last executing test programs:

13m25.093973917s ago: executing program 32 (id=24):
r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0)
timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="a109a81b133d", 0x0, 0x0, 0x10012, 0x1, 0x0})

12m35.438177627s ago: executing program 33 (id=1038):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x5, 0x2, 0xff, 0x8, 0x4, 0x9, 0x8, 0x8, 0x7, 0x0, 0xff, 0x1, 0x6, 0x7}, 0xe)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
close(0x3)

11m30.471580015s ago: executing program 34 (id=1560):
r0 = epoll_create1(0x80000)
r1 = syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000500)={0xa0002005})

11m20.913996316s ago: executing program 35 (id=1712):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0xee00)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20100, 0x44)

11m0.978016339s ago: executing program 36 (id=2122):
r0 = creat(&(0x7f0000000180)='./file0\x00', 0xa)
close(r0)
r1 = timerfd_create(0x0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
timerfd_settime(r1, 0x1, &(0x7f0000000380)={{}, {0x0, 0x3938700}}, 0x0)

9m30.88728743s ago: executing program 37 (id=3615):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x181881, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f0000000640)={0xa, 0x0, [{0x2, 0x0, 0x2, 0xfff, 0xe80, 0x9, 0xffff}, {0x0, 0x3, 0x0, 0x40, 0x6, 0xb6a, 0x6}, {0xb, 0x800001, 0x1, 0x6, 0x6d, 0x8}, {0xc0000000, 0x64, 0x7, 0x2, 0x9, 0x4, 0x800}, {0x80000001, 0x4, 0x2, 0x7, 0x0, 0x8, 0x1}, {0x6, 0xb, 0x2, 0x9, 0x1, 0x6, 0x7}, {0xd, 0x5, 0x0, 0x3, 0x6, 0x1}, {0x10000000f, 0x0, 0x3, 0xd0, 0x1, 0x8, 0x3}, {0xc0000000, 0x400202, 0x6, 0x9d6, 0x6, 0x9, 0xe7}, {0x6, 0x4, 0x0, 0xa, 0x800, 0x0, 0x34000000}]})

9m26.561467903s ago: executing program 38 (id=3679):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x10, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
ppoll(&(0x7f0000000140)=[{r0, 0x4000}], 0x1, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000240)='./file0\x00', 0x3)

8m55.669378713s ago: executing program 39 (id=4408):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x3, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

8m25.619134143s ago: executing program 40 (id=4548):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x60, r1, 0xd55319eec59dfa33, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x68}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x64}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x60}, 0x1, 0x0, 0x0, 0x4040480}, 0x800)

7m50.789206911s ago: executing program 1 (id=5355):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0)
r1 = socket(0x15, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040))

7m50.722573763s ago: executing program 1 (id=5358):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x50)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)

7m50.662834368s ago: executing program 1 (id=5361):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)

7m49.797664685s ago: executing program 1 (id=5377):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

7m49.643538437s ago: executing program 1 (id=5380):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0x1, 0x10300, 0x0, 0x179}, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0)=0x2, 0x4)

7m48.62001989s ago: executing program 1 (id=5402):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x98})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

7m48.542000159s ago: executing program 41 (id=5402):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x98})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

5m19.078707789s ago: executing program 8 (id=7883):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xfffffffffffffffd, {0x5, 0x1, 0x3, 0x8000009, 0xffff, 0x80, {0x1, 0x80000000000, 0x1, 0xb, 0x3ff, 0xdbf, 0x10, 0x0, 0x80, 0x8000, 0x2, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)

5m18.713230077s ago: executing program 8 (id=7885):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0)

5m17.460402751s ago: executing program 8 (id=7894):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_80211_join_ibss(&(0x7f00000002c0)='wlan1\x00', 0x0, 0x0, 0x0)

5m17.354497087s ago: executing program 8 (id=7899):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

5m17.312526268s ago: executing program 8 (id=7900):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x101000, 0x17f)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = fanotify_init(0xf00, 0x0)
fanotify_mark(r2, 0x105, 0x5000003a, r1, 0x0)
lchown(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0)

5m16.343404348s ago: executing program 8 (id=7913):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x1cb842, 0x104)
io_setup(0x20fe, &(0x7f0000000540)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x500, 0x600}])

5m16.268043466s ago: executing program 42 (id=7913):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x1cb842, 0x104)
io_setup(0x20fe, &(0x7f0000000540)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x500, 0x600}])

4m46.973549031s ago: executing program 5 (id=8435):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000540)={@local, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1})

4m46.934634744s ago: executing program 5 (id=8436):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r1 = inotify_init1(0x800)
inotify_add_watch(r1, &(0x7f0000005780)='./file0\x00', 0x9400002f)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x3)
umount2(&(0x7f0000000000)='./file0\x00', 0x2)

4m46.902149329s ago: executing program 5 (id=8438):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
r3 = eventfd2(0x8, 0x1)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r3, 0x4})
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

4m46.767302254s ago: executing program 5 (id=8439):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000003c0)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
close(0xffffffffffffffff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000180)='K', 0x1}], 0x2}}], 0x1, 0x4400c800)
sendto$inet6(r0, &(0x7f0000000300), 0x48, 0x3b00, 0x0, 0xfffffffffffffdfd)

4m46.703764314s ago: executing program 5 (id=8440):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}])

4m46.518222899s ago: executing program 5 (id=8444):
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x805}, @void, @x25={0x0, 0x0, 0x1, "0b11"}}, 0x9)

4m31.182301638s ago: executing program 43 (id=8444):
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x805}, @void, @x25={0x0, 0x0, 0x1, "0b11"}}, 0x9)

4m27.847589881s ago: executing program 4 (id=8645):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000)
set_mempolicy(0x8001, &(0x7f0000000040)=0x9, 0xd2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x2, 0x1, 0x1, 0x0, 0x7})
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000002c0)=0x1)
close_range(r0, r0, 0x0)

4m27.45496491s ago: executing program 4 (id=8651):
r0 = socket(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0xc804, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}])
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4)

4m27.316534427s ago: executing program 4 (id=8654):
r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0)
clock_gettime(0x0, &(0x7f0000000000))
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040))
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000214010026bd7000fbdbdf2508000100020000000900020073797a320000000004ba72262ef0cf450191da47edab6f21777c7e3b9512565298525a860ca1b4a8e6bcf609bce3a865"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4850)

4m27.307367088s ago: executing program 4 (id=8656):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00')

4m27.175364093s ago: executing program 4 (id=8658):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x80002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
r1 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x2d, 0x3, 0x0, 0x0, {{0x7, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x4, 0x5}, {0x5, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880)

4m26.6637807s ago: executing program 4 (id=8665):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000dc0)=@newtaction={0x214, 0x30, 0xa20, 0x70bd26, 0x25dfdbfd, {}, [{0x200, 0x1, [@m_ipt={0x118, 0x3, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x5, 'mangle\x00', 0xa, 0xe3b}}]}, {0xc1, 0x6, "b45c3e50999e0ff8b7cd267bd965c50b99594ae946a060b65c67ba37c0725f48dfc5713acdb126ac4fea463fdc8a72f0d8febaebccde90bfc89a2328790a2e1f3e4a8ec650f40dd2685113c4394824707942abe9ad835a1f6128ba736e738d0124901995773000610ee900ae766d905ff4cba66c2cb8027195714c33e2b2dd00a1ac21a0136f9dce38751e61106037d11a50f191c9c43e9712bac48b8926c40a45232fe7f5551fe5e22a68ccbe72dc6cef4f6eba13919d8b37efe0ce2e"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ipt={0xb8, 0x7, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0xb16d, 'security\x00', 0x3, 0x8}}]}, {0x61, 0x6, "3d0155179af52c218360f63b587b119bad958e13fdbef37483f1f2edf990373f1d7af2b17f247597099a981c0d86da1867e12c5be84d558a41eeaa0b3557e239bac0e1583360beff1ca128be336489bdfc2a0e7d3aed52c86121b03ee2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x2c, 0x18, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x214}}, 0x44045)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0x20}], 0x5}, 0xb}], 0x2, 0x10, 0x0)

4m26.558372984s ago: executing program 44 (id=8665):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000dc0)=@newtaction={0x214, 0x30, 0xa20, 0x70bd26, 0x25dfdbfd, {}, [{0x200, 0x1, [@m_ipt={0x118, 0x3, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x5, 'mangle\x00', 0xa, 0xe3b}}]}, {0xc1, 0x6, "b45c3e50999e0ff8b7cd267bd965c50b99594ae946a060b65c67ba37c0725f48dfc5713acdb126ac4fea463fdc8a72f0d8febaebccde90bfc89a2328790a2e1f3e4a8ec650f40dd2685113c4394824707942abe9ad835a1f6128ba736e738d0124901995773000610ee900ae766d905ff4cba66c2cb8027195714c33e2b2dd00a1ac21a0136f9dce38751e61106037d11a50f191c9c43e9712bac48b8926c40a45232fe7f5551fe5e22a68ccbe72dc6cef4f6eba13919d8b37efe0ce2e"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ipt={0xb8, 0x7, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0xb16d, 'security\x00', 0x3, 0x8}}]}, {0x61, 0x6, "3d0155179af52c218360f63b587b119bad958e13fdbef37483f1f2edf990373f1d7af2b17f247597099a981c0d86da1867e12c5be84d558a41eeaa0b3557e239bac0e1583360beff1ca128be336489bdfc2a0e7d3aed52c86121b03ee2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x2c, 0x18, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x214}}, 0x44045)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0x20}], 0x5}, 0xb}], 0x2, 0x10, 0x0)

4m6.831049964s ago: executing program 6 (id=8834):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff)
r1 = openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.time\x00', 0x0, 0x0)

4m6.725103314s ago: executing program 6 (id=8835):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x138, 0x16, 0x633, 0x70bd27, 0x80000000, {{@in=@multicast2, @in6=@mcast2, 0x4e23, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x33}, {@in=@multicast2, 0x4d2, 0x32}, @in6=@loopback, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3}, {0x5, 0x5, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0x8, 0x4, 0x18}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)

4m6.219332784s ago: executing program 6 (id=8843):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005880)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x4000000)

4m5.463941117s ago: executing program 6 (id=8849):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff)

4m5.37053988s ago: executing program 6 (id=8850):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x1f6, 0x4)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x7f, 0x4f)
recvmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b39ff, 0x0)

4m5.076699575s ago: executing program 6 (id=8859):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffffdf}]}, 0x38}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xfff3, 0xffff}, {0x5, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)

4m4.924675768s ago: executing program 45 (id=8859):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffffdf}]}, 0x38}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xfff3, 0xffff}, {0x5, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)

2m27.422241514s ago: executing program 3 (id=10095):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000040000924211ec000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002c00)=@delchain={0x40, 0x2c, 0xf31, 0x0, 0x25dbdbfe, {0x0, 0x0, 0x0, r4, {0x4}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x10}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008854}, 0x4008004)

2m27.27291325s ago: executing program 3 (id=10098):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x2, 0x801)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r2, 0x2})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffffff, 0x6, 0x608d, 0x2, 0x7fffffff, 0xfffffffffffffffd, 0x26, 0x7, 0x0, 0xfffffffffffffff9, 0x2, 0xfff, 0xd, 0x2, 0x0, 0x1], 0x80a0000, 0x1144})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m26.267747467s ago: executing program 3 (id=10100):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000400)={<r2=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0)

2m25.15998941s ago: executing program 3 (id=10117):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000180)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x40049366, 0x0)

2m25.114376369s ago: executing program 3 (id=10118):
mkdir(&(0x7f00000001c0)='./file1\x00', 0xb)
mkdir(&(0x7f0000000000)='./file0\x00', 0xb0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43)
chdir(&(0x7f00000003c0)='./bus\x00')
unlink(&(0x7f0000000140)='./file0\x00')
mkdirat(r0, &(0x7f0000000340)='./file0\x00', 0xf3)
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x80, 0x0)

2m24.910538732s ago: executing program 3 (id=10120):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10002, 0x2d72, r0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace(0x8, r1)
waitid(0x1, r1, 0x0, 0x4, 0x0)

2m24.748332815s ago: executing program 46 (id=10120):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10002, 0x2d72, r0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace(0x8, r1)
waitid(0x1, r1, 0x0, 0x4, 0x0)

3.754517103s ago: executing program 0 (id=11702):
openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x5, 0x9, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x866, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
mkdir(0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

2.970304291s ago: executing program 0 (id=11712):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000}], 0xa0000)

2.808634326s ago: executing program 0 (id=11714):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x4f}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
write$rfkill(0xffffffffffffffff, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1})
io_uring_enter(r1, 0x1ffc, 0x9a81, 0x80, 0x0, 0x0)
write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc)
write$vga_arbiter(r0, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd)

2.192711354s ago: executing program 2 (id=11718):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)
socket(0xa, 0x3, 0x3a)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x100)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000080)={r3, @in6={{0xa, 0x3, 0x4, @private2}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x1}, 0x8)

2.138503543s ago: executing program 2 (id=11720):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', r1, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xd81, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x0)
r3 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000380)={0x8})
quotactl_fd$Q_SYNC(r3, 0xffffffff80000101, 0x0, 0x0)

2.013012867s ago: executing program 2 (id=11721):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r2=>0x0})
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000040)=r2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003})
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'vxcan1\x00', 0x2})

2.011169281s ago: executing program 2 (id=11729):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
sendmmsg(r1, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1}}], 0x1, 0xc015)

1.939306374s ago: executing program 0 (id=11722):
openat$comedi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.939142174s ago: executing program 2 (id=11723):
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20008000)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x1}, 0x1c)

1.9061186s ago: executing program 7 (id=11724):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000fc0)={0x4, 0x1, 0x7000, 0x1000, &(0x7f0000264000/0x1000)=nil})
prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000803000/0x3000)=nil)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000040), 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)
recvmmsg(r1, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002160, 0x0)

1.82894008s ago: executing program 7 (id=11725):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]})
r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x0)
fchdir(r2)
r3 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@generic={&(0x7f0000000540)='./file1\x00', r4}, 0x18)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r3, 0x1, 0xa)
fchdir(r5)
close_range(r0, 0xffffffffffffffff, 0x0)

1.815951495s ago: executing program 9 (id=11726):
syz_open_dev$vim2m(0x0, 0x1f7ff6, 0x2)
socket$nl_crypto(0x10, 0x3, 0x15)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})
mprotect(&(0x7f0000456000/0x3000)=nil, 0x3000, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.733861291s ago: executing program 7 (id=11727):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x83, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001)
readv(r1, &(0x7f0000000540)=[{&(0x7f0000000180)=""/234, 0xea}], 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

1.67309293s ago: executing program 9 (id=11728):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x2000007, 0x0, 0x0, 0x83})
r1 = syz_open_pts(r0, 0x400)
dup3(r1, r0, 0x80000)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xac0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/llc/core\x00')
fchdir(r2)
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x80000006)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8601, 0x0)

1.672799691s ago: executing program 9 (id=11730):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240408a0}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

1.563027208s ago: executing program 9 (id=11731):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000200)=0x7)
syz_usb_disconnect(0xffffffffffffffff)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

1.005311173s ago: executing program 0 (id=11732):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1c0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000840)}, 0x5}], 0x1, 0x40010000, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000440)={@private=0xa010100, @loopback, @multicast1}, 0xc)
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0xffffff4e)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

995.87917ms ago: executing program 2 (id=11733):
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x10000, 0x0)
fcntl$lock(r1, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
futimesat(r0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)

176.432184ms ago: executing program 9 (id=11734):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
syz_emit_ethernet(0x87a2f, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='reno', 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendto$inet(r0, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0)

172.436211ms ago: executing program 7 (id=11742):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
read(r0, &(0x7f0000000900), 0x100)
read(r0, &(0x7f0000000b00), 0x100)
read(r0, &(0x7f0000000d00), 0x100)
read(r0, &(0x7f0000000f00), 0x100)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)="010000000705810240000007058102000200", 0x12)
write(r0, &(0x7f0000000a00), 0x0)
write(r1, &(0x7f0000000800)='AAAA', 0x4)

89.458323ms ago: executing program 7 (id=11735):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000380)={0x73622a85, 0x100})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0x2020)

80.846063ms ago: executing program 9 (id=11736):
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r3, 0xa)

260.4µs ago: executing program 7 (id=11737):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r5=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=<r6=>0x0)
r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)
unshare(0x20000400)
syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1460, 0x400, 0x3, 0xb2}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x181c, 0x0, 0x2, 0x2ad, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x1, 0x9, 0x102, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x102c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e84, 0x1000, 0x2, 0x21b, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x1, 0x48a, 0x0, 0x0}}, 0x0)

0s ago: executing program 0 (id=11738):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys_mnt\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys_mnt/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys_mnt/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0)
write(r2, &(0x7f0000000300)='1', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys_mnt/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0)
write(r3, &(0x7f0000000300)='1', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_mnt/bus/pci/rescan\x00', 0x801, 0x0)
write(r4, &(0x7f0000000300)='1', 0x1)

kernel console output (not intermixed with test programs):

