last executing test programs:

12m53.494217114s ago: executing program 32 (id=1552):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

10m30.3651577s ago: executing program 33 (id=2509):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x9, 0x40, 0x40, 0x41}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x2000007d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000000100)=r0}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38)

7m41.40885023s ago: executing program 34 (id=3896):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
close(0x4)
close(0x3)

7m37.400223627s ago: executing program 35 (id=3905):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000500006804c00040067636d286165732900000000000000000000000000000000000000000000000024"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0)

5m59.571137781s ago: executing program 6 (id=4183):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x143080, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x400c404)
sched_setscheduler(0x0, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
r1 = gettid()
rt_tgsigqueueinfo(0x0, r1, 0x20, &(0x7f0000000000)={0x27, 0x101, 0xbc})
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x50)

5m58.291300983s ago: executing program 6 (id=4190):
rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8)
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="20014000000020"], 0x0})
syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="20012900000005"], 0x0})
syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58)
setitimer(0x0, &(0x7f00000002c0)={{0x0, 0xea60}, {0x77359400}}, 0x0)
rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x13, 0x4, 0x8, 0xb}, 0x50)

5m54.181678625s ago: executing program 6 (id=4198):
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8005, &(0x7f0000000000)=0x3f, 0x9, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a)
set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0)

5m52.298443143s ago: executing program 6 (id=4203):
fcntl$addseals(0xffffffffffffffff, 0x409, 0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xa)
r3 = dup(r2)
keyctl$chown(0x4, 0x0, 0xee01, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x200000, 0x0)
r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c)
ftruncate(r4, 0x200004)
sendfile(r3, r4, 0x0, 0x80001d00c0d1)

5m51.281625749s ago: executing program 6 (id=4207):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x10, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136)
fsync(r1)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c082)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRESDEC=0x0], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0xc806)

5m50.759494841s ago: executing program 6 (id=4208):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000)
socket$pppoe(0x18, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf78", 0xe4}], 0x2}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0)
close(r1)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

5m35.680772667s ago: executing program 36 (id=4208):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000)
socket$pppoe(0x18, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf78", 0xe4}], 0x2}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0)
close(r1)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

3m51.272134874s ago: executing program 0 (id=4563):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, 0x0)
write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"})
r1 = syz_open_pts(r0, 0x200)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff)
r3 = syz_io_uring_setup(0x5f38, &(0x7f00000005c0)={0x0, 0x2, 0x800, 0x3, 0x17c}, &(0x7f0000000080)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x800000000000002, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x0, 0x1})
io_uring_enter(r3, 0x6516, 0x6d93, 0x8, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000024712760cd82a8ab9101d7d84d915e8318aa7da3384e48953e0a2d84de1b9123", @ANYRES16=r7, @ANYBLOB="00092abd7000fcdbdf250b000000080003000800000008000300000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000200)={0x1, 0xffffffffffffffff, 0x19, {0x3, 0xc82}, 0xb}, 0x1)

3m50.063127703s ago: executing program 0 (id=4568):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = dup2(r2, r1)
write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffffe, 0x8)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xffffffff)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r3})
close(0x3)

3m49.740698409s ago: executing program 0 (id=4569):
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
mkdir(0x0, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
chdir(0x0)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x1, 0x256, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x0, 0xe8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90c, 0x800, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffd, 0xb10, 0x0, 0x0}}, 0x0)
r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r7, 0xa)
landlock_restrict_self(r7, 0xe)

3m49.187909083s ago: executing program 0 (id=4571):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$get_keyring_id(0x0, r2, 0x1)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)

3m48.084397669s ago: executing program 0 (id=4573):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000a0020000000000000000000050014000000000008000400", @ANYRES32=0x0, @ANYBLOB="0c000e"], 0x38}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x2016}}}, 0x7)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0xc000003, 0xf, &(0x7f0000000080)=[0x1e, 0x9, 0x2, 0x4, 0x4, 0xffffdffa, 0x2d7b, 0x40000003, 0x5d, 0x5, 0xfffffffa, 0x8, 0x6, 0x880e, 0x5], 0x2, 0x4000007})
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

3m47.778852688s ago: executing program 7 (id=4579):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
move_pages(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000001680), 0x2)
r1 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0)

3m45.974791279s ago: executing program 7 (id=4584):
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
mkdir(0x0, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
chdir(0x0)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x1, 0x256, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x0, 0xe8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90c, 0x800, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffd, 0xb10, 0x0, 0x0}}, 0x0)
r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r7, 0xa)
landlock_restrict_self(r7, 0xe)

3m44.785754944s ago: executing program 7 (id=4586):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$get_keyring_id(0x0, r2, 0x1)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)

3m44.532447653s ago: executing program 0 (id=4587):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x84, 0x2}, {0x5, 0x7, 0x2}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfc4, 0x1, 0x5}, {0xc, 0x0, 0x2, 0x1, 0x4, 0x0, 0x2}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002300)="81", 0x5dc}], 0x1}, 0x4)

3m44.194140373s ago: executing program 7 (id=4588):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000006c0), 0x28c9c1, 0x0)
socket(0x10, 0x803, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x71}}}, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
r4 = openat$cgroup_pressure(r3, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
write$cgroup_pressure(r4, &(0x7f00000000c0)={'full', 0x20, 0x17e, 0x20, 0x800000000104002}, 0x2f)
close_range(r0, 0xffffffffffffffff, 0x0)

3m43.351597119s ago: executing program 7 (id=4591):
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r3 = dup3(r2, r1, 0x0)
recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x6}], 0x1, 0x40002021, 0x0)

3m42.892773254s ago: executing program 7 (id=4593):
iopl(0x3)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)

3m29.49656742s ago: executing program 37 (id=4587):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x84, 0x2}, {0x5, 0x7, 0x2}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfc4, 0x1, 0x5}, {0xc, 0x0, 0x2, 0x1, 0x4, 0x0, 0x2}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002300)="81", 0x5dc}], 0x1}, 0x4)

3m27.442112797s ago: executing program 38 (id=4593):
iopl(0x3)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)

1m40.957601242s ago: executing program 8 (id=4834):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x8000000ffffffff)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_io_uring_setup(0x5b0f, &(0x7f0000000180)={0x0, 0xfffffffc, 0x80, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0)

1m38.723459835s ago: executing program 8 (id=4839):
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r3], 0x20}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001600), 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x404c080)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r1, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x15b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1eff}]]}, 0x58}, 0x1, 0x0, 0x0, 0x40015}, 0x8000)

1m38.244811673s ago: executing program 2 (id=4840):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000380)=0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

1m36.576411393s ago: executing program 2 (id=4847):
socket$nl_xfrm(0x10, 0x3, 0x6)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
socket$pppl2tp(0x18, 0x1, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1)
mknod(0x0, 0x1000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)

1m36.417782769s ago: executing program 8 (id=4848):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x7, 0x4, 0x2, 0x8, 0x6, 0x6, 0x1, 0x7, 0x4, 0x10, 0x4], 0x3, [0x2, 0x5, 0x7fff, 0x56, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x3, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x7, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004)

1m33.145759572s ago: executing program 2 (id=4853):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0})
syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @multicast2}}, 0x24)
sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r1, &(0x7f0000002940)=[{{0x0, 0xffffffffffffff0a, 0x0}, 0x2}], 0xf000, 0x10002, 0x0)

1m33.145584703s ago: executing program 8 (id=4854):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, r3)
setpgid(0x0, r3)
fchdir(r2)
lstat(&(0x7f00000001c0)='./file0\x00', 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

1m32.082925079s ago: executing program 8 (id=4855):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x20000001, 0xffffffff, 0x1, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0x7, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x3f, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

1m32.031737259s ago: executing program 2 (id=4863):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x4000001)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000600)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x2, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x9, 0x3c, 0x6}}}, 0x3b)
syz_80211_inject_frame(&(0x7f00000002c0), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000780)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x5, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @val={0x6, 0x2, 0xfff3}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x84, 0x1}}}, 0x3b)
mkdir(&(0x7f0000000080)='./file1\x00', 0x8)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x10001}}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc, 0x4}, {0xc}}}]}]}, 0x64}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m30.643890151s ago: executing program 3 (id=4856):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000380)=0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

1m29.618524845s ago: executing program 2 (id=4859):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x37)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

1m29.471563142s ago: executing program 8 (id=4860):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x98, 0x2c, 0xd27, 0x170bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x68, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff, 0x6, 0x2, 0x9, 0x9}, 0x101}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x884}, 0x40)
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000006125ce882cbf400930bf4", 0x1e}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c4", 0x10}], 0x2}, 0x8000)

1m29.32928113s ago: executing program 2 (id=4861):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000040)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x800)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)

1m28.620039921s ago: executing program 3 (id=4864):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008014)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmsg(r2, 0x0, 0x10000)
recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0)
unshare(0x2c020400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(0x4)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x4)
close(0x4)

1m27.741542531s ago: executing program 3 (id=4865):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0x5)
socket$kcm(0x1e, 0x1, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvfrom(r0, 0x0, 0x9400, 0x10132, 0x0, 0x0)

1m26.767997779s ago: executing program 3 (id=4866):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x200, 0x7)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_default\x00')
openat(0xffffffffffffff9c, 0x0, 0x40, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m25.323798046s ago: executing program 3 (id=4867):
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$rxrpc(0x21, 0x2, 0xa)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000080)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

1m14.214032149s ago: executing program 3 (id=4869):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x2)
ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0x1)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000))
r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x6)
ioctl$TCXONC(r3, 0x540a, 0x3)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000140)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}, 0x3e)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newtfilter={0x2c, 0x2c, 0xd2f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {}, {0xa, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in6=@private2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2b, 0x0, 0xee00}, {@in=@loopback, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xf}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, {0x0, 0x4, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1m14.09707288s ago: executing program 39 (id=4860):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x98, 0x2c, 0xd27, 0x170bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x68, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff, 0x6, 0x2, 0x9, 0x9}, 0x101}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x884}, 0x40)
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000006125ce882cbf400930bf4", 0x1e}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c4", 0x10}], 0x2}, 0x8000)

1m14.023494318s ago: executing program 40 (id=4861):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000040)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x800)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)

59.200141986s ago: executing program 41 (id=4869):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x2)
ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0x1)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000))
r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x6)
ioctl$TCXONC(r3, 0x540a, 0x3)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000140)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}, 0x3e)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newtfilter={0x2c, 0x2c, 0xd2f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {}, {0xa, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in6=@private2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2b, 0x0, 0xee00}, {@in=@loopback, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xf}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, {0x0, 0x4, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

8.959037054s ago: executing program 4 (id=4963):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5, <r6=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3268}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xf00}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0xf0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63)

8.599631475s ago: executing program 1 (id=4965):
pipe2$9p(0x0, 0x4000)
fcntl$addseals(0xffffffffffffffff, 0x409, 0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xa)
r3 = dup(r2)
keyctl$chown(0x4, 0x0, 0xee01, 0x0)
mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x200000, 0x0)
r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c)
ftruncate(r4, 0x200004)
sendfile(r3, r4, 0x0, 0x80001d00c0d1)

7.82671801s ago: executing program 4 (id=4968):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0)
syz_clone3(&(0x7f0000000080)={0x2a694b000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe2$9p(&(0x7f0000000080), 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x6}, @ETHTOOL_A_LINKMODES_LANES={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x14000000}, 0x24000040)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

7.801483275s ago: executing program 4 (id=4969):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10b, 0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"})
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000480)={&(0x7f0000000380)="e1", 0x1})
openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, 0x0)

7.762806891s ago: executing program 4 (id=4970):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
close(0xffffffffffffffff)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe2(&(0x7f0000000580)={<r2=>0xffffffffffffffff}, 0x0)
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
tee(r2, r3, 0xfffffffffffffc01, 0x0)
tee(r2, r3, 0x1fc, 0x0)

7.613440943s ago: executing program 1 (id=4971):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
write$tun(r0, &(0x7f00000000c0)=ANY=[], 0xfdef)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, r3)
setpgid(0x0, r3)
fchdir(r2)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
chroot(&(0x7f0000000200)='./file0\x00')

6.045847401s ago: executing program 9 (id=4973):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x11, 0x4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97O\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7)
ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x762})
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/192, 0xc0, 0x0, &(0x7f0000000440)=""/249, 0xf9}, &(0x7f0000000580)=0x40)
r4 = socket$inet(0x2, 0x1, 0x0)
listen(r4, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0)
writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1)

5.752686559s ago: executing program 4 (id=4974):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x1, 0x4}, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4)
write$P9_RREADLINK(r3, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab)
syz_io_uring_setup(0x6b27, 0x0, 0x0, &(0x7f0000000340), 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0xf4240}], 0x1}], 0x1, 0x0)

5.528847395s ago: executing program 5 (id=4975):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xf810e1ec5ff6e0d1, &(0x7f0000000000)={0x5, &(0x7f00000001c0)=[{0x1, 0x7, 0x7, 0x2}, {0x2, 0x8, 0x8, 0x3}, {0x2, 0xb6, 0x9, 0x2}, {0xc678, 0x1, 0x9, 0x4}, {0x8001, 0xf9, 0x3, 0x2}]})
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000200)=[@txtime={{0x14, 0x1, 0x3d, 0x7}}], 0x4}, 0x40004)
openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10)
r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r6=>0x0})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x3c1, 0x3, 0x498, 0x2a0, 0x940c, 0x3002, 0x0, 0x2c0, 0x3d0, 0x3d8, 0x3d8, 0x3d0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x3f, 0x1, 0x0, 'syz1\x00'}}, @common=@unspec=@string={{0xc0}, {0x1, 0xff, 'kmp\x00', "eef75f699fa8fba225b312fe8e314b912b547bd59c9504ff39a8001e851639b07d6a649cc3e9d5d1aeb384ec997b5b4c2aab9b199f807558bf6e54e138cc1afb2685f561524bd88620f320533ef385daaf1f9e0b4980a7e77a5c5eb2dc1c41ad2af0a7e1fc46cb8bd67717a801452045c7282e131f2483c20fb1d9d7ade6b805", 0x3d, 0x3, {0xf}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4f4)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x4, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
setsockopt$inet6_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "31f19589992c8ef3", "d96e78e2204a508de452a277bc294c91d9156e94e5042064b50aad9051c805c8", "43b045ce", "ebbaa92c169b7e76"}, 0x38)
sendfile(r2, r3, 0x0, 0x4000000000010046)
close_range(r0, 0xffffffffffffffff, 0x0)

5.25758295s ago: executing program 5 (id=4976):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
r2 = io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e})
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x13, &(0x7f0000001bc0), 0x2)
sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x880)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, [0x1200000000000, 0x1, 0x7, 0x3, 0xec, 0x2, 0x5, 0x1578, 0x7, 0x100000001, 0x1, 0x5, 0x9, 0x3, 0x4492]}, &(0x7f0000000440)=0x100)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r4, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @private2}, 0x1c)
shutdown(r4, 0x1)

5.012860518s ago: executing program 9 (id=4977):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r1, 0x0, 0x0, 0x0, 0x0, 0x2}])
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e)
capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000240))
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
recvmsg(r3, &(0x7f0000002200)={&(0x7f00000002c0)=@llc, 0x80, &(0x7f0000002140)=[{&(0x7f0000000500)=""/147, 0x93}, {&(0x7f00000005c0)=""/159, 0x9f}, {&(0x7f0000000680)=""/254, 0xfe}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/146, 0x92}, {&(0x7f0000002080)=""/142, 0x8e}], 0x6, &(0x7f0000002180)=""/77, 0x4d}, 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x1, 0xfffffffffffffff7}}, 0x513300)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r5=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=<r6=>0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000480)={0x0, 0x18e0, 0x10000, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x1fe, 0x5, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x1, 0x118}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xb66, 0x0, 0x0}}, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000006, 0x10010, r0, 0xd1877000)
ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0})

4.765323213s ago: executing program 5 (id=4978):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0200"})
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
close(0x3)

4.720779105s ago: executing program 4 (id=4979):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014)

4.528976394s ago: executing program 9 (id=4980):
r0 = socket$nl_route(0x10, 0x3, 0x0)
landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x3}, 0x18, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x300, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000023c0)={0x0, 'bridge_slave_0\x00', {0x2}, 0xc0})
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)

