23:47:56 fetching corpus: 6326, signal 381926/456376 (executing program)
2023/03/04 23:47:56 fetching corpus: 6376, signal 382907/457492 (executing program)
2023/03/04 23:47:56 fetching corpus: 6426, signal 383813/458566 (executing program)
2023/03/04 23:47:56 fetching corpus: 6476, signal 384461/459438 (executing program)
2023/03/04 23:47:57 fetching corpus: 6526, signal 385014/460324 (executing program)
2023/03/04 23:47:57 fetching corpus: 6576, signal 385772/461240 (executing program)
2023/03/04 23:47:57 fetching corpus: 6626, signal 386328/462098 (executing program)
2023/03/04 23:47:58 fetching corpus: 6676, signal 387891/463417 (executing program)
2023/03/04 23:47:58 fetching corpus: 6725, signal 388675/464376 (executing program)
2023/03/04 23:47:58 fetching corpus: 6775, signal 389656/465407 (executing program)
2023/03/04 23:47:58 fetching corpus: 6825, signal 390360/466287 (executing program)
2023/03/04 23:47:59 fetching corpus: 6875, signal 391271/467271 (executing program)
2023/03/04 23:47:59 fetching corpus: 6924, signal 391834/468127 (executing program)
2023/03/04 23:47:59 fetching corpus: 6974, signal 392926/469208 (executing program)
2023/03/04 23:48:00 fetching corpus: 7024, signal 393741/470106 (executing program)
2023/03/04 23:48:00 fetching corpus: 7073, signal 394645/471063 (executing program)
2023/03/04 23:48:00 fetching corpus: 7121, signal 395844/472154 (executing program)
2023/03/04 23:48:01 fetching corpus: 7170, signal 396740/473150 (executing program)
2023/03/04 23:48:01 fetching corpus: 7220, signal 397293/473922 (executing program)
2023/03/04 23:48:01 fetching corpus: 7270, signal 398016/474779 (executing program)
2023/03/04 23:48:01 fetching corpus: 7320, signal 398909/475699 (executing program)
2023/03/04 23:48:01 fetching corpus: 7368, signal 399655/476590 (executing program)
2023/03/04 23:48:02 fetching corpus: 7417, signal 400473/477489 (executing program)
2023/03/04 23:48:02 fetching corpus: 7467, signal 401005/478251 (executing program)
2023/03/04 23:48:02 fetching corpus: 7517, signal 401767/479102 (executing program)
2023/03/04 23:48:02 fetching corpus: 7567, signal 402250/479793 (executing program)
2023/03/04 23:48:03 fetching corpus: 7617, signal 403248/480719 (executing program)
2023/03/04 23:48:03 fetching corpus: 7667, signal 404001/481542 (executing program)
2023/03/04 23:48:03 fetching corpus: 7717, signal 404871/482347 (executing program)
2023/03/04 23:48:03 fetching corpus: 7767, signal 405837/483304 (executing program)
2023/03/04 23:48:04 fetching corpus: 7817, signal 407161/484369 (executing program)
2023/03/04 23:48:04 fetching corpus: 7867, signal 407817/485131 (executing program)
2023/03/04 23:48:04 fetching corpus: 7917, signal 408379/485895 (executing program)
2023/03/04 23:48:04 fetching corpus: 7967, signal 409274/486700 (executing program)
2023/03/04 23:48:05 fetching corpus: 8017, signal 410055/487512 (executing program)
2023/03/04 23:48:05 fetching corpus: 8067, signal 410876/488347 (executing program)
2023/03/04 23:48:05 fetching corpus: 8117, signal 411919/489220 (executing program)
2023/03/04 23:48:05 fetching corpus: 8167, signal 413012/490123 (executing program)
2023/03/04 23:48:06 fetching corpus: 8217, signal 413977/490971 (executing program)
2023/03/04 23:48:06 fetching corpus: 8267, signal 414728/491741 (executing program)
2023/03/04 23:48:06 fetching corpus: 8316, signal 415298/492434 (executing program)
2023/03/04 23:48:06 fetching corpus: 8366, signal 415872/493114 (executing program)
2023/03/04 23:48:06 fetching corpus: 8416, signal 416515/493826 (executing program)
2023/03/04 23:48:07 fetching corpus: 8465, signal 417190/494520 (executing program)
2023/03/04 23:48:07 fetching corpus: 8515, signal 418392/495367 (executing program)
2023/03/04 23:48:07 fetching corpus: 8565, signal 419092/496098 (executing program)
2023/03/04 23:48:07 fetching corpus: 8615, signal 419720/496809 (executing program)
2023/03/04 23:48:07 fetching corpus: 8665, signal 420836/497652 (executing program)
2023/03/04 23:48:08 fetching corpus: 8715, signal 421581/498351 (executing program)
2023/03/04 23:48:08 fetching corpus: 8763, signal 422111/498949 (executing program)
2023/03/04 23:48:09 fetching corpus: 8813, signal 422974/499709 (executing program)
2023/03/04 23:48:09 fetching corpus: 8863, signal 423611/500347 (executing program)
2023/03/04 23:48:09 fetching corpus: 8912, signal 424360/501045 (executing program)
2023/03/04 23:48:09 fetching corpus: 8962, signal 425212/501759 (executing program)
2023/03/04 23:48:10 fetching corpus: 9010, signal 425835/502342 (executing program)
2023/03/04 23:48:10 fetching corpus: 9059, signal 426715/503043 (executing program)
2023/03/04 23:48:10 fetching corpus: 9107, signal 427297/503619 (executing program)
2023/03/04 23:48:11 fetching corpus: 9157, signal 428147/504253 (executing program)
2023/03/04 23:48:11 fetching corpus: 9207, signal 429306/505053 (executing program)
2023/03/04 23:48:11 fetching corpus: 9257, signal 430179/505718 (executing program)
2023/03/04 23:48:11 fetching corpus: 9307, signal 430769/506351 (executing program)
2023/03/04 23:48:12 fetching corpus: 9357, signal 431475/506946 (executing program)
2023/03/04 23:48:12 fetching corpus: 9407, signal 432470/507618 (executing program)
2023/03/04 23:48:12 fetching corpus: 9456, signal 434407/508572 (executing program)
2023/03/04 23:48:13 fetching corpus: 9505, signal 435044/509131 (executing program)
2023/03/04 23:48:13 fetching corpus: 9555, signal 435576/509633 (executing program)
2023/03/04 23:48:13 fetching corpus: 9605, signal 436299/510239 (executing program)
2023/03/04 23:48:13 fetching corpus: 9655, signal 436819/510754 (executing program)
2023/03/04 23:48:13 fetching corpus: 9704, signal 437474/511307 (executing program)
2023/03/04 23:48:14 fetching corpus: 9753, signal 438102/511851 (executing program)
2023/03/04 23:48:14 fetching corpus: 9803, signal 438972/512457 (executing program)
2023/03/04 23:48:14 fetching corpus: 9853, signal 439682/513011 (executing program)
2023/03/04 23:48:14 fetching corpus: 9901, signal 440397/513610 (executing program)
2023/03/04 23:48:15 fetching corpus: 9951, signal 440907/514116 (executing program)
2023/03/04 23:48:15 fetching corpus: 10001, signal 441576/514666 (executing program)
2023/03/04 23:48:15 fetching corpus: 10051, signal 442267/515198 (executing program)
2023/03/04 23:48:15 fetching corpus: 10101, signal 443054/515772 (executing program)
2023/03/04 23:48:16 fetching corpus: 10149, signal 443943/516328 (executing program)
2023/03/04 23:48:16 fetching corpus: 10199, signal 444447/516799 (executing program)
2023/03/04 23:48:16 fetching corpus: 10249, signal 444860/517218 (executing program)
2023/03/04 23:48:16 fetching corpus: 10299, signal 445659/517738 (executing program)
2023/03/04 23:48:17 fetching corpus: 10349, signal 446184/518193 (executing program)
2023/03/04 23:48:17 fetching corpus: 10399, signal 446819/518660 (executing program)
2023/03/04 23:48:17 fetching corpus: 10448, signal 447322/519089 (executing program)