0:50:50
[  734.201692][T26564] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  734.211128][T26564] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  734.218558][T26564] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  734.222421][T26564] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  734.741049][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  734.808320][ T1526] fuse: fd is not a fuse device
[  735.208949][   T42] audit: type=1326 audit(1785494419.289:21306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1544 comm="syz.2.10169" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x0
[  735.585158][ T1570] netlink: 'syz.9.10178': attribute type 13 has an invalid length.
[  735.781043][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  735.783143][ T5758] Bluetooth: hci2: command tx timeout
[  735.855716][ T1587] tunl0: left promiscuous mode
[  735.857873][ T1587] gre0: left promiscuous mode
[  735.859769][ T1587] gretap0: left promiscuous mode
[  735.862500][ T1587] erspan0: left promiscuous mode
[  735.866640][ T1587] ip_vti0: left promiscuous mode
[  735.868565][ T1587] ip6_vti0: left promiscuous mode
[  735.870348][ T1587] sit0: left promiscuous mode
[  735.875975][ T1587] ip6tnl0: left promiscuous mode
[  735.877839][ T1587] ip6gre0: left promiscuous mode
[  735.879509][ T1587] syz_tun: left promiscuous mode
[  735.881528][ T1587] ip6gretap0: left promiscuous mode
[  735.883340][ T1587] dummy0: left promiscuous mode
[  735.885247][ T1587] nlmon0: left promiscuous mode
[  735.886881][ T1587] batadv0: left promiscuous mode
[  735.888788][ T1587] veth1: left promiscuous mode
[  735.890556][ T1587] wg0: left promiscuous mode
[  735.892694][ T1587] wg1: left promiscuous mode
[  735.894254][ T1587] wg2: left promiscuous mode
[  735.895800][ T1587] veth0_to_bridge: left promiscuous mode
[  735.897674][ T1587] bridge_slave_0: left promiscuous mode
[  735.899667][ T1587] veth0_to_bond: left promiscuous mode
[  735.901992][ T1587] bond_slave_0: left promiscuous mode
[  735.903728][ T1587] veth1_to_bond: left promiscuous mode
[  735.905643][ T1587] bond_slave_1: left promiscuous mode
[  735.907653][ T1587] veth0_to_team: left promiscuous mode
[  735.909538][ T1587] team_slave_0: left promiscuous mode
[  735.913450][ T1587] veth1_to_team: left promiscuous mode
[  735.915919][ T1587] team_slave_1: left promiscuous mode
[  735.918051][ T1587] veth0_to_batadv: left promiscuous mode
[  735.920400][ T1587] batadv_slave_0: left promiscuous mode
[  735.923415][ T1587] veth1_to_batadv: left promiscuous mode
[  735.925861][ T1587] batadv_slave_1: left promiscuous mode
[  735.928152][ T1587] xfrm0: left promiscuous mode
[  735.930163][ T1587] veth0_to_hsr: left promiscuous mode
[  735.932378][ T1587] hsr_slave_0: left promiscuous mode
[  735.934271][ T1587] veth1_virt_wifi: left promiscuous mode
[  735.936558][ T1587] veth0_virt_wifi: left promiscuous mode
[  735.938391][ T1587] virt_wifi0: left promiscuous mode
[  735.940312][ T1587] vlan0: left promiscuous mode
[  735.943053][ T1587] macvlan0: left promiscuous mode
[  735.945404][ T1587] macvlan1: left promiscuous mode
[  735.947622][ T1587] ipvlan0: left promiscuous mode
[  735.949566][ T1587] ipvlan1: left promiscuous mode
[  735.952439][ T1587] macvtap0: left promiscuous mode
[  735.954654][ T1587] macsec0: left promiscuous mode
[  735.956470][ T1587] geneve0: left promiscuous mode
[  735.958221][ T1587] geneve1: left promiscuous mode
[  735.959928][ T1587] mac80211_hwsim hwsim16 wlan0: left promiscuous mode
[  735.962485][ T1587] mac80211_hwsim hwsim17 wlan1: left promiscuous mode
[  735.964938][ T1587] vxlan0: left promiscuous mode
[  735.966716][ T1587] mac80211_hwsim hwsim18 wlan2: left promiscuous mode
[  735.969025][ T1587] vxlan1: left promiscuous mode
[  735.970651][ T1587] ip6erspan0: left promiscuous mode
[  735.972887][ T1587] bond1: left promiscuous mode
[  735.974496][ T1587] vcan1: left promiscuous mode
[  735.976174][ T1587] vxlan2: left promiscuous mode
[  735.978024][ T1587] @: left promiscuous mode
[  735.979649][ T1587] netdevsim netdevsim7 eth0: left promiscuous mode
[  735.982905][ T1587] netdevsim netdevsim7 eth1: left promiscuous mode
[  735.986656][ T1587] netdevsim netdevsim7 eth2: left promiscuous mode
[  735.989561][ T1587] netdevsim netdevsim7 eth3: left promiscuous mode
[  735.993144][ T1587] xfrm1: left promiscuous mode
[  735.995213][ T1587] vti60: left promiscuous mode
[  735.997157][ T1587] mac80211_hwsim hwsim38 wlan3: left promiscuous mode
[  735.999925][ T1587] ipip0: left promiscuous mode
[  736.002160][ T1587] ip6tnl1: left promiscuous mode
[  736.004158][ T1587] bond2: left promiscuous mode
[  736.005817][ T1587] sit1: left promiscuous mode
[  736.007422][ T1587] ipip1: left promiscuous mode
[  736.009011][ T1587] bond3: left promiscuous mode
[  736.010712][ T1587] bridge1: left promiscuous mode
[  736.018553][ T1587] ipip2: left promiscuous mode
[  736.020234][ T1587] sit2: left promiscuous mode
[  736.022289][ T1587] sit3: left promiscuous mode
[  736.023888][ T1587] sit4: left promiscuous mode
[  736.026171][ T1587] bond4: left promiscuous mode
[  736.027730][ T1587] bond5: left promiscuous mode
[  736.029376][ T1587] lo: left promiscuous mode
[  736.031630][ T1587] sit5: left promiscuous mode
[  736.033323][ T1587] ip6tnl2: left promiscuous mode
[  736.035127][ T1587] bond7: left promiscuous mode
[  736.036790][ T1587] geneve2: left promiscuous mode
[  736.038454][ T1587] ipip3: left promiscuous mode
[  736.040180][ T1587] ip6gre1: left promiscuous mode
[  736.042594][ T1587] bond8: left promiscuous mode
[  736.044727][ T1587] bridge2: left promiscuous mode
[  736.046418][ T1587] gtp0: left promiscuous mode
[  736.048040][ T1587] bond9: left promiscuous mode
[  736.049652][ T1587] vti0: left promiscuous mode
[  736.051672][ T1587] bridge3: left promiscuous mode
[  736.053264][ T1587] gtp1: left promiscuous mode
[  736.054914][ T1587] bond10: left promiscuous mode
[  736.056584][ T1587] gretap1: left promiscuous mode
[  736.058241][ T1587] gtp2: left promiscuous mode
[  736.059708][ T1587] bond11: left promiscuous mode
[  736.061788][ T1587] gre1: left promiscuous mode
[  736.063376][ T1587] bond12: left promiscuous mode
[  736.065240][ T1587] gretap2: left allmulticast mode
[  736.066895][ T1587] bond14: left promiscuous mode
[  736.069170][ T1587] bond15: left promiscuous mode
[  736.070720][ T1587] bridge4: left promiscuous mode
[  736.773608][ T1602] fuse: fd is not a fuse device
[  736.821023][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  737.824473][ T1621] netlink: 'syz.2.10195': attribute type 1 has an invalid length.
[  737.840414][ T1621] 8021q: adding VLAN 0 to HW filter on device bond12
[  737.850267][ T1621] bond12: (slave syz_tun): Enslaving as a backup interface with an up link
[  737.862869][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  737.869036][ T5850] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  737.871827][ T5758] Bluetooth: hci2: command tx timeout
[  737.897593][ T1662] overlayfs: failed to clone lowerpath
[  737.906314][ T1662] overlayfs: failed to clone lowerpath
[  737.950232][ T1665] UBIFS error (pid: 1665): cannot open "ubi0_0", error -19
[  738.031200][ T5850] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  738.125030][   T42] audit: type=1800 audit(1785494422.209:21307): pid=1658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.10194" name="cgroup.controllers" dev="tmpfs" ino=49 res=0 errno=0
[  738.270559][ T1715] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10210'.
[  738.273563][ T1715] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10210'.
[  738.312748][ T1721] fuse: fd is not a fuse device
[  738.457713][  T845] IPVS: starting estimator thread 0...
[  738.541450][ T1735] IPVS: using max 30 ests per chain, 72000 per kthread
[  738.595212][ T1743] fuse: fd is not a fuse device
[  738.631725][ T1745] netlink: 'syz.9.10221': attribute type 1 has an invalid length.
[  738.647914][ T1745] 8021q: adding VLAN 0 to HW filter on device bond5
[  738.708774][ T1745] bond5: (slave veth9): Enslaving as a backup interface with a down link
[  738.782299][ T1745] dummy0: left promiscuous mode
[  738.789595][ T1745] bond5: (slave dummy0): Enslaving as a backup interface with an up link
[  738.804408][ T1745] netlink: 'syz.9.10221': attribute type 10 has an invalid length.
[  738.807026][ T1745] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10221'.
[  738.810330][ T1745] dummy0: entered promiscuous mode
[  738.813524][ T1745] bond5: (slave dummy0): Releasing backup interface
[  738.901435][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  739.169478][ T1849] overlayfs: failed to clone upperpath
[  739.202876][ T1851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10226'.
[  739.233775][ T1851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10226'.
[  739.922687][ T1862] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10229'.
[  739.941130][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  740.614816][ T1901] bond5: (slave lo): Releasing active interface
[  740.617591][ T1901] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  740.631456][ T1901] bond6: left allmulticast mode
[  740.633530][ T1901] bond6: left promiscuous mode
[  740.635433][ T1901] bridge0: port 1(bond6) entered disabled state
[  740.641722][ T1901] bond7: (slave geneve2): Releasing active interface
[  740.647100][ T1901] bond8: (slave bridge2): Releasing active interface
[  740.651253][ T1901] bond9: (slave vti0): Releasing backup interface
[  740.655296][ T1901] bond10: (slave gretap1): Releasing active interface
[  740.659106][ T1901] bond11: (slave gre1): Releasing backup interface
[  740.663686][ T1901] bond13: (slave gretap2): Releasing active interface
[  740.667832][ T1901] bond15: (slave bridge4): Releasing backup interface
[  740.672097][ T1901] batman_adv: batadv0: Removing interface: gretap3
[  740.676673][ T1901] bond16: (slave gretap4): Releasing active interface
[  740.721481][T10624] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  740.797961][ T1901] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10239'.
[  740.882774][T10624] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  740.889198][T10624] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00
[  740.893943][T10624] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.897216][T10624] usb 5-1: Product: syz
[  740.898972][T10624] usb 5-1: Manufacturer: syz
[  740.901365][T10624] usb 5-1: SerialNumber: syz
[  740.907150][T10624] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected
[  740.909642][T10624] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 87
[  740.912259][T10624] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7
[  740.915737][T10624] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81
[  740.918180][T10624] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 82
[  740.920776][T10624] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1
[  740.923276][T10624] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2
[  740.925712][T10624] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 85
[  740.928376][T10624] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 5
[  740.931723][T10624] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  740.936313][T10624] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 83
[  740.939066][T10624] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84
[  740.942030][T10624] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 3
[  740.945011][T10624] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 4
[  740.948046][T10624] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 86
[  740.951394][T10624] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6
[  740.956615][T10624] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  740.981031][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  741.157337][ T1920] netlink: 'syz.9.10241': attribute type 1 has an invalid length.
[  741.217264][T10624] usb 5-1: USB disconnect, device number 10
[  741.223650][ T1920] 8021q: adding VLAN 0 to HW filter on device bond6
[  741.225302][T10624] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  741.234050][T10624] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  741.242910][T10624] keyspan 5-1:1.0: device disconnected
[  741.306820][ T1956] bond6: (slave veth11): Enslaving as an active interface with a down link
[  741.321336][ T1920] dummy0: left promiscuous mode
[  741.334688][ T1920] bond6: (slave dummy0): making interface the new active one
[  741.352441][ T1920] dummy0: entered promiscuous mode
[  741.362102][ T1920] bond6: (slave dummy0): Enslaving as an active interface with an up link
[  741.468006][ T1920] bond6 (unregistering): (slave veth11): Releasing active interface
[  741.473039][ T2038] fuse: fd is not a fuse device
[  741.479154][ T1920] bond6 (unregistering): (slave dummy0): Releasing active interface
[  741.485899][ T1920] bond6 (unregistering): Released all slaves
[  741.753644][ T2076] fuse: fd is not a fuse device
[  742.007431][ T2103] netlink: 'syz.7.10256': attribute type 1 has an invalid length.
[  742.007485][ T2099] fuse: fd is not a fuse device
[  742.021027][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  742.031373][ T2103] 8021q: adding VLAN 0 to HW filter on device bond20
[  742.084148][ T2103] bond20: (slave veth17): Enslaving as an active interface with a down link
[  742.129374][ T2206] fuse: fd is not a fuse device
[  742.134624][ T2103] bond20: (slave dummy0): making interface the new active one
[  742.137774][ T2103] dummy0: entered promiscuous mode
[  742.139742][ T2103] bond20: (slave dummy0): Enslaving as an active interface with an up link
[  742.159997][ T2103] bond20 (unregistering): (slave veth17): Releasing active interface
[  742.170700][ T2103] bond20 (unregistering): (slave dummy0): Releasing active interface
[  742.179340][ T2103] bond20 (unregistering): Released all slaves
[  742.839503][ T2253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10262'.
[  742.888238][ T2265] netlink: 'syz.7.10265': attribute type 1 has an invalid length.
[  742.922185][ T2265] 8021q: adding VLAN 0 to HW filter on device bond20
[  743.061055][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  743.062894][ T2312] netlink: 'syz.7.10277': attribute type 1 has an invalid length.
[  743.100198][ T2312] 8021q: adding VLAN 0 to HW filter on device bond21
[  743.167006][ T2350] netlink: 64 bytes leftover after parsing attributes in process `syz.9.10270'.
[  743.215951][ T2312] bond21: (slave geneve3): making interface the new active one
[  743.219746][ T2312] bond21: (slave geneve3): Enslaving as an active interface with an up link
[  743.231460][T26564] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  743.323157][T23255] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  743.329096][T23255] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  743.334782][T23255] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  743.440782][ T2378] overlayfs: failed to clone upperpath
[  743.450670][ T2380] netlink: 'syz.7.10280': attribute type 13 has an invalid length.
[  743.551210][ T2384] IPv6: sit6: Disabled Multicast RS
[  743.698693][ T2392] netlink: 'syz.7.10284': attribute type 1 has an invalid length.
[  743.720447][ T2392] 8021q: adding VLAN 0 to HW filter on device bond22
[  743.808715][ T2392] bond22: (slave veth19): Enslaving as a backup interface with a down link
[  743.816974][ T2473] bond22: (slave dummy0): Enslaving as a backup interface with an up link
[  743.874246][ T2392] netlink: 'syz.7.10284': attribute type 10 has an invalid length.
[  743.877175][ T2392] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10284'.
[  743.881884][T26564] bond22: (slave dummy0): link status up again after 0 ms
[  743.887672][T26564] bond22: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  743.895334][ T2392] bond22: (slave dummy0): Removing an active aggregator
[  743.898828][ T2392] bond22: (slave dummy0): Releasing backup interface
[  744.101219][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  744.557249][ T2492] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3687100835 (7374201670 ns) > initial count (4634846402 ns). Using initial count to start timer.
[  744.572864][ T2492] kvm: pic: non byte read
[  744.578519][ T2492] kvm: pic: level sensitive irq not supported
[  744.578825][ T2492] kvm: pic: non byte read
[  744.585462][ T2492] kvm: pic: level sensitive irq not supported
[  744.585739][ T2492] kvm: pic: non byte read
[  744.591626][ T2492] kvm: pic: level sensitive irq not supported
[  744.591868][ T2492] kvm: pic: non byte read
[  744.597283][ T2492] kvm: pic: level sensitive irq not supported
[  744.597531][ T2492] kvm: pic: non byte read
[  744.603851][ T2492] kvm: pic: level sensitive irq not supported
[  744.604085][ T2492] kvm: pic: non byte read
[  744.608744][ T2492] kvm: pic: level sensitive irq not supported
[  744.608982][ T2492] kvm: pic: non byte read
[  744.656483][ T2505] netlink: 'syz.2.10292': attribute type 13 has an invalid length.
[  744.882694][ T2524] fuse: fd is not a fuse device
[  745.151020][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  745.763082][ T2545] fuse: fd is not a fuse device
[  745.818227][ T2548] fuse: fd is not a fuse device
[  745.845222][ T2554] netlink: 'syz.0.10299': attribute type 1 has an invalid length.
[  745.872635][ T2552] bond12: (slave syz_tun): Removing an active aggregator
[  745.885474][ T2552] bond12: (slave syz_tun): Releasing backup interface
[  745.982341][ T2554] netlink: 'syz.0.10299': attribute type 10 has an invalid length.
[  745.995471][ T2554] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10299'.
[  745.999662][ T2554] dummy0: entered promiscuous mode
[  746.193717][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  746.315487][ T2674] validate_nla: 1 callbacks suppressed
[  746.315500][ T2674] netlink: 'syz.7.10313': attribute type 1 has an invalid length.
[  746.340356][ T2674] 8021q: adding VLAN 0 to HW filter on device bond23
[  746.915605][ T1443] ieee802154 phy1 wpan1: encryption failed: -22
[  747.221042][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  747.365002][ T2779] fuse: fd is not a fuse device
[  747.407137][ T2781] netlink: 'syz.2.10326': attribute type 13 has an invalid length.
[  747.643872][ T2789] fuse: fd is not a fuse device
[  748.271035][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  749.301060][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  750.351074][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  750.367481][ T2805] fuse: fd is not a fuse device
[  750.418400][ T2817] lo: left promiscuous mode
[  750.420057][ T2817] tunl0: left promiscuous mode
[  750.421974][ T2817] gre0: left promiscuous mode
[  750.424176][ T2817] 0ªî{X¹¦: left allmulticast mode
[  750.428160][ T2817] erspan0: left promiscuous mode
[  750.429828][ T2817] ip_vti0: left promiscuous mode
[  750.432554][ T2817] ip6_vti0: left promiscuous mode