4.416253233s ago: executing program 1 (id=4981):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'xfrm0\x00'})
poll(&(0x7f0000000040)=[{r1, 0x2}, {r0, 0x8080}, {r1, 0x440a}], 0x3, 0x1)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe80"], 0x0)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0xa, 0x4}, 0x20)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x18}, 0xc044)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4.210908118s ago: executing program 5 (id=4982):
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r1, &(0x7f00000001c0)="5cba91", 0x3)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x204)
writev(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)

4.129656506s ago: executing program 9 (id=4983):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
socket(0x1, 0x803, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2)
writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="cd", 0x1}], 0x1)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

2.947064564s ago: executing program 1 (id=4984):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0})
syz_open_dev$mouse(0x0, 0x0, 0x2042)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/252], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
r2 = userfaultfd(0x1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

2.706981727s ago: executing program 9 (id=4985):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x20, 0x8, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "12000000f7ffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9"}, 0x28)
shutdown(r2, 0x1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000080)=0x1, 0xfffffffffffffd5b)
sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f8, 0x8, 0x70bd2b, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x88}, 0x4000001)
sendfile(r2, r3, 0x0, 0xffffffff004)
ioctl$PPPIOCSPASS(r3, 0x40087447, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x4, 0xf7, 0x5, 0x7ff}, {0x8, 0x7, 0x80, 0x7}, {0x2, 0x0, 0xff, 0x4}, {0x3, 0xe, 0x69, 0x2}, {0x9, 0x7, 0x1, 0x7}, {0x9, 0xe9, 0x55, 0x6}]})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.620240115s ago: executing program 5 (id=4986):
r0 = socket$key(0xf, 0x3, 0x2)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, 0x0, 0x0)
getsockopt$inet_buf(r2, 0x0, 0x2c, &(0x7f0000000000)=""/44, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r3, 0x402c542c, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r4, 0x8910, &(0x7f00000011c0)={0x6, 0xffff, 0x0, 0xd, 0x0, "5dee0000ea584000"})
readv(r3, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1)
socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})

1.154403069s ago: executing program 5 (id=4987):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000)
read(r1, &(0x7f00000002c0)=""/153, 0x99)
r2 = memfd_create(&(0x7f0000000500)='\x14\xa3\xbb\a\x002RgZ*\xc5\x9e[,\xe5uR\x94\xaa\xdc0\xe6n\xb8\xea\xe8\x99Lh(\xc7\xbb_\x81\x15f\xe7\x100\r\x1fE\x82\xf5\xfd\x83\xff{\xa0\x15\xffK\xe4\x98\x93\xf9\xc4!_\x96\xe8&,\xdf\x12\xc0\xa7Y1\x8bUs\x91)\x89\xd0\xa1OF4\xa4fI\a\x84_r\xc6\xdaq%\xd3\x98\n\x7fmF\xa9\xbb\x16\x8bxb\xc8\xfc\xad?\x01\xf40\xf5\xc3\xf3+\xa7\x94=\x96\xe6*~\x18\x9c\xfe\xfe\xdcNWGn\xfa\xf8,\xa9\x84\xf7\xe1RA9\xfeD@\x18b\x1dgz\xdfc\x05>O\xa0\x8b\xce\xe0\x8cS\xfanA\xecx\xc4\xdd\x82aT\xb5b\xc5\xaa\x8fj\xb2\xc3\x96\x96\"&)!Z\x1e\tBq\x96L\x97\xc9G\xaa\x85\xc3C \xa1\x98o\f\xf2\x02\x05oV\a\x82\x9e\")\xfb\xa09b\xb6\v\xb3\xe1p\x97\xe9\x13\xb5-\xc1x<\xc9]\x85\xbb\xb6h\xee\x91Q\xd0V\x80\xbc\x88?\x9cr\x13<\xa5g=CA\xd8d\x86\fr\xee=<c\xb8', 0x4)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000007, 0x13, r2, 0xe4a40000)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000004c0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1})
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0)

927.943729ms ago: executing program 1 (id=4988):
exit(0x5)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
read$FUSE(r0, &(0x7f0000006540)={0x2020}, 0xfffffce2)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$alg(r1, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x4, 0xfd58, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x8000)

311.814613ms ago: executing program 9 (id=4989):
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mount(0x0, 0x0, &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0)
r0 = creat(&(0x7f0000000100)='./file0\x00', 0xa1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0)
rename(0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000080)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000000180), 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

0s ago: executing program 1 (id=4990):
socket$pppoe(0x18, 0x1, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x4, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
userfaultfd(0x80001)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x18, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10)

kernel console output (not intermixed with test programs):

