last executing test programs:

2.319607501s ago: executing program 2 (id=536):
ioctl$NILFS_IOCTL_GET_CPSTAT(0xffffffffffffffff, 0x80186e83, &(0x7f0000000000))

2.250425205s ago: executing program 2 (id=537):
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000240), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000280)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x98f910, 0x8000, '\x00', @p_u16=0x0}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001d00)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="5a050000000000000050505050000006000000000000003b0003480013cde823b9e7df06c0e65e1ca89c8e6040491adc040681fd0a009bd9050a07efff46e8a409000000000000000400e5139eda9d1dfe3d1e1e287c1584221998038761c7d1c235a397f9b5ef60d975526c4a10c93251166d71996e6cb85bedf954fc4892fa060c57df94e7c80513c87064708fe61a142b5b5eb65f46a32972fb2937b8b3172d29471a7bed88d6030ec03c83e1dff83c1d236c5ffc119eaa097ef569f3bbb2e8bb"], 0x78}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000300), 0x332d, 0x8000)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000340))
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000440)={0x18, 0x1402, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x4008004)
ioctl$EVIOCGREP(r6, 0x80084503, &(0x7f0000000480)=""/94)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000b00)={{0x1, 0x1, 0x18, <r7=>r1, {0xfffffff8}}, './file0\x00'})
ioctl$PIO_UNISCRNMAP(r7, 0x4b6a, &(0x7f0000000d00)="19673cd2d5416635cd6f7fb4eb5672fddea2d155cc3b3b81f7faff35e494b04f0da69177460250d5ea7c98cb82d2f6f5a108e9d441a082037fd124712363d2814af831d93aa0d8e95b13f5e50aba706df3391cba99d31b24daffabf82ebe823ac2c30746f1eecc79203941324c3354a1cc543bb05bd84b728b16d24667b73c92934ee239cde5c698bce18ef1682f7db03523fb5b1008aebe4323de321d037d233b71c803f5db45b773d0cc24006047471e47d750b5dbdf2c56244dec2ff4fe30137ea8040c9c920ee5988114ad99a6c4c2b8a91aaa2d17344f98afe05f0d456d3821ceffe1c0b3a1d6452b76d3ea779dc0bba5683d733e5277ef12ec184089a47ceee79247e6bc0eeb4be05240a0c82eb64d08e02027ea9e64f05766e05d76f5547c2d13f48345a7d6b1bbc98906452a8ea6bbc7ef269b4019ba751af30b28c9cd6cb22fa366295fe49565e6fe1b9aa8d1c14fd4d27ed0ccf00a8a7cf5df566c3592d24681d2ad13299bda7ad0beb100d6a9612f6cdf6371da86752dc51632e7da97ca129887367012a49faddca882336bf518aab9fc33261881427976306653a43c76bcc4b118088d4592cd7e33d7c32d8b665abf6afce8177e6d157474ee5687cba1b0ff6b37073145141850fae7cb79a90d00f6478249cbe64cb7477e1b31d58f99ec6a7890b9699510a346975347912ee5ab88238be9398909a4cf399800488ea3c821245345135d4e2f95b4cfeae5c509c3558b9f729dbd5a73e0c8602396c611fbaa63e88deb34312b1d09a3074c09fc2c09eaa8e2aa5497630432c25376c3956dcd82dbff8451c4851e8a51b7d28fab2f1ebea725151f3868f425fcb3100d93251639b49d3c70be76d367dc350f06e89e81bd54a50e28d1be0e810ebea76821a731bcb44ded7351f700bc0bd4efc36c0bb31a8ab6423716c210af29cc2c9dcf524b91e58f3a0d674d34e69e598dc0f70f90dfd6f208393ec08c006e998635d158488be41d2159b1b948c915bbaac27bfc884bdec21e038b7bcf8d8d7b1a5be3dae6bde03e2b5ad7b4e6c52e5155d1eba9f41836d3dc48c72ea6c3ba8eb95931da87cedbfeb905ae0a051781b74720de59a40150a969614a7d2494e5e2698eca1560e899850b1ed2080d868d23db40e1bc29c29838259b1590386277db291b09ddecbc8c7e27d6cb6a4e7bd0820f1c2cd2e10cd552ef973edcc5a82fcda5b922f216dacc9370f6727809bc54b20118edb44c00d7188e94d69fd34a5d31b13d1adc21c6642b56c9f25ac554ab9d65633010cecdfcce08638d45032885d841a1f30f71dc796f4ba81d14ddaa58fb8d7b72a2d11b5ed699c58a5c2c8b53d3ec5f0678e23df3008ee2b30e7f3e014543e7643e37abfcbea4978677d07bb0ef5275d41484bfbcf167bdb1682351c0f97132069cd71ae4f9c06dd34ee54c18d28ecb8eaf5b0c21c4196f1645627d86e81a1fb4f14484b6f37d261b237ef36e0882e8d0dec5db0982ee7d799a780c605e8b768ec15de231656b57d61a8629b862b2752c4b34b97b01cd353e5b288baa08090fc7920177a5c508317b9aa4e67b1911b3e44ef63551e8b03ec6d49094921593ae7d777db64d6950cb69524069e0eb7913149818358ec24dbfbff3a97651aa3bae6923c7caa90e7fee2df68d87a72261fad1fe93a9cd801fcde9abcf54e05768ecd111cd19018f8f8411113ada5e680821a189db86b99a46583b5dc409c063d9d4fe883537e2012860a1c1908efda9ae648f95faecf9ea32f68e8633db4f9fb3be80872e0f76ff287d80c1174d1eed964085522dbca91e0727ba073583a6a59385db1e8e31ff29fd5730a246d0170c1dec78fc7c29a2d84c2ee063ec94ae19cbfee55929a49d28857af9492806877ab96f51757f3e215dbf430cbddfb47a0d349d1f21646b8c584a9564e41fe21a63623bea4f60dc765ecbb73c80b2259dc33af00c884f47debb4afbbceb697677fba35ec4dd5f173b588823d377d9cd8cbc2b5bcf3d5bb06eb35e634ff85620517bc5448b56df5348d1e54a597b725e0ab73e8dccb20a68fcbc175ea9ae53ff2285118adfe8ec99ad728601fc1ace8f8c6081f5d6ed89b29f472e1df70ea7223b71a0f3b1204e9a6239cb1bba67153b2b620cde745d63f7ba024ebf3b91afb8b49041a6cdf264a87fc1a746925e6c6f48ac6908e2576e8b9243e39184e7938856930599febe5c81318e0bb166afe148165bf4812aafa879e8466fd3a5b0df9d84008e9f126a19e69504e636e31d9be8fff8adc00b288f6338e1ca9391f209f88709d9c34c7a2e852fa5c760dbc662a5cb3483162d2fd317cff385e6dabb73212e20ac0aced26359c9cd38c49634f7c9d40372321f22c0917da7b05e3d59a091303e3158a704f6d7b23ce99cbf778400285b8b8dd78cce8419500360e5fe62ee771c6a23dbc3e75c51acfade323a43e614b5348e015d9e3903fe3df0533d83ae7a0673968eee231875ed06ee10a184f9cc761f0a1779eaf8a9e127f91148eebd5e8c5cdedc08073077d9cf376b0be58f101c7d12b79a0c66370e46b858cd38cbd850ce0a91bddd2726d99b1fef48f153eb3068032234f53e825aefad72f63edef1c4bf8417249ba2641a3cfe5ad98c2e3c37bf0f2741798fe5be8266f8fa6ab9d69538321238e439823f09859bc675b09e1a8fb4e1daac2daf2dfcf70221977ab2e820fb13a95876f01c22654ac74f223af91e9164f77601814f48320dbe3b7f448e72c3a79f60e1ee3deabd1b1d0e1b9e65dc50790b70832ffcd14d81de5a9e648b9775dc376945e3e4083fe09823ffb1b10c77ac2b0ac6179ba7b6c99bb0bbe2b814f96c6175d9928b2111672d0b0f6aa66243d3e99f91cbd45056e667c1d57592bbab60f6cd32c98e2c817584a6f9759d1a2990e77003ec8f3879e6be0a081521a65dfaa334b9d9bd1042d2265cc52b5a46a4f81b707d6f54f6932d966b2cc58c24192370ce57784e75a91488326941fea234e17a1c55a5b2da7890099240bf7ede8c018ce9f9518c0514c4656ab366409e1b8a81c4777c66d18d6d2e4fcc44a3b48e723d5cdebcbade63a7e469add5a7694aaabc2340bc60efc7162964d422c99931fc7ddd0c0667852b4fa9a73a77f14e7deb370299c3b9d17caf25159524772828caa7919f29f75cac14e48425d2e7a1c4a4b04f393868cae2fa54b9511f5dbcda490f84d494505f3debc16485be54ea341b2df2f28043ea5e6b07be3b4e9bfe0948cac052cdb5700fce6a67ea31001f92382f7be683ccee127fd7721e15dfc0f5ec7844c1b0e76e6ab329a51ebe4ab0a8ba99dd37b717ad648056d5d7cb9ef0d5921b33e66a75430734b18f37a2e4963b930d697839a04787f2034690f69ddc7f3ce9ab932e74ea45837699a25c3c9096270df3210797455de1fd304304344a30d967a8ea511885c0d65e813bfcaca6d6c2677cdf38ab685159e6c25b71952b816f455e875af95e49a1a357a10ce1d9c073760dc3cb88ce7e26ba637dd0b02461b6d07085d8cd3e6c4324d6b3b0b42c090376d540cc26ef5fcdab5e360ef2e3b46efc263f565bce14aa4a76f44a3eef21d2bf110623dc836dfc2641a913311792d37c0ee1306b00067b79225da12aec7815b84eef4f9e02f2ee2908cb75c875fccaa2745eca8b0bcfaaa3d623d022566c21f73f5c5c579e380664e587d6d2431d0a30726fc3d82815918b663f7d2de1c4be31adffbabacb296ef68704ca5d90f732604032066521bc0c98fcbb2e10c76d67acec982366edd0048d7eaec403998b395cc7ccdf18da17843ec25c9e4bd8434b49e4173f47acb257418a46c720c6ca4791bef52dae557cda8b50035914c90dfb8b9b033a3472ee5333e3171fea6eda4d5d6f5e4fd09c92e3906ec9be6ecbaee27b48ecebaa5bab9b92f01a5665429e475f5491fbaa899744375934de783d8e70913ce39f4522e43e0f1e99bee370eb9eb0cc176da907d216a361b89a62af03c9d516d29a01e7b02c900f47d4c953b620a65777e7ab4b16d6724fdbb3168c19ac19dbadc6956e062464f4f5818dfca07ca5cbd3adbc958af96be9a3dcc1065f4afd23f3b3ae37941c4fc7b4db7c37298f7e837ab42bca9994d6e0b804eaf0c926ad46c4fff577a1937eb7129bef06b4e5ab6e9c7f91d1a1f9a9ac3cf875ab542417947ee38d7c5a6d59158efa8e206b5e7f304f8d824fe164e7792c2b5d5c59d8b009f7957536477f201c46a1369406f6a61fca78247af564ecd64053b08096e8407f76f5952d7e9013d472fd089ea4168b659905716b320a1dceedc7fd3b0406c43e8d3d63fce27d0693cac909f9acd4cf1997ddfe8fc38796b02b7b97a4e361ab73979f3b272d8c79203169bfc365d4395beea0d96e2bd50344c0fb00d3562df5e7249dd60b19c235a85dcd97cbfb15d359320894aa19519a593f3470aece608eabefaf302991b13a14fdd4f353d9dc59de535eb4b5b20e3fac68dfc7f54ce2dd6ed219b71db8c29da255817ae7ba6b9b0c11500ac522446aa28734f25c27ab2407cbf41ec9d706df31820e3b93b684978758560ca20de5d49892bcdc53df9c0b7fea0a59acbed7ecec448abc548eba19e3105db73242e07cdc4b5769a4fbb3e33e423066f47e83e39a9a43ed3cbaf2af0d5e8ecfacb1bc526f72bed64ceaeefaa3a5e1b124c2749464950d8ec88395c4ba6c3c92e0d66ecd0aecdf9217f5376fd253cc4fede2f76badd015ea71f240d00ac3673cce0bbefb42dfa0356da6e01c264699fb8509bdc61d9b253d9f1bb68287e2cf266d4f501b6986d50b253b8c51b7f9772b79e82870341723a45c4d7f2ca51998b6023f3512f3af5f84f71daff22c79544664e2431d868131337e15f33a55567e64cef32a1178566c0e9393d44749d3a7bf11e987396023153192d9cd77f8b4878aa8c342f0820d43159bddb3a78a3a078ea0bf5dad89740ff306e35e20863415d4f24195b8a5f12f7b857b3c01dee205d559c5c0978f773a5e1d8aa72180bed40207ee282f1f9210ef4260d1862ef1ec0b2a1a0ad1e16a01df41ab6a1e4a3027319288a9edc18ff36ae7a0339fbc4fe172da60f68b13ab2373990e9b57394b78464552cecdab018096805a33c047ff5894ba5e1f926e40e73fda833246b62cb7042d90278cb3e5986142a5e0f410c446cb09ea56e3e63290ceb7fa0ba6e894f707ef017ed99bafaec887bdf9f2c34555c0e48fb956445d6e23e9cb570ae1cc53c27139e588de8282058aab0bda5ef22c8a7d9028d36f46ed3809a8672d79516851d86284e0789494c300f2677966a7e5b01c59fe57ed570197ee773791fbe8eebc41affe0a15683b0440e8c0cdf3a0eb328db5de370e266b1635f01648132eedcaf89d30631fc4699685c9aeafed74dc9eda0ecd59b22ecea3a5c7f858de85fe8e1810eea3649d4754bfddb7e9095489d4ef6a7495324c4c47f8a2b917af1a0713b4badcd3d66b15c76f4cf1da996ab16cc5c9356967eeefbc51720a401ed6cf054677b18f052c16342ac87ed5eb97dddbc6a1248b21c17360e4d86a9a604c5726a178b760d0c6c5a7c3ef69defab5e4e5e9e66c2ca9b19920bac88e03b62b8224cba28afc35e492dbcacae87e517ac8d9cc2fff032304c02220402e92bc2e199adaceac925a4451137496fa1e26f17de13a01d2b8f79c38f1107f1f0d92ff5ee7f0516cf2064ddbf8b49e69640b4f2f539e84cc858c479cb919332216237204ba26b8c7578d7b35feaa0a375f1cbaeefeb47fd6908734f5fc")
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x129a81, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r9, 0x29, 0x10, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x78, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x10001}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x69}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f0000000680)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@arp={@loopback, @remote, 0xffffff00, 0x0, 0x0, 0x2b, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0xfffe, 0xfffc, 0x0, 0x1, 'veth1_vlan\x00', 'erspan0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @private, 0x1}}}, {{@arp={@multicast2, @empty, 0xffffffff, 0xffffffff, 0xf, 0x5, {@empty, {[0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0xca63d3e56e13e625]}}, 0x0, 0x1, 0x4, 0xe4, 0x1, 0xfd, 'veth0_vlan\x00', 'geneve0\x00', {0xff}, {0x1fe}, 0x0, 0x200}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r8, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x50)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000040)=0xfffffffd)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x94002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000500)=0xffffffff)
munmap$IORING_OFF_SQ_RING(r0, 0x100000000)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r5, 0x0)