[  750.434259][ T2817] sit0: left promiscuous mode
[  750.435941][ T2817] ip6tnl0: left promiscuous mode
[  750.437765][ T2817] ip6gre0: left promiscuous mode
[  750.442398][ T2817] team0: left promiscuous mode
[  750.444870][ T2817] 
: left promiscuous mode
[  750.446808][ T2817] nlmon0: left promiscuous mode
[  750.448997][ T2817] batadv0: left promiscuous mode
[  750.451508][ T2817] veth0: left promiscuous mode
[  750.453513][ T2817] veth1: left promiscuous mode
[  750.455638][ T2817] wg0: left promiscuous mode
[  750.457686][ T2817] wg1: left promiscuous mode
[  750.460220][ T2817] veth1_to_bridge: left promiscuous mode
[  750.463048][ T2817] veth0_to_bond: left promiscuous mode
[  750.465269][ T2817] bond_slave_0: left promiscuous mode
[  750.467334][ T2817] veth1_to_bond: left promiscuous mode
[  750.469776][ T2817] bond_slave_1: left promiscuous mode
[  750.474456][ T2817] veth0_to_team: left promiscuous mode
[  750.476918][ T2817] team_slave_0: left promiscuous mode
[  750.479965][ T2817] veth1_to_team: left promiscuous mode
[  750.483037][ T2817] team_slave_1: left promiscuous mode
[  750.486016][ T2817] veth0_to_batadv: left promiscuous mode
[  750.488560][ T2821] netlink: 'syz.9.10337': attribute type 13 has an invalid length.
[  750.491706][ T2817] batadv_slave_0: left promiscuous mode
[  750.493790][ T2817] veth1_to_batadv: left promiscuous mode
[  750.495782][ T2817] batadv_slave_1: left promiscuous mode
[  750.497714][ T2817] xfrm0: left promiscuous mode
[  750.499368][ T2817] veth0_to_hsr: left promiscuous mode
[  750.501804][ T2817] hsr0: left promiscuous mode
[  750.503466][ T2817] veth1_virt_wifi: left promiscuous mode
[  750.505429][ T2817] veth0_virt_wifi: left promiscuous mode
[  750.507348][ T2817] virt_wifi0: left promiscuous mode
[  750.509331][ T2817] vlan0: left promiscuous mode
[  750.512105][ T2817] vlan1: left promiscuous mode
[  750.513864][ T2817] macvlan0: left promiscuous mode
[  750.515586][ T2817] macvlan1: left promiscuous mode
[  750.517335][ T2817] ipvlan0: left promiscuous mode
[  750.519361][ T2817] ipvlan1: left promiscuous mode
[  750.521508][ T2817] macvtap0: left promiscuous mode
[  750.523573][ T2817] macsec0: left promiscuous mode
[  750.525329][ T2817] geneve0: left promiscuous mode
[  750.527049][ T2817] geneve1: left promiscuous mode
[  750.528782][ T2817] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  750.531946][ T2817] netdevsim netdevsim2 netdevsim1: left promiscuous mode
[  750.534498][ T2817] netdevsim netdevsim2 netdevsim2: left promiscuous mode
[  750.536840][ T2817] netdevsim netdevsim2 netdevsim3: left promiscuous mode
[  750.539075][ T2817] mac80211_hwsim hwsim33 wlan0: left promiscuous mode
[  750.542371][ T2817] mac80211_hwsim hwsim37 wlan2: left promiscuous mode
[  750.545735][ T2817] erspan1: left promiscuous mode
[  750.547451][ T2817] gtp0: left promiscuous mode
[  750.549109][ T2817] sit1: left promiscuous mode
[  750.550748][ T2817] gre1: left promiscuous mode
[  750.554239][ T2817] bond1: left promiscuous mode
[  750.556069][ T2817] veth2: left promiscuous mode
[  750.557718][ T2817] veth3: left promiscuous mode
[  750.559377][ T2817] ip6tnl1: left promiscuous mode
[  750.561912][ T2817] bond2: left promiscuous mode
[  750.572251][ T2817] geneve2: left promiscuous mode
[  750.574019][ T2817] bond3: left promiscuous mode
[  750.575912][ T2817] @: left promiscuous mode
[  750.577746][ T2817] sit2: left promiscuous mode
[  750.579426][ T2817] ip6erspan0: left promiscuous mode
[  750.582284][ T2817] sit3: left promiscuous mode
[  750.584058][ T2817] sit4: left promiscuous mode
[  750.585981][ T2817] ipip0: left promiscuous mode
[  750.587861][ T2817] vlan2: left promiscuous mode
[  750.589647][ T2817] bridge_slave_0: left promiscuous mode
[  750.593221][ T2817] ipvlan2: left promiscuous mode
[  750.596683][ T2817] ip6gre1: left promiscuous mode
[  750.598397][ T2817] ieee802154 phy0 wpan3: left promiscuous mode
[  750.600465][ T2817] ieee802154 phy0 wpan0: left promiscuous mode
[  750.603017][ T2817] gtp1: left promiscuous mode
[  750.604735][ T2817] bond5: left promiscuous mode
[  750.606459][ T2817] gre2: left promiscuous mode
[  750.608073][ T2817] bond6: left promiscuous mode
[  750.609719][ T2817] ip6tnl2: left promiscuous mode
[  750.613068][ T2817] hsr1: left promiscuous mode
[  750.614875][ T2817] bond7: left promiscuous mode
[  750.616639][ T2817] gretap1: left promiscuous mode
[  750.618383][ T2817] bond8: left promiscuous mode
[  750.620126][ T2817] ipip1: left promiscuous mode
[  750.622225][ T2817] gtp2: left promiscuous mode
[  750.633472][ T2817] bond9: left promiscuous mode
[  750.635073][ T2817] bridge4: left promiscuous mode
[  750.691501][T26564] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  750.695375][T26564] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  750.701582][T26564] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  750.711009][T26564] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  750.756774][ T2838] overlayfs: failed to clone upperpath
[  751.381072][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  751.750715][ T2874] fuse: fd is not a fuse device
[  751.894461][ T2878] bridge0: port 2(bridge_slave_1) entered disabled state
[  751.897839][ T2878] bridge0: port 1(bridge_slave_0) entered disabled state
[  751.917140][ T2878] dummy0: left promiscuous mode
[  752.036774][ T2878] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  752.053449][ T2878] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  752.240204][ T2891] tipc: Started in network mode
[  752.242005][ T2891] tipc: Node identity 4, cluster identity 4711
[  752.249806][ T2891] tipc: Node number set to 4
[  752.261134][ T5850] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  752.267159][ T5850] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  752.276027][ T5850] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  752.286626][ T5850] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  752.354915][ T5758] Bluetooth: hci0: unexpected event for opcode 0x1003
[  752.421053][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  752.613446][ T2924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10368'.
[  752.967874][ T5758] Bluetooth: hci3: unexpected event for opcode 0x1004
[  753.013549][ T5758] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  753.019790][ T5758] CPU: 0 UID: 0 PID: 5758 Comm: kworker/u34:7 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  753.019821][ T5758] Tainted: [L]=SOFTLOCKUP
[  753.019829][ T5758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  753.019841][ T5758] Workqueue: hci2 hci_rx_work
[  753.019870][ T5758] Call Trace:
[  753.019878][ T5758]  <TASK>
[  753.019886][ T5758]  dump_stack_lvl+0x100/0x190
[  753.019915][ T5758]  sysfs_warn_dup.cold+0x1c/0x28
[  753.019944][ T5758]  sysfs_create_dir_ns+0x24b/0x2b0
[  753.019971][ T5758]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  753.019994][ T5758]  ? find_held_lock+0x2b/0x80
[  753.020016][ T5758]  ? kobject_add_internal+0x25f/0x930
[  753.020043][ T5758]  ? kobject_add_internal+0x25f/0x930
[  753.020071][ T5758]  ? do_raw_spin_unlock+0x145/0x1e0
[  753.020093][ T5758]  kobject_add_internal+0x2c8/0x930
[  753.020123][ T5758]  kobject_add+0x16a/0x1e0
[  753.020149][ T5758]  ? __pfx_kobject_add+0x10/0x10
[  753.020174][ T5758]  ? class_to_subsys+0x10f/0x150
[  753.020198][ T5758]  ? kobject_put+0xb9/0x640
[  753.020220][ T5758]  ? _raw_spin_unlock+0x28/0x50
[  753.020247][ T5758]  device_add+0x294/0x1970
[  753.020273][ T5758]  ? __pfx_dev_set_name+0x10/0x10
[  753.020289][ T5758]  ? __pfx_device_add+0x10/0x10
[  753.020315][ T5758]  ? mgmt_send_event_skb+0x2fb/0x460
[  753.020342][ T5758]  hci_conn_add_sysfs+0x1a3/0x260
[  753.020364][ T5758]  le_conn_complete_evt+0x11eb/0x1f60
[  753.020391][ T5758]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  753.020409][ T5758]  ? hci_event_packet+0x186/0xcd0
[  753.020431][ T5758]  hci_le_conn_complete_evt+0x23c/0x3a0
[  753.020447][ T5758]  ? skb_pull_data+0x15f/0x1e0
[  753.020467][ T5758]  hci_le_meta_evt+0x34a/0x5f0
[  753.020487][ T5758]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  753.020505][ T5758]  hci_event_packet+0x51c/0xcd0
[  753.020530][ T5758]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  753.020549][ T5758]  ? __pfx_hci_event_packet+0x10/0x10
[  753.020567][ T5758]  ? kcov_remote_start+0x384/0x670
[  753.020586][ T5758]  ? lockdep_hardirqs_on+0x78/0x100
[  753.020607][ T5758]  hci_rx_work+0x451/0xfc0
[  753.020626][ T5758]  process_one_work+0xa23/0x1940
[  753.020654][ T5758]  ? __pfx_process_one_work+0x10/0x10
[  753.020678][ T5758]  ? __pfx_hci_rx_work+0x10/0x10
[  753.020695][ T5758]  worker_thread+0x5ef/0xe50
[  753.020721][ T5758]  ? kthread+0x13a/0x450
[  753.020737][ T5758]  ? __pfx_worker_thread+0x10/0x10
[  753.020754][ T5758]  kthread+0x370/0x450
[  753.020770][ T5758]  ? __pfx_kthread+0x10/0x10
[  753.020789][ T5758]  ret_from_fork+0x72b/0xd50
[  753.020807][ T5758]  ? __pfx_ret_from_fork+0x10/0x10
[  753.020824][ T5758]  ? __switch_to+0x800/0x10f0
[  753.020846][ T5758]  ? __pfx_kthread+0x10/0x10
[  753.020864][ T5758]  ret_from_fork_asm+0x1a/0x30
[  753.020893][ T5758]  </TASK>
[  753.028612][ T2949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10372'.
[  753.030368][ T5758] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  753.119156][ T5758] Bluetooth: hci2: failed to register connection device
[  753.226327][ T2969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10378'.
[  753.461116][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  753.525909][ T2999] netlink: 'syz.7.10385': attribute type 19 has an invalid length.
[  753.907071][ T3040] fuse: fd is not a fuse device
[  754.233035][ T3045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10397'.
[  754.237382][ T3045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10397'.
[  754.501097][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  754.783140][ T3070] fuse: fd is not a fuse device
[  754.858512][ T3074] netlink: 'syz.2.10407': attribute type 1 has an invalid length.
[  754.902252][ T3074] 8021q: adding VLAN 0 to HW filter on device bond13
[  755.077704][ T3128] fuse: fd is not a fuse device
[  755.132672][ T3132] fuse: fd is not a fuse device
[  755.527864][   T42] audit: type=1804 audit(1785494439.609:21308): pid=3148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.10420" name="file0" dev="tmpfs" ino=14356 res=1 errno=0
[  755.541143][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  756.421185][ T5758] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  756.432435][ T5758] Bluetooth: hci0: Injecting HCI hardware error event
[  756.443233][T31127] Bluetooth: hci0: hardware error 0x00
[  756.591095][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  756.690627][ T3180] fuse: fd is not a fuse device
[  756.930141][ T3194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10434'.
[  756.998408][ T5758] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  757.009395][ T5758] Bluetooth: hci3: Injecting HCI hardware error event
[  757.024110][ T5752] Bluetooth: hci3: hardware error 0x00
[  757.621024][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  758.121640][ T3238] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  758.201041][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  758.373172][    T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  758.376954][    T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  758.381480][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  758.385379][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  758.389963][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  758.396735][    T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  758.400579][    T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  758.404028][    T9] usb 5-1: Product: syz
[  758.406008][    T9] usb 5-1: Manufacturer: syz
[  758.415390][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  758.417858][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  758.427314][    T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  758.429990][    T9] cdc_wdm 5-1:1.0: Unknown control protocol
[  758.497280][ T3259] overlayfs: failed to clone upperpath
[  758.503034][ T3259] overlayfs: failed to clone lowerpath
[  758.515813][T31127] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  758.671096][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  758.731182][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  758.732737][T12819] usb 5-1: USB disconnect, device number 11
[  758.733308][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  758.737155][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  759.066409][ T5752] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  759.532027][ T3290] overlayfs: failed to clone upperpath
[  759.628501][ T3303] fuse: fd is not a fuse device
[  759.664429][ T3302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10464'.
[  759.711079][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  759.716062][ T3313] fuse: fd is not a fuse device
[  759.744474][ T3316] fuse: fd is not a fuse device
[  760.167177][ T3346] netlink: 'syz.2.10475': attribute type 39 has an invalid length.
[  760.743945][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  760.881721][ T3378] fuse: fd is not a fuse device
[  760.968279][ T3391] fuse: fd is not a fuse device
[  761.020600][ T3397] fuse: fd is not a fuse device
[  761.672669][ T3433] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10495'.
[  761.708423][ T3437] overlayfs: failed to clone upperpath
[  761.781094][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  762.597035][ T3467] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10505'.
[  762.636383][ T3393] Set syz1 is full, maxelem 65536 reached
[  762.821065][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  763.861067][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  764.147284][ T3499] fuse: fd is not a fuse device
[  764.236727][ T3506] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  764.242983][ T3506] overlayfs: failed to set xattr on upper
[  764.246827][ T3506] overlayfs: ...falling back to redirect_dir=nofollow.
[  764.250396][ T3506] overlayfs: ...falling back to index=off.
[  764.254573][ T3506] overlayfs: ...falling back to uuid=null.
[  764.257195][ T3508] fuse: fd is not a fuse device
[  764.262767][ T3506] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only
[  764.265846][ T3506] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  764.269336][ T3506] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null.
[  764.304663][ T3510] netlink: 'syz.0.10525': attribute type 3 has an invalid length.
[  764.307573][ T3510] netlink: 'syz.0.10525': attribute type 3 has an invalid length.
[  764.900620][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  765.504868][ T3534] xhci_hcd 0000:00:1f.0: init 0000:00:1f.0 fail, -16
[  765.509982][ T3534] xhci_hcd 0000:00:1f.0: probe with driver xhci_hcd failed with error -16
[  765.877567][   T42] audit: type=1326 audit(1786018737.962:21309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3552 comm="syz.0.10538" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x0
[  765.950060][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  765.996054][ T3558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10540'.
[  766.071911][ T3562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10542'.
[  766.088359][ T3562] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10542'.
[  766.092087][ T3562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10542'.
[  766.979629][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  767.171659][ T3601] fuse: fd is not a fuse device
[  767.637082][ T3623] 0: reclassify loop, rule prio 0, protocol 03
[  767.897780][ T3633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10565'.
[  768.008448][ T3641] overlayfs: failed to clone upperpath
[  768.019021][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  768.180489][   T42] audit: type=1804 audit(1786018740.273:21310): pid=3652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.10571" name="file0" dev="tmpfs" ino=14561 res=1 errno=0
[  768.180811][ T3652] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -32012, delta: 1
[  768.193628][ T3652] ref_ctr increment failed for inode: 0x38e1 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888024e2bfc0
[  768.202864][ T3651] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -32012, delta: -1
[  768.207609][ T3651] ref_ctr decrement failed for inode: 0x38e1 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888024e2bfc0
[  768.211104][ T3651] uprobe: syz.7.10571:3651 failed to unregister, leaking uprobe
[  768.236295][ T3649] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  768.739445][T10624] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  768.894563][T10624] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  768.900670][T10624] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  768.908610][T10624] usb 5-1: Product: syz
[  768.909918][T10624] usb 5-1: Manufacturer: syz
[  768.911823][T10624] usb 5-1: SerialNumber: syz
[  768.915509][T10624] usb 5-1: config 0 descriptor??
[  769.058554][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  769.196585][   T42] audit: type=1326 audit(1786018741.283:21311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3703 comm="syz.9.10582" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe4fec code=0x0
[  769.241575][ T3706] netlink: 'syz.7.10583': attribute type 9 has an invalid length.
[  769.249046][ T3706] macvlan2: entered promiscuous mode
[  769.250829][ T3706] macvlan2: entered allmulticast mode
[  770.086074][ T3755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10593'.
[  770.095973][ T3755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10593'.
[  770.099255][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  770.102218][ T3755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10593'.
[  770.106126][ T3755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10593'.
[  770.139454][ T3757] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.10594'.
[  770.704281][   T42] audit: type=1800 audit(1786018742.784:21312): pid=3797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10606" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  770.891014][ T3809] fuse: fd is not a fuse device
[  771.137784][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  771.447210][T28036] usb 5-1: USB disconnect, device number 12
[  771.689020][T10624] libceph: connect (1)[c::]:6789 error -101
[  771.690962][T10624] libceph: mon0 (1)[c::]:6789 connect error
[  771.848321][ T3845] ceph: No mds server is up or the cluster is laggy
[  772.177036][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  772.210517][   T42] audit: type=1326 audit(1786018744.295:21313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3887 comm="syz.7.10628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000