1.635298][T19414] Node 1 DMA32 free:101880kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19604kB inactive_anon:5644kB active_file:35328kB inactive_file:46832kB unevictable:3536kB writepending:728kB zspages:7452kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:39820kB local_pcp:14348kB free_cma:0kB
[  741.635346][T19414] lowmem_reserve[]: 0 0 0 0 0
[  741.635378][T19414] Node 0 DMA: 274*4kB (UE) 76*8kB (UE) 16*16kB (UE) 24*32kB (UE) 10*64kB (UE) 4*128kB (UE) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3880kB
[  741.635541][T19414] Node 0 DMA32: 342*4kB (UMEH) 90*8kB (UMEH) 53*16kB (UME) 79*32kB (UME) 45*64kB (UME) 17*128kB (UME) 5*256kB (U) 3*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 14360kB
[  741.635676][T19414] Node 1 DMA32: 396*4kB (UME) 1406*8kB (UME) 450*16kB (UME) 260*32kB (ME) 155*64kB (UME) 124*128kB (UME) 54*256kB (UME) 10*512kB (UME) 10*1024kB (UM) 9*2048kB (UM) 0*4096kB = 101760kB
[  741.635804][T19414] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  741.635817][T19414] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  741.635829][T19414] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  741.635840][T19414] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  741.635852][T19414] 26070 total pagecache pages
[  741.635859][T19414] 758 pages in swap cache
[  741.635865][T19414] Free swap  = 20548kB
[  741.635871][T19414] Total swap = 124996kB
[  741.635878][T19414] 524155 pages RAM
[  741.635884][T19414] 0 pages HighMem/MovableOnly
[  741.635890][T19414] 211489 pages reserved
[  741.635896][T19414] 0 pages cma reserved
[  741.646896][ T5831] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  741.646923][ T5831] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 3
[  741.660123][ T5831] usb 13-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  741.813280][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  741.826189][ T5831] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.826215][ T5831] usb 13-1: Product: syz
[  741.826228][ T5831] usb 13-1: Manufacturer: syz
[  741.826240][ T5831] usb 13-1: SerialNumber: syz
[  741.835824][ T5831] usb 13-1: 0:2 : does not exist
[  742.090069][ T5831] usb 13-1: 5:0: failed to get current value for ch 0 (-22)
[  742.151486][ T5831] usb 13-1: USB disconnect, device number 3
[  742.247658][T19410] udevd[19410]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  742.733400][T19429] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4524'.
[  742.786254][T19429] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4524'.
[  745.483664][   T13] net_ratelimit: 26 callbacks suppressed
[  745.483685][   T13] bond2: (slave gretap1): failed to get link speed/duplex
[  745.596811][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  745.800382][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  745.907364][T19485] lo speed is unknown, defaulting to 1000
[  745.912576][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  745.917447][T19488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4546'.
[  746.024654][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  746.261433][ T8286] bond2: (slave gretap1): failed to get link speed/duplex
[  746.361292][T19491] syzkaller0: entered promiscuous mode
[  746.364107][T19491] syzkaller0: entered allmulticast mode
[  746.396172][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  746.632435][T19494] fuse: fd is not a fuse device
[  747.230361][ T1438] ieee802154 phy1 wpan1: encryption failed: -22
[  747.484029][T19496] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  747.773246][T19513] netlink: 'syz.8.4551': attribute type 12 has an invalid length.
[  747.808975][T19515] netlink: 'syz.7.4553': attribute type 4 has an invalid length.
[  747.870864][T19516] netlink: 'syz.7.4553': attribute type 4 has an invalid length.
[  748.112700][ T8286] bond2: (slave gretap1): failed to get link speed/duplex
[  748.279359][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  748.482243][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  750.610633][ T5817] net_ratelimit: 14 callbacks suppressed
[  750.610656][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  750.675895][   T29] libceph: connect (1)[c::]:6789 error -97
[  750.726407][   T29] libceph: mon0 (1)[c::]:6789 connect error
[  750.747583][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  750.852424][T19551] ceph: No mds server is up or the cluster is laggy
[  750.889065][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  751.041506][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  751.156455][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  751.273699][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  751.463016][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  751.893312][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  752.181774][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  752.311246][ T8286] bond2: (slave gretap1): failed to get link speed/duplex
[  754.140708][T14156] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  754.302137][T14156] usb 5-1: Using ep0 maxpacket: 16
[  754.309023][T14156] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  754.318615][T14156] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  754.329817][T14156] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  754.350297][T14156] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  754.395577][T14156] usb 5-1: config 0 descriptor??
[  754.998129][   T42] kauditd_printk_skb: 87 callbacks suppressed
[  754.998147][   T42] audit: type=1326 audit(2000000624.809:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19637 comm="syz.2.4581" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x0
[  755.268937][T19636] hsr1: left promiscuous mode
[  755.343024][T19636] bond1: left promiscuous mode
[  755.345391][T19636] vti0: left promiscuous mode
[  755.349450][T19636] bond2: left promiscuous mode
[  755.351563][T19636] ipip0: left promiscuous mode
[  755.387824][T19636] bond4: left promiscuous mode
[  755.391012][T19636] gre1: left promiscuous mode
[  755.748921][T19636] bond6: left promiscuous mode
[  755.906173][T19636] ip6gre1: left promiscuous mode
[  756.141700][T19636] 8021q: adding VLAN 0 to HW filter on device bond7
[  756.190038][T19636] bond9: left promiscuous mode
[  756.193938][T19636] 8021q: adding VLAN 0 to HW filter on device bond9
[  756.218044][T19650] netlink: 'syz.8.4592': attribute type 1 has an invalid length.
[  756.277125][T19636] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  756.297089][T19636] ieee802154 phy0 wpan0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  756.337487][T19636] bond13: left promiscuous mode
[  756.339303][T19636] bridge8: left promiscuous mode
[  756.343018][T19636] bond13: entered allmulticast mode
[  756.345191][T19636] bridge8: entered allmulticast mode
[  756.348682][T19636] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  756.394190][T19636] bridge8: entered promiscuous mode
[  756.403557][T10978] net_ratelimit: 19 callbacks suppressed
[  756.403573][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  756.535935][T14156] usbhid 5-1:0.0: can't add hid device: -71
[  756.544759][T14156] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  756.569466][T14156] usb 5-1: USB disconnect, device number 23
[  756.602423][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  756.733597][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  756.876637][T19650] 8021q: adding VLAN 0 to HW filter on device bond1
[  756.959655][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  757.455971][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  757.467971][T19656] gretap1: entered promiscuous mode
[  757.728610][T19656] bond1: (slave gretap1): making interface the new active one
[  757.947914][T19656] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  758.134012][T19671] syzkaller0: entered promiscuous mode
[  758.148595][T19671] syzkaller0: entered allmulticast mode
[  758.188090][   T13] bond2: (slave gretap1): failed to get link speed/duplex
[  762.689104][T19711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4605'.
[  762.962370][ T5831] usb 13-1: new full-speed USB device number 4 using dummy_hcd
[  763.194785][ T5831] usb 13-1: config 0 has an invalid interface number: 84 but max is 0
[  763.198428][ T5831] usb 13-1: config 0 has no interface number 0
[  763.201465][ T5831] usb 13-1: config 0 interface 84 has no altsetting 0
[  763.257589][ T5831] usb 13-1: New USB device found, idVendor=15c2, idProduct=0046, bcdDevice=34.dc
[  763.264938][ T5831] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  763.271582][ T5831] usb 13-1: Product: syz
[  763.278369][ T5831] usb 13-1: Manufacturer: syz
[  763.283142][ T5831] usb 13-1: SerialNumber: syz
[  763.289499][ T5831] usb 13-1: config 0 descriptor??
[  764.257518][   T50] libceph: connect (1)[c::]:6789 error -101
[  764.260142][   T50] libceph: mon0 (1)[c::]:6789 connect error
[  764.366654][T19726] ceph: No mds server is up or the cluster is laggy
[  764.545093][   T50] libceph: connect (1)[c::]:6789 error -101
[  764.557275][   T50] libceph: mon0 (1)[c::]:6789 connect error
[  765.042975][ T5831] imon 13-1:0.84: unable to register, err -19
[  765.047466][ T5831] usb 13-1: USB disconnect, device number 4
[  766.062214][T14157] usb 13-1: new high-speed USB device number 5 using dummy_hcd
[  766.246303][T14157] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  766.265817][T14157] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  766.272424][T14157] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  766.309596][T14157] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  766.318162][T14157] usb 13-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  766.336439][T14157] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  766.349875][T14157] usb 13-1: Product: syz
[  766.353059][T14157] usb 13-1: Manufacturer: syz
[  766.356086][T14157] usb 13-1: SerialNumber: syz
[  766.373704][T14157] usb 13-1: config 0 descriptor??
[  766.659322][T14157] adutux 13-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  766.861140][T14157] usb 13-1: USB disconnect, device number 5
[  769.846958][ T5755] Bluetooth: hci1: command 0x0406 tx timeout
[  772.951679][ T5755] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  773.078604][ T5755] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  773.143604][ T5755] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  773.172786][ T5755] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  773.193776][ T5755] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  774.624534][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  775.009350][T19760] tipc: Resetting bearer <eth:syzkaller0>
[  775.016344][T19760] 8021q: adding VLAN 0 to HW filter on device bond13
[  775.027203][ T5099] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  775.084091][T19760] bond15: left promiscuous mode
[  775.086304][T19760] bridge13: left promiscuous mode
[  775.096038][T19760] 8021q: adding VLAN 0 to HW filter on device bond16
[  775.100016][T19760] bridge14: left promiscuous mode
[  775.121223][T19760] bond17: left promiscuous mode
[  775.122407][ T5099] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  775.125958][T19760] 8021q: adding VLAN 0 to HW filter on device bond17
[  775.183092][T19760] 8021q: adding VLAN 0 to HW filter on device bond18
[  775.192926][ T5099] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  775.226342][ T5099] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  775.301206][ T5099] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  775.357449][ T5099] Bluetooth: hci2: command tx timeout
[  775.412132][ T5831] lo speed is unknown, defaulting to 1000
[  775.414987][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  775.624325][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  775.761030][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  775.867615][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  776.396099][T12166] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  776.564995][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  776.617952][T19762] lo speed is unknown, defaulting to 1000
[  776.723088][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  776.857460][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  776.984359][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  777.152913][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  777.291301][T19767] lo speed is unknown, defaulting to 1000
[  777.442703][ T5099] Bluetooth: hci2: command tx timeout
[  777.445600][ T5755] Bluetooth: hci5: command tx timeout
[  778.374451][T12166] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  779.233846][T12166] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  779.532312][ T5755] Bluetooth: hci5: command tx timeout
[  779.538281][ T5755] Bluetooth: hci2: command tx timeout
[  779.836196][T19810] net_ratelimit: 4 callbacks suppressed
[  779.836216][T19810] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  780.021432][T12166] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  780.131422][T19762] bridge0: port 1(bridge_slave_0) entered blocking state
[  780.140822][T19762] bridge0: port 1(bridge_slave_0) entered disabled state
[  780.158514][T19762] bridge_slave_0: entered allmulticast mode
[  780.175801][T19762] bridge_slave_0: entered promiscuous mode
[  780.208864][T19762] bridge0: port 2(bridge_slave_1) entered blocking state
[  780.214555][T19762] bridge0: port 2(bridge_slave_1) entered disabled state
[  780.222503][T19762] bridge_slave_1: entered allmulticast mode
[  780.243817][T19762] bridge_slave_1: entered promiscuous mode
[  780.462456][T19762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  780.673462][T19762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  780.894737][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  780.911800][T19762] team0: Port device team_slave_0 added
[  780.917150][T19762] team0: Port device team_slave_1 added
[  781.121649][T19762] batman_adv: batadv0: Adding interface: batadv_slave_0
[  781.131485][T19762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  781.184150][T19762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  781.190697][T19762] batman_adv: batadv0: Adding interface: batadv_slave_1
[  781.224419][T19762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  781.248419][T19762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  781.484899][T19827] netlink: 'syz.8.4618': attribute type 1 has an invalid length.
[  781.603002][ T5755] Bluetooth: hci5: command tx timeout
[  781.605301][ T5099] Bluetooth: hci2: command tx timeout
[  781.708863][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  781.809049][T19829] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  781.833021][T19829] bond3 (unregistering): Released all slaves
[  782.051798][T19833] bridge2: entered promiscuous mode
[  782.162979][T19833] bond2: (slave bridge2): making interface the new active one
[  782.278914][T19833] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  782.337155][T12166] bridge_slave_1: left allmulticast mode
[  782.349589][T19838] netlink: 'syz.2.4619': attribute type 1 has an invalid length.
[  782.359958][T12166] bridge_slave_1: left promiscuous mode
[  782.360303][T12166] bridge0: port 2(bridge_slave_1) entered disabled state
[  782.424249][T12166] bridge_slave_0: left allmulticast mode
[  782.431900][T12166] bridge_slave_0: left promiscuous mode
[  782.442354][T12166] bridge0: port 1(bridge_slave_0) entered disabled state
[  782.549289][ T5099] Bluetooth: hci1: unexpected event for opcode 0x0c1a
[  783.320255][T12166] bond3 (unregistering): (slave gretap1): Releasing active interface
[  783.395669][T12166] bond2 (unregistering): (slave geneve2): Releasing active interface
[  783.401145][T12166] geneve2 (unregistering): left allmulticast mode
[  783.584120][T12166] bond5 (unregistering): (slave bridge2): Releasing backup interface
[  783.587547][T12166] bridge2 (unregistering): left promiscuous mode
[  783.604154][T12166] bridge2 (unregistering): left allmulticast mode
[  783.704894][ T5099] Bluetooth: hci5: command tx timeout
[  783.819077][T12166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  783.826983][T12166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  783.846598][T12166] bond0 (unregistering): Released all slaves
[  783.868391][T12166] bond1 (unregistering): (slave dummy0): Releasing active interface
[  783.890061][T12166] bond1 (unregistering): Released all slaves
[  783.923404][T12166] bond2 (unregistering): Released all slaves
[  783.975009][T12166] bond3 (unregistering): Released all slaves
[  784.006145][T12166] bond4 (unregistering): Released all slaves
[  784.080497][T12166] bond5 (unregistering): Released all slaves
[  784.117457][T19767] bridge0: port 1(bridge_slave_0) entered blocking state
[  784.121207][T19767] bridge0: port 1(bridge_slave_0) entered disabled state
[  784.129326][T19767] bridge_slave_0: entered allmulticast mode
[  784.136531][T19767] bridge_slave_0: entered promiscuous mode
[  784.143427][T19767] bridge0: port 2(bridge_slave_1) entered blocking state
[  784.148125][T19767] bridge0: port 2(bridge_slave_1) entered disabled state
[  784.154727][T19767] bridge_slave_1: entered allmulticast mode
[  784.160104][T19767] bridge_slave_1: entered promiscuous mode
[  784.186251][T19762] hsr_slave_0: entered promiscuous mode
[  784.233899][T19762] hsr_slave_1: entered promiscuous mode
[  784.237749][T19762] debugfs: 'hsr0' already exists in 'hsr'
[  784.240366][T19762] Cannot create hsr debugfs directory
[  784.303460][T19838] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR
[  784.690199][T12166] tipc: Disabling bearer <udp:syz2>
[  784.701692][T12166] tipc: Left network mode
[  784.730172][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  784.792301][T19843] gretap3: entered promiscuous mode
[  785.102714][T19767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  785.110759][T19767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  785.450804][T19767] team0: Port device team_slave_0 added
[  785.497293][T19767] team0: Port device team_slave_1 added
[  785.592263][T19850] syzkaller0: entered promiscuous mode
[  785.595757][T19850] syzkaller0: entered allmulticast mode
[  785.724691][T19767] batman_adv: batadv0: Adding interface: batadv_slave_0
[  785.809142][T19767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  785.835324][T19767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  786.232834][T19767] batman_adv: batadv0: Adding interface: batadv_slave_1
[  786.236221][T19767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  786.249608][T19767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  786.335421][ T5452] 8021q: adding VLAN 0 to HW filter on device eth10
[  786.350992][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  786.560513][T19767] hsr_slave_0: entered promiscuous mode
[  786.579661][T19767] hsr_slave_1: entered promiscuous mode
[  786.652746][T19767] debugfs: 'hsr0' already exists in 'hsr'
[  786.657809][T19767] Cannot create hsr debugfs directory
[  787.337845][T12166] hsr_slave_0: left promiscuous mode
[  787.379104][T12166] hsr_slave_1: left promiscuous mode
[  787.384777][T12166] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  787.393340][T12166] batman_adv: batadv0: Removing interface: batadv_slave_0
[  787.404834][T12166] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  787.411617][T12166] batman_adv: batadv0: Removing interface: batadv_slave_1
[  787.468672][T12166] veth1_macvtap: left promiscuous mode
[  787.471298][T12166] veth0_macvtap: left promiscuous mode
[  787.477722][T12166] veth1_vlan: left promiscuous mode
[  787.480780][T12166] veth0_vlan: left promiscuous mode
[  788.763070][T12166] team0 (unregistering): Port device team_slave_1 removed
[  788.838067][T12166] team0 (unregistering): Port device team_slave_0 removed
[  789.714594][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  789.836079][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  789.975969][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  790.083902][T19762] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  790.182835][T19762] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  790.203101][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  790.210161][T19762] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  790.272643][T19907] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  790.282744][T19907] IPv6: NLM_F_CREATE should be set when creating new route
[  790.319300][T19762] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  791.108167][T19767] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  791.141089][T19767] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  791.341332][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  791.349336][T19762] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  791.398472][T19762] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  791.402615][T19762] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  791.410771][T19762] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  791.469381][ T5452] 8021q: adding VLAN 0 to HW filter on device eth11
[  791.593670][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  791.755217][T19762] 8021q: adding VLAN 0 to HW filter on device bond0
[  791.780722][T19762] 8021q: adding VLAN 0 to HW filter on device team0
[  791.946506][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  792.016831][ T7676] bridge0: port 1(bridge_slave_0) entered blocking state