2.200639357s ago: executing program 2 (id=538):
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000ec0)='GPL\x00'}, 0x48)

2.200152691s ago: executing program 2 (id=539):
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRESDEC], 0x1c}}, 0x40000)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000)
syz_emit_ethernet(0x2e, &(0x7f0000000100)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @multicast1}, {0x100, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0xfa, 0x0, @void}}}}}}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xb, 0xd0e0011, 0x0, 0xc6, 0x220, 0x1d8, 0x190, 0x220, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xfd, 0x118, 0x2000000, {}, [@common=@osf={{}, {'syz1\x00', 0x0, 0x2, 0x0, 0x2}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x7f}}]}, @unspec=@CT0={0x48}}, {{@uncond, 0x0, 0x70, 0xd8, 0x0, {}, [@common=@ttl={{}, {0x3, 0x8}}, @common=@icmp={{}, {0x5, "f2cd"}}]}, @unspec=@NOTRACK}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffe49)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x101b43, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000480)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x4)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000004c0)=0x33)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x50, r3, 0xb186b000)

1.060643828s ago: executing program 3 (id=557):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x9, 0xfffffe00, 0x12, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x80, 0x8000, 0x6ee3853a, 0x1}})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0c009900080000002c0000001400040076657468305f6d616376746170000000040017"], 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="90010000305200001c0012ff030000d0899047ff95ef33000c0002800800"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)

1.000584236s ago: executing program 3 (id=558):
r0 = socket$inet6(0xa, 0xa, 0x3)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
sendmsg$SMC_PNETID_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000340)=0x1)
ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000380)={0x4, @pix_mp={0xfffffff9, 0xe, 0x80c0801, 0x6, 0x4, [{0xf62, 0x80000001}, {0xbc05, 0x7}, {0x4, 0x7fff}, {0x2, 0x1}, {0x9, 0x8}, {}, {0x80005, 0x100}, {0x1, 0x10000235}], 0x1, 0x3, 0x4, 0x0, 0x6}})
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xfffffffffffffe36, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40004)
sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

900.271365ms ago: executing program 3 (id=559):
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000ec0)='GPL\x00'}, 0x48)

895.643342ms ago: executing program 3 (id=560):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}}, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1a37"], 0x1d)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x280000, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r2, 0x3, r0, 0x1, 0x80000})
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000000c0)={'macvlan1\x00', {0x2, 0x4e21, @empty}}) (async)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000000c0)={'macvlan1\x00', {0x2, 0x4e21, @empty}})

590.476871ms ago: executing program 1 (id=563):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
accept$phonet_pipe(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x103d41, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000008f892832e"], 0x1c}, 0x1, 0x0, 0x0, 0x20008880}, 0x4002050)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/kernel/unprivileged_bpf_disabled\x00', 0x1, 0x0)
write(r3, &(0x7f0000000300)='1', 0x1)
write$FUSE_GETXATTR(r3, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r4=>r3, {0x2}}, './proc/sys/kernel/unprivileged_bpf_disabled\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x1cc, r5, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="72a4cd390e85a967a1ce3f15ce98a4b7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "589160e67f44b10a"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fcce767f90426f98"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a7bb33fc1f5a498f"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="15a476da0fb23d6d482923429faf8394"}]}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x400}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e900a1e75eb50882d38fb84f1558ff91e6e6a1957c3a5e6e28be97883f8bd9ec"}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4f35235cb4f0a9e080011c187430fe69"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3a1bdd9fd25bc2a8"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6fd10cf68a02ee14"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b437dcc78a6909b093dfca5a4362a68c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b79d01fb5d3e8816"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="be782194fc707055c97c31f181229086fef92e25c23157c79ef9b008582efe67"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "07d6404d7e79909d"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "84789779aa2263cf"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "85a06a8a8ee235af"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ccadf7334f29e10c08e0ae3ce2acf7e031c295e82d13ee1a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5d8b2b8c40e9a0b6fe3e595ff76d640b"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="67db5aab73317e7d0873574e29c922f7"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7ff}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x800}, 0x800)
mount$tmpfs(0x0, 0x0, 0x0, 0x2e40ab, &(0x7f0000000140)=ANY=[@ANYBLOB='nr_inodf'])
r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
write$P9_RVERSION(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="15000000652e"], 0x15)
r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r7, 0x0)

590.35781ms ago: executing program 0 (id=564):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000fc04000000000300000000040000", @ANYRES32=0x0, @ANYBLOB="2da004008dec50dec60b00002c0012800e00010069703665727370616e000000180002803d71184900f60000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)

590.15072ms ago: executing program 0 (id=565):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newsa={0x144, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x87}, {@in=@broadcast, 0x0, 0x33}, @in=@private=0xa010101, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff}, {0x0, 0x1}, {0x81, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x1}, [@sa_dir={0x5, 0x21, 0x1}, @algo_auth={0x48, 0x1, {{'sha512-arm64\x00'}}}, @iptfs_dont_frag={0x4}]}, 0x144}}, 0x40)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0)

519.06098ms ago: executing program 1 (id=566):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
syz_io_uring_submit(r1, 0x0, r3, &(0x7f0000000100)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r4, 0x0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2}, 0x4, 0x24040871})
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="0d01000000fc04ffffffffff1702000000000000dd658c14a2965a960a4b79dd", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