[  772.226159][   T42] audit: type=1326 audit(1786018744.295:21314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3887 comm="syz.7.10628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000
[  772.246730][   T42] audit: type=1326 audit(1786018744.315:21315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3887 comm="syz.7.10628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000
[  772.260621][   T42] audit: type=1326 audit(1786018744.315:21316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3887 comm="syz.7.10628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000
[  772.269918][   T42] audit: type=1326 audit(1786018744.315:21317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3887 comm="syz.7.10628" exe="/syz-executor" sig=0 arch=40000003 syscall=107 compat=1 ip=0xf705efec code=0x7ffc0000
[  772.278682][   T42] audit: type=1326 audit(1786018744.315:21318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3887 comm="syz.7.10628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000
[  772.285570][   T42] audit: type=1326 audit(1786018744.315:21319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3887 comm="syz.7.10628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000
[  772.292737][   T42] audit: type=1326 audit(1786018744.315:21320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3887 comm="syz.7.10628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000
[  772.316696][   T42] audit: type=1326 audit(1786018744.315:21321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3887 comm="syz.7.10628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000
[  772.326116][   T42] audit: type=1326 audit(1786018744.315:21322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3887 comm="syz.7.10628" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf705efec code=0x7ffc0000
[  772.388700][ T5850] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  772.399023][ T5850] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  772.406216][ T5850] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  772.409779][ T5850] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  772.483359][ T3894] __nla_validate_parse: 2 callbacks suppressed
[  772.483370][ T3894] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10630'.
[  772.779323][ T3914] 8021q: adding VLAN 0 to HW filter on device bond0
[  772.785769][ T3914] 8021q: adding VLAN 0 to HW filter on device team0
[  772.798566][ T3914] 8021q: adding VLAN 0 to HW filter on device batadv0
[  772.907305][ T3914] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  772.912286][ T3914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  772.936105][ T3914] veth1_vlan: left promiscuous mode
[  772.939075][ T3914] veth0_vlan: left promiscuous mode
[  772.941625][ T3914] veth0_vlan: entered promiscuous mode
[  772.945318][ T3914] veth1_vlan: entered promiscuous mode
[  772.950712][ T3914] veth1_macvtap: left promiscuous mode
[  772.953291][ T3914] veth0_macvtap: left promiscuous mode
[  772.955724][ T3914] veth0_macvtap: entered promiscuous mode
[  772.958978][ T3914] veth1_macvtap: entered promiscuous mode
[  772.964579][ T3914] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  772.968631][ T3914] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  772.971874][ T3914] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  772.974886][ T3914] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  772.980300][ T3914] 8021q: adding VLAN 0 to HW filter on device bond1
[  772.991806][ T3914] 8021q: adding VLAN 0 to HW filter on device bond2
[  773.002078][ T3914] 8021q: adding VLAN 0 to HW filter on device bond3
[  773.007247][ T3914] 8021q: adding VLAN 0 to HW filter on device bond4
[  773.011431][ T3914] 8021q: adding VLAN 0 to HW filter on device bond5
[  773.216567][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  773.276164][ T5820] bond5: (slave veth9): link status definitely up, 10000 Mbps full duplex
[  773.280633][ T5820] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  773.302783][ T3941] overlayfs: failed to clone upperpath
[  773.304816][ T5820] bond5: active interface up!
[  773.316679][ T5820] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  773.320913][ T5820] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  773.336625][ T5820] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  773.342224][ T5820] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  773.643909][ T3968] netlink: 'syz.0.10655': attribute type 9 has an invalid length.
[  773.654419][ T3968] macvlan2: entered promiscuous mode
[  773.657091][ T3968] macvlan2: entered allmulticast mode
[  773.969595][ T3986] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10661'.
[  774.256143][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  774.372275][ T4002] overlayfs: upper fs does not support file handles, falling back to index=off.
[  775.305592][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  776.335084][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  776.936693][ T4015] CIFS: Attempting to mount //127.0.0.1/share
[  776.942784][ T4015] CIFS: VFS: Error connecting to socket. Aborting operation.
[  776.946925][ T4015] CIFS: VFS: cifs_mount failed w/return code = -101
[  776.986695][ T4022] netlink: 'syz.7.10677': attribute type 2 has an invalid length.
[  776.990525][ T4022] netlink: 'syz.7.10677': attribute type 2 has an invalid length.
[  777.374653][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  777.420585][ T4049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10679'.
[  777.423910][ T4049] netlink: 'syz.0.10679': attribute type 7 has an invalid length.
[  777.427176][ T4049] netlink: 'syz.0.10679': attribute type 8 has an invalid length.
[  777.430172][ T4049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10679'.
[  777.436100][ T4049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10679'.
[  777.439368][ T4049] netlink: 'syz.0.10679': attribute type 7 has an invalid length.
[  777.442431][ T4049] netlink: 'syz.0.10679': attribute type 8 has an invalid length.
[  777.448374][ T4049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10679'.
[  777.581294][ T4053] fuse: fd is not a fuse device
[  778.414021][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  778.983147][ T4115] netlink: 'syz.7.10703': attribute type 4 has an invalid length.
[  778.998785][ T4115] netlink: 'syz.7.10703': attribute type 4 has an invalid length.
[  779.156678][ T4124] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10708'.
[  779.319349][ T4134] fuse: fd is not a fuse device
[  779.329863][    T9] libceph: connect (1)[c::]:6789 error -101
[  779.343345][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  779.373136][ T4139] netlink: 'syz.0.10713': attribute type 1 has an invalid length.
[  779.376720][ T4142] overlayfs: failed to clone upperpath
[  779.398865][ T4139] 8021q: adding VLAN 0 to HW filter on device bond1
[  779.445665][ T4139] bond1: (slave veth3): Enslaving as an active interface with a down link
[  779.453704][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  779.469995][ T4139] 8021q: adding VLAN 0 to HW filter on device bond0
[  779.473124][ T4139] 8021q: adding VLAN 0 to HW filter on device team0
[  779.479917][ T4139] 8021q: adding VLAN 0 to HW filter on device batadv0
[  779.481868][ T4133] ceph: No mds server is up or the cluster is laggy
[  779.525490][ T4139] batman_adv: batadv0: Interface activated: batadv_slave_0
[  779.530462][ T4139] batman_adv: batadv0: Interface activated: batadv_slave_1
[  779.538786][ T4139] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  779.543053][ T4139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  779.555902][ T4139] veth1_vlan: left promiscuous mode
[  779.559563][ T4139] veth0_vlan: left promiscuous mode
[  779.564786][ T4139] veth0_vlan: entered promiscuous mode
[  779.568948][ T4139] veth1_vlan: entered promiscuous mode
[  779.575419][ T4139] veth1_macvtap: left promiscuous mode
[  779.578480][ T4139] veth0_macvtap: left promiscuous mode
[  779.581331][ T4139] veth0_macvtap: entered promiscuous mode
[  779.584702][ T4139] veth1_macvtap: entered promiscuous mode
[  779.599848][ T4139] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  779.602759][ T4139] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  779.606755][ T4139] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  779.610128][ T4139] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  779.616167][ T4139] bond0: entered allmulticast mode
[  779.617828][ T4139] bond_slave_0: entered allmulticast mode
[  779.619670][ T4139] bond_slave_1: entered allmulticast mode
[  779.621503][ T4139] bond_slave_0: entered promiscuous mode
[  779.626769][ T4139] bond_slave_1: entered promiscuous mode
[  779.628737][ T4139] bond0: entered promiscuous mode
[  779.632463][ T4139] macvlan2: left promiscuous mode
[  779.634351][ T4139] bond0: left promiscuous mode
[  779.636307][ T4139] macvlan2: left allmulticast mode
[  779.637949][ T4139] bond0: left allmulticast mode
[  779.639545][ T4139] bond_slave_0: left allmulticast mode
[  779.641342][ T4139] bond_slave_1: left allmulticast mode
[  779.644399][ T4139] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  779.651999][T24355] bridge0: port 1(bridge_slave_0) entered blocking state
[  779.654369][T24355] bridge0: port 1(bridge_slave_0) entered forwarding state
[  779.658597][T24355] bridge0: port 2(bridge_slave_1) entered blocking state
[  779.660891][T24355] bridge0: port 2(bridge_slave_1) entered forwarding state
[  779.682683][ T4243] 8021q: adding VLAN 0 to HW filter on device batadv1
[  779.686889][ T4243] bond1: (slave batadv1): making interface the new active one
[  779.690135][ T4243] batadv1: entered promiscuous mode
[  779.697858][ T4243] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  779.722110][ T4245] 8021q: adding VLAN 0 to HW filter on device team0
[  779.728834][ T4245] 8021q: adding VLAN 0 to HW filter on device batadv0
[  779.772552][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_0
[  779.782565][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_1
[  779.787393][ T4245] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  779.794857][ T4245] veth1_vlan: left promiscuous mode
[  779.798068][ T4245] veth0_vlan: left promiscuous mode
[  779.801463][ T4245] veth0_vlan: entered promiscuous mode
[  779.808298][ T4245] veth1_vlan: entered promiscuous mode
[  779.813798][ T4245] veth1_macvtap: left promiscuous mode
[  779.816471][ T4245] veth0_macvtap: left promiscuous mode
[  779.818840][ T4245] veth0_macvtap: entered promiscuous mode
[  779.821433][ T4245] veth1_macvtap: entered promiscuous mode
[  779.830867][ T4245] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  779.834099][ T4245] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  779.837214][ T4245] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  779.841534][ T4245] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  779.869294][ T4245] 8021q: adding VLAN 0 to HW filter on device bond1
[  779.875523][ T4245] 8021q: adding VLAN 0 to HW filter on device bond2
[  779.878957][ T4245] 8021q: adding VLAN 0 to HW filter on device bond3
[  779.897083][ T4245] 8021q: adding VLAN 0 to HW filter on device bond4
[  779.905141][ T5836] openvswitch: cpu_id mismatch with handler threads
[  779.932817][ T4245] ieee802154 phy0 wpan3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  779.939332][ T4245] A link change request failed with some changes committed already. Interface wpan0 may have been left with an inconsistent configuration, please check.
[  779.955964][T24632] bridge0: port 2(bridge_slave_1) entered blocking state
[  779.959080][T24632] bridge0: port 2(bridge_slave_1) entered forwarding state
[  780.158946][ T5851] openvswitch: cpu_id mismatch with handler threads
[  780.173290][ T5820] bond3: (slave lo): failed to get link speed/duplex
[  780.198525][   T13] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  780.201596][T26564] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  780.211464][T26564] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  780.219983][T26564] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  780.226006][T26564] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  780.233142][T26564] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  780.238506][T26564] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  780.244509][T26564] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  780.285461][T26564] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  780.304304][ T5850] bond3: (slave lo): failed to get link speed/duplex
[  780.410697][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state
[  780.473532][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  780.478644][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  780.493172][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  780.672916][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  780.677477][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  780.680600][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  780.683775][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  780.884106][ T4334] fuse: fd is not a fuse device
[  781.090961][ T4351] fuse: fd is not a fuse device
[  781.166472][ T4356] overlayfs: failed to clone upperpath
[  781.382656][   T13] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  781.386270][   T13] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  781.389550][   T13] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  781.392331][   T13] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  781.532555][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  781.683230][ T4392] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10752'.
[  782.572051][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  782.759288][ T4410] bridge0: port 2(bridge_slave_1) entered disabled state
[  782.762189][ T4410] bridge0: port 1(bridge_slave_0) entered disabled state
[  782.776640][ T4410] bond_slave_0: left promiscuous mode
[  782.781209][ T4410] bond_slave_1: left promiscuous mode
[  782.877388][ T4410] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  782.887386][ T4410] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  783.052385][T23255] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  783.056307][T23255] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  783.060000][T23255] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  783.064263][T23255] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  783.230063][ T4430] 8021q: adding VLAN 0 to HW filter on device bond0
[  783.233668][ T4430] 8021q: adding VLAN 0 to HW filter on device team0
[  783.238840][ T4430] 8021q: adding VLAN 0 to HW filter on device batadv0
[  783.276488][ T4430] batman_adv: batadv0: Interface activated: batadv_slave_0
[  783.280400][ T4430] batman_adv: batadv0: Interface activated: batadv_slave_1
[  783.295812][ T4430] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  783.301118][ T4430] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  783.315537][ T4430] veth1_vlan: left promiscuous mode
[  783.323964][ T4430] veth0_vlan: left promiscuous mode
[  783.328877][ T4430] veth0_vlan: entered promiscuous mode
[  783.335450][ T4430] veth1_vlan: entered promiscuous mode
[  783.348061][ T4430] veth1_macvtap: left promiscuous mode
[  783.353253][ T4430] veth0_macvtap: left promiscuous mode
[  783.357541][ T4430] veth0_macvtap: entered promiscuous mode
[  783.363912][ T4430] veth1_macvtap: entered promiscuous mode
[  783.372693][ T4430] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  783.382439][ T4430] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  783.389643][ T4430] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  783.393187][ T4430] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  783.408450][ T4430] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  783.412898][ T4430] 8021q: adding VLAN 0 to HW filter on device bond1
[  783.421060][ T4430] 8021q: adding VLAN 0 to HW filter on device batadv1
[  783.439923][ T5851] bond_slave_0: entered promiscuous mode
[  783.444300][ T5851] bond_slave_1: entered promiscuous mode
[  783.453522][T24355] bridge0: port 1(bridge_slave_0) entered blocking state
[  783.455915][T24355] bridge0: port 1(bridge_slave_0) entered forwarding state
[  783.460421][T24355] bridge0: port 2(bridge_slave_1) entered blocking state
[  783.462631][T24355] bridge0: port 2(bridge_slave_1) entered forwarding state
[  783.541683][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  783.581609][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  783.584551][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  783.587349][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  783.611539][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  784.651078][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  784.831371][ T4473] netlink: 'syz.2.10776': attribute type 4 has an invalid length.
[  784.843026][ T4473] netlink: 'syz.2.10776': attribute type 4 has an invalid length.
[  785.690892][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  786.640136][ T4502] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10787'.
[  786.730945][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  787.770966][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  788.822276][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  789.605152][ T4572] fuse: fd is not a fuse device
[  789.850865][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  790.044977][ T4597] overlayfs: failed to clone upperpath
[  790.237826][ T4606] fuse: fd is not a fuse device
[  790.290640][ T4610] 9p: Bad value for 'wfdno'
[  790.862193][ T4625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10809'.
[  790.890848][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  790.938727][ T4631] ref_ctr increment failed for inode: 0x3a5e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880138f0000
[  790.943125][   T42] kauditd_printk_skb: 37 callbacks suppressed
[  790.943138][   T42] audit: type=1804 audit(1786019019.029:21360): pid=4631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.10811" name="file0" dev="tmpfs" ino=14942 res=1 errno=0
[  790.961688][ T4635] fuse: fd is not a fuse device
[  790.967485][ T4630] uprobe: syz.7.10811:4630 failed to unregister, leaking uprobe
[  791.066425][ T4644] netlink: 'syz.7.10816': attribute type 1 has an invalid length.
[  791.082292][ T4644] 8021q: adding VLAN 0 to HW filter on device bond24
[  791.097101][ T4644] bond24: (slave gretap5): Enslaving as a backup interface with an up link
[  791.105164][ T4644] bond24: (slave dummy0): Enslaving as a backup interface with an up link
[  791.200924][ T5820] bond24: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  791.280892][ T5820] batadv1: left promiscuous mode
[  791.320882][ T5820] bond24: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  791.705945][ T4699] fuse: fd is not a fuse device
