last executing test programs:

1m36.29521192s ago: executing program 2 (id=307):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000540)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)='~', 0x1}], 0x1}, 0x48000)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4c28, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)='i', 0x1}], 0x1}, 0x805)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000})
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8040000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000))

1m35.380523798s ago: executing program 2 (id=331):
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, &(0x7f0000001f80)=""/226, 0x1b, 0xe2, 0x2, 0x0, 0x0, @void, @value}, 0x28)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="660f3882390f30660f3830dabaf80c66b80205828f66efbafc0cb80078ef26f0300f83f5330f01c3673e660f3a20c90066b85ef200000f23d00f21f86635200000040f23f8baf80c66b85c21bd8866efbafc0c66ed", 0x55}], 0x1, 0x677abab1f05985e5, &(0x7f0000000340), 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x20, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001)

1m35.38005746s ago: executing program 2 (id=333):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32, @ANYBLOB="00000000000000b702000014000000b7030000000000018500000083080000bf092b06050000000000550901000000000094a3ec4af26f94950000000000000000b7000000f8000000000000000000000000000000bf9100000000581368cb00000000000085000000010000000000000013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = semget(0x2, 0x4, 0x4)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10)
semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000300)=""/79)
setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0)
close(r1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440), r3)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000001240)={@host})
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r6, 0x7af, &(0x7f0000000040)={@host})
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, &(0x7f0000000200)={@hyper})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)={0x44, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x5a9}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1ff}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4001)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r8=>0x0})
bind$can_raw(r7, &(0x7f00000005c0), 0x10)
read(r7, &(0x7f00000027c0)=""/4073, 0xfe9)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4)
ioctl$SIOCGSTAMP(r7, 0x8906, 0x0)
sendmsg$can_raw(r7, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r8}, 0x10, &(0x7f0000000200)={&(0x7f0000000280)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x80)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

1m35.249855643s ago: executing program 2 (id=335):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x4011, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0xd0)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100))
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r2}, 0x10)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0)
preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x90}]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r7, &(0x7f0000000340)={[&(0x7f0000000140)='/dev/kvm\x00']}, 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00')

1m35.130654402s ago: executing program 2 (id=339):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000040)=[@request_death={0x4008630a, 0x0, 0xffffff7f00000000}], 0x0, 0x1000000000000, 0x0})

1m35.060670454s ago: executing program 2 (id=341):
socket$netlink(0x10, 0x3, 0x4)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r5}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r4}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff290000003b0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r8, 0x0)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r9, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r10 = accept(r8, 0x0, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r11, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r10}, 0x47)
shutdown(r10, 0x0)
recvmsg$can_bcm(r10, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40)
writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="390000002a0003470fbb65e1c3e4ffff06006000160000005600000025000000190013000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="0fc3"])
ioctl$KVM_RUN(r1, 0xae80, 0x0)

1m35.019760888s ago: executing program 32 (id=341):
socket$netlink(0x10, 0x3, 0x4)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r5}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r4}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff290000003b0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r8, 0x0)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r9, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r10 = accept(r8, 0x0, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r11, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r10}, 0x47)
shutdown(r10, 0x0)
recvmsg$can_bcm(r10, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40)
writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="390000002a0003470fbb65e1c3e4ffff06006000160000005600000025000000190013000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="0fc3"])
ioctl$KVM_RUN(r1, 0xae80, 0x0)

41.418546299s ago: executing program 4 (id=1129):
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x5, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x5}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x63, 0x0, 0x53}, @typedef={0x10, 0x0, 0x0, 0x8, 0x5}, @typedef={0x9, 0x0, 0x0, 0x8, 0x5}, @float={0x7, 0x0, 0x0, 0x10, 0x4}, @struct={0x9, 0x2, 0x0, 0x4, 0x1, 0x8, [{0x1, 0x1, 0x6}, {0x10, 0x4, 0x7}]}, @float={0x8, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x2, 0x1}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x36, 0x0, 0xc, 0x2}]}, {0x0, [0x5f, 0x5f, 0x0]}}, &(0x7f00000001c0)=""/57, 0xb1, 0x39, 0x1, 0x4, 0x0, @void, @value}, 0x28)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r5, 0x1, 0x0, @void}, 0x10) (async)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000780)={&(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000007c0)={'pimreg\x00'}) (async)
move_mount(r6, &(0x7f00000000c0)='./mnt\x00', r6, &(0x7f0000000100)='./mnt\x00', 0x271) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1c, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @alu={0x4, 0x1, 0x0, 0x8, 0x9, 0x10, 0xffffffffffffffff}, @alu={0x4, 0x0, 0x4, 0x5, 0x7, 0x30, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x90b, 0xf8, &(0x7f0000000340)=""/248, 0x41100, 0x7f, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000540)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000580)=[r1, r5, r1, r1, r1, r1, r1, r1, r6, r1], &(0x7f00000005c0)=[{0x3, 0x2, 0xe, 0x2}, {0x2, 0x1, 0x2, 0xc}, {0x2, 0x3, 0x7, 0xb}, {0x3, 0x2, 0x9, 0xd}, {0x0, 0x5, 0xf, 0xa}, {0x0, 0x3, 0x9, 0x5}, {0x1, 0x4, 0xc, 0x4}, {0x2, 0x2, 0x5, 0x9}, {0x2, 0x2, 0x8, 0x6}, {0x2, 0x4, 0x0, 0x2}], 0x10, 0xb, @void, @value}, 0x94) (async)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x8001100) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r9, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x40)

34.186012327s ago: executing program 4 (id=1129):
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x5, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x5}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x63, 0x0, 0x53}, @typedef={0x10, 0x0, 0x0, 0x8, 0x5}, @typedef={0x9, 0x0, 0x0, 0x8, 0x5}, @float={0x7, 0x0, 0x0, 0x10, 0x4}, @struct={0x9, 0x2, 0x0, 0x4, 0x1, 0x8, [{0x1, 0x1, 0x6}, {0x10, 0x4, 0x7}]}, @float={0x8, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x2, 0x1}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x36, 0x0, 0xc, 0x2}]}, {0x0, [0x5f, 0x5f, 0x0]}}, &(0x7f00000001c0)=""/57, 0xb1, 0x39, 0x1, 0x4, 0x0, @void, @value}, 0x28)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r5, 0x1, 0x0, @void}, 0x10) (async)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000780)={&(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000007c0)={'pimreg\x00'}) (async)
move_mount(r6, &(0x7f00000000c0)='./mnt\x00', r6, &(0x7f0000000100)='./mnt\x00', 0x271) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1c, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @alu={0x4, 0x1, 0x0, 0x8, 0x9, 0x10, 0xffffffffffffffff}, @alu={0x4, 0x0, 0x4, 0x5, 0x7, 0x30, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x90b, 0xf8, &(0x7f0000000340)=""/248, 0x41100, 0x7f, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000540)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000580)=[r1, r5, r1, r1, r1, r1, r1, r1, r6, r1], &(0x7f00000005c0)=[{0x3, 0x2, 0xe, 0x2}, {0x2, 0x1, 0x2, 0xc}, {0x2, 0x3, 0x7, 0xb}, {0x3, 0x2, 0x9, 0xd}, {0x0, 0x5, 0xf, 0xa}, {0x0, 0x3, 0x9, 0x5}, {0x1, 0x4, 0xc, 0x4}, {0x2, 0x2, 0x5, 0x9}, {0x2, 0x2, 0x8, 0x6}, {0x2, 0x4, 0x0, 0x2}], 0x10, 0xb, @void, @value}, 0x94) (async)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x8001100) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r9, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x40)

26.55903495s ago: executing program 4 (id=1129):
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x5, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x5}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x63, 0x0, 0x53}, @typedef={0x10, 0x0, 0x0, 0x8, 0x5}, @typedef={0x9, 0x0, 0x0, 0x8, 0x5}, @float={0x7, 0x0, 0x0, 0x10, 0x4}, @struct={0x9, 0x2, 0x0, 0x4, 0x1, 0x8, [{0x1, 0x1, 0x6}, {0x10, 0x4, 0x7}]}, @float={0x8, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x2, 0x1}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x36, 0x0, 0xc, 0x2}]}, {0x0, [0x5f, 0x5f, 0x0]}}, &(0x7f00000001c0)=""/57, 0xb1, 0x39, 0x1, 0x4, 0x0, @void, @value}, 0x28)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r5, 0x1, 0x0, @void}, 0x10) (async)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000780)={&(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000007c0)={'pimreg\x00'}) (async)
move_mount(r6, &(0x7f00000000c0)='./mnt\x00', r6, &(0x7f0000000100)='./mnt\x00', 0x271) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1c, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @alu={0x4, 0x1, 0x0, 0x8, 0x9, 0x10, 0xffffffffffffffff}, @alu={0x4, 0x0, 0x4, 0x5, 0x7, 0x30, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x90b, 0xf8, &(0x7f0000000340)=""/248, 0x41100, 0x7f, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000540)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000580)=[r1, r5, r1, r1, r1, r1, r1, r1, r6, r1], &(0x7f00000005c0)=[{0x3, 0x2, 0xe, 0x2}, {0x2, 0x1, 0x2, 0xc}, {0x2, 0x3, 0x7, 0xb}, {0x3, 0x2, 0x9, 0xd}, {0x0, 0x5, 0xf, 0xa}, {0x0, 0x3, 0x9, 0x5}, {0x1, 0x4, 0xc, 0x4}, {0x2, 0x2, 0x5, 0x9}, {0x2, 0x2, 0x8, 0x6}, {0x2, 0x4, 0x0, 0x2}], 0x10, 0xb, @void, @value}, 0x94) (async)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x8001100) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r9, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x40)

19.61877719s ago: executing program 4 (id=1129):
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x5, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x5}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x63, 0x0, 0x53}, @typedef={0x10, 0x0, 0x0, 0x8, 0x5}, @typedef={0x9, 0x0, 0x0, 0x8, 0x5}, @float={0x7, 0x0, 0x0, 0x10, 0x4}, @struct={0x9, 0x2, 0x0, 0x4, 0x1, 0x8, [{0x1, 0x1, 0x6}, {0x10, 0x4, 0x7}]}, @float={0x8, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x2, 0x1}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x36, 0x0, 0xc, 0x2}]}, {0x0, [0x5f, 0x5f, 0x0]}}, &(0x7f00000001c0)=""/57, 0xb1, 0x39, 0x1, 0x4, 0x0, @void, @value}, 0x28)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r5, 0x1, 0x0, @void}, 0x10) (async)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000780)={&(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000007c0)={'pimreg\x00'}) (async)
move_mount(r6, &(0x7f00000000c0)='./mnt\x00', r6, &(0x7f0000000100)='./mnt\x00', 0x271) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1c, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @alu={0x4, 0x1, 0x0, 0x8, 0x9, 0x10, 0xffffffffffffffff}, @alu={0x4, 0x0, 0x4, 0x5, 0x7, 0x30, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x90b, 0xf8, &(0x7f0000000340)=""/248, 0x41100, 0x7f, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000540)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000580)=[r1, r5, r1, r1, r1, r1, r1, r1, r6, r1], &(0x7f00000005c0)=[{0x3, 0x2, 0xe, 0x2}, {0x2, 0x1, 0x2, 0xc}, {0x2, 0x3, 0x7, 0xb}, {0x3, 0x2, 0x9, 0xd}, {0x0, 0x5, 0xf, 0xa}, {0x0, 0x3, 0x9, 0x5}, {0x1, 0x4, 0xc, 0x4}, {0x2, 0x2, 0x5, 0x9}, {0x2, 0x2, 0x8, 0x6}, {0x2, 0x4, 0x0, 0x2}], 0x10, 0xb, @void, @value}, 0x94) (async)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x8001100) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r9, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x40)

12.447421945s ago: executing program 4 (id=1129):
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x5, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x5}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x63, 0x0, 0x53}, @typedef={0x10, 0x0, 0x0, 0x8, 0x5}, @typedef={0x9, 0x0, 0x0, 0x8, 0x5}, @float={0x7, 0x0, 0x0, 0x10, 0x4}, @struct={0x9, 0x2, 0x0, 0x4, 0x1, 0x8, [{0x1, 0x1, 0x6}, {0x10, 0x4, 0x7}]}, @float={0x8, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x2, 0x1}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x36, 0x0, 0xc, 0x2}]}, {0x0, [0x5f, 0x5f, 0x0]}}, &(0x7f00000001c0)=""/57, 0xb1, 0x39, 0x1, 0x4, 0x0, @void, @value}, 0x28)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r5, 0x1, 0x0, @void}, 0x10) (async)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000780)={&(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000007c0)={'pimreg\x00'}) (async)
move_mount(r6, &(0x7f00000000c0)='./mnt\x00', r6, &(0x7f0000000100)='./mnt\x00', 0x271) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1c, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @alu={0x4, 0x1, 0x0, 0x8, 0x9, 0x10, 0xffffffffffffffff}, @alu={0x4, 0x0, 0x4, 0x5, 0x7, 0x30, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x90b, 0xf8, &(0x7f0000000340)=""/248, 0x41100, 0x7f, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000540)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000580)=[r1, r5, r1, r1, r1, r1, r1, r1, r6, r1], &(0x7f00000005c0)=[{0x3, 0x2, 0xe, 0x2}, {0x2, 0x1, 0x2, 0xc}, {0x2, 0x3, 0x7, 0xb}, {0x3, 0x2, 0x9, 0xd}, {0x0, 0x5, 0xf, 0xa}, {0x0, 0x3, 0x9, 0x5}, {0x1, 0x4, 0xc, 0x4}, {0x2, 0x2, 0x5, 0x9}, {0x2, 0x2, 0x8, 0x6}, {0x2, 0x4, 0x0, 0x2}], 0x10, 0xb, @void, @value}, 0x94) (async)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x8001100) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r9, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x40)

5.185163357s ago: executing program 4 (id=1129):
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x5, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x5}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x63, 0x0, 0x53}, @typedef={0x10, 0x0, 0x0, 0x8, 0x5}, @typedef={0x9, 0x0, 0x0, 0x8, 0x5}, @float={0x7, 0x0, 0x0, 0x10, 0x4}, @struct={0x9, 0x2, 0x0, 0x4, 0x1, 0x8, [{0x1, 0x1, 0x6}, {0x10, 0x4, 0x7}]}, @float={0x8, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x2, 0x1}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x36, 0x0, 0xc, 0x2}]}, {0x0, [0x5f, 0x5f, 0x0]}}, &(0x7f00000001c0)=""/57, 0xb1, 0x39, 0x1, 0x4, 0x0, @void, @value}, 0x28)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r5, 0x1, 0x0, @void}, 0x10) (async)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000780)={&(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000007c0)={'pimreg\x00'}) (async)
move_mount(r6, &(0x7f00000000c0)='./mnt\x00', r6, &(0x7f0000000100)='./mnt\x00', 0x271) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1c, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @alu={0x4, 0x1, 0x0, 0x8, 0x9, 0x10, 0xffffffffffffffff}, @alu={0x4, 0x0, 0x4, 0x5, 0x7, 0x30, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x90b, 0xf8, &(0x7f0000000340)=""/248, 0x41100, 0x7f, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000540)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000580)=[r1, r5, r1, r1, r1, r1, r1, r1, r6, r1], &(0x7f00000005c0)=[{0x3, 0x2, 0xe, 0x2}, {0x2, 0x1, 0x2, 0xc}, {0x2, 0x3, 0x7, 0xb}, {0x3, 0x2, 0x9, 0xd}, {0x0, 0x5, 0xf, 0xa}, {0x0, 0x3, 0x9, 0x5}, {0x1, 0x4, 0xc, 0x4}, {0x2, 0x2, 0x5, 0x9}, {0x2, 0x2, 0x8, 0x6}, {0x2, 0x4, 0x0, 0x2}], 0x10, 0xb, @void, @value}, 0x94) (async)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x8001100) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r9, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x40)

4.040036683s ago: executing program 1 (id=1564):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd"}], 0x1}}], 0x1, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r2=>0x0}, &(0x7f0000000080)=0x8)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000900)={<r4=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f00000001c0)={r4, r4, 0x1, 0x5, 0x2})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f0000000880)={&(0x7f00000009c0)=[r4], 0x0, 0x1})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r6, 0x4068aea3, &(0x7f0000000240)={0xcc, 0x0, 0x1})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x1}, 0x8)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f00000000c0)=0x7d)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x7e)