518.478233ms ago: executing program 0 (id=567):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000840), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000880)={0x0, [[0x7ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x40000003, 0x0, 0x2], [0x2, 0x3ff, 0xfffffffd, 0xffffff7f, 0x0, 0x0, 0x7], [0x0, 0x20000232, 0x200006, 0x0, 0x6, 0xffffffff, 0x1, 0x3]], '\x00', [{0x0, 0x1, 0x1}, {0x7, 0x5}, {0xffffffff}, {0x4000000, 0x6}, {0x400000}, {0x0, 0x5}, {0x4, 0x4}, {0x1}, {0x0, 0x9}, {0x0, 0x7fffffff}, {0x8}, {0x804000}]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000680)='./sys\x00', &(0x7f00000006c0)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/scsi_host/host0/proc_name\x00', 0x0, 0x0)
capset(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000b40)='./mnt\x00', &(0x7f0000000b80)='hugetlbfs\x00', 0x0, &(0x7f0000000bc0)='size=4G\x00')
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c00)='mounts\x00')
read$FUSE(r4, &(0x7f0000000c40)={0x2020}, 0x2020)
read(r3, &(0x7f0000000740)=""/64, 0x40)
getsockopt$sock_buf(r2, 0x1, 0x4a, 0x0, &(0x7f0000000040))
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {0x3, 0x37b, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x401, 0x80, 0x2, 0x3, 0x1, 0x20000002, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x7, 0x3, 0xfffffffc, 0x9, 0x4, 0x102, 0x7, 0x3c5b, 0x80000001, 0x7, 0xd, 0x1, 0x0, 0x7, 0x7ff, 0x1000, 0x7, 0x3, 0x7, 0x4c74, 0x80000000, 0x0, 0x4003, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0x1c0, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x5, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3c], [0x10000004, 0x9, 0x8200012f, 0x18004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x9, 0x6c8, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x8, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x5, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x5, 0xb, 0x1, 0x9, 0x8, 0xe30, 0x6, 0x8, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x101], [0x7, 0xa, 0x40000004, 0x5, 0xfdfffffe, 0x1, 0x8d2, 0xa, 0x5, 0x7ffe, 0xffff0000, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x4000000, 0x4, 0x3, 0x303c, 0x7f, 0xa, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0xfff, 0x200, 0x80, 0x2c, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x0, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x80000002, 0x800, 0x5, 0xb, 0x8, 0x1000006, 0x3d11, 0xb9, 0xcea, 0x1ff, 0x2, 0x8, 0x4, 0x3, 0x101, 0xfa4a, 0x4, 0x9a5, 0x10000, 0x7f, 0x2, 0x6, 0x1, 0x0, 0x14c, 0x60a7, 0x7fff, 0x96, 0x8, 0x80000000, 0x0, 0x4, 0xc8, 0x3, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x6, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x7ff, 0x4, 0x8, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f0000000580)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0xfffffee4, &(0x7f00000000c0)={&(0x7f0000000780)=@newlink={0x58, 0x10, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x5c}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r3)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4)
openat2$dir(0xffffffffffffff9c, &(0x7f0000002c80)='./mnt\x00', &(0x7f0000002cc0)={0x200000, 0x20, 0x20}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000002d80)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl2\x00', <r5=>0x0, 0x2d, 0x8, 0xff, 0x7, 0x2a, @empty, @private0, 0x7, 0x8000, 0x10000, 0x3}})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002d40), r3)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e40), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000002e80)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002f40)={0x34, r7, 0x8de13c6b70ae92c3, 0x41003, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x200080c0)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000003040)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003000)={&(0x7f0000002f80)={0x70, r6, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_IE={0x16, 0x2a, [@mic={0x8c, 0x10, {0x44d, "ce644e918c41", @short="88210d7946e4591e"}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_BSS_SELECT={0x28, 0xe3, 0x0, 0x1, {0x24, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x1, 0x61}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001)
bpf$MAP_CREATE(0x0, &(0x7f0000002dc0)=ANY=[@ANYBLOB="b424c87b582b50192100"/20, @ANYRES32=r3, @ANYBLOB="d3c6ffff00"/20, @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="05000000050000000200"/28], 0x50)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil)

518.259944ms ago: executing program 1 (id=568):
socket$nl_xfrm(0x10, 0x3, 0x6)
keyctl$join(0x1, 0xfffffffffffffffd)
socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000007"], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000140), 0xd)
r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0xf, 0x101301)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380))
ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000000)=@usbdevfs_connect={0x6})

449.905668ms ago: executing program 0 (id=569):
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000ec0)='GPL\x00'}, 0x48)

439.83677ms ago: executing program 1 (id=570):
r0 = socket(0x22, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xfffffffc}, 0x9)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001200010000000049358060e000"/29], 0x20}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x40, 0x1}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000000)="38000000240001050100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002000500010003000000", 0x38)
write(r1, &(0x7f0000000100)="240000002a00010002000000000000000000000001000000010001000000010000000000", 0x24)
write(r1, &(0x7f0000000200)="240000002a0001030300000000000000000000000100"/36, 0x24)

360.563474ms ago: executing program 0 (id=571):
r0 = syz_open_dev$video(&(0x7f0000000080), 0x6, 0x181000)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0)
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x1)

360.125522ms ago: executing program 1 (id=572):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="10007d8005"], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20060094}, 0x0)