[  791.930852][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  792.050144][ T4722] tipc: Failed to remove unknown binding: 66,0,0/0:2239446505/2239446506
[  792.054122][ T4722] tipc: Failed to remove unknown binding: 66,0,0/0:2239446505/2239446506
[  792.074340][   T42] audit: type=1326 audit(1786019020.169:21361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4723 comm="syz.7.10835" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x0
[  792.179515][ T4730] overlayfs: failed to clone lowerpath
[  792.285634][ T4733] fuse: fd is not a fuse device
[  792.390035][ T4737] fuse: fd is not a fuse device
[  792.937509][ T4755] netlink: 'syz.7.10846': attribute type 1 has an invalid length.
[  792.964004][ T4755] 8021q: adding VLAN 0 to HW filter on device bond25
[  792.970865][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  793.025273][ T4755] bond25: (slave veth23): Enslaving as an active interface with a down link
[  793.079168][ T4755] 8021q: adding VLAN 0 to HW filter on device batadv0
[  793.110503][ T4755] veth1_vlan: left promiscuous mode
[  793.114099][ T4755] veth0_vlan: left promiscuous mode
[  793.116638][ T4755] veth0_vlan: entered promiscuous mode
[  793.119079][ T4755] veth1_vlan: entered promiscuous mode
[  793.121272][ T5820] bond24: (slave dummy0): link status up again after 0 ms
[  793.132064][ T4755] veth1_macvtap: left promiscuous mode
[  793.140564][ T4755] veth0_macvtap: left promiscuous mode
[  793.144189][ T4755] veth0_macvtap: entered promiscuous mode
[  793.146708][ T4755] veth1_macvtap: entered promiscuous mode
[  793.157296][ T4755] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  793.161032][ T5820] bond24: (slave dummy0): link status up again after 0 ms
[  793.175452][ T4755] 8021q: adding VLAN 0 to HW filter on device bond1
[  793.181056][   T13] bond24: (slave dummy0): link status up again after 0 ms
[  793.250492][ T4853] 8021q: adding VLAN 0 to HW filter on device batadv1
[  793.258430][ T4853] bond25: (slave batadv1): making interface the new active one
[  793.266072][ T4861] fuse: fd is not a fuse device
[  793.267366][ T4853] batadv1: entered promiscuous mode
[  793.275012][ T4853] bond25: (slave batadv1): Enslaving as an active interface with an up link
[  793.325348][ T4864] tipc: Started in network mode
[  793.327043][ T4864] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711
[  793.330121][ T4864] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  793.339848][ T4864] tipc: Enabled bearer <eth:dummy0>, priority 10
[  793.345558][ T5850] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  793.350411][ T5850] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  793.354919][ T5850] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  793.360793][ T5850] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  793.366730][ T4864] tipc: New replicast peer: 255.255.255.255
[  793.372704][ T4864] tipc: Enabled bearer <udp:syz2>, priority 10
[  793.391828][   T13] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  793.398344][   T13] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  793.405304][   T13] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  793.409667][   T13] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  793.429618][ T4867] netlink: 'syz.7.10854': attribute type 10 has an invalid length.
[  793.505097][ T4875] fuse: fd is not a fuse device
[  793.580291][ T4884] overlayfs: failed to resolve './cgroup': -2
[  793.678814][ T4887] autofs4:pid:4887:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375)
[  793.684210][ T4887] autofs4:pid:4887:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375)
[  793.840902][   T13] net_ratelimit: 14 callbacks suppressed
[  793.840917][   T13] bond24: (slave dummy0): failed to get link speed/duplex
[  793.970900][ T5820] bond24: (slave dummy0): failed to get link speed/duplex
[  794.010898][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  794.080830][ T5820] bond24: (slave dummy0): failed to get link speed/duplex
[  794.190822][ T5850] bond24: (slave dummy0): failed to get link speed/duplex
[  794.301667][ T5850] bond24: (slave dummy0): failed to get link speed/duplex
[  794.319787][ T4910] netlink: 'syz.2.10864': attribute type 1 has an invalid length.
[  794.325345][ T4909] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10872'.
[  794.334431][ T4910] 8021q: adding VLAN 0 to HW filter on device bond14
[  794.465941][ T4910] bond14: (slave veth29): Enslaving as an active interface with a down link
[  794.471224][ T5852] tipc: Node number set to 4269801491
[  794.566374][ T4997] 8021q: adding VLAN 0 to HW filter on device team0
[  794.582318][ T4997] 8021q: adding VLAN 0 to HW filter on device batadv0
[  794.629764][ T4997] batman_adv: batadv0: Interface activated: batadv_slave_0
[  794.633659][ T4997] batman_adv: batadv0: Interface activated: batadv_slave_1
[  794.638331][ T4997] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  794.643820][ T4997] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  794.653847][ T4909] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10872'.
[  794.661198][T23255] bond24: (slave dummy0): failed to get link speed/duplex
[  794.692725][ T5065] 8021q: adding VLAN 0 to HW filter on device batadv1
[  794.697144][ T5065] bond14: (slave batadv1): making interface the new active one
[  794.700418][ T5065] batadv1: entered promiscuous mode
[  794.703122][ T5065] bond14: (slave batadv1): Enslaving as an active interface with an up link
[  794.716719][T24632] bridge0: port 2(bridge_slave_1) entered blocking state
[  794.719045][T24632] bridge0: port 2(bridge_slave_1) entered forwarding state
[  794.822698][ T5091] netlink: 'syz.7.10871': attribute type 11 has an invalid length.
[  794.872017][ T5091] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  794.872124][   T13] bond24: (slave dummy0): link status up again after 0 ms
[  794.926688][ T5110] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10875'.
[  794.929724][ T5110] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10875'.
[  795.062999][ T5123] fuse: fd is not a fuse device
[  795.984580][ T5143] fuse: fd is not a fuse device
[  796.906196][ T5163] overlayfs: failed to clone upperpath
[  796.972323][ T5167] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  796.975069][ T5167] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  796.977201][ T5167] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  796.999655][ T5167] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  797.004060][ T5167] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  797.053308][ T5175] netlink: 'syz.9.10901': attribute type 1 has an invalid length.
[  797.099152][ T5175] 8021q: adding VLAN 0 to HW filter on device bond6
[  797.137023][ T5175] bond6: (slave gretap1): Enslaving as a backup interface with an up link
[  797.155282][ T5175] tipc: Resetting bearer <eth:dummy0>
[  797.163105][ T5175] bond6: (slave dummy0): Enslaving as a backup interface with an up link
[  797.294069][ T5217] fuse: fd is not a fuse device
[  797.445428][ T5219] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10898'.
[  797.464077][ T5225] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10900'.
[  797.528196][ T5215] syz.0.10895 (5215): drop_caches: 2
[  797.564659][ T5230] fuse: fd is not a fuse device
[  797.648573][ T5237] overlayfs: failed to clone upperpath
[  797.669693][ T5234] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  797.781242][ T5246] netlink: 'syz.0.10907': attribute type 1 has an invalid length.
[  797.795408][ T5247] fuse: fd is not a fuse device
[  797.805544][ T5246] 8021q: adding VLAN 0 to HW filter on device bond2
[  797.842387][ T5246] bond2: (slave gretap1): Enslaving as a backup interface with an up link
[  797.864302][ T5246] bond2: (slave dummy0): Enslaving as a backup interface with an up link
[  797.968634][ T5285] netlink: 'syz.0.10908': attribute type 10 has an invalid length.
[  798.000219][ T5752] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  798.470399][ T5364] overlayfs: failed to resolve './cgroup': -2
[  798.478121][ T5366] fuse: fd is not a fuse device
[  798.851387][ T5820] net_ratelimit: 69 callbacks suppressed
[  798.851406][ T5820] bond6: (slave gretap1): failed to get link speed/duplex
[  798.874959][ T5820] bond6: (slave dummy0): failed to get link speed/duplex
[  798.906007][   T13] bond24: (slave dummy0): failed to get link speed/duplex
[  798.923722][ T5507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  798.996144][ T5486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  799.021110][   T13] bond6: (slave gretap1): failed to get link speed/duplex
[  799.023553][   T13] bond6: (slave dummy0): failed to get link speed/duplex
[  799.040931][   T13] bond24: (slave dummy0): failed to get link speed/duplex
[  799.051566][ T5752] Bluetooth: hci2: command 0x0c1a tx timeout
[  799.053999][T31127] Bluetooth: hci1: command 0x0406 tx timeout
[  799.064143][ T5507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  799.132656][   T13] bond6: (slave gretap1): failed to get link speed/duplex
[  799.135576][   T13] bond6: (slave dummy0): failed to get link speed/duplex
[  799.161005][   T13] bond24: (slave dummy0): failed to get link speed/duplex
[  799.164758][ T5539] fuse: fd is not a fuse device
[  799.193095][ T5530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10927'.
[  799.210923][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  799.630840][ T5836] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  799.708070][ T5563] overlayfs: failed to clone upperpath
[  799.780869][ T5836] usb 5-1: Using ep0 maxpacket: 8
[  799.783769][ T5836] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  799.786509][ T5836] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  799.789628][ T5836] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  799.793217][ T5836] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  799.796934][ T5836] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  799.802204][ T5836] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  799.807124][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  799.985511][ T5572] fuse: fd is not a fuse device
[  800.020342][ T5836] usb 5-1: usb_control_msg returned -32
[  800.022278][ T5836] usbtmc 5-1:16.0: can't read capabilities
[  800.349491][ T5836] usb 5-1: USB disconnect, device number 13
[  800.352576][ T5553] usbtmc 5-1:16.0: usb_control_msg returned -71
[  800.562466][ T5620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10949'.
[  800.566417][ T5620] bond4: left allmulticast mode
[  800.568649][ T5620] bond4: left promiscuous mode
[  800.574463][ T5620] bridge0: port 3(bond4) entered disabled state
[  800.580603][ T5620] bridge_slave_1: left allmulticast mode
[  800.585561][ T5620] bridge_slave_1: left promiscuous mode
[  800.588181][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state
[  801.030843][ T5852] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  801.130918][ T5752] Bluetooth: hci2: command 0x0c1a tx timeout
[  801.190806][ T5852] usb 5-1: Using ep0 maxpacket: 8
[  801.197703][ T5852] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  801.203356][ T5852] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  801.211960][ T5852] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  801.221181][ T5852] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  801.229519][ T5852] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  801.245146][ T5852] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  801.253429][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  801.477076][ T5852] usb 5-1: usb_control_msg returned -71
[  801.480282][ T5852] usbtmc 5-1:16.0: can't read capabilities
[  801.496676][ T5852] usb 5-1: USB disconnect, device number 14
[  801.976190][ T5680] netlink: 'syz.2.10963': attribute type 1 has an invalid length.
[  802.016421][ T5680] 8021q: adding VLAN 0 to HW filter on device bond15
[  802.260559][ T5733] uprobe: syz.2.10969:5733 failed to unregister, leaking uprobe
[  802.484765][ T5743] fuse: fd is not a fuse device
[  802.544411][ T5747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10976'.
[  802.557908][ T5747] 8021q: adding VLAN 0 to HW filter on device bond16
[  802.584968][ T5745] kvm: pic: level sensitive irq not supported
[  802.726352][ T5800] netlink: 'syz.0.10981': attribute type 1 has an invalid length.
[  802.741751][ T5800] bond3: entered promiscuous mode
[  802.743738][ T5800] 8021q: adding VLAN 0 to HW filter on device bond3
[  802.765958][ T5800] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  802.769808][ T5800] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  802.776719][ T5800] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  802.796466][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10984'.
[  802.804389][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10984'.
[  802.831320][ T5846] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  802.835295][ T5846] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  802.893857][ T5864] netlink: 'syz.2.10987': attribute type 11 has an invalid length.
[  803.211043][ T5752] Bluetooth: hci2: command 0x0c1a tx timeout
[  803.234029][ T5877] 0x000000008a42-0x000000008a86 : ""
[  803.294218][ T5877] ftl_cs: FTL header corrupt!
[  803.524355][ T5896] fuse: fd is not a fuse device
[  803.561081][ T5900] netlink: 'syz.9.10997': attribute type 11 has an invalid length.
[  803.604165][ T5900] 8021q: adding VLAN 0 to HW filter on device bond0
[  803.607133][ T5900] 8021q: adding VLAN 0 to HW filter on device team0
[  803.613557][ T5900] 8021q: adding VLAN 0 to HW filter on device batadv0
[  803.670152][ T5900] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  803.674592][ T5900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  803.861212][ T5820] net_ratelimit: 124 callbacks suppressed
[  803.861232][ T5820] bond6: (slave gretap1): failed to get link speed/duplex
[  803.866704][ T5820] bond6: (slave dummy0): failed to get link speed/duplex
[  803.880931][T23255] bond24: (slave dummy0): failed to get link speed/duplex
[  803.970915][ T5820] bond6: (slave gretap1): failed to get link speed/duplex
[  803.973320][ T5820] bond6: (slave dummy0): failed to get link speed/duplex
[  803.992402][ T5820] bond24: (slave dummy0): failed to get link speed/duplex
[  804.080977][T23255] bond6: (slave gretap1): failed to get link speed/duplex
[  804.083404][T23255] bond6: (slave dummy0): failed to get link speed/duplex
[  804.100957][ T5793] bond24: (slave dummy0): failed to get link speed/duplex
[  804.162047][ T5929] netlink: 'syz.9.11004': attribute type 39 has an invalid length.
[  804.166105][ T5926] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  804.211003][ T5793] bond6: (slave gretap1): failed to get link speed/duplex
[  804.460961][ T5793] batadv1: left promiscuous mode
[  804.531751][ T5953] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  804.546768][ T5953] block device autoloading is deprecated and will be removed.
[  805.291182][ T5752] Bluetooth: hci2: command 0x0c1a tx timeout
[  805.706838][ T6011] fuse: fd is not a fuse device
[  805.780575][ T6017] netlink: 'syz.2.11027': attribute type 1 has an invalid length.
[  805.821449][ T6017] 8021q: adding VLAN 0 to HW filter on device bond17
[  805.955023][ T6115] netlink: 'syz.2.11027': attribute type 10 has an invalid length.
[  805.959030][ T6017] bond17: (slave veth33): Enslaving as an active interface with a down link
[  805.960827][ T6115] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11027'.
[  805.980313][ T6117] overlayfs: failed to clone upperpath
[  805.986451][ T6115] 
: entered promiscuous mode
[  806.058903][ T6120] fuse: fd is not a fuse device
[  806.062443][ T5820] batadv1: left promiscuous mode
[  806.852118][ T6160] fuse: fd is not a fuse device
[  806.940894][T12819] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  807.092346][T12819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  807.095966][T12819] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  807.098968][T12819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  807.105922][T12819] usb 5-1: config 0 descriptor??
[  807.318982][T12819] usbhid 5-1:0.0: can't add hid device: -71
[  807.321038][T12819] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  807.329049][T12819] usb 5-1: USB disconnect, device number 15
[  807.609918][ T6189] overlayfs: failed to clone upperpath
[  807.761872][T12819] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  807.778751][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11054'.
[  807.921255][T12819] usb 5-1: Using ep0 maxpacket: 32
[  807.934072][T12819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  807.940185][T12819] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  807.950311][T12819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  807.961448][T12819] usb 5-1: config 0 descriptor??
[  807.972271][T12819] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  807.989495][T12819] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  808.097685][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11057'.
[  808.256681][ T6286] fuse: fd is not a fuse device
[  808.333209][ T1443] ieee802154 phy1 wpan1: encryption failed: -22
[  808.379840][ T5752] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  808.387537][ T5851] usb 5-1: USB disconnect, device number 16
[  808.391254][ T5851] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  808.870987][   T13] net_ratelimit: 123 callbacks suppressed
[  808.871008][   T13] bond24: (slave dummy0): failed to get link speed/duplex
[  808.920412][ T6300] netlink: 'syz.9.11074': attribute type 1 has an invalid length.
[  808.922119][ T5752] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260
[  808.977004][ T6300] bond7: entered promiscuous mode
[  808.988513][ T6300] 8021q: adding VLAN 0 to HW filter on device bond7
[  809.003402][ T6395] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  809.008447][ T6395] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  809.014790][ T6395] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  809.063606][ T6300] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  809.068420][ T6300] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  809.104740][ T5820] bond6: (slave gretap1): failed to get link speed/duplex
[  809.113648][ T5820] bond6: (slave dummy0): failed to get link speed/duplex
[  809.131352][   T13] bond24: (slave dummy0): failed to get link speed/duplex
[  809.150648][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11067'.
[  809.187956][ T6410] overlayfs: failed to clone upperpath
[  809.230956][ T5820] bond6: (slave gretap1): failed to get link speed/duplex
[  809.238016][ T5820] bond6: (slave dummy0): failed to get link speed/duplex
[  809.271094][ T5793] bond24: (slave dummy0): failed to get link speed/duplex
[  809.283827][ T6414] overlayfs: failed to clone upperpath
