last executing test programs:

10.191185434s ago: executing program 0 (id=131):
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, <r0=>0x0})
r1 = getpgrp(0x0)
rt_tgsigqueueinfo(r0, r1, 0x2f, &(0x7f0000000040)={0x2a, 0xffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x400000000000272, 0x0, 0x0)

8.771277872s ago: executing program 0 (id=142):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, &(0x7f0000000280))
ioctl$VHOST_SET_VRING_KICK(r2, 0x8008af26, &(0x7f0000000180)={0x1})
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r7, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000700)={0x6, 0x0, [{0x4000, 0x19, &(0x7f0000000080)=""/25}, {0x8080000, 0x3f, &(0x7f0000000100)=""/63}, {0x6000, 0x52, &(0x7f00000001c0)=""/82}, {0x80a0000, 0x71, &(0x7f0000000300)=""/113}, {0x4, 0xa1, &(0x7f0000000500)=""/161}, {0xf000, 0xd1, &(0x7f0000000600)=""/209}]})
ioctl$BTRFS_IOC_QUOTA_RESCAN(r7, 0x4040942c, &(0x7f0000000000)={0x0, 0xe, [0x2, 0x80000000, 0x4, 0x1, 0x206, 0x2]})
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01082bbd70000000000007060000140008001e0000000000000000000000000000000c001600945a9d61dc276d12"], 0x34}}, 0x0)

7.772632916s ago: executing program 0 (id=156):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x0, 0x17c1, 0x8}}}}}, 0x0)
close(r1)
socket(0x10, 0x3, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x2a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b1, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x200, 0x6, 0x6, 0x6, 0x5eb8}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xd8}}, 0x0)

6.922356218s ago: executing program 0 (id=169):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8'])
lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000180)='./file0/file0\x00', 0x41)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000035000/0x1000)=nil, 0x1000}, 0x1})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x80000000000007, 0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

6.593216235s ago: executing program 0 (id=170):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002300)={0x1c, 0x35, 0x107, 0xffffffff, 0xfffffffe, {0x2, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

6.211823189s ago: executing program 0 (id=175):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14}}, 0x28}}, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x400, 0x2)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000640)={0x0, 0xffffffffffffffff, 0xcf, 0x8, @scatter={0x4, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000340)=""/94, 0x5e}, {&(0x7f00000003c0)=""/222, 0xde}, {&(0x7f0000000080)=""/52, 0x34}]}, &(0x7f00000004c0)="08deae7c3af588a6956f8b068d42934be3491a4441f013c78e11bf0ea537d5ef4b3c1dee8ad26713490bdd69705f0f16cc74bbd455b22bc038fc8e580dc5fc9b7959f07d1d8961eb70dfb7894f3ba3ea59f0c3331dfa1f60a7144484123e8297714a58873476682e2f11c3f8962cf2b66745dd538b0e0c71a60d8a1fa72d78caab7cbde781c98f1c357790b55098ddf3add9b53bc6dbe1d0fff3452924ab5dd38113ffa61ed7cbd60a7377957de4b1f25eb46a5fffc522d04dada747cbd45cb18910f2bbdfa6892f017333f5d4a122", &(0x7f00000005c0)=""/115, 0x8, 0x10, 0x1, &(0x7f00000001c0)})
syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data={0x4, 0x1200}}}}}}, 0x0)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x134, 0xa, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfffffffa}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xc3eb}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xd009}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x100}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6bc1}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xd}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6}}, {0x14, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xd, 0x1a, '/dev/sg#\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'wlan1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xffffffff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x8, 0x1a, '*([\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80000001}]}, 0x134}, 0x1, 0x0, 0x0, 0x20040001}, 0x5)

6.153242076s ago: executing program 32 (id=175):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14}}, 0x28}}, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x400, 0x2)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000640)={0x0, 0xffffffffffffffff, 0xcf, 0x8, @scatter={0x4, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000340)=""/94, 0x5e}, {&(0x7f00000003c0)=""/222, 0xde}, {&(0x7f0000000080)=""/52, 0x34}]}, &(0x7f00000004c0)="08deae7c3af588a6956f8b068d42934be3491a4441f013c78e11bf0ea537d5ef4b3c1dee8ad26713490bdd69705f0f16cc74bbd455b22bc038fc8e580dc5fc9b7959f07d1d8961eb70dfb7894f3ba3ea59f0c3331dfa1f60a7144484123e8297714a58873476682e2f11c3f8962cf2b66745dd538b0e0c71a60d8a1fa72d78caab7cbde781c98f1c357790b55098ddf3add9b53bc6dbe1d0fff3452924ab5dd38113ffa61ed7cbd60a7377957de4b1f25eb46a5fffc522d04dada747cbd45cb18910f2bbdfa6892f017333f5d4a122", &(0x7f00000005c0)=""/115, 0x8, 0x10, 0x1, &(0x7f00000001c0)})
syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data={0x4, 0x1200}}}}}}, 0x0)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x134, 0xa, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfffffffa}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xc3eb}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xd009}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x100}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6bc1}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xd}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6}}, {0x14, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xd, 0x1a, '/dev/sg#\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'wlan1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xffffffff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x8, 0x1a, '*([\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80000001}]}, 0x134}, 0x1, 0x0, 0x0, 0x20040001}, 0x5)

2.38307031s ago: executing program 2 (id=228):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "5ccc4d7e83cf2134148d201d1a5ec3c278ab1d7a5f46bd8423f0dea408817bad", "146d2e1133e7bc1a4f3a3b06e63746c47c7f68d7e3d6b785795fdc68d94c0b4a", "f203b1df578bfd30116a43e42d764d9de85464edfadef5f4039622b74b035f4e", "151dc9949e69c4fd2a112a36c00b330695aaca7b9e25a645d59f984dfbfbcaa1", "83b587777a177887fc343eecf537d7ba5b0208f283a8438c690e95c9dd673137", "acf065ec5a148b6fd797a58f", 0x5, 0x9, 0x9, 0x1, 0x1}})
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x20000006}]}, 0x54}}, 0x0)

2.382027063s ago: executing program 2 (id=229):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
r3 = getgid()
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, r1, r3}, 0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r4=>r0, {r1, <r5=>r2}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r6=>r0, {r1, r5}}, './file0\x00'})
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r8=>r7, {0x2}}, './file0\x00'})
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000200)=@buf={0x49, &(0x7f0000000180)="f6c119b1809436bd224e24a9fcb5fa8d5dbf02193ef4ee4c3838cd5bb7833ee294d1fc382f8d4fc36438b0452217edcc4de688801270084827df72395c7684857410b38e00737f939f"})
ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000000240)={<r9=>0x0, 0x100000001, 0x9, 0x1})
ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000640)={r9, 0x3, 0x0, [0xb43, 0x3, 0x1, 0x5, 0x7], [0x6, 0xffff, 0x9, 0x4, 0xa, 0x3, 0x8000, 0x7fff, 0x0, 0x1000, 0xffffffffffffffff, 0x7, 0x3, 0x5, 0x7, 0xffffffff7fffffff, 0x2, 0x7, 0x2, 0xc, 0x4, 0x4c, 0x2, 0x9, 0x5, 0x9, 0x10000, 0x7f, 0xfffffffffffffffc, 0x2, 0xfffffffffffffffa, 0x3, 0x5, 0x1, 0x3, 0x10001, 0x8, 0x40, 0x2, 0x7fffffff, 0x0, 0x4, 0x0, 0x89c0, 0xffffffffffff5bbc, 0x5, 0x1, 0x7, 0x818, 0x0, 0x7fffffff, 0x0, 0x10000, 0xd, 0x7, 0x3, 0xe, 0x7fff, 0x8, 0x6, 0xe000000000000, 0x909, 0x7, 0x2, 0x8, 0x401, 0x401, 0xfffffffffffffff8, 0x2, 0x6b48, 0x1000, 0x8, 0xd8e, 0xffffffffffffffff, 0x0, 0x5, 0x6, 0x39, 0x0, 0xc13, 0x98, 0x7fffffffffffffff, 0x2, 0x49, 0xfffffffffffffffb, 0xc, 0x0, 0x2, 0x1, 0x8, 0x7def, 0x100000000, 0xfffffffffffffffc, 0x4, 0x0, 0x8, 0x9, 0xc, 0x2, 0x6, 0x9, 0x8fadfb0, 0x2f5, 0x3, 0x7, 0x9, 0x4, 0x1, 0x4759, 0x8ecd, 0xffffffff, 0x3, 0x5, 0x2, 0x9, 0x9, 0x1, 0x963, 0x9, 0xfff, 0x5]})
write$FUSE_OPEN(r8, &(0x7f0000000a80)={0x20, 0x0, 0x0, {0x0, 0x18}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000d80)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000ac0)=[{0x11, 0x0, [0x6, 0x9, 0x4, 0xfc7, 0x0, 0x878, 0x9, 0x5, 0x3, 0x6, 0x4, 0xbc, 0x5, 0x3, 0x100, 0xbb]}, {0x8, 0x0, [0x59c, 0xb07, 0x6, 0x7f, 0x4, 0x6, 0x1d, 0x3, 0xfffffffe, 0x7, 0x2, 0x4, 0xb5c, 0x8, 0x2, 0x40]}, {0x4, 0x0, [0x0, 0x74b, 0x7, 0x0, 0x3, 0x800, 0x1, 0x8, 0x9, 0x101, 0x5d3, 0x0, 0x10, 0xf, 0x3, 0x7]}, {0x0, 0x0, [0x2, 0x5, 0x81, 0x770, 0x4, 0x4, 0x5, 0x133d, 0x2, 0x6, 0x3, 0xe7d, 0x8845, 0x1, 0x5, 0xa]}, {0x0, 0x0, [0x1, 0xfffffffd, 0x6, 0x4, 0x80, 0x7, 0x9, 0x4, 0xe, 0x100, 0xfffffffc, 0x7fff, 0xfffffff8, 0x6, 0xa241, 0x52380000]}, {0x8, 0x0, [0x4, 0x2f719a3, 0x3, 0x68a, 0x5, 0x3, 0xa, 0xffff, 0x8, 0x7, 0x3, 0xd39, 0x70, 0x9, 0x9, 0x1]}, {0x0, 0x0, [0x1ff, 0x2, 0x337e, 0xc004, 0x5, 0x7, 0xffffff2a, 0x100, 0x6, 0x4, 0x4, 0x0, 0x2, 0xff, 0x4, 0x8]}, {0x20, 0x0, [0x2, 0x5, 0x5, 0x0, 0x3, 0xf, 0x7fffffff, 0x0, 0x2, 0x5, 0x1, 0x6, 0x7, 0x100, 0x1, 0x9]}, {0x21, 0x0, [0x1, 0x4, 0x4e6d61b3, 0x8, 0x8, 0x80000001, 0x10000, 0x8000, 0xdd4, 0x6, 0x7, 0xa7, 0x9, 0xd74d, 0xc]}], 0xffffffffffffffff, 0x1, 0x1, 0x288}}, 0x20)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000e40)=@nat={'nat\x00', 0x1b, 0x5, 0x508, 0x1c0, 0xd0, 0xffffffff, 0x0, 0x1c0, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, &(0x7f0000000dc0), {[{{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff000000, 0xff000000, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xff, 0xff], 'wg2\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x11, 0x0, 0x3, 0xa}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@private2, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffff00, 0xff], [0xff, 0xffffffff, 0xffffff00, 0xff], 'dvmrp0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x1, 0x6, 0x6}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010101, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @gre_key=0x6}}}, {{@uncond, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x2565, 0x9, 0x8, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x16, @ipv4=@multicast1, @ipv6=@rand_addr=' \x01\x00', @icmp_id=0x66, @icmp_id=0x64}}}, {{@ipv6={@mcast1, @private2, [0xff000000, 0xffffffff, 0x0, 0xff], [0x0, 0xff, 0xffffff00, 0xff000000], 'pimreg\x00', 'pim6reg0\x00', {}, {}, 0x73, 0x8, 0x3, 0x14}, 0x0, 0x118, 0x150, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@ipv6header={{0x28}, {0x8, 0x0, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x2, 0x1}, {0x2, 0x6, 0x2}, {0x0, 0x3, 0x2}, 0x1, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568)
r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1e)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f00000013c0)={0x10003, 0x3, 0x4, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
connect$inet6(r0, &(0x7f0000001400)={0xa, 0x4e20, 0x10000, @local, 0x1}, 0x1c)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000001440)={<r11=>r7})
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001480)={r6})
ioctl$SIOCAX25ADDUID(r8, 0x89e1, &(0x7f00000014c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r1})
read$FUSE(r4, &(0x7f0000001500)={0x2020, 0x0, <r12=>0x0}, 0x2020)
write$FUSE_OPEN(r11, &(0x7f0000003540)={0x20, 0x0, r12, {0x0, 0x14}}, 0x20)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r11)
sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000003680)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003640)={&(0x7f0000003600)={0x38, r13, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0xc01)
r14 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_GET_LAPIC(r14, 0x8400ae8e, &(0x7f00000036c0))
r15 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SMI(r15, 0xaeb7)
chroot(&(0x7f0000003ac0)='./file0\x00')
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309)