2023/03/04 23:48:17 fetching corpus: 10498, signal 447952/519567 (executing program)
2023/03/04 23:48:18 fetching corpus: 10547, signal 448560/520037 (executing program)
2023/03/04 23:48:18 fetching corpus: 10597, signal 449411/520546 (executing program)
2023/03/04 23:48:18 fetching corpus: 10647, signal 450115/521037 (executing program)
2023/03/04 23:48:18 fetching corpus: 10697, signal 451009/521564 (executing program)
2023/03/04 23:48:19 fetching corpus: 10747, signal 451587/521996 (executing program)
2023/03/04 23:48:19 fetching corpus: 10797, signal 452030/522386 (executing program)
2023/03/04 23:48:19 fetching corpus: 10847, signal 452434/522781 (executing program)
2023/03/04 23:48:19 fetching corpus: 10896, signal 453325/523297 (executing program)
2023/03/04 23:48:19 fetching corpus: 10946, signal 453760/523699 (executing program)
2023/03/04 23:48:20 fetching corpus: 10996, signal 454342/524132 (executing program)
2023/03/04 23:48:20 fetching corpus: 11046, signal 454981/524570 (executing program)
2023/03/04 23:48:20 fetching corpus: 11096, signal 455463/524947 (executing program)
2023/03/04 23:48:20 fetching corpus: 11146, signal 455993/525323 (executing program)
2023/03/04 23:48:21 fetching corpus: 11196, signal 456451/525709 (executing program)
2023/03/04 23:48:21 fetching corpus: 11246, signal 456851/526056 (executing program)
2023/03/04 23:48:21 fetching corpus: 11296, signal 457180/526425 (executing program)
2023/03/04 23:48:21 fetching corpus: 11346, signal 457779/526841 (executing program)
2023/03/04 23:48:22 fetching corpus: 11396, signal 458197/527206 (executing program)
2023/03/04 23:48:22 fetching corpus: 11446, signal 458798/527618 (executing program)
2023/03/04 23:48:22 fetching corpus: 11496, signal 459351/527962 (executing program)
2023/03/04 23:48:22 fetching corpus: 11546, signal 459899/528317 (executing program)
2023/03/04 23:48:23 fetching corpus: 11596, signal 460207/528649 (executing program)
2023/03/04 23:48:23 fetching corpus: 11646, signal 461015/529039 (executing program)
2023/03/04 23:48:23 fetching corpus: 11696, signal 461423/529352 (executing program)
2023/03/04 23:48:24 fetching corpus: 11745, signal 462261/529750 (executing program)
2023/03/04 23:48:24 fetching corpus: 11795, signal 463036/530100 (executing program)
2023/03/04 23:48:24 fetching corpus: 11845, signal 463651/530462 (executing program)
2023/03/04 23:48:24 fetching corpus: 11895, signal 464044/530817 (executing program)
2023/03/04 23:48:25 fetching corpus: 11945, signal 464533/531155 (executing program)
2023/03/04 23:48:25 fetching corpus: 11995, signal 465078/531483 (executing program)
2023/03/04 23:48:25 fetching corpus: 12045, signal 465830/531820 (executing program)
2023/03/04 23:48:26 fetching corpus: 12095, signal 466884/532193 (executing program)
2023/03/04 23:48:26 fetching corpus: 12145, signal 467500/532527 (executing program)
2023/03/04 23:48:26 fetching corpus: 12195, signal 468282/532844 (executing program)
2023/03/04 23:48:26 fetching corpus: 12245, signal 468728/533137 (executing program)
2023/03/04 23:48:26 fetching corpus: 12295, signal 469224/533457 (executing program)
2023/03/04 23:48:27 fetching corpus: 12345, signal 470240/533809 (executing program)
2023/03/04 23:48:27 fetching corpus: 12395, signal 470716/534072 (executing program)
2023/03/04 23:48:27 fetching corpus: 12442, signal 471317/534396 (executing program)
2023/03/04 23:48:28 fetching corpus: 12492, signal 471813/534690 (executing program)
2023/03/04 23:48:28 fetching corpus: 12540, signal 472272/534966 (executing program)
2023/03/04 23:48:28 fetching corpus: 12590, signal 472774/535220 (executing program)
2023/03/04 23:48:28 fetching corpus: 12640, signal 473211/535494 (executing program)
2023/03/04 23:48:29 fetching corpus: 12690, signal 473840/535780 (executing program)
2023/03/04 23:48:29 fetching corpus: 12739, signal 474249/536060 (executing program)
2023/03/04 23:48:29 fetching corpus: 12788, signal 474713/536330 (executing program)
2023/03/04 23:48:29 fetching corpus: 12838, signal 475165/536589 (executing program)
2023/03/04 23:48:30 fetching corpus: 12888, signal 475805/536876 (executing program)
2023/03/04 23:48:30 fetching corpus: 12938, signal 476333/537099 (executing program)
2023/03/04 23:48:30 fetching corpus: 12988, signal 476861/537344 (executing program)
2023/03/04 23:48:30 fetching corpus: 13038, signal 477557/537575 (executing program)
2023/03/04 23:48:30 fetching corpus: 13088, signal 478054/537804 (executing program)
2023/03/04 23:48:31 fetching corpus: 13138, signal 478910/538043 (executing program)
2023/03/04 23:48:31 fetching corpus: 13188, signal 479698/538282 (executing program)
2023/03/04 23:48:31 fetching corpus: 13238, signal 480295/538505 (executing program)
2023/03/04 23:48:31 fetching corpus: 13288, signal 481127/538730 (executing program)
2023/03/04 23:48:32 fetching corpus: 13338, signal 481495/538957 (executing program)
2023/03/04 23:48:32 fetching corpus: 13385, signal 481994/539074 (executing program)
2023/03/04 23:48:32 fetching corpus: 13433, signal 482513/539082 (executing program)
2023/03/04 23:48:32 fetching corpus: 13483, signal 482951/539085 (executing program)
2023/03/04 23:48:33 fetching corpus: 13533, signal 483669/539085 (executing program)
2023/03/04 23:48:33 fetching corpus: 13583, signal 484225/539085 (executing program)
2023/03/04 23:48:33 fetching corpus: 13633, signal 484618/539086 (executing program)
2023/03/04 23:48:33 fetching corpus: 13683, signal 485094/539105 (executing program)
2023/03/04 23:48:34 fetching corpus: 13733, signal 485638/539105 (executing program)
2023/03/04 23:48:34 fetching corpus: 13783, signal 486094/539110 (executing program)
2023/03/04 23:48:34 fetching corpus: 13832, signal 486501/539110 (executing program)
2023/03/04 23:48:34 fetching corpus: 13882, signal 486933/539110 (executing program)
2023/03/04 23:48:34 fetching corpus: 13932, signal 487572/539110 (executing program)
2023/03/04 23:48:35 fetching corpus: 13982, signal 488775/539110 (executing program)
2023/03/04 23:48:35 fetching corpus: 14032, signal 489361/539110 (executing program)
2023/03/04 23:48:35 fetching corpus: 14082, signal 489790/539114 (executing program)
2023/03/04 23:48:35 fetching corpus: 14132, signal 490665/539135 (executing program)
2023/03/04 23:48:36 fetching corpus: 14182, signal 490994/539135 (executing program)
2023/03/04 23:48:36 fetching corpus: 14232, signal 492030/539138 (executing program)
2023/03/04 23:48:36 fetching corpus: 14282, signal 492663/539138 (executing program)
2023/03/04 23:48:36 fetching corpus: 14332, signal 493566/539138 (executing program)
2023/03/04 23:48:36 fetching corpus: 14382, signal 494112/539138 (executing program)
2023/03/04 23:48:37 fetching corpus: 14432, signal 494481/539138 (executing program)
2023/03/04 23:48:37 fetching corpus: 14481, signal 494822/539146 (executing program)
2023/03/04 23:48:37 fetching corpus: 14531, signal 495830/539153 (executing program)
2023/03/04 23:48:37 fetching corpus: 14581, signal 496056/539153 (executing program)