3.089822964s ago: executing program 1 (id=1575):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000004c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x4, @remote, 0x23}, {0xa, 0x1, 0x0, @private1, 0x4000}, r5, 0xfffffffd}}, 0x48)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x0, 0x1}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x78, 0x0, &(0x7f0000002b00)="5989be9b5be80dc8b4d5be5d0f08b14af16e3e7e15095a61675c4f23b5db077799d67feda8876ad6a1120f7cdd854d4df22984fdce4b965d444c30b3a1a4a689b3d78634ea40c6e73c4a3334d40ef9a672610166dcd58511cc02826919b9d4c37b517f5656125b44ee0c6641ae5551825a812b3e4fd3a2d0"})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r6, 0x0)
syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0x4c, @broadcast, 0xfffc, "5de98aee83331412"}]}}}}}}}}, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-generic)\x00'}, 0x7d)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73d", 0x18)
r8 = accept4(r2, 0x0, 0x0, 0x1000)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[], 0x3c}}, 0x0)
recvmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/189, 0xbd}], 0x1}, 0x2042)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xee, 0x3b, 0x25, 0x20, 0x65a, 0x9, 0x6065, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x8, 0x40, 0x0, [{{0x9, 0x4, 0x8, 0x1, 0x1, 0xb0, 0xd7, 0x42, 0x2, [], [{{0x9, 0x5, 0x8a, 0x2, 0x200, 0x80, 0x1, 0x6}}]}}]}}]}}, 0x0)

2.769439489s ago: executing program 0 (id=1577):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x51)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d00)=ANY=[@ANYBLOB="58020000", @ANYRES16=r1, @ANYBLOB="010102000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x258}}, 0x0)

2.699896732s ago: executing program 0 (id=1578):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={<r1=>0x0, @rand_addr, @empty}, &(0x7f0000000340)=0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10)
r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="a5", 0x1, 0xfffffffffffffffb)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000080)="010000000037a788a11d180000009282d9c66923c63a4541062101a59ea9cb0b36929302", 0x24, r4)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0xf6)
syz_emit_ethernet(0x66, &(0x7f0000001240)=ANY=[@ANYRES32=r5, @ANYBLOB="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", @ANYRESDEC=r1], 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000e40)=@nat={'nat\x00', 0x62, 0x5, 0x380, 0x240, 0x170, 0xffffffff, 0x240, 0xa8, 0x2e8, 0x2e8, 0xffffffff, 0x2e8, 0x2e8, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x0, 0x2, 0x3}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @empty, @port, @gre_key}}}}, {{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x19, @loopback, @multicast2, @gre_key=0x4, @port=0x4e23}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00', {}, {}, 0xcd3be794a2cc8690}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x6, 0x1, 0x1, 0x2], 0x0, 0x4}, {0x4, [0x3, 0x7, 0x6, 0x1, 0x8, 0x4], 0x6, 0x5}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'vcan0\x00', {}, {}, 0x8c59ad957e2c5137}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r7}, 0x10)
r9 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_S_MODE(r9, 0x40046109, &(0x7f0000000140)=0x11)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r5, &(0x7f0000000440)="ff21735e3bfd", &(0x7f0000002280)=""/4096}, 0x20)
ioctl$CEC_S_MODE(r9, 0x40046109, &(0x7f0000000040)=0xf0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x8000000000000000}, 0x18)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)

2.694305986s ago: executing program 0 (id=1579):
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x20000000]})
r1 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0)
ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0)

2.627923718s ago: executing program 0 (id=1580):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x5}, [@CGW_CS_XOR={0x8, 0x5, {0x3, 0x0, 0x0, 0x7}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "ee1990a380ecab90"}, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60)
r4 = io_uring_setup(0x30d3, &(0x7f00000000c0))
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x81}]})
close_range(r4, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$int_in(r6, 0x5452, &(0x7f0000000100)=0x2e9a3c7c)
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000040)="a103e83dc9a927fc78a94a0eba3f13bd1cc7ce3fd56628c0c907e29656e6c0a1cc3de527dfb69b7ffc26e08bdf67413f89fc23337421e67945e67aca80f71cad3e70ae35801977d2fd12f8df6d5450409b5e92c854ab5b0f59cc6945fbe09ce5c53b5c0d2194d9d48e21b61f6eb043870c002fde2c1319c678c055b9aa65b4b922a462f2401df666627df98198c3423d7adf39253b1ad8ff")

2.418998275s ago: executing program 0 (id=1581):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r2, 0x1, 0x70bd28, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8)

2.029089857s ago: executing program 3 (id=1586):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async, rerun: 32)
mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) (rerun: 32)
syz_emit_ethernet(0x66, &(0x7f0000001a40)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0xa0, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) (async, rerun: 64)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) (rerun: 64)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0)
shutdown(r1, 0x0) (async, rerun: 64)
sched_rr_get_interval(0x0, &(0x7f00000000c0)) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0)
syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYRES16=r1], 0x0) (async)
getresuid(&(0x7f0000000240), &(0x7f0000000280)=<r4=>0x0, &(0x7f00000002c0)) (async, rerun: 64)
r5 = socket(0x10, 0x3, 0x0) (rerun: 64)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r6)
lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x100081, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xc}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x5}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1800}}], [{@appraise_type}, {@seclabel}, {@euid_gt}, {@fowner_eq={'fowner', 0x3d, r7}}, {@flag='mand'}, {@smackfsfloor}, {@measure}, {@dont_hash}, {@uid_gt={'uid>', 0xee00}}]}})
sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="377c9c932abe4f67c5012eb45db0a411822abd15b8e3d1dad9c7cec333cb5f9054c25c627a8e8b4f4ff1f78415c401d188bfd57d45ad3e28f853817f3e40fbef68db3cbd666a4405181bc9fffbb4081310cf98a8f170151cac9cdb313d9fe93d1dd699ea8bd8747f9a054136155d4d62b9363167fad832cf39bd4585d76300d4501d42f118d2d06bf041e4ffdd57f9e4829312490ea5491c1d9d8c743304a97863d63a0dc746e9cb9b6afa083788ce6ec832d43391e01e5a0f9b0f4d6190ab0cd4b1e1498132ae2df648af90f79f269aa455bf8878373da6924cdee3805b6042", 0xe0}], 0x1}}], 0x1, 0x4) (async)
mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000002000/0x2000)=nil)

1.850150688s ago: executing program 1 (id=1587):
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x47, 0x0, 0x20000000) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f00000000c0)={[{@dyn}]}) (async)
mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]})

1.849130836s ago: executing program 1 (id=1588):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x11, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x4}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) (async, rerun: 32)
r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x60, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x60}}, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0})
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) (async)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=r4, @ANYBLOB="310300000000000002140b00000008000300", @ANYRES32=r4], 0x1c}}, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) (rerun: 64)
r6 = dup(r2)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x4, 0x100000, 0x1000, &(0x7f000086d000/0x1000)=nil}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0x6, 0x0, &(0x7f0000000040)="76389e6a6558", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r7, 0xae9a) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

789.891082ms ago: executing program 3 (id=1589):
r0 = socket$rds(0x15, 0x5, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r3, 0x0, 0xfffffecc) (async)
vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="13", 0x1}], 0x1, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1}, 0x60) (async, rerun: 64)
getsockopt$nfc_llcp(r4, 0x118, 0x0, &(0x7f0000000140)=""/192, 0x20000057) (rerun: 64)
close_range(r1, 0xffffffffffffffff, 0x0) (async)
syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000080045000078000000000001907864010101ac1414aa03039078030000004780000000000000002f0000ac141400ac1414bb0144440001ac1414bb00000000ac1414bb00000000ac141400000000000000000000540000e000000200000000ac1414aa00000000ac1414aa00000000e000000100000000000000"], 0x0)
r5 = socket$inet6(0xa, 0x80000, 0x80200) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r7}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', <r8=>0x0, 0x8000, 0x1, 0xe, 0xfffffb11, {{0xd, 0x4, 0x1, 0x7, 0x34, 0x64, 0x0, 0xb, 0x2f, 0x0, @empty, @broadcast, {[@timestamp={0x44, 0x8, 0xd0, 0x0, 0xf, [0x57b]}, @noop, @rr={0x7, 0x7, 0xbf, [@multicast1]}, @lsrr={0x83, 0xf, 0xb5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local]}, @noop]}}}}}) (async)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r3)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)={0x68, r9, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4af}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) (async)
r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) (async, rerun: 64)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0) (rerun: 64)
r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x4000}})
lgetxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@known='system.posix_acl_default\x00', 0x0, 0x0) (async, rerun: 32)
close_range(r10, 0xffffffffffffffff, 0x0) (rerun: 32)
r12 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r12, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x1) (async)
ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000200)={@mcast1, 0x35, r8})
r13 = syz_io_uring_setup(0x46d2, &(0x7f0000000400)={0x0, 0x76ea, 0x2, 0x2, 0x3e4}, &(0x7f0000000480), &(0x7f00000004c0))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=[@rights={{0x14, 0x1, 0x1, [r13]}}], 0x18, 0x2004c0d0}}], 0x1, 0x64004005) (async)
bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) (async)
sendmsg$rds(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000400)=""/196, 0xc4}, &(0x7f00000002c0)=[{&(0x7f0000000600)=""/183, 0xb7}], 0x1, 0x0, 0xfffffffffffffffc}}], 0x48}, 0x0)

789.114451ms ago: executing program 0 (id=1590):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x7e}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x8, 0x0, 0x0, 0x2044}, 0x60)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x0, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)='\f', 0x1}], 0x1}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="70010000100001000000000000000000fc0100000000000000000000000000000000000000000000000000000000000008000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414aa00000000000000000000000003000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000cd000000000000003400170015000000000000000000000000000000000000000000000004000000050000000100000008000000f7ffffff008000004c00140063"], 0x170}}, 0x0)
r4 = dup3(r2, r0, 0x80000)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
sendmsg$kcm(r1, &(0x7f0000000400)={&(0x7f00000000c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000002740)=[{&(0x7f0000002780)='\f', 0x1}], 0x1}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = socket(0x10, 0x3, 0x0)
recvmsg$kcm(r1, &(0x7f0000000800)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000540)=[{&(0x7f00000005c0)=""/166, 0xa6}, {&(0x7f0000000480)=""/3, 0x3}, {&(0x7f0000000500)=""/64, 0x40}, {&(0x7f0000000680)=""/248, 0xf8}], 0x4, &(0x7f0000000780)=""/109, 0x6d}, 0x2)
write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
ptrace(0x10, 0x0)
fcntl$setownex(r6, 0xf, &(0x7f0000000280)={0x2})
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
preadv2(r7, &(0x7f0000000040)=[{&(0x7f0000000200)=""/100, 0x64}], 0x1, 0x29, 0x0, 0x0)
syz_usb_disconnect(r5)

682.345179ms ago: executing program 3 (id=1591):
r0 = socket(0x11, 0x3, 0x0)
timer_create(0x2, 0x0, &(0x7f00000000c0))
timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', <r1=>0x0})
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x3, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x4b4d, 0x4)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$packet(r0, &(0x7f00000002c0)="913dcf3296db5d6d52d2f3b42d66", 0xe, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000)

674.086215ms ago: executing program 3 (id=1592):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7]}]}, 0x24}, 0x1, 0x0, 0x0, 0x80c4}, 0x80)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, r2, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc9}]}, 0x80}, 0x1, 0x0, 0x0, 0x8044}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_macvtap\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x800, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x10}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x43a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000001)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x9c, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0x3}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4008000)
r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000600), 0x8000, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1404, 0x300, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x117fc2bae492392b)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r3)
sendmsg$NL80211_CMD_LEAVE_OCB(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r6, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5f}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x60)
ioctl$USBDEVFS_GETDRIVER(r5, 0x41045508, &(0x7f00000008c0)={0x8, "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"})
ioctl$VIDIOC_S_AUDIO(r5, 0x40345622, &(0x7f0000000a00)={0x7, "a14b940ffbbddba80f65cea00ba388648094169a1fc20e55f1d2dd1b2b7188a2", 0x2})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a80)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x6c, r6, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x136}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1f, 0xac, "1da6489b30614834e5df4e9b0c41b6c8f74e5bf4f2d1c8502dc713"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x658}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2040000}, 0xc891)
mmap(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x200000e, 0x50, r0, 0x12cc000)
r8 = dup(r0)
write$P9_ROPEN(r5, &(0x7f0000000bc0)={0x18, 0x71, 0x2, {{0x80, 0x3, 0x3}}}, 0x18)
accept4$llc(r8, &(0x7f0000000c00)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000c40)=0x10, 0x80800)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000d00)={&(0x7f0000001000)={[{&(0x7f0000000c80)="c4be4fc4652051389a79e0de5b74a3f65511cc7e58cfe3cae3d1c8eea131ce239f776b6f02fdb9e1bf2a1c05fc6dc7c5aaf98391bb7a46f4952f6988e612ffdf0176cf8cf65969c231bdad7855fd56e17e7565f73e295581b193780e45e111596c53c9a0df0bb23a20f131618c5d62a981d45311dc11", 0x76, 0x2}]}, 0x1, 0x2}, 0x1)
r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r9, 0xc02c564a, &(0x7f0000000d80)={0x4, 0x470731f, 0x2, @stepwise={0x3, 0x8001, 0x8001, 0x583, 0xf933, 0xa09c}})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000dc0)={'bond_slave_0\x00'})
sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8041)
socket$inet6(0xa, 0x3, 0x7f)
stat(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40))
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000020c0)={0x0, 0x6}, 0x8)

673.438354ms ago: executing program 1 (id=1593):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r2=>0x0})
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r2, 0x7}}]}, 0x144}}, 0x0)
r3 = syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=<r4=>0x0)
syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00')
syz_80211_inject_frame(0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
syz_io_uring_setup(0x60e6, &(0x7f0000000280), &(0x7f0000000300)=<r6=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r6, r4, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x1a, 0x0, @fd, 0x0, 0x0, 0x8, 0xf, 0x1})
r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_elf32(r7, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x40, 0x6, 0x8, 0x8, 0x2, 0x3e, 0x80000001, 0x1d3, 0x38, 0x225, 0x8, 0x5, 0x20, 0x4, 0x0, 0x9, 0x5}, [{0x3, 0x7a, 0x0, 0x58, 0x6, 0x80, 0x2, 0x4}, {0x60000000, 0x5, 0x800, 0x9, 0x1, 0x8, 0x0, 0x1}, {0x423a72ab, 0x4, 0x5a4, 0x5, 0xfff, 0x8, 0x6, 0x9}, {0x6, 0x5, 0x0, 0x2, 0x3, 0x7, 0xd, 0x80}], "50450349787c5ee1209904272657c8702fc81e9082adf33709d9f3c9d08e34868b19d95bd285262f34f24aef76c6764e620f98227e504b66fef0edde4260096912226d52a422189c97ace8d42512607eb0dc35b073eacb84baeb85afa01b7b9a5192474b02f1793ed18985d0171c949b55c76ae19a45ce"}, 0x12f)
io_uring_enter(r3, 0x1ffe, 0x0, 0x0, 0x0, 0x0)