[  809.361525][ T5820] bond6: (slave gretap1): failed to get link speed/duplex
[  809.364062][ T5820] bond6: (slave dummy0): failed to get link speed/duplex
[  809.391077][ T5820] bond24: (slave dummy0): failed to get link speed/duplex
[  809.457276][ T6425] tipc: Failed to remove unknown binding: 66,0,0/4269801491:3951479032/3951479034
[  809.470526][ T6425] tipc: Failed to remove unknown binding: 66,0,0/4269801491:3951479032/3951479033
[  809.481387][ T6425] tipc: Failed to remove unknown binding: 66,0,0/4269801491:3951479032/3951479034
[  809.486818][ T6425] tipc: Failed to remove unknown binding: 66,0,0/4269801491:3951479032/3951479033
[  809.500270][ T6431] netlink: 'syz.2.11079': attribute type 1 has an invalid length.
[  809.526641][ T6431] 8021q: adding VLAN 0 to HW filter on device bond18
[  809.616759][ T6431] bond18: (slave veth35): Enslaving as an active interface with a down link
[  810.515626][ T6538] netlink: 'syz.9.11081': attribute type 1 has an invalid length.
[  810.563525][ T6538] 8021q: adding VLAN 0 to HW filter on device bond8
[  810.563582][ T6577] netlink: 'syz.2.11082': attribute type 1 has an invalid length.
[  810.610111][ T6577] bond19: entered promiscuous mode
[  810.614125][ T6577] 8021q: adding VLAN 0 to HW filter on device bond19
[  810.653186][ T6538] bond8: (slave veth15): Enslaving as an active interface with a down link
[  810.667101][ T6541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  810.735056][ T6538] 8021q: adding VLAN 0 to HW filter on device batadv1
[  810.738576][ T6538] bond8: (slave batadv1): making interface the new active one
[  810.742050][ T6538] batadv1: entered promiscuous mode
[  810.744071][ T6538] bond8: (slave batadv1): Enslaving as an active interface with an up link
[  810.795055][ T6689] fuse: fd is not a fuse device
[  810.871104][ T5852] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  811.023109][ T5852] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01
[  811.028032][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  811.044419][ T5852] emi26 - firmware loader 5-1:1.0: emi26_probe start
[  811.069164][ T5852] usb 5-1: Direct firmware load for emi26/loader.fw failed with error -2
[  811.072559][ T5852] usb 5-1: Falling back to sysfs fallback for: emi26/loader.fw
[  811.303429][ T6700] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0)
[  811.314822][ T5852] usb 5-1: emi26_load_firmware - request_firmware() failed
[  811.317333][ T5852] usb 5-1: emi26_load_firmware - error loading firmware: error = -2
[  811.319964][ T5852] emi26 - firmware loader 5-1:1.0: probe with driver emi26 - firmware loader failed with error -5
[  811.703160][ T6704] bridge13: entered promiscuous mode
[  811.705272][ T6704] bridge13: entered allmulticast mode
[  811.744793][ T5852] usb 5-1: USB disconnect, device number 17
[  812.574588][ T6721] netlink: 'syz.7.11095': attribute type 1 has an invalid length.
[  812.588607][ T6727] netlink: 'syz.2.11098': attribute type 1 has an invalid length.
[  812.606564][ T6721] bond26: entered promiscuous mode
[  812.608487][ T6721] 8021q: adding VLAN 0 to HW filter on device bond26
[  812.612071][ T6728] netlink: 'syz.9.11096': attribute type 12 has an invalid length.
[  812.629212][ T6727] 8021q: adding VLAN 0 to HW filter on device bond20
[  812.666259][ T6721] bond26: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  812.671551][ T6721] bond26: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  812.675889][ T6721] bond26: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  812.746823][ T6727] bond20: (slave veth37): Enslaving as an active interface with a down link
[  812.760342][ T6810] bond26: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  812.766552][ T6810] bond26: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  812.808352][ T6842] 
: left promiscuous mode
[  812.888923][ T6727] 8021q: adding VLAN 0 to HW filter on device batadv2
[  812.893718][ T6727] bond20: (slave batadv2): making interface the new active one
[  812.897429][ T6727] batadv2: entered promiscuous mode
[  812.899875][ T6727] bond20: (slave batadv2): Enslaving as an active interface with an up link
[  812.985615][ T6874] netlink: 'syz.7.11101': attribute type 39 has an invalid length.
[  813.447750][ T6887] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11104'.
[  813.587392][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11104'.
[  813.834450][ T6961] 9p: Bad value for 'wfdno'
[  813.962358][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11109'.
[  813.981065][ T5820] net_ratelimit: 118 callbacks suppressed
[  813.981078][ T5820] bond6: (slave gretap1): failed to get link speed/duplex
[  813.990485][ T5820] bond6: (slave dummy0): failed to get link speed/duplex
[  814.017883][ T6973] bridge0 (unregistering): left allmulticast mode
[  814.091607][   T13] bond24: (slave dummy0): failed to get link speed/duplex
[  814.100892][   T13] bond6: (slave gretap1): failed to get link speed/duplex
[  814.108177][   T13] bond6: (slave dummy0): failed to get link speed/duplex
[  814.197525][ T6998] netlink: 'syz.7.11110': attribute type 1 has an invalid length.
[  814.214538][ T6998] 8021q: adding VLAN 0 to HW filter on device bond27
[  814.222118][ T5820] bond24: (slave dummy0): failed to get link speed/duplex
[  814.230930][   T13] bond6: (slave gretap1): failed to get link speed/duplex
[  814.233912][   T13] bond6: (slave dummy0): failed to get link speed/duplex
[  814.269712][ T6998] bond27: (slave veth27): Enslaving as an active interface with a down link
[  814.310093][ T6998] bond24: (slave dummy0): Releasing backup interface
[  814.324299][ T6998] bond27: (slave dummy0): making interface the new active one
[  814.334624][ T6998] bond27: (slave dummy0): Enslaving as an active interface with an up link
[  814.340860][T23255] bond6: (slave gretap1): failed to get link speed/duplex
[  814.343937][T23255] bond6: (slave dummy0): failed to get link speed/duplex
[  814.372316][ T6998] netlink: 'syz.7.11110': attribute type 10 has an invalid length.
[  814.374754][ T6998] netlink: 40 bytes leftover after parsing attributes in process `syz.7.11110'.
[  814.416009][ T6998] bond27: (slave dummy0): Releasing active interface
[  814.673475][ T7116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  814.748076][ T7120] netlink: 'syz.0.11119': attribute type 1 has an invalid length.
[  814.774709][ T7120] bond4: entered promiscuous mode
[  814.777283][ T7120] 8021q: adding VLAN 0 to HW filter on device bond4
[  814.814679][ T7120] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  814.819858][ T7120] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  814.824411][ T7120] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  814.865909][ T7160] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  814.871299][ T7160] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  816.081998][ T7203] fuse: fd is not a fuse device
[  816.169869][ T7208] bond3: (slave lo): Releasing active interface
[  816.173575][ T7208] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  816.185484][ T7208] team0: Device xfrm0 is of different type
[  816.193148][ T7208] tipc: Enabled bearer <eth:team0>, priority 0
[  816.193506][ T7209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  817.375396][ T7232] fuse: fd is not a fuse device
[  817.436180][ T7236] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11145'.
[  817.711958][ T7245] netlink: 'syz.7.11151': attribute type 2 has an invalid length.
[  818.987491][ T7290] fuse: fd is not a fuse device
[  819.051298][ T5850] net_ratelimit: 82 callbacks suppressed
[  819.051316][ T5850] bond6: (slave gretap1): failed to get link speed/duplex
[  819.059811][ T5850] bond6: (slave dummy0): failed to get link speed/duplex
[  819.147774][ T7298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11159'.
[  819.181945][ T5850] bond6: (slave gretap1): failed to get link speed/duplex
[  819.186277][ T5850] bond6: (slave dummy0): failed to get link speed/duplex
[  819.291476][T23255] bond6: (slave gretap1): failed to get link speed/duplex
[  819.294008][T23255] bond6: (slave dummy0): failed to get link speed/duplex
[  819.400948][ T5850] bond6: (slave gretap1): failed to get link speed/duplex
[  819.403378][ T5850] bond6: (slave dummy0): failed to get link speed/duplex
[  819.410049][ T7308] fuse: fd is not a fuse device
[  819.511329][ T5850] bond6: (slave gretap1): failed to get link speed/duplex
[  819.515603][ T5850] bond6: (slave dummy0): failed to get link speed/duplex
[  820.449866][ T7318] 9p: Bad value for 'rfdno'
[  820.508235][ T7322] fuse: fd is not a fuse device
[  820.550303][ T7324] netlink: 'syz.9.11176': attribute type 1 has an invalid length.
[  820.586501][ T7324] 8021q: adding VLAN 0 to HW filter on device bond9
[  820.687024][ T7324] bond9: (slave veth17): Enslaving as an active interface with a down link
[  820.710032][ T7416] vlan2: entered allmulticast mode
[  820.716831][ T7416] bridge0: entered allmulticast mode
[  821.856728][ T7467] netlink: 'syz.0.11173': attribute type 1 has an invalid length.
[  821.884052][ T7467] 8021q: adding VLAN 0 to HW filter on device bond5
[  821.964806][ T7467] bond5: (slave veth7): Enslaving as an active interface with a down link
[  822.080050][ T7574] overlayfs: failed to clone upperpath
[  822.119510][ T7467] 8021q: adding VLAN 0 to HW filter on device batadv2
[  822.126899][ T7467] bond5: (slave batadv2): making interface the new active one
[  822.131511][ T7467] batadv2: entered promiscuous mode
[  822.134258][ T7467] bond5: (slave batadv2): Enslaving as an active interface with an up link
[  822.222411][ T7583] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11182'.
[  822.226479][ T7581] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11181'.
[  822.226576][ T7585] cdns-pci-usbssp 0000:00:00.0: probe with driver cdns-pci-usbssp failed with error -22
[  822.343220][   T13] batadv1: left promiscuous mode
[  822.872476][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11191'.
[  822.888547][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11191'.
[  822.902083][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11191'.
[  822.911840][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11191'.
[  822.917526][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11191'.
[  823.081714][ T7746] fuse: fd is not a fuse device
[  823.835558][ T5752] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  824.034214][ T5850] batadv2: left promiscuous mode
[  824.136900][ T7767] bond21: (slave geneve3): Releasing active interface
[  824.156680][ T7774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11209'.
[  824.170854][    C3] net_ratelimit: 95 callbacks suppressed
[  824.170867][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  824.176807][ T7767] bond22: (slave veth19): Releasing backup interface
[  824.190409][ T7767] bond24: (slave gretap5): Removing an active aggregator
[  824.195809][ T7767] bond24: (slave gretap5): Releasing backup interface
[  824.223946][ T7767] bond25: (slave veth23): Releasing active interface
[  824.227052][ T7767] bond25: (slave veth23): the permanent HWaddr of slave - b6:0b:42:95:5e:48 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  824.236497][ T7767] batadv1: entered promiscuous mode
[  824.245995][ T7767] bond25: (slave batadv1): Releasing active interface
[  824.249153][ T7767] batadv1: left promiscuous mode
[  824.265170][ T7767] bond27: (slave veth27): Releasing active interface
[  824.321030][ T7770] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  824.345283][ T5793] bond6: (slave gretap1): failed to get link speed/duplex
[  824.350034][ T5793] bond6: (slave dummy0): failed to get link speed/duplex
[  824.360937][ T5793] bond2: (slave dummy0): failed to get link speed/duplex
[  824.480871][   T13] bond6: (slave gretap1): failed to get link speed/duplex
[  824.483798][   T13] bond6: (slave dummy0): failed to get link speed/duplex
[  824.530894][   T13] bond2: (slave dummy0): failed to get link speed/duplex
[  824.706333][ T7875] netlink: 'syz.0.11214': attribute type 11 has an invalid length.
[  824.810965][ T7876] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  824.815989][ T5793] bond2: (slave dummy0): link status up again after 0 ms
[  824.840950][ T5793] bond2: (slave dummy0): link status up again after 0 ms
[  825.200155][ T7896] overlayfs: failed to clone upperpath
[  825.354469][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11223'.
[  825.368446][ T7905] bond2: (slave dummy0): Releasing backup interface
[  825.398691][ T7905] bridge_slave_0: left allmulticast mode
[  825.404639][ T7905] bridge_slave_0: left promiscuous mode
[  825.407296][ T7905] bridge0: port 1(bridge_slave_0) entered disabled state
[  825.422487][ T7905] bridge_slave_1: left allmulticast mode
[  825.424707][ T7905] bridge_slave_1: left promiscuous mode
[  825.427264][ T7905] bridge0: port 2(bridge_slave_1) entered disabled state
[  825.436432][ T7905] bond0: (slave bond_slave_0): Releasing backup interface
[  825.439296][ T7905] bond_slave_0: left promiscuous mode
[  825.445253][ T7905] bond0: (slave bond_slave_1): Releasing backup interface
[  825.448675][ T7905] bond_slave_1: left promiscuous mode
[  825.458219][ T7905] team0: Port device team_slave_0 removed
[  825.606651][ T7905] team0: Port device team_slave_1 removed
[  825.609847][ T7905] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  825.613514][ T7905] batman_adv: batadv0: Removing interface: batadv_slave_0
[  825.617964][ T7905] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  825.621312][ T7905] batman_adv: batadv0: Removing interface: batadv_slave_1
[  825.648945][ T7909] team0: Port device xfrm0 added
[  825.665624][ T7914] tipc: Started in network mode
[  825.667907][ T7914] tipc: Node identity 8a8032ac89b3, cluster identity 4711
[  825.674576][ T7914] tipc: Enabled bearer <eth:team0>, priority 0
[  825.856839][   T42] audit: type=1326 audit(1786019053.949:21362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.2.11231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000
[  825.864292][   T42] audit: type=1326 audit(1786019053.949:21363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.2.11231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000
[  825.873677][   T42] audit: type=1326 audit(1786019053.949:21364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.2.11231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000
[  825.894398][   T42] audit: type=1326 audit(1786019053.949:21365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.2.11231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000
[  825.906065][   T42] audit: type=1326 audit(1786019053.949:21366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.2.11231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000
[  825.913931][   T42] audit: type=1326 audit(1786019053.949:21367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.2.11231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000
[  825.922768][   T42] audit: type=1326 audit(1786019053.949:21368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.2.11231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000
[  825.933214][   T42] audit: type=1326 audit(1786019053.949:21369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.2.11231" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f13fec code=0x7ffc0000
[  825.940694][   T42] audit: type=1326 audit(1786019053.949:21370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.2.11231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000
[  825.949788][   T42] audit: type=1326 audit(1786019053.949:21371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.2.11231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000
[  825.975807][ T7959] fuse: fd is not a fuse device
[  826.742659][ T7990] fuse: fd is not a fuse device
[  826.816668][  T845] tipc: Node number set to 53686956
[  826.830918][ T5852] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  826.982195][ T5852] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  826.985854][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  826.989205][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  826.992384][ T5852] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  826.997705][ T5852] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  827.001010][ T5852] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  827.003692][ T5852] usb 5-1: Manufacturer: syz
[  827.006654][ T5852] usb 5-1: config 0 descriptor??
[  827.415337][ T5852] appleir 0003:05AC:8243.001D: unknown main item tag 0x0
[  827.427095][ T5852] appleir 0003:05AC:8243.001D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  827.534176][ T8013] netlink: 'syz.7.11246': attribute type 1 has an invalid length.
[  827.566238][ T8013] 8021q: adding VLAN 0 to HW filter on device bond28
[  827.618297][ T8064] fuse: fd is not a fuse device
[  827.644652][ T8013] bond28: (slave veth31): Enslaving as an active interface with a down link
[  827.804226][ T8123] overlayfs: failed to clone upperpath
[  828.111854][ T8137] 9p: Bad value for 'rfdno'
[  828.242923][T10624] usb 5-1: USB disconnect, device number 18
[  828.273523][ T8146] fuse: fd is not a fuse device
[  828.792014][ T8165] fuse: fd is not a fuse device
[  828.808081][ T8167] netlink: 'syz.0.11263': attribute type 1 has an invalid length.
[  828.855573][ T8167] 8021q: adding VLAN 0 to HW filter on device bond6
[  828.939472][ T8167] bond6: (slave veth9): Enslaving as an active interface with a down link
[  828.941391][ T8267] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11268'.
[  828.964882][ T8265] vlan2: entered allmulticast mode
[  828.971090][ T8265] bridge0: entered allmulticast mode
[  829.034162][ T8329] netlink: 'syz.7.11269': attribute type 4 has an invalid length.
[  829.075805][ T8329] netlink: 'syz.7.11269': attribute type 4 has an invalid length.
[  829.191376][ T5820] net_ratelimit: 82 callbacks suppressed
[  829.191417][ T5820] bond6: (slave gretap1): failed to get link speed/duplex
[  829.201111][ T5820] bond6: (slave dummy0): failed to get link speed/duplex
[  829.229359][  T845] kernel write not supported for file /538/clear_refs (pid: 845 comm: kworker/2:2)
[  829.312089][ T5820] bond6: (slave gretap1): failed to get link speed/duplex
[  829.314517][ T5820] bond6: (slave dummy0): failed to get link speed/duplex
[  829.314618][ T8365] netlink: 'syz.0.11280': attribute type 1 has an invalid length.
[  829.340215][ T8365] 8021q: adding VLAN 0 to HW filter on device bond7
[  829.371099][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  829.455123][ T8365] bond7: (slave veth11): Enslaving as an active interface with a down link
[  829.469845][ T8453] vlan2: entered allmulticast mode
[  829.503378][ T5850] bond6: (slave gretap1): failed to get link speed/duplex
[  829.507825][ T5850] bond6: (slave dummy0): failed to get link speed/duplex
[  829.620927][ T5793] bond6: (slave gretap1): failed to get link speed/duplex