2023/03/04 23:48:37 fetching corpus: 14631, signal 496612/539153 (executing program)
2023/03/04 23:48:38 fetching corpus: 14681, signal 496945/539155 (executing program)
2023/03/04 23:48:38 fetching corpus: 14731, signal 497294/539155 (executing program)
2023/03/04 23:48:38 fetching corpus: 14781, signal 497628/539155 (executing program)
2023/03/04 23:48:38 fetching corpus: 14831, signal 497943/539155 (executing program)
2023/03/04 23:48:38 fetching corpus: 14881, signal 498531/539160 (executing program)
2023/03/04 23:48:39 fetching corpus: 14931, signal 498903/539160 (executing program)
2023/03/04 23:48:39 fetching corpus: 14981, signal 499617/539160 (executing program)
2023/03/04 23:48:39 fetching corpus: 15031, signal 500020/539163 (executing program)
2023/03/04 23:48:40 fetching corpus: 15081, signal 500580/539163 (executing program)
2023/03/04 23:48:40 fetching corpus: 15131, signal 500992/539163 (executing program)
2023/03/04 23:48:40 fetching corpus: 15181, signal 501376/539163 (executing program)
2023/03/04 23:48:40 fetching corpus: 15231, signal 501883/539180 (executing program)
2023/03/04 23:48:40 fetching corpus: 15281, signal 502254/539180 (executing program)
2023/03/04 23:48:41 fetching corpus: 15331, signal 502921/539180 (executing program)
2023/03/04 23:48:41 fetching corpus: 15381, signal 503336/539180 (executing program)
2023/03/04 23:48:41 fetching corpus: 15431, signal 503613/539180 (executing program)
2023/03/04 23:48:41 fetching corpus: 15480, signal 504038/539188 (executing program)
2023/03/04 23:48:41 fetching corpus: 15530, signal 504692/539197 (executing program)
2023/03/04 23:48:42 fetching corpus: 15580, signal 505559/539203 (executing program)
2023/03/04 23:48:42 fetching corpus: 15629, signal 506167/539209 (executing program)
2023/03/04 23:48:42 fetching corpus: 15679, signal 506541/539214 (executing program)
2023/03/04 23:48:42 fetching corpus: 15729, signal 507094/539214 (executing program)
2023/03/04 23:48:43 fetching corpus: 15779, signal 507554/539214 (executing program)
2023/03/04 23:48:43 fetching corpus: 15829, signal 507927/539214 (executing program)
2023/03/04 23:48:43 fetching corpus: 15879, signal 508747/539214 (executing program)
2023/03/04 23:48:43 fetching corpus: 15929, signal 509137/539231 (executing program)
2023/03/04 23:48:43 fetching corpus: 15979, signal 509703/539231 (executing program)
2023/03/04 23:48:44 fetching corpus: 16029, signal 510351/539239 (executing program)
2023/03/04 23:48:44 fetching corpus: 16078, signal 510785/539239 (executing program)
2023/03/04 23:48:44 fetching corpus: 16128, signal 511618/539242 (executing program)
2023/03/04 23:48:45 fetching corpus: 16178, signal 511981/539242 (executing program)
[  138.414385][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  138.419111][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
2023/03/04 23:48:45 fetching corpus: 16228, signal 512481/539244 (executing program)
2023/03/04 23:48:45 fetching corpus: 16278, signal 512845/539244 (executing program)
2023/03/04 23:48:45 fetching corpus: 16328, signal 513341/539244 (executing program)
2023/03/04 23:48:46 fetching corpus: 16378, signal 513671/539250 (executing program)
2023/03/04 23:48:46 fetching corpus: 16428, signal 513926/539250 (executing program)
2023/03/04 23:48:46 fetching corpus: 16477, signal 514861/539250 (executing program)
2023/03/04 23:48:46 fetching corpus: 16527, signal 515399/539250 (executing program)
2023/03/04 23:48:47 fetching corpus: 16576, signal 515774/539251 (executing program)
2023/03/04 23:48:47 fetching corpus: 16626, signal 516128/539251 (executing program)
2023/03/04 23:48:47 fetching corpus: 16676, signal 516652/539251 (executing program)
2023/03/04 23:48:47 fetching corpus: 16726, signal 516888/539251 (executing program)
2023/03/04 23:48:48 fetching corpus: 16776, signal 517639/539252 (executing program)
2023/03/04 23:48:48 fetching corpus: 16825, signal 518106/539257 (executing program)
2023/03/04 23:48:48 fetching corpus: 16875, signal 518732/539257 (executing program)
2023/03/04 23:48:48 fetching corpus: 16925, signal 519129/539257 (executing program)
2023/03/04 23:48:48 fetching corpus: 16974, signal 519472/539259 (executing program)
2023/03/04 23:48:49 fetching corpus: 17023, signal 520025/539260 (executing program)
2023/03/04 23:48:49 fetching corpus: 17073, signal 520563/539260 (executing program)
2023/03/04 23:48:49 fetching corpus: 17123, signal 520939/539260 (executing program)
2023/03/04 23:48:49 fetching corpus: 17173, signal 521313/539260 (executing program)
2023/03/04 23:48:50 fetching corpus: 17222, signal 521738/539266 (executing program)
2023/03/04 23:48:50 fetching corpus: 17272, signal 521987/539271 (executing program)
2023/03/04 23:48:50 fetching corpus: 17322, signal 522434/539271 (executing program)
2023/03/04 23:48:50 fetching corpus: 17372, signal 522682/539273 (executing program)
2023/03/04 23:48:51 fetching corpus: 17422, signal 523335/539273 (executing program)
2023/03/04 23:48:51 fetching corpus: 17472, signal 523691/539273 (executing program)
2023/03/04 23:48:51 fetching corpus: 17521, signal 524173/539276 (executing program)
2023/03/04 23:48:51 fetching corpus: 17571, signal 524618/539283 (executing program)
2023/03/04 23:48:52 fetching corpus: 17621, signal 525068/539298 (executing program)
2023/03/04 23:48:52 fetching corpus: 17669, signal 525446/539304 (executing program)
2023/03/04 23:48:52 fetching corpus: 17719, signal 525750/539322 (executing program)
2023/03/04 23:48:53 fetching corpus: 17769, signal 526207/539326 (executing program)
2023/03/04 23:48:53 fetching corpus: 17818, signal 526566/539339 (executing program)
2023/03/04 23:48:53 fetching corpus: 17868, signal 526982/539342 (executing program)
2023/03/04 23:48:53 fetching corpus: 17918, signal 527410/539371 (executing program)
2023/03/04 23:48:53 fetching corpus: 17967, signal 527705/539371 (executing program)
2023/03/04 23:48:54 fetching corpus: 18017, signal 527985/539374 (executing program)
2023/03/04 23:48:54 fetching corpus: 18067, signal 528392/539380 (executing program)
2023/03/04 23:48:54 fetching corpus: 18116, signal 528842/539401 (executing program)
2023/03/04 23:48:54 fetching corpus: 18166, signal 529255/539521 (executing program)
2023/03/04 23:48:55 fetching corpus: 18216, signal 529617/539576 (executing program)
2023/03/04 23:48:55 fetching corpus: 18265, signal 530053/539578 (executing program)
2023/03/04 23:48:55 fetching corpus: 18315, signal 530377/539581 (executing program)
2023/03/04 23:48:55 fetching corpus: 18321, signal 530502/539581 (executing program)
2023/03/04 23:48:55 fetching corpus: 18322, signal 530508/539581 (executing program)
2023/03/04 23:48:55 fetching corpus: 18322, signal 530508/539581 (executing program)
2023/03/04 23:48:59 starting 4 fuzzer processes
[  152.603312][ T5143] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5143 'syz-fuzzer'
23:48:59 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0xffffffffffff0001, 0x0)