359.761609ms ago: executing program 0 (id=573):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0)
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0xa)
syz_usb_connect(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYBLOB="3675458bc9e08134578f201bc6b923f52d24b93da4a8cdf95927d064eeef1ce5031b6f7220448309b7ba38901c8af95a683f57789935cf6de48adbaa0422754fd3b0df4bcdaa15f47f645d5bf28af24756154a5f8c044d73dd4521ba531fa01c52d9143cb00475d21c3d25e752afe6df5a9bc7a42df392dc5aec2be5179126301353aea96afacfb722cef5f0bcb43f31ba947f062b385eefcf750b13aff7835b706f626f7c283a3a5e320cf01e2e21782a99e128363538d88871701ce6fb4f7853ece78d3a1949f73765e16bc8fea60947982c9804bcd29f00810a18974123b34420d98bb3b27a3e7b262c57082378", @ANYRES8=0x0, @ANYBLOB="5ef89facd42f61025a29fc5920d89f6589d6c5ee3e44ef7bf462642525d68cc1f79afe2c633dbfea53ce94cba647e97420f3f41fc7e8422f316a772faaf5b3260d3ea9b9e48484d7aa3851f9f65fe6198f20965aa42370013abaa53bfcdd34bf8f94319710acd644ad232db5883a9c", @ANYRESHEX=r0], 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0)
writev(r0, &(0x7f00000019c0)=[{&(0x7f0000000340)="4950c553873888a415fe574f0d5863b43b07cdba84cb0b58d1effe6fff47f1330d36a35e06d7ae6a84cc5cef8071f96d91595efe45f36e6e823da75cc53e9f4125032e487f890ba54c6f9a98a5ec7fd2cde541f70e2c23cd4ceb604825d69278e17f1e5b8fe3fd4f76c72b429fcd1aba5bd9ec703dbd7840c72ba96452331232c11647ed45cc029b2cefc2", 0x8b}, {&(0x7f0000000440)="0c5a5ebe6fef2d7d36b9e5667be2d1f1a2eae2bff6fa26f46e6aec05188f5497fcb87fa410126c900716bc3e697a424f4aab200331277476d4a3c4e403ce9d23ef846b6038afff3104dc5e69161fb44c5dcad0cc72d1dd6b59300796e70ef8c7c73ea9161990c67a08999dcd7b056407bb62a55730853926f5bb7c74ae1ee355071a0099247632d20633ba0a7dbcac684aeda6825de304e4580fa645cd4491b99a11d429897d734387b3e056e99915", 0xaf}, {&(0x7f0000000500)="5371b3fac6ea2161015f989488aa563068561682f729f406740391688d95a93312ffa0d67615575b2c3cbbd65338868afb3df08ebdfe60268ab0265e4e90ec49dbd403865266f4ae799fb31ad56e1a0d82396a34d4d2061be42326282ab1780b006806071cc581f28c8466fcece989e30d950416d4b2a821e52a813ebcab9f203151e4feb5f0880d851a370826167fabae7a2c2d81944e73094dbbc9bcdc67df0060c29dd42408919e", 0xa9}, {&(0x7f00000005c0)="4c188a1cb4239a079d83b243a4278adb2dc0b0096edb8090bf7070bcbfab0c24be488c3f394f8f827f2f85dcd50c9445798778781c3a53cab12faf3bf34a9eaf53bd15213254a68b998c1ef59e8c6d301ddf46cb2749819165c85d4b772a826038ed12c171995361564b96282c956643977f35a0812eaa9dba80cd0a04cb539ec1f04ae43adfba24a2826d284b2aacba1d446b93c19f9cf7656c69e4f3e6a0a6cf48fd7da33ad34979c1d576ec20fc795974b04010b182eabedf77528a7fbccc15a98446f0425f14333f93cedeedcd8bd27f626a632cf093fad1011ee8116c200cd765fbf91ec222bc2d3150392e7e893c384941c1f66771fa83307b63cb960078c936c69d6f50f01b0bdeedf81938d406ee026cdcaa1ec0fc0cee9f49bcb7de732a7830ae7eeded21c7862cfb29254e7408f4ac426b7704f853d24ac1d8da3269690ce4d855e952fbb60c0ea5096953fbb087e5eda52683f6f3bc258c859b65f8e41ef0e140d9470b6d61fb19f22fe768f44fb819a11f8c874c07129cdab449989f9a3639a5a4dd70c1b488148287ff070bdef06698c3bf08fa92146e186e3d74b85640bd4a1c103aec1f4a3bdc80b50d94f251ee573499339a23d6d584b48424afa4199626337a13b3e5eb561ce84961bedc96459018d52a8b9bbf0a9ac420c458095ea854bbae915af88ccf0f6fbbb0f82141d0fca41588b1dbaaefec4953f85746cc7b2c2a3c43009f159f89f4c0b2f1d4362fa4776cb59dfe6a725e1525be8fd21001e0c1f272a42dd3c9cafb7489134aaa81927da2ddaad50c4632324c65f3b3a3276f98f89947c7db987ca1970fd0480c449bf2be770348aa65a81eb56b85cd3b0888acc407a936614d1661c925a8ee8ccb62d099b87b2921a62517ee2ff4338907a9239fbc0d29dc1e31202ed11118b6708c70560c20fca7d2b331dabd1c2d11450d235c4c26f030a1db488b1dbb847d893edb81d898379775be3db8a3205563eb42b88ae5c9c34f6c3cc74c04594f264740c4eefbe1bdeab7a9bba93aaba2177500b5ba5897b4e6eab654e16530ebcafd454b201bfb3eeb7370b53f04ae76c47ca3451dd65d27c8caeb65a3c8a997577dfe16e91cbb532a945b5509693637c4798eb8abab486bdc573feae8a421fa363cf274bbc474c216e436ea084bef0e43c844b439d00ffa0e3bc5bc6e85ae3575998fe0937cc9c22ba72e7d1a604597e67b958b0ec955f040c39d7d25a46df2a9e62748a8d0f5487f1d04f4d4f39ed89d0ab950f1613fa7244acc738bf624a176f57fad1cf28f57eab4f9638997ddf5f00c5adf6b0c182ea1b13c072c8b44011ab66b901a4f094c7cb53c4140703bab65bd6386e7ef3a935089a5a5a5acf2d86f050acf40d7ecdc5f29218560ec9e8f89ccec1e34afaf69d26c3fa9c2b5199c09b039bfbdb5eaac22fe59f4c99abb70a8141a55850c3b457ac8f426c3d3f6ff651bb03d79b8f933fd4c7f6f89526cc22d7eb1782a9c02a6aa467ca5b7c746cc7c559164e236460876761b5faf40ae7fa38af7a10615bc01922554f29b016c31de406d593deaacb9e9fb8418b5c5cc7ab0a1c4cc24931cde62b49cee2f0b347cc78af20141abc7bf629ed9c33cb4767df48aa719bb4cfec9124919797ee73d495a30875c2e9b364bee577d19d87faac8c8e58d774664ba6bef665690735adfe93a8cff18566e54c3934ad0f172b258800aa2632f97c3866a9992160567e85fc777c88efd3e62195b3a75a093d59ae07ce01828a98b4d00c8fb90494f5672045500153c422b54ac573c859d1a66dfe22be216d3950be4a51a4dfe46e511841e39fae7f09c2e1d44d2ba3805acc9e32959eaa8d43b22437b48a03914cc73e3a293096e429f740c59ec5e530225df636a5d427c0b4cbc7aea2cf22dcbfdc5df2c797de8d618bd0154a77503db93f64a7731ad82868b2f9b127484d56128e05e5d23f8aeb7aee8dfe74672bd0aa5576643f9f555439dad8916a417a189c1675dafacbae7fe62dd300f15ae483421c46ef681129ee5c12c3d954487b314eb9e87b41f6258c620f41027e5121de470f0b8f1c665d0170de2ab5f948731c8f696e0a5026631eb0c008d0b05889e87ebf806c1fcd23018805e7d0a3da607e92c89fa3b57715fc6459c1aa5ea7df4f4d3e63467f5615af4a74f43834e09788ccaa5abe1fde24da7eee5143122cf894086554d3084f75e6dd78b68b1955c5fddab59bcbc985ef57715120f1fdb72c1bf75b912732b5ff58c774f23762c599dfcc5daf900740d7b3cc802a6270c2b4b2194988150d58e973d5c25f947ce6f69299e66ec49dd4d5dbfff4329cf10c00444eb7b4d208aa1a927e24aeb86918def62c26d9d32c04f87ba26d4f4928c1b3301380216dc5237b28805789931a23a023ad022319fd5c17ff822acd9f67f400bccc9b16a0165c12624eab411ee899aae0b137c2535b95157d259b8aa6bc23360f404ab0c5e998d0e4ba758ff561e4fa11806d2364f1c2c598c461b95c9f8952320c2ab34c2043dffd70da957859451d484672dc61da28160734b16a4071799da6aff7dfe2ceca0457d3eb16b7ecbb5e68fa76fb415a74c855bab3aa5c4ec0bfdf2b3463a399cb1879f036312d81b6bbc1016e7be6774419b38b7ccfc7bb2b1f6b863a4bd24e28be11147ada8c1740b71303319b6ba4abc7e346c7a69cb01067516f282904634852199e242bf716f49d5d1b8cf1de12af9e4489beea4d7e4e58f144225d8fb743d5ad377a1be2084b9e631c7182e8f5a3a0dca4606cc41a7a51696301a9a634c57480a27bdbe4d7b54a134ad270f8df91478d40dc99c586146a5546379bf1f2a0e95f57fe3cf4f8364bd225c625ab918808c7028d76814056684c3dc74c9b761bb111ab984b1da50aca90fbe496053245c0320cc1dd03d98b2354575201f8d8272996d56f776398e4961d000df2200931e8b517eccbd70066a3dd188ad31b1e7d86505ba2945e36bf3f4297cad8191aafb78cd3c1d08fd560f608ff74a4fb3c8ce364387fb504a842a3ec15d0f86ba063032cff65bdfca90fd4bf88680493bb2a82956c0d52bfe2861e42170af3e28a52afc37abf1629ae430094a8aca4349401f865b98bf64d03082e155ef3b264c09f07923d61ec8cb4ccfdb7bc94868041df1786af03f4d9ab010ceb4fd1d6478b0aa16474d518cce0e7f998caffa47992fa23b5b1ff84f2de550a967c101ac7f6fb2c9bbc973755b6ab666f625723facf1cb0991e8c2090a4f08a154e60e139e79e0b334c6937a301a5c7873c1294bc5144b81edd5dd0c5ad847be49c19a55d8deda44f2250163386def3d667b0d3dbc8da16933aa7d23dbc0a88243a4befc4edd4165ac214ff23e788f13b6d5b16f86cfaad2857694a39d4e2a94c7bcbd68f2352942825a2b0367e45f943d3e5c3b725a4cae718162daaa80778df2683b95f0883704d4916599180925549767aae8dada2ccaff9abec97d06a0411f324832b78bdc583e27943b1682273a45f9ad6008d7ea02c0d17edf3cd6bd000e948003b3c09b26e5e4590a4fa12627c1368d6398fed244f98a0dc2fc18e451525bcddc719313ebd749c4d034137565eb8d99fc21bcc986405d8894f91551e82d0e540199e7ff964f97b503b0af659ed26e817160f5c1eadbf185e1f685bb90259ad0b745d98d208eb771356da07d9b21c281ba80e773d0c4d5f450e69d2a119ac8d6c7563d1911920a12912842446b5fb76d765e09ef5b1e30d32943ea229ed100360493e2d2cb9ea347d13c4f836f09e7dc4beb64ce969879d06491b0452f941d605cce90e69d2c3d3fd3e115bd4915a09aec7dc9ed3dbefdd648050bfe4fd144e93c93d552f9061da2bb1f8d6630386a82fcfb86c21fdf3a78dfc041c0e898547f6867390abaf91cb149703a21b6868edebcb55be9f2e6ba105833b18547977174b608c3fb09efeaeca7a62c222edb1c9e171c91196f8397ae9401b7f4ca5527b3e6051136ed5c5f2553e0c9f1cdb17677581e8b6069868fe54fb4c17e1a9cefd2f9220b0c08382c7e54ef761e484020e26ae6e815e93f87079f1bbe49e55d236f012932b02f9a374b50bb9d0321370c0782b82246aafa54131de031e398516dcb0bef3fbd2322b2ab04439f629560fa4bfc19df64c0a07cafa1aa830dcc31a43db429c6a9c1bc9adc09d181eeacaba25b1cea6ff91948a9601a93899700edd39de8cabe2e9a5f0df014c0941eb52482b36f0b3da8d7709bc13f094a222decf6d2743124c8447a0b3ddfc31fd5fe26f490f2c3b3e77b3b5bf75cc9e7c7141fc124cf44ed60bd834b54286258051caf42594f90358dfaa3adb46aad476e4261244f56a2f9ea579718d2c41628f23ac40287bcbdf014f7bfda3e62299ec9ff62327a2a18bab1454de09935f0dae8405029536bf7f54f059346ef7a6dd4c770a40dfc53fdfad3ed3203573bb290233573f61f90bef3b8f18d22cc45660d85312f8b0ea06ab7b89642b058c3cd46d0b507d2df2c01b0299815a893a189ff30872f31b190d6a7fff37712b11d42281f2f8fb25fbd9b9d966d97b1ebc2a6fc9288748169b25a03818c245a3b895dd8f4f7b85b4afbf2ba194dca323733fee333f0b55b874752de09477bb86dfe8f8db92c15c942bed900bb61bd4a70cf90094f6a1c87515f82a95113b87b2ed8718630ddb4b9ada198322b1ebb5994593361a8d660987eec24e22f94184669d4f81377a7ace3214adc6419c9920ff79206d7118a8f446aeff5c7aa0d137024ae9d4b55508e40ee308601ac97005d38cde6752280b1c5df5c2ef2ff3ff080ed96a78f03a38d432419e5176a5784e19858f2a75b795c27dd25a2f4e01550b276ac0e57db37a7a7e32c2bcb203e2528ff0c854b606ca5dacc02370db962c594fc8317a84770a7119b9878eb903f7a7fb2ccdb8c0e7d52ffb488f04ccd31a5e202a660aa1dca957c0421d4a1ae7ce037781cba407146648366393aafdd3cff75367bd3617894eb0157a126b69ea9c32a5a17829d59ead0527d6b8483c177fb9a5342507eb5fa0c77a43bce7cc399bd1995c26109871eb151a17860c6cc8b2cac6e55ee5216cd5914088a2acdba9f2fda86721e1a41649e7f58526ea5a993d5cfefbab1dbd6377f1f362ea3dc43e6680acced9665607411b30f331ee6bf30e354869b26ec92d2c20a147092bbeda2eda4ea9bdd16d164c8dd99c712cf6f016f56a6af81e4e2207ce4e39a15b6eba0f08e15a04bd8573d6a22d1fbe7dd106e1fbf5ef0e76d8cb196f845c3f787134da9b40e6957df19ec7da46599934cd9c342d2ba645dffc28174728f737ca93d5a54712769b4e5db4d55a31d6ed98c37f12c38fb45628af6791944af68ea6448f3e49217c07a03e8a8c59d922d4826aa16bb75489d3fa1cce99d301019091bf05829e75dfa3ee3072a7b7629fe3f5008e8f4f9a2f29a56003f79fb4d93327a1396bd64e06c382142cc28e05c5a68331435589cd81500d746562de03d31522a0766dd469e7fc30046f3bfd17eb9d7f4f0fb6197e23d74c742142dbf54a7654a057b8978adb9fccec3f36b41f73952c14f06e95678e3af55bd7e48e927762b2b99011167e8ac87926f7164e7d3d962c0c3ff10143db3eba028e57e585257fd947410cc578d45660aed3d77755574b6f6c603cd974ab6f95a82a72fa2bd4bb1fda45da4db2aad0cb9791ea9519731675dbe8e0dca1e36c18f1c83f438d04939facb5d1a2c458191c3f79b53e646e776a4c70d87e1152f68c27490b96135", 0x1000}, {&(0x7f00000015c0)="6524956d41242a4e1e1fe852b90065d74c963b2c8dbda45cad9ca77f97fe9feecde9206c165d330c9d65c2e034874310b6120cf4dfb3cdb1b52dce7f82831106ddd860b2b35ab259c217a9ab4cc2b414a202013188effe79fb536a630c4d359b8eae14f75a4446fbe5f366cf37b46e31d53127f7cd9b0c139c1c0873cb22070c617fe06fc997fdf0b95bfda03c961bd4be6fd100219a875dcaef919a1577b5a5a72c0adc02d3184b143a988e8b713ebdc4586552f3b331f8dcb0488be6e730a399b4a7b83228cccabe4a84c969cf1a20ff14b44b8aab92eed9", 0xd9}, {&(0x7f00000016c0)="ebade853fdaf1c236a690f18cd86a5c634b7264a68ea1d781d2dee1d748d9499a93e6f89f170c2964b6c0e82aef2341ffac958f29da7f64fd29f24eccf939178c535a9a332a108639542a280a9023fc4ee718bd7dff9221cb278e82985b6a972481fec8b039ba524b559b7b6597bcb60adcaa9bb1c994da84ff3fc7f436047b9c456dda56ccbea5e2cc7d205a4", 0x8d}, {&(0x7f0000001780)="624c9e3e8483a7b7eaf59a463a5fefb3626a2e81c89396086406bd4edfc4fd64ce34551b42b91bb985c96e4447e73b3bd18fc0223b9cb57080e59bce5089c01053ed6ba6a108c4ed1a769b5b6041faed36f1bb43384dd0120cef82f4ec47f13fc538a880aa830a209be27d8a490634ac3f95fab422117b9cf7113d01603ddcd7664e6dab520dc35ad6560938fd4cdff81d324b9b", 0x94}, {&(0x7f0000001840)="aabd8337dc5aeb03e90e6035368cbf070d4c44c69029de94f16aabc6fc4f428321fdde589d0a79e429aa2c9268313f6b269956d2bf039d3b100e286b5634fa26689d", 0x42}, {&(0x7f00000018c0)="c5d89cf059bec4b3998a7cba531e1c2c4613dc006cc6a40ee0b2078fcc79411b9f2cb200ba2a2d2a3ba8f8771bd1237fa24bf66193023a6b28a4efbd141d0137acfd3f233ba67ae594d58875bb32b7737cad447fe8df3a32f4a26bcf133823315bf19288fd86a363253dcd3d5f7f5f9621bbedcd5e8989fa54b6001e316072804fc71132a2a423907560459eae18031e10f4bbbd61cc450aff8af2d4b799d337e546a670435a6ab823f3129d377f6f08f1f2d8f24e1cf414d85deac62eefa21e7296da6b695cef0ff4c087355def7c148ca277e9d03e03ceea34773a35190f", 0xdf}], 0x9)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x8d, 0x8f, 0x33, 0x10, 0x5ac, 0x247, 0xc91e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x6, 0x20, 0x7, "", [{{0x9, 0x4, 0x19, 0xfe, 0x0, 0x3, 0x4b, 0x2, 0xe}}]}}]}}, 0x0)