[  792.020655][ T7676] bridge0: port 1(bridge_slave_0) entered forwarding state
[  792.087026][ T7676] bridge0: port 2(bridge_slave_1) entered blocking state
[  792.097912][ T7676] bridge0: port 2(bridge_slave_1) entered forwarding state
[  792.149499][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  792.391506][T19767] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  792.607088][T19767] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  792.689751][ T5452] 8021q: adding VLAN 0 to HW filter on device eth12
[  792.744543][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  792.805009][T19931] syzkaller0: entered promiscuous mode
[  792.807081][T19931] syzkaller0: entered allmulticast mode
[  794.063816][T19767] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  794.071172][T19767] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  794.216171][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  794.289564][ T5452] 8021q: adding VLAN 0 to HW filter on device eth13
[  794.389412][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  794.816872][T12166] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  794.823419][T12166] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.473206][T19767] team0: Port device macvlan2 removed
[  795.620416][T19767] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.624467][T19767] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  795.934580][T12166] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  795.967252][T12166] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  796.056318][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  796.182396][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  796.266590][T19762] 8021q: adding VLAN 0 to HW filter on device batadv0
[  796.328058][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  796.575245][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  796.859055][T12166] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  796.879929][T12166] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  797.062369][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  797.246625][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  797.674805][T12166] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  797.719743][T12166] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.049329][T19762] veth0_vlan: entered promiscuous mode
[  798.058460][T19762] veth1_vlan: entered promiscuous mode
[  798.177290][T19762] veth0_macvtap: entered promiscuous mode
[  798.211271][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  798.218433][T19767] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  798.263439][T19767] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  798.267143][T19767] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  798.304973][T19767] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  798.310464][T19767] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  798.490459][T19767] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  798.523009][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  798.528502][T19762] veth1_macvtap: entered promiscuous mode
[  798.555100][T19767] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  798.591717][T19767] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  798.663198][T19762] batman_adv: batadv0: Interface activated: batadv_slave_0
[  798.822507][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  798.846582][T19762] batman_adv: batadv0: Interface activated: batadv_slave_1
[  799.060597][T19802] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  799.067080][T19802] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  799.188057][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  799.192285][T19802] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  799.196762][T19802] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  799.280887][T12166] bridge_slave_1: left allmulticast mode
[  799.295285][T12166] bridge_slave_1: left promiscuous mode
[  799.306928][T12166] bridge0: port 2(bridge_slave_1) entered disabled state
[  799.437376][T12166] bridge_slave_0: left allmulticast mode
[  799.439625][T12166] bridge_slave_0: left promiscuous mode
[  799.441908][T12166] bridge0: port 1(bridge_slave_0) entered disabled state
[  801.803257][T12166] bond1 (unregistering): (slave vti0): Releasing backup interface
[  801.947800][T12166] 0��{X�� (unregistering): left promiscuous mode
[  802.023481][T12166] bond7 (unregistering): (slave gretap0): Releasing backup interface
[  802.113624][T12166] bond4 (unregistering): (slave gre1): Releasing backup interface
[  802.405371][T12166] bond2 (unregistering): (slave ipip0): Releasing backup interface
[  802.750316][T12166] bond12 (unregistering): (slave geneve2): Releasing active interface
[  802.757495][T12166] geneve2 (unregistering): left allmulticast mode
[  803.252755][T12166] bond13 (unregistering): (slave bridge8): Releasing backup interface
[  803.259222][T12166] bridge8 (unregistering): left allmulticast mode
[  803.277951][T12166] bond1 (unregistering): Released all slaves
[  803.297888][T12166] bond2 (unregistering): Released all slaves
[  803.335599][T12166] bond3 (unregistering): Released all slaves
[  803.369950][T12166] bond4 (unregistering): Released all slaves
[  803.396443][T12166] bond0 (unregistering): Released all slaves
[  803.452413][T12166] bond5 (unregistering): (slave veth17): Releasing active interface
[  803.501120][T12166] bond5 (unregistering): Released all slaves
[  803.557254][T12166] bond6 (unregistering): Released all slaves
[  803.620856][T12166] bond7 (unregistering): (slave bond8): Releasing backup interface
[  803.681796][T12166] bond7 (unregistering): Released all slaves
[  803.731720][T12166] bond8 (unregistering): Released all slaves
[  803.757535][T12166] bond9 (unregistering): Released all slaves
[  803.819309][T12166] bond10 (unregistering): (slave dummy0): Releasing active interface
[  803.843026][T12166] bond10 (unregistering): Released all slaves
[  803.953467][T12166] bond11 (unregistering): Released all slaves
[  803.998187][T12166] bond12 (unregistering): Released all slaves
[  804.068825][T12166] bond13 (unregistering): left allmulticast mode
[  804.227073][T12166] bond13 (unregistering): Released all slaves
[  804.250644][ T5452] 8021q: adding VLAN 0 to HW filter on device eth14
[  804.640367][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  804.941829][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  805.089560][T19767] 8021q: adding VLAN 0 to HW filter on device bond0
[  805.139722][ T7626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  805.275125][T12166] tipc: Left network mode
[  805.338565][ T7626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  805.369693][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  805.442463][T19767] 8021q: adding VLAN 0 to HW filter on device team0
[  805.548614][ T7625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  805.552028][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  805.554909][ T7625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  805.618433][ T7625] bridge0: port 1(bridge_slave_0) entered blocking state
[  805.623293][ T7625] bridge0: port 1(bridge_slave_0) entered forwarding state
[  805.650945][ T7625] bridge0: port 2(bridge_slave_1) entered blocking state
[  805.670059][ T7625] bridge0: port 2(bridge_slave_1) entered forwarding state
[  805.754047][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  805.942762][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  806.133641][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  806.489125][T20066] netlink: 'syz.2.4651': attribute type 1 has an invalid length.
[  806.512465][ T5826] usb 14-1: new full-speed USB device number 2 using dummy_hcd
[  806.804868][ T5452] 8021q: adding VLAN 0 to HW filter on device eth15
[  806.817131][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  806.845726][ T5826] usb 14-1: config 0 has an invalid interface number: 84 but max is 0
[  806.870876][ T5826] usb 14-1: config 0 has no interface number 0
[  806.874041][ T5826] usb 14-1: config 0 interface 84 has no altsetting 0
[  806.890838][ T5826] usb 14-1: New USB device found, idVendor=15c2, idProduct=0046, bcdDevice=34.dc
[  806.898085][ T5826] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  806.919955][ T5826] usb 14-1: Product: syz
[  806.924082][ T5826] usb 14-1: Manufacturer: syz
[  806.926179][ T5826] usb 14-1: SerialNumber: syz
[  806.955285][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  807.048420][ T5826] usb 14-1: config 0 descriptor??
[  807.114588][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  808.658558][ T1438] ieee802154 phy1 wpan1: encryption failed: -22
[  809.031319][ T5826] imon 14-1:0.84: unable to register, err -19
[  809.075248][ T5826] usb 14-1: USB disconnect, device number 2
[  809.448742][ T5452] 8021q: adding VLAN 0 to HW filter on device eth16
[  809.676289][T19802] net_ratelimit: 4 callbacks suppressed
[  809.676309][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  809.776744][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  809.871258][T19767] 8021q: adding VLAN 0 to HW filter on device batadv0
[  810.455034][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  810.678861][T19767] veth0_vlan: entered promiscuous mode
[  810.704470][T19767] veth1_vlan: entered promiscuous mode
[  810.761237][T20126] bridge_slave_0: left allmulticast mode
[  810.765584][T20126] bridge_slave_0: left promiscuous mode
[  810.770041][T20126] bridge0: port 1(bridge_slave_0) entered disabled state
[  810.930940][T20126] bridge_slave_1: left allmulticast mode
[  810.935664][T20126] bridge_slave_1: left promiscuous mode
[  810.938414][T20126] bridge0: port 2(bridge_slave_1) entered disabled state
[  811.214381][T20126] bond0: (slave bond_slave_0): Releasing backup interface
[  811.591273][T20126] bond0: (slave bond_slave_1): Releasing backup interface
[  811.759514][T20126] team0: Port device team_slave_0 removed
[  811.775687][T20126] team0: Port device team_slave_1 removed
[  811.778898][T20126] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  811.803552][T20126] batman_adv: batadv0: Removing interface: batadv_slave_0
[  811.815752][T20126] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  811.823099][T20126] batman_adv: batadv0: Removing interface: batadv_slave_1
[  811.964628][T20126] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  812.091076][T20127] team0: Port device xfrm0 added
[  812.135546][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  812.199897][T20129] tipc: Started in network mode
[  812.221878][T20129] tipc: Node identity 16dd94c82957, cluster identity 4711
[  812.244237][T20129] tipc: Enabled bearer <eth:team0>, priority 0
[  813.400975][ T5452] 8021q: adding VLAN 0 to HW filter on device eth17
[  813.597249][T14156] tipc: Node number set to 1066046664
[  813.961248][T12166] veth0_to_batadv: left promiscuous mode
[  814.290303][T12166] hsr_slave_0: left promiscuous mode
[  814.298426][T12166] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  814.311034][T12166] batman_adv: batadv0: Removing interface: batadv_slave_0
[  814.403527][T12166] veth1_macvtap: left promiscuous mode
[  814.442700][T12166] veth0_macvtap: left promiscuous mode
[  814.445524][T12166] veth1_vlan: left promiscuous mode
[  814.447907][T12166] veth0_vlan: left promiscuous mode
[  815.742729][T12166] team0 (unregistering): Port device team_slave_1 removed
[  816.146033][T20159] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  816.252864][T20164] syzkaller0: entered promiscuous mode
[  816.255432][T20164] syzkaller0: entered allmulticast mode
[  816.282779][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  817.074765][T19767] veth0_macvtap: entered promiscuous mode
[  817.144960][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  817.215291][T19767] veth1_macvtap: entered promiscuous mode
[  817.427710][T20196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4671'.
[  817.647133][T19767] batman_adv: batadv0: Interface activated: batadv_slave_0
[  817.685784][T20203] ptrace attach of "/syz-executor exec"[5749] was attempted by ""[20203]
[  817.752406][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  817.758648][T19767] batman_adv: batadv0: Interface activated: batadv_slave_1
[  818.093194][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  818.135596][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  818.268383][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  818.415457][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  818.426085][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  818.517166][ T5609] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  818.590833][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  818.693029][ T7626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  818.715992][ T7626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  818.849257][ T7630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  818.864795][ T7630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  819.032956][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  819.153253][T12166] IPVS: stop unused estimator thread 0...
[  819.160382][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  819.338775][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  819.408507][   T42] audit: type=1804 audit(2000000689.179:4999): pid=20230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4611" name="/newroot/0/file0/file0" dev="9p" ino=72876353 res=1 errno=0
[  819.424720][T20230] netfs: Duplicate cookie detected
[  819.430266][   T42] audit: type=1326 audit(2000000689.239:5000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20236 comm="syz.8.4679" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x0
[  819.453917][T20230] netfs: O-cookie c=0000000d [fl=5088 na=2 nA=0 s=-]
[  819.456958][T20230] netfs: O-cookie V=00000012 [9p,syz,]
[  819.459852][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  819.470053][T20230] netfs: O-key=[8] '3f01580400000000'
[  819.470078][T20230] netfs: N-cookie c=0000000e [fl=0 na=0 nA=0 s=-]
[  819.470094][T20230] netfs: N-cookie V=00000012 [9p,syz,]
[  819.470106][T20230] netfs: N-key=[8] '3f01580400000000'
[  821.394567][T12166] net_ratelimit: 11 callbacks suppressed
[  821.394587][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  821.431395][T20261] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4683'.
[  821.436136][T20261] netlink: 'syz.8.4683': attribute type 30 has an invalid length.
[  821.463740][T12166] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  821.477857][T20261] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4683'.
[  821.497410][T20261] netlink: 'syz.8.4683': attribute type 30 has an invalid length.
[  821.522412][T12166] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  821.679554][T12166] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  821.720590][T12166] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  821.725955][ T7696] wlan1: Trigger new scan to find an IBSS to join
[  821.735712][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  821.903785][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  822.027022][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  822.154330][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  822.276582][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  822.396164][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  822.534230][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  822.673580][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  822.843029][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  822.871438][T20264] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  824.258309][T20269] overlayfs: failed to resolve './cgroup': -2
[  824.672612][T20277] bond17: (slave dummy0): Releasing active interface
[  824.706936][T20277] dummy0: left allmulticast mode
[  824.929217][T20279] bridge_slave_0: left allmulticast mode
[  824.946446][T20279] bridge_slave_0: left promiscuous mode
[  824.949466][T20279] bridge0: port 1(bridge_slave_0) entered disabled state
[  824.966226][T20279] bridge_slave_1: left allmulticast mode
[  824.973017][T20279] bridge_slave_1: left promiscuous mode
[  824.981467][T20279] bridge0: port 2(bridge_slave_1) entered disabled state
[  825.278929][T20279] bond0: (slave bond_slave_0): Releasing backup interface
[  825.638677][T20279] bond0: (slave bond_slave_1): Releasing backup interface
[  825.673756][ T7625] wlan1: Trigger new scan to find an IBSS to join
[  825.713323][T20279] team0: Port device team_slave_0 removed
[  825.741289][T20279] team0: Port device team_slave_1 removed
[  825.750097][T20279] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  825.757640][T20279] batman_adv: batadv0: Removing interface: batadv_slave_0
[  825.812989][T20279] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  825.816025][T20279] batman_adv: batadv0: Removing interface: batadv_slave_1
[  825.846451][T20280] team0: Mode changed to "activebackup"
[  825.860243][T20281] team0: Device xfrm0 is of different type
[  826.812144][T20282] tipc: Started in network mode
[  826.836894][T20282] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  826.873930][T20282] tipc: Enabled bearer <eth:team0>, priority 0
[  826.877124][T20283] tipc: Enabled bearer <eth:team0>, priority 0
[  827.013299][T12166] net_ratelimit: 13 callbacks suppressed
[  827.013323][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  827.060974][ T7696] wlan1: Creating new IBSS network, BSSID 72:8c:1d:30:0b:b2
[  827.130056][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  827.354377][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  827.468843][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  827.595959][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  827.759866][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  827.876301][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  827.976343][ T5826] tipc: Node number set to 11578026
[  828.028414][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  828.423619][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  829.427626][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  832.061093][T19802] net_ratelimit: 19 callbacks suppressed
[  832.061115][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  832.249150][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  832.442373][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  832.615220][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  832.995985][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  833.112077][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  833.230902][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  833.280838][T20396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4718'.
[  833.330351][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  833.435033][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  833.678301][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  835.417026][T20415] netlink: 'syz.9.4722': attribute type 1 has an invalid length.
[  835.490422][T20416] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4722'.
[  835.587317][T20417] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4722'.
[  836.211166][T20421] syzkaller0: entered promiscuous mode
[  836.216674][T20421] syzkaller0: entered allmulticast mode
[  836.898346][T20428] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4726'.
[  837.184298][T19802] net_ratelimit: 23 callbacks suppressed
[  837.184321][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  837.293250][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  837.403003][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  837.632262][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  837.728311][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  837.912388][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  838.052872][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  838.188158][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  838.320779][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  838.428678][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  839.579095][T20445] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9)
[  839.581884][T20445] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  839.587419][T20445] vhci_hcd vhci_hcd.0: Device attached
[  839.945807][T20448] vhci_hcd: connection closed
[  839.963354][T12166] vhci_hcd vhci_hcd.8: stop threads
[  839.967959][T12166] vhci_hcd vhci_hcd.8: release socket
[  839.993727][T12166] vhci_hcd vhci_hcd.8: disconnect device
[  840.000123][T18292] usb 54-1: enqueue for inactive port 0
[  840.656427][T18292] usb usb54-port1: attempt power cycle
[  841.340648][T18292] usb usb54-port1: unable to enumerate USB device
[  842.262903][T19801] net_ratelimit: 31 callbacks suppressed
[  842.262923][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  842.523059][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  843.033879][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  843.058382][   T42] audit: type=1800 audit(2000000712.869:5001): pid=20490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4743" name="/" dev="fuse" ino=1 res=0 errno=0