23:48:59 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="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"/389], 0x680}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:59 executing program 2:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1})

23:48:59 executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14)
r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f00000005c0)='./file0\x00'}, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
r6 = socket(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='ext4_mballoc_prealloc\x00', r2}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34008000000001000000000000628ca5de71e688", @ANYRES32=r7, @ANYBLOB="000000000000000000000e0016000100746c6f7765720000040002005222b3490c5c56a0213f641d1729a1d1fb86b7fc7c15618d37a001efcb169dafa5a17c2ef6634b3bd035442a7853b2df527308764fa84429573fd710ee38385ffe99231a1e78b46da6a274d21e952876e32ee2d807b2a0"], 0x34}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=ANY=[@ANYBLOB="22eadd0000000000"], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80)
r8 = socket(0x1, 0x803, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5})
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0)

[  152.684802][   T36] kauditd_printk_skb: 3 callbacks suppressed
[  152.684818][   T36] audit: type=1400 audit(1677973739.328:86): avc:  denied  { execmem } for  pid=5173 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  152.888609][   T36] audit: type=1400 audit(1677973739.528:87): avc:  denied  { mounton } for  pid=5177 comm="syz-executor.0" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  152.909915][   T36] audit: type=1400 audit(1677973739.528:88): avc:  denied  { mount } for  pid=5177 comm="syz-executor.0" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  152.927766][   T36] audit: type=1400 audit(1677973739.528:89): avc:  denied  { create } for  pid=5177 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  152.928331][   T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  152.946300][   T36] audit: type=1400 audit(1677973739.538:90): avc:  denied  { read write } for  pid=5177 comm="syz-executor.0" name="vhci" dev="devtmpfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  152.963089][   T36] audit: type=1400 audit(1677973739.538:91): avc:  denied  { open } for  pid=5177 comm="syz-executor.0" path="/dev/vhci" dev="devtmpfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  152.963725][ T5193] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  152.977529][   T36] audit: type=1400 audit(1677973739.548:92): avc:  denied  { ioctl } for  pid=5177 comm="syz-executor.0" path="socket:[762]" dev="sockfs" ino=762 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  152.981854][ T5192] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  152.984836][ T5193] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  152.990006][ T5194] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  152.992554][ T5195] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  152.993254][ T5195] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  152.993881][ T5195] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  152.994272][ T5195] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  152.994468][ T5195] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  152.995767][ T5195] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  152.996501][ T5195] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  152.997292][ T5195] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  152.997686][ T5195] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  152.997869][ T5195] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  153.006953][   T36] audit: type=1400 audit(1677973739.648:93): avc:  denied  { read } for  pid=5183 comm="syz-executor.3" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  153.008034][ T5192] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  153.008714][ T5192] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  153.010000][ T5192] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  153.014746][   T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  153.014835][   T36] audit: type=1400 audit(1677973739.658:94): avc:  denied  { open } for  pid=5183 comm="syz-executor.3" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  153.014879][   T36] audit: type=1400 audit(1677973739.658:95): avc:  denied  { mounton } for  pid=5183 comm="syz-executor.3" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  153.023968][ T5192] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  153.029145][ T5195] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  153.034623][ T5192] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  153.039332][ T5195] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  153.159557][ T5195] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  153.484035][ T5183] chnl_net:caif_netlink_parms(): no params data found
[  153.531066][ T5179] chnl_net:caif_netlink_parms(): no params data found
[  153.619085][ T5178] chnl_net:caif_netlink_parms(): no params data found
[  153.666081][ T5177] chnl_net:caif_netlink_parms(): no params data found
[  153.806647][ T5183] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.811854][ T5183] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.816553][ T5183] bridge_slave_0: entered allmulticast mode
[  153.825785][ T5183] bridge_slave_0: entered promiscuous mode
[  153.853126][ T5179] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.858811][ T5179] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.865761][ T5179] bridge_slave_0: entered allmulticast mode
[  153.872749][ T5179] bridge_slave_0: entered promiscuous mode
[  153.881194][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.886675][ T5179] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.892230][ T5179] bridge_slave_1: entered allmulticast mode
[  153.897709][ T5179] bridge_slave_1: entered promiscuous mode
[  153.905586][ T5183] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.911280][ T5183] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.916375][ T5183] bridge_slave_1: entered allmulticast mode
[  153.921690][ T5183] bridge_slave_1: entered promiscuous mode
[  154.083480][ T5183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.102743][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.108591][ T5178] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.115041][ T5178] bridge_slave_0: entered allmulticast mode
[  154.119731][ T5178] bridge_slave_0: entered promiscuous mode
[  154.126904][ T5179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.134718][ T5183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.141039][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.146234][ T5177] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.150973][ T5177] bridge_slave_0: entered allmulticast mode
[  154.155963][ T5177] bridge_slave_0: entered promiscuous mode
[  154.163539][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.169775][ T5177] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.175923][ T5177] bridge_slave_1: entered allmulticast mode
[  154.185366][ T5177] bridge_slave_1: entered promiscuous mode
[  154.190908][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.195453][ T5178] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.200094][ T5178] bridge_slave_1: entered allmulticast mode
[  154.206461][ T5178] bridge_slave_1: entered promiscuous mode
[  154.212976][ T5179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.312277][ T5183] team0: Port device team_slave_0 added
[  154.335494][ T5177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.359186][ T5179] team0: Port device team_slave_0 added
[  154.367654][ T5183] team0: Port device team_slave_1 added
[  154.391170][ T5177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.413253][ T5178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.424990][ T5179] team0: Port device team_slave_1 added
[  154.473223][ T5178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.511753][ T5183] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.516648][ T5183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.539162][ T5183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.553649][ T5177] team0: Port device team_slave_0 added
[  154.588713][ T5183] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.594192][ T5183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.616526][ T5183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.628767][ T5177] team0: Port device team_slave_1 added
[  154.638067][ T5178] team0: Port device team_slave_0 added
[  154.656213][ T5179] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.661838][ T5179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.680166][ T5179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.746997][ T5178] team0: Port device team_slave_1 added
[  154.751534][ T5179] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.757324][ T5179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.778747][ T5179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.816493][ T5177] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.822700][ T5177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.844409][ T5177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.890484][ T5183] hsr_slave_0: entered promiscuous mode
[  154.907746][ T5183] hsr_slave_1: entered promiscuous mode
[  154.915709][ T5177] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.920951][ T5177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.941089][ T5177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.958845][ T5178] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.963897][ T5178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.983088][ T5178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.992565][ T5178] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.997087][ T5178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.013720][ T5178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.042965][ T5195] Bluetooth: hci2: command 0x0409 tx timeout
[  155.042990][   T59] Bluetooth: hci3: command 0x0409 tx timeout
[  155.074761][ T5179] hsr_slave_0: entered promiscuous mode
[  155.082134][ T5179] hsr_slave_1: entered promiscuous mode
[  155.090824][ T5179] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  155.098638][ T5179] Cannot create hsr debugfs directory
[  155.122117][ T4543] Bluetooth: hci1: command 0x0409 tx timeout
[  155.202787][ T4543] Bluetooth: hci0: command 0x0409 tx timeout
[  155.223271][ T5177] hsr_slave_0: entered promiscuous mode
[  155.228702][ T5177] hsr_slave_1: entered promiscuous mode
[  155.233327][ T5177] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  155.239515][ T5177] Cannot create hsr debugfs directory
[  155.361532][ T5178] hsr_slave_0: entered promiscuous mode
[  155.369676][ T5178] hsr_slave_1: entered promiscuous mode
[  155.375896][ T5178] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  155.382548][ T5178] Cannot create hsr debugfs directory
[  155.667986][ T5183] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  155.684881][ T5183] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  155.694607][ T5183] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  155.704520][ T5183] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  155.764205][ T5179] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  155.781233][ T5179] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  155.794873][ T5179] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  155.818955][ T5179] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  155.876514][ T5177] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  155.888392][ T5177] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  155.898367][ T5177] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  155.924980][ T5177] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  155.975985][ T5178] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  155.986001][ T5178] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  156.026613][ T5178] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  156.041860][ T5178] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  156.098994][ T5183] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.139978][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  156.149365][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  156.167081][ T5179] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.186119][ T5183] 8021q: adding VLAN 0 to HW filter on device team0
[  156.218744][  T789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  156.225391][  T789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  156.232798][  T789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  156.240228][  T789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  156.249360][  T789] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.255882][  T789] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.267092][ T5179] 8021q: adding VLAN 0 to HW filter on device team0
[  156.275330][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  156.317601][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  156.324345][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  156.330177][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.335509][ T5222] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.343869][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  156.353517][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  156.360467][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  156.366765][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  156.372944][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  156.379455][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  156.387121][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.393145][ T5222] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.437369][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  156.445448][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  156.453000][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  156.463343][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  156.470445][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.476451][ T5222] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.483101][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  156.490846][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  156.499032][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  156.507014][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  156.514548][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  156.523083][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  156.531973][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  156.539781][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  156.547386][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  156.555142][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  156.563753][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  156.585444][ T5179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  156.602950][ T5177] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.607659][  T789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  156.614304][  T789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  156.624196][  T789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  156.634577][  T789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  156.671007][  T789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  156.678877][  T789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  156.687308][  T789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  156.695537][  T789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  156.704354][ T5183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  156.716651][ T5177] 8021q: adding VLAN 0 to HW filter on device team0
[  156.747221][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  156.754165][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  156.762191][ T5201] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.767963][ T5201] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.774980][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  156.782487][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  156.789056][ T5201] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.794772][ T5201] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.801784][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  156.822305][ T5178] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.840436][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  156.848440][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  156.860727][ T5178] 8021q: adding VLAN 0 to HW filter on device team0