670.388013ms ago: executing program 3 (id=1594):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000000c0)=0x100000, 0x4) (async)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x2f) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async, rerun: 64)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004e9ffe2041800001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 64)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x0, 0xe0, 0x9, '\x00', 0x1ff})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESHEX], 0xe8}}, 0x0) (async, rerun: 64)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) (rerun: 64)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xffe) (async)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="05"], 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, <r7=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x15, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000006000000000000000200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000300000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000000000000000000186a0000020000000000000068dc000018380000050000000000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500"/144], &(0x7f00000001c0)='GPL\x00', 0x58, 0x6f, &(0x7f0000000280)=""/111, 0x40f00, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x8, 0x5, 0xdcc}, 0x10, 0x18282, r6, 0x3, &(0x7f0000000480)=[r7, r3, r3], &(0x7f00000004c0)=[{0x0, 0x4, 0x5, 0x9}, {0x2, 0x5, 0xa, 0xa}, {0x0, 0x2, 0x8, 0x9}], 0x10, 0xff, @void, @value}, 0x94) (async, rerun: 32)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, <r9=>0x0}, &(0x7f0000000680)=0x14) (rerun: 32)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r9, @ANYRES32=r6, @ANYBLOB="2900000002000000", @ANYRES32=r8, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="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", @ANYRES64=0x0], 0x20)
r10 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r11 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async)
write$binfmt_script(r10, &(0x7f0000000740)={'#! ', './file2', [{0x20, ','}, {0x20, 'ex;4\x00\xe0\t{\xd3\xf0\xa68W/{\xa6\xf2\x83\x18J\xc9W\x18\x88\xf1h0\x02\xb8z\xed\xa7N\xf5\x17^\xed\xd2\xcau\a\xf4\xca6\xcb3\xc3\xbb\xd1J.\xb0\x0er\x9dK8#\xecf2[o\x90\x91gs+z\xee\f\xc3e&\xf2{+qO+>y\xc2p\xd7g\xe2=\xa8\xa4\x8e\n-\xcf#\xe8\xc2\x04\"T\x16\xc4V\xf3\xd0\x9e\n\xb1Hgu>5\xe5\x87\x8fg\x11h\x15\xe7\xa5\x81t\t\xe5y\n\xa7Ql\xe0\xb3\xc8\xf5\xce\xe7m\xfb\xa0\xfb\xc1\xd7X\xf3\xd9\x7f\xdc\xbd\xe1\xf3\x99|.\"\xbfS\x0e\xfc_\xf6\x02\xe7\x92\x03\x9a\x998l\x00\\\xc6\xb7\xe2\xfc\xd6\x10\xaf\xb2G\xb6\x89\x7frm\x8d\x92\x1f\x97\xbf\x90\x88#\xaa\xf76\nx\xb8\xd1\xff\xc1\x80N\x19a\x8359M\x01?\xfbK/\xe4\xb6a\x85K\xeb\xec6!\xad\xf6\x04Wy+\xc1\x95\x01\xa1\xc5i\xc3\x10u\x15\xb6Q-\xab\x85\xe3\xdc\xa3\x11\xce\xafu\x8d\x1c\x19\x94\xac-1\xba\a\x06\x18'}, {0x20, '\x00'}, {0x20, 'ext4\x00'}, {0x20, '(%'}, {0x20, '\x00'/11}, {0x20, 'ro\x00'}, {0x20, ':@'}, {0x20, 'trusted.overlay.upper\x00'}]}, 0x14a)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r11, 0x0) (async, rerun: 64)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64)
write$qrtrtun(r10, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250ac10e50c14ffda0a7a98740f8cb9694c01f", 0x30)
write$qrtrtun(r10, &(0x7f00000005c0)="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", 0x164) (async)
write$qrtrtun(r10, &(0x7f0000000c00)="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", 0x180) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r12, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c)
fsetxattr$trusted_overlay_origin(r6, &(0x7f00000008c0), &(0x7f0000000940), 0x2, 0x3) (async, rerun: 64)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (rerun: 64)

429.954433ms ago: executing program 3 (id=1595):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000600)={@dev={0xfe, 0x80, '\x00', 0x38}, 0x5, 0x0, 0x0, 0x2, 0x3, 0x84ea}, &(0x7f0000000700)=0x20)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r5, @ANYBLOB="05990000000000001800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
sendto$packet(r2, &(0x7f0000000280)="318195b3ac1e", 0x6, 0x8040, &(0x7f0000000200)={0x11, 0x18, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x14)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r7=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x1, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast1}]}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x40}, 0x0)
bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x2}, 0x6)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newaddr={0x17, 0x14, 0x9535393fea6295b5, 0x70bd2c, 0x25dfdbff, {0xa, 0x18}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x595}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="b076dd2d", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32=0x0, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
write(r9, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r11, 0x40186f40, 0x20000502)
ioctl$IMDELTIMER(r11, 0x80044941, &(0x7f0000000040)=0x2)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r10, 0x400455c8, 0x0)

0s ago: executing program 1 (id=1596):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote, 0x40000000}, 0x1c)
sendmmsg$alg(r1, &(0x7f0000000700)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18}], 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000094c0), 0xffffffffffffffff)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f0000000140)={0x0, {0xffffffff, 0xffffffff}})
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f00000095c0)={0x0, 0x0, &(0x7f0000009580)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd2e, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f00000000c0)={'vxcan1\x00'})
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x7560e7646e17f416})
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272})
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0)
r6 = socket$inet6(0xa, 0x80002, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000080)={0x0, 0x6, 0x20000}, 0x20)
syz_emit_ethernet(0x7a, &(0x7f0000000280)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100}}}}}}}, 0x0)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)

0s ago: executing program 1 (id=1598):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000101c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x1a8, 0x30, 0x415, 0x0, 0x0, {}, [{0x194, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x20000000, 0x100001, 0x400}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xa79b}]}]}, {0x4}, {0xc}, {0xc}}}, @m_tunnel_key={0x13c, 0x1c, 0x0, 0x0, {{0xf}, {0x64, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x27}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x4, 0x7, 0x7, 0x400}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, {0xab, 0x6, "2e2f24ef957665ac21ebe590976b2e881989061c7e096e09dde5d91a8adc2cbc3d3acad82e0ece82d7b0adb0975b881d383d2168bdb680b64faf981cd934226ececf27167f937a9b2373d5edba7a16ee61b9304959dbca16910e1af6d501f9477e9f197512248fdd538fe9e1ba83ccf3eeb47a995570192d5fcd3536ed7d54af8e7b44c3a6bd360fbf70b326fb4987ad2db4316a384756dd30d0e2b3161a8705be2dc3ac451dae"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x1a8}}, 0x0)
r1 = gettid()
rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8)
timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r2 = gettid()
tkill(r2, 0x14)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={<r3=>0x0, 0x10000, 0x10}, &(0x7f0000000080)=0xc)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000180)={r6, 0x3}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={r3, 0x5, 0x1, 0x3, 0x81, 0x6, 0x25, 0x3, {r6, @in={{0x2, 0x4e21, @multicast2}}, 0x3ff, 0x7fffffff, 0xfffffffe, 0x9, 0x426}}, &(0x7f0000000180)=0xb0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000101c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x1a8, 0x30, 0x415, 0x0, 0x0, {}, [{0x194, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x20000000, 0x100001, 0x400}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xa79b}]}]}, {0x4}, {0xc}, {0xc}}}, @m_tunnel_key={0x13c, 0x1c, 0x0, 0x0, {{0xf}, {0x64, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x27}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x4, 0x7, 0x7, 0x400}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, {0xab, 0x6, "2e2f24ef957665ac21ebe590976b2e881989061c7e096e09dde5d91a8adc2cbc3d3acad82e0ece82d7b0adb0975b881d383d2168bdb680b64faf981cd934226ececf27167f937a9b2373d5edba7a16ee61b9304959dbca16910e1af6d501f9477e9f197512248fdd538fe9e1ba83ccf3eeb47a995570192d5fcd3536ed7d54af8e7b44c3a6bd360fbf70b326fb4987ad2db4316a384756dd30d0e2b3161a8705be2dc3ac451dae"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x1a8}}, 0x0) (async)
gettid() (async)
rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8) (async)
timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000044000)) (async)
timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
gettid() (async)
tkill(r2, 0x14) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x10000, 0x10}, &(0x7f0000000080)=0xc) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000180)={r6, 0x3}, &(0x7f0000000200)=0x8) (async)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={r3, 0x5, 0x1, 0x3, 0x81, 0x6, 0x25, 0x3, {r6, @in={{0x2, 0x4e21, @multicast2}}, 0x3ff, 0x7fffffff, 0xfffffffe, 0x9, 0x426}}, &(0x7f0000000180)=0xb0) (async)

kernel console output (not intermixed with test programs):