2.313115715s ago: executing program 2 (id=230):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$VHOST_VDPA_GET_AS_NUM(0xffffffffffffffff, 0x8004af7a, &(0x7f0000000000))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, @dev, @private=0x10000}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x80, 0x0, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfc, 0x4, 0x0, @broadcast, @broadcast}}}})

2.31244458s ago: executing program 2 (id=231):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000003c0)={[{@size={'size', 0x3d, [0x25]}}]})

2.091011257s ago: executing program 4 (id=236):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x7, 0x2, 0x2, 0x0, 0x28})
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xd, 0xa, 0x3, "325800000000000000008faa001d0000f4ff400000000000010000001400", 0x39555659})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
getsockopt$sock_buf(r3, 0x1, 0x22, 0x0, &(0x7f0000001780))
io_setup(0xfd, &(0x7f0000000080)=<r4=>0x0)
io_pgetevents(r4, 0x0, 0x24, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380), 0x8})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'geneve0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r6, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=@mpls_getnetconf={0x54, 0x52, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r5}, @NETCONFA_IFINDEX={0x8, 0x1, r5}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r7}, @NETCONFA_IFINDEX={0x8, 0x1, r7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x138000}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004080}, 0x20844)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0xfff2, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x8, 0x10000000, 0x200000b, 0x101}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xffffffffffffff60, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x20000084)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'dummy0\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x11, 0x0, 0x0, 0x9491426, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x4, 0x7, 0x80000006}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x2, 0x2, 0xf, 0x3}, {0x0, 0x5, 0xf, 0x9}]}, 0x94)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b72daa262ae10d2414a9ebc017b52b313305e763e76f3e0d78f3d4fcd9173dee890df05eeb79618e", @ANYBLOB=',gro'])
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
dup(r10)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9)
r12 = accept4(r11, 0x0, 0x0, 0x800)
sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

1.889059003s ago: executing program 4 (id=239):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r3, &(0x7f0000000200)='m', 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80)
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100))
r5 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000040))
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x2b, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e26, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffffff}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000022c0)={{0x0, 0x0, 0x80, {0xd000, 0x80af000}}, "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", "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"})
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000002c0)={0x5, {{0xa, 0x4e20, 0x4, @private2, 0x4}}}, 0x88)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000200)="b9f20800000f3226660fc7330f07f30fc7b7000000000f01cfc4e27925b719d77a0a98b8080000000f23c80f21f8350c0070000f23f8660f2f8664f44e4f0f004d01", 0x41}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="260f01c32e36260f212366b9090b000066b87a0a000066ba000000000f30b823018ee8ba610066ed0f01c2660f38810f2e0f656c7ff2e3090fa5800500", 0xffffffffffffff96}], 0x1, 0xf, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.721725102s ago: executing program 4 (id=243):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = syz_io_uring_setup(0x57f, &(0x7f0000000000)={0x0, 0x807734, 0x80, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f00000002c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2a, 0x0, 0x0, 0x207}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1})
io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0})
r6 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
setgroups(0x1, &(0x7f0000000000)=[r7])
setregid(0x0, r7)
socket$inet(0x2, 0x2, 0x1)
r8 = socket$packet(0x11, 0x3, 0x300)
r9 = dup(r8)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r9})
socket$nl_generic(0x10, 0x3, 0x10)
vmsplice(r9, &(0x7f00000001c0)=[{&(0x7f00000003c0)="8dcb8296196aef3da042ac0b70c89883bba24b0e01748ecdb0c1adc71c284a48b702e59d9d36e58c216f2a45533dc6c21c2583127698fa8d694de879e822f848dfb732e17cf8549663b10d00a34896e1c9aa9c9795e41c250294540718cebffa36e7c54cff32d724b933f34b926a14080a44a045147e2c5db56d977bdc1e8b4be95b19f4d56febf49dfe8e21bc40dd887218fa972deaa066fa796fd6e75cf952292bd8442b49b6cab832aaab52602f110b171898521aa6e582b988e365d8c4d34dcedf3f44b9b6c946541ebdc4a16d596cda1f4dd1b025c3321455834585aeffe0c4af402d6526cb49ce37", 0xeb}, {&(0x7f0000000580)="d4672f7860d79c59e3ae73b23a5ebc436cf64e5928592c1c648076eda136561f65a27514c1a50fb6eb37e1c5cd8df6ae744a81f46dfb77c9e057f824d044182cb2dab898cb4de822d35969e14c4aac34f9efc60065d1f322cba6376f0ab3f534e49e4aecd52a0e2734b35ae24512423446e89e43f4a323cfb7349e824b8f3804dcfb2ccb4b8eaef40c7de276fabb021f0693ec8a65f42bc6eea974f72e1d71004cfdf6c74e78c1677fe6a8fe128f807825c67ac24cdfb876d686e6ab6f08db5e735b79f2796830c72e3f21d00d8b3babdae72a304327662e9f7c9e451c127c8f66", 0xe1}, {&(0x7f00000004c0)="1c2dfb8cb6fef8027e8c8223dadeb5811c5201e417970ad8da05b9be5fe1d7860af121f042db840d84665cdb9307573a12535d0d2e1872eb5f484e75e3e69f0df97c4f31558b2c6e22ecbedb4382274439b4f139c6ae99fda02fc97f7e87df279107989d5484f91afd4ae1deb2114ea36df9030c2a9fb6", 0x77}, {&(0x7f0000000780)="24c041c9f0d970f803e2763ccf848f65338f1f7269cd83ee95fe64d5f606eeb5dadab8028be951f617b29c68f64c4a67b8824d93fe1269e8c594812dec0cbb4ef8c8e122b96f9ddc8c265457f75c71164069492bb428a8cb7116fde298b5ffb6d81759ef711759e2c4d49cd91a3ab388d79a58aa433e3e799a08ece873141ca0f54fb3e42bca7557a6938b54ea36c1f831", 0x91}], 0x4, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r10 = getpid()
r11 = syz_pidfd_open(r10, 0x0)
r12 = pidfd_getfd(r11, r11, 0x0)
setns(r12, 0x66020000)
mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)

1.392932222s ago: executing program 4 (id=250):
r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x1e)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28)
sendto$inet6(r1, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0)
close(r1)
r2 = fsmount(r0, 0x0, 0x0)
fchdir(r2)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x6000)
setresuid(0xee01, r3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)

1.340960596s ago: executing program 4 (id=252):
unshare(0x22020600)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f00000010c0)=""/4097, 0x1001}], 0x1, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x63c9, 0x0, 0x4, 0x24}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000002380)=<r3=>0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r4 = syz_open_procfs(0x0, &(0x7f0000000280)='mountinfo\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb701)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cc, 0x339)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x3})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)
r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x6800, 0x0)
ioctl$CDROM_GET_CAPABILITY(r6, 0x5331)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x30, 0x0, r4, 0x0, &(0x7f0000002400)='./file1\x00', 0x144, 0x0, 0x23456})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000140)={0x77359400}, 0x1, 0x12, 0x0, {0x0, r8}})
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(r7, &(0x7f0000000000)='\"', 0x1)
bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r9, &(0x7f0000000000), 0xd)
mount$nfs(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), 0x7c3efe1e23a9740f, &(0x7f0000000080)=ANY=[])

1.28269955s ago: executing program 4 (id=254):
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2c02, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket(0x10, 0x803, 0x0)
socket(0x10, 0x803, 0x0)
socket(0x1, 0x803, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$alg(0x26, 0x5, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000000)=0x84)
listen(r0, 0x3)
rt_sigaction(0x3, &(0x7f0000000240)={&(0x7f00000000c0)="ca0000bd41f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01e0fc0e00000652641c7f8cb31d82563df", 0xf0000006, 0x0, {[0x576bf0bf]}}, 0x0, 0x8, &(0x7f0000000300))
pipe2(&(0x7f0000000040), 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xf8, 0x0, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000240)=ANY=[], 0xfdef)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

1.282017286s ago: executing program 1 (id=255):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) (async, rerun: 32)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) (rerun: 32)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x8, 0x0, @mcast1}, 0x80, 0x0}, 0x40814)
rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffff]}, 0x0, 0x8) (async)
r0 = getpid()
r1 = gettid() (async)
r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async)
r3 = fsmount(r2, 0x0, 0x20)
symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') (async)
open_by_handle_at(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x2340c1)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x1d6}, 0x18) (async, rerun: 64)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async, rerun: 64)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f0000000b00)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f00"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x101003) (async)
socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 32)
pselect6(0x40, &(0x7f0000000000)={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8000000}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) (async, rerun: 32)
openat(r3, &(0x7f0000000200)='./file0\x00', 0x414f02, 0x52abe154ad664fa4) (async, rerun: 32)
rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000480)={0x0, 0x0, 0x2}) (async, rerun: 32)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={'\x00', 0x0, 0x0, {0xfffffffffffffff8, 0x10000}, {0x6, 0x6}, 0xab4, [0x5, 0x7a, 0x1, 0x4000000005, 0x40, 0x66, 0x1, 0x5f, 0x2, 0x1, 0x10, 0x4, 0x6, 0xffdffffffffffff7, 0x621, 0xa]})
r6 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000180)) (async)
r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xffffffffffffffff]}, 0x8, 0x0)
read$FUSE(r7, &(0x7f0000001a00)={0x2020}, 0x2020)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061197000011cfa74a1ea206e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63412117ce6203"], 0xfe1b)
socket$l2tp6(0xa, 0x2, 0x73)

1.052941929s ago: executing program 3 (id=258):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRES8=0x0], 0x1c}}, 0x804)

1.051887785s ago: executing program 3 (id=259):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@local, @remote, 0x0, "992e5057e6a98bd327a7d9fc393a5f0adf0a0e4635969febf18f213206327daf", 0x80, 0x7ff, 0x7fff, 0x80}, 0x3c)

922.54204ms ago: executing program 3 (id=260):
socket(0x10, 0x3, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000140)={@multicast1, @loopback}, 0xc)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000005c0)={0xb, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e1f, @private=0xa010100}}}, 0x108)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000440)={@multicast1, @loopback, 0x1}, 0x10)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
r2 = fsopen(&(0x7f00000001c0)='sockfs\x00', 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000040)={0x0, 0x5, 0x7, 0x8}, 0xc)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r5=>0x0})
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @remote}, r5}, 0x4f)
setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000040)={@mcast2, r5}, 0x14)
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r7, 0x29, 0x2d, &(0x7f0000000bc0)={0x9, {{0xa, 0x4e22, 0x6, @mcast1}}}, 0x88)
getsockopt$IP_SET_OP_GET_BYNAME(r6, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000200)=0x28)
r8 = fsmount(r2, 0x0, 0x0)
fchdir(r8)
r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r9, 0xee01, 0x0)
keyctl$setperm(0x5, r9, 0x30925)
keyctl$KEYCTL_MOVE(0x3, r9, 0x0, 0x0, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r10, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f00080003"], 0x78)
close(r10)