249.744369ms ago: executing program 1 (id=574):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async)
r0 = gettid()
timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x40856)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x16)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000001c0)={{0x1, 0x1, 0x10000}}) (async)
ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) (async)
readv(r3, &(0x7f0000000200)=[{&(0x7f0000001ac0)=""/4089, 0xff9}], 0x1)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x81}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async)
ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000000300)=0x7) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r6, &(0x7f0000000000)='3', 0x4e)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30"], 0xf0}}, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x6000)

180.463602ms ago: executing program 3 (id=575):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x9102})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f00001dd000/0x1000)=nil, 0x1000, 0x300000c, 0x810, 0xffffffffffffffff, 0x9d3e8000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d1}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @broadcast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000003c0), 0x56)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', <r8=>0x0})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'nicvf0\x00', @broadcast})
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x24dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xf, 0xb}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000b0}, 0x20000000)
sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000640)="27030200591114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

65.389073ms ago: executing program 3 (id=576):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000011c0)=0xffff) (async)
ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000011c0)=0xffff)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000000080)={0x2, {"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", 0x1000}}, 0x1006)
ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f00000010c0))
syz_usb_connect(0x2, 0x24, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0x24, 0x0, 0x0)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340))
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x3000)
ioctl$DVB_DVR_DMX_REQBUFS(r1, 0xc0086f3c, &(0x7f0000001180)={0x5a, 0x94f})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001100)={'syzkaller0\x00', 0x1})
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000001140)={'veth0_vlan\x00', @random="28f9300b8815"})
write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async)
write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)

302.169µs ago: executing program 2 (id=577):
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_pts(r1, 0x8000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001600)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x11, [0x3, 0x1, 0x6, 0x9, 0x8, 0xc, 0xb, 0x9, 0x5, 0x2, 0x4, 0xb, 0x8, 0xe, 0xfe, 0x4f], 0x0, [0x0, 0x3, 0xd, 0x6, 0x6, 0xf, 0x7, 0x1fe, 0x2, 0xfb42, 0xc4b, 0x7ff, 0x9, 0x0, 0x7, 0x54], [0xfff9, 0x9, 0xffff, 0xff, 0x2, 0x9f1, 0x1, 0x3b27, 0x1, 0xd, 0x337, 0x100, 0x91b, 0x2, 0x0, 0x7]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8845)

0s ago: executing program 2 (id=578):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000300), 0x0)
close(r0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/thread-self/fail-nth\x00', 0x40402, 0x0)
write(r2, &(0x7f0000000640)='3', 0x4e)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e0000006a0f0000030000000c00000001800000", @ANYRES32=r0, @ANYBLOB="010100"/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000002000000010000000600000000000000", @ANYRES32=r3, @ANYBLOB="000700009b21fda0a7ca97b9abd4dcfa55f926d579a01cd9fa20935a721448411776ef5efae3765bf58e136000704a479fe5546f8e02a65d74ffbb07c8ae91502b31ed52275db81981eb8b5068e707f1b9ce516aadf1"], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r2, &(0x7f0000000480)}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r4, <r5=>0xffffffffffffffff}, 0x4)
socket$inet(0x10, 0x3, 0x0)
r6 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='gid', 0x0, 0x0)
r7 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000480)='mon_addr\x002-fIP`s\xe5\x96\r\x98\xdc\xe4.\xeag\f+k+\xaa\x92y\x03{\xff\xd3h\xf9\x9f-\xe5\xe7o#\xd7\xef\x97\"BW\xd2\x0f\xbc\xb08\xeb\x1f\xcdbx\x87\f\xfb\xfd', &(0x7f00000002c0)='1\xb27.\x03.0.1:6789\x00', 0x0)
syz_open_dev$dvb_dvr(&(0x7f0000000380), 0xfff, 0x2)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500b9d7ff6e32d643e800a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x68}, 0x94)

kernel console output (not intermixed with test programs):