[  843.148623][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  843.311297][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  843.462482][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  843.561578][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  843.659830][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  843.879070][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  844.042340][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  845.094089][T20508] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9)
[  845.096561][T20508] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  845.099760][T20508] vhci_hcd vhci_hcd.0: Device attached
[  845.528084][T18292] usb 56-1: SetAddress Request (2) to port 0
[  845.532796][T18292] usb 56-1: new SuperSpeed USB device number 2 using vhci_hcd
[  846.162908][T20509] vhci_hcd: connection reset by peer
[  846.240047][T12166] vhci_hcd vhci_hcd.9: stop threads
[  846.242604][T12166] vhci_hcd vhci_hcd.9: release socket
[  846.245194][T12166] vhci_hcd vhci_hcd.9: disconnect device
[  847.427246][T20517] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4749'.
[  847.465732][T12166] net_ratelimit: 24 callbacks suppressed
[  847.465754][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  847.675168][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  847.724688][T20521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4750'.
[  847.728123][T20521] bond8: option mode: unable to set because the bond device has slaves
[  847.813557][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  847.944391][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  848.073180][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  848.316164][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  848.435687][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  848.691523][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  848.816250][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  848.941074][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  849.890339][T20546] batman_adv: batadv0: Adding interface: dummy0
[  849.926716][T20546] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  850.064767][T20546] batman_adv: batadv0: Interface activated: dummy0
[  850.812864][T18292] usb 56-1: device descriptor read/8, error -110
[  851.024515][T20554] Process accounting resumed
[  851.349627][T20569] lo speed is unknown, defaulting to 1000
[  851.397320][T18292] usb usb56-port1: attempt power cycle
[  852.056174][T18292] usb usb56-port1: unable to enumerate USB device
[  852.972922][ T5609] net_ratelimit: 41 callbacks suppressed
[  852.972944][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  853.113806][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  854.225449][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  854.335581][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  854.425491][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  854.495860][T20584] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  854.587645][T20589] syzkaller0: entered promiscuous mode
[  854.590574][T20589] syzkaller0: entered allmulticast mode
[  854.765198][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  854.802456][T20584] tipc: Resetting bearer <eth:syzkaller0>
[  854.885968][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  854.892812][T20589] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4768'.
[  855.230122][T20583] tipc: Resetting bearer <eth:syzkaller0>
[  855.582913][T20583] tipc: Disabling bearer <eth:syzkaller0>
[  855.710867][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  855.905119][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  856.102644][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  856.943130][T20616] comedi: valid board names for 8255 driver are:
[  856.955055][T20616]  8255
[  856.959315][T20616] comedi: valid board names for vmk80xx driver are:
[  856.964461][T20616]  vmk80xx
[  856.977035][T20616] comedi: valid board names for usbduxsigma driver are:
[  856.983248][T20616]  usbduxsigma
[  856.986065][T20616] comedi: valid board names for usbduxfast driver are:
[  856.990437][T20616]  usbduxfast
[  856.992860][T20616] comedi: valid board names for usbdux driver are:
[  856.997033][T20616]  usbdux
[  856.999036][T20616] comedi: valid board names for ni6501 driver are:
[  857.004650][T20616]  ni6501
[  857.006972][T20616] comedi: valid board names for dt9812 driver are:
[  857.017031][ T7715] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  857.027914][T20617] Cannot find set identified by id 0 to match
[  857.032818][T20616]  dt9812
[  857.050387][T20616] comedi: valid board names for ni_labpc_cs driver are:
[  857.053362][T20616]  ni_labpc_cs
[  857.054812][T20616] comedi: valid board names for ni_daq_700 driver are:
[  857.068078][T20616]  ni_daq_700
[  857.069643][T20616] comedi: valid board names for labpc_pci driver are:
[  857.073139][T20616]  labpc_pci
[  857.075699][T20616] comedi: valid board names for adl_pci9118 driver are:
[  857.081313][T20616]  pci9118dg
[  857.084999][T20616]  pci9118hg
[  857.115267][T20616]  pci9118hr
[  857.116862][T20616] comedi: valid board names for 8255_pci driver are:
[  857.119676][T20616]  8255_pci
[  857.121089][T20616] comedi: valid board names for s526 driver are:
[  857.124600][T20616]  s526
[  857.126259][T20616] comedi: valid board names for multiq3 driver are:
[  857.137929][T20616]  multiq3
[  857.149483][T20616] comedi: valid board names for pcmuio driver are:
[  857.152213][T20616]  pcmuio48
[  857.154169][T20616]  pcmuio96
[  857.156227][T20616] comedi: valid board names for pcmmio driver are:
[  857.161150][T20616]  pcmmio
[  857.164515][T20616] comedi: valid board names for pcmda12 driver are:
[  857.171806][T20616]  pcmda12
[  857.180740][T20616] comedi: valid board names for pcmad driver are:
[  857.185021][T20616]  pcmad12
[  857.188864][T20616]  pcmad16
[  857.192127][T20616] comedi: valid board names for ni_labpc driver are:
[  857.215378][T20616]  lab-pc-1200
[  857.217899][T20616]  lab-pc-1200ai
[  857.220101][T20616]  lab-pc+
[  857.257186][T20616] comedi: valid board names for atmio16 driver are:
[  857.261657][T20616]  atmio16
[  857.264511][T20616]  atmio16d
[  857.266751][T20616] comedi: valid board names for ni_at_ao driver are:
[  857.279342][T20616]  at-ao-6
[  857.283839][T20616]  at-ao-10
[  857.287273][T20616] comedi: valid board names for ni_at_a2150 driver are:
[  857.306628][T20616]  ni_at_a2150
[  857.308510][T20616] comedi: valid board names for adq12b driver are:
[  857.311254][T20616]  adq12b
[  857.313100][T20616] comedi: valid board names for mpc624 driver are:
[  857.329842][T20616]  mpc624
[  857.331188][T20616] comedi: valid board names for c6xdigio driver are:
[  857.334598][T20616]  c6xdigio
[  857.336912][T20616] comedi: valid board names for aio_iiro_16 driver are:
[  857.358494][T20616]  aio_iiro_16
[  857.364946][T20616] comedi: valid board names for aio_aio12_8 driver are:
[  857.375255][T20616]  aio_aio12_8
[  857.379706][T20616]  aio_ai12_8
[  857.390379][T20616]  aio_ao12_4
[  857.393102][T20616] comedi: valid board names for fl512 driver are:
[  857.410740][T20616]  fl512
[  857.429392][T20616] comedi: valid board names for dmm32at driver are:
[  857.440470][T20616]  dmm32at
[  857.442677][T20616] comedi: valid board names for dt282x driver are:
[  857.448864][T20616]  dt2821
[  857.450795][T20616]  dt2821-f
[  857.453279][T20616]  dt2821-g
[  857.455721][T20616]  dt2823
[  857.457686][T20616]  dt2824-pgh
[  857.459984][T20616]  dt2824-pgl
[  857.478800][T20616]  dt2825
[  857.486354][T20616]  dt2827
[  857.488368][T20616]  dt2828
[  857.490234][T20616]  dt2829
[  857.499629][T20616]  dt21-ez
[  857.501270][T20616]  dt23-ez
[  857.503826][T20616]  dt24-ez
[  857.505561][T20616]  dt24-ez-pgl
[  857.507082][T20616] comedi: valid board names for dt2817 driver are:
[  857.509834][T20616]  dt2817
[  857.511142][T20616] comedi: valid board names for dt2815 driver are:
[  857.514743][T20616]  dt2815
[  857.515923][T20616] comedi: valid board names for dt2814 driver are:
[  857.519453][T20616]  dt2814
[  857.521211][T20616] comedi: valid board names for dt2811 driver are:
[  857.554013][T20616]  dt2811-pgh
[  857.555610][T20616]  dt2811-pgl
[  857.557473][T20616] comedi: valid board names for dt2801 driver are:
[  857.560941][T20616]  dt2801
[  857.573538][T20616] comedi: valid board names for das6402 driver are:
[  857.578168][T20616]  das6402-12
[  857.580727][T20616]  das6402-16
[  857.583800][T20616] comedi: valid board names for das1800 driver are:
[  857.593144][T20616]  das-1701st
[  857.598518][T20616]  das-1701st-da
[  857.614798][T20616]  das-1702st
[  857.618510][T20616]  das-1702st-da
[  857.620689][T20616]  das-1702hr
[  857.624000][T20616]  das-1702hr-da
[  857.626024][T20616]  das-1701ao
[  857.628399][T20616]  das-1702ao
[  857.629921][T20616]  das-1801st
[  857.631761][T20616]  das-1801st-da
[  857.639019][T20616]  das-1802st
[  857.641481][T20616]  das-1802st-da
[  857.647385][T20616]  das-1802hr
[  857.676182][T20616]  das-1802hr-da
[  857.678918][T20616]  das-1801hc
[  857.680378][T20616]  das-1802hc
[  857.683084][T20616]  das-1801ao
[  857.689527][T20616]  das-1802ao
[  857.700696][T20616] comedi: valid board names for das800 driver are:
[  857.704420][T20616]  das-800
[  857.708305][T20616]  cio-das800
[  857.710294][T20616]  das-801
[  857.716981][T20616]  cio-das801
[  857.720306][T20616]  das-802
[  857.721857][T20616]  cio-das802
[  857.724273][T20616]  cio-das802/16
[  857.734208][T20616] comedi: valid board names for isa-das08 driver are:
[  857.744777][T20616]  isa-das08
[  857.750210][T20616]  das08-pgm
[  857.754687][T20616]  das08-pgh
[  857.756879][T20616]  das08-pgl
[  857.760817][T20616]  das08-aoh
[  857.764880][T20616]  das08-aol
[  857.767237][T20616]  das08-aom
[  857.771721][T20616]  das08/jr-ao
[  857.783200][T20616]  das08jr-16-ao
[  857.784844][T20616]  pc104-das08
[  857.786563][T20616]  das08jr/16
[  857.788599][T20616] comedi: valid board names for das16m1 driver are:
[  857.804138][T20616]  das16m1
[  857.805866][T20616] comedi: valid board names for dac02 driver are:
[  857.810048][T20616]  dac02
[  857.824475][T20616] comedi: valid board names for rti802 driver are:
[  857.836603][T20616]  rti802
[  857.844944][T20616] comedi: valid board names for rti800 driver are:
[  857.848973][T20616]  rti800
[  857.850456][T20616]  rti815
[  857.861004][T20616] comedi: valid board names for pcm3724 driver are:
[  857.869906][T20616]  pcm3724
[  857.871512][T20616] comedi: valid board names for pcl818 driver are:
[  857.889392][T20616]  pcl818l
[  857.893724][T20616]  pcl818h
[  857.898523][T20616]  pcl818hd
[  857.903235][T20616]  pcl818hg
[  857.908825][T20616]  pcl818
[  857.911190][T20616]  pcl718
[  857.962338][T20616]  pcm3718
[  857.990918][T12166] net_ratelimit: 13 callbacks suppressed
[  857.990937][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  857.993684][T20616] comedi: valid board names for pcl816 driver are:
[  858.026794][T20616]  pcl816
[  858.029356][T20616]  pcl814b
[  858.030709][T20616] comedi: valid board names for pcl812 driver are:
[  858.040060][T20616]  pcl812
[  858.052797][T20616]  pcl812pg
[  858.059182][T20616]  acl8112pg
[  858.073771][T20616]  acl8112dg
[  858.080793][T20616]  acl8112hg
[  858.128924][T20616]  a821pgl
[  858.130278][T20616]  a821pglnda
[  858.131722][T20616]  a821pgh
[  858.133481][T20616]  a822pgl
[  858.134701][T20616]  a822pgh
[  858.148636][T20616]  a823pgl
[  858.150053][T20616]  a823pgh
[  858.151572][T20616]  pcl813
[  858.153424][T20616]  pcl813b
[  858.158328][T20616]  acl8113
[  858.168803][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  858.189494][T20616]  iso813
[  858.189509][T20616]  acl8216
[  858.189606][T20616]  a826pg
[  858.189615][T20616] comedi: valid board names for pcl730 driver are:
[  858.189625][T20616]  pcl730
[  858.189631][T20616]  iso730
[  858.189717][T20616]  acl7130
[  858.189727][T20616]  pcm3730
[  858.189733][T20616]  pcl725
[  858.189739][T20616]  p8r8dio
[  858.189745][T20616]  acl7225b
[  858.189751][T20616]  p16r16dio
[  858.189758][T20616]  pcl733
[  858.189765][T20616]  pcl734
[  858.189771][T20616]  opmm-1616-xt
[  858.189863][T20616]  pearl-mm-p
[  858.189873][T20616]  ir104-pbf
[  858.189880][T20616] comedi: valid board names for pcl726 driver are:
[  858.190125][T20616]  pcl726
[  858.190134][T20616]  pcl727
[  858.190141][T20616]  pcl728
[  858.190148][T20616]  acl6126
[  858.190230][T20616]  acl6128
[  858.190240][T20616] comedi: valid board names for pcl724 driver are:
[  858.190249][T20616]  pcl724
[  858.190255][T20616]  pcl722
[  858.190357][T20616]  pcl731
[  858.190365][T20616]  acl7122
[  858.190372][T20616]  acl7124
[  858.190378][T20616]  pet48dio
[  858.190385][T20616]  pcmio48
[  858.190392][T20616]  onyx-mm-dio
[  858.190399][T20616] comedi: valid board names for pcl711 driver are:
[  858.190486][T20616]  pcl711
[  858.190495][T20616]  pcl711b
[  858.190502][T20616]  acl8112hg
[  858.190509][T20616]  acl8112dg
[  858.190611][T20616] comedi: valid board names for amplc_pc263 driver are:
[  858.190620][T20616]  pc263
[  858.190627][T20616] comedi: valid board names for amplc_pc236 driver are:
[  858.190635][T20616]  pc36at
[  858.190641][T20616] comedi: valid board names for amplc_dio200 driver are:
[  858.190713][T20616]  pc212e
[  858.190721][T20616]  pc214e
[  858.190727][T20616]  pc215e
[  858.190734][T20616]  pc218e
[  858.379202][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  858.392511][T20616]  pc272e
[  858.392528][T20616] comedi: valid board names for comedi_parport driver are:
[  858.392538][T20616]  comedi_parport
[  858.392545][T20616] comedi: valid board names for comedi_test driver are:
[  858.392554][T20616]  comedi_test
[  858.392561][T20616] comedi: valid board names for comedi_bond driver are:
[  858.392569][T20616]  comedi_bond
[  858.617328][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  858.834025][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  858.943196][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  859.060586][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  859.179263][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  859.283134][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  859.519414][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  861.247570][T20650] syzkaller0: entered promiscuous mode
[  861.250214][T20650] syzkaller0: entered allmulticast mode
[  862.164206][T20655] netlink: 'syz.2.4796': attribute type 1 has an invalid length.
[  863.064973][T20659] batman_adv: batadv0: Adding interface: dummy0
[  863.069219][T20659] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  863.084028][T20659] batman_adv: batadv0: Interface activated: dummy0
[  863.099478][T12166] net_ratelimit: 19 callbacks suppressed
[  863.099500][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  863.136608][T20659] batadv0: mtu less than device minimum
[  863.141178][T20659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  863.153400][T20659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  863.158910][T20659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  863.164421][T20659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  863.170350][T20659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  863.177584][T20659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  863.187309][T20659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  863.193938][T20659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  863.202140][T20664] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4791'.
[  863.810984][T20675] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4795'.
[  863.830235][T20675] 8021q: adding VLAN 0 to HW filter on device bond3
[  863.988810][T20675] bond3: (slave ip6erspan0): making interface the new active one
[  864.007184][T20675] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link
[  868.152879][T12166] net_ratelimit: 49 callbacks suppressed
[  868.152902][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  868.376684][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  869.220161][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  869.404556][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  869.547710][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  869.633559][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  869.763444][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  869.902497][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  869.906686][T20734] netlink: 'syz.8.4809': attribute type 1 has an invalid length.
[  870.104481][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  870.108141][ T1438] ieee802154 phy1 wpan1: encryption failed: -22
[  870.213954][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  871.791207][T20765] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  871.859335][T20060] usb 14-1: new high-speed USB device number 3 using dummy_hcd
[  872.042232][T20060] usb 14-1: Using ep0 maxpacket: 32
[  872.051290][T20060] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  872.062386][T20060] usb 14-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  872.090285][T20060] usb 14-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  872.151599][T20060] usb 14-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  872.155006][T20060] usb 14-1: Product: syz
[  872.156671][T20060] usb 14-1: Manufacturer: syz
[  872.161409][T20060] usb 14-1: SerialNumber: syz
[  872.227701][T20060] input: appletouch as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.0/input/input25
[  872.801139][   T10] usb 14-1: USB disconnect, device number 3
[  873.044424][   T10] appletouch 14-1:1.0: input: appletouch disconnected
[  873.249388][ T5817] net_ratelimit: 21 callbacks suppressed
[  873.249410][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  873.357634][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  873.467254][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  873.617923][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  873.725413][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  873.874479][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  873.982135][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  874.145081][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  874.457660][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  874.613376][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  876.666774][T20790] tipc: Resetting bearer <eth:team0>
[  877.836749][T10978] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  877.922129][T10978] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  878.047940][T10978] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  878.056357][T10978] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  878.372354][ T5817] net_ratelimit: 16 callbacks suppressed
[  878.372376][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  878.491111][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  878.570223][T20800] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4829'.
[  878.629718][T20800] 8021q: adding VLAN 0 to HW filter on device bond1
[  878.711148][T20802] bond1: (slave ip6erspan0): making interface the new active one
[  878.764851][T20802] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  878.953569][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  879.072494][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  879.202344][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  879.373640][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  879.499576][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  879.531552][T20772] Set syz1 is full, maxelem 65536 reached
[  879.634585][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  879.726325][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  884.128110][T20839] bridge0: port 2(bridge_slave_1) entered disabled state
[  884.140578][T20839] bridge0: port 1(bridge_slave_0) entered disabled state
[  884.487937][T20839] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  884.514262][T20839] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  885.005718][T20839] gretap1: left promiscuous mode
[  885.011375][T20839] bridge2: left promiscuous mode
[  885.212331][ T5609] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  885.218021][ T5609] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  885.296761][ T5609] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  885.300252][ T5609] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  885.319245][ T5609] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  885.328668][ T5609] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  885.376699][ T5609] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  885.407571][ T5609] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  885.422478][T10978] net_ratelimit: 25 callbacks suppressed
[  885.422502][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  885.712919][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  885.882842][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  885.999036][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  886.132755][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  886.298311][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  886.443396][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  886.586480][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  886.728853][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  886.850729][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  887.225273][T20868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4850'.
[  887.246109][T20868] 8021q: adding VLAN 0 to HW filter on device bond1