872.823298ms ago: executing program 3 (id=261):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x80, r1, 0x1, 0x70bd2b, 0x25dfdbff, {0x25}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x6c, 0xa8, @random="9574f17d9643232943b0f304aef1459ed7133d9d751d8101b60766163920a931c15e09640f037f4a8cd84fafd34cfc2a8825e609323d8a352a3b17f2c070ae0ed9fca597cc3e21defc3ef9332170f566bd4bc061e52f18d0928c168683876aaa5f11b17cc595312d"}]}, 0x80}, 0x1, 0x0, 0x0, 0x41}, 0x8000) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x80, r1, 0x1, 0x70bd2b, 0x25dfdbff, {0x25}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x6c, 0xa8, @random="9574f17d9643232943b0f304aef1459ed7133d9d751d8101b60766163920a931c15e09640f037f4a8cd84fafd34cfc2a8825e609323d8a352a3b17f2c070ae0ed9fca597cc3e21defc3ef9332170f566bd4bc061e52f18d0928c168683876aaa5f11b17cc595312d"}]}, 0x80}, 0x1, 0x0, 0x0, 0x41}, 0x8000)

872.561489ms ago: executing program 3 (id=262):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x449)
setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0)
lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00')
r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x400, 0x10100}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
r4 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r4, 0x0, 0x0, 0xfffffd49, 0x20044080, 0x1})
io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40086602, &(0x7f0000000000))
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r6 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000500)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z@-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4fe, {0x2, 0x6, "081148", 0x3f6f, 0xff, 0xff, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [], "5e3d30f5276a771b"}}}}}}}, 0x0)
recvmmsg(r6, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}, 0x6290}], 0x1, 0x2160, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r7 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7)
mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x200, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r8 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x800100)
ioctl$SG_GET_PACK_ID(r8, 0x227c, &(0x7f00000002c0))
setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f00000005c0)=ANY=[], 0xde, 0x3)

783.275094ms ago: executing program 3 (id=263):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x530, 0x30, 0x709, 0x0, 0x25dfdc00, {}, [{0x51c, 0x1, [@m_police={0x518, 0xf, 0x0, 0x0, {{0xb}, {0x470, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x827, 0x200, 0x8, 0x9, 0x2, 0x401, 0xa1, 0x9a3, 0x88, 0x532f, 0x0, 0x2, 0x3, 0x4, 0x2, 0x8, 0xffa, 0x3, 0x9, 0x2, 0x7fff, 0x14, 0x8001, 0x81, 0xfffffff7, 0x6, 0x9, 0x5, 0x0, 0x4, 0xff, 0x3ff, 0x51b, 0xfc, 0x4, 0xb6, 0x8001, 0x95b8, 0x6, 0x7fffffff, 0x3, 0x8, 0x1, 0x9, 0x6, 0x8, 0x5, 0x5, 0x7ff, 0x89, 0x6, 0x5, 0xd3f, 0x6, 0x30b, 0x101, 0xffff, 0x5, 0x8000, 0x2, 0x5, 0x80000000, 0xb, 0x8ea, 0xe, 0x9, 0x0, 0x0, 0x3ed2, 0x9, 0xb819, 0x7, 0x80000001, 0x1ff, 0xffffffff, 0x4775, 0x8001, 0x4, 0x1, 0x0, 0x1, 0x0, 0x13570028, 0x0, 0x6, 0xc304, 0x8, 0x9, 0xb, 0x6, 0x5, 0x7, 0x4, 0xa2b, 0x2, 0x0, 0x2, 0x5, 0x8001, 0xfff, 0x1e2, 0x2, 0x6, 0xbb82a3f2, 0x5, 0x4, 0x8001, 0x9, 0x3, 0x3, 0x2, 0x80000000, 0xe30, 0x1, 0x8, 0x292ec615, 0x6893, 0x7, 0x4, 0xff, 0x10000, 0x7, 0x4, 0x7fff, 0x9, 0x9, 0x4, 0x0, 0x3, 0x10001, 0x7, 0x1, 0xb, 0x9, 0x5, 0x8, 0x4, 0x1ff, 0x9b10, 0x61, 0x0, 0xfffffffe, 0x6, 0x9, 0x2d, 0x4, 0x6f87, 0x2, 0x400, 0x0, 0x3ff, 0x0, 0x0, 0x1, 0x7fffffff, 0x2, 0x2, 0x0, 0x8000, 0x7fffffff, 0xb, 0x3, 0x0, 0x5, 0x5e84, 0x3, 0x9, 0x7, 0x5, 0x0, 0xdbb, 0x10001, 0x5, 0x5, 0x7, 0x6a, 0x80000001, 0x400000, 0x2, 0x4, 0x8000, 0x9, 0x0, 0xd, 0x4, 0x17ac243d, 0x6e4, 0x6, 0x3, 0x39, 0x10001, 0x1, 0x7, 0xc0f2, 0x9, 0x8, 0xa31, 0x100, 0x0, 0x8, 0x5, 0x3, 0x3, 0x0, 0x1, 0x3, 0x1, 0x57, 0x6, 0x8, 0xfffffffd, 0x3, 0x7, 0x200, 0xfff, 0x1, 0xfffffffa, 0x8b4a, 0x3, 0x9, 0x6, 0x7, 0x4, 0x400, 0x1, 0x7f, 0x100, 0x5, 0x1, 0x2f, 0x5, 0x2, 0x9, 0x2, 0x4, 0x9, 0x4d7, 0x2614, 0x0, 0x2, 0xffffffff, 0x3, 0xe, 0x4, 0x9, 0x4, 0xffff0001, 0xfffffffa, 0x6, 0x8, 0x6, 0x2, 0x4, 0x4, 0x0, 0xbd]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x1, 0x5, 0xffff, 0x800, {0x6, 0x1, 0x33e, 0x7, 0x4c, 0x5}, {0x4, 0x2, 0x3, 0xcd, 0x7fff, 0x10000}, 0x7, 0x6, 0x5}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffff9a8}]]}, {0x7f, 0x6, "f68656869e364102e50f62ce6cdba87ccbee9c6855a20f46d6c2bfeebab75c76332ac83551d9ae949cc442f5c2c9b22fcbdc3ba115a84738c7963f117a7c1b388ed293950d97a5f195fe3fbde0d8dc5c2b83f800267c0142a5927eb9aafcb85091e71d5ec242e7530af5eb56151695c757f24f568b7f8073e9a89b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x530}}, 0x0)

492.922118ms ago: executing program 2 (id=264):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1}, 0x14)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x129201, 0x0)
ioctl$SNDCTL_DSP_GETFMTS(r2, 0x8004500b, &(0x7f0000000040)=0x5)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r2}, 0x3, 0x10, 0x2})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)

352.805825ms ago: executing program 2 (id=265):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '\xff\xff\xff\xff\xff\xff'}], 0xa, "eded5af694aba92f"}, 0x1a)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})
syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd697a262d00303afeff020000000000000000000000000001fc02000000000000000000000002009078fffffffc620813310009330020010000000000000000000000010002000000000000000000000000000000001facc21f1e550201968fd7facf603509138296ae115ebff099913048ef7879a0ff1bfc4622c46633371516166c669aef27c6e20ca2148c112b7ec7c797d6de6df08f67198fbd96a520b9804f50d116"], 0x0)
r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
dup(r4)
syz_open_dev$sg(&(0x7f0000000080), 0x8001, 0x100)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14)

349.064563ms ago: executing program 1 (id=266):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000006c0), 0x70d7c0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x80204705, &(0x7f00000000c0)={0x1, 0xc8a9, 0x5, 0x8000001, 0x15, "3eccd8f9f24305cfe373487400"}) (async, rerun: 64)
r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64)
preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000580)=""/198, 0xc6}, {&(0x7f0000000400)=""/134, 0x86}, {&(0x7f00000004c0)=""/39, 0x27}], 0x3, 0x2000, 0x5) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r2=>r0, {0x6}}, './file0\x00'}) (async)
syz_io_uring_setup(0x4a60, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xfffffffe, 0x1b3}, 0x0, 0x0) (async)
connect$inet(0xffffffffffffffff, 0x0, 0x0) (async)
syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x240881)
r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) (async)
r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r4}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}})
r5 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, &(0x7f00000007c0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r6=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000180)={r6, 0x4, 0x3, 0x1f, 0x43, 0x7}, 0x14) (async)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000540)=@sack_info={r6, 0x9, 0xf}, 0xc) (async)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="b0020000", @ANYRES16=0x0, @ANYBLOB="020027bd7000fedbdf254f000000b4007a800c000300c48341f5b14742a914000200409bf27aee8d2ad0479743632417d9462400010068ee64f8ffffffffc12d7c452a5588727aeb7f0ea6309275b1f113a4c645cadf0c000300c83b69fa037ecd010c00030087560ecbb38f478f2400010070c71d2972749152aff15e4015a545182f036a02fa9a945d0ab25e9f79d69b8514000100c3829f000000000000812d4733e4ca451c000200b95ec97046d2f0b5c8220614806f9a07a92b36f2dcfea7a98c007a801c000200b0327139a6e1e1bd4ef32cb31fc633d922bee54567d2217e0c0003001ae6092cd16a7c5c140002009859e6a85ece33211dc041b652a09b8b14000200e2de0f6e6486db536a6d287a1efcfe481c000200a20c548039716906c946dd61a8bc02417bed94e574a3b5f108000400000000fc14000200b0e90b8238270ece73e004126c8b099a30007a8008000400fbffffff240001009516dd88f774c215039e0d753c0497f1f21948bd8ed36433fc4a6a14b28460cc70007a8024000100e66a498efbf931023ab3c7f3940571872c28ab014f3cbdebdafa1fc0adb4d8780c0003003a1ecfdfb47e608e08000400020000000800040000000000140002002dab147dd42608fa262f1594820e50680c000300b02626fdc20c9c9a0c0003007986b865d6c1ece17c007a80140001006501ddeb126b5ffc9adeae69280d2cdd0c000300a8d8ee0028d506d01400010076495883f8c04b736951ad0c0399bb790c000300fefd26b4399ebb770c00030008fb6a70e0a95a802400010065bfb33f651d885874768269469614be6650a95d36bdf850db8e2aece17113a6080004000600000028007a801c0002000eb44d16129a2c2e635c229bf9a1bafeb0409afd00804037080004000900000018007a8014000200445672732dc294749a632f803cf9f2bb"], 0x2b0}, 0x1, 0x0, 0x0, 0x4}, 0x8805) (async)
r7 = syz_open_dev$loop(&(0x7f0000000540), 0x4, 0x2)
ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000600)={'\x00', 0x81, 0x10001, 0x7f, 0x9, 0x8}) (async)
ioctl$BLKTRACESTART(r7, 0x1274, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup/syz1\x00', 0x200002, 0x0) (async, rerun: 32)
close(r1) (rerun: 32)

242.809174ms ago: executing program 1 (id=267):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = socket(0x11, 0xa, 0x5)
sendto$inet(r1, &(0x7f0000002100)="cf", 0x5ee, 0x40800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/224, 0xe0, 0x1, &(0x7f0000000180)=""/39, 0x27}, &(0x7f0000000200)=0x40)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58)
close_range(r0, 0xffffffffffffffff, 0x0)

162.788715ms ago: executing program 1 (id=268):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000040)=""/3, 0x3, 0x10140, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) (async)
r3 = socket(0x10, 0x803, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x3, 0x7ffffdbd}]}) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) (async)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) (async)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118)
setsockopt$inet6_buf(r3, 0x29, 0x2d, &(0x7f00000000c0)="ad608bddc0f94e500b3d", 0xa) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) (async)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x1, 0x4}) (async)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x91)
sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)

162.537184ms ago: executing program 1 (id=269):
r0 = io_uring_setup(0x7c8c, &(0x7f00000000c0)={0x0, 0xa3e5, 0x8, 0x3, 0x1fd})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x80)
write$dsp(r2, &(0x7f0000000240)=' ', 0x1)
close(r2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 1 (id=270):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000000a, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x12, 0x1, 0x0, "c175f0b781eddc96e6d941c3a7f9582753f9ffff8cbae2850c67ea00"}) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x8000f, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r11], 0x54}}, 0x0) (async)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4004050, 0x0, 0x0)

kernel console output (not intermixed with test programs):