15.909772][T10191]  ? __lock_acquire+0xcc5/0x3c40
[  115.911466][T10191]  ? hlock_class+0x4e/0x130
[  115.912873][T10191]  ? __lock_acquire+0x15a9/0x3c40
[  115.914589][T10191]  ___sys_sendmsg+0xff/0x1e0
[  115.916169][T10191]  ? __pfx____sys_sendmsg+0x10/0x10
[  115.917940][T10191]  ? __pfx___lock_acquire+0x10/0x10
[  115.919675][T10191]  ? __pfx___might_resched+0x10/0x10
[  115.921417][T10191]  ? __might_fault+0xe3/0x190
[  115.923012][T10191]  __sys_sendmmsg+0x201/0x420
[  115.924647][T10191]  ? __pfx___sys_sendmmsg+0x10/0x10
[  115.926490][T10191]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  115.928692][T10191]  ? fput+0x67/0x440
[  115.929858][T10191]  ? ksys_write+0x1ba/0x250
[  115.931257][T10191]  ? __pfx_ksys_write+0x10/0x10
[  115.932845][T10191]  __x64_sys_sendmmsg+0x9c/0x100
[  115.934561][T10191]  ? lockdep_hardirqs_on+0x7c/0x110
[  115.936339][T10191]  do_syscall_64+0xcd/0x250
[  115.937857][T10191]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.939404][T10191] RIP: 0033:0x7f6914f85d19
[  115.940792][T10191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.945945][T10191] RSP: 002b:00007f6915d2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  115.948072][T10191] RAX: ffffffffffffffda RBX: 00007f6915175fa0 RCX: 00007f6914f85d19
[  115.950063][T10191] RDX: 0400000000000029 RSI: 00000000200020c0 RDI: 0000000000000004
[  115.952134][T10191] RBP: 00007f6915d2b090 R08: 0000000000000000 R09: 0000000000000000
[  115.954187][T10191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  115.956196][T10191] R13: 0000000000000000 R14: 00007f6915175fa0 R15: 00007ffea6913fe8
[  115.958240][T10191]  </TASK>
[  116.006654][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  116.009238][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  116.010328][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1216'.
[  116.011645][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  116.016588][ T5946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  116.018916][ T5946] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  116.020977][ T5946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  116.038226][T10195] vcan0 speed is unknown, defaulting to 1000
[  116.135707][T10195] chnl_net:caif_netlink_parms(): no params data found
[  116.172774][T10209] netlink: 'syz.0.1218': attribute type 28 has an invalid length.
[  116.175138][T10209] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1218'.
[  116.178479][T10209] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  116.198412][T10195] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.200347][T10195] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.202155][T10195] bridge_slave_0: entered allmulticast mode
[  116.204575][T10195] bridge_slave_0: entered promiscuous mode
[  116.207256][T10195] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.209153][T10195] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.211012][T10195] bridge_slave_1: entered allmulticast mode
[  116.213115][T10195] bridge_slave_1: entered promiscuous mode
[  116.233500][T10195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.237162][T10195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.259436][T10195] team0: Port device team_slave_0 added
[  116.262945][T10195] team0: Port device team_slave_1 added
[  116.281540][T10195] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.283465][T10195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.289945][T10195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.294475][T10195] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.296267][T10195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.303934][T10195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.310400][T10218] x_tables: duplicate underflow at hook 1
[  116.313071][   T39] audit: type=1400 audit(1734100290.528:628): avc:  denied  { ioctl } for  pid=10217 comm="syz.0.1220" path="socket:[32613]" dev="sockfs" ino=32613 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  116.331022][T10195] hsr_slave_0: entered promiscuous mode
[  116.333918][T10195] hsr_slave_1: entered promiscuous mode
[  116.336199][T10195] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  116.338633][T10195] Cannot create hsr debugfs directory
[  117.734559][ T1138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.797028][ T1138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.865489][ T1138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.948344][ T1138] bridge_slave_1: left allmulticast mode
[  117.949806][ T1138] bridge_slave_1: left promiscuous mode
[  117.952218][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.960698][ T1138] bridge_slave_0: left allmulticast mode
[  117.962240][ T1138] bridge_slave_0: left promiscuous mode
[  117.963924][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.033129][ T5946] Bluetooth: hci3: command tx timeout
[  118.212008][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  118.216006][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  118.219154][ T1138] bond0 (unregistering): Released all slaves
[  118.497562][   T39] audit: type=1400 audit(1734100292.708:629): avc:  denied  { getopt } for  pid=10233 comm="syz.0.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  118.533673][ T1138] hsr_slave_0: left promiscuous mode
[  118.535432][ T1138] hsr_slave_1: left promiscuous mode
[  118.537340][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.539271][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.541565][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.544821][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.585259][ T1138] veth1_macvtap: left promiscuous mode
[  118.586664][ T1138] veth0_macvtap: left promiscuous mode
[  118.588059][ T1138] veth1_vlan: left promiscuous mode
[  118.589402][ T1138] veth0_vlan: left promiscuous mode
[  118.614148][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1227'.
[  118.733941][    T9] misc userio: Buffer overflowed, userio client isn't keeping up
[  119.227346][ T1138] team0 (unregistering): Port device team_slave_1 removed
[  119.302118][ T1138] team0 (unregistering): Port device team_slave_0 removed
[  119.789901][    T9] input: PS/2 Generic Mouse as /devices/serio3/input/input16
[  119.924919][T10195] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  119.930144][T10195] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  119.934922][T10195] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  119.939892][T10195] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  119.985306][T10247] program syz.0.1230 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  119.986351][T10195] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.989475][T10248] program syz.0.1230 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  119.995118][T10195] 8021q: adding VLAN 0 to HW filter on device team0
[  119.999031][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.000878][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.010188][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.012024][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.014206][    T9] psmouse serio3: Failed to enable mouse on 
[  120.112465][ T5946] Bluetooth: hci3: command tx timeout
[  120.136590][T10195] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.245488][T10195] veth0_vlan: entered promiscuous mode
[  120.252955][T10195] veth1_vlan: entered promiscuous mode
[  120.269651][T10195] veth0_macvtap: entered promiscuous mode
[  120.274662][T10195] veth1_macvtap: entered promiscuous mode
[  120.282094][T10195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.287512][T10195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.300159][T10195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.306199][T10195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.309671][T10195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.313640][T10195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.318103][T10195] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.329417][T10195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.333727][T10195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.336464][T10195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.339256][T10195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.341654][T10195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.346087][T10195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.349074][T10195] batman_adv: batadv0: Interface activated: batadv_slave_1
[  120.353192][T10195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.356982][T10195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.359157][T10195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.361364][T10195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.399478][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.402393][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.432455][T10272] bond0: (slave syz_tun): Releasing backup interface
[  120.438605][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.441464][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.582117][T10278] binder: 10276:10278 ioctl c018620c 20000100 returned -22
[  120.937756][T10286] netlink: 'syz.0.1238': attribute type 4 has an invalid length.
[  120.966063][   T39] audit: type=1400 audit(1734100295.178:630): avc:  denied  { execute } for  pid=10287 comm="syz.0.1239" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  121.156874][T10292] tipc: Started in network mode
[  121.158203][T10292] tipc: Node identity 4, cluster identity 4711
[  121.159897][T10292] tipc: Node number set to 4
[  121.168310][T10291] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1240'.
[  121.206556][   T39] audit: type=1326 audit(1734100295.418:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10266 comm="syz.1.1232" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a4985d19 code=0x7fc00000
[  121.235577][T10295] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  121.238090][T10300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10300 comm=syz.1.1242
[  121.243201][T10300] netlink: 'syz.1.1242': attribute type 9 has an invalid length.
[  121.245372][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'.
[  121.432432][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'.
[  121.435182][T10313] openvswitch: netlink: Flow actions attr not present in new flow.
[  121.918273][T10318] netlink: 'syz.0.1247': attribute type 1 has an invalid length.
[  121.935430][T10318] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  121.939214][T10318] hsr0: left promiscuous mode
[  121.979165][T10321] program syz.0.1248 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  122.007842][T10323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1249'.
[  122.192364][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.194608][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.196594][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.198578][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.200716][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.203255][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.205160][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.207056][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.209333][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.211918][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.213944][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.215811][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.217749][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.219811][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.221769][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.224344][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.226838][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.229343][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.231202][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.233396][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.235213][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.237128][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.239111][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.241022][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.243229][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.245129][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.249275][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.251902][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.253979][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.255913][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.257834][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.260037][   T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  122.265790][   T25] hid-generic 0000:0000:0000.0002: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  122.274610][T10343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.300280][T10348] xt_hashlimit: size too large, truncated to 1048576
[  122.358267][T10350] »»»»»»: renamed from lo (while UP)
[  122.527494][ T1141] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.719780][ T5938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  122.722742][ T5938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  122.725616][ T5938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  122.729174][ T5938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  122.731681][ T5938] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  122.735130][ T5938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  122.754863][T10352] vcan0 speed is unknown, defaulting to 1000
[  122.848963][T10352] chnl_net:caif_netlink_parms(): no params data found
[  122.849676][T10355] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1257'.
[  122.913800][T10352] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.915766][T10352] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.917704][T10352] bridge_slave_0: entered allmulticast mode
[  122.922404][T10352] bridge_slave_0: entered promiscuous mode
[  122.925153][T10352] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.927055][T10352] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.928953][T10352] bridge_slave_1: entered allmulticast mode
[  122.930877][T10352] bridge_slave_1: entered promiscuous mode
[  122.958518][T10352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.962738][T10352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.985678][T10352] team0: Port device team_slave_0 added
[  122.988371][T10352] team0: Port device team_slave_1 added
[  122.999618][T10368] vcan0 speed is unknown, defaulting to 1000
[  123.015658][T10352] batman_adv: batadv0: Adding interface: batadv_slave_0
[  123.018162][T10352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.027955][T10352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.035961][T10352] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.037838][T10352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.045643][T10352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.061268][T10369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1259'.
[  123.087379][T10352] hsr_slave_0: entered promiscuous mode
[  123.089399][T10352] hsr_slave_1: entered promiscuous mode
[  123.091278][T10352] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  123.093475][T10352] Cannot create hsr debugfs directory
[  123.459299][T10391] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false
[  123.541978][T10397] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1263'.
[  123.542386][   T39] audit: type=1400 audit(1734100297.748:632): avc:  denied  { write } for  pid=10396 comm="syz.1.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  123.568894][   T39] audit: type=1400 audit(1734100297.778:633): avc:  denied  { append } for  pid=10398 comm="syz.1.1264" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  123.613159][T10404] random: crng reseeded on system resumption
[  123.630582][T10406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1265'.
[  123.635224][T10406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1265'.
[  123.638249][T10406] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1265'.
[  123.755007][T10404] Unrecognized hibernate image header format!
[  123.756944][T10404] PM: hibernation: Image mismatch: architecture specific data
[  124.354923][ T1141] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.367507][T10419] program syz.1.1269 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  124.367868][   T39] audit: type=1400 audit(1734100298.578:634): avc:  denied  { map } for  pid=10416 comm="syz.1.1269" path="socket:[37281]" dev="sockfs" ino=37281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  124.369912][T10419] ata1.00: non-matching transfer count (2097152/0)
[  124.438882][ T1141] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.533769][ T1141] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.584814][T10443] vcan0 speed is unknown, defaulting to 1000
[  124.646203][   T39] audit: type=1326 audit(1734100298.858:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.0.1275" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6914f85d19 code=0x0
[  124.695894][ T1141] bridge_slave_1: left allmulticast mode
[  124.697413][ T1141] bridge_slave_1: left promiscuous mode
[  124.698922][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.701686][ T1141] bridge_slave_0: left allmulticast mode
[  124.703655][ T1141] bridge_slave_0: left promiscuous mode
[  124.705507][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.754474][ T5938] Bluetooth: hci3: command tx timeout
[  124.781731][T10454] xt_hashlimit: size too large, truncated to 1048576
[  125.001347][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  125.005184][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  125.008493][ T1141] bond0 (unregistering): Released all slaves
[  125.024143][T10460] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  125.060558][   T39] audit: type=1400 audit(1734100299.268:636): avc:  denied  { listen } for  pid=10463 comm="syz.1.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  125.065398][   T39] audit: type=1400 audit(1734100299.268:637): avc:  denied  { accept } for  pid=10463 comm="syz.1.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  125.122772][   T39] audit: type=1400 audit(1734100299.338:638): avc:  denied  { accept } for  pid=10463 comm="syz.1.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  125.419877][ T1141] hsr_slave_0: left promiscuous mode
[  125.421850][ T1141] hsr_slave_1: left promiscuous mode
[  125.424821][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.426681][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.429272][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.431189][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.457683][ T1141] veth1_macvtap: left promiscuous mode
[  125.459180][ T1141] veth0_macvtap: left promiscuous mode
[  125.460666][ T1141] veth1_vlan: left promiscuous mode
[  125.462050][ T1141] veth0_vlan: left promiscuous mode
[  126.300338][ T1141] team0 (unregistering): Port device team_slave_1 removed
[  126.400337][ T1141] team0 (unregistering): Port device team_slave_0 removed
[  126.832393][ T5938] Bluetooth: hci3: command tx timeout
[  126.971774][T10516] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  126.973512][T10516] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  126.974300][T10352] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  126.975857][T10516] vhci_hcd vhci_hcd.0: Device attached
[  126.980126][T10518] vhci_hcd: cannot find the pending unlink 3
[  126.981242][T10352] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  126.985737][T10517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.993161][T10517] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.996978][T10352] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  127.000678][T10352] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  127.014398][T10522] input: syz0 as /devices/virtual/input/input19
[  127.027535][T10352] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.034139][T10352] 8021q: adding VLAN 0 to HW filter on device team0
[  127.037813][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.039704][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.046895][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.048662][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.052066][T10525] tmpfs: Unknown parameter 'usrquotaªÉ«·„f¦6ï¸� Ðîð¥
UŠZ£G„©‚?( ¼ß1�›Ck4´**|õød­ši�.#ëO:+./file1'
[  127.139625][T10352] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.236632][T10352] veth0_vlan: entered promiscuous mode
[  127.240809][T10352] veth1_vlan: entered promiscuous mode
[  127.242875][ T1325] usb 44-1: SetAddress Request (2) to port 0
[  127.245513][ T1325] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd
[  127.255209][T10352] veth0_macvtap: entered promiscuous mode
[  127.258103][T10352] veth1_macvtap: entered promiscuous mode
[  127.265424][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.268224][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.271078][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.274433][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.277031][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.279713][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.282837][T10352] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.288709][   T39] audit: type=1400 audit(1734100301.498:639): avc:  denied  { read } for  pid=10546 comm="syz.1.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  127.288814][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.296866][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.299402][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.302104][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.304880][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.307587][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.310592][T10352] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.315646][T10352] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.317988][T10352] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.320246][T10352] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.322761][T10352] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.351019][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.354493][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.368615][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.370699][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.382747][   T39] audit: type=1400 audit(1734100301.598:640): avc:  denied  { mounton } for  pid=10352 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  128.340608][T10591] netlink: 'syz.1.1296': attribute type 13 has an invalid length.
[  128.358494][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1296'.
[  128.364292][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  128.366641][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.369358][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.372033][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.374541][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.376511][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.378492][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.380838][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.382838][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.384802][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.386723][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.388657][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.390646][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.392912][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.395744][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.398529][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.401340][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.404217][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.407029][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.409820][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.412359][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.414361][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.416399][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.418668][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.421468][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.424274][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.426636][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.429356][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.432041][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.434875][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.437703][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.440439][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.443256][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.446044][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.448819][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.451398][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.454162][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.456846][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.459612][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.462423][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.465168][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.467946][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.470078][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.472088][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.474198][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.476095][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.478120][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.480179][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.482209][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.484269][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.486282][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.488237][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.490129][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.492038][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.494065][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.496103][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.498141][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.500104][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.502051][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.504101][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.506109][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.508126][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.510151][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.512175][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.514210][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.516225][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.518263][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.520296][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.522376][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.524419][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.526441][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.528502][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.530526][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.532582][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.534636][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.536659][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.538643][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.540624][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.542657][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.544618][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.546608][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.548562][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.550571][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.552607][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.554613][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.556616][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.558611][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.560513][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.562559][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.564591][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.566600][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.568630][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.570662][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.572701][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.574708][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.576651][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.578741][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.580771][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.582829][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  128.584888][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  128.588815][   T39] audit: type=1400 audit(1734100302.798:641): avc:  denied  { recv } for  pid=121 comm="kworker/1:1H" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=57332 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  128.596788][   T39] audit: type=1400 audit(1734100302.798:642): avc:  denied  { recv } for  pid=121 comm="kworker/1:1H" saddr=127.0.0.1 src=57332 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  128.679669][   T39] audit: type=1400 audit(1734100302.888:643): avc:  denied  { egress } for  pid=12 comm="kworker/u32:1" saddr=fe80::1c daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  128.688276][   T39] audit: type=1400 audit(1734100302.888:644): avc:  denied  { sendto } for  pid=12 comm="kworker/u32:1" saddr=fe80::1c daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  128.820233][T10501] ceph: No mds server is up or the cluster is laggy