[  156.871026][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  156.888851][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  156.896497][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  156.903802][ T5188] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.909616][ T5188] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.916102][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  156.925508][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  156.932935][ T5188] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.939133][ T5188] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.945954][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  156.979895][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  156.985978][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  156.992306][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  156.999372][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  157.008673][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  157.016451][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  157.024204][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  157.033489][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  157.040565][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  157.048048][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  157.055470][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  157.062284][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  157.068586][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  157.087299][ T5177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  157.095901][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  157.122156][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  157.129476][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  157.132734][ T4543] Bluetooth: hci2: command 0x041b tx timeout
[  157.136499][   T59] Bluetooth: hci3: command 0x041b tx timeout
[  157.145664][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  157.150539][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  157.155682][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  157.162264][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  157.167943][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  157.174756][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  157.180490][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  157.187726][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  157.195021][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  157.200700][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  157.205954][ T4543] Bluetooth: hci1: command 0x041b tx timeout
[  157.212966][ T5179] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.228401][ T5178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  157.255638][ T5183] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.281533][   T59] Bluetooth: hci0: command 0x041b tx timeout
[  157.302863][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  157.308571][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  157.314854][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  157.320878][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  157.348812][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  157.354982][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  157.360534][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  157.368139][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  157.375701][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  157.382873][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  157.390061][ T5179] veth0_vlan: entered promiscuous mode
[  157.397739][ T5183] veth0_vlan: entered promiscuous mode
[  157.411066][ T5183] veth1_vlan: entered promiscuous mode
[  157.418025][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  157.423482][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  157.428750][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  157.454961][ T5179] veth1_vlan: entered promiscuous mode
[  157.472933][ T5177] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.482428][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  157.490328][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  157.497719][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  157.504043][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  157.514764][ T5183] veth0_macvtap: entered promiscuous mode
[  157.522642][ T5183] veth1_macvtap: entered promiscuous mode
[  157.534403][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  157.540736][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  157.546925][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  157.554143][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  157.559921][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  157.586781][ T5183] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.621481][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  157.629978][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  157.640923][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  157.649053][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  157.656854][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  157.663746][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  157.673748][ T5183] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.680512][ T5179] veth0_macvtap: entered promiscuous mode
[  157.699852][ T5183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.707587][ T5183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.715462][ T5183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.722988][ T5183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.733346][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  157.738859][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  157.748301][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  157.755390][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  157.762014][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  157.771583][ T5179] veth1_macvtap: entered promiscuous mode
[  157.778853][ T5178] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.809560][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  157.817094][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  157.825347][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  157.858151][ T5177] veth0_vlan: entered promiscuous mode
[  157.867445][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  157.875004][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  157.901496][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  157.913760][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  157.926744][ T5179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.938705][ T5179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.950995][ T5179] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.965970][ T5177] veth1_vlan: entered promiscuous mode
[  157.979497][ T5178] veth0_vlan: entered promiscuous mode
[  157.992223][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  157.999344][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  158.007275][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  158.016106][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  158.024310][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  158.031179][  T789] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  158.038845][  T789] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  158.065517][ T5179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.074831][ T5179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.087697][ T5179] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.097861][ T5178] veth1_vlan: entered promiscuous mode
[  158.121271][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  158.127471][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  158.134707][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  158.141199][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  158.164821][ T5177] veth0_macvtap: entered promiscuous mode
[  158.174318][ T5177] veth1_macvtap: entered promiscuous mode
[  158.209542][ T5179] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.218003][ T5179] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.226332][ T5179] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.234061][ T5179] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.246073][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  158.251667][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  158.257903][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  158.264487][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  158.269941][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  158.285816][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.292606][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.302722][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  158.316451][ T5177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.324824][ T5177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.335125][ T5177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.342686][ T5177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.352484][ T5177] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.369345][ T5178] veth0_macvtap: entered promiscuous mode
[  158.379479][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  158.387818][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  158.397803][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  158.405742][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  158.432788][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  158.443095][ T5177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.449805][ T5177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.457227][ T5177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.464519][ T5177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.472645][ T5177] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.480496][ T5178] veth1_macvtap: entered promiscuous mode
[  158.488976][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.491071][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  158.497212][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.501540][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  158.512528][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  158.540130][ T5177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.546984][ T5177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.554172][ T5177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.559650][ T5177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.568398][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  158.581806][   T36] kauditd_printk_skb: 2 callbacks suppressed
[  158.581818][   T36] audit: type=1400 audit(1677973745.218:98): avc:  denied  { mounton } for  pid=5183 comm="syz-executor.3" path="/dev/binderfs" dev="devtmpfs" ino=2387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  158.592408][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.603086][   T36] audit: type=1400 audit(1677973745.228:99): avc:  denied  { mount } for  pid=5183 comm="syz-executor.3" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  158.610454][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.610469][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.610481][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.610489][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.610498][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.613771][ T5178] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.673827][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.682455][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.689799][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.696926][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.702848][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.710792][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.720129][ T5178] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.745572][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  158.752548][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  158.758871][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  158.765021][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  158.790605][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.796007][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.803078][ T5178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.808970][ T5178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.816304][ T5178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.817163][   T36] audit: type=1400 audit(1677973745.458:100): avc:  denied  { read write } for  pid=5183 comm="syz-executor.3" name="loop3" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  158.824124][ T5178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.846340][   T36] audit: type=1400 audit(1677973745.468:101): avc:  denied  { open } for  pid=5183 comm="syz-executor.3" path="/dev/loop3" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  158.872560][   T36] audit: type=1400 audit(1677973745.468:102): avc:  denied  { ioctl } for  pid=5183 comm="syz-executor.3" path="/dev/loop3" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  158.901691][   T36] audit: type=1400 audit(1677973745.488:103): avc:  denied  { bpf } for  pid=5244 comm="syz-executor.3" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  158.920171][   T36] audit: type=1400 audit(1677973745.488:104): avc:  denied  { prog_load } for  pid=5244 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  158.943186][   T36] audit: type=1400 audit(1677973745.488:105): avc:  denied  { perfmon } for  pid=5244 comm="syz-executor.3" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  158.949505][  T789] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  158.960296][   T36] audit: type=1400 audit(1677973745.538:106): avc:  denied  { prog_run } for  pid=5244 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  158.984560][   T36] audit: type=1400 audit(1677973745.608:107): avc:  denied  { create } for  pid=5244 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  159.054504][  T184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.062047][  T184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.079666][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  159.095446][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.103418][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.115242][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  159.144512][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.150557][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.150600][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.155184][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.166535][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  159.176142][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
23:49:05 executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14)
r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f00000005c0)='./file0\x00'}, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
r6 = socket(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='ext4_mballoc_prealloc\x00', r2}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34008000000001000000000000628ca5de71e688", @ANYRES32=r7, @ANYBLOB="000000000000000000000e0016000100746c6f7765720000040002005222b3490c5c56a0213f641d1729a1d1fb86b7fc7c15618d37a001efcb169dafa5a17c2ef6634b3bd035442a7853b2df527308764fa84429573fd710ee38385ffe99231a1e78b46da6a274d21e952876e32ee2d807b2a0"], 0x34}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=ANY=[@ANYBLOB="22eadd0000000000"], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80)
r8 = socket(0x1, 0x803, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5})
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0)