ridge0: port 2(bridge_slave_1) entered blocking state
[   51.948546][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.978682][ T5732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   52.237176][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.253009][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.278428][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.321302][ T5741] veth0_vlan: entered promiscuous mode
[   52.331075][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.339716][ T5733] veth0_vlan: entered promiscuous mode
[   52.350130][ T5741] veth1_vlan: entered promiscuous mode
[   52.359996][ T5733] veth1_vlan: entered promiscuous mode
[   52.430741][ T5746] veth0_vlan: entered promiscuous mode
[   52.443893][ T5741] veth0_macvtap: entered promiscuous mode
[   52.448501][ T5732] veth0_vlan: entered promiscuous mode
[   52.449280][ T5746] veth1_vlan: entered promiscuous mode
[   52.450919][ T5733] veth0_macvtap: entered promiscuous mode
[   52.459698][ T5741] veth1_macvtap: entered promiscuous mode
[   52.464048][ T5732] veth1_vlan: entered promiscuous mode
[   52.465238][ T5733] veth1_macvtap: entered promiscuous mode
[   52.480529][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.494212][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.503916][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.505225][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.553865][ T5746] veth0_macvtap: entered promiscuous mode
[   52.563478][ T5732] veth0_macvtap: entered promiscuous mode
[   52.567009][ T5746] veth1_macvtap: entered promiscuous mode
[   52.579169][ T5732] veth1_macvtap: entered promiscuous mode
[   52.595346][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.645894][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.652894][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.666462][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.666479][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.677385][ T5806] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.679690][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.685002][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.722854][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.722875][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.728522][ T5546] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.728769][ T5546] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.757130][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.757148][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.822274][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.822293][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.852826][ T5733] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   52.857357][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.857377][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.859807][ T5546] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.860032][ T5806] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.860151][ T5806] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.860255][ T5806] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.860346][ T5806] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.907624][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.907642][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.925293][  T647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.925313][  T647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.958119][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.958134][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.978427][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.978465][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.978491][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.978518][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.978543][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.978566][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.978583][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.065561][ T5882] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4'.
[   53.105447][ T5090] Bluetooth: hci3: Malformed LE Event: 0x02
[   53.140330][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5'.
[   53.158226][ T5885] ftl_cs: FTL header not found.
[   53.160687][ T5889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   53.172174][ T5889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   53.195036][ T5885] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [65]
[   53.339413][ T5896] =======================================================
[   53.339413][ T5896] WARNING: The mand mount option has been deprecated and
[   53.339413][ T5896]          and is ignored by this kernel. Remove the mand
[   53.339413][ T5896]          option from the mount to silence this warning.
[   53.339413][ T5896] =======================================================
[   53.339474][ T5896] fuse: Bad value for 'user_id'
[   53.339481][ T5896] fuse: Bad value for 'user_id'
[   53.348080][ T5821] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   53.461099][ T5898] pimreg7: entered allmulticast mode
[   53.500207][ T5821] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   53.502042][ T5821] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   53.502059][ T5821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   53.502071][ T5821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   53.502082][ T5821] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   53.502101][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.504597][ T5821] usb 5-1: config 0 descriptor??
[   53.637053][ T5736] Bluetooth: hci0: command tx timeout
[   53.637075][ T5736] Bluetooth: hci1: command tx timeout
[   53.637131][ T5090] Bluetooth: hci2: command tx timeout
[   53.716978][   T66] Bluetooth: hci3: command tx timeout
[   53.820669][ T5911] tmpfs: Bad value for 'mpol'
[   53.822976][ T5911] x_tables: duplicate underflow at hook 1
[   53.924501][ T5917] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   53.947094][ T5886] smpboot: CPU 1 is now offline
[   53.994459][ T5886] smpboot: CPU 3 is now offline
[   54.004758][ T5921] smpboot: Booting Node 0 Processor 1 APIC 0x1
[   54.037391][ T5921] smpboot: Booting Node 0 Processor 3 APIC 0x3
[   54.071159][ T5821] usbhid 5-1:0.0: can't add hid device: -71
[   54.071240][ T5821] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   54.086987][ T5821] usb 5-1: USB disconnect, device number 2
[   54.299990][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'.
[   54.321910][ T5938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   54.329552][ T5938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   54.646208][ T5943] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19'.
[   54.683183][ T5945] fuse: Bad value for 'user_id'
[   54.683201][ T5945] fuse: Bad value for 'user_id'
[   54.763809][   T43] kauditd_printk_skb: 82 callbacks suppressed
[   54.763821][   T43] audit: type=1400 audit(1791939994.347:246): avc:  denied  { create } for  pid=5957 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   54.764640][   T43] audit: type=1400 audit(1791939994.347:247): avc:  denied  { bind } for  pid=5957 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   54.765415][   T43] audit: type=1400 audit(1791939994.347:248): avc:  denied  { read } for  pid=5957 comm="syz.0.23" name="event0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   54.765452][   T43] audit: type=1400 audit(1791939994.347:249): avc:  denied  { open } for  pid=5957 comm="syz.0.23" path="/dev/input/event0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   54.765760][   T43] audit: type=1400 audit(1791939994.347:250): avc:  denied  { ioctl } for  pid=5957 comm="syz.0.23" path="/dev/input/event0" dev="devtmpfs" ino=940 ioctlcmd=0x4521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   54.766088][   T43] audit: type=1400 audit(1791939994.347:251): avc:  denied  { setopt } for  pid=5957 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   54.766954][   T43] audit: type=1400 audit(1791939994.347:252): avc:  denied  { accept } for  pid=5957 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   54.797956][   T43] audit: type=1400 audit(1791939994.387:253): avc:  denied  { sys_module } for  pid=5957 comm="syz.0.23" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   54.811545][ T5966] block2mtd: error: cannot open device /dev/zram0
[   54.954996][ T5978] pimreg7: entered allmulticast mode
[   55.009753][   T66] Bluetooth: hci0: Malformed LE Event: 0x02
[   55.247038][ T5836] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   55.407633][ T5836] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   55.410634][ T5836] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   55.410661][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   55.410681][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   55.410698][ T5836] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   55.410729][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.413450][ T5836] usb 6-1: config 0 descriptor??
[   55.432064][ T6004] netlink: 36 bytes leftover after parsing attributes in process `syz.2.30'.
[   55.490959][   T43] audit: type=1400 audit(1791939995.077:254): avc:  denied  { read write } for  pid=6005 comm="syz.2.31" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   55.491411][   T43] audit: type=1400 audit(1791939995.077:255): avc:  denied  { open } for  pid=6005 comm="syz.2.31" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   55.494238][ T6006] loop6: detected capacity change from 0 to 2640
[   55.500570][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read
[   55.500612][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read
[   55.500635][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read
[   55.500658][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read
[   55.500730][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read
[   55.500770][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read
[   55.500832][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read
[   55.500932][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read
[   55.500946][ T6006] ldm_validate_partition_table(): Disk read failed.
[   55.500966][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read
[   55.500989][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read
[   55.501024][ T6006] Dev loop6: unable to read RDB block 0
[   55.501273][ T6006]  loop6: unable to read partition table
[   55.501478][ T6006] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[   55.545824][ T6007] capability: warning: `syz.2.31' uses deprecated v2 capabilities in a way that may be insecure
[   55.719975][ T5090] Bluetooth: hci0: command tx timeout
[   55.719978][   T66] Bluetooth: hci2: command tx timeout
[   55.732398][ T6013] fuse: Bad value for 'user_id'
[   55.732416][ T6013] fuse: Bad value for 'user_id'
[   55.768452][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'.
[   55.793434][ T6015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   55.808798][   T66] Bluetooth: hci3: command tx timeout
[   55.812894][ T6018] Zero length message leads to an empty skb
[   55.813172][ T6015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   55.857343][ T5983] smpboot: CPU 1 is now offline