[   44.212503][   T40] audit: type=1400 audit(1760347355.889:59): avc:  denied  { write } for  pid=5877 comm="sh" path="pipe:[6308]" dev="pipefs" ino=6308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   44.220531][   T40] audit: type=1400 audit(1760347355.889:60): avc:  denied  { rlimitinh } for  pid=5877 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   44.226780][   T40] audit: type=1400 audit(1760347355.889:61): avc:  denied  { siginh } for  pid=5877 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '[localhost]:2889' (ED25519) to the list of known hosts.
[   45.089701][   T40] audit: type=1400 audit(1760347356.779:62): avc:  denied  { name_bind } for  pid=5910 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   45.106496][   T40] audit: type=1400 audit(1760347356.799:63): avc:  denied  { write } for  pid=5911 comm="sh" path="pipe:[7310]" dev="pipefs" ino=7310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   45.118616][   T40] audit: type=1400 audit(1760347356.809:64): avc:  denied  { execute } for  pid=5911 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   45.125611][   T40] audit: type=1400 audit(1760347356.809:65): avc:  denied  { execute_no_trans } for  pid=5911 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   47.145492][   T40] audit: type=1400 audit(1760347358.839:66): avc:  denied  { mounton } for  pid=5911 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   47.157224][ T5911] cgroup: Unknown subsys name 'net'
[   47.305994][ T5911] cgroup: Unknown subsys name 'cpuset'
[   47.312814][ T5911] cgroup: Unknown subsys name 'rlimit'
[   47.553434][ T5918] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   48.488518][ T5911] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   51.941361][   T40] kauditd_printk_skb: 13 callbacks suppressed
[   51.941373][   T40] audit: type=1400 audit(1760347363.629:80): avc:  denied  { execmem } for  pid=5923 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   52.154439][   T40] audit: type=1400 audit(1760347363.849:81): avc:  denied  { create } for  pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   52.162222][   T40] audit: type=1400 audit(1760347363.849:82): avc:  denied  { read write } for  pid=5928 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   52.169561][   T40] audit: type=1400 audit(1760347363.849:83): avc:  denied  { read write } for  pid=5927 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   52.176908][   T40] audit: type=1400 audit(1760347363.849:84): avc:  denied  { open } for  pid=5928 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   52.184220][   T40] audit: type=1400 audit(1760347363.849:85): avc:  denied  { ioctl } for  pid=5928 comm="syz-executor" path="socket:[7336]" dev="sockfs" ino=7336 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   52.200652][ T5937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   52.204228][ T5937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   52.207309][ T5937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   52.209897][ T5937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   52.211752][ T5935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   52.214992][ T5935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   52.217291][ T5935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   52.219897][ T5935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   52.221798][ T5940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   52.222295][ T5935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   52.223993][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   52.225331][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   52.225412][ T5940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   52.226200][ T5940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   52.226675][ T5940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   52.232466][ T5941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   52.234542][ T5940] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   52.235121][   T40] audit: type=1400 audit(1760347363.919:86): avc:  denied  { read } for  pid=5928 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   52.235149][   T40] audit: type=1400 audit(1760347363.919:87): avc:  denied  { open } for  pid=5928 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   52.235171][   T40] audit: type=1400 audit(1760347363.929:88): avc:  denied  { mounton } for  pid=5928 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   52.236535][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   52.238933][ T5940] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   52.267231][ T5940] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   52.482843][   T40] audit: type=1400 audit(1760347364.179:89): avc:  denied  { module_request } for  pid=5942 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   52.555929][ T5928] chnl_net:caif_netlink_parms(): no params data found
[   52.577412][ T5942] chnl_net:caif_netlink_parms(): no params data found
[   52.671820][ T5929] chnl_net:caif_netlink_parms(): no params data found
[   52.676409][ T5927] chnl_net:caif_netlink_parms(): no params data found
[   52.799167][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.801590][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.804223][ T5942] bridge_slave_0: entered allmulticast mode
[   52.807831][ T5942] bridge_slave_0: entered promiscuous mode
[   52.813667][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.816273][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.819142][ T5942] bridge_slave_1: entered allmulticast mode
[   52.822140][ T5942] bridge_slave_1: entered promiscuous mode
[   52.850385][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.853115][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.855662][ T5928] bridge_slave_0: entered allmulticast mode
[   52.858226][ T5928] bridge_slave_0: entered promiscuous mode
[   52.895340][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.897674][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.899865][ T5928] bridge_slave_1: entered allmulticast mode
[   52.902715][ T5928] bridge_slave_1: entered promiscuous mode
[   52.909816][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.967445][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.017915][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.020431][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.023366][ T5929] bridge_slave_0: entered allmulticast mode
[   53.025756][ T5929] bridge_slave_0: entered promiscuous mode
[   53.052564][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.054598][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.056644][ T5927] bridge_slave_0: entered allmulticast mode
[   53.059078][ T5927] bridge_slave_0: entered promiscuous mode
[   53.062834][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.065076][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.067573][ T5927] bridge_slave_1: entered allmulticast mode
[   53.070431][ T5927] bridge_slave_1: entered promiscuous mode
[   53.074083][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.091880][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.094392][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.097296][ T5929] bridge_slave_1: entered allmulticast mode
[   53.100376][ T5929] bridge_slave_1: entered promiscuous mode
[   53.118944][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.186197][ T5942] team0: Port device team_slave_0 added
[   53.203974][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.208076][ T5929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.211921][ T5942] team0: Port device team_slave_1 added
[   53.214684][ T5928] team0: Port device team_slave_0 added
[   53.217815][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.221721][ T5929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.238690][ T5928] team0: Port device team_slave_1 added
[   53.284490][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.286691][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.294645][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.343295][ T5929] team0: Port device team_slave_0 added
[   53.345764][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.347950][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.356762][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.387176][ T5927] team0: Port device team_slave_0 added
[   53.389911][ T5929] team0: Port device team_slave_1 added
[   53.410011][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.412982][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.424005][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.429536][ T5927] team0: Port device team_slave_1 added
[   53.457546][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.460070][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.468555][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.489258][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.491263][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.498835][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.502984][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.505151][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.514777][ T5929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.522913][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.525644][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.535975][ T5929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.564179][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.566383][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.574393][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.620901][ T5942] hsr_slave_0: entered promiscuous mode
[   53.625189][ T5942] hsr_slave_1: entered promiscuous mode
[   53.714449][ T5929] hsr_slave_0: entered promiscuous mode
[   53.716789][ T5929] hsr_slave_1: entered promiscuous mode
[   53.718875][ T5929] debugfs: 'hsr0' already exists in 'hsr'
[   53.720705][ T5929] Cannot create hsr debugfs directory
[   53.740546][ T5927] hsr_slave_0: entered promiscuous mode
[   53.743039][ T5927] hsr_slave_1: entered promiscuous mode
[   53.745077][ T5927] debugfs: 'hsr0' already exists in 'hsr'
[   53.746915][ T5927] Cannot create hsr debugfs directory
[   53.765639][ T5928] hsr_slave_0: entered promiscuous mode
[   53.767986][ T5928] hsr_slave_1: entered promiscuous mode
[   53.770979][ T5928] debugfs: 'hsr0' already exists in 'hsr'
[   53.773589][ T5928] Cannot create hsr debugfs directory
[   54.174432][ T5942] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.179832][ T5942] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.186324][ T5942] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.199018][ T5942] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.240328][ T5929] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.245712][ T5929] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.252665][ T5929] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.263564][ T5940] Bluetooth: hci3: command tx timeout
[   54.267786][ T5929] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.271658][ T5940] Bluetooth: hci0: command tx timeout
[   54.271686][   T64] Bluetooth: hci1: command tx timeout
[   54.304261][ T5927] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   54.315412][ T5927] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   54.319550][ T5927] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   54.327951][ T5927] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   54.342057][   T64] Bluetooth: hci2: command tx timeout
[   54.378746][ T5928] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.386254][ T5928] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.396277][ T5928] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.402275][ T5928] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.424063][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.450236][ T5942] 8021q: adding VLAN 0 to HW filter on device team0
[   54.472744][   T94] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.475273][   T94] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.487832][   T94] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.490747][   T94] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.498438][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.533800][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.548245][ T5929] 8021q: adding VLAN 0 to HW filter on device team0
[   54.562841][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.565530][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.577352][ T5927] 8021q: adding VLAN 0 to HW filter on device team0
[   54.588573][   T94] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.591452][   T94] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.599052][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.602084][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.614433][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.626606][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.628833][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.654835][ T5928] 8021q: adding VLAN 0 to HW filter on device team0
[   54.667190][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.670012][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.693969][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.696299][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.806266][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.819328][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.856454][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.868497][ T5942] veth0_vlan: entered promiscuous mode
[   54.884384][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.896629][ T5942] veth1_vlan: entered promiscuous mode