[  159.201739][   T59] Bluetooth: hci3: command 0x040f tx timeout
[  159.205836][   T59] Bluetooth: hci2: command 0x040f tx timeout
[  159.216686][ T1059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.224930][ T1059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.235471][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  159.236578][ T5250] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  159.281605][ T4543] Bluetooth: hci1: command 0x040f tx timeout
23:49:05 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0xffffffffffff0001, 0x0)

23:49:05 executing program 2:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1})

23:49:06 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0xffffffffffff0001, 0x0)

[  159.367008][ T4543] Bluetooth: hci0: command 0x040f tx timeout
23:49:06 executing program 2:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1})

23:49:06 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="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"/389], 0x680}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:49:06 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0xffffffffffff0001, 0x0)

23:49:06 executing program 2:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1})

23:49:06 executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14)
r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f00000005c0)='./file0\x00'}, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
r6 = socket(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='ext4_mballoc_prealloc\x00', r2}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34008000000001000000000000628ca5de71e688", @ANYRES32=r7, @ANYBLOB="000000000000000000000e0016000100746c6f7765720000040002005222b3490c5c56a0213f641d1729a1d1fb86b7fc7c15618d37a001efcb169dafa5a17c2ef6634b3bd035442a7853b2df527308764fa84429573fd710ee38385ffe99231a1e78b46da6a274d21e952876e32ee2d807b2a0"], 0x34}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=ANY=[@ANYBLOB="22eadd0000000000"], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80)
r8 = socket(0x1, 0x803, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5})
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0)

23:49:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="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"/389], 0x680}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:49:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="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"/389], 0x680}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:49:06 executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14)
r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f00000005c0)='./file0\x00'}, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
r6 = socket(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='ext4_mballoc_prealloc\x00', r2}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34008000000001000000000000628ca5de71e688", @ANYRES32=r7, @ANYBLOB="000000000000000000000e0016000100746c6f7765720000040002005222b3490c5c56a0213f641d1729a1d1fb86b7fc7c15618d37a001efcb169dafa5a17c2ef6634b3bd035442a7853b2df527308764fa84429573fd710ee38385ffe99231a1e78b46da6a274d21e952876e32ee2d807b2a0"], 0x34}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=ANY=[@ANYBLOB="22eadd0000000000"], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80)
r8 = socket(0x1, 0x803, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5})
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0)

23:49:06 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="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"/389], 0x680}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:49:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="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"/389], 0x680}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:49:06 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="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"/389], 0x680}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:49:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="0800ffff000002000f000d0008000100753332004c06020010000a00000000000400000000000000140008006d6163766c616e300000000000000000080002000900000014060500f80000000007000000010300000077ffffff0000000000000007060000000500000000020000000000100000000008f8ffffff5e06000000000001000010000600000001000000e00000000000000800080000980000000000403b000000004f00000002000000000000020000000305000000060000000000000700010000b0000000080000003a4349690000000801800000f7ffffff0000006700000005040000000600000000000080000029bf80000000840800000000716200000000fc0000000600000000000002000004010000000006000000000000020000000405000000ffffffff0000000900000001040000000104000000000020000001ff00000000080000000000001f0000080000000000810000000000000000000006000000000900000000000001000000060500"/389], 0x680}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:49:06 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="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"/389], 0x680}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:49:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="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"/389], 0x680}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:49:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="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"/389], 0x680}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:49:07 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="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"/389], 0x680}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:49:07 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="0800ffff000002000f000d0008000100753332004c06020010000a00000000000400000000000000140008006d6163766c616e300000000000000000080002000900000014060500f80000000007000000010300000077ffffff0000000000000007060000000500000000020000000000100000000008f8ffffff5e06000000000001000010000600000001000000e00000000000000800080000980000000000403b000000004f00000002000000000000020000000305000000060000000000000700010000b0000000080000003a4349690000000801800000f7ffffff0000006700000005040000000600000000000080000029bf80000000840800000000716200000000fc0000000600000000000002000004010000000006000000000000020000000405000000ffffffff0000000900000001040000000104000000000020000001ff00000000080000000000001f0000080000000000810000000000000000000006000000000900000000000001000000060500"/389], 0x680}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:49:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="0800ffff000002000f000d0008000100753332004c06020010000a00000000000400000000000000140008006d6163766c616e300000000000000000080002000900000014060500f80000000007000000010300000077ffffff0000000000000007060000000500000000020000000000100000000008f8ffffff5e06000000000001000010000600000001000000e00000000000000800080000980000000000403b000000004f00000002000000000000020000000305000000060000000000000700010000b0000000080000003a4349690000000801800000f7ffffff0000006700000005040000000600000000000080000029bf80000000840800000000716200000000fc0000000600000000000002000004010000000006000000000000020000000405000000ffffffff0000000900000001040000000104000000000020000001ff00000000080000000000001f0000080000000000810000000000000000000006000000000900000000000001000000060500"/389], 0x680}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:49:07 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1})

23:49:07 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1})

23:49:07 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1})

23:49:07 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14)
r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f00000005c0)='./file0\x00'}, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
r6 = socket(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='ext4_mballoc_prealloc\x00', r2}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34008000000001000000000000628ca5de71e688", @ANYRES32=r7, @ANYBLOB="000000000000000000000e0016000100746c6f7765720000040002005222b3490c5c56a0213f641d1729a1d1fb86b7fc7c15618d37a001efcb169dafa5a17c2ef6634b3bd035442a7853b2df527308764fa84429573fd710ee38385ffe99231a1e78b46da6a274d21e952876e32ee2d807b2a0"], 0x34}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=ANY=[@ANYBLOB="22eadd0000000000"], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80)
r8 = socket(0x1, 0x803, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5})
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0)