[   55.906042][ T5983] smpboot: CPU 3 is now offline
[   55.957543][   T66] Bluetooth: hci1: command tx timeout
[   55.965385][ T6025] smpboot: Booting Node 0 Processor 1 APIC 0x1
[   56.002815][ T6025] smpboot: Booting Node 0 Processor 3 APIC 0x3
[   56.030943][ T5836] usbhid 6-1:0.0: can't add hid device: -71
[   56.030995][ T5836] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[   56.033583][ T5836] usb 6-1: USB disconnect, device number 2
[   56.495463][ T6035] pimreg7: entered allmulticast mode
[   56.548017][ T6038] block2mtd: error: cannot open device /dev/zram0
[   56.625273][ T6040] syzkaller0: entered promiscuous mode
[   56.625294][ T6040] syzkaller0: entered allmulticast mode
[   56.678843][ T6040] tipc: Started in network mode
[   56.678876][ T6040] tipc: Node identity 62a2a9ff17f8, cluster identity 4711
[   56.679619][ T6040] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.685902][ T6040] tipc: Resetting bearer <eth:syzkaller0>
[   57.094161][ T6048] fuse: Bad value for 'user_id'
[   57.094180][ T6048] fuse: Bad value for 'user_id'
[   57.376357][   T66] Bluetooth: hci1: Malformed LE Event: 0x02
[   57.616863][   T30] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   57.677770][   T25] tipc: Node number set to 1968876031
[   57.777548][   T30] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   57.778524][   T30] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   57.778545][   T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   57.778566][   T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   57.778584][   T30] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   57.778612][   T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.781486][   T30] usb 7-1: config 0 descriptor??
[   57.797635][   T66] Bluetooth: hci2: command tx timeout
[   57.797665][   T66] Bluetooth: hci0: command tx timeout
[   57.878088][ T5090] Bluetooth: hci3: command tx timeout
[   60.415710][ T6072] smpboot: CPU 1 is now offline
[   60.476174][ T6072] smpboot: CPU 3 is now offline
[   60.514395][ T6078] smpboot: Booting Node 0 Processor 1 APIC 0x1
[   60.537038][ T6078] smpboot: Booting Node 0 Processor 3 APIC 0x3
[   60.569919][   T43] kauditd_printk_skb: 21 callbacks suppressed
[   60.569933][   T43] audit: type=1400 audit(1791940000.157:277): avc:  denied  { nlmsg_write } for  pid=6089 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   60.572243][   T30] usbhid 7-1:0.0: can't add hid device: -71
[   60.572291][   T30] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[   60.575722][   T30] usb 7-1: USB disconnect, device number 2
[   60.675447][ T6106] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[   60.701520][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.61'.
[   60.713043][ T6112] bond2: entered promiscuous mode
[   60.713119][ T6112] bond2: entered allmulticast mode
[   60.713354][ T6112] 8021q: adding VLAN 0 to HW filter on device bond2
[   60.716477][   T43] audit: type=1400 audit(1791940000.297:278): avc:  denied  { create } for  pid=6111 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   60.730687][ T6116] /dev/sg0: Can't lookup blockdev
[   60.744844][   T43] audit: type=1400 audit(1791940000.327:279): avc:  denied  { mount } for  pid=6111 comm="syz.0.61" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   60.751665][   T43] audit: type=1400 audit(1791940000.337:280): avc:  denied  { search } for  pid=6111 comm="syz.0.61" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   60.751709][   T43] audit: type=1400 audit(1791940000.337:281): avc:  denied  { append } for  pid=6111 comm="syz.0.61" name="uprobe_events" dev="tracefs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   60.751743][   T43] audit: type=1400 audit(1791940000.337:282): avc:  denied  { open } for  pid=6111 comm="syz.0.61" path="/11/tracing/uprobe_events" dev="tracefs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   60.790658][   T43] audit: type=1400 audit(1791940000.377:283): avc:  denied  { ioctl } for  pid=6117 comm="syz.2.63" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   60.791357][   T43] audit: type=1400 audit(1791940000.377:284): avc:  denied  { create } for  pid=6117 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   60.795907][   T43] audit: type=1400 audit(1791940000.377:285): avc:  denied  { ioctl } for  pid=6117 comm="syz.2.63" path="socket:[10934]" dev="sockfs" ino=10934 ioctlcmd=0x9417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   60.847564][   T43] audit: type=1400 audit(1791940000.437:286): avc:  denied  { unmount } for  pid=5746 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   60.960974][ T6129] netlink: 'syz.0.68': attribute type 7 has an invalid length.
[   60.960987][ T6129] netlink: 'syz.0.68': attribute type 8 has an invalid length.
[   60.998694][ T6138] FAULT_INJECTION: forcing a failure.
[   60.998694][ T6138] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   60.998714][ T6138] CPU: 3 UID: 0 PID: 6138 Comm: syz.0.71 Not tainted syzkaller #0 PREEMPT(full) 
[   60.998726][ T6138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   60.998733][ T6138] Call Trace:
[   60.998737][ T6138]  <TASK>
[   60.998741][ T6138]  dump_stack_lvl+0x100/0x190
[   60.998761][ T6138]  should_fail_ex.cold+0x5/0xa
[   60.998804][ T6138]  _copy_from_user+0x2e/0xd0
[   60.998822][ T6138]  copy_msghdr_from_user+0x9f/0x4c0
[   60.998837][ T6138]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[   60.998856][ T6138]  ? lock_acquire+0x1d1/0x380
[   60.998868][ T6138]  ? get_pid_task+0x2a/0x250
[   60.998885][ T6138]  ___sys_sendmsg+0x106/0x1e0
[   60.998913][ T6138]  ? __pfx____sys_sendmsg+0x10/0x10
[   60.998928][ T6138]  ? get_pid_task+0x106/0x250
[   60.998947][ T6138]  ? find_held_lock+0x2b/0x80
[   60.998972][ T6138]  __sys_sendmsg+0x160/0x210
[   60.998983][ T6138]  ? __pfx___sys_sendmsg+0x10/0x10
[   60.999001][ T6138]  do_syscall_64+0x123/0x790
[   60.999019][ T6138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.999030][ T6138] RIP: 0033:0x7f0c0ed9e2d9
[   60.999040][ T6138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   60.999050][ T6138] RSP: 002b:00007f0c0fd03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   60.999061][ T6138] RAX: ffffffffffffffda RBX: 00007f0c0f025fa0 RCX: 00007f0c0ed9e2d9
[   60.999068][ T6138] RDX: 0000000000044050 RSI: 00002000000005c0 RDI: 0000000000000003
[   60.999074][ T6138] RBP: 00007f0c0fd03090 R08: 0000000000000000 R09: 0000000000000000
[   60.999080][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   60.999086][ T6138] R13: 00007f0c0f026038 R14: 00007f0c0f025fa0 R15: 00007ffc651bc228
[   60.999100][ T6138]  </TASK>
[   61.299828][ T6154] binder: 6152:6154 ioctl 80045500 200000000440 returned -22
[   61.306973][   T30] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   61.479765][   T30] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00
[   61.481076][   T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   61.481099][   T30] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   61.482848][   T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   61.482875][   T30] usb 5-1: Product: syz
[   61.482887][   T30] usb 5-1: Manufacturer: syz
[   61.488104][   T30] iuu_phoenix 5-1:1.0: iuu_phoenix converter detected
[   61.491198][ T6161] o2cb: This node has not been configured.
[   61.491210][ T6161] o2cb: Cluster check failed. Fix errors before retrying.
[   61.491228][ T6161] (syz.1.79,6161,0):user_dlm_register:674 ERROR: status = -22
[   61.491251][ T6161] (syz.1.79,6161,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1"
[   61.499904][   T30] usb 5-1: iuu_phoenix converter now attached to ttyUSB0
[   61.812144][ T6183] netlink: 32 bytes leftover after parsing attributes in process `syz.3.87'.
[   61.873027][ T6185] netlink: 'syz.2.88': attribute type 34 has an invalid length.
[   61.873045][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'.
[   61.892031][ T6185] bond1: option lacp_strict: invalid value (198)
[   61.895525][ T6185] bond1 (unregistering): Released all slaves
[   62.198596][ T6198] FAULT_INJECTION: forcing a failure.
[   62.198596][ T6198] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   62.198624][ T6198] CPU: 2 UID: 0 PID: 6198 Comm: syz.2.93 Not tainted syzkaller #0 PREEMPT(full) 
[   62.198643][ T6198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   62.198653][ T6198] Call Trace:
[   62.198659][ T6198]  <TASK>
[   62.198665][ T6198]  dump_stack_lvl+0x100/0x190
[   62.198694][ T6198]  should_fail_ex.cold+0x5/0xa
[   62.198717][ T6198]  _copy_from_iter+0x1f4/0x1690
[   62.198743][ T6198]  ? __asan_memset+0x23/0x50
[   62.198764][ T6198]  ? __pfx__copy_from_iter+0x10/0x10
[   62.198804][ T6198]  ? __pfx___alloc_skb+0x10/0x10
[   62.198838][ T6198]  netlink_sendmsg+0x808/0xda0
[   62.198867][ T6198]  ? __pfx_netlink_sendmsg+0x10/0x10
[   62.198894][ T6198]  ? selinux_socket_sendmsg+0x198/0x2f0
[   62.198921][ T6198]  ____sys_sendmsg+0xa4d/0xbe0
[   62.198941][ T6198]  ? __pfx_netlink_sendmsg+0x10/0x10
[   62.198967][ T6198]  ? __pfx_____sys_sendmsg+0x10/0x10
[   62.198990][ T6198]  ? lock_acquire+0x1d1/0x380
[   62.199010][ T6198]  ? get_pid_task+0x2a/0x250
[   62.199034][ T6198]  ___sys_sendmsg+0x190/0x1e0
[   62.199057][ T6198]  ? __pfx____sys_sendmsg+0x10/0x10
[   62.199079][ T6198]  ? get_pid_task+0x106/0x250
[   62.199109][ T6198]  ? find_held_lock+0x2b/0x80
[   62.199147][ T6198]  __sys_sendmsg+0x160/0x210
[   62.199164][ T6198]  ? __pfx___sys_sendmsg+0x10/0x10
[   62.199220][ T6198]  do_syscall_64+0x123/0x790
[   62.199272][ T6198]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.199292][ T6198] RIP: 0033:0x7f997d19e2d9
[   62.199306][ T6198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   62.199321][ T6198] RSP: 002b:00007f997e039028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   62.199339][ T6198] RAX: ffffffffffffffda RBX: 00007f997d425fa0 RCX: 00007f997d19e2d9
[   62.199350][ T6198] RDX: 0000000000044050 RSI: 00002000000005c0 RDI: 0000000000000003
[   62.199360][ T6198] RBP: 00007f997e039090 R08: 0000000000000000 R09: 0000000000000000
[   62.199371][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   62.199380][ T6198] R13: 00007f997d426038 R14: 00007f997d425fa0 R15: 00007fff95290408
[   62.199410][ T6198]  </TASK>
[   62.356214][ T6200] netlink: 'syz.2.94': attribute type 3 has an invalid length.
[   62.758792][ T6143] iuu_phoenix ttyUSB0: iuu_open - failed submitting read urb, error -90
[   63.206033][   T42] usb 5-1: USB disconnect, device number 3
[   63.236164][   T42] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[   63.249431][   T42] iuu_phoenix 5-1:1.0: device disconnected
[   63.279577][ T6212] netlink: 16 bytes leftover after parsing attributes in process `syz.1.98'.
[   63.280627][ T6212] netlink: 'syz.1.98': attribute type 11 has an invalid length.
[   63.281471][ T6215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.99'.
[   63.317966][ T6215] overlayfs: overlapping lowerdir path
[   63.372139][ T6225] FAULT_INJECTION: forcing a failure.
[   63.372139][ T6225] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   63.372166][ T6225] CPU: 1 UID: 0 PID: 6225 Comm: syz.1.102 Not tainted syzkaller #0 PREEMPT(full) 
[   63.372182][ T6225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   63.372190][ T6225] Call Trace:
[   63.372195][ T6225]  <TASK>
[   63.372201][ T6225]  dump_stack_lvl+0x100/0x190
[   63.372243][ T6225]  should_fail_ex.cold+0x5/0xa
[   63.372263][ T6225]  _copy_from_iter+0x1f4/0x1690
[   63.372290][ T6225]  ? __asan_memset+0x23/0x50
[   63.372308][ T6225]  ? __pfx__copy_from_iter+0x10/0x10
[   63.372326][ T6225]  ? __pfx___alloc_skb+0x10/0x10
[   63.372361][ T6225]  netlink_sendmsg+0x808/0xda0
[   63.372387][ T6225]  ? __pfx_netlink_sendmsg+0x10/0x10
[   63.372409][ T6225]  ? selinux_socket_sendmsg+0x198/0x2f0
[   63.372432][ T6225]  ____sys_sendmsg+0xa4d/0xbe0
[   63.372448][ T6225]  ? __pfx_netlink_sendmsg+0x10/0x10
[   63.372478][ T6225]  ? __pfx_____sys_sendmsg+0x10/0x10
[   63.372500][ T6225]  ? lock_acquire+0x1d1/0x380
[   63.372516][ T6225]  ? get_pid_task+0x2a/0x250
[   63.372537][ T6225]  ___sys_sendmsg+0x190/0x1e0
[   63.372556][ T6225]  ? __pfx____sys_sendmsg+0x10/0x10
[   63.372574][ T6225]  ? get_pid_task+0x106/0x250
[   63.372600][ T6225]  ? find_held_lock+0x2b/0x80
[   63.372636][ T6225]  __sys_sendmsg+0x160/0x210
[   63.372652][ T6225]  ? __pfx___sys_sendmsg+0x10/0x10
[   63.372681][ T6225]  do_syscall_64+0x123/0x790
[   63.372716][ T6225]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.372733][ T6225] RIP: 0033:0x7f0fd499e2d9
[   63.372747][ T6225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   63.372762][ T6225] RSP: 002b:00007f0fd58e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   63.372779][ T6225] RAX: ffffffffffffffda RBX: 00007f0fd4c25fa0 RCX: 00007f0fd499e2d9
[   63.372789][ T6225] RDX: 0000000000044050 RSI: 00002000000005c0 RDI: 0000000000000003
[   63.372799][ T6225] RBP: 00007f0fd58e6090 R08: 0000000000000000 R09: 0000000000000000
[   63.372809][ T6225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   63.372818][ T6225] R13: 00007f0fd4c26038 R14: 00007f0fd4c25fa0 R15: 00007ffc3d1e9808
[   63.372841][ T6225]  </TASK>
[   63.493509][ T6237] FAULT_INJECTION: forcing a failure.
[   63.493509][ T6237] name failslab, interval 1, probability 0, space 0, times 0
[   63.493537][ T6237] CPU: 1 UID: 0 PID: 6237 Comm: syz.2.106 Not tainted syzkaller #0 PREEMPT(full) 
[   63.493558][ T6237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   63.493568][ T6237] Call Trace:
[   63.493574][ T6237]  <TASK>
[   63.493582][ T6237]  dump_stack_lvl+0x100/0x190
[   63.493614][ T6237]  should_fail_ex.cold+0x5/0xa
[   63.493641][ T6237]  should_failslab+0xc2/0x120
[   63.493676][ T6237]  __kmalloc_noprof+0xfc/0x840
[   63.493698][ T6237]  ? nft_trans_alloc+0x1d/0x2d0
[   63.493728][ T6237]  nft_trans_alloc+0x1d/0x2d0
[   63.493756][ T6237]  nf_tables_newset+0x3224/0x4250
[   63.493789][ T6237]  ? net_generic+0xea/0x2a0
[   63.493805][ T6237]  ? __pfx_nf_tables_newset+0x10/0x10
[   63.493833][ T6237]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   63.493859][ T6237]  ? __nla_validate_parse+0x1e7/0x28b0
[   63.493893][ T6237]  ? lock_acquire+0x1d1/0x380
[   63.493913][ T6237]  ? net_generic+0x25/0x2a0
[   63.493939][ T6237]  ? __nla_parse+0x40/0x60
[   63.493964][ T6237]  nfnetlink_rcv_batch+0x1410/0x2880
[   63.493999][ T6237]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[   63.494025][ T6237]  ? lock_acquire+0x1d1/0x380
[   63.494045][ T6237]  ? avc_has_perm_noaudit+0x56/0x470
[   63.494073][ T6237]  ? avc_has_perm_noaudit+0x145/0x470
[   63.494117][ T6237]  ? __nla_parse+0x40/0x60
[   63.494141][ T6237]  nfnetlink_rcv+0x3bd/0x440
[   63.494162][ T6237]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   63.494189][ T6237]  netlink_unicast+0x585/0x850
[   63.494220][ T6237]  ? __pfx_netlink_unicast+0x10/0x10
[   63.494253][ T6237]  netlink_sendmsg+0x8b0/0xda0
[   63.494284][ T6237]  ? __pfx_netlink_sendmsg+0x10/0x10
[   63.494313][ T6237]  ? selinux_socket_sendmsg+0x198/0x2f0
[   63.494343][ T6237]  ____sys_sendmsg+0xa4d/0xbe0
[   63.494364][ T6237]  ? __pfx_netlink_sendmsg+0x10/0x10
[   63.494391][ T6237]  ? __pfx_____sys_sendmsg+0x10/0x10
[   63.494418][ T6237]  ? plist_check_list+0x1b8/0x280
[   63.494438][ T6237]  ? plist_del+0x308/0x510
[   63.494460][ T6237]  ___sys_sendmsg+0x190/0x1e0
[   63.494490][ T6237]  ? __pfx____sys_sendmsg+0x10/0x10
[   63.494514][ T6237]  ? futex_wake+0x220/0x5e0
[   63.494542][ T6237]  ? find_held_lock+0x2b/0x80
[   63.494584][ T6237]  __sys_sendmsg+0x160/0x210
[   63.494602][ T6237]  ? __pfx___sys_sendmsg+0x10/0x10
[   63.494632][ T6237]  do_syscall_64+0x123/0x790
[   63.494659][ T6237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.494678][ T6237] RIP: 0033:0x7f997d19e2d9
[   63.494693][ T6237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   63.494708][ T6237] RSP: 002b:00007f997e039028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   63.494726][ T6237] RAX: ffffffffffffffda RBX: 00007f997d425fa0 RCX: 00007f997d19e2d9
[   63.494738][ T6237] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000008
[   63.494748][ T6237] RBP: 00007f997d235888 R08: 0000000000000000 R09: 0000000000000000
[   63.494758][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   63.494768][ T6237] R13: 00007f997d426038 R14: 00007f997d425fa0 R15: 00007fff95290408
[   63.494794][ T6237]  </TASK>
[   63.516008][ T6237] FAULT_INJECTION: forcing a failure.
[   63.516008][ T6237] name failslab, interval 1, probability 0, space 0, times 0
[   63.516034][ T6237] CPU: 1 UID: 0 PID: 6237 Comm: syz.2.106 Not tainted syzkaller #0 PREEMPT(full) 
[   63.516051][ T6237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   63.516060][ T6237] Call Trace:
[   63.516065][ T6237]  <TASK>
[   63.516072][ T6237]  dump_stack_lvl+0x100/0x190
[   63.516102][ T6237]  should_fail_ex.cold+0x5/0xa
[   63.516125][ T6237]  should_failslab+0xc2/0x120
[   63.516148][ T6237]  kmem_cache_alloc_noprof+0x92/0x6a0
[   63.516167][ T6237]  ? __pfx_map_id_range_down+0x10/0x10
[   63.516188][ T6237]  ? security_inode_alloc+0x3b/0x2c0
[   63.516213][ T6237]  security_inode_alloc+0x3b/0x2c0
[   63.516235][ T6237]  inode_init_always_gfp+0xc6f/0xfb0
[   63.516262][ T6237]  alloc_inode+0x8e/0x250
[   63.516281][ T6237]  new_inode+0x22/0x1c0
[   63.516302][ T6237]  __debugfs_create_file+0xfb/0x500
[   63.516325][ T6237]  debugfs_create_file_full+0x41/0x60
[   63.516347][ T6237]  kvm_dev_ioctl+0x1560/0x1b50
[   63.516374][ T6237]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[   63.516398][ T6237]  ? selinux_file_ioctl+0x13b/0x290
[   63.516419][ T6237]  ? selinux_file_ioctl+0xb6/0x290
[   63.516442][ T6237]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[   63.516462][ T6237]  __x64_sys_ioctl+0x18e/0x210
[   63.516491][ T6237]  do_syscall_64+0x123/0x790
[   63.516516][ T6237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.516532][ T6237] RIP: 0033:0x7f997d19e2d9
[   63.516545][ T6237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   63.516560][ T6237] RSP: 002b:00007f997e039028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   63.516575][ T6237] RAX: ffffffffffffffda RBX: 00007f997d425fa0 RCX: 00007f997d19e2d9
[   63.516586][ T6237] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004
[   63.516595][ T6237] RBP: 00007f997d235888 R08: 0000000000000000 R09: 0000000000000000
[   63.516605][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   63.516614][ T6237] R13: 00007f997d426038 R14: 00007f997d425fa0 R15: 00007fff95290408
[   63.516637][ T6237]  </TASK>
[   63.516654][ T6237] debugfs: out of free dentries, can not create file 'mmu_shadow_zapped'
[   63.773589][ T6249] netlink: 'syz.0.108': attribute type 4 has an invalid length.
[   63.959076][ T6261] FAULT_INJECTION: forcing a failure.
[   63.959076][ T6261] name failslab, interval 1, probability 0, space 0, times 0
[   63.959105][ T6261] CPU: 3 UID: 0 PID: 6261 Comm: syz.2.114 Not tainted syzkaller #0 PREEMPT(full) 
[   63.959124][ T6261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   63.959133][ T6261] Call Trace:
[   63.959139][ T6261]  <TASK>
[   63.959146][ T6261]  dump_stack_lvl+0x100/0x190
[   63.959176][ T6261]  should_fail_ex.cold+0x5/0xa
[   63.959199][ T6261]  ? __netlink_lookup+0x652/0x900
[   63.959227][ T6261]  should_failslab+0xc2/0x120
[   63.959298][ T6261]  kmem_cache_alloc_noprof+0x92/0x6a0
[   63.959322][ T6261]  ? skb_clone+0x190/0x400
[   63.959343][ T6261]  skb_clone+0x190/0x400
[   63.959360][ T6261]  netlink_deliver_tap+0xaed/0xcc0
[   63.959390][ T6261]  netlink_unicast+0x62b/0x850
[   63.959419][ T6261]  ? __pfx_netlink_unicast+0x10/0x10
[   63.959450][ T6261]  netlink_sendmsg+0x8b0/0xda0
[   63.959478][ T6261]  ? __pfx_netlink_sendmsg+0x10/0x10
[   63.959506][ T6261]  ? selinux_socket_sendmsg+0x198/0x2f0
[   63.959534][ T6261]  ____sys_sendmsg+0xa4d/0xbe0
[   63.959554][ T6261]  ? __pfx_netlink_sendmsg+0x10/0x10
[   63.959580][ T6261]  ? __pfx_____sys_sendmsg+0x10/0x10
[   63.959607][ T6261]  ? lock_acquire+0x1d1/0x380
[   63.959625][ T6261]  ? get_pid_task+0x2a/0x250
[   63.959651][ T6261]  ___sys_sendmsg+0x190/0x1e0
[   63.959674][ T6261]  ? __pfx____sys_sendmsg+0x10/0x10
[   63.959696][ T6261]  ? get_pid_task+0x106/0x250
[   63.959727][ T6261]  ? find_held_lock+0x2b/0x80
[   63.959766][ T6261]  __sys_sendmsg+0x160/0x210
[   63.959783][ T6261]  ? __pfx___sys_sendmsg+0x10/0x10
[   63.959810][ T6261]  do_syscall_64+0x123/0x790
[   63.959837][ T6261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.959854][ T6261] RIP: 0033:0x7f997d19e2d9
[   63.959869][ T6261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   63.959883][ T6261] RSP: 002b:00007f997e039028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   63.959899][ T6261] RAX: ffffffffffffffda RBX: 00007f997d425fa0 RCX: 00007f997d19e2d9
[   63.959908][ T6261] RDX: 0000000000044050 RSI: 00002000000005c0 RDI: 0000000000000003
[   63.959916][ T6261] RBP: 00007f997e039090 R08: 0000000000000000 R09: 0000000000000000
[   63.959924][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   63.959932][ T6261] R13: 00007f997d426038 R14: 00007f997d425fa0 R15: 00007fff95290408
[   63.959960][ T6261]  </TASK>
[   64.000749][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.115'.
[   64.096382][ T6274] syz.3.119 uses obsolete (PF_INET,SOCK_PACKET)
[   64.177632][ T6291] FAULT_INJECTION: forcing a failure.
[   64.177632][ T6291] name failslab, interval 1, probability 0, space 0, times 0
[   64.177659][ T6291] CPU: 3 UID: 0 PID: 6291 Comm: syz.2.125 Not tainted syzkaller #0 PREEMPT(full) 
[   64.177676][ T6291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   64.177684][ T6291] Call Trace:
[   64.177690][ T6291]  <TASK>
[   64.177696][ T6291]  dump_stack_lvl+0x100/0x190
[   64.177724][ T6291]  should_fail_ex.cold+0x5/0xa
[   64.177746][ T6291]  should_failslab+0xc2/0x120
[   64.177768][ T6291]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[   64.177789][ T6291]  ? __alloc_skb+0x140/0x710
[   64.177815][ T6291]  __alloc_skb+0x140/0x710
[   64.177835][ T6291]  ? __alloc_skb+0x5b7/0x710
[   64.177857][ T6291]  ? __pfx___alloc_skb+0x10/0x10
[   64.177885][ T6291]  netlink_ack+0x117/0xb80
[   64.177908][ T6291]  ? trace_contention_end+0x126/0x160
[   64.177932][ T6291]  netlink_rcv_skb+0x333/0x420
[   64.177955][ T6291]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[   64.177974][ T6291]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   64.178011][ T6291]  xfrm_netlink_rcv+0x71/0x90
[   64.178027][ T6291]  netlink_unicast+0x585