[   54.899351][ T5927] veth0_vlan: entered promiscuous mode
[   54.922214][ T5929] veth0_vlan: entered promiscuous mode
[   54.930172][ T5927] veth1_vlan: entered promiscuous mode
[   54.936405][ T5929] veth1_vlan: entered promiscuous mode
[   54.958866][ T5942] veth0_macvtap: entered promiscuous mode
[   54.966237][ T5942] veth1_macvtap: entered promiscuous mode
[   54.968962][ T5928] veth0_vlan: entered promiscuous mode
[   54.979388][ T5927] veth0_macvtap: entered promiscuous mode
[   54.984560][ T5929] veth0_macvtap: entered promiscuous mode
[   54.990211][ T5929] veth1_macvtap: entered promiscuous mode
[   54.995230][ T5928] veth1_vlan: entered promiscuous mode
[   54.997809][ T5927] veth1_macvtap: entered promiscuous mode
[   55.013630][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.016901][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.020720][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.034858][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.042189][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.049772][ T1178] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.054374][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.061118][ T1178] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.065159][ T1178] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.072962][ T1178] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.084217][ T1178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.087545][ T1178] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.100076][ T1178] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.103526][ T1178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.115510][ T1178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.118273][ T1178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.128224][ T1178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.133098][ T1178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.137175][ T5928] veth0_macvtap: entered promiscuous mode
[   55.152877][ T5928] veth1_macvtap: entered promiscuous mode
[   55.176212][   T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.177240][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.178940][   T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.193866][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.195886][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.196202][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.216288][   T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.221837][   T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.224052][   T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.227566][   T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.231201][   T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.240243][   T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.246212][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.248642][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.269271][ T5927] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.289702][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.291033][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.294793][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.295033][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.323472][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.326159][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.344270][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.350376][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.377887][ T6019] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   55.412702][ T6021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   55.426907][ T6019] Bluetooth: MGMT ver 1.23
[   55.537042][ T6040] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7'.
[   55.560136][ T6040] Zero length message leads to an empty skb
[   55.609401][ T6055] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[   55.612119][ T6055] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   55.616907][ T6055] vhci_hcd vhci_hcd.0: Device attached
[   55.619719][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'.
[   55.702624][ T6057] vhci_hcd: connection closed
[   55.704382][   T46] vhci_hcd: stop threads
[   55.707428][   T46] vhci_hcd: release socket
[   55.709228][   T46] vhci_hcd: disconnect device
[   55.721672][ T6069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'.
[   55.771655][ T6072] capability: warning: `syz.3.18' uses 32-bit capabilities (legacy support in use)
[   55.860201][ T6079] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.863749][ T6079] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.251233][   T29] cfg80211: failed to load regulatory.db
[   56.341588][   T64] Bluetooth: hci0: command tx timeout
[   56.352349][   T64] Bluetooth: hci1: command tx timeout
[   56.354009][   T64] Bluetooth: hci3: command tx timeout
[   56.383717][ T6104] dvmrp0: entered allmulticast mode
[   56.392879][   T53] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   56.421927][   T64] Bluetooth: hci2: command tx timeout
[   56.544456][   T53] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   56.548552][   T53] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   56.553031][   T53] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   56.557145][   T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.563572][ T6091] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   56.570704][   T53] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[   56.600667][ T6120] netlink: 16 bytes leftover after parsing attributes in process `syz.2.34'.
[   56.617129][ T6123] vivid-000: =================  START STATUS  =================
[   56.620224][ T6123] vivid-000: Test Pattern: 75% Colorbar
[   56.623568][ T6123] vivid-000: Fill Percentage of Frame: 100
[   56.625991][ T6123] vivid-000: Horizontal Movement: No Movement
[   56.628469][ T6123] vivid-000: Vertical Movement: No Movement
[   56.630965][ T6123] vivid-000: OSD Text Mode: All
[   56.633960][ T6123] vivid-000: Show Border: false
[   56.636008][ T6123] vivid-000: Show Square: false
[   56.637933][ T6123] vivid-000: Sensor Flipped Horizontally: false
[   56.642092][ T6123] vivid-000: Sensor Flipped Vertically: false
[   56.644950][ T6123] vivid-000: Insert SAV Code in Image: false
[   56.647463][ T6123] vivid-000: Insert EAV Code in Image: false
[   56.649995][ T6123] vivid-000: Insert Video Guard Band: false
[   56.653172][ T6123] vivid-000: Reduced Framerate: false
[   56.655622][ T6123] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[   56.658601][ T6123] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[   56.662136][ T6123] vivid-000: Enable Capture Cropping: true
[   56.664041][ T6123] vivid-000: Enable Capture Composing: true
[   56.665960][ T6123] vivid-000: Enable Capture Scaler: true
[   56.667748][ T6123] vivid-000: Timestamp Source: End of Frame
[   56.669632][ T6123] vivid-000: Colorspace: sRGB
[   56.671180][ T6123] vivid-000: Transfer Function: Default
[   56.674834][ T6123] vivid-000: Y'CbCr Encoding: Default
[   56.677487][ T6123] vivid-000: HSV Encoding: Hue 0-179
[   56.679024][ T6123] vivid-000: Quantization: Default
[   56.681245][ T6123] vivid-000: Apply Alpha To Red Only: false
[   56.683371][ T6123] vivid-000: Standard Aspect Ratio: 4x3
[   56.685439][ T6123] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[   56.688192][ T6123] vivid-000: DV Timings: 640x480p59 inactive
[   56.690420][ T6123] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[   56.693440][ T6123] vivid-000: Maximum EDID Blocks: 2
[   56.695386][ T6123] vivid-000: Limited RGB Range (16-235): false
[   56.697259][ T6127] lo speed is unknown, defaulting to 1000
[   56.697890][ T6123] vivid-000: Rx RGB Quantization Range: Automatic
[   56.699685][ T6127] lo speed is unknown, defaulting to 1000
[   56.702828][ T6123] vivid-000: Power Present: 0x00000001
[   56.705206][ T6127] lo speed is unknown, defaulting to 1000
[   56.705498][ T6123] tpg source WxH: 320x240 (Y'CbCr)
[   56.708912][ T6123] tpg field: 1
[   56.709722][ T6127] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   56.710023][ T6123] tpg crop: (0,0)/320x240
[   56.710032][ T6123] tpg compose: (0,0)/320x240
[   56.715968][ T6127] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   56.722448][ T6123] tpg colorspace: 8
[   56.723790][ T6123] tpg transfer function: 0/0
[   56.726008][ T6123] tpg Y'CbCr encoding: 0/0
[   56.727491][ T6123] tpg quantization: 0/0
[   56.728873][ T6123] tpg RGB range: 0/2
[   56.730589][ T6123] vivid-000: ==================  END STATUS  ==================
[   56.735547][ T6127] lo speed is unknown, defaulting to 1000
[   56.738433][ T6127] lo speed is unknown, defaulting to 1000
[   56.741105][ T6127] lo speed is unknown, defaulting to 1000
[   56.752402][ T6127] lo speed is unknown, defaulting to 1000
[   56.804989][ T6140] syzkaller1: entered promiscuous mode
[   56.806829][ T6140] syzkaller1: entered allmulticast mode
[   56.808016][ T6091] MINIX-fs: blocksize too small for device
[   56.821877][ T1029] usb 8-1: USB disconnect, device number 2
[   56.854335][ T6140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.40'.
[   56.909027][ T6144] ADFS-fs (nbd2): error: unable to read block 3, try 0
[   57.059670][   T40] kauditd_printk_skb: 123 callbacks suppressed
[   57.059681][   T40] audit: type=1400 audit(1760347368.749:213): avc:  denied  { create } for  pid=6149 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   57.069737][ T6151] lo speed is unknown, defaulting to 1000
[   57.282690][   T40] audit: type=1400 audit(1760347368.979:214): avc:  denied  { read } for  pid=6155 comm="syz.2.44" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   57.289552][   T40] audit: type=1400 audit(1760347368.979:215): avc:  denied  { open } for  pid=6155 comm="syz.2.44" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   57.291638][ T6156] binder_alloc: 6155: binder_alloc_buf, no vma
[   57.298024][   T40] audit: type=1400 audit(1760347368.979:216): avc:  denied  { ioctl } for  pid=6155 comm="syz.2.44" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   57.309284][   T40] audit: type=1400 audit(1760347368.979:217): avc:  denied  { set_context_mgr } for  pid=6155 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   57.315361][   T40] audit: type=1400 audit(1760347368.979:218): avc:  denied  { write } for  pid=6155 comm="syz.2.44" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   57.322531][   T40] audit: type=1400 audit(1760347368.979:219): avc:  denied  { call } for  pid=6155 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   57.365925][   T40] audit: type=1400 audit(1760347369.059:220): avc:  denied  { ioctl } for  pid=6159 comm="syz.3.46" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   57.481590][   T40] audit: type=1400 audit(1760347369.179:221): avc:  denied  { remount } for  pid=6167 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   57.488435][   T40] audit: type=1400 audit(1760347369.179:222): avc:  denied  { read } for  pid=6162 comm="syz.3.47" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[   57.611414][ T6178] MINIX-fs: blocksize too small for device
[   57.645568][ T6182] capability: warning: `syz.3.54' uses deprecated v2 capabilities in a way that may be insecure
[   57.674333][ T6184] netlink: 2 bytes leftover after parsing attributes in process `syz.2.53'.
[   57.842468][ T6187] netlink: 'syz.2.55': attribute type 1 has an invalid length.
[   58.216938][ T6204] =======================================================
[   58.216938][ T6204] WARNING: The mand mount option has been deprecated and
[   58.216938][ T6204]          and is ignored by this kernel. Remove the mand
[   58.216938][ T6204]          option from the mount to silence this warning.
[   58.216938][ T6204] =======================================================
[   58.235835][ T6204] option changes via remount are deprecated (pid=6203 comm=syz.2.60)
[   58.310493][ T6206] binder: 6205:6206 ioctl 5000943a 200000000b00 returned -22
[   58.421697][   T64] Bluetooth: hci3: command tx timeout
[   58.421717][ T5940] Bluetooth: hci0: command tx timeout
[   58.431939][ T5940] Bluetooth: hci1: command tx timeout
[   58.501445][ T5940] Bluetooth: hci2: command tx timeout
[   58.531805][ T6229] mmap: syz.3.67 (6229) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   58.548811][ T6235] netlink: 'syz.0.69': attribute type 12 has an invalid length.
[   58.551257][ T6235] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.69'.
[   58.610723][ T6243] ieee802154 phy0 wpan0: encryption failed: -22
[   58.635284][ T6248] fuseblk: Unknown parameter 'rootmoey'
[   58.637431][ T6248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.72'.
[   58.652540][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.73'.
[   58.709218][ T6257] process 'syz.0.74' launched './file1' with NULL argv: empty string added
[   58.806918][ T6267] devtmpfs: Cannot change global quota limit on remount
[   58.921732][    T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   58.957947][ T6280] netlink: 'syz.1.85': attribute type 5 has an invalid length.
[   58.993131][ T6287] netlink: 'syz.1.88': attribute type 10 has an invalid length.
[   59.073069][    T9] usb 7-1: Using ep0 maxpacket: 8
[   59.076990][    T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[   59.080386][    T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   59.085079][    T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   59.089084][    T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 26144, setting to 1024