[  129.092224][T10602] netlink: zone id is out of range
[  129.094621][T10602] netlink: del zone limit has 4 unknown bytes
[  129.206735][T10608] syz.0.1303: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  129.210942][T10608] CPU: 0 UID: 0 PID: 10608 Comm: syz.0.1303 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  129.213734][T10608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  129.216417][T10608] Call Trace:
[  129.217240][T10608]  <TASK>
[  129.217988][T10608]  dump_stack_lvl+0x16c/0x1f0
[  129.219226][T10608]  warn_alloc+0x24d/0x3a0
[  129.220361][T10608]  ? __pfx_warn_alloc+0x10/0x10
[  129.221618][T10608]  ? __pfx_stack_trace_save+0x10/0x10
[  129.223013][T10608]  ? kasan_save_stack+0x42/0x60
[  129.224287][T10608]  ? kasan_save_stack+0x33/0x60
[  129.225538][T10608]  ? kasan_save_track+0x14/0x30
[  129.226782][T10608]  ? __kasan_kmalloc+0xaa/0xb0
[  129.227984][T10608]  ? xskq_create+0x52/0x1d0
[  129.229167][T10608]  ? do_sock_setsockopt+0x222/0x480
[  129.230825][T10608]  ? __sys_setsockopt+0x1a0/0x230
[  129.232101][T10608]  ? __x64_sys_setsockopt+0xbd/0x160
[  129.233482][T10608]  __vmalloc_node_range_noprof+0x10df/0x1530
[  129.235244][T10608]  ? xskq_create+0xfb/0x1d0
[  129.236452][T10608]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  129.238091][T10608]  ? xskq_create+0xfb/0x1d0
[  129.239347][T10608]  vmalloc_user_noprof+0x6b/0x90
[  129.240861][T10608]  ? xskq_create+0xfb/0x1d0
[  129.242526][T10608]  xskq_create+0xfb/0x1d0
[  129.244130][T10608]  xsk_setsockopt+0x7b7/0xa10
[  129.245877][T10608]  ? __pfx_xsk_setsockopt+0x10/0x10
[  129.247774][T10608]  ? selinux_socket_setsockopt+0x6a/0x80
[  129.249786][T10608]  ? __pfx_xsk_setsockopt+0x10/0x10
[  129.251670][T10608]  do_sock_setsockopt+0x222/0x480
[  129.253092][T10608]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  129.254507][T10608]  ? lock_acquire+0x2f/0xb0
[  129.255681][T10608]  __sys_setsockopt+0x1a0/0x230
[  129.256950][T10608]  __x64_sys_setsockopt+0xbd/0x160
[  129.258217][T10608]  ? do_syscall_64+0x91/0x250
[  129.259442][T10608]  ? lockdep_hardirqs_on+0x7c/0x110
[  129.260749][T10608]  do_syscall_64+0xcd/0x250
[  129.261881][T10608]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.263398][T10608] RIP: 0033:0x7f6914f85d19
[  129.264820][T10608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  129.269916][T10608] RSP: 002b:00007f6915d2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  129.272035][T10608] RAX: ffffffffffffffda RBX: 00007f6915175fa0 RCX: 00007f6914f85d19
[  129.274037][T10608] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  129.276052][T10608] RBP: 00007f6915001a20 R08: 0000000000000004 R09: 0000000000000000
[  129.278082][T10608] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000
[  129.280464][T10608] R13: 0000000000000000 R14: 00007f6915175fa0 R15: 00007ffea6913fe8
[  129.282852][T10608]  </TASK>
[  129.284292][T10608] Mem-Info:
[  129.285163][T10608] active_anon:19958 inactive_anon:0 isolated_anon:0
[  129.285163][T10608]  active_file:3307 inactive_file:11209 isolated_file:0
[  129.285163][T10608]  unevictable:1768 dirty:143 writeback:0
[  129.285163][T10608]  slab_reclaimable:7100 slab_unreclaimable:78478
[  129.285163][T10608]  mapped:25986 shmem:2485 pagetables:1070
[  129.285163][T10608]  sec_pagetables:303 bounce:0
[  129.285163][T10608]  kernel_misc_reclaimable:0
[  129.285163][T10608]  free:481145 free_pcp:2042 free_cma:0
[  129.297494][T10608] Node 0 active_anon:79832kB inactive_anon:0kB active_file:13228kB inactive_file:44828kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:103944kB dirty:568kB writeback:0kB shmem:6404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:12976kB pagetables:4280kB sec_pagetables:1212kB all_unreclaimable? no
[  129.306417][T10608] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  129.314564][T10608] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  129.321995][T10608] lowmem_reserve[]: 0 1212 0 0 0
[  129.323340][T10608] Node 0 DMA32 free:315856kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB active_anon:79832kB inactive_anon:0kB active_file:13228kB inactive_file:44828kB unevictable:3536kB writepending:568kB present:2080628kB managed:1269912kB mlocked:0kB bounce:0kB free_pcp:7300kB local_pcp:1876kB free_cma:0kB
[  129.330911][T10608] lowmem_reserve[]: 0 0 0 0 0
[  129.332141][T10608] Node 1 Normal free:1593364kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:1300kB local_pcp:0kB free_cma:0kB
[  129.342504][T10608] lowmem_reserve[]: 0 0 0 0 0
[  129.343950][T10608] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  129.347292][T10608] Node 0 DMA32: 80*4kB (UM) 182*8kB (UME) 408*16kB (UME) 578*32kB (UME) 338*64kB (UME) 226*128kB (UME) 27*256kB (UME) 14*512kB (UME) 17*1024kB (ME) 5*2048kB (ME) 48*4096kB (UM) = 315696kB
[  129.352165][T10608] Node 1 Normal: 25*4kB (UE) 36*8kB (UME) 21*16kB (UME) 122*32kB (UME) 60*64kB (UME) 28*128kB (UME) 7*256kB (UE) 5*512kB (ME) 4*1024kB (UE) 4*2048kB (UME) 382*4096kB (UM) = 1593364kB
[  129.357517][T10608] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  129.360281][T10608] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  129.362846][T10608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  129.365327][T10608] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  129.367717][T10608] 17001 total pagecache pages
[  129.369005][T10608] 0 pages in swap cache
[  129.370532][T10608] Free swap  = 124220kB
[  129.371706][T10608] Total swap = 124996kB
[  129.372913][T10608] 1048443 pages RAM
[  129.373937][T10608] 0 pages HighMem/MovableOnly
[  129.375174][T10608] 281644 pages reserved
[  129.376274][T10608] 0 pages cma reserved
[  129.402142][   T39] audit: type=1400 audit(1734100303.608:645): avc:  denied  { watch } for  pid=10617 comm="syz.0.1306" path="/372" dev="tmpfs" ino=2007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  129.410351][   T39] audit: type=1400 audit(1734100303.608:646): avc:  denied  { watch_sb } for  pid=10617 comm="syz.0.1306" path="/372" dev="tmpfs" ino=2007 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  129.456660][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1308'.
[  129.486188][   T39] audit: type=1326 audit(1734100303.698:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10628 comm="syz.0.1310" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6914f85d19 code=0x0
[  129.586693][T10635] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1312'.
[  129.588949][T10639] gfs2: gfs2 mount does not exist
[  129.594319][T10639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1310'.
[  129.740319][   T45] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.990544][T10518] vhci_hcd: connection reset by peer
[  129.992524][ T1144] vhci_hcd: stop threads
[  129.993729][ T1144] vhci_hcd: release socket
[  129.996675][ T1144] vhci_hcd: disconnect device
[  130.200638][T10650] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.205406][T10650] Invalid logical block size (585)
[  130.266932][T10656] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™�…EŸ8-ö¤ ™�ŠÇÅ–èEeÕ¬'
[  130.344133][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  130.351194][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  130.351787][   T25] IPVS: starting estimator thread 0...
[  130.357356][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  130.359438][   T39] audit: type=1326 audit(1734100304.578:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10663 comm="syz.3.1319" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99f4185d19 code=0x0
[  130.364079][ T5946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  130.370911][ T5946] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  130.373417][ T5946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  130.390150][T10660] vcan0 speed is unknown, defaulting to 1000
[  130.392125][T10671] xt_cgroup: invalid path, errno=-2
[  130.433283][T10674] set_target_expiration: 23 callbacks suppressed
[  130.433298][T10674] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer.
[  130.442217][T10674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1320'.
[  130.445378][T10674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1320'.
[  130.452705][T10666] IPVS: using max 39 ests per chain, 93600 per kthread
[  130.513862][T10660] chnl_net:caif_netlink_parms(): no params data found
[  130.559588][T10703] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1328'.
[  130.566207][   T39] audit: type=1400 audit(1734100304.778:649): avc:  denied  { setattr } for  pid=10684 comm="syz.1.1325" name="file0" dev="tmpfs" ino=1951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  130.572052][   T39] audit: type=1400 audit(1734100304.778:650): avc:  denied  { read } for  pid=10684 comm="syz.1.1325" name="file0" dev="tmpfs" ino=1951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  130.588265][T10660] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.590229][T10660] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.592075][T10660] bridge_slave_0: entered allmulticast mode
[  130.594520][T10660] bridge_slave_0: entered promiscuous mode
[  130.597515][T10660] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.599755][T10660] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.601866][T10660] bridge_slave_1: entered allmulticast mode
[  130.604318][T10660] bridge_slave_1: entered promiscuous mode
[  130.624872][T10660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  130.628450][T10660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  130.658799][T10660] team0: Port device team_slave_0 added
[  130.661430][T10660] team0: Port device team_slave_1 added
[  130.681600][T10660] batman_adv: batadv0: Adding interface: batadv_slave_0
[  130.683820][T10660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.690400][T10660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  130.695929][T10660] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.697757][T10660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.705682][T10660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.740204][T10660] hsr_slave_0: entered promiscuous mode
[  130.742354][T10660] hsr_slave_1: entered promiscuous mode
[  130.744588][T10660] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  130.746650][T10660] Cannot create hsr debugfs directory
[  130.807534][T10710] program syz.3.1330 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  130.832618][ T5997] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  130.909469][T10714] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1331'.
[  130.972399][ T5997] usb 5-1: device descriptor read/64, error -71
[  131.212549][ T5997] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  131.331525][T10721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1333'.
[  131.334018][T10721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1333'.
[  131.352521][ T5997] usb 5-1: device descriptor read/64, error -71
[  131.465198][   T45] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.472788][ T5997] usb usb5-port1: attempt power cycle
[  131.488541][T10729] netlink: 'syz.1.1335': attribute type 10 has an invalid length.
[  131.491151][T10730] syz_tun: entered promiscuous mode
[  131.497849][T10730] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  131.536989][   T45] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.637983][   T45] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.727284][   T45] bridge_slave_1: left allmulticast mode
[  131.729517][   T45] bridge_slave_1: left promiscuous mode
[  131.731768][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.736277][   T45] bridge_slave_0: left allmulticast mode
[  131.738333][   T45] bridge_slave_0: left promiscuous mode
[  131.740439][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.812487][ T5997] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  131.832985][ T5997] usb 5-1: device descriptor read/8, error -71
[  132.023363][   T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.027724][   T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.030770][   T45] bond0 (unregistering): Released all slaves
[  132.085132][ T5997] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  132.112839][ T5997] usb 5-1: device descriptor read/8, error -71
[  132.223856][ T5997] usb usb5-port1: unable to enumerate USB device
[  132.282840][ T1325] usb 44-1: device descriptor read/8, error -110
[  132.433064][ T5938] Bluetooth: hci3: command tx timeout
[  132.438719][ T1417] ieee802154 phy0 wpan0: encryption failed: -22
[  132.440973][ T1417] ieee802154 phy1 wpan1: encryption failed: -22
[  132.483285][   T45] hsr_slave_0: left promiscuous mode
[  132.485447][   T45] hsr_slave_1: left promiscuous mode
[  132.487375][   T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.489353][   T45] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.491611][   T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.493742][   T45] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.530136][   T45] veth1_macvtap: left promiscuous mode
[  132.531685][   T45] veth0_macvtap: left promiscuous mode
[  132.533337][   T45] veth1_vlan: left promiscuous mode
[  132.534751][   T45] veth0_vlan: left promiscuous mode
[  132.678965][T10765] xt_CT: You must specify a L4 protocol and not use inversions on it
[  132.698188][ T1325] usb usb44-port1: attempt power cycle
[  133.230629][   T45] team0 (unregistering): Port device team_slave_1 removed
[  133.268451][ T1325] usb usb44-port1: unable to enumerate USB device
[  133.306754][   T45] team0 (unregistering): Port device team_slave_0 removed
[  133.808515][T10788] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1344'.
[  134.042487][T10660] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  134.046629][T10660] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  134.052031][T10660] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  134.058287][T10660] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  134.103456][ T1106] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[  134.105285][ T1106] ata1: failed to read log page 10h (errno=-5)
[  134.107063][ T1106] ata1.00: exception Emask 0x1 SAct 0x400000 SErr 0x0 action 0x0
[  134.109289][ T1106] ata1.00: irq_stat 0x40000000
[  134.110557][ T1106] ata1.00: failed command: WRITE FPDMA QUEUED
[  134.112785][ T1106] ata1.00: cmd 61/50:b0:6a:09:10/00:00:00:00:00/40 tag 22 ncq dma 40960 out
[  134.112785][ T1106]          res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[  134.114491][T10660] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.117824][ T1106] ata1.00: status: { DRDY }
[  134.131415][ T1106] ata1.00: configured for UDMA/100
[  134.131642][T10660] 8021q: adding VLAN 0 to HW filter on device team0
[  134.136197][ T1106] ata1: EH complete
[  134.138144][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.140980][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.170130][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.172713][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.265170][T10660] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.274334][T10805] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1349'.
[  134.368583][T10660] veth0_vlan: entered promiscuous mode
[  134.373307][T10660] veth1_vlan: entered promiscuous mode
[  134.387308][T10660] veth0_macvtap: entered promiscuous mode
[  134.390374][T10660] veth1_macvtap: entered promiscuous mode
[  134.396524][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.399232][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.404955][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.408654][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.412134][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.415920][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.420330][T10660] batman_adv: batadv0: Interface activated: batadv_slave_0
[  134.427070][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.430646][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.434827][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.438338][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.441649][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.445293][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.449377][T10660] batman_adv: batadv0: Interface activated: batadv_slave_1
[  134.455587][T10660] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.458388][T10660] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.461143][T10660] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.464268][T10660] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.505624][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.507769][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.519694][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.522197][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.522570][ T5938] Bluetooth: hci3: command tx timeout
[  134.906638][T10825] tipc: Enabled bearer <eth:geneve1>, priority 10
[  134.947137][T10828] FAULT_INJECTION: forcing a failure.
[  134.947137][T10828] name failslab, interval 1, probability 0, space 0, times 0
[  134.951263][T10828] CPU: 0 UID: 0 PID: 10828 Comm: syz.3.1353 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  134.954711][T10828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  134.958087][T10828] Call Trace:
[  134.959238][T10828]  <TASK>
[  134.960195][T10828]  dump_stack_lvl+0x16c/0x1f0
[  134.961729][T10828]  should_fail_ex+0x497/0x5b0
[  134.963365][T10828]  ? fs_reclaim_acquire+0xae/0x150
[  134.965039][T10828]  should_failslab+0xc2/0x120
[  134.966601][T10828]  __kmalloc_node_noprof+0xd1/0x510
[  134.968408][T10828]  ? find_held_lock+0x2d/0x110
[  134.970053][T10828]  ? __kvmalloc_node_noprof+0xad/0x1a0
[  134.971835][T10828]  __kvmalloc_node_noprof+0xad/0x1a0
[  134.973636][T10828]  netfs_extract_user_iter+0x166/0x620
[  134.975515][T10828]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  134.977365][T10828]  ? netfs_alloc_request+0x73d/0xba0
[  134.979102][T10828]  ? do_raw_spin_unlock+0x172/0x230
[  134.980823][T10828]  ? __pfx_netfs_extract_user_iter+0x10/0x10
[  134.982890][T10828]  ? netfs_create_write_req+0x4ad/0x7b0
[  134.984697][T10828]  netfs_unbuffered_write_iter_locked+0x275/0xe70
[  134.986825][T10828]  netfs_unbuffered_write_iter+0x413/0x6d0
[  134.988810][T10828]  v9fs_file_write_iter+0xbf/0x100
[  134.990560][T10828]  vfs_write+0x5ae/0x1150
[  134.991979][T10828]  ? __pfx_v9fs_file_write_iter+0x10/0x10
[  134.993831][T10828]  ? __pfx___mutex_lock+0x10/0x10
[  134.995452][T10828]  ? __pfx_vfs_write+0x10/0x10
[  134.997089][T10828]  ksys_write+0x12b/0x250
[  134.998576][T10828]  ? __pfx_ksys_write+0x10/0x10
[  135.000262][T10828]  do_syscall_64+0xcd/0x250
[  135.001838][T10828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.003779][T10828] RIP: 0033:0x7f99f4185d19
[  135.005262][T10828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.011457][T10828] RSP: 002b:00007f99f508b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  135.014158][T10828] RAX: ffffffffffffffda RBX: 00007f99f4375fa0 RCX: 00007f99f4185d19
[  135.016846][T10828] RDX: 0000000000007fec RSI: 0000000020000300 RDI: 0000000000000007
[  135.019510][T10828] RBP: 00007f99f508b090 R08: 0000000000000000 R09: 0000000000000000
[  135.022151][T10828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.024795][T10828] R13: 0000000000000000 R14: 00007f99f4375fa0 R15: 00007ffffb470978
[  135.027431][T10828]  </TASK>
[  135.028565][    C0] vkms_vblank_simulate: vblank timer overrun
[  135.128715][T10831] netlink: 852 bytes leftover after parsing attributes in process `syz.3.1354'.
[  136.448156][   T39] kauditd_printk_skb: 4 callbacks suppressed
[  136.448168][   T39] audit: type=1400 audit(1734100310.648:655): avc:  denied  { read } for  pid=10852 comm="syz.1.1360" path="socket:[38629]" dev="sockfs" ino=38629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  136.774300][   T39] audit: type=1800 audit(1734100310.988:656): pid=10864 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1364" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  137.367415][ T1138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.910813][T10896] Unsupported ieee802154 address type: 0
[  137.916378][T10900] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  137.916676][T10899] netlink: 'syz.3.1374': attribute type 1 has an invalid length.
[  137.926148][T10899] No control pipe specified
[  138.035569][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  138.041154][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  138.045401][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  138.047874][ T5946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  138.050072][ T5946] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  138.052065][ T5946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  138.076297][T10919] vcan0 speed is unknown, defaulting to 1000
[  138.121182][T10926] tmpfs: Bad value for 'mpol'
[  138.124507][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1381'.
[  138.139622][T10927] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1377'.
[  138.203549][T10919] chnl_net:caif_netlink_parms(): no params data found
[  138.213190][T10938] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1384' sets config #0
[  138.245975][T10945] misc userio: The device must be registered before sending interrupts
[  138.261803][T10919] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.263803][T10919] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.265651][T10919] bridge_slave_0: entered allmulticast mode
[  138.267685][T10919] bridge_slave_0: entered promiscuous mode
[  138.270252][T10919] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.272131][T10919] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.275039][T10919] bridge_slave_1: entered allmulticast mode
[  138.277406][T10919] bridge_slave_1: entered promiscuous mode
[  138.314015][T10919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.316749][T10955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1388'.
[  138.320409][T10919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.357461][T10919] team0: Port device team_slave_0 added
[  138.361113][T10919] team0: Port device team_slave_1 added
[  138.366687][   T39] audit: type=1400 audit(1734100312.578:657): avc:  denied  { append } for  pid=10960 comm="syz.0.1390" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  138.374638][T10961] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x2160 (0x33424752, 1, 0, 0, 0)
[  138.396330][T10919] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.398193][T10919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.405073][T10919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.408876][T10919] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.410642][T10919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.419251][T10919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.453918][T10919] hsr_slave_0: entered promiscuous mode
[  138.456691][T10919] hsr_slave_1: entered promiscuous mode
[  138.459093][T10919] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  138.461148][T10919] Cannot create hsr debugfs directory
[  138.503937][   T39] audit: type=1400 audit(1734100312.708:658): avc:  denied  { unmount } for  pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  138.692247][T10983] hfsplus: unable to find HFS+ superblock
[  138.849299][ T1138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.945486][   T39] audit: type=1400 audit(1734100313.158:659): avc:  denied  { getopt } for  pid=11005 comm="syz.1.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  138.958322][ T1138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.007299][ T1138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.047314][   T39] audit: type=1400 audit(1734100313.258:660): avc:  denied  { remount } for  pid=11009 comm="syz.1.1404" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  139.055925][   T39] audit: type=1400 audit(1734100313.258:661): avc:  denied  { setopt } for  pid=11009 comm="syz.1.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  139.080756][T11010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1404'.
[  139.104487][ T1138] bridge_slave_1: left allmulticast mode
[  139.105990][ T1138] bridge_slave_1: left promiscuous mode
[  139.107497][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.110923][ T1138] bridge_slave_0: left allmulticast mode
[  139.113517][ T1138] bridge_slave_0: left promiscuous mode
[  139.113607][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.139098][   T39] audit: type=1400 audit(1734100313.348:662): avc:  denied  { unmount } for  pid=6197 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  139.166933][   T39] audit: type=1400 audit(1734100313.388:663): avc:  denied  { mount } for  pid=11012 comm="syz.1.1405" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  139.185485][   T39] audit: type=1400 audit(1734100313.398:664): avc:  denied  { unmount } for  pid=6197 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  139.449675][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  139.454316][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  139.457666][ T1138] bond0 (unregistering): Released all slaves
[  139.765666][ T1138] hsr_slave_0: left promiscuous mode
[  139.767919][ T1138] hsr_slave_1: left promiscuous mode
[  139.769792][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.771674][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.782605][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.784525][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.819469][ T1138] veth1_macvtap: left promiscuous mode
[  139.820906][ T1138] veth0_macvtap: left promiscuous mode
[  139.822417][ T1138] veth1_vlan: left promiscuous mode
[  139.823879][ T1138] veth0_vlan: left promiscuous mode
[  140.122642][ T5938] Bluetooth: hci3: command tx timeout
[  140.179043][T11040] xt_hashlimit: size too large, truncated to 1048576
[  140.527131][ T1138] team0 (unregistering): Port device team_slave_1 removed
[  140.607717][ T1138] team0 (unregistering): Port device team_slave_0 removed
[  141.374720][T10919] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  141.378383][T10919] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  141.381935][T10919] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  141.392209][T10919] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  141.440716][T10919] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.448101][T10919] 8021q: adding VLAN 0 to HW filter on device team0
[  141.451713][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.453636][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.461774][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.463691][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.557458][T10919] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.664635][T10919] veth0_vlan: entered promiscuous mode
[  141.670072][T10919] veth1_vlan: entered promiscuous mode
[  141.683666][T10919] veth0_macvtap: entered promiscuous mode
[  141.686577][T10919] veth1_macvtap: entered promiscuous mode
[  141.692068][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.697824][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.700833][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.704151][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.706870][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.709598][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.713040][T10919] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.724515][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.727404][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.730138][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.736731][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.739840][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.743603][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.747641][T10919] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.762155][T10919] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.764534][T10919] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.767103][T10919] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.769489][T10919] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.803803][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.805942][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.826023][ T6785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.827902][ T6785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.835662][   T39] kauditd_printk_skb: 4 callbacks suppressed