23:49:07 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14)
r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f00000005c0)='./file0\x00'}, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
r6 = socket(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='ext4_mballoc_prealloc\x00', r2}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34008000000001000000000000628ca5de71e688", @ANYRES32=r7, @ANYBLOB="000000000000000000000e0016000100746c6f7765720000040002005222b3490c5c56a0213f641d1729a1d1fb86b7fc7c15618d37a001efcb169dafa5a17c2ef6634b3bd035442a7853b2df527308764fa84429573fd710ee38385ffe99231a1e78b46da6a274d21e952876e32ee2d807b2a0"], 0x34}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=ANY=[@ANYBLOB="22eadd0000000000"], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80)
r8 = socket(0x1, 0x803, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5})
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0)

23:49:07 executing program 3:
ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
open(0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x5206, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000003000/0x4000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0xa, @in=@private, 0x0, 0x4, 0x0, 0xb7}}, 0xe8)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0xf734830e74)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r5)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)

[  161.282245][ T4543] Bluetooth: hci2: command 0x0419 tx timeout
[  161.283691][   T59] Bluetooth: hci3: command 0x0419 tx timeout
23:49:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="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"/389], 0x680}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:49:08 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14)
r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f00000005c0)='./file0\x00'}, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
r6 = socket(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='ext4_mballoc_prealloc\x00', r2}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34008000000001000000000000628ca5de71e688", @ANYRES32=r7, @ANYBLOB="000000000000000000000e0016000100746c6f7765720000040002005222b3490c5c56a0213f641d1729a1d1fb86b7fc7c15618d37a001efcb169dafa5a17c2ef6634b3bd035442a7853b2df527308764fa84429573fd710ee38385ffe99231a1e78b46da6a274d21e952876e32ee2d807b2a0"], 0x34}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=ANY=[@ANYBLOB="22eadd0000000000"], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80)
r8 = socket(0x1, 0x803, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5})
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0)

[  161.371779][ T5195] Bluetooth: hci1: command 0x0419 tx timeout
23:49:08 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14)
r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f00000005c0)='./file0\x00'}, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
r6 = socket(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='ext4_mballoc_prealloc\x00', r2}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34008000000001000000000000628ca5de71e688", @ANYRES32=r7, @ANYBLOB="000000000000000000000e0016000100746c6f7765720000040002005222b3490c5c56a0213f641d1729a1d1fb86b7fc7c15618d37a001efcb169dafa5a17c2ef6634b3bd035442a7853b2df527308764fa84429573fd710ee38385ffe99231a1e78b46da6a274d21e952876e32ee2d807b2a0"], 0x34}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=ANY=[@ANYBLOB="22eadd0000000000"], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80)
r8 = socket(0x1, 0x803, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5})
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0)

[  161.442805][   T59] Bluetooth: hci0: command 0x0419 tx timeout
23:49:08 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14)
r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f00000005c0)='./file0\x00'}, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
r6 = socket(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='ext4_mballoc_prealloc\x00', r2}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34008000000001000000000000628ca5de71e688", @ANYRES32=r7, @ANYBLOB="000000000000000000000e0016000100746c6f7765720000040002005222b3490c5c56a0213f641d1729a1d1fb86b7fc7c15618d37a001efcb169dafa5a17c2ef6634b3bd035442a7853b2df527308764fa84429573fd710ee38385ffe99231a1e78b46da6a274d21e952876e32ee2d807b2a0"], 0x34}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=ANY=[@ANYBLOB="22eadd0000000000"], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80)
r8 = socket(0x1, 0x803, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5})
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0)

23:49:08 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14)
r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f00000005c0)='./file0\x00'}, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
r6 = socket(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='ext4_mballoc_prealloc\x00', r2}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34008000000001000000000000628ca5de71e688", @ANYRES32=r7, @ANYBLOB="000000000000000000000e0016000100746c6f7765720000040002005222b3490c5c56a0213f641d1729a1d1fb86b7fc7c15618d37a001efcb169dafa5a17c2ef6634b3bd035442a7853b2df527308764fa84429573fd710ee38385ffe99231a1e78b46da6a274d21e952876e32ee2d807b2a0"], 0x34}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=ANY=[@ANYBLOB="22eadd0000000000"], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80)
r8 = socket(0x1, 0x803, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5})
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0)

23:49:08 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="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"/389], 0x680}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:49:08 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x2})
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1)

23:49:08 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
dup(r0)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0xfc7, 0x2)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x2)

23:49:08 executing program 3:
ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
open(0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x5206, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000003000/0x4000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0xa, @in=@private, 0x0, 0x4, 0x0, 0xb7}}, 0xe8)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0xf734830e74)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r5)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)

23:49:08 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x2})
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1)

23:49:09 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x2})
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1)

23:49:09 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x2})
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1)

23:49:09 executing program 2:
ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
open(0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x5206, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000003000/0x4000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0xa, @in=@private, 0x0, 0x4, 0x0, 0xb7}}, 0xe8)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0xf734830e74)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r5)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)

23:49:09 executing program 1:
ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
open(0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x5206, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000003000/0x4000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0xa, @in=@private, 0x0, 0x4, 0x0, 0xb7}}, 0xe8)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0xf734830e74)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r5)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)

23:49:09 executing program 3:
ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
open(0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x5206, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000003000/0x4000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0xa, @in=@private, 0x0, 0x4, 0x0, 0xb7}}, 0xe8)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0xf734830e74)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r5)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)