[   59.094974][    T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   59.099376][    T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   59.104783][    T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   59.108569][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.184639][ T6303] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   59.201954][ T6305] 9pnet_virtio: no channels available for device syz
[   59.208510][ T6308] tmpfs: Bad value for 'mpol'
[   59.321915][    T9] usb 7-1: usb_control_msg returned -32
[   59.324619][    T9] usbtmc 7-1:16.0: can't read capabilities
[   59.397993][ T6317] Cannot find del_set index 4 as target
[   59.510491][  T895] IPVS: starting estimator thread 0...
[   59.524233][ T6255] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   59.546508][ T6334] bridge_slave_0: left allmulticast mode
[   59.548751][ T6334] bridge_slave_0: left promiscuous mode
[   59.552361][ T6334] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.559520][ T6334] bridge_slave_1: left allmulticast mode
[   59.563029][ T6334] bridge_slave_1: left promiscuous mode
[   59.565451][ T6334] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.576746][ T6334] bond0: (slave bond_slave_0): Releasing backup interface
[   59.583287][ T6334] bond0: (slave bond_slave_1): Releasing backup interface
[   59.594551][ T6334] team0: Port device team_slave_0 removed
[   59.600575][ T6334] team0: Port device team_slave_1 removed
[   59.603946][ T6334] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.607075][ T6334] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.611483][ T6331] IPVS: using max 45 ests per chain, 108000 per kthread
[   59.612272][ T6334] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.617231][ T6334] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.621216][ T6334] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   59.678339][ T6224] usbtmc 7-1:16.0: stb usb_control_msg returned -32
[   59.683346][ T5996] usb 7-1: USB disconnect, device number 2
[   59.733631][ T6342] team0: Device ppp0 is of different type
[   59.800913][ T6348] kAFS: No cell specified
[   60.380933][ T6389] dlm: no locking on control device
[   60.501497][   T64] Bluetooth: hci1: command tx timeout
[   60.501520][ T5933] Bluetooth: hci0: command tx timeout
[   60.503249][ T5940] Bluetooth: hci3: command tx timeout
[   60.581407][ T5940] Bluetooth: hci2: command tx timeout
[   60.648083][ T6411] lo speed is unknown, defaulting to 1000
[   60.903706][ T6423] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[   60.905855][ T6423] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   60.908312][ T6423] vhci_hcd vhci_hcd.0: Device attached
[   60.922528][ T6424] vhci_hcd: connection closed
[   60.923852][   T60] vhci_hcd: stop threads
[   60.926929][   T60] vhci_hcd: release socket
[   60.928323][   T60] vhci_hcd: disconnect device
[   61.361904][ T5304] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[   61.379248][ T6437] input input5: cannot allocate more than FF_MAX_EFFECTS effects
[   61.419413][ T6442] lo speed is unknown, defaulting to 1000
[   61.424923][ T6440] lo speed is unknown, defaulting to 1000
[   61.516404][ T6448] program syz.2.137 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   62.374172][ T6468] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   62.375710][   T40] kauditd_printk_skb: 91 callbacks suppressed
[   62.375723][   T40] audit: type=1400 audit(2000000002.809:314): avc:  denied  { read } for  pid=6465 comm="syz.1.143" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   62.387981][   T40] audit: type=1400 audit(2000000002.809:315): avc:  denied  { bind } for  pid=6465 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   62.394864][   T40] audit: type=1400 audit(2000000002.809:316): avc:  denied  { name_bind } for  pid=6465 comm="syz.1.143" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   62.400900][   T40] audit: type=1400 audit(2000000002.809:317): avc:  denied  { node_bind } for  pid=6465 comm="syz.1.143" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   62.408478][   T40] audit: type=1400 audit(2000000002.819:318): avc:  denied  { firmware_load } for  pid=6466 comm="syz.0.142" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[   62.419145][   T40] audit: type=1400 audit(2000000002.829:319): avc:  denied  { getopt } for  pid=6466 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   62.581415][ T5940] Bluetooth: hci0: command 0x0401 tx timeout
[   62.613791][ T6487] 9p: Unknown access argument 00000000000000000000��ƠM>�G: -22
[   62.806127][ T6492] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[   62.852994][ T6495] __nla_validate_parse: 10 callbacks suppressed
[   62.853006][ T6495] netlink: 32 bytes leftover after parsing attributes in process `syz.2.150'.
[   63.244540][   T40] audit: type=1400 audit(2000000003.679:320): avc:  denied  { create } for  pid=6504 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   63.256652][   T40] audit: type=1400 audit(2000000003.679:321): avc:  denied  { ioctl } for  pid=6504 comm="syz.1.153" path="socket:[10125]" dev="sockfs" ino=10125 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   63.272867][ T6469] syz.0.142 (6469) used greatest stack depth: 18232 bytes left
[   63.328656][   T40] audit: type=1400 audit(2000000003.759:322): avc:  denied  { write } for  pid=6509 comm="syz.1.155" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   63.349453][   T40] audit: type=1400 audit(2000000003.779:323): avc:  denied  { getopt } for  pid=6511 comm="syz.3.157" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   63.368565][ T6516] netlink: 'syz.0.156': attribute type 3 has an invalid length.
[   63.371599][ T6516] netlink: 'syz.0.156': attribute type 3 has an invalid length.
[   63.408957][ T6526] netlink: 'syz.1.160': attribute type 8 has an invalid length.
[   64.095182][ T6544] netlink: 'syz.2.165': attribute type 1 has an invalid length.
[   64.143273][ T6544] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.149249][ T6548] devtmpfs: Cannot change global quota limit on remount
[   64.180213][ T6544] binder: BINDER_SET_CONTEXT_MGR already set
[   64.185630][ T6544] binder: 6543:6544 ioctl 4018620d 200000000100 returned -16
[   64.188734][ T6545] binder: 6543:6545 ioctl c0306201 200000000540 returned -14
[   64.272872][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.168'.
[   64.282480][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.168'.
[   64.290882][ T1147] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   64.290885][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.168'.
[   64.290908][ T1147] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   64.299589][ T1147] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   64.302732][ T1147] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   64.461453][   T61] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   64.621547][   T61] usb 6-1: Using ep0 maxpacket: 16
[   64.626484][   T61] usb 6-1: config 0 has an invalid interface number: 48 but max is 0
[   64.630106][   T61] usb 6-1: config 0 has no interface number 0
[   64.632891][   T61] usb 6-1: config 0 interface 48 has no altsetting 0
[   64.637555][   T61] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98
[   64.641284][   T61] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.644672][   T61] usb 6-1: Product: syz
[   64.646509][   T61] usb 6-1: Manufacturer: syz
[   64.648443][   T61] usb 6-1: SerialNumber: syz
[   64.652958][   T61] usb 6-1: config 0 descriptor??
[   64.859329][ T6550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.863926][ T6550] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.866899][ T5940] Bluetooth: hci3: Unknown advertising packet type: 0x35
[   64.866959][ T5940] Bluetooth: hci3: adv larger than maximum supported
[   64.869278][ T5940] Bluetooth: hci3: Malformed LE Event: 0x0d
[   64.871967][   T10] usb 6-1: USB disconnect, device number 2
[   64.933893][ T6581] syz.3.174 uses obsolete (PF_INET,SOCK_PACKET)
[   65.118930][ T5933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.119250][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.180'.
[   65.126060][ T5933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.129037][ T5933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.132048][ T5933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.135416][ T5933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.146898][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.177448][ T6595] lo speed is unknown, defaulting to 1000
[   65.245701][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.327259][ T6595] chnl_net:caif_netlink_parms(): no params data found
[   65.328526][ T6603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32022 sclass=netlink_route_socket pid=6603 comm=syz.3.181
[   65.328616][ T6604] random: crng reseeded on system resumption
[   65.334932][ T6605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32022 sclass=netlink_route_socket pid=6605 comm=syz.3.181
[   65.344477][ T6604] random: crng reseeded on system resumption
[   65.360933][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.434522][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.459624][ T6595] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.462498][ T6595] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.464819][ T6595] bridge_slave_0: entered allmulticast mode
[   65.467658][ T6595] bridge_slave_0: entered promiscuous mode
[   65.472913][ T6595] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.475712][ T6595] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.478497][ T6595] bridge_slave_1: entered allmulticast mode
[   65.481566][ T6595] bridge_slave_1: entered promiscuous mode
[   65.508679][ T6623] tmpfs: Bad value for 'mpol'
[   65.534523][ T6635] netlink: 36 bytes leftover after parsing attributes in process `syz.3.188'.
[   65.540761][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'.
[   65.544866][ T6634] netlink: 40 bytes leftover after parsing attributes in process `syz.1.189'.
[   65.567595][ T6595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.573782][ T6595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.646909][ T6595] team0: Port device team_slave_0 added
[   65.665639][ T6595] team0: Port device team_slave_1 added
[   65.710891][ T6595] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.713287][ T6595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.721195][ T6595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.736117][ T6595] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.739806][ T6595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.749990][ T6595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.764933][ T6662] tipc: Started in network mode
[   65.767126][ T6662] tipc: Node identity 4, cluster identity 4711
[   65.769606][ T6662] tipc: Node number set to 4
[   65.773895][ T6664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.196'.
[   65.794722][   T12] bridge_slave_1: left allmulticast mode
[   65.796654][   T12] bridge_slave_1: left promiscuous mode
[   65.799184][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.804633][   T12] bridge_slave_0: left allmulticast mode
[   65.806438][   T12] bridge_slave_0: left promiscuous mode
[   65.808248][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.968478][ T6677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22278 sclass=netlink_route_socket pid=6677 comm=syz.3.198
[   65.975903][ T6677] netlink: 24 bytes leftover after parsing attributes in process `syz.3.198'.
[   66.111687][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   66.164164][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   66.212382][   T12] bond0 (unregistering): Released all slaves
[   66.219511][   T12] bond1 (unregistering): Released all slaves
[   66.263881][ T6595] hsr_slave_0: entered promiscuous mode
[   66.266546][ T6595] hsr_slave_1: entered promiscuous mode
[   66.268888][ T6595] debugfs: 'hsr0' already exists in 'hsr'
[   66.270695][ T6595] Cannot create hsr debugfs directory
[   66.282214][ T6679] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   66.322336][ T6682] Bluetooth: MGMT ver 1.23
[   66.404413][ T6687] binder: BINDER_SET_CONTEXT_MGR already set
[   66.406479][ T6687] binder: 6686:6687 ioctl 4018620d 200000000280 returned -16
[   66.409907][ T6690] binder_alloc: binder_alloc_mmap_handler: 6686 200000ffd000-200001000000 already mapped failed -16
[   66.415423][ T6687] binder_alloc: 6686: binder_alloc_buf, no vma
[   66.547152][ T6700] SELinux: selinux_ima_measure_state_locked: failed to read policy -12.
[   66.620863][ T6711] pim6reg: entered allmulticast mode
[   66.624104][ T6711] pim6reg: left allmulticast mode
[   66.920624][   T12] hsr_slave_0: left promiscuous mode
[   66.922959][   T12] hsr_slave_1: left promiscuous mode
[   66.925773][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.928597][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.931689][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.934109][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.953181][   T12] veth1_macvtap: left promiscuous mode
[   66.955311][   T12] veth0_macvtap: left promiscuous mode
[   66.957217][   T12] veth1_vlan: left promiscuous mode
[   66.959022][   T12] veth0_vlan: left promiscuous mode
[   67.222302][ T5940] Bluetooth: hci0: command tx timeout
[   67.385943][ T6741] kvm: MONITOR instruction emulated as NOP!
[   67.393298][ T6741] netlink: 'syz.1.215': attribute type 1 has an invalid length.
[   67.452880][ T6747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=6747 comm=syz.1.215
[   67.512727][   T12] team0 (unregistering): Port device team_slave_1 removed
[   67.561489][ T5975] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   67.568916][   T12] team0 (unregistering): Port device team_slave_0 removed