[  141.835671][   T39] audit: type=1400 audit(1734100316.048:669): avc:  denied  { mounton } for  pid=10919 comm="syz-executor" path="/syzkaller.wBDWIi/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=41494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  144.029846][T11146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  144.085600][T11145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  144.139828][T11145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  144.338782][ T1138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.068175][T11165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1436'.
[  145.145943][T11172] fuse: Bad value for 'fd'
[  145.148021][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  145.152506][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  145.158228][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  145.161246][ T5946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  145.181512][ T5946] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  145.186592][ T5946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  145.192727][T11179] geneve2: entered promiscuous mode
[  145.194156][T11179] geneve2: entered allmulticast mode
[  145.215977][T11170] vcan0 speed is unknown, defaulting to 1000
[  145.219307][   T39] audit: type=1400 audit(1734100319.428:670): avc:  denied  { ioctl } for  pid=11175 comm="syz.1.1438" path="socket:[42912]" dev="sockfs" ino=42912 ioctlcmd=0x940d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  145.276902][T11189] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  145.279757][T11189] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  145.292812][T11189] overlayfs: failed to get uuid (333/file1, err=-13); falling back to uuid=null.
[  145.343786][T11170] chnl_net:caif_netlink_parms(): no params data found
[  145.345550][T11206] xt_TCPMSS: Only works on TCP SYN packets
[  145.430768][T11170] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.432767][T11170] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.435149][T11170] bridge_slave_0: entered allmulticast mode
[  145.437752][T11170] bridge_slave_0: entered promiscuous mode
[  145.441042][T11170] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.443452][T11207] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1445'.
[  145.443547][T11170] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.446418][T11207] netlink: 'syz.0.1445': attribute type 7 has an invalid length.
[  145.448627][T11170] bridge_slave_1: entered allmulticast mode
[  145.450718][T11207] netlink: 'syz.0.1445': attribute type 8 has an invalid length.
[  145.453382][T11170] bridge_slave_1: entered promiscuous mode
[  145.454582][T11207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1445'.
[  145.481211][T11170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.484899][T11170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.516418][T11170] team0: Port device team_slave_0 added
[  145.519477][T11170] team0: Port device team_slave_1 added
[  145.537116][T11170] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.538881][T11170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.539437][T11227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1448'.
[  145.546375][T11170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.551373][T11170] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.553402][T11170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.559512][T11170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.584306][T11170] hsr_slave_0: entered promiscuous mode
[  145.586370][T11170] hsr_slave_1: entered promiscuous mode
[  145.588491][T11170] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  145.590444][T11170] Cannot create hsr debugfs directory
[  145.594645][T11233] pim6reg1: entered promiscuous mode
[  145.596600][T11233] pim6reg1: entered allmulticast mode
[  145.713694][T11235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1450'.
[  145.765449][T11237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1451'.
[  145.804664][T11211] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  145.806776][T11211] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  145.908485][ T6785] Bluetooth: hci4: Frame reassembly failed (-84)
[  145.912539][   T39] audit: type=1400 audit(1734100320.128:671): avc:  denied  { create } for  pid=11244 comm="syz.1.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  145.918063][   T39] audit: type=1400 audit(1734100320.128:672): avc:  denied  { write } for  pid=11244 comm="syz.1.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  145.923856][T11245] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1455'.
[  145.926892][T11246] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1455'.
[  145.928055][   T39] audit: type=1400 audit(1734100320.128:673): avc:  denied  { nlmsg_write } for  pid=11244 comm="syz.1.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  146.018987][T11248] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  146.084842][ T1138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.142455][ T1325] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  146.164288][ T1138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.229568][T11259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1458'.
[  146.257043][T11261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61456 sclass=netlink_route_socket pid=11261 comm=syz.3.1459
[  146.261217][T11261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1459'.
[  146.286272][ T1138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.292392][ T1325] usb 5-1: Using ep0 maxpacket: 32
[  146.295748][ T1325] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  146.298800][ T1325] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  146.301853][ T1325] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  146.305590][ T1325] usb 5-1: config 1 has no interface number 0
[  146.307692][ T1325] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  146.309892][T11269] omfs: Invalid superblock (0)
[  146.311407][ T1325] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  146.317939][ T1325] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  146.321143][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.334169][ T1325] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  146.361215][   T39] audit: type=1400 audit(1734100320.568:674): avc:  denied  { map } for  pid=11277 comm="syz.3.1464" path="socket:[44130]" dev="sockfs" ino=44130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  146.381431][   T39] audit: type=1400 audit(1734100320.568:675): avc:  denied  { read } for  pid=11277 comm="syz.3.1464" path="socket:[44130]" dev="sockfs" ino=44130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  146.429952][ T1138] bridge_slave_1: left allmulticast mode
[  146.429968][ T1138] bridge_slave_1: left promiscuous mode
[  146.430668][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.433495][ T1138] bridge_slave_0: left allmulticast mode
[  146.433508][ T1138] bridge_slave_0: left promiscuous mode
[  146.433588][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.578816][T11285] can: request_module (can-proto-0) failed.
[  146.732019][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.736377][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.739782][ T1138] bond0 (unregistering): Released all slaves
[  146.904377][   T39] audit: type=1400 audit(1734100321.108:676): avc:  denied  { create } for  pid=11307 comm="syz.1.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  146.911514][   T39] audit: type=1400 audit(1734100321.118:677): avc:  denied  { connect } for  pid=11307 comm="syz.1.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  146.941377][T11312] QAT: Invalid ioctl -2110754303
[  147.006611][T11318] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.140712][ T1138] hsr_slave_0: left promiscuous mode
[  147.145421][ T1138] hsr_slave_1: left promiscuous mode
[  147.147684][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.149645][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.164765][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.167562][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.203981][ T1138] veth1_macvtap: left promiscuous mode
[  147.205431][ T1138] veth0_macvtap: left promiscuous mode
[  147.206832][ T1138] veth1_vlan: left promiscuous mode
[  147.208174][ T1138] veth0_vlan: left promiscuous mode
[  147.232417][ T5938] Bluetooth: hci3: command tx timeout
[  147.914271][ T1138] team0 (unregistering): Port device team_slave_1 removed
[  147.955224][ T5938] Bluetooth: hci4: command 0x1003 tx timeout
[  147.955302][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  148.008083][ T1138] team0 (unregistering): Port device team_slave_0 removed
[  148.652443][T11342] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  148.656647][T11342] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  148.661490][   T39] audit: type=1400 audit(1734100322.868:678): avc:  denied  { ioctl } for  pid=11344 comm="syz.3.1481" path="socket:[44382]" dev="sockfs" ino=44382 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  148.682726][T11170] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  148.692114][T11170] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  148.702084][T11170] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  148.715909][T11170] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  148.721429][   T39] audit: type=1400 audit(1734100322.938:679): avc:  denied  { listen } for  pid=11344 comm="syz.3.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  148.729939][   T39] audit: type=1400 audit(1734100322.938:680): avc:  denied  { ioctl } for  pid=11344 comm="syz.3.1481" path="socket:[45152]" dev="sockfs" ino=45152 ioctlcmd=0xf513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  148.749102][   T39] audit: type=1400 audit(1734100322.938:681): avc:  denied  { read } for  pid=11344 comm="syz.3.1481" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  148.760701][T11170] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.765443][   T39] audit: type=1400 audit(1734100322.938:682): avc:  denied  { open } for  pid=11344 comm="syz.3.1481" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  148.775824][   T39] audit: type=1400 audit(1734100322.938:683): avc:  denied  { ioctl } for  pid=11344 comm="syz.3.1481" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  148.777596][T11170] 8021q: adding VLAN 0 to HW filter on device team0
[  148.809016][ T6785] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.811506][ T6785] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.817585][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.819514][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.855009][T11170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  148.910403][ T1325] snd_usb_pod 5-1:1.1: set_interface failed
[  148.912054][ T1325] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  148.919362][ T1325] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71
[  148.923253][ T1325] usb 5-1: USB disconnect, device number 16
[  148.935614][T11170] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.051026][   T39] audit: type=1400 audit(1734100323.268:684): avc:  denied  { listen } for  pid=11390 comm="syz.0.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  149.059826][   T39] audit: type=1400 audit(1734100323.268:685): avc:  denied  { ioctl } for  pid=11390 comm="syz.0.1486" path="socket:[41842]" dev="sockfs" ino=41842 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  149.085302][T11170] veth0_vlan: entered promiscuous mode
[  149.097531][T11170] veth1_vlan: entered promiscuous mode
[  149.112438][    T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  149.115506][T11401] lo: entered allmulticast mode
[  149.121665][T11401] gre1: entered allmulticast mode
[  149.133139][T11170] veth0_macvtap: entered promiscuous mode
[  149.144529][T11170] veth1_macvtap: entered promiscuous mode
[  149.153153][T11170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.156810][T11170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.160300][T11170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.164348][T11170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.168421][T11170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.172007][T11170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.176663][T11170] batman_adv: batadv0: Interface activated: batadv_slave_0
[  149.183866][T11170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.187530][T11170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.190919][T11170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.194863][T11170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.198214][T11170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.201774][T11170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.206696][T11170] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.212210][T11170] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.215326][T11170] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.218356][T11170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.220963][T11170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.260450][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.262569][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.275029][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.277133][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.292396][    T9] usb 6-1: Using ep0 maxpacket: 32
[  149.295193][    T9] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  149.297419][    T9] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  149.299676][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  149.302046][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  149.305501][    T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  149.308383][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  149.311829][    T9] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  149.314885][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.320383][    T9] usb 6-1: config 0 descriptor??
[  149.424163][T11417] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 3327
[  149.425903][T11417] binder: 11416:11417 ioctl 4018620d 20000100 returned -1
[  149.476583][T11417] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 3327
[  149.478795][T11417] binder: 11416:11417 ioctl 4018620d 200001c0 returned -1
[  149.496571][T11417] syz.0.1492 (11417): drop_caches: 2
[  149.581249][    T9] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  149.585200][    T9] usb 6-1: USB disconnect, device number 9
[  149.587464][    T9] usblp0: removed
[  149.597873][ T7513] udevd[7513]: setting mode of /dev/usb/lp0 to 020660 failed: Read-only file system
[  149.601094][T11423] syzkaller0: entered promiscuous mode
[  149.601327][ T7513] udevd[7513]: setting owner of /dev/usb/lp0 to uid=0, gid=7 failed: Read-only file system
[  149.603332][T11423] syzkaller0: entered allmulticast mode
[  149.854968][T11431] ptm ptm0: ldisc open failed (-12), clearing slot 0
[  151.189919][T11450] __nla_validate_parse: 9 callbacks suppressed
[  151.189929][T11450] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1500'.
[  151.284199][T11463] tmpfs: Bad value for 'mpol'
[  151.342040][T11469] 
: renamed from bond0 (while UP)
[  151.461742][T11472] tipc: Enabled bearer <udp:syz2>, priority 10
[  151.516593][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.289047][T11479] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1507'.
[  152.293221][T11478] vcan0 speed is unknown, defaulting to 1000
[  152.397634][T11486] QAT: failed to copy from user.
[  152.431458][ T5938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  152.442654][ T5938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  152.446740][ T5938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  152.449968][ T5938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  152.455639][ T5938] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  152.459640][ T5938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  152.478419][   T39] kauditd_printk_skb: 8 callbacks suppressed
[  152.478430][   T39] audit: type=1400 audit(1734100326.688:694): avc:  denied  { ioctl } for  pid=11490 comm="syz.0.1511" path="socket:[45299]" dev="sockfs" ino=45299 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  152.486010][T11488] vcan0 speed is unknown, defaulting to 1000
[  152.508826][   T39] audit: type=1400 audit(1734100326.718:695): avc:  denied  { ioctl } for  pid=11492 comm="syz.1.1510" path="/dev/usbmon6" dev="devtmpfs" ino=756 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  152.600445][T11488] chnl_net:caif_netlink_parms(): no params data found
[  152.608223][T11508] netlink: 'syz.1.1513': attribute type 1 has an invalid length.
[  152.642363][   T39] audit: type=1400 audit(1734100326.848:696): avc:  denied  { append } for  pid=11498 comm="syz.0.1512" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  152.683856][T11488] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.685795][T11488] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.687736][T11488] bridge_slave_0: entered allmulticast mode
[  152.689790][T11488] bridge_slave_0: entered promiscuous mode
[  152.692749][T11488] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.694942][T11488] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.697086][T11488] bridge_slave_1: entered allmulticast mode
[  152.699457][T11488] bridge_slave_1: entered promiscuous mode
[  152.722961][T11518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1515'.
[  152.737773][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.763004][T11488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.766763][T11488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  152.805983][T11488] team0: Port device team_slave_0 added
[  152.808786][T11488] team0: Port device team_slave_1 added
[  152.831820][T11488] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.834930][T11488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.842196][T11488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.846353][T11488] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.848128][T11488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.854696][T11488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.877825][T11488] hsr_slave_0: entered promiscuous mode
[  152.879764][T11488] hsr_slave_1: entered promiscuous mode
[  152.881492][T11488] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  152.883443][T11488] Cannot create hsr debugfs directory
[  153.182511][   T25] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  153.319539][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.342396][   T25] usb 6-1: Using ep0 maxpacket: 32
[  153.346188][   T25] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  153.348245][   T25] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  153.350482][   T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  153.352710][   T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  153.355026][   T25] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  153.357320][   T25] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  153.360466][   T25] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  153.362715][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.366132][   T25] usb 6-1: config 0 descriptor??
[  153.387566][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.598803][   T12] bridge_slave_1: left allmulticast mode
[  153.600729][   T12] bridge_slave_1: left promiscuous mode
[  153.607069][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.611927][   T12] bridge_slave_0: left allmulticast mode
[  153.614152][   T12] bridge_slave_0: left promiscuous mode
[  153.616175][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.625717][T11526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1516'.
[  153.683812][   T25] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  153.689527][   T25] usb 6-1: USB disconnect, device number 10
[  153.695749][ T7513] udevd[7513]: setting mode of /dev/usb/lp0 to 020660 failed: Read-only file system
[  153.695844][   T25] usblp0: removed
[  153.698311][ T7513] udevd[7513]: setting owner of /dev/usb/lp0 to uid=0, gid=7 failed: Read-only file system
[  153.910512][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.915621][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.920022][   T12] bond0 (unregistering): Released all slaves
[  154.148763][T11549] netlink: 'syz.0.1520': attribute type 10 has an invalid length.
[  154.259420][T11558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=11558 comm=syz.0.1523
[  154.264787][T11558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1523'.
[  154.273186][T11558] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.330286][   T12] hsr_slave_0: left promiscuous mode
[  154.336913][   T12] hsr_slave_1: left promiscuous mode
[  154.339124][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.341094][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.349604][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.351462][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.377045][   T12] veth1_macvtap: left promiscuous mode
[  154.378506][   T12] veth0_macvtap: left promiscuous mode
[  154.379937][   T12] veth1_vlan: left promiscuous mode
[  154.381319][   T12] veth0_vlan: left promiscuous mode
[  154.513753][ T5946] Bluetooth: hci3: command tx timeout
[  155.143141][   T12] team0 (unregistering): Port device team_slave_1 removed
[  155.218514][   T12] team0 (unregistering): Port device team_slave_0 removed
[  155.771806][T11564] netlink: 'syz.0.1524': attribute type 15 has an invalid length.
[  155.775008][T11555] netlink: 'syz.3.1522': attribute type 6 has an invalid length.
[  155.813029][T11488] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  155.825245][T11488] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  155.833165][T11488] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  155.841320][T11488] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  155.842500][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  155.852491][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  155.866107][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  155.893183][T11488] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.902820][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  155.905040][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  155.907593][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  155.920136][T11488] 8021q: adding VLAN 0 to HW filter on device team0
[  155.935269][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.937136][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.952845][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.954784][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.981860][T11488] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  155.984771][T11488] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  156.067605][T11488] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.086157][T11600] netlink: 'syz.3.1530': attribute type 39 has an invalid length.
[  156.086547][T11591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.202487][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  156.204721][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  156.206937][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  156.233944][T11488] veth0_vlan: entered promiscuous mode
[  156.244129][T11488] veth1_vlan: entered promiscuous mode
[  156.249358][T11614] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1533'.
[  156.255277][T11488] veth0_macvtap: entered promiscuous mode
[  156.259587][T11488] veth1_macvtap: entered promiscuous mode
[  156.274726][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.277325][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.279735][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.282264][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.284765][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.287348][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.290224][T11488] batman_adv: batadv0: Interface activated: batadv_slave_0
[  156.292560][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  156.296626][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  156.299123][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.301409][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  156.304444][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.306925][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  156.309433][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.312383][T11488] batman_adv: batadv0: Interface activated: batadv_slave_1
[  156.316381][T11488] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.318648][T11488] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.320807][T11488] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.323459][T11488] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.374375][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.379259][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.398912][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.401904][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.569950][T11630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1537'.
[  156.682928][T11634] bridge2: the hash_elasticity option has been deprecated and is always 16
[  156.685120][T11634] bridge2: entered promiscuous mode
[  156.686434][T11634] bridge2: entered allmulticast mode
[  157.131903][   T39] audit: type=1400 audit(1734100331.338:697): avc:  denied  { listen } for  pid=11637 comm="syz.3.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  157.165688][T11642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1541'.
[  157.169460][T11642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1541'.
[  157.212196][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1542'.
[  157.221802][T11645] bridge0: port 1(erspan0) entered blocking state
[  157.223699][T11645] bridge0: port 1(erspan0) entered disabled state
[  157.225457][T11645] erspan0: entered allmulticast mode
[  157.227309][T11645] erspan0: entered promiscuous mode
[  157.237967][T11645] Bluetooth: hci3: Frame reassembly failed (-84)
[  157.246201][   T12] Bluetooth: hci3: Frame reassembly failed (-84)
[  157.712019][   T39] audit: type=1400 audit(1734100331.918:698): avc:  denied  { mounton } for  pid=11649 comm="syz.1.1544" path="/432/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1
[  157.762703][T11652] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1545'.
[  157.848266][T11657] openvswitch: netlink: VXLAN extension 0 has unexpected len 3 expected 0
[  157.969822][   T39] audit: type=1400 audit(1734100332.178:699): avc:  denied  { setattr } for  pid=11660 comm="syz.0.1549" name="SCTPv6" dev="sockfs" ino=45743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  157.970921][T11661] ipt_REJECT: TCP_RESET invalid for non-tcp
[  158.067185][   T39] audit: type=1400 audit(1734100332.278:700): avc:  denied  { append } for  pid=11666 comm="syz.0.1552" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  158.293592][   T39] audit: type=1400 audit(1734100332.508:701): avc:  denied  { setopt } for  pid=11669 comm="syz.1.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  158.585940][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1555'.
[  158.731571][T11689] ptm ptm2: ldisc open failed (-12), clearing slot 2
[  158.770264][   T45] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.773529][   T39] audit: type=1400 audit(1734100332.988:702): avc:  denied  { mounton } for  pid=11692 comm="syz.0.1558" path="/proc/1370/cgroup" dev="proc" ino=47243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  158.782696][T11693] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  158.785398][T11693] IPv6: NLM_F_CREATE should be set when creating new route
[  158.787966][T11693] IPv6: NLM_F_CREATE should be set when creating new route
[  158.791996][T11693] sit0: entered promiscuous mode
[  158.799100][T11693] netlink: 'syz.0.1558': attribute type 1 has an invalid length.
[  158.802018][T11693] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1558'.
[  159.312564][ T5938] Bluetooth: hci3: command 0x1003 tx timeout
[  159.312877][ T5946] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  159.733544][ T5938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  159.738162][ T5938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  159.741499][ T5938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  159.752823][ T5938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  159.754996][ T5938] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  159.756949][ T5938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  159.792043][T11709] bad cache= option: none