[  887.413745][T20868] bond1: (slave ip6erspan0): making interface the new active one
[  887.423779][T20868] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  888.877513][T20876] netlink: 'syz.3.4852': attribute type 1 has an invalid length.
[  889.183528][T20876] 8021q: adding VLAN 0 to HW filter on device bond2
[  889.857375][T20882] bond2: entered allmulticast mode
[  890.318703][T20884] bond2: (slave ip6gretap1): making interface the new active one
[  890.332642][T20884] ip6gretap1: entered allmulticast mode
[  890.392555][T20884] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  891.139061][ T5817] net_ratelimit: 16 callbacks suppressed
[  891.139082][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  891.179402][T20904] syzkaller0: entered promiscuous mode
[  891.181841][T20904] syzkaller0: entered allmulticast mode
[  891.248148][T20913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  891.260207][T20913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  891.295641][T20913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  891.498508][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  891.597438][T20916] syzkaller0: entered promiscuous mode
[  891.602177][T20916] syzkaller0: entered allmulticast mode
[  891.632630][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  891.648382][T20916] syzkaller0: tun_net_xmit 663
[  891.662498][T20916] syzkaller0: tun_net_xmit 663
[  891.664630][T20916] syzkaller0: tun_net_xmit 663
[  891.674040][T20916] syzkaller0: tun_net_xmit 663
[  891.676219][T20916] syzkaller0: tun_net_xmit 663
[  891.687027][T20916] syzkaller0: tun_net_xmit 663
[  891.689311][T20916] syzkaller0: tun_net_xmit 663
[  891.691911][T20916] syzkaller0: tun_net_xmit 663
[  891.694557][T20916] syzkaller0: tun_net_xmit 663
[  891.697112][T20916] syzkaller0: tun_net_xmit 663
[  891.701288][T20916] syzkaller0: tun_net_xmit 663
[  891.704147][T20916] syzkaller0: tun_net_xmit 663
[  891.707206][T20916] syzkaller0: tun_net_xmit 663
[  891.710359][T20916] syzkaller0: tun_net_xmit 663
[  891.713456][T20916] syzkaller0: tun_net_xmit 663
[  891.728884][T20916] syzkaller0: tun_net_xmit 663
[  891.732026][T20916] syzkaller0: tun_net_xmit 663
[  891.747400][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  891.748628][T20916] syzkaller0: tun_net_xmit 663
[  891.755505][T20916] syzkaller0: tun_net_xmit 663
[  891.759122][T20916] syzkaller0: tun_net_xmit 663
[  891.762081][T20916] syzkaller0: tun_net_xmit 663
[  891.764807][T20916] syzkaller0: tun_net_xmit 663
[  891.766843][T20916] syzkaller0: tun_net_xmit 663
[  891.768963][T20916] syzkaller0: tun_net_xmit 663
[  891.771044][T20916] syzkaller0: tun_net_xmit 663
[  891.772840][T20916] syzkaller0: tun_net_xmit 663
[  891.774640][T20916] syzkaller0: tun_net_xmit 663
[  891.776419][T20916] syzkaller0: tun_net_xmit 663
[  891.778469][T20916] syzkaller0: tun_net_xmit 663
[  891.781161][T20916] syzkaller0: tun_net_xmit 663
[  891.783386][T20916] syzkaller0: tun_net_xmit 663
[  891.797753][T20916] syzkaller0: tun_net_xmit 663
[  891.800064][T20916] syzkaller0: tun_net_xmit 663
[  891.801872][T20916] syzkaller0: tun_net_xmit 663
[  891.804875][T20916] syzkaller0: tun_net_xmit 663
[  891.807679][T20916] syzkaller0: tun_net_xmit 663
[  891.811201][T20916] syzkaller0: tun_net_xmit 663
[  891.819609][T20916] syzkaller0: tun_net_xmit 663
[  891.822445][T20916] syzkaller0: tun_net_xmit 663
[  891.836424][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  891.847220][T20916] syzkaller0: tun_net_xmit 663
[  891.849050][T20916] syzkaller0: tun_net_xmit 663
[  891.874973][T20916] syzkaller0: tun_net_xmit 663
[  891.877074][T20916] syzkaller0: tun_net_xmit 663
[  891.878933][T20916] syzkaller0: tun_net_xmit 663
[  891.880567][T20916] syzkaller0: tun_net_xmit 663
[  891.882847][T20916] syzkaller0: tun_net_xmit 663
[  891.885954][T20916] syzkaller0: tun_net_xmit 663
[  891.888012][T20916] syzkaller0: tun_net_xmit 663
[  891.891203][T20916] syzkaller0: tun_net_xmit 663
[  891.894311][T20916] syzkaller0: tun_net_xmit 663
[  891.896615][T20916] syzkaller0: tun_net_xmit 663
[  891.898656][T20916] syzkaller0: tun_net_xmit 663
[  891.900697][T20916] syzkaller0: tun_net_xmit 663
[  891.902717][T20916] syzkaller0: tun_net_xmit 663
[  891.904857][T20916] syzkaller0: tun_net_xmit 663
[  891.907159][T20916] syzkaller0: tun_net_xmit 663
[  891.909838][T20916] syzkaller0: tun_net_xmit 663
[  891.912857][T20916] syzkaller0: tun_net_xmit 663
[  891.916149][T20916] syzkaller0: tun_net_xmit 663
[  891.919454][T20916] syzkaller0: tun_net_xmit 663
[  891.925099][T20916] syzkaller0: tun_net_xmit 663
[  891.928248][T20916] syzkaller0: tun_net_xmit 663
[  891.931363][T20916] syzkaller0: tun_net_xmit 663
[  891.934927][T20916] syzkaller0: tun_net_xmit 663
[  891.940979][    C2] syzkaller0: tun_net_xmit 663
[  891.943995][    C2] syzkaller0: tun_net_xmit 663
[  891.959371][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  891.980947][    C2] syzkaller0: tun_net_xmit 663
[  891.990481][    C2] syzkaller0: tun_net_xmit 663
[  891.993432][    C2] syzkaller0: tun_net_xmit 663
[  891.998667][    C2] syzkaller0: tun_net_xmit 663
[  892.020671][    C2] syzkaller0: tun_net_xmit 663
[  892.022471][    C2] syzkaller0: tun_net_xmit 663
[  892.024436][    C2] syzkaller0: tun_net_xmit 663
[  892.026448][    C2] syzkaller0: tun_net_xmit 663
[  892.028483][    C2] syzkaller0: tun_net_xmit 663
[  892.030321][    C2] syzkaller0: tun_net_xmit 663
[  892.032141][    C2] syzkaller0: tun_net_xmit 663
[  892.033892][    C2] syzkaller0: tun_net_xmit 663
[  892.037506][    C2] syzkaller0: tun_net_xmit 663
[  892.039742][    C2] syzkaller0: tun_net_xmit 663
[  892.042177][    C2] syzkaller0: tun_net_xmit 663
[  892.044717][    C2] syzkaller0: tun_net_xmit 663
[  892.047193][    C2] syzkaller0: tun_net_xmit 663
[  892.049177][    C2] syzkaller0: tun_net_xmit 663
[  892.051162][    C2] syzkaller0: tun_net_xmit 663
[  892.052930][    C2] syzkaller0: tun_net_xmit 663
[  892.054750][    C2] syzkaller0: tun_net_xmit 663
[  892.056562][    C2] syzkaller0: tun_net_xmit 663
[  892.058773][    C2] syzkaller0: tun_net_xmit 663
[  892.061864][    C2] syzkaller0: tun_net_xmit 663
[  892.064641][    C2] syzkaller0: tun_net_xmit 663
[  892.067535][    C2] syzkaller0: tun_net_xmit 663
[  892.069764][    C2] syzkaller0: tun_net_xmit 663
[  892.072983][    C2] syzkaller0: tun_net_xmit 663
[  892.075425][    C2] syzkaller0: tun_net_xmit 663
[  892.085123][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  892.104985][    C2] syzkaller0: tun_net_xmit 663
[  892.107073][    C2] syzkaller0: tun_net_xmit 663
[  892.109307][    C2] syzkaller0: tun_net_xmit 663
[  892.237554][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  892.742302][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  892.953855][T20930] syzkaller0: entered promiscuous mode
[  892.957163][T20930] syzkaller0: entered allmulticast mode
[  892.968169][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  893.497322][T20934] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  897.852946][ T5099] Bluetooth: hci5: command 0x0406 tx timeout
[  897.891922][ T5099] Bluetooth: hci2: command 0x0406 tx timeout
[  907.531117][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  907.916682][T20934] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  908.186459][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  908.248565][T20969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  908.422357][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  908.757855][T20963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4869'.
[  909.132516][ T5755] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  909.170903][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  909.218490][ T5755] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  909.233022][ T5755] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  909.248633][ T5755] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  909.253026][ T5755] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  909.384756][T18309] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  909.486505][T18309] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  909.565977][T18309] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  909.762697][ T5755] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  909.773025][ T5755] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  909.859290][T20934] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  910.412953][T20997] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4873'.
[  911.890264][ T5755] Bluetooth: hci4: command tx timeout
[  911.900080][ T5099] Bluetooth: hci0: command tx timeout
[  913.922450][ T5099] Bluetooth: hci4: command tx timeout
[  913.924035][ T5755] Bluetooth: hci0: command tx timeout
[  916.062153][ T5755] Bluetooth: hci4: command tx timeout
[  916.063967][ T5755] Bluetooth: hci0: command tx timeout
[  918.094284][ T5099] Bluetooth: hci4: command tx timeout
[  918.096281][ T5755] Bluetooth: hci0: command tx timeout
[  922.230248][T20995] vlan2: entered promiscuous mode
[  922.250992][T20995] hsr0: entered promiscuous mode
[  922.258714][T20995] vlan2: entered allmulticast mode
[  922.260867][T20995] hsr0: entered allmulticast mode
[  922.267046][T20995] hsr_slave_0: entered allmulticast mode
[  922.275795][T20995] hsr_slave_1: entered allmulticast mode
[  922.294962][T20997] hsr_slave_0: left promiscuous mode
[  922.298625][T20997] hsr_slave_1: left promiscuous mode
[  922.400060][T20934] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  922.501209][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  923.111567][T21010] ptrace attach of "/syz-executor exec"[19762] was attempted by "�n��`&�k ��e�+����V��m�dp�*��˖�͆� �z
�����R�;�}難9�xk4߰������b��gXmF�B�����jD��;~ߙEP��o��\x22sL�Yq��4�2�l�J䊵t�:�����|<(�z��\x0c%����4�3��������N~M�p�!��7��k���\x09�q�,-<�A���>�}��P_և�����h3�\x5c#S,�Pa��\x0c��<��[�!�x��P����9��K�菵;���=$,��zv5z��{�󃗡�?�_G���$�׻/H�;<%�9��M��
B2�C��H��}�{�]��4����^h�^�:iv@�}�O߰o_��,ŕ\x0b���t�F�+�9S�@�m��\x0d\x0a,Ѣ��VГ\x5c��<�,D�\x07!�ߺr׉��8܆j,��þRf��-�_�L��тY\x0b�����ıyxs��{�n��)W\x5c��l^\x22H0�O01�_�䚹���J\x0c<�[5\x0d����}�4��[�RZ_��_w�p�74�����4���%\x5cP��Р�t���z�+���\x0d�U+��4�g��U%��H�Rn.�Zxj&��o�\x1bKR(E�5d�-b�N
�o��Q��BFː��c��U\x5c �ɝWO���\x0c�N���ƴ��V,�ه���q�{��\x0d����R�u�<u QE�3m�Z�X��\x0ch�����̸�*�����F]Cq`NAL9��1'J��s����3�w��Ҝ)Y���׼���&�EZ�a��j}�'p�?�C��u�?5ܜ*]�ѧo��j�m��n��b-=�5�\x22S��@&l�E\x09��t�Pb܍��6I��7aG�:�H�ɣ����y�F~�v�\x09fV�[�#�#����E���:Tu�/�A��H0uP�
[  923.195269][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  923.695623][ T5099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  923.734973][ T5099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  923.789444][ T5099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  923.803660][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  923.847119][ T5099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  923.853089][ T5099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  924.245737][T21022] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4877'.
[  924.301130][T20978] lo speed is unknown, defaulting to 1000
[  924.302614][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  924.332490][T21022] netlink: 'syz.9.4877': attribute type 2 has an invalid length.
[  924.553211][T21022] : entered promiscuous mode
[  924.993965][T20981] lo speed is unknown, defaulting to 1000
[  925.232338][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  925.235335][ T5609] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  925.520402][T19802] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  925.532134][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  925.864140][T19802] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  925.912133][ T5099] Bluetooth: hci1: command tx timeout
[  926.070737][T21030] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6)
[  926.076467][T21030] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  926.095920][T21030] vhci_hcd vhci_hcd.0: Device attached
[  926.132061][T19802] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  926.163005][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  926.314362][T21039] vhci_hcd: connection closed
[  926.314732][T19802] vhci_hcd vhci_hcd.9: stop threads
[  926.324219][T19802] vhci_hcd vhci_hcd.9: release socket
[  926.333197][T19802] vhci_hcd vhci_hcd.9: disconnect device
[  926.391266][T20150] usb 55-1: new low-speed USB device number 2 using vhci_hcd
[  926.395575][T20150] usb 55-1: enqueue for inactive port 0
[  926.395786][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  926.480336][T21013] lo speed is unknown, defaulting to 1000
[  926.540488][T20150] vhci_hcd vhci_hcd.9: vhci_device speed not set
[  926.950813][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  927.492513][T20981] bridge0: port 1(bridge_slave_0) entered blocking state
[  927.514370][T20981] bridge0: port 1(bridge_slave_0) entered disabled state
[  927.526912][T20981] bridge_slave_0: entered allmulticast mode
[  927.538717][T20981] bridge_slave_0: entered promiscuous mode
[  927.730267][T20981] bridge0: port 2(bridge_slave_1) entered blocking state
[  927.733556][T20981] bridge0: port 2(bridge_slave_1) entered disabled state
[  927.755575][T20981] bridge_slave_1: entered allmulticast mode
[  927.783509][T20981] bridge_slave_1: entered promiscuous mode
[  927.853940][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  927.854899][T21052] xt_CT: You must specify a L4 protocol and not use inversions on it
[  928.010697][ T5099] Bluetooth: hci1: command tx timeout
[  928.111145][T20981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  928.140183][T20981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  928.286894][ T5817] bridge_slave_1: left allmulticast mode
[  928.295094][ T5817] bridge_slave_1: left promiscuous mode
[  928.304925][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[  928.314250][ T5817] bridge_slave_0: left allmulticast mode
[  928.317985][ T5817] bridge_slave_0: left promiscuous mode
[  928.321546][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[  928.333661][ T5817] veth5: left allmulticast mode
[  928.337078][ T5817] veth5: left promiscuous mode
[  928.349239][ T5817] bridge1: port 2(veth5) entered disabled state
[  928.358150][ T5817] veth3: left allmulticast mode
[  928.361707][ T5817] veth3: left promiscuous mode
[  928.369438][ T5817] bridge1: port 1(veth3) entered disabled state
[  928.598187][ T5817] bond3 (unregistering): (slave ip6erspan0): Releasing active interface
[  928.919823][T21063] netlink: 'syz.9.4880': attribute type 13 has an invalid length.
[  928.978003][ T5817] bond1 (unregistering): (slave gretap1): Releasing active interface
[  929.214614][ T5817] bond2 (unregistering): (slave bridge2): Releasing backup interface
[  929.535873][ T5817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  929.589946][ T5817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  929.665677][ T5817] bond0 (unregistering): Released all slaves
[  929.678488][ T5817] bond1 (unregistering): Released all slaves
[  929.691797][ T5817] bond2 (unregistering): Released all slaves
[  929.706178][ T5817] bond3 (unregistering): Released all slaves
[  929.729879][T20981] team0: Port device team_slave_0 added
[  929.737813][T20981] team0: Port device team_slave_1 added
[  929.740425][T20978] bridge0: port 1(bridge_slave_0) entered blocking state
[  929.747281][T20978] bridge0: port 1(bridge_slave_0) entered disabled state
[  929.750773][T20978] bridge_slave_0: entered allmulticast mode
[  929.784123][T20978] bridge_slave_0: entered promiscuous mode
[  929.978095][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  930.053443][T20978] bridge0: port 2(bridge_slave_1) entered blocking state
[  930.056880][T20978] bridge0: port 2(bridge_slave_1) entered disabled state
[  930.060372][T20978] bridge_slave_1: entered allmulticast mode
[  930.065884][T20978] bridge_slave_1: entered promiscuous mode
[  930.135683][ T5099] Bluetooth: hci1: command tx timeout
[  930.242307][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  930.267755][T20981] batman_adv: batadv0: Adding interface: batadv_slave_0
[  930.270793][T20981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  930.299589][T20981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  930.314954][T20981] batman_adv: batadv0: Adding interface: batadv_slave_1
[  930.318723][T20981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  930.414176][T20981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  930.659838][T20978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  930.670673][T20978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  930.824733][T20981] hsr_slave_0: entered promiscuous mode
[  930.829394][T20981] hsr_slave_1: entered promiscuous mode
[  930.834794][T20981] debugfs: 'hsr0' already exists in 'hsr'
[  930.838971][T20981] Cannot create hsr debugfs directory
[  930.859654][T20978] team0: Port device team_slave_0 added
[  930.914486][T20978] team0: Port device team_slave_1 added
[  931.269188][T20978] batman_adv: batadv0: Adding interface: batadv_slave_0
[  931.308093][T20978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  931.337492][T20978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  931.460697][T20978] batman_adv: batadv0: Adding interface: batadv_slave_1
[  931.466762][T20978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  931.518702][T20978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  931.563605][ T1438] ieee802154 phy1 wpan1: encryption failed: -22
[  931.828337][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  932.090827][T21080] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  932.112506][T20978] hsr_slave_0: entered promiscuous mode
[  932.113994][T21080] Error validating options; rc = [-22]
[  932.116455][T20978] hsr_slave_1: entered promiscuous mode
[  932.124466][T20978] debugfs: 'hsr0' already exists in 'hsr'
[  932.129299][T20978] Cannot create hsr debugfs directory
[  932.162225][ T5452] 8021q: adding VLAN 0 to HW filter on device eth18
[  932.181033][ T5099] Bluetooth: hci1: command tx timeout
[  932.192554][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  932.385130][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  933.221027][ T5817] hsr_slave_0: left promiscuous mode
[  933.232761][ T5817] hsr_slave_1: left promiscuous mode
[  933.236029][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_0
[  933.247545][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_1
[  934.256852][ T5817] team0 (unregistering): Port device team_slave_1 removed
[  934.367041][ T5817] team0 (unregistering): Port device team_slave_0 removed
[  934.762579][T21013] bridge0: port 1(bridge_slave_0) entered blocking state
[  934.768194][T21013] bridge0: port 1(bridge_slave_0) entered disabled state
[  934.778989][T21013] bridge_slave_0: entered allmulticast mode
[  934.783320][T21013] bridge_slave_0: entered promiscuous mode
[  934.880008][T21013] bridge0: port 2(bridge_slave_1) entered blocking state
[  934.928386][T21013] bridge0: port 2(bridge_slave_1) entered disabled state
[  934.931802][T21013] bridge_slave_1: entered allmulticast mode
[  934.940934][T21013] bridge_slave_1: entered promiscuous mode
[  935.347410][T21013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  935.369977][T21013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  935.500702][T21013] team0: Port device team_slave_0 added
[  935.506036][ T5452] 8021q: adding VLAN 0 to HW filter on device eth19
[  935.986589][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  935.995746][T21013] team0: Port device team_slave_1 added
[  936.144822][T21013] batman_adv: batadv0: Adding interface: batadv_slave_0
[  936.169170][T21013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  936.195332][T21013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  936.210635][T21013] batman_adv: batadv0: Adding interface: batadv_slave_1
[  936.228114][T21013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  936.243797][T21013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  936.344003][T21013] hsr_slave_0: entered promiscuous mode
[  936.353814][T21013] hsr_slave_1: entered promiscuous mode
[  936.360976][T21013] debugfs: 'hsr0' already exists in 'hsr'
[  936.382975][T21013] Cannot create hsr debugfs directory
[  936.452308][ T5933] usb 14-1: new high-speed USB device number 4 using dummy_hcd
[  936.618936][ T5933] usb 14-1: Using ep0 maxpacket: 32
[  936.646393][ T5933] usb 14-1: config index 0 descriptor too short (expected 156, got 27)
[  936.660950][ T5933] usb 14-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  936.677871][ T5933] usb 14-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  936.692137][ T5933] usb 14-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  936.710729][ T5933] usb 14-1: config 0 interface 0 has no altsetting 0
[  936.745957][ T5933] usb 14-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  936.751006][ T5933] usb 14-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  936.755713][ T5933] usb 14-1: Product: syz
[  936.779451][ T5933] usb 14-1: Manufacturer: syz
[  936.782363][ T5933] usb 14-1: SerialNumber: syz
[  936.868084][ T5933] usb 14-1: config 0 descriptor??
[  936.896586][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  936.901364][ T5933] ldusb 14-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  936.907016][ T5933] ldusb 14-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  937.202137][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  937.293001][ T5452] 8021q: adding VLAN 0 to HW filter on device eth20