[   67.723420][ T5975] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   67.727478][ T5975] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   67.731660][ T5975] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   67.739284][ T5975] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   67.743224][ T5975] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.746556][ T5975] usb 7-1: Product: syz
[   67.748314][ T5975] usb 7-1: Manufacturer: syz
[   67.750373][ T5975] usb 7-1: SerialNumber: syz
[   67.761684][ T5975] hub 7-1:1.0: bad descriptor, ignoring hub
[   67.764390][ T5975] hub 7-1:1.0: probe with driver hub failed with error -5
[   67.962676][   T40] kauditd_printk_skb: 92 callbacks suppressed
[   67.962687][   T40] audit: type=1400 audit(2000000008.399:416): avc:  denied  { getopt } for  pid=6737 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   67.963737][ T6753] binder: BINDER_SET_CONTEXT_MGR already set
[   67.964274][ T5975] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   67.964964][   T40] audit: type=1400 audit(2000000008.399:417): avc:  denied  { create } for  pid=6737 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   67.971188][ T6753] binder: 6737:6753 ioctl 4018620d 200000000100 returned -16
[   67.973494][   T40] audit: type=1400 audit(2000000008.399:418): avc:  denied  { write } for  pid=6737 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   67.997847][   T40] audit: type=1400 audit(2000000008.399:419): avc:  denied  { ioctl } for  pid=6737 comm="syz.2.214" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   68.008717][   T40] audit: type=1400 audit(2000000008.399:420): avc:  denied  { set_context_mgr } for  pid=6737 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   68.012912][ T6756] __nla_validate_parse: 3 callbacks suppressed
[   68.012932][ T6756] netlink: 48 bytes leftover after parsing attributes in process `syz.2.216'.
[   68.043313][ T6595] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   68.066679][ T6741] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.070893][ T6595] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   68.075591][ T6595] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   68.085962][ T6595] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   68.091559][    T9] usb 7-1: USB disconnect, device number 3
[   68.095648][    T9] usblp0: removed
[   68.109975][   T40] audit: type=1400 audit(2000000008.539:421): avc:  denied  { read open } for  pid=6769 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.122427][   T40] audit: type=1400 audit(2000000008.539:422): avc:  denied  { getattr } for  pid=6769 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.133025][ T6595] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.138734][   T40] audit: type=1400 audit(2000000008.559:423): avc:  denied  { add_name } for  pid=6762 comm="dhcpcd-run-hook" name="resolv.conf.eth4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.140475][ T6595] 8021q: adding VLAN 0 to HW filter on device team0
[   68.148107][   T40] audit: type=1400 audit(2000000008.559:424): avc:  denied  { create } for  pid=6762 comm="dhcpcd-run-hook" name="resolv.conf.eth4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   68.160544][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.162865][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.163567][   T40] audit: type=1400 audit(2000000008.559:425): avc:  denied  { write } for  pid=6762 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth4.link" dev="tmpfs" ino=3020 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   68.168607][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.178095][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.223750][ T6774] netlink: 28 bytes leftover after parsing attributes in process `syz.2.217'.
[   68.226877][ T6774] nbd: must specify at least one socket
[   68.275690][ T6777] xt_hashlimit: Unknown mode mask 84, kernel too old?
[   68.284772][ T6782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=6782 comm=syz.3.219
[   68.321885][ T6777] tmpfs: Bad value for 'mpol'
[   68.325060][ T6595] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.382903][ T6795] overlayfs: missing 'lowerdir'
[   68.386901][ T6795] overlayfs: missing 'lowerdir'
[   68.392220][ T6794] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   68.402271][ T6795] overlayfs: missing 'lowerdir'
[   68.412665][ T6795] overlayfs: missing 'lowerdir'
[   68.418972][ T6795] overlayfs: missing 'lowerdir'
[   68.423687][ T6803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.222'.
[   68.461943][ T6795] overlayfs: missing 'lowerdir'
[   68.464317][ T6795] overlayfs: missing 'lowerdir'
[   68.466403][ T6795] overlayfs: missing 'lowerdir'
[   68.468456][ T6795] overlayfs: missing 'lowerdir'
[   68.482504][ T6795] overlayfs: missing 'lowerdir'
[   68.486316][ T6795] overlayfs: missing 'lowerdir'
[   68.489711][ T6795] overlayfs: missing 'lowerdir'
[   68.495334][ T6795] overlayfs: missing 'lowerdir'
[   68.499093][ T6795] overlayfs: missing 'lowerdir'
[   68.504398][ T6795] overlayfs: missing 'lowerdir'
[   68.507249][ T6795] overlayfs: missing 'lowerdir'
[   68.509141][ T6795] overlayfs: missing 'lowerdir'
[   68.510977][ T6595] veth0_vlan: entered promiscuous mode
[   68.511047][ T6795] overlayfs: missing 'lowerdir'
[   68.515183][ T6795] overlayfs: missing 'lowerdir'
[   68.516723][ T6595] veth1_vlan: entered promiscuous mode
[   68.526839][ T6795] overlayfs: missing 'lowerdir'
[   68.529029][ T6795] overlayfs: missing 'lowerdir'
[   68.530925][ T6814] ata1.00: invalid cdb length 6
[   68.530953][ T6795] overlayfs: missing 'lowerdir'
[   68.534601][ T6795] overlayfs: missing 'lowerdir'
[   68.536698][ T6795] overlayfs: missing 'lowerdir'
[   68.538713][ T6795] overlayfs: missing 'lowerdir'
[   68.540623][ T6795] overlayfs: missing 'lowerdir'
[   68.543798][ T6795] overlayfs: missing 'lowerdir'
[   68.547627][ T6795] overlayfs: missing 'lowerdir'
[   68.548970][   T12] IPVS: stop unused estimator thread 0...
[   68.550180][ T6595] veth0_macvtap: entered promiscuous mode
[   68.554945][ T6795] overlayfs: missing 'lowerdir'
[   68.559123][ T6595] veth1_macvtap: entered promiscuous mode
[   68.559695][ T6795] overlayfs: missing 'lowerdir'
[   68.570715][ T6595] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.573700][ T6795] overlayfs: missing 'lowerdir'
[   68.576472][ T6595] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.576541][ T6795] overlayfs: missing 'lowerdir'
[   68.581248][ T6795] overlayfs: missing 'lowerdir'
[   68.584948][ T6795] overlayfs: missing 'lowerdir'
[   68.587237][ T6795] overlayfs: missing 'lowerdir'
[   68.589969][ T6795] overlayfs: missing 'lowerdir'
[   68.590835][ T1147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.595006][ T1147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.595232][ T6795] overlayfs: missing 'lowerdir'
[   68.597696][ T1147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.602916][ T6795] overlayfs: missing 'lowerdir'
[   68.605630][ T1147] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.613517][ T6795] overlayfs: missing 'lowerdir'
[   68.617108][ T6795] overlayfs: missing 'lowerdir'
[   68.619097][ T6795] overlayfs: missing 'lowerdir'
[   68.621066][ T6795] overlayfs: missing 'lowerdir'
[   68.625893][ T6795] overlayfs: missing 'lowerdir'
[   68.631612][ T6795] overlayfs: missing 'lowerdir'
[   68.633971][ T6795] overlayfs: missing 'lowerdir'
[   68.636517][ T6795] overlayfs: missing 'lowerdir'
[   68.638879][ T6795] overlayfs: missing 'lowerdir'
[   68.641068][ T6795] overlayfs: missing 'lowerdir'
[   68.643374][ T6795] overlayfs: missing 'lowerdir'
[   68.646430][ T6795] overlayfs: missing 'lowerdir'
[   68.648410][ T6795] overlayfs: missing 'lowerdir'
[   68.650470][ T6795] overlayfs: missing 'lowerdir'
[   68.652562][ T6795] overlayfs: missing 'lowerdir'
[   68.653121][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.657277][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.657493][ T6795] overlayfs: missing 'lowerdir'
[   68.662312][ T6795] overlayfs: missing 'lowerdir'
[   68.664196][ T6795] overlayfs: missing 'lowerdir'
[   68.666132][ T6795] overlayfs: missing 'lowerdir'
[   68.667973][ T6795] overlayfs: missing 'lowerdir'
[   68.669876][ T6795] overlayfs: missing 'lowerdir'
[   68.671527][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.671538][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.676958][ T6795] overlayfs: missing 'lowerdir'
[   68.679086][ T6795] overlayfs: missing 'lowerdir'
[   68.680987][ T6795] overlayfs: missing 'lowerdir'
[   68.683843][ T6795] overlayfs: missing 'lowerdir'
[   68.716444][ T6822] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   68.850498][ T6836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.232'.
[   69.052575][ T6850] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6850 comm=syz.4.236
[   69.301943][ T5940] Bluetooth: hci0: command tx timeout
[   69.386305][ T6867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.241'.
[   69.576144][ T6870] lo speed is unknown, defaulting to 1000
[   70.009839][ T6917] /dev/sg0: Can't lookup blockdev
[   70.121507][  T895] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   70.285992][  T895] usb 6-1: config index 0 descriptor too short (expected 45, got 36)
[   70.289374][  T895] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   70.295709][  T895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   70.300266][  T895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   70.304955][  T895] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   70.309963][  T895] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   70.314599][  T895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.324405][  T895] usb 6-1: config 0 descriptor??
[   70.327373][ T6913] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   70.570039][ T6834] Set syz1 is full, maxelem 65536 reached
[   70.759331][  T895] usbhid 6-1:0.0: can't add hid device: -71
[   70.761272][  T895] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[   70.769906][  T895] usb 6-1: USB disconnect, device number 3
[   71.098150][ T6968] netlink: 'syz.1.270': attribute type 1 has an invalid length.
[   71.133257][ T6970] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0)
[   71.139007][ T6970] bond2 (unregistering): Released all slaves
[   71.154646][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.156643][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[   71.160555][ T6968] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[   71.381476][ T5940] Bluetooth: hci0: command tx timeout
[   71.621934][ T1422] ==================================================================
[   71.624976][ T1422] BUG: KASAN: slab-use-after-free in handle_tx+0x5dc/0x630
[   71.627262][ T1422] Read of size 1 at addr ffff888035c93490 by task aoe_tx0/1422
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   71.631813][ T1422] 
[   71.632829][ T1422] CPU: 2 UID: 0 PID: 1422 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) 
[   71.632849][ T1422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   71.632859][ T1422] Call Trace:
[   71.632865][ T1422]  <TASK>
[   71.632872][ T1422]  dump_stack_lvl+0x116/0x1f0
[   71.632904][ T1422]  print_report+0xcd/0x630
[   71.632928][ T1422]  ? __virt_addr_valid+0x81/0x610
[   71.632945][ T1422]  ? __phys_addr+0xe8/0x180
[   71.632962][ T1422]  ? handle_tx+0x5dc/0x630
[   71.632983][ T1422]  kasan_report+0xe0/0x110
[   71.633006][ T1422]  ? handle_tx+0x5dc/0x630
[   71.633029][ T1422]  handle_tx+0x5dc/0x630
[   71.633053][ T1422]  dev_hard_start_xmit+0x97/0x740
[   71.633081][ T1422]  __dev_queue_xmit+0xa46/0x4490
[   71.633097][ T1422]  ? lockdep_hardirqs_on+0x7c/0x110
[   71.633115][ T1422]  ? finish_task_switch.isra.0+0x221/0xc10
[   71.633140][ T1422]  ? rcu_is_watching+0x12/0xc0
[   71.633155][ T1422]  ? __pfx___dev_queue_xmit+0x10/0x10
[   71.633180][ T1422]  ? __schedule+0x11a3/0x5de0
[   71.633198][ T1422]  ? __lock_acquire+0xb8a/0x1c90
[   71.633218][ T1422]  ? __lock_acquire+0xb8a/0x1c90
[   71.633240][ T1422]  ? do_raw_spin_lock+0x12c/0x2b0
[   71.633262][ T1422]  ? find_held_lock+0x2b/0x80
[   71.633277][ T1422]  ? skb_dequeue+0x126/0x180
[   71.633299][ T1422]  ? find_held_lock+0x2b/0x80
[   71.633313][ T1422]  ? rcu_is_watching+0x12/0xc0
[   71.633330][ T1422]  tx+0xcc/0x190
[   71.633346][ T1422]  ? __pfx_tx+0x10/0x10
[   71.633360][ T1422]  kthread+0x1e4/0x3e0
[   71.633383][ T1422]  ? find_held_lock+0x2b/0x80
[   71.633397][ T1422]  ? __pfx_kthread+0x10/0x10
[   71.633420][ T1422]  ? __pfx_default_wake_function+0x10/0x10
[   71.633445][ T1422]  ? lockdep_hardirqs_on+0x7c/0x110
[   71.633463][ T1422]  ? __kthread_parkme+0x19e/0x250
[   71.633481][ T1422]  ? __pfx_kthread+0x10/0x10
[   71.633503][ T1422]  kthread+0x3c5/0x780
[   71.633523][ T1422]  ? __pfx_kthread+0x10/0x10
[   71.633543][ T1422]  ? rcu_is_watching+0x12/0xc0
[   71.633557][ T1422]  ? __pfx_kthread+0x10/0x10
[   71.633577][ T1422]  ret_from_fork+0x675/0x7d0
[   71.633596][ T1422]  ? __pfx_kthread+0x10/0x10
[   71.633621][ T1422]  ret_from_fork_asm+0x1a/0x30
[   71.633645][ T1422]  </TASK>
[   71.633651][ T1422] 
[   71.709926][ T1422] Allocated by task 6945:
[   71.711712][ T1422]  kasan_save_stack+0x33/0x60
[   71.713593][ T1422]  kasan_save_track+0x14/0x30
[   71.715085][ T1422]  __kasan_kmalloc+0xaa/0xb0
[   71.716709][ T1422]  alloc_tty_struct+0x96/0x8c0
[   71.718688][ T1422]  tty_init_dev.part.0+0x1e/0x500
[   71.720473][ T1422]  tty_open+0xa4f/0xf90
[   71.721785][ T1422]  chrdev_open+0x234/0x6a0
[   71.723529][ T1422]  do_dentry_open+0x982/0x1530
[   71.725477][ T1422]  vfs_open+0x82/0x3f0
[   71.726892][ T1422]  path_openat+0x1de4/0x2cb0
[   71.728369][ T1422]  do_filp_open+0x20b/0x470
[   71.730312][ T1422]  do_sys_openat2+0x11b/0x1d0