[  159.792043][T11709] 
[  159.792501][   T39] audit: type=1400 audit(1734100333.998:703): avc:  denied  { ioctl } for  pid=11708 comm="syz.3.1562" path="socket:[47262]" dev="sockfs" ino=47262 ioctlcmd=0x89e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  159.794495][T11709] CIFS: VFS: bad cache= option: none

[  159.810436][T11702] vcan0 speed is unknown, defaulting to 1000
[  159.923542][T11702] chnl_net:caif_netlink_parms(): no params data found
[  160.016390][T11702] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.018337][T11702] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.020252][T11702] bridge_slave_0: entered allmulticast mode
[  160.022272][T11702] bridge_slave_0: entered promiscuous mode
[  160.024872][T11702] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.026712][T11702] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.028652][T11702] bridge_slave_1: entered allmulticast mode
[  160.030792][T11702] bridge_slave_1: entered promiscuous mode
[  160.068905][T11702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.073917][T11702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  160.115627][   T39] audit: type=1400 audit(1734100334.328:704): avc:  denied  { watch watch_reads } for  pid=11743 comm="syz.3.1571" path="/375/file1" dev="autofs" ino=46718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1
[  160.130544][T11702] team0: Port device team_slave_0 added
[  160.134330][T11702] team0: Port device team_slave_1 added
[  160.160946][T11702] batman_adv: batadv0: Adding interface: batadv_slave_0
[  160.163704][T11702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.170335][T11702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  160.174039][T11702] batman_adv: batadv0: Adding interface: batadv_slave_1
[  160.175882][T11702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.182782][T11702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  160.208339][T11702] hsr_slave_0: entered promiscuous mode
[  160.210485][T11702] hsr_slave_1: entered promiscuous mode
[  160.212488][T11702] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  160.214497][T11702] Cannot create hsr debugfs directory
[  160.464847][T11749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1572'.
[  160.478292][   T45] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.588010][   T45] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.674207][   T45] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.691255][T11755] netlink: 'syz.0.1574': attribute type 10 has an invalid length.
[  160.695631][T11755] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.701012][T11755] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.704665][T11755] 
: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  160.782467][   T45] bridge_slave_1: left allmulticast mode
[  160.783974][   T45] bridge_slave_1: left promiscuous mode
[  160.786307][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.790950][   T45] bridge_slave_0: left allmulticast mode
[  160.792831][   T45] bridge_slave_0: left promiscuous mode
[  160.794345][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.817634][   T39] audit: type=1400 audit(1734100335.028:705): avc:  denied  { transfer } for  pid=11758 comm="syz.1.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  160.883531][   T39] audit: type=1400 audit(1734100335.098:706): avc:  denied  { setopt } for  pid=11754 comm="syz.0.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  160.926771][T11755] syz.0.1574 (11755): drop_caches: 1
[  160.976480][T11755] syz.0.1574 (11755): drop_caches: 1
[  161.065169][   T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  161.069083][   T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  161.072792][   T45] bond0 (unregistering): Released all slaves
[  161.112419][ T1325] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  161.163516][T11774] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1577'.
[  161.273234][ T1325] usb 6-1: Using ep0 maxpacket: 32
[  161.275877][ T1325] usb 6-1: config 4 has an invalid interface number: 8 but max is 0
[  161.277959][ T1325] usb 6-1: config 4 has no interface number 0
[  161.279568][ T1325] usb 6-1: config 4 interface 8 has no altsetting 0
[  161.283066][ T1325] usb 6-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65
[  161.285548][ T1325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.287712][ T1325] usb 6-1: Product: syz
[  161.288884][ T1325] usb 6-1: Manufacturer: syz
[  161.290100][ T1325] usb 6-1: SerialNumber: syz
[  161.302606][T11786] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  161.429908][   T45] hsr_slave_0: left promiscuous mode
[  161.431814][   T45] hsr_slave_1: left promiscuous mode
[  161.434669][   T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.436660][   T45] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.439607][   T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.442146][   T45] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.480341][   T45] veth1_macvtap: left promiscuous mode
[  161.481778][   T45] veth0_macvtap: left promiscuous mode
[  161.483478][   T45] veth1_vlan: left promiscuous mode
[  161.484883][   T45] veth0_vlan: left promiscuous mode
[  161.508451][ T1325] opticon 6-1:4.8: opticon converter detected
[  161.520345][ T1325] usb 6-1: opticon converter now attached to ttyUSB0
[  161.529581][ T1325] usb 6-1: USB disconnect, device number 11
[  161.546155][ T1325] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[  161.548406][ T1325] opticon 6-1:4.8: device disconnected
[  161.793806][ T5938] Bluetooth: hci3: command tx timeout
[  162.031704][T11828] afs: Unknown parameter 'afs'
[  162.267579][   T45] team0 (unregistering): Port device team_slave_1 removed
[  162.361452][   T45] team0 (unregistering): Port device team_slave_0 removed
[  163.049119][T11796] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.053025][T11798] tipc: Enabled bearer <eth:team0>, priority 0
[  163.169733][T11702] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  163.180575][T11702] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  163.185520][T11702] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  163.189221][T11702] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  163.227218][T11702] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.231699][   T39] audit: type=1400 audit(1734100337.438:707): avc:  denied  { map } for  pid=11857 comm="syz.3.1592" path="socket:[48486]" dev="sockfs" ino=48486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  163.232974][T11702] 8021q: adding VLAN 0 to HW filter on device team0
[  163.243695][   T39] audit: type=1400 audit(1734100337.438:708): avc:  denied  { accept } for  pid=11857 comm="syz.3.1592" path="socket:[48486]" dev="sockfs" ino=48486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  163.247035][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.255282][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.265666][T11863] syz.3.1594: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  163.271174][T11863] CPU: 3 UID: 0 PID: 11863 Comm: syz.3.1594 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  163.273997][T11863] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  163.274833][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.276773][T11863] Call Trace:
[  163.276781][T11863]  <TASK>
[  163.276786][T11863]  dump_stack_lvl+0x16c/0x1f0
[  163.279454][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.280244][T11863]  warn_alloc+0x24d/0x3a0
[  163.285541][T11863]  ? __pfx_warn_alloc+0x10/0x10
[  163.286838][T11863]  ? __get_vm_area_node+0x1b0/0x2f0
[  163.288204][T11863]  ? __get_vm_area_node+0x1dc/0x2f0
[  163.289565][T11863]  __vmalloc_node_range_noprof+0x1105/0x1530
[  163.291130][T11863]  ? xskq_create+0xfb/0x1d0
[  163.292347][T11863]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  163.294020][T11863]  ? xskq_create+0xfb/0x1d0
[  163.295227][T11863]  vmalloc_user_noprof+0x6b/0x90
[  163.296536][T11863]  ? xskq_create+0xfb/0x1d0
[  163.297739][T11863]  xskq_create+0xfb/0x1d0
[  163.298893][T11863]  xsk_setsockopt+0x757/0xa10
[  163.300123][T11863]  ? __pfx_xsk_setsockopt+0x10/0x10
[  163.301418][T11863]  ? selinux_socket_setsockopt+0x6a/0x80
[  163.302888][T11863]  ? __pfx_xsk_setsockopt+0x10/0x10
[  163.304274][T11863]  do_sock_setsockopt+0x222/0x480
[  163.305582][T11863]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  163.307011][T11863]  ? lock_acquire+0x2f/0xb0
[  163.308210][T11863]  __sys_setsockopt+0x1a0/0x230
[  163.309483][T11863]  __x64_sys_setsockopt+0xbd/0x160
[  163.310817][T11863]  ? do_syscall_64+0x91/0x250
[  163.312054][T11863]  ? lockdep_hardirqs_on+0x7c/0x110
[  163.313358][T11863]  do_syscall_64+0xcd/0x250
[  163.314555][T11863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.316096][T11863] RIP: 0033:0x7f99f4185d19
[  163.317266][T11863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.322216][T11863] RSP: 002b:00007f99f508b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  163.324306][T11863] RAX: ffffffffffffffda RBX: 00007f99f4375fa0 RCX: 00007f99f4185d19
[  163.326352][T11863] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003
[  163.328423][T11863] RBP: 00007f99f4201a20 R08: 0000000000000004 R09: 0000000000000000
[  163.330419][T11863] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000
[  163.332471][T11863] R13: 0000000000000000 R14: 00007f99f4375fa0 R15: 00007ffffb470978
[  163.334457][T11863]  </TASK>
[  163.343714][T11863] Mem-Info:
[  163.344606][T11863] active_anon:20188 inactive_anon:0 isolated_anon:0
[  163.344606][T11863]  active_file:10594 inactive_file:3421 isolated_file:0
[  163.344606][T11863]  unevictable:1768 dirty:105 writeback:0
[  163.344606][T11863]  slab_reclaimable:7148 slab_unreclaimable:78944
[  163.344606][T11863]  mapped:25289 shmem:2468 pagetables:1140
[  163.344606][T11863]  sec_pagetables:305 bounce:0
[  163.344606][T11863]  kernel_misc_reclaimable:0
[  163.344606][T11863]  free:480436 free_pcp:1850 free_cma:0
[  163.356373][T11860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  163.359009][T11863] Node 0 active_anon:80752kB inactive_anon:0kB active_file:42372kB inactive_file:13680kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:102396kB dirty:416kB writeback:0kB shmem:6336kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:13168kB pagetables:4560kB sec_pagetables:1220kB all_unreclaimable? no
[  163.367599][T11863] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  163.375486][T11863] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  163.382129][T11702] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.382640][T11863] lowmem_reserve[]: 0 1212 0 0 0
[  163.385499][T11863] Node 0 DMA32 free:314148kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB active_anon:80752kB inactive_anon:0kB active_file:42372kB inactive_file:13680kB unevictable:3536kB writepending:416kB present:2080628kB managed:1269912kB mlocked:0kB bounce:0kB free_pcp:5216kB local_pcp:2712kB free_cma:0kB
[  163.393348][T11863] lowmem_reserve[]: 0 0 0 0 0
[  163.394656][T11863] Node 1 Normal free:1593264kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:1400kB local_pcp:0kB free_cma:0kB
[  163.401996][T11863] lowmem_reserve[]: 0 0 0 0 0
[  163.403469][T11863] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  163.407237][T11863] Node 0 DMA32: 760*4kB (UME) 833*8kB (UME) 841*16kB (ME) 734*32kB (UME) 511*64kB (UME) 97*128kB (UME) 48*256kB (UE) 13*512kB (UME) 5*1024kB (ME) 7*2048kB (UME) 45*4096kB (M) = 314488kB
[  163.412258][T11863] Node 1 Normal: 2*4kB (E) 15*8kB (UME) 11*16kB (UME) 131*32kB (UME) 61*64kB (UME) 28*128kB (UME) 7*256kB (UE) 5*512kB (ME) 4*1024kB (UE) 4*2048kB (UME) 382*4096kB (UM) = 1593296kB
[  163.417095][T11863] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  163.419505][T11863] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  163.421885][T11863] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  163.424412][T11863] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  163.426690][T11863] 16482 total pagecache pages
[  163.427925][T11863] 0 pages in swap cache
[  163.429006][T11863] Free swap  = 124196kB
[  163.430086][T11863] Total swap = 124996kB
[  163.431164][T11863] 1048443 pages RAM
[  163.432177][T11863] 0 pages HighMem/MovableOnly
[  163.433476][T11863] 281644 pages reserved
[  163.434518][T11863] 0 pages cma reserved
[  163.462715][   T30] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  163.463975][T11879] gtp0: entered promiscuous mode
[  163.472133][T11879] netlink: 'syz.3.1595': attribute type 16 has an invalid length.
[  163.473961][T11702] veth0_vlan: entered promiscuous mode
[  163.476274][T11879] netlink: 'syz.3.1595': attribute type 3 has an invalid length.
[  163.478302][T11879] netlink: 'syz.3.1595': attribute type 1 has an invalid length.
[  163.480059][T11702] veth1_vlan: entered promiscuous mode
[  163.480359][T11879] netlink: 'syz.3.1595': attribute type 2 has an invalid length.
[  163.483991][T11879] netlink: 64022 bytes leftover after parsing attributes in process `syz.3.1595'.
[  163.491353][T11702] veth0_macvtap: entered promiscuous mode
[  163.494496][T11702] veth1_macvtap: entered promiscuous mode
[  163.500656][T11702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.503925][T11702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.506451][T11702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.509147][T11702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.512261][T11702] batman_adv: batadv0: Interface activated: batadv_slave_0
[  163.517637][T11702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.520475][T11702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.523310][T11702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.526032][T11702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.528568][T11702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.531306][T11702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.535054][T11702] batman_adv: batadv0: Interface activated: batadv_slave_1
[  163.538780][T11702] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.541085][T11702] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.543525][T11702] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.545802][T11702] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.579405][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.581490][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.601770][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.605043][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.622473][   T30] usb 5-1: Using ep0 maxpacket: 32
[  163.625396][   T30] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  163.627622][   T30] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  163.629941][   T30] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  163.633849][   T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  163.636612][   T30] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  163.639181][   T30] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  163.642824][   T30] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  163.645407][   T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.649597][   T30] usb 5-1: config 0 descriptor??
[  163.853709][   T30] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  163.866868][ T7513] udevd[7513]: setting mode of /dev/usb/lp0 to 020660 failed: Read-only file system
[  163.870247][ T7513] udevd[7513]: setting owner of /dev/usb/lp0 to uid=0, gid=7 failed: Read-only file system
[  164.106353][T11885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1590'.