[  937.331903][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  937.346817][   T10] usb 14-1: USB disconnect, device number 4
[  937.378917][   T10] ldusb 14-1:0.0: LD USB Device #0 now disconnected
[  937.442184][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  937.694936][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  937.802229][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  937.895922][ T5452] 8021q: adding VLAN 0 to HW filter on device eth21
[  938.002717][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  939.091810][ T5817] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  939.172169][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  939.532279][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  939.886725][ T5817] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  940.345820][T21134] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4885'.
[  940.746080][ T5817] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  941.306532][T12166] net_ratelimit: 4 callbacks suppressed
[  941.306555][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  941.487471][ T5817] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  941.677667][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  941.800675][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  942.091515][T20978] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  942.202722][T20978] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  942.232958][T20978] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  942.248106][T20978] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  942.377763][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  942.557341][T21013] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  942.661420][T20978] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  942.701650][T20978] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  942.733267][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  942.789000][T20978] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  942.860536][T20978] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  943.251517][T21013] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.336167][T21162] lo speed is unknown, defaulting to 1000
[  943.387315][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  944.242372][ T5817] bond1 (unregistering): (slave ip6erspan0): Releasing active interface
[  944.323650][ T5817] bond2 (unregistering): (slave ip6gretap1): Releasing active interface
[  944.327757][ T5817] ip6gretap1 (unregistering): left allmulticast mode
[  944.558825][ T5817] bond0 (unregistering): Released all slaves
[  944.569225][ T5817] bond1 (unregistering): Released all slaves
[  944.592056][ T5817] bond2 (unregistering): Released all slaves
[  944.807367][T21013] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  944.977530][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  945.318498][ T5817] tipc: Disabling bearer <eth:team0>
[  945.404652][ T5817] tipc: Left network mode
[  945.443889][T20978] 8021q: adding VLAN 0 to HW filter on device bond0
[  945.583652][T21013] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  945.880737][T20978] 8021q: adding VLAN 0 to HW filter on device team0
[  945.896317][ T7625] bridge0: port 1(bridge_slave_0) entered blocking state
[  945.899912][ T7625] bridge0: port 1(bridge_slave_0) entered forwarding state
[  945.957982][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  945.990203][ T7676] bridge0: port 2(bridge_slave_1) entered blocking state
[  945.994569][ T7676] bridge0: port 2(bridge_slave_1) entered forwarding state
[  946.151432][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  947.083703][T21013] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  947.165046][T21013] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  947.183964][T21013] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  947.199776][T21013] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  947.257805][T21013] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  947.285456][T21013] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  947.297600][T21013] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  947.316960][T21013] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  948.020747][T20978] 8021q: adding VLAN 0 to HW filter on device batadv0
[  948.079327][ T5817] hsr_slave_0: left promiscuous mode
[  948.084348][ T5817] hsr_slave_1: left promiscuous mode
[  948.090440][ T5817] batman_adv: batadv0: Interface deactivated: dummy0
[  948.094152][ T5817] batman_adv: batadv0: Removing interface: dummy0
[  948.111451][ T5817] veth1_macvtap: left promiscuous mode
[  948.115898][ T5817] veth0_macvtap: left promiscuous mode
[  948.120034][ T5817] veth1_vlan: left promiscuous mode
[  948.123652][ T5817] veth0_vlan: left promiscuous mode
[  948.623126][T20981] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  948.659304][T20981] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  948.687443][T20981] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  948.706033][T20981] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  948.710254][T20981] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  948.752785][T20981] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  948.777612][T20981] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  948.810876][T20981] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  949.089238][ T5452] 8021q: adding VLAN 0 to HW filter on device eth2
[  949.117646][T20978] veth0_vlan: entered promiscuous mode
[  949.263083][T21013] 8021q: adding VLAN 0 to HW filter on device bond0
[  949.274002][T20978] veth1_vlan: entered promiscuous mode
[  949.333123][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  949.338640][T21013] 8021q: adding VLAN 0 to HW filter on device team0
[  949.354791][ T7625] bridge0: port 1(bridge_slave_0) entered blocking state
[  949.357736][ T7625] bridge0: port 1(bridge_slave_0) entered forwarding state
[  949.374427][ T7625] bridge0: port 2(bridge_slave_1) entered blocking state
[  949.377861][ T7625] bridge0: port 2(bridge_slave_1) entered forwarding state
[  949.417604][T20978] veth0_macvtap: entered promiscuous mode
[  949.468132][T20978] veth1_macvtap: entered promiscuous mode
[  949.512560][T12166] bond2: (slave gretap1): failed to get link speed/duplex
[  949.552993][T20981] 8021q: adding VLAN 0 to HW filter on device bond0
[  949.595258][T20978] batman_adv: batadv0: Interface activated: batadv_slave_0
[  949.620386][T20981] 8021q: adding VLAN 0 to HW filter on device team0
[  949.637962][T20978] batman_adv: batadv0: Interface activated: batadv_slave_1
[  949.678487][T10978] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  949.687098][T16324] bridge0: port 1(bridge_slave_0) entered blocking state
[  949.690083][T16324] bridge0: port 1(bridge_slave_0) entered forwarding state
[  949.713960][T10978] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  949.718290][T10978] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  949.723681][T16324] bridge0: port 2(bridge_slave_1) entered blocking state
[  949.726753][T16324] bridge0: port 2(bridge_slave_1) entered forwarding state
[  949.799857][T10978] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  949.812292][ T5452] 8021q: adding VLAN 0 to HW filter on device eth3
[  949.925510][T20981] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  949.929834][T20981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  950.092424][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  950.202123][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  950.247177][ T5452] 8021q: adding VLAN 0 to HW filter on device eth4
[  950.273062][ T7626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  950.280105][ T7626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  950.417703][ T7625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  950.421795][ T7625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  950.467411][T21272] 8021q: adding VLAN 0 to HW filter on device bond0
[  950.471464][T21272] 8021q: adding VLAN 0 to HW filter on device team0
[  950.475241][T21272] tipc: Resetting bearer <eth:team0>
[  950.481729][T21272] 8021q: adding VLAN 0 to HW filter on device batadv0
[  950.525398][T21272] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  950.530290][T21272] veth1_vlan: left promiscuous mode
[  950.533714][T21272] veth0_vlan: left promiscuous mode
[  950.537452][T21272] veth0_vlan: entered promiscuous mode
[  950.541829][T21272] veth1_vlan: entered promiscuous mode
[  950.559287][T21272] veth1_macvtap: left promiscuous mode
[  950.562924][T21272] veth0_macvtap: left promiscuous mode
[  950.566482][T21272] veth0_macvtap: entered promiscuous mode
[  950.570090][T21272] veth1_macvtap: entered promiscuous mode
[  950.577904][T21272] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  950.581881][T21272] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  950.585629][T21272] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  950.589383][T21272] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  950.595312][T21272] 8021q: adding VLAN 0 to HW filter on device bond1
[  950.600713][T21272] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  950.635130][T21276] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode
[  950.638690][T21276] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode
[  950.653013][ T5817] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  950.656896][ T5817] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  950.669948][ T5452] 8021q: adding VLAN 0 to HW filter on device eth5
[  950.679250][T21013] 8021q: adding VLAN 0 to HW filter on device batadv0
[  950.700980][ T5817] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  950.705138][ T5817] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  950.712840][T20981] 8021q: adding VLAN 0 to HW filter on device batadv0
[  950.802109][T21013] veth0_vlan: entered promiscuous mode
[  950.811159][T21013] veth1_vlan: entered promiscuous mode
[  950.883906][T21013] veth0_macvtap: entered promiscuous mode
[  950.897758][T21013] veth1_macvtap: entered promiscuous mode
[  950.913243][T21013] batman_adv: batadv0: Interface activated: batadv_slave_0
[  950.921583][T21013] batman_adv: batadv0: Interface activated: batadv_slave_1
[  950.931040][T10978] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  950.934609][T10978] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  950.938424][T10978] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  950.943598][T10978] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  950.955069][ T5099] Bluetooth: hci2: unexpected event for opcode 0x1003
[  951.016965][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  951.202444][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  951.206577][ T7626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  951.214714][ T7626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  951.290550][ T7676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  951.299296][ T7676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  951.343587][T20981] veth0_vlan: entered promiscuous mode
[  951.388153][T20981] veth1_vlan: entered promiscuous mode
[  951.422973][   T12] bond2: (slave gretap1): failed to get link speed/duplex
[  951.443512][T20981] veth0_macvtap: entered promiscuous mode
[  951.459652][T20981] veth1_macvtap: entered promiscuous mode
[  951.491867][T20981] batman_adv: batadv0: Interface activated: batadv_slave_0
[  951.512162][T20981] batman_adv: batadv0: Interface activated: batadv_slave_1
[  951.527450][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  951.530665][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  951.548943][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  951.604294][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  951.648773][T21310] ntfs3(nullb0): Primary boot signature is not NTFS.
[  951.707205][ T7630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  951.711863][ T7630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  951.748841][T21310] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  951.774879][ T7630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  951.779509][ T7630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  951.803307][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  951.974820][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  952.057200][T21321] netlink: 'syz.4.4870': attribute type 1 has an invalid length.
[  952.067554][T21324] ntfs3(nullb0): Primary boot signature is not NTFS.
[  952.080019][T21324] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  952.390510][T21329] netlink: 'syz.5.4894': attribute type 1 has an invalid length.
[  952.400756][T21329] netlink: 756 bytes leftover after parsing attributes in process `syz.5.4894'.
[  952.712634][ T7676] wlan1: Trigger new scan to find an IBSS to join
[  952.721981][    T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!!
[  953.474263][T21351] netlink: 'syz.9.4900': attribute type 1 has an invalid length.
[  953.536823][T21351] 8021q: adding VLAN 0 to HW filter on device bond2
[  953.570163][T21353] bond2: (slave gretap1): making interface the new active one
[  953.576060][T21353] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  953.648234][T21354] IPv6: NLM_F_CREATE should be specified when creating new route
[  953.657271][T21354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  953.660929][T21354] IPv6: NLM_F_CREATE should be set when creating new route
[  953.663389][T21354] IPv6: NLM_F_CREATE should be set when creating new route
[  953.686157][T21356] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4901'.
[  953.779892][T21358] team0: Port device xfrm0 removed
[  953.797985][T21358] bond1: (slave ip6erspan0): Releasing active interface
[  953.808840][T21358] bond2: (slave gretap1): Releasing active interface
[  953.817951][ T7630] tipc: Resetting bearer <eth:team0>
[  954.432322][ T5817] net_ratelimit: 19 callbacks suppressed
[  954.432336][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  954.478689][   T42] audit: type=1326 audit(2000000824.309:5002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21369 comm="syz.5.4905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000
[  954.499595][   T42] audit: type=1326 audit(2000000824.329:5003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21369 comm="syz.5.4905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000
[  954.506929][   T42] audit: type=1326 audit(2000000824.339:5004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21369 comm="syz.5.4905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000
[  954.525441][   T42] audit: type=1326 audit(2000000824.359:5005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21369 comm="syz.5.4905" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f98fec code=0x7ffc0000
[  954.535222][   T42] audit: type=1326 audit(2000000824.369:5006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21369 comm="syz.5.4905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000
[  954.546006][   T42] audit: type=1326 audit(2000000824.379:5007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21369 comm="syz.5.4905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000
[  954.556277][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  954.563007][   T42] audit: type=1326 audit(2000000824.379:5008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21369 comm="syz.5.4905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000
[  954.598319][   T42] audit: type=1326 audit(2000000824.429:5009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21369 comm="syz.5.4905" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f98fec code=0x7ffc0000
[  954.611616][   T42] audit: type=1326 audit(2000000824.429:5010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21369 comm="syz.5.4905" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7f98fec code=0x7ffc0000
[  954.620699][   T42] audit: type=1326 audit(2000000824.429:5011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21369 comm="syz.5.4905" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f98fec code=0x7ffc0000
[  954.673167][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  954.744654][T21379] usb usb7: usbfs: process 21379 (syz.5.4905) did not claim interface 0 before use
[  954.889263][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  954.952194][ T5099] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  954.957427][ T5099] Bluetooth: hci2: Injecting HCI hardware error event
[  954.965036][ T5755] Bluetooth: hci2: hardware error 0x00
[  955.007284][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  955.135477][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  955.233326][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  955.353567][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  955.472101][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  955.582606][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  955.672287][ T7715] wlan1: Trigger new scan to find an IBSS to join
[  956.702143][T20851] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  957.195223][ T5755] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  957.432154][T20851] usb 6-1: Using ep0 maxpacket: 32
[  957.437935][T20851] usb 6-1: unable to get BOS descriptor or descriptor too short
[  957.442798][T20851] usb 6-1: config 14 has an invalid interface number: 57 but max is 1
[  957.446456][T20851] usb 6-1: config 14 has an invalid interface number: 228 but max is 1
[  957.449465][T20851] usb 6-1: config 14 has no interface number 0
[  957.451818][T20851] usb 6-1: config 14 has no interface number 1
[  957.454436][T20851] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  957.458659][T20851] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  957.463674][T20851] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  957.485930][T20851] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  957.502269][T20851] usb 6-1: config 14 interface 57 has no altsetting 0
[  957.511704][T20851] usb 6-1: config 14 interface 228 has no altsetting 0
[  957.528376][T20851] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  957.538355][T20851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  957.542995][T20851] usb 6-1: Product: syz
[  957.544391][T20851] usb 6-1: Manufacturer: syz
[  957.546125][T20851] usb 6-1: SerialNumber: syz
[  958.122439][ T5826] IPVS: starting estimator thread 0...
[  958.222134][T21428] IPVS: using max 40 ests per chain, 96000 per kthread
[  959.452907][ T5609] net_ratelimit: 31 callbacks suppressed
[  959.452927][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  959.476889][T20851] legousbtower 6-1:14.57: interrupt endpoints not found
[  959.505930][T20851] legousbtower 6-1:14.228: interrupt endpoints not found
[  959.541676][T20851] usb 6-1: USB disconnect, device number 14
[  959.572736][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  959.674564][ T7676] wlan1: Trigger new scan to find an IBSS to join
[  959.692090][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  959.812493][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  959.922302][T20851] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  959.923713][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  960.052122][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  960.073586][T20851] usb 6-1: Using ep0 maxpacket: 16
[  960.078985][T20851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  960.083972][T20851] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  960.088884][T20851] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  960.092418][T20851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  960.096916][T20851] usb 6-1: config 0 descriptor??
[  960.162661][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  960.285194][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  960.320916][T21436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  960.326691][T21436] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  960.393817][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  960.566030][T21450] 9pnet_virtio: no channels available for device c:::
[  960.589298][T21449] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  960.593847][T21449] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  960.599926][T21449] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  960.612815][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  960.616347][T21449] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  960.624300][T21449] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  960.678722][ T7715] wlan1: Creating new IBSS network, BSSID 16:7a:58:a3:67:a2
[  960.766332][T20851] usbhid 6-1:0.0: can't add hid device: -71
[  960.770935][T20851] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  960.787347][T20851] usb 6-1: USB disconnect, device number 15
[  960.866804][T21452] netlink: 'syz.5.4922': attribute type 1 has an invalid length.
[  960.876517][T21452] vlan2: entered allmulticast mode
[  960.878248][T21452] bond_slave_0: entered allmulticast mode
[  961.431876][T21460] tc action pedit unable to extract header offset for header type (0x5)
[  961.436954][T21460] tc action pedit unable to extract header offset for header type (0x5)
[  961.439905][T21460] tc action pedit unable to extract header offset for header type (0x5)
[  961.442819][T21460] tc action pedit unable to extract header offset for header type (0x5)