[   71.732171][ T1422]  __x64_sys_openat+0x174/0x210
[   71.733699][ T1422]  do_syscall_64+0xcd/0xfa0
[   71.735375][ T1422]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.737760][ T1422] 
[   71.738621][ T1422] Freed by task 5930:
[   71.739878][ T1422]  kasan_save_stack+0x33/0x60
[   71.741626][ T1422]  kasan_save_track+0x14/0x30
[   71.743588][ T1422]  __kasan_save_free_info+0x3b/0x60
[   71.745374][ T1422]  __kasan_slab_free+0x5f/0x80
[   71.746991][ T1422]  kfree+0x2b8/0x6d0
[   71.748591][ T1422]  process_one_work+0x9cf/0x1b70
[   71.750548][ T1422]  worker_thread+0x6c8/0xf10
[   71.752012][ T1422]  kthread+0x3c5/0x780
[   71.753496][ T1422]  ret_from_fork+0x675/0x7d0
[   71.755389][ T1422]  ret_from_fork_asm+0x1a/0x30
[   71.757149][ T1422] 
[   71.757938][ T1422] Last potentially related work creation:
[   71.759931][ T1422]  kasan_save_stack+0x33/0x60
[   71.761818][ T1422]  kasan_record_aux_stack+0xa7/0xc0
[   71.763707][ T1422]  insert_work+0x36/0x230
[   71.765066][ T1422]  __queue_work+0x97e/0x1160
[   71.766881][ T1422]  queue_work_on+0x1a4/0x1f0
[   71.768751][ T1422]  release_tty+0x4de/0x5d0
[   71.770334][ T1422]  tty_release_struct+0xb7/0xe0
[   71.771850][ T1422]  tty_release+0xe2d/0x1430
[   71.773669][ T1422]  __fput+0x402/0xb70
[   71.775287][ T1422]  task_work_run+0x150/0x240
[   71.776854][ T1422]  exit_to_user_mode_loop+0xec/0x130
[   71.778582][ T1422]  do_syscall_64+0x426/0xfa0
[   71.780473][ T1422]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.782665][ T1422] 
[   71.783427][ T1422] The buggy address belongs to the object at ffff888035c93000
[   71.783427][ T1422]  which belongs to the cache kmalloc-cg-2k of size 2048
[   71.788640][ T1422] The buggy address is located 1168 bytes inside of
[   71.788640][ T1422]  freed 2048-byte region [ffff888035c93000, ffff888035c93800)
[   71.793468][ T1422] 
[   71.794251][ T1422] The buggy address belongs to the physical page:
[   71.796455][ T1422] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35c90
[   71.799488][ T1422] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   71.802569][ T1422] memcg:ffff888032fae381
[   71.803952][ T1422] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   71.806769][ T1422] page_type: f5(slab)
[   71.808165][ T1422] raw: 00fff00000000040 ffff88801b44c140 0000000000000000 dead000000000001
[   71.811103][ T1422] raw: 0000000000000000 0000000080080008 00000000f5000000 ffff888032fae381
[   71.814006][ T1422] head: 00fff00000000040 ffff88801b44c140 0000000000000000 dead000000000001
[   71.817184][ T1422] head: 0000000000000000 0000000080080008 00000000f5000000 ffff888032fae381
[   71.820007][ T1422] head: 00fff00000000003 ffffea0000d72401 00000000ffffffff 00000000ffffffff
[   71.823036][ T1422] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   71.826204][ T1422] page dumped because: kasan: bad access detected
[   71.828205][ T1422] page_owner tracks the page as allocated
[   71.830341][ T1422] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5928, tgid 5928 (syz-executor), ts 52270687003, free_ts 52209575877
[   71.837724][ T1422]  post_alloc_hook+0x1c0/0x230
[   71.839248][ T1422]  get_page_from_freelist+0x10a3/0x3a30
[   71.841452][ T1422]  __alloc_frozen_pages_noprof+0x25f/0x2470
[   71.843683][ T1422]  alloc_pages_mpol+0x1fb/0x550
[   71.845222][ T1422]  new_slab+0x24a/0x360
[   71.846836][ T1422]  ___slab_alloc+0xdc4/0x1ae0
[   71.848747][ T1422]  __slab_alloc.constprop.0+0x63/0x110
[   71.850554][ T1422]  __kmalloc_noprof+0x501/0x880
[   71.852236][ T1422]  __register_sysctl_table+0xb3/0x1900
[   71.854456][ T1422]  __devinet_sysctl_register+0x1b9/0x360
[   71.856308][ T1422]  devinet_sysctl_register+0x17b/0x200
[   71.858157][ T1422]  inetdev_init+0x2b8/0x5a0
[   71.860054][ T1422]  inetdev_event+0xc5f/0x18a0
[   71.861747][ T1422]  notifier_call_chain+0xbc/0x410
[   71.863333][ T1422]  call_netdevice_notifiers_info+0xbe/0x140
[   71.865660][ T1422]  register_netdevice+0x182e/0x2270
[   71.867748][ T1422] page last free pid 5341 tgid 5341 stack trace:
[   71.869741][ T1422]  __free_frozen_pages+0x7df/0x1160
[   71.871761][ T1422]  __put_partials+0x130/0x170
[   71.873680][ T1422]  qlist_free_all+0x4d/0x120
[   71.875228][ T1422]  kasan_quarantine_reduce+0x195/0x1e0
[   71.877065][ T1422]  __kasan_slab_alloc+0x69/0x90
[   71.879055][ T1422]  kmem_cache_alloc_node_noprof+0x28a/0x770
[   71.881152][ T1422]  __alloc_skb+0x2b2/0x380
[   71.882572][ T1422]  netlink_alloc_large_skb+0x69/0x140
[   71.884737][ T1422]  netlink_sendmsg+0x698/0xdd0
[   71.886585][ T1422]  ____sys_sendmsg+0xa98/0xc70
[   71.888094][ T1422]  ___sys_sendmsg+0x134/0x1d0
[   71.889850][ T1422]  __sys_sendmsg+0x16d/0x220
[   71.891745][ T1422]  do_syscall_64+0xcd/0xfa0
[   71.893599][ T1422]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.896000][ T1422] 
[   71.896994][ T1422] Memory state around the buggy address:
[   71.899110][ T1422]  ffff888035c93380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   71.901829][ T1422]  ffff888035c93400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   71.904982][ T1422] >ffff888035c93480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   71.907637][ T1422]                          ^
[   71.909514][ T1422]  ffff888035c93500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   71.912310][ T1422]  ffff888035c93580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   71.915223][ T1422] ==================================================================
[   71.918336][ T1422] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   71.920816][ T1422] CPU: 2 UID: 0 PID: 1422 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) 
[   71.924349][ T1422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   71.928103][ T1422] Call Trace:
[   71.929460][ T1422]  <TASK>
[   71.930425][ T1422]  dump_stack_lvl+0x3d/0x1f0
[   71.932159][ T1422]  vpanic+0x640/0x6f0
[   71.933692][ T1422]  panic+0xca/0xd0
[   71.934898][ T1422]  ? __pfx_panic+0x10/0x10
[   71.936480][ T1422]  ? check_panic_on_warn+0x1f/0xb0
[   71.938485][ T1422]  check_panic_on_warn+0xab/0xb0
[   71.940039][ T1422]  end_report+0x107/0x170
[   71.941680][ T1422]  kasan_report+0xee/0x110
[   71.943379][ T1422]  ? handle_tx+0x5dc/0x630
[   71.944784][ T1422]  handle_tx+0x5dc/0x630
[   71.946397][ T1422]  dev_hard_start_xmit+0x97/0x740
[   71.948258][ T1422]  __dev_queue_xmit+0xa46/0x4490
[   71.949808][ T1422]  ? lockdep_hardirqs_on+0x7c/0x110
[   71.951798][ T1422]  ? finish_task_switch.isra.0+0x221/0xc10
[   71.953752][ T1422]  ? rcu_is_watching+0x12/0xc0
[   71.955356][ T1422]  ? __pfx___dev_queue_xmit+0x10/0x10
[   71.957416][ T1422]  ? __schedule+0x11a3/0x5de0
[   71.958918][ T1422]  ? __lock_acquire+0xb8a/0x1c90
[   71.960866][ T1422]  ? __lock_acquire+0xb8a/0x1c90
[   71.962672][ T1422]  ? do_raw_spin_lock+0x12c/0x2b0
[   71.964225][ T1422]  ? find_held_lock+0x2b/0x80
[   71.966089][ T1422]  ? skb_dequeue+0x126/0x180
[   71.967754][ T1422]  ? find_held_lock+0x2b/0x80
[   71.969211][ T1422]  ? rcu_is_watching+0x12/0xc0
[   71.971095][ T1422]  tx+0xcc/0x190
[   71.972378][ T1422]  ? __pfx_tx+0x10/0x10
[   71.973671][ T1422]  kthread+0x1e4/0x3e0
[   71.975211][ T1422]  ? find_held_lock+0x2b/0x80
[   71.977057][ T1422]  ? __pfx_kthread+0x10/0x10
[   71.978547][ T1422]  ? __pfx_default_wake_function+0x10/0x10
[   71.980856][ T1422]  ? lockdep_hardirqs_on+0x7c/0x110
[   71.982630][ T1422]  ? __kthread_parkme+0x19e/0x250
[   71.984287][ T1422]  ? __pfx_kthread+0x10/0x10
[   71.986185][ T1422]  kthread+0x3c5/0x780
[   71.987525][ T1422]  ? __pfx_kthread+0x10/0x10
[   71.988984][ T1422]  ? rcu_is_watching+0x12/0xc0
[   71.990958][ T1422]  ? __pfx_kthread+0x10/0x10
[   71.992464][ T1422]  ret_from_fork+0x675/0x7d0
[   71.994021][ T1422]  ? __pfx_kthread+0x10/0x10
[   71.995921][ T1422]  ret_from_fork_asm+0x1a/0x30
[   71.997436][ T1422]  </TASK>
[   71.999131][ T1422] Kernel Offset: disabled
[   72.000823][ T1422] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:23:03  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000002 RDX=ffff88801d6b4900
RSI=ffffffff816b7141 RDI=ffffffff8bf1e2c0 RBP=ffff88802a006940 RSP=ffffc900000c7698
R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff90832dd7 R11=0000000000000001
R12=0000000000000003 R13=0000000000000003 R14=ffff88806a43b2c0 R15=ffffed1005400d28
RIP=ffffffff8b660d5f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d69d9000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000559fa4858300 CR3=00000000592de000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f7612fbe
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f7612fcb
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f7612fc5
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f7612fd9
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f761305f
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f761313d
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0031130862fcffff ff78900002000000 0000000000000000 02fc010000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000020001 0000000000000004 0008000f0010000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ef48309199f0bf5e 11ae968213093560 cffad78f96010255 1e1fc2ac1f000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 16d1504f80b920a5 96bd8f19678ff06d ded697c7c77e2b11 8c14a20ce2c627ef
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9a666c1616153733 66c42246fc1bffa0 7978ef48309199f0 bf5e11ae96821309
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3560cffad78f9601 02551e1fc2ac1f00 0000000000000000 0000000000000002
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001000000000000 0000000000012000 33090031130862fc ffffff7890000200
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff9124266a RDX=0000000000000003
RSI=0000000000000000 RDI=ffffffff909c7938 RBP=ffffc90003a27128 RSP=ffffc90003a27070
R8 =ffffffff91242670 R9 =0000000000000000 R10=0000000000000000 R11=0000000000010a8c
R12=ffffc90003a27130 R13=ffffc90003a270e0 R14=ffffc90003a27115 R15=ffffffff9124266f
RIP=ffffffff816c4a21 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6ad9000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f51ee917d60 CR3=0000000032ed8000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51eddb76c3 00007f51eddb76c3
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2f3a6d40 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556a36f63d 000055556a36ee40
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556a36b75f 000055556a36a730
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff04408281a01000 0010000fffffffff ffff040108000c01 698e078004048004
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010010000fffffff ffffff04408281a0 10000010000fffff ffffffff04010800
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c01698e07800404 8004010800060108 ea00020007280800 0780030010000fff
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff040108 00060168e0000200 070880040fffffff ffffff0401080006
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0108ea0002000700 0800088003001000 0c80040100001208 06060168e0000200
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85308555 RDI=ffffffff9ae077e0 RBP=ffffffff9ae077a0 RSP=ffffc90006ecf448
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552
R12=0000000000000000 R13=0000000000000034 R14=ffffffff9ae077a0 R15=ffffffff853084f0
RIP=ffffffff8530857f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6bd9000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fff60142f68 CR3=00000000592de000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f7612fbe
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f7612fcb
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f7612fc5
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f7612fd9
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f761305f
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f761313d
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0031130862fcffff ff78900002000000 0000000000000000 02fc010000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000020001 0000000000000004 0000000b000c000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ef48309199f0bf5e 11ae968213093560 cffad78f96010255 1e1fc2ac1f000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 16d1504f80b920a5 96bd8f19678ff06d ded697c7c77e2b11 8c14a20ce2c627ef
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9a666c1616153733 66c42246fc1bffa0 7978ef48309199f0 bf5e11ae96821309
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3560cffad78f9601 02551e1fc2ac1f00 0000000000000000 0000000000000002
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001000000000000 0000000000012000 33090031130862fc ffffff7890000200
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=dffffc0000000000 RBX=ffff8880324f07d0 RCX=ffffffff822fe082 RDX=0000000000000000
RSI=0000000000000004 RDI=ffff8880324f07ec RBP=1ffff1100649e0fd RSP=ffffc90003b2f050
R8 =0000000000000000 R9 =1ffff1100649e0fd R10=ffff8880324f07ef R11=0000000000000001
R12=1ffff92000765e14 R13=ffff8880324f07ec R14=dffffc0000000000 R15=0000000000000003
RIP=ffffffff8225b862 RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557d53d500 ffffffff 00c00000
GS =0000 ffff8880d6cd9000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000559fa486eda8 CR3=0000000050564000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce2e66c70 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f02e3a12fbe
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f02e3a12fcb
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f02e3a12fc5
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f02e3a12fd9
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f02e3a1305f
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f02e3a1313d
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000