[  829.623476][ T5793] bond6: (slave dummy0): failed to get link speed/duplex
[  829.730915][ T5820] bond6: (slave gretap1): failed to get link speed/duplex
[  829.878288][ T8469] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11282'.
[  830.236541][ T8543] 9p: Bad value for 'rfdno'
[  830.296729][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11289'.
[  830.458958][ T8556] fuse: fd is not a fuse device
[  830.825050][ T8564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11294'.
[  831.048075][    T9] kernel write not supported for file /552/clear_refs (pid: 9 comm: kworker/0:0)
[  831.340869][    T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  831.510850][    T9] usb 5-1: Using ep0 maxpacket: 32
[  831.513941][    T9] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  831.518559][    T9] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  831.524525][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  831.528911][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  831.532421][    T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  831.535540][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  831.539936][    T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  831.543445][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  831.554029][    T9] usb 5-1: config 0 descriptor??
[  831.768455][    T9] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  831.865388][ T8655] fuse: fd is not a fuse device
[  831.979572][ T8660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11308'.
[  832.107158][    T9] usb 5-1: USB disconnect, device number 19
[  832.132389][    T9] usblp0: removed
[  832.229314][ T8736] 9p: Bad value for 'rfdno'
[  832.389945][ T8745] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11314'.
[  832.668771][ T8811] tipc: Failed to remove unknown binding: 66,0,0/53686956:2238093895/2238093897
[  832.672530][ T8811] tipc: Failed to remove unknown binding: 66,0,0/53686956:2238093895/2238093896
[  832.676662][ T8811] tipc: Failed to remove unknown binding: 66,0,0/53686956:2238093895/2238093897
[  832.680355][ T8811] tipc: Failed to remove unknown binding: 66,0,0/53686956:2238093895/2238093896
[  832.843141][ T8816] 9p: Bad value for 'rfdno'
[  833.165226][ T8830] netlink: 'syz.9.11322': attribute type 11 has an invalid length.
[  833.255040][ T5820] batadv2: left promiscuous mode
[  833.291101][ T8834] Bluetooth: hci0: unsupported parameter 255
[  833.299425][ T8834] Bluetooth: hci0: unsupported parameter 255
[  833.742670][ T8838] infiniband syz2: set active
[  833.749243][ T8838] infiniband syz2: added team_slave_1
[  833.779464][ T8838] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  833.787837][ T8838] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  833.796228][ T8838] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  833.815503][ T8838] RDS/IB: syz2: added
[  833.817312][ T8838] smc: adding ib device syz2 with port count 1
[  833.819491][ T8838] smc:    ib device syz2 port 1 has no pnetid
[  834.220893][    T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  834.230879][ T5793] net_ratelimit: 82 callbacks suppressed
[  834.230892][ T5793] bond6: (slave gretap1): failed to get link speed/duplex
[  834.236864][ T5793] bond6: (slave dummy0): failed to get link speed/duplex
[  834.351040][ T5793] bond6: (slave gretap1): failed to get link speed/duplex
[  834.353742][ T5793] bond6: (slave dummy0): failed to get link speed/duplex
[  834.380904][    T9] usb 5-1: Using ep0 maxpacket: 16
[  834.390570][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  834.396511][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  834.402254][    T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  834.413322][    T9] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  834.420782][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  834.426488][    T9] usb 5-1: Product: syz
[  834.428022][    T9] usb 5-1: Manufacturer: syz
[  834.432238][    T9] usb 5-1: SerialNumber: syz
[  834.460976][ T5793] bond6: (slave gretap1): failed to get link speed/duplex
[  834.463493][ T5793] bond6: (slave dummy0): failed to get link speed/duplex
[  834.571118][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  834.573930][ T5793] bond6: (slave gretap1): failed to get link speed/duplex
[  834.578536][ T5793] bond6: (slave dummy0): failed to get link speed/duplex
[  834.648620][ T8863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  834.653049][ T8863] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  834.662277][    T9] usb 5-1: Audio class v2/v3 interfaces need an interface association
[  834.662983][ T8881] fuse: fd is not a fuse device
[  834.666707][    T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  834.691027][ T5793] bond6: (slave gretap1): failed to get link speed/duplex
[  834.700168][ T8885] fuse: fd is not a fuse device
[  834.945491][    T9] usb 5-1: USB disconnect, device number 20
[  835.056569][ T8914] fuse: fd is not a fuse device
[  835.072441][ T8917] fuse: fd is not a fuse device
[  835.079824][ T8918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11340'.
[  836.238367][ T8981] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11353'.
[  836.345449][ T9043] fuse: fd is not a fuse device
[  836.735192][  T845] libceph: connect (1)[c::]:6789 error -101
[  836.737835][  T845] libceph: mon0 (1)[c::]:6789 connect error
[  836.873188][ T9049] ceph: No mds server is up or the cluster is laggy
[  837.223962][  T845] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  837.249677][  T845] hid-generic 0000:0000:0000.001E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  838.138866][  T845] libceph: connect (1)[c::]:6789 error -101
[  838.142532][  T845] libceph: mon0 (1)[c::]:6789 connect error
[  838.290399][ T9106] ceph: No mds server is up or the cluster is laggy
[  838.374835][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11370'.
[  839.229301][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11384'.
[  839.230164][ T9142] fuse: fd is not a fuse device
[  839.235043][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11384'.
[  839.243038][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11384'.
[  839.248741][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11384'.
[  839.302479][T26564] net_ratelimit: 85 callbacks suppressed
[  839.302500][T26564] bond6: (slave gretap1): failed to get link speed/duplex
[  839.312926][T26564] bond6: (slave dummy0): failed to get link speed/duplex
[  839.421091][T26564] bond6: (slave gretap1): failed to get link speed/duplex
[  839.424262][T26564] bond6: (slave dummy0): failed to get link speed/duplex
[  839.530888][ T5850] bond6: (slave gretap1): failed to get link speed/duplex
[  839.533305][ T5850] bond6: (slave dummy0): failed to get link speed/duplex
[  839.640867][ T5850] bond6: (slave gretap1): failed to get link speed/duplex
[  839.644042][ T5850] bond6: (slave dummy0): failed to get link speed/duplex
[  839.751256][ T5850] bond6: (slave gretap1): failed to get link speed/duplex
[  839.755228][ T5850] bond6: (slave dummy0): failed to get link speed/duplex
[  840.154997][ T9162] fuse: fd is not a fuse device
[  840.665520][ T9181] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11393'.
[  840.725006][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11393'.
[  840.958028][ T9257] veth0_to_bond: Caught tx_queue_len zero misconfig
[  841.053320][ T9263] fuse: fd is not a fuse device
[  841.159666][ T9267] fuse: fd is not a fuse device
[  841.442700][ T9283] usb_phy_generic usb_phy_generic.0.auto: dummy supplies not allowed for exclusive requests (id=vbus)
[  841.494272][ T9283] dwc2 dwc2.2.auto: supply vusb_d not found, using dummy regulator
[  841.526527][ T9283] dwc2 dwc2.2.auto: supply vusb_a not found, using dummy regulator
[  841.541426][ T9283] dwc2 dwc2.2.auto: Configuration mismatch. dr_mode forced to host
[  841.544084][ T9283] dwc2 dwc2.2.auto: Bad value for GSNPSID: 0x52540012
[  841.884498][ T9314] fuse: fd is not a fuse device
[  841.956135][ T9320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11416'.
[  842.422057][ T9400] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  842.798860][ T9412] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11430'.
[  843.267776][ T9481] fuse: fd is not a fuse device
[  843.306114][ T9483] fuse: fd is not a fuse device
[  843.385202][ T9485] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  843.391294][ T9485] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.467700][ T9485] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  843.471088][ T9485] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.534641][ T9485] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  843.539642][ T9485] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.612771][ T9485] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  843.617784][ T9485] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.741485][T26564] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  843.744098][T26564] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  843.770972][T26564] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  843.773809][T26564] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  843.776707][T26564] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  843.779401][T26564] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  843.782897][T26564] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  843.785751][T26564] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  844.351019][ T5850] net_ratelimit: 84 callbacks suppressed
[  844.351033][ T5850] bond6: (slave gretap1): failed to get link speed/duplex
[  844.355281][ T5850] bond6: (slave dummy0): failed to get link speed/duplex
[  844.460991][ T5850] bond6: (slave gretap1): failed to get link speed/duplex
[  844.463582][ T5850] bond6: (slave dummy0): failed to get link speed/duplex
[  844.571381][T26564] bond6: (slave gretap1): failed to get link speed/duplex
[  844.574386][T26564] bond6: (slave dummy0): failed to get link speed/duplex
[  844.690969][ T5820] bond6: (slave gretap1): failed to get link speed/duplex
[  844.693974][ T5820] bond6: (slave dummy0): failed to get link speed/duplex
[  844.800984][ T5820] bond6: (slave gretap1): failed to get link speed/duplex
[  844.803392][ T5820] bond6: (slave dummy0): failed to get link speed/duplex
[  845.171056][ T9518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11440'.
[  845.378275][   T42] kauditd_printk_skb: 46 callbacks suppressed
[  845.378290][   T42] audit: type=1800 audit(1786019073.469:21418): pid=9587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.11445" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  846.346579][ T9605] fuse: fd is not a fuse device
[  846.551345][    T9] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  846.800735][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  846.807579][    T9] usb 5-1: unable to read config index 0 descriptor/start: -71
[  846.811042][    T9] usb 5-1: can't read configurations, error -71
[  846.863176][ T9642] rdma_rxe: rxe_newlink: failed to add team_slave_1
[  847.134924][ T9649] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11458'.
[  847.527908][ T9718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  847.586152][ T9718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  847.644831][ T9722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  847.791387][ T9726] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11462'.
[  847.804371][ T9726] bond29: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  847.823735][ T9726] bond29 (unregistering): Released all slaves
[  847.980581][ T9793] fuse: fd is not a fuse device
[  848.402607][ T9806] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11467'.
[  849.411395][ T5850] net_ratelimit: 83 callbacks suppressed
[  849.411409][ T5850] bond6: (slave gretap1): failed to get link speed/duplex
[  849.419083][ T5850] bond6: (slave dummy0): failed to get link speed/duplex
[  849.429148][ T9891] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11475'.
[  849.429637][ T9895] netlink: 216 bytes leftover after parsing attributes in process `syz.9.11476'.
[  849.434956][ T9895] netlink: 216 bytes leftover after parsing attributes in process `syz.9.11476'.
[  849.540861][ T5850] bond6: (slave gretap1): failed to get link speed/duplex
[  849.543172][ T5850] bond6: (slave dummy0): failed to get link speed/duplex
[  849.660901][   T13] bond6: (slave gretap1): failed to get link speed/duplex
[  849.664145][   T13] bond6: (slave dummy0): failed to get link speed/duplex
[  849.770911][   T13] bond6: (slave gretap1): failed to get link speed/duplex
[  849.775394][   T13] bond6: (slave dummy0): failed to get link speed/duplex
[  849.880894][T23255] bond6: (slave gretap1): failed to get link speed/duplex
[  849.883367][T23255] bond6: (slave dummy0): failed to get link speed/duplex
[  850.317737][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11482'.
[  850.471616][ T9928] tipc: Enabled bearer <udp:syz2>, priority 10
[  850.492304][ T9928] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11486'.
[  850.507519][ T9928] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  850.514445][ T9928] tipc: Enabled bearer <udp:syz0>, priority 10
[  850.729233][ T9939] fuse: fd is not a fuse device
[  851.010303][T12819] IPVS: starting estimator thread 0...
[  851.059868][ T9952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11495'.
[  851.140776][ T9948] IPVS: using max 43 ests per chain, 103200 per kthread
[  851.283219][T10026] netlink: 'syz.2.11502': attribute type 4 has an invalid length.
[  851.289353][T10026] netlink: 'syz.2.11502': attribute type 4 has an invalid length.
[  851.455586][T10032] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  854.424344][T10079] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11529'.
[  854.501134][   T13] net_ratelimit: 85 callbacks suppressed
[  854.501148][   T13] bond6: (slave gretap1): failed to get link speed/duplex
[  854.508765][   T13] bond6: (slave dummy0): failed to get link speed/duplex
[  854.702282][T10083] tipc: Resetting bearer <eth:team0>
[  854.798029][T10096] netlink: 'syz.9.11526': attribute type 32 has an invalid length.
[  854.802903][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11526'.
[  854.808251][T10096] netlink: 'syz.9.11526': attribute type 32 has an invalid length.
[  855.094307][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  855.106504][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  855.117477][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  855.126208][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  855.150838][   T13] bond6: (slave gretap1): failed to get link speed/duplex
[  855.153225][   T13] bond6: (slave dummy0): failed to get link speed/duplex
[  855.260858][   T13] bond6: (slave gretap1): failed to get link speed/duplex
[  855.263423][   T13] bond6: (slave dummy0): failed to get link speed/duplex
[  855.373268][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  855.376003][   T13] bond6: (slave gretap1): failed to get link speed/duplex
[  855.378708][   T13] bond6: (slave dummy0): failed to get link speed/duplex
[  855.514497][ T5850] bond6: (slave gretap1): failed to get link speed/duplex
[  855.608186][T10110] Config c/1 of g1 needs at least one function.
[  855.614275][T10110] udc usbip-vudc.0: failed to start g1: -22
[  855.616263][T10110] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22
[  855.664702][T10110] UDC core: g1: couldn't find an available UDC or it's busy
[  855.944673][T10147] netlink: 'syz.7.11537': attribute type 1 has an invalid length.
[  856.007590][T10147] 8021q: adding VLAN 0 to HW filter on device bond29
[  856.013383][T10185] bond29: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  856.042204][T10185] bond29: entered allmulticast mode
[  856.558505][T10211] fuse: fd is not a fuse device
[  857.004321][T10233] fuse: fd is not a fuse device
[  857.039455][ T5752] Bluetooth: hci1: Unable to find connection for big 0x00
[  858.036466][T10296] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11572'.
[  859.284790][   T42] audit: type=1804 audit(1786019087.379:21419): pid=10355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.11581" name="bus" dev="ramfs" ino=149531 res=1 errno=0
[  859.293079][   T42] audit: type=1804 audit(1786019087.379:21420): pid=10355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.11581" name="bus" dev="ramfs" ino=149531 res=1 errno=0
[  859.349737][   T42] audit: type=1326 audit(1786019087.439:21421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10354 comm="syz.2.11580" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f13fec code=0x0
[  859.448630][T10361] netlink: 20 bytes leftover after parsing attributes in process `syz.9.11582'.
[  859.459656][T10361] ip6gre1: entered promiscuous mode
[  859.465924][T10361] ip6gre1: entered allmulticast mode
[  859.475810][T10361] netlink: 'syz.9.11582': attribute type 6 has an invalid length.
[  859.479210][T10361] netlink: 72 bytes leftover after parsing attributes in process `syz.9.11582'.
[  859.521116][T26564] net_ratelimit: 70 callbacks suppressed
[  859.521136][T26564] bond6: (slave gretap1): failed to get link speed/duplex
[  859.531138][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  859.531689][T26564] bond6: (slave dummy0): failed to get link speed/duplex
[  859.651093][   T13] bond6: (slave gretap1): failed to get link speed/duplex
[  859.653544][   T13] bond6: (slave dummy0): failed to get link speed/duplex
[  859.770953][ T5850] bond6: (slave gretap1): failed to get link speed/duplex
[  859.774713][ T5850] bond6: (slave dummy0): failed to get link speed/duplex
[  859.880879][ T5793] bond6: (slave gretap1): failed to get link speed/duplex
[  859.883370][ T5793] bond6: (slave dummy0): failed to get link speed/duplex
[  860.000894][ T5850] bond6: (slave gretap1): failed to get link speed/duplex
[  862.007587][T10402] fuse: fd is not a fuse device
[  862.490275][T10438] netlink: 'syz.9.11604': attribute type 1 has an invalid length.
[  862.505520][T10438] 8021q: adding VLAN 0 to HW filter on device bond10
[  862.522592][T10438] bond10: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  862.528172][T10438] bond10: entered allmulticast mode
[  862.638916][T10483] overlayfs: failed to clone upperpath
[  862.924949][T10498] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11611'.
[  863.019780][T10500] tipc: Resetting bearer <eth:dummy0>
[  863.087669][T10500] bond7: left promiscuous mode
[  863.113582][T10500] ip6gre1: left promiscuous mode
[  863.115334][T10500] ip6gre1: left allmulticast mode
[  863.118214][T10500] bond10: left allmulticast mode
[  863.183171][T10502] tipc: Resetting bearer <eth:team0>
[  863.203504][T10506] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11622'.
[  863.276898][T10502] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  863.289607][T10502] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  863.384058][T10538] syz2: Port: 1 Link DOWN