[  961.445804][T21460] tc action pedit unable to extract header offset for header type (0x5)
[  961.448676][T21460] tc action pedit unable to extract header offset for header type (0x5)
[  961.451586][T21460] tc action pedit unable to extract header offset for header type (0x5)
[  961.454306][T21460] tc action pedit unable to extract header offset for header type (0x5)
[  961.457326][T21460] tc action pedit unable to extract header offset for header type (0x5)
[  961.460037][T21460] tc action pedit unable to extract header offset for header type (0x5)
[  962.445871][T21468] libceph: resolve '
[  962.445871][T21468] -&���f�Y�ǝ�a���2i�
[  962.445871][T21468] .���?��&�*��&' (ret=-3): failed
[  962.642134][ T5755] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  962.646033][ T5099] Bluetooth: hci3: command 0x1003 tx timeout
[  963.821083][   T42] kauditd_printk_skb: 225 callbacks suppressed
[  963.821096][   T42] audit: type=1326 audit(2000000833.649:5237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21502 comm="syz.9.4933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000
[  963.860042][   T42] audit: type=1326 audit(2000000833.659:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21502 comm="syz.9.4933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000
[  963.893510][   T42] audit: type=1326 audit(2000000833.669:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21502 comm="syz.9.4933" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f63fec code=0x7ffc0000
[  964.065938][   T42] audit: type=1326 audit(2000000833.669:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21502 comm="syz.9.4933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000
[  964.107477][   T42] audit: type=1326 audit(2000000833.669:5241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21502 comm="syz.9.4933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000
[  964.133371][   T42] audit: type=1326 audit(2000000833.669:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21502 comm="syz.9.4933" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f63fec code=0x7ffc0000
[  964.166502][   T42] audit: type=1326 audit(2000000833.679:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21502 comm="syz.9.4933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000
[  964.182892][   T42] audit: type=1326 audit(2000000833.689:5244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21502 comm="syz.9.4933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000
[  964.198331][   T42] audit: type=1326 audit(2000000833.689:5245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21502 comm="syz.9.4933" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f63fec code=0x7ffc0000
[  964.222902][   T42] audit: type=1326 audit(2000000833.689:5246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21502 comm="syz.9.4933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000
[  964.482440][T10978] net_ratelimit: 31 callbacks suppressed
[  964.482456][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  964.672589][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  964.782543][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  964.902926][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  965.052203][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  965.253580][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  965.534560][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  965.652917][ T5609] bond2: (slave gretap1): failed to get link speed/duplex
[  965.773059][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  965.882149][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  966.362682][ T5850] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[  967.020155][ T5850] usb 9-1: unable to read config index 0 descriptor/start: -61
[  967.741433][ T5850] usb 9-1: can't read configurations, error -61
[  968.028041][T21582] bond1: option mode: unable to set because the bond device is up
[  968.032790][T21582] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4940'.
[  968.036332][T21582] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4940'.
[  968.045517][T21582] 8021q: adding VLAN 0 to HW filter on device bond0
[  968.055681][T21582] bond1: (slave bond0): Enslaving as an active interface with a down link
[  968.076825][T21582] netlink: 'syz.9.4940': attribute type 4 has an invalid length.
[  968.084137][T21582] netlink: 152 bytes leftover after parsing attributes in process `syz.9.4940'.
[  968.096594][T21582] .`: renamed from bond0 (while UP)
[  968.204698][ T5850] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[  968.249047][T21590] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode
[  968.252046][T21590] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode
[  968.354622][ T5850] usb 9-1: unable to read config index 0 descriptor/start: -61
[  968.357158][ T5850] usb 9-1: can't read configurations, error -61
[  968.360902][ T5850] usb usb9-port1: attempt power cycle
[  968.702132][ T5850] usb 9-1: new full-speed USB device number 9 using dummy_hcd
[  968.736765][ T5850] usb 9-1: unable to read config index 0 descriptor/start: -61
[  968.740138][ T5850] usb 9-1: can't read configurations, error -61
[  968.895190][ T5850] usb 9-1: new full-speed USB device number 10 using dummy_hcd
[  968.964651][ T5850] usb 9-1: device descriptor read/8, error -71
[  969.082599][ T5850] usb usb9-port1: unable to enumerate USB device
[  969.492648][T19802] net_ratelimit: 28 callbacks suppressed
[  969.492669][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  969.612231][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  969.722061][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  969.832465][T10978] bond2: (slave gretap1): failed to get link speed/duplex
[  969.953002][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  970.007142][T21617] binder: 21615:21617 ioctl 4018620d 0 returned -22
[  970.082163][ T5840] bond2: (slave gretap1): failed to get link speed/duplex
[  970.193002][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  970.322160][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  970.432373][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  970.542657][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  971.379558][T21627] netlink: 'syz.9.4956': attribute type 13 has an invalid length.
[  971.419238][T21627] tipc: Resetting bearer <eth:team0>
[  971.447595][T21629] mac80211_hwsim hwsim30 syzkaller0: Caught tx_queue_len zero misconfig
[  971.703062][T21627] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4956'.
[  972.843374][T21649] Bluetooth: MGMT ver 1.23
[  973.570695][T21666] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4966'.
[  974.592312][T19802] net_ratelimit: 33 callbacks suppressed
[  974.592338][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  974.713345][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  974.832390][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  974.942537][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  975.053506][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  975.172838][T19801] bond2: (slave gretap1): failed to get link speed/duplex
[  975.293274][T19802] bond2: (slave gretap1): failed to get link speed/duplex
[  975.403018][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  975.527482][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  975.642558][ T5817] bond2: (slave gretap1): failed to get link speed/duplex
[  976.526699][T21697] xt_CT: You must specify a L4 protocol and not use inversions on it
[  979.972003][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  983.112160][    C3] ==================================================================
[  983.114791][    C3] BUG: KASAN: slab-use-after-free in llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470
[  983.117926][    C3] Read of size 1 at addr ffff8880004d7010 by task syz.9.4989/21750
[  983.121060][    C3] 
[  983.123357][    C3] CPU: 3 UID: 0 PID: 21750 Comm: syz.9.4989 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  983.123384][    C3] Tainted: [L]=SOFTLOCKUP
[  983.123392][    C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  983.123404][    C3] Call Trace:
[  983.123412][    C3]  <TASK>
[  983.123420][    C3]  dump_stack_lvl+0x100/0x190
[  983.123451][    C3]  print_report+0x13d/0x4b0
[  983.123477][    C3]  ? __virt_addr_valid+0x239/0x430
[  983.123498][    C3]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470
[  983.123526][    C3]  kasan_report+0xdf/0x1c0
[  983.123552][    C3]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470
[  983.123579][    C3]  llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470
[  983.123605][    C3]  ? __pfx_llc_conn_ac_send_sabme_cmd_p_set_x+0x10/0x10
[  983.123631][    C3]  llc_conn_state_process+0x3ec/0x1480
[  983.123653][    C3]  llc_conn_tmr_common_cb+0x2d4/0x880
[  983.123675][    C3]  ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10
[  983.123702][    C3]  call_timer_fn+0x19a/0x610
[  983.123729][    C3]  ? __pfx_call_timer_fn+0x10/0x10
[  983.123749][    C3]  ? __run_timers+0x747/0xb00
[  983.123769][    C3]  ? rcu_is_watching+0x12/0xc0
[  983.123838][    C3]  ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10
[  983.123865][    C3]  __run_timers+0x757/0xb00
[  983.123891][    C3]  ? __pfx___run_timers+0x10/0x10
[  983.123921][    C3]  ? _raw_spin_lock_irq+0x45/0x50
[  983.123951][    C3]  run_timer_base+0x114/0x190
[  983.123970][    C3]  ? __pfx_run_timer_base+0x10/0x10
[  983.123991][    C3]  run_timer_softirq+0x1a/0x50
[  983.124015][    C3]  handle_softirqs+0x1ea/0x9b0
[  983.124034][    C3]  ? __pfx_handle_softirqs+0x10/0x10
[  983.124052][    C3]  ? _raw_spin_unlock+0x3e/0x50
[  983.124075][    C3]  ? __hrtimer_rearm_deferred+0x9b/0x720
[  983.124099][    C3]  __irq_exit_rcu+0x162/0x210
[  983.124118][    C3]  irq_exit_rcu+0x9/0x30
[  983.124136][    C3]  sysvec_apic_timer_interrupt+0x56/0xc0
[  983.124164][    C3]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  983.124185][    C3] RIP: 0023:0xf706b2b1
[  983.124201][    C3] Code: d8 73 27 2e 8d b4 26 00 00 00 00 2e 8d b4 26 00 00 00 00 8d b6 00 00 00 00 8b 72 f8 8b 5a fc 83 ea 08 89 e8 39 f1 19 d8 72 ef <39> 54 24 08 73 39 8b 44 24 08 8b 4c 24 10 89 58 04 8b 5c 24 14 83
[  983.124218][    C3] RSP: 002b:00000000ffc7cd60 EFLAGS: 00000246
[  983.124235][    C3] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 00000000898556d9
[  983.124247][    C3] RDX: 00000000f6b09780 RSI: 00000000898514cf RDI: 00000000ffffffff
[  983.124259][    C3] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  983.124268][    C3] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  983.124285][    C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  983.124302][    C3]  </TASK>
[  983.124310][    C3] 
[  983.219856][    C3] Allocated by task 21756:
[  983.221253][    C3]  kasan_save_stack+0x30/0x50
[  983.222723][    C3]  kasan_save_track+0x14/0x30
[  983.224510][    C3]  __kasan_kmalloc+0xaa/0xb0
[  983.226749][    C3]  __kmalloc_cache_noprof+0x2e5/0x6c0
[  983.228991][    C3]  llc_sap_open+0x120/0x3b0
[  983.230920][    C3]  llc_ui_autobind.isra.0+0x2ae/0x580
[  983.233168][    C3]  llc_ui_connect+0x582/0xdb0
[  983.235140][    C3]  __sys_connect_file+0x141/0x1a0
[  983.237225][    C3]  __sys_connect+0x141/0x170
[  983.239125][    C3]  __ia32_sys_connect+0x71/0xb0
[  983.241141][    C3]  __do_fast_syscall_32+0xe7/0x970
[  983.242922][    C3]  do_fast_syscall_32+0x32/0x70
[  983.244376][    C3]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  983.246710][    C3] 
[  983.247534][    C3] Freed by task 23:
[  983.249142][    C3]  kasan_save_stack+0x30/0x50
[  983.251147][    C3]  kasan_save_track+0x14/0x30
[  983.253146][    C3]  kasan_save_free_info+0x3b/0x70
[  983.255285][    C3]  __kasan_slab_free+0x5f/0x80
[  983.257240][    C3]  __rcu_free_sheaf_prepare+0x5d/0x2f0
[  983.259498][    C3]  rcu_free_sheaf+0x1a/0xe0
[  983.261389][    C3]  rcu_core+0x5a2/0x10d0
[  983.263126][    C3]  handle_softirqs+0x1ea/0x9b0
[  983.265101][    C3]  __irq_exit_rcu+0x162/0x210
[  983.267077][    C3]  irq_exit_rcu+0x9/0x30
[  983.268873][    C3]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  983.271256][    C3]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  983.273755][    C3] 
[  983.274781][    C3] The buggy address belongs to the object at ffff8880004d7000
[  983.274781][    C3]  which belongs to the cache kmalloc-2k of size 2048
[  983.280424][    C3] The buggy address is located 16 bytes inside of
[  983.280424][    C3]  freed 2048-byte region [ffff8880004d7000, ffff8880004d7800)
[  983.286037][    C3] 
[  983.287046][    C3] The buggy address belongs to the physical page:
[  983.289679][    C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4d0
[  983.292916][    C3] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  983.295648][    C3] flags: 0x7ff00000000040(head|node=0|zone=0|lastcpupid=0x7ff)
[  983.298416][    C3] page_type: f5(slab)
[  983.299773][    C3] raw: 007ff00000000040 ffff88801bc42f00 dead000000000100 dead000000000122
[  983.303083][    C3] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000
[  983.305777][    C3] head: 007ff00000000040 ffff88801bc42f00 dead000000000100 dead000000000122
[  983.309061][    C3] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000
[  983.312175][    C3] head: 007ff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  983.315221][    C3] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  983.318780][    C3] page dumped because: kasan: bad access detected
[  983.321241][    C3] page_owner tracks the page as allocated
[  983.323515][    C3] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5840, tgid 5840 (kworker/u32:4), ts 805096575928, free_ts 805080681634
[  983.330787][    C3]  post_alloc_hook+0xfd/0x120
[  983.332373][    C3]  get_page_from_freelist+0xf48/0x3530
[  983.334066][    C3]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  983.336134][    C3]  new_slab+0xa2/0x650
[  983.337864][    C3]  refill_objects+0xe3/0x410
[  983.339804][    C3]  __pcs_replace_empty_main+0x376/0x680
[  983.342245][    C3]  __kmalloc_node_track_caller_noprof+0x679/0x830
[  983.344872][    C3]  kmalloc_reserve+0xe8/0x350
[  983.346809][    C3]  __alloc_skb+0x185/0x710
[  983.348639][    C3]  mld_newpack.isra.0+0x18e/0xa20
[  983.350785][    C3]  add_grhead+0x299/0x340
[  983.352569][    C3]  add_grec+0x1389/0x1930
[  983.354385][    C3]  mld_send_initial_cr+0x156/0x320
[  983.356526][    C3]  ipv6_mc_dad_complete+0xa7/0x1d0
[  983.358775][    C3]  addrconf_dad_completed+0xd91/0xff0
[  983.360999][    C3]  addrconf_dad_work+0x83c/0x1360
[  983.363056][    C3] page last free pid 18304 tgid 18304 stack trace:
[  983.365914][    C3]  __free_frozen_pages+0x79f/0x1090
[  983.368108][    C3]  qlist_free_all+0x47/0xf0
[  983.370025][    C3]  kasan_quarantine_reduce+0x1a0/0x1f0
[  983.372233][    C3]  __kasan_slab_alloc+0x69/0x90
[  983.373949][    C3]  kmem_cache_alloc_noprof+0x26b/0x6a0
[  983.375744][    C3]  do_getname+0x35/0x390
[  983.377687][    C3]  user_path_at+0x26/0x60
[  983.379450][    C3]  __ia32_sys_umount+0x109/0x190
[  983.381500][    C3]  __do_fast_syscall_32+0xe7/0x970
[  983.383777][    C3]  do_fast_syscall_32+0x32/0x70
[  983.385788][    C3]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  983.388412][    C3] 
[  983.389454][    C3] Memory state around the buggy address:
[  983.391779][    C3]  ffff8880004d6f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  983.395084][    C3]  ffff8880004d6f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  983.398563][    C3] >ffff8880004d7000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  983.401827][    C3]                          ^
[  983.403763][    C3]  ffff8880004d7080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  983.407053][    C3]  ffff8880004d7100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  983.410341][    C3] ==================================================================
[  983.413675][    C3] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  983.416755][    C3] CPU: 3 UID: 0 PID: 21750 Comm: syz.9.4989 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  983.421033][    C3] Tainted: [L]=SOFTLOCKUP
[  983.422492][    C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  983.425641][    C3] Call Trace:
[  983.426715][    C3]  <TASK>
[  983.427670][    C3]  dump_stack_lvl+0x100/0x190
[  983.429158][    C3]  vpanic+0x552/0x970
[  983.430433][    C3]  ? __pfx_vpanic+0x10/0x10
[  983.431862][    C3]  ? mark_held_locks+0x40/0x70
[  983.433411][    C3]  ? irqentry_exit+0x24d/0xa00
[  983.434900][    C3]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470
[  983.436984][    C3]  panic+0xd1/0xe0
[  983.438162][    C3]  ? __pfx_panic+0x10/0x10
[  983.439741][    C3]  ? check_panic_on_warn+0x1f/0x90
[  983.441564][    C3]  check_panic_on_warn.cold+0x19/0x34
[  983.443774][    C3]  end_report.part.0+0x3a/0x90
[  983.445526][    C3]  kasan_report.cold+0xe/0x18
[  983.447214][    C3]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470
[  983.449998][    C3]  llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470
[  983.452673][    C3]  ? __pfx_llc_conn_ac_send_sabme_cmd_p_set_x+0x10/0x10
[  983.455543][    C3]  llc_conn_state_process+0x3ec/0x1480
[  983.457840][    C3]  llc_conn_tmr_common_cb+0x2d4/0x880
[  983.460098][    C3]  ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10
[  983.462451][    C3]  call_timer_fn+0x19a/0x610
[  983.464313][    C3]  ? __pfx_call_timer_fn+0x10/0x10
[  983.466514][    C3]  ? __run_timers+0x747/0xb00
[  983.468461][    C3]  ? rcu_is_watching+0x12/0xc0
[  983.470458][    C3]  ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10
[  983.472815][    C3]  __run_timers+0x757/0xb00
[  983.474811][    C3]  ? __pfx___run_timers+0x10/0x10
[  983.476865][    C3]  ? _raw_spin_lock_irq+0x45/0x50
[  983.478779][    C3]  run_timer_base+0x114/0x190
[  983.480274][    C3]  ? __pfx_run_timer_base+0x10/0x10
[  983.482441][    C3]  run_timer_softirq+0x1a/0x50
[  983.484461][    C3]  handle_softirqs+0x1ea/0x9b0
[  983.486518][    C3]  ? __pfx_handle_softirqs+0x10/0x10
[  983.488734][    C3]  ? _raw_spin_unlock+0x3e/0x50
[  983.490806][    C3]  ? __hrtimer_rearm_deferred+0x9b/0x720
[  983.493161][    C3]  __irq_exit_rcu+0x162/0x210
[  983.495140][    C3]  irq_exit_rcu+0x9/0x30
[  983.496773][    C3]  sysvec_apic_timer_interrupt+0x56/0xc0
[  983.498537][    C3]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  983.500395][    C3] RIP: 0023:0xf706b2b1
[  983.501683][    C3] Code: d8 73 27 2e 8d b4 26 00 00 00 00 2e 8d b4 26 00 00 00 00 8d b6 00 00 00 00 8b 72 f8 8b 5a fc 83 ea 08 89 e8 39 f1 19 d8 72 ef <39> 54 24 08 73 39 8b 44 24 08 8b 4c 24 10 89 58 04 8b 5c 24 14 83
[  983.508352][    C3] RSP: 002b:00000000ffc7cd60 EFLAGS: 00000246
[  983.510523][    C3] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 00000000898556d9
[  983.513157][    C3] RDX: 00000000f6b09780 RSI: 00000000898514cf RDI: 00000000ffffffff
[  983.515926][    C3] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  983.519162][    C3] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  983.522226][    C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  983.524663][    C3]  </TASK>
[  983.526599][    C3] Kernel Offset: disabled
[  983.528386][    C3] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:49:53  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000400 RBX=0000000000000680 RCX=0000000000000000 RDX=0000000000000000
RSI=0000000000000007 RDI=00007fff8404eb9c RBP=00007fff8404ed00 RSP=00007fff8404ebd8
R8 =00007fff8404ec18 R9 =0000000000000006 R10=0000000000000007 R11=00000000000e00ee
R12=00007fff8404ec80 R13=0000000000405f46 R14=0000000000060000 R15=00000000f1bf0fbb
RIP=00007f6207acc3a3 RFL=00000287 [--S--PC] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f6207adf260 CR3=000000005c61f000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000e30 0000000000001000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6207aed310 00007f6207ab7000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000674631 RBX=ffff88801cb4a540 RCX=ffffffff8bb6e2d5 RDX=0000000000000000
RSI=ffffffff8e1a69d2 RDI=ffffffff8c400680 RBP=ffffed10039694a8 RSP=ffffc9000046fe00
R8 =0000000000000001 R9 =ffffed100566678d R10=ffff88802b333c6b R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000
RIP=ffffffff8bb6c89f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096cf1000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000003391aff8 CR3=0000000066ba9000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=ffff8880142012a8 RCX=ffffffff81e52ce8 RDX=0000000000000001
RSI=0000000000000004 RDI=ffffc90000536a30 RBP=ffff8880142012b0 RSP=ffffc90000536a08
R8 =0000000000000001 R9 =fffff520000a6d46 R10=0000000000000003 R11=0000000000000000
R12=1ffff920000a6d42 R13=ffff8880142012b8 R14=ffff88802b4284c0 R15=ffff88802b428510
RIP=ffffffff81e52cf9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096df1000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000033902ff8 CR3=0000000051b6a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85a06065 RDI=ffffffff9b9e51a0 RBP=ffffffff9b9e5160 RSP=ffffc90003ddf4d0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030383838666666
R12=0000000000000000 R13=000000000000000a R14=ffffffff9b6e51f7 R15=ffffffff85a06000
RIP=ffffffff85a0608f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096ef1000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000030302ff8 CR3=0000000051b6a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000