[  164.141807][    C0] ------------[ cut here ]------------
[  164.144295][    C0] WARNING: CPU: 0 PID: 11889 at kernel/signal.c:2050 posixtimer_send_sigqueue+0xba8/0x1020
[  164.147706][    C0] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  164.149262][    C0] CPU: 0 UID: 0 PID: 11889 Comm: syz.1.1598 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  164.153911][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  164.157658][    C0] RIP: 0010:posixtimer_send_sigqueue+0xba8/0x1020
[  164.159929][    C0] Code: ff ff 4c 89 e7 e8 f8 fa 9d 00 e9 7e f8 ff ff 41 bf 02 00 00 00 e9 87 f8 ff ff 48 89 54 24 10 48 89 44 24 08 e8 99 40 3b 00 90 <0f> 0b 90 48 8d 7b 10 48 8b 44 24 08 48 b9 00 00 00 00 00 fc ff df
[  164.166630][    C0] RSP: 0018:ffffc90000007d50 EFLAGS: 00010046
[  164.168774][    C0] RAX: 0000000080010003 RBX: ffff888050ecab40 RCX: 1ffff1100a1d956b
[  164.171521][    C0] RDX: ffff8880266c2440 RSI: ffffffff815ec2e7 RDI: 0000000000000001
[  164.174322][    C0] RBP: ffff888023cb0000 R08: 0000000000000001 R09: 0000000000000000
[  164.177013][    C0] R10: 0000000000000001 R11: 0000000000000003 R12: ffff888050ecabe4
[  164.179664][    C0] R13: 1ffff92000000faf R14: ffff888050ecac18 R15: ffff888050ecac00
[  164.182364][    C0] FS:  00007f65a56dd6c0(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000
[  164.185571][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  164.187891][    C0] CR2: 00007f65a56dcf98 CR3: 0000000056a08000 CR4: 0000000000352ef0
[  164.190637][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  164.193146][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  164.195513][    C0] Call Trace:
[  164.196711][    C0]  <IRQ>
[  164.197705][    C0]  ? __warn+0xea/0x3c0
[  164.199255][    C0]  ? posixtimer_send_sigqueue+0xba8/0x1020
[  164.201330][    C0]  ? report_bug+0x3c0/0x580
[  164.202976][    C0]  ? handle_bug+0x54/0xa0
[  164.204517][    C0]  ? exc_invalid_op+0x17/0x50
[  164.206122][    C0]  ? asm_exc_invalid_op+0x1a/0x20
[  164.207630][    C0]  ? posixtimer_send_sigqueue+0xba7/0x1020
[  164.209151][    C0]  ? posixtimer_send_sigqueue+0xba8/0x1020
[  164.211058][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  164.212952][    C0]  ? __pfx_posixtimer_send_sigqueue+0x10/0x10
[  164.215089][    C0]  ? __pfx_posix_timer_fn+0x10/0x10
[  164.216832][    C0]  posix_timer_fn+0x31/0x60
[  164.218409][    C0]  __hrtimer_run_queues+0x20a/0xae0
[  164.220165][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  164.222167][    C0]  ? read_tsc+0x9/0x20
[  164.223612][    C0]  hrtimer_interrupt+0x392/0x8e0
[  164.224971][    C0]  __sysvec_apic_timer_interrupt+0x10f/0x400
[  164.227133][    C0]  sysvec_apic_timer_interrupt+0x9f/0xc0
[  164.229125][    C0]  </IRQ>
[  164.230159][    C0]  <TASK>
[  164.231214][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  164.233356][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  164.235674][    C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 03 4b f6 48 89 df e8 3e 83 4b f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 c5 78 3c f6 65 8b 05 96 33 d8 74 85 c0 74 16 5b
[  164.242406][    C0] RSP: 0018:ffffc900035afd58 EFLAGS: 00000246
[  164.244230][    C0] RAX: 0000000000000006 RBX: ffff888050ecab70 RCX: 1ffffffff20bda69
[  164.247039][    C0] RDX: 0000000000000000 RSI: ffffffff8b6cd860 RDI: ffffffff8bd1d340
[  164.249869][    C0] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000001
[  164.252285][    C0] R10: ffffffff905f1597 R11: 0000000000000002 R12: ffffc900035afe50
[  164.254966][    C0] R13: 0000000000000000 R14: 1ffff920006b5fb1 R15: dffffc0000000000
[  164.257316][    C0]  do_timer_settime+0x315/0x400
[  164.259074][    C0]  ? __pfx_common_timer_set+0x10/0x10
[  164.260990][    C0]  ? __pfx_do_timer_settime+0x10/0x10
[  164.262763][    C0]  ? __pfx_do_futex+0x10/0x10
[  164.264436][    C0]  __x64_sys_timer_settime+0x26a/0x2c0
[  164.266407][    C0]  ? __pfx___x64_sys_timer_settime+0x10/0x10
[  164.268568][    C0]  ? __pfx___x64_sys_futex+0x10/0x10
[  164.270376][    C0]  do_syscall_64+0xcd/0x250
[  164.271920][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.274057][    C0] RIP: 0033:0x7f65a4985d19
[  164.275502][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.281066][    C0] RSP: 002b:00007f65a56dd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df
[  164.283746][    C0] RAX: ffffffffffffffda RBX: 00007f65a4b76080 RCX: 00007f65a4985d19
[  164.286412][    C0] RDX: 0000000020040fe0 RSI: 0000000000000000 RDI: 0000000000000000
[  164.289183][    C0] RBP: 00007f65a4a01a20 R08: 0000000000000000 R09: 0000000000000000
[  164.291944][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.294732][    C0] R13: 0000000000000000 R14: 00007f65a4b76080 R15: 00007ffe7228d718
[  164.297691][    C0]  </TASK>
[  164.298834][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  164.301420][    C0] CPU: 0 UID: 0 PID: 11889 Comm: syz.1.1598 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  164.305146][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  164.308886][    C0] Call Trace:
[  164.310043][    C0]  <IRQ>
[  164.311092][    C0]  dump_stack_lvl+0x3d/0x1f0
[  164.312684][    C0]  panic+0x71d/0x800
[  164.314115][    C0]  ? __pfx_panic+0x10/0x10
[  164.315744][    C0]  ? show_trace_log_lvl+0x29d/0x3d0
[  164.317430][    C0]  ? check_panic_on_warn+0x1f/0xb0
[  164.319147][    C0]  ? posixtimer_send_sigqueue+0xba8/0x1020
[  164.321174][    C0]  check_panic_on_warn+0xab/0xb0
[  164.322957][    C0]  __warn+0xf6/0x3c0
[  164.324403][    C0]  ? posixtimer_send_sigqueue+0xba8/0x1020
[  164.326503][    C0]  report_bug+0x3c0/0x580
[  164.328082][    C0]  handle_bug+0x54/0xa0
[  164.329599][    C0]  exc_invalid_op+0x17/0x50
[  164.331229][    C0]  asm_exc_invalid_op+0x1a/0x20
[  164.332653][    C0] RIP: 0010:posixtimer_send_sigqueue+0xba8/0x1020
[  164.334751][    C0] Code: ff ff 4c 89 e7 e8 f8 fa 9d 00 e9 7e f8 ff ff 41 bf 02 00 00 00 e9 87 f8 ff ff 48 89 54 24 10 48 89 44 24 08 e8 99 40 3b 00 90 <0f> 0b 90 48 8d 7b 10 48 8b 44 24 08 48 b9 00 00 00 00 00 fc ff df
[  164.341517][    C0] RSP: 0018:ffffc90000007d50 EFLAGS: 00010046
[  164.343682][    C0] RAX: 0000000080010003 RBX: ffff888050ecab40 RCX: 1ffff1100a1d956b
[  164.345799][    C0] RDX: ffff8880266c2440 RSI: ffffffff815ec2e7 RDI: 0000000000000001
[  164.347810][    C0] RBP: ffff888023cb0000 R08: 0000000000000001 R09: 0000000000000000
[  164.349811][    C0] R10: 0000000000000001 R11: 0000000000000003 R12: ffff888050ecabe4
[  164.351724][    C0] R13: 1ffff92000000faf R14: ffff888050ecac18 R15: ffff888050ecac00
[  164.353724][    C0]  ? posixtimer_send_sigqueue+0xba7/0x1020
[  164.355239][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  164.356658][    C0]  ? __pfx_posixtimer_send_sigqueue+0x10/0x10
[  164.358244][    C0]  ? __pfx_posix_timer_fn+0x10/0x10
[  164.359609][    C0]  posix_timer_fn+0x31/0x60
[  164.360758][    C0]  __hrtimer_run_queues+0x20a/0xae0
[  164.362110][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  164.363584][    C0]  ? read_tsc+0x9/0x20
[  164.364675][    C0]  hrtimer_interrupt+0x392/0x8e0
[  164.365968][    C0]  __sysvec_apic_timer_interrupt+0x10f/0x400
[  164.367466][    C0]  sysvec_apic_timer_interrupt+0x9f/0xc0
[  164.368922][    C0]  </IRQ>
[  164.369659][    C0]  <TASK>
[  164.370405][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  164.371966][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  164.373650][    C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 03 4b f6 48 89 df e8 3e 83 4b f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 c5 78 3c f6 65 8b 05 96 33 d8 74 85 c0 74 16 5b
[  164.378614][    C0] RSP: 0018:ffffc900035afd58 EFLAGS: 00000246
[  164.380142][    C0] RAX: 0000000000000006 RBX: ffff888050ecab70 RCX: 1ffffffff20bda69
[  164.382131][    C0] RDX: 0000000000000000 RSI: ffffffff8b6cd860 RDI: ffffffff8bd1d340
[  164.384131][    C0] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000001
[  164.386160][    C0] R10: ffffffff905f1597 R11: 0000000000000002 R12: ffffc900035afe50
[  164.388189][    C0] R13: 0000000000000000 R14: 1ffff920006b5fb1 R15: dffffc0000000000
[  164.390227][    C0]  do_timer_settime+0x315/0x400
[  164.391488][    C0]  ? __pfx_common_timer_set+0x10/0x10
[  164.392873][    C0]  ? __pfx_do_timer_settime+0x10/0x10
[  164.394267][    C0]  ? __pfx_do_futex+0x10/0x10
[  164.395490][    C0]  __x64_sys_timer_settime+0x26a/0x2c0
[  164.396909][    C0]  ? __pfx___x64_sys_timer_settime+0x10/0x10
[  164.398465][    C0]  ? __pfx___x64_sys_futex+0x10/0x10
[  164.399830][    C0]  do_syscall_64+0xcd/0x250
[  164.401018][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.402537][    C0] RIP: 0033:0x7f65a4985d19
[  164.403808][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.408684][    C0] RSP: 002b:00007f65a56dd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df
[  164.410836][    C0] RAX: ffffffffffffffda RBX: 00007f65a4b76080 RCX: 00007f65a4985d19
[  164.412904][    C0] RDX: 0000000020040fe0 RSI: 0000000000000000 RDI: 0000000000000000
[  164.414862][    C0] RBP: 00007f65a4a01a20 R08: 0000000000000000 R09: 0000000000000000
[  164.416872][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.418841][    C0] R13: 0000000000000000 R14: 00007f65a4b76080 R15: 00007ffe7228d718
[  164.420888][    C0]  </TASK>
[  165.482273][    C0] Shutting down cpus with NMI
[  165.484201][    C0] Kernel Offset: disabled
[  165.485468][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:28:01  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff851b98a5 RDI=ffffffff9ab0ac20 RBP=ffffffff9ab0abe0 RSP=ffffc900000076b8
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000007
R12=0000000000000000 R13=0000000000000020 R14=ffffffff851b9840 R15=0000000000000000
RIP=ffffffff851b98cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f65a56dd6c0 ffffffff 00c00000
GS =0000 ffff88806a600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f65a56dcf98 CR3=0000000056a08000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a4a029b2
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a4a029bf
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a4a029b9
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a4a029cd
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a4a02a53
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a4a02b31
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a4b4b488 00007f65a4b4b480 00007f65a4b4b478 00007f65a4b4b450
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a56ad100 00007f65a4b4b440 00007f65a4b4b458 00007f65a4b4b4a0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a4b4b498 00007f65a4b4b490 00007f65a4b4b488 00007f65a4b4b480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ae1d45acc32dbe05 871a16b3e2d030dd 5647386a31b42dad 8749fb26b370bf0f
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 36bda6c3447b8eaf 547ded3635cd5f2d 197055997ab4eef3 cc83bae1e98f53dd
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8f241275199f7e47 f901d5f61a0e9116 cadb594930b961ee 167abaedd573239b
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7a937f1627cfce6e 2234d91c98af4fb6 80b6bd68213d381d 885b97b0adb0d782
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff8880236453d8 RCX=0000000000000003 RDX=0000000000000002
RSI=ffff8880236453d8 RDI=ffff8880236453d8 RBP=ffffc90003fbf5b8 RSP=ffffc90003fbf478
R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff96e4ccc7 R11=0000000000000003
R12=ffff888023644880 R13=0000000000000200 R14=0000000000000009 R15=1ffff920007f7e96
RIP=ffffffff8175c150 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f45d60a7d60 CR3=0000000032fd4000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45d554b6a3 00007f45d554b6a3
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4c688ac0 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555593ff60f0
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555593ff942a 0000555593ff88c0
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a4d00300100001a4 c00302100001a4b0 0301981000029003 0002000590030804
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01048080100001a4 8004010000000806 0601478e40a28080 080001a4e0030010
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001a4d003001000 01a4c00302100001 a4b0030198100002 9003000200059003
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080400058c030a04 000588030c020005 800302040004fc03 0a040004f8030402
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004f0030a040004 ec030a040004e803 1ffffffd98048800 04e0030010b88084
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff814899ee RDX=ffff888027870000
RSI=ffffffff81489a0b RDI=0000000000000000 RBP=ffff888027632500 RSP=ffffc9000426fc10
R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000000
R12=0000000000000003 R13=0000000000000003 R14=ffff88806a83fb00 R15=ffffed1004ec64a0
RIP=ffffffff81489a0c RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555c2b3500 ffffffff 00c00000
GS =0000 ffff88806a800000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f65a27d5d58 CR3=0000000056a08000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a27d59a0 00007f65a27d59a0
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a4a029b2
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a4a029bf
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a4a029b9
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a4a029cd
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a4a02a53
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a4a02b31
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a4b4b488 00007f65a4b4b480 00007f65a4b4b478 00007f65a4b4b450
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a56ad100 00007f65a4b4b440 00007f65a4b4b458 00007f65a4b4b4a0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a4b4b498 00007f65a4b4b490 00007f65a4b4b488 00007f65a4b4b480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ae1d45acc32dbe05 871a16b3e2d030dd 5647386a31b42dad 8749fb26b370bf0f
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 36bda6c3447b8eaf 547ded3635cd5f2d 197055997ab4eef3 cc83bae1e98f53dd
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8f241275199f7e47 f901d5f61a0e9116 cadb594930b961ee 167abaedd573239b
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7a937f1627cfce6e 2234d91c98af4fb6 80b6bd68213d381d 885b97b0adb0d782
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=00000000001788e3 RBX=0000000000000003 RCX=ffffffff8b292679 RDX=0000000000000000
RSI=ffffffff8b6cd860 RDI=ffffffff8bd1d340 RBP=ffffed1003ad4488 RSP=ffffc900001a7e08
R8 =0000000000000001 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000
R12=0000000000000003 R13=ffff88801d6a2440 R14=ffffffff905f1590 R15=0000000000000000
RIP=ffffffff8b293a5f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a900000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f65a4b77bac CR3=0000000056a08000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a4a029b2
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a4a029bf
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a4a029b9
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a4a029cd
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a4a02a53
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a4a02b31
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a4b4b488 00007f65a4b4b480 00007f65a4b4b478 00007f65a4b4b450
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a56ad100 00007f65a4b4b440 00007f65a4b4b458 00007f65a4b4b4a0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65a4b4b498 00007f65a4b4b490 00007f65a4b4b488 00007f65a4b4b480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000