[  863.561765][T10588] fuse: fd is not a fuse device
[  863.616383][T10593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11619'.
[  863.622495][T10593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  863.771039][ T5836] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  863.923424][ T5836] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  863.927004][ T5836] usb 5-1: config 0 has no interfaces?
[  863.928840][ T5836] usb 5-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00
[  863.932214][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  863.937256][ T5836] usb 5-1: config 0 descriptor??
[  864.141938][    C3] raw-gadget.0 gadget.0: ignoring, device is not running
[  864.144545][    C3] raw-gadget.0 gadget.0: ignoring, device is not running
[  864.147019][ T5836] usb 5-1: string descriptor 0 read error: -71
[  864.155407][ T5836] usb 5-1: USB disconnect, device number 23
[  864.211102][T10608] fuse: fd is not a fuse device
[  864.730899][    C3] net_ratelimit: 57 callbacks suppressed
[  864.730914][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  864.793545][T10625] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11629'.
[  865.771011][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  866.810906][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  867.109479][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11655'.
[  867.166419][T10716] fuse: fd is not a fuse device
[  867.184254][T10718] overlayfs: failed to clone upperpath
[  867.235668][T10720] lo: Caught tx_queue_len zero misconfig
[  867.851329][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  868.385892][T10751] overlayfs: failed to clone upperpath
[  868.426285][T10756] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11675'.
[  868.565886][T10763] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11678'.
[  868.625783][T10798] fuse: fd is not a fuse device
[  868.675352][T10763] 8021q: adding VLAN 0 to HW filter on device bond31
[  868.707015][T10763] bond31 (unregistering): Released all slaves
[  868.890915][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  868.936762][T10876] netlink: 'syz.7.11683': attribute type 1 has an invalid length.
[  868.974407][T10876] bond31: entered promiscuous mode
[  868.976865][T10876] 8021q: adding VLAN 0 to HW filter on device bond31
[  869.011490][T10876] bond31: (slave bridge0): making interface the new active one
[  869.016795][T10876] bridge0: entered promiscuous mode
[  869.020689][T10876] bond31: (slave bridge0): Enslaving as an active interface with an up link
[  869.032587][T10876] bridge0: Device is already in use.
[  869.716289][T10933] fuse: fd is not a fuse device
[  869.772102][ T1443] ieee802154 phy1 wpan1: encryption failed: -22
[  869.930922][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  869.934455][T10955] netlink: 5 bytes leftover after parsing attributes in process `syz.2.11697'.
[  870.262493][T10988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11702'.
[  870.971062][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  871.580926][ T5850] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  871.586395][ T5850] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  871.590622][ T5850] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  871.595788][ T5850] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  871.598593][ T5850] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  871.601758][ T5850] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  871.604466][ T5850] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  871.607155][ T5850] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  872.010879][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  872.365973][T11079] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  872.403959][T11085] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11731'.
[  873.051072][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  874.090957][    C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  874.208437][T11105] ==================================================================
[  874.210997][T11105] BUG: KASAN: slab-use-after-free in __release_resource+0x276/0x2c0
[  874.213486][T11105] Read of size 8 at addr ffff888075889038 by task syz.0.11738/11105
[  874.217135][T11105] 
[  874.218535][T11105] CPU: 0 UID: 0 PID: 11105 Comm: syz.0.11738 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  874.218554][T11105] Tainted: [L]=SOFTLOCKUP
[  874.218559][T11105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  874.218566][T11105] Call Trace:
[  874.218571][T11105]  <TASK>
[  874.218576][T11105]  dump_stack_lvl+0x100/0x190
[  874.218594][T11105]  print_report+0x13d/0x4b0
[  874.218612][T11105]  ? __virt_addr_valid+0x239/0x430
[  874.218628][T11105]  ? __release_resource+0x276/0x2c0
[  874.218642][T11105]  kasan_report+0xdf/0x1c0
[  874.218660][T11105]  ? __release_resource+0x276/0x2c0
[  874.218675][T11105]  __release_resource+0x276/0x2c0
[  874.218690][T11105]  release_resource+0x26/0x40
[  874.218704][T11105]  pci_remove_bus_device+0x2d3/0x3b0
[  874.218736][T11105]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[  874.218752][T11105]  remove_store+0x123/0x140
[  874.218775][T11105]  ? __pfx_remove_store+0x10/0x10
[  874.218791][T11105]  ? find_held_lock+0x2b/0x80
[  874.218805][T11105]  ? sysfs_file_kobj+0xe4/0x290
[  874.218819][T11105]  ? sysfs_file_kobj+0xe4/0x290
[  874.218833][T11105]  ? __pfx_remove_store+0x10/0x10
[  874.218848][T11105]  dev_attr_store+0x58/0x80
[  874.218872][T11105]  ? __pfx_dev_attr_store+0x10/0x10
[  874.218888][T11105]  sysfs_kf_write+0xf2/0x150
[  874.218904][T11105]  kernfs_fop_write_iter+0x3e0/0x5f0
[  874.218917][T11105]  ? __pfx_sysfs_kf_write+0x10/0x10
[  874.218933][T11105]  vfs_write+0x6ac/0x1050
[  874.218945][T11105]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  874.218959][T11105]  ? __pfx_vfs_write+0x10/0x10
[  874.218969][T11105]  ? find_held_lock+0x2b/0x80
[  874.218988][T11105]  ksys_write+0x12a/0x250
[  874.218997][T11105]  ? __pfx_ksys_write+0x10/0x10
[  874.219009][T11105]  __do_fast_syscall_32+0xe7/0x970
[  874.219028][T11105]  do_fast_syscall_32+0x32/0x70
[  874.219042][T11105]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  874.219056][T11105] RIP: 0023:0xf7f13fec
[  874.219071][T11105] Code: Unable to access opcode bytes at 0xf7f13fc2.
[  874.219077][T11105] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  874.219088][T11105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300
[  874.219095][T11105] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  874.219102][T11105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  874.219108][T11105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  874.219115][T11105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  874.219126][T11105]  </TASK>
[  874.219130][T11105] 
[  874.296934][T11105] Allocated by task 9283:
[  874.298298][T11105]  kasan_save_stack+0x30/0x50
[  874.299807][T11105]  kasan_save_track+0x14/0x30
[  874.301297][T11105]  __kasan_kmalloc+0xaa/0xb0
[  874.302878][T11105]  __kmalloc_node_track_caller_noprof+0x331/0x830
[  874.305162][T11105]  kmemdup_noprof+0x29/0x60
[  874.306612][T11105]  platform_device_add_resources+0x37/0x100
[  874.308473][T11105]  dwc2_pci_probe+0x1d3/0x360
[  874.309953][T11105]  local_pci_probe+0xdd/0x1b0
[  874.311441][T11105]  pci_call_probe+0x176/0x800
[  874.312927][T11105]  pci_device_probe+0x1cd/0x370
[  874.314485][T11105]  really_probe+0x241/0xa60
[  874.315929][T11105]  __driver_probe_device+0x20e/0x450
[  874.317580][T11105]  device_driver_attach+0xd1/0x220
[  874.319204][T11105]  bind_store+0xf4/0x190
[  874.320536][T11105]  drv_attr_store+0x74/0xb0
[  874.321971][T11105]  sysfs_kf_write+0xf2/0x150
[  874.323433][T11105]  kernfs_fop_write_iter+0x3e0/0x5f0
[  874.325127][T11105]  vfs_write+0x6ac/0x1050
[  874.326484][T11105]  ksys_write+0x12a/0x250
[  874.327888][T11105]  __do_fast_syscall_32+0xe7/0x970
[  874.329526][T11105]  do_fast_syscall_32+0x32/0x70
[  874.331060][T11105]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  874.333185][T11105] 
[  874.334049][T11105] Freed by task 11105:
[  874.335633][T11105]  kasan_save_stack+0x30/0x50
[  874.337134][T11105]  kasan_save_track+0x14/0x30
[  874.338646][T11105]  kasan_save_free_info+0x3b/0x70
[  874.340253][T11105]  __kasan_slab_free+0x5f/0x80
[  874.341773][T11105]  kfree+0x22b/0x6c0
[  874.343021][T11105]  platform_device_release+0x8a/0xb0
[  874.344730][T11105]  device_release+0xd2/0x270
[  874.346202][T11105]  kobject_put+0x1f7/0x640
[  874.347639][T11105]  put_device+0x1f/0x30
[  874.348955][T11105]  platform_device_unregister+0x45/0x50
[  874.350696][T11105]  dwc2_pci_remove+0x55/0xd0
[  874.352177][T11105]  pci_device_remove+0xb2/0x1d0
[  874.353712][T11105]  device_remove+0xcb/0x180
[  874.355232][T11105]  device_release_driver_internal+0x44e/0x620
[  874.357125][T11105]  pci_stop_bus_device+0x120/0x160
[  874.358739][T11105]  pci_stop_and_remove_bus_device+0x58/0xa0
[  874.360609][T11105]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[  874.362636][T11105]  remove_store+0x123/0x140
[  874.364095][T11105]  dev_attr_store+0x58/0x80
[  874.365561][T11105]  sysfs_kf_write+0xf2/0x150
[  874.367027][T11105]  kernfs_fop_write_iter+0x3e0/0x5f0
[  874.368709][T11105]  vfs_write+0x6ac/0x1050
[  874.370080][T11105]  ksys_write+0x12a/0x250
[  874.371456][T11105]  __do_fast_syscall_32+0xe7/0x970
[  874.373079][T11105]  do_fast_syscall_32+0x32/0x70
[  874.374633][T11105]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  874.376614][T11105] 
[  874.377385][T11105] The buggy address belongs to the object at ffff888075889000
[  874.377385][T11105]  which belongs to the cache kmalloc-128 of size 128
[  874.381652][T11105] The buggy address is located 56 bytes inside of
[  874.381652][T11105]  freed 128-byte region [ffff888075889000, ffff888075889080)
[  874.385900][T11105] 
[  874.386671][T11105] The buggy address belongs to the physical page:
[  874.388671][T11105] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75889
[  874.391383][T11105] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[  874.393616][T11105] page_type: f5(slab)
[  874.394913][T11105] raw: 04fff00000000000 ffff88801bc42a00 dead000000000100 dead000000000122
[  874.397568][T11105] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  874.400224][T11105] page dumped because: kasan: bad access detected
[  874.402200][T11105] page_owner tracks the page as allocated
[  874.403910][T11105] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 30921, tgid 30920 (syz.2.9534), ts 674857785941, free_ts 673001781135
[  874.410719][T11105]  post_alloc_hook+0xfd/0x120
[  874.412200][T11105]  get_page_from_freelist+0xf48/0x3530
[  874.413898][T11105]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  874.415799][T11105]  new_slab+0xa2/0x640
[  874.417020][T11105]  refill_objects+0xe3/0x410
[  874.418421][T11105]  __pcs_replace_empty_main+0x376/0x680
[  874.420162][T11105]  __kmalloc_noprof+0x66d/0x820
[  874.421702][T11105]  hash_netportnet4_resize+0xd25/0x1e60
[  874.423465][T11105]  call_ad.isra.0+0x36d/0x940
[  874.425041][T11105]  ip_set_ad.isra.0+0x3eb/0x8a0
[  874.426593][T11105]  nfnetlink_rcv_msg+0x9d5/0x11e0
[  874.428186][T11105]  netlink_rcv_skb+0x159/0x420
[  874.429688][T11105]  nfnetlink_rcv+0x1b3/0x440
[  874.431174][T11105]  netlink_unicast+0x585/0x850
[  874.432719][T11105]  netlink_sendmsg+0x8b0/0xda0
[  874.434279][T11105]  ____sys_sendmsg+0xa4d/0xbe0
[  874.436091][T11105] page last free pid 30902 tgid 30901 stack trace:
[  874.438148][T11105]  __free_frozen_pages+0x79f/0x1090
[  874.439796][T11105]  qlist_free_all+0x47/0xf0
[  874.441224][T11105]  kasan_quarantine_reduce+0x1a0/0x1f0
[  874.442924][T11105]  __kasan_slab_alloc+0x69/0x90
[  874.444492][T11105]  __kmalloc_noprof+0x2bf/0x820
[  874.446033][T11105]  tomoyo_encode2+0xfb/0x3c0
[  874.447524][T11105]  tomoyo_encode+0x29/0x50
[  874.448935][T11105]  tomoyo_mount_acl+0x388/0x8b0
[  874.450474][T11105]  tomoyo_mount_permission+0x214/0x460
[  874.452205][T11105]  security_sb_mount+0xdd/0x270
[  874.453747][T11105]  path_mount+0x158/0x23d0
[  874.455230][T11105]  __ia32_sys_mount+0x292/0x310
[  874.456772][T11105]  __do_fast_syscall_32+0xe7/0x970
[  874.458398][T11105]  do_fast_syscall_32+0x32/0x70
[  874.459923][T11105]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  874.461877][T11105] 
[  874.462647][T11105] Memory state around the buggy address:
[  874.464453][T11105]  ffff888075888f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  874.466957][T11105]  ffff888075888f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  874.469417][T11105] >ffff888075889000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  874.471901][T11105]                                         ^
[  874.473744][T11105]  ffff888075889080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  874.476261][T11105]  ffff888075889100: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc
[  874.478741][T11105] ==================================================================
[  874.481968][T11105] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  874.484333][T11105] CPU: 0 UID: 0 PID: 11105 Comm: syz.0.11738 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  874.487743][T11105] Tainted: [L]=SOFTLOCKUP
[  874.489098][T11105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  874.492207][T11105] Call Trace:
[  874.493262][T11105]  <TASK>
[  874.494231][T11105]  dump_stack_lvl+0x100/0x190
[  874.495727][T11105]  vpanic+0x552/0x970
[  874.496951][T11105]  ? __pfx_vpanic+0x10/0x10
[  874.498335][T11105]  ? mark_held_locks+0x40/0x70
[  874.499809][T11105]  ? irqentry_exit+0x24d/0xa00
[  874.501253][T11105]  ? __release_resource+0x276/0x2c0
[  874.502887][T11105]  panic+0xd1/0xe0
[  874.504085][T11105]  ? __pfx_panic+0x10/0x10
[  874.505510][T11105]  check_panic_on_warn.cold+0x19/0x34
[  874.507205][T11105]  end_report.part.0+0x3a/0x90
[  874.508729][T11105]  kasan_report.cold+0xe/0x18
[  874.510376][T11105]  ? __release_resource+0x276/0x2c0
[  874.512132][T11105]  __release_resource+0x276/0x2c0
[  874.513715][T11105]  release_resource+0x26/0x40
[  874.515260][T11105]  pci_remove_bus_device+0x2d3/0x3b0
[  874.516935][T11105]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[  874.518981][T11105]  remove_store+0x123/0x140
[  874.520439][T11105]  ? __pfx_remove_store+0x10/0x10
[  874.522035][T11105]  ? find_held_lock+0x2b/0x80
[  874.523550][T11105]  ? sysfs_file_kobj+0xe4/0x290
[  874.525322][T11105]  ? sysfs_file_kobj+0xe4/0x290
[  874.526951][T11105]  ? __pfx_remove_store+0x10/0x10
[  874.528555][T11105]  dev_attr_store+0x58/0x80
[  874.529998][T11105]  ? __pfx_dev_attr_store+0x10/0x10
[  874.531632][T11105]  sysfs_kf_write+0xf2/0x150
[  874.533102][T11105]  kernfs_fop_write_iter+0x3e0/0x5f0
[  874.534705][T11105]  ? __pfx_sysfs_kf_write+0x10/0x10
[  874.536314][T11105]  vfs_write+0x6ac/0x1050
[  874.537673][T11105]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  874.539504][T11105]  ? __pfx_vfs_write+0x10/0x10
[  874.540967][T11105]  ? find_held_lock+0x2b/0x80
[  874.542462][T11105]  ksys_write+0x12a/0x250
[  874.543833][T11105]  ? __pfx_ksys_write+0x10/0x10
[  874.545390][T11105]  __do_fast_syscall_32+0xe7/0x970
[  874.547005][T11105]  do_fast_syscall_32+0x32/0x70
[  874.548555][T11105]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  874.550532][T11105] RIP: 0023:0xf7f13fec
[  874.551833][T11105] Code: Unable to access opcode bytes at 0xf7f13fc2.
[  874.553899][T11105] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  874.556514][T11105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300
[  874.558981][T11105] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  874.561443][T11105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  874.563829][T11105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  874.566311][T11105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  874.568787][T11105]  </TASK>
[  874.570464][T11105] Kernel Offset: disabled
[  874.571833][T11105] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:38:19  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85a13075 RDI=ffffffff9b9f51a0 RBP=ffffffff9b9f5160 RSP=ffffc900031df530
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3537303838386652
R12=0000000000000000 R13=0000000000000073 R14=ffffffff9b6f5224 R15=ffffffff85a13010
RIP=ffffffff85a1309f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096be1000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f4f70ff4 CR3=00000000504f2000 CR4=00352ef0
DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b51eaa RDX=ffff88801c73a540
RSI=ffffffff81b51ece RDI=ffff88801c73a540 RBP=0000000000000001 RSP=ffffc9000046fdf8
R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000
RIP=ffffffff81b51ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096ce1000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000000000000 CR3=000000000e994000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e7e7940d17765d34 fcfdcba06c01e245
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0db6da491da92bf7 c4de336fa41856d6
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4b786a58ead81a a7caba13b5db747b
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0f75657e0ff938d4 25ac5f3bc5ae712c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000b040
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6a4c06005c884400 0001968f00019693
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d8b978003e39fa00 000083d196939801
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fa1d6a000001968e 0001968d0001968d
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 be7e2a7724000001 efc0e60000000001
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9142f91945d7d8cc b04a711bfc42d4b3
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 207389f5cf50c7d6 427626217d7a9cd1
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000080000002 RBX=ffff88804cf69b08 RCX=ffffffff820c3afd RDX=0000000000000b1c
RSI=0000000000000f30 RDI=0000000000000004 RBP=0000000000000b1c RSP=ffffc900073dfa18
R8 =0000000000000004 R9 =0000000000000f30 R10=0000000000000b1c R11=0000000000000000
R12=0000000000000f30 R13=0000000000000024 R14=000000cb8dffabf1 R15=ffff88804cf69010
RIP=ffffffff8209a6c0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096de1000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000563c446d8f40 CR3=000000005cc19000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=ffffffffffffffff RBX=ffffc900033dff48 RCX=0000000000000000 RDX=00000000ffffffff
RSI=0000000000000014 RDI=ffffc900033dff48 RBP=ffffc900033dff20 RSP=ffffc900033dfee8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffff888057b7ca80 R13=0000000000000014 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81cd2da0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096ee1000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000002d80eff8 CR3=0000000078d1e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000