[  163.285544][ T5376] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN
[  163.294078][ T5376] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[  163.301687][ T5376] CPU: 3 PID: 5376 Comm: syz-executor.0 Not tainted 6.2.0-syzkaller-13510-gc29214bc8916 #0
[  163.309157][ T5376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  163.315857][ T5376] RIP: 0010:io_poll_remove_entries.part.0+0x376/0x810
[  163.321713][ T5376] Code: ea 03 80 3c 02 00 0f 85 89 03 00 00 48 8b 5b 40 e8 bf 4e 6d fd 4c 8d 73 08 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 33 03 00 00 48 8b 6b 08 48 85 ed 0f 84 29 01 00
[  163.336898][ T5376] RSP: 0018:ffffc9000245f948 EFLAGS: 00010202
[  163.341924][ T5376] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc900027d1000
[  163.348041][ T5376] RDX: 0000000000000001 RSI: ffffffff8416cbf1 RDI: ffff88801e32cbc0
[  163.354299][ T5376] RBP: 0000000000000016 R08: 0000000000000001 R09: 0000000000000006
[  163.360219][ T5376] R10: 0000000000000016 R11: 0000000000000001 R12: ffff888070e51b04
[  163.365893][ T5376] R13: 0000000000000000 R14: 0000000000000008 R15: ffff88801e32cb88
[  163.371274][ T5376] FS:  00007effb033e700(0000) GS:ffff88802cb80000(0000) knlGS:0000000000000000
[  163.376856][ T5376] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  163.381832][ T5376] CR2: 00000000205cf000 CR3: 000000006c462000 CR4: 0000000000150ee0
[  163.387148][ T5376] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  163.392244][ T5376] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  163.396769][ T5376] Call Trace:
[  163.398643][ T5376]  <TASK>
[  163.400401][ T5376]  ? vb2_fop_release+0xc0/0xc0
[  163.403746][ T5376]  __io_arm_poll_handler+0x7ec/0xe00
[  163.407513][ T5376]  io_arm_poll_handler+0x4f2/0xdc0
[  163.410731][ T5376]  ? __io_arm_poll_handler+0xe00/0xe00
[  163.414384][ T5376]  ? __io_queue_proc+0x8d0/0x8d0
[  163.418236][ T5376]  ? io_writev_prep_async+0x270/0x270
[  163.422375][ T5376]  io_queue_async+0xc1/0x5b0
[  163.425637][ T5376]  io_req_task_submit+0x256/0x290
[  163.428900][ T5376]  tctx_task_work+0x2d7/0xb30
[  163.432014][ T5376]  ? ctx_flush_and_put+0x210/0x210
[  163.435476][ T5376]  ? _raw_spin_unlock_irq+0x23/0x50
[  163.439195][ T5376]  task_work_run+0x16f/0x270
[  163.442256][ T5376]  ? task_work_cancel+0x30/0x30
[  163.445419][ T5376]  ? __mutex_unlock_slowpath+0x157/0x5e0
[  163.449359][ T5376]  ? wait_for_completion_io_timeout+0x20/0x20
[  163.453434][ T5376]  get_signal+0x1c7/0x25b0
[  163.456358][ T5376]  ? fput+0x2f/0x1a0
[  163.459010][ T5376]  ? exit_signals+0x910/0x910
[  163.462341][ T5376]  arch_do_signal_or_restart+0x79/0x5c0
[  163.466251][ T5376]  ? get_sigframe_size+0x10/0x10
[  163.469566][ T5376]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[  163.473576][ T5376]  exit_to_user_mode_prepare+0x15f/0x250
[  163.477323][ T5376]  syscall_exit_to_user_mode+0x1d/0x50
[  163.481087][ T5376]  do_syscall_64+0x46/0xb0
[  163.484629][ T5376]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  163.488805][ T5376] RIP: 0033:0x7effaf68c0f9
[  163.492394][ T5376] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  163.506964][ T5376] RSP: 002b:00007effb033e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  163.513564][ T5376] RAX: 00000000000002ff RBX: 00007effaf7abf80 RCX: 00007effaf68c0f9
[  163.519680][ T5376] RDX: 0000000000000000 RSI: 00000000000002ff RDI: 0000000000000005
[  163.525614][ T5376] RBP: 00007effaf6e7ae9 R08: 0000000000000000 R09: 0000000000000002
[  163.531400][ T5376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.536440][ T5376] R13: 00007ffe05fcb53f R14: 00007effb033e300 R15: 0000000000022000
[  163.541465][ T5376]  </TASK>
[  163.543230][ T5376] Modules linked in:
[  163.562848][ T5376] ---[ end trace 0000000000000000 ]---
[  163.575581][ T5376] RIP: 0010:io_poll_remove_entries.part.0+0x376/0x810
[  163.585143][ T5376] Code: ea 03 80 3c 02 00 0f 85 89 03 00 00 48 8b 5b 40 e8 bf 4e 6d fd 4c 8d 73 08 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 33 03 00 00 48 8b 6b 08 48 85 ed 0f 84 29 01 00
[  163.600410][ T5376] RSP: 0018:ffffc9000245f948 EFLAGS: 00010202
[  163.605083][ T5376] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc900027d1000
[  163.620199][ T5376] RDX: 0000000000000001 RSI: ffffffff8416cbf1 RDI: ffff88801e32cbc0
[  163.627361][ T5376] RBP: 0000000000000016 R08: 0000000000000001 R09: 0000000000000006
[  163.634945][ T5376] R10: 0000000000000016 R11: 0000000000000001 R12: ffff888070e51b04
[  163.645320][ T5376] R13: 0000000000000000 R14: 0000000000000008 R15: ffff88801e32cb88
[  163.654418][ T5376] FS:  00007effb033e700(0000) GS:ffff88802cb80000(0000) knlGS:0000000000000000
[  163.666558][ T5376] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  163.673135][ T5376] CR2: 0000000020c0c000 CR3: 000000006c462000 CR4: 0000000000150ee0
[  163.682687][ T5376] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  163.691014][ T5376] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  163.700743][ T5376] Kernel panic - not syncing: Fatal exception
[  163.706293][ T5376] Kernel Offset: disabled
[  163.709274][ T5376] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:49:10  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=dffffc0000000000 RCX=ffffffff8a1717a5 RDX=ffffed1005946d96
RSI=0000000000000000 RDI=ffffffff815fa1d1 RBP=0000000000000000 RSP=ffffffff8c407e20
R8 =0000000000000000 R9 =ffff88802ca36cab R10=ffffed1005946d95 R11=0000000000000000
R12=0000000000000003 R13=ffffffff8c495840 R14=ffffffff8e7780d0 R15=0000000000000000
RIP=ffffffff8a17301f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802ca00000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe17684ea000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe17684e8000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000020088000 CR3=000000006f5f6000 CR4=00150ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffff81303d44ffffffff81303d14 XMM01=ffffffff81ebcbd0ffffffff81701357
XMM02=ffffffff81e3b71effffffff81e3b5ca XMM03=ffffffff81e31104ffffffff81701357
XMM04=ffffffff81304dfaffffffff81304c43 XMM05=ffffffff81304c37ffffffff81304c2d
XMM06=ffffffff81304c16ffffffff81303cbd XMM07=ffffffff810089d0ffffffff810089ac
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffff888012440100 RBX=ffff88801a340a00 RCX=ffffc90002dd4000 RDX=0000000000040000
RSI=ffffffff813aac58 RDI=0000000000000007 RBP=ffffea000068d000 RSP=ffffc900035176a8
R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=ffffc90003517aa0
R12=0000000000000000 R13=ffff888015ebe300 R14=ffff888015ebe300 R15=0000000000000000
RIP=ffffffff81d4b8c4 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 00007fb6f7a60700 ffffffff 00c00000
GS =0000 ffff88802ca80000 ffffffff 00c00000
LDT=0000 0000000000000000 00000000 00000000
TR =0040 fffffe501898a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe5018988000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000020082000 CR3=000000006e216000 CR4=00150ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 2
RAX=0000000000000002 RBX=0000000000000002 RCX=0000000000000008 RDX=ffffed100283c8a5
RSI=0000000000000008 RDI=ffff8880141e4520 RBP=ffff8880141e4520 RSP=ffffc90000620c50
R8 =0000000000000000 R9 =ffff8880141e4527 R10=ffffed100283c8a4 R11=0000000000000000
R12=0000000000000000 R13=ffff8880141e4400 R14=dffffc0000000000 R15=ffff8880141e4400
RIP=ffffffff815b3024 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802cb00000 ffffffff 00c00000
LDT=0000 0000000000000000 00000000 00000000
TR =0040 fffffe778654d000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe778654b000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000020731000 CR3=0000000070f67000 CR4=00150ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 3
RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff848f57a5 RDI=ffffffff9207ab60 RBP=ffffffff9207ab20 RSP=ffffc9000245f330
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=502033203a555043
R12=0000000000000000 R13=0000000000000037 R14=ffffffff848f5740 R15=0000000000000000
RIP=ffffffff848f57cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 00007effb033e700 ffffffff 00c00000
GS =0000 ffff88802cb80000 ffffffff 00c00000
LDT=0000 0000000000000000 00000000 00000000
TR =0040 fffffe5770ef5000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe5770ef3000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000205cf000 CR3=000000006c462000 CR4=00150ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffff81303d44ffffffff81303d14 XMM01=ffffffff81ebcbd0ffffffff81701357
XMM02=ffffffff81e3b71effffffff81e3b5ca XMM03=ffffffff81e31104ffffffff81701357
XMM04=ffffffff81304dfaffffffff81304c43 XMM05=ffffffff81304c37ffffffff81304c2d
XMM06=ffffffff81304c16ffffffff81303cbd XMM07=ffffffff810089d0ffffffff810089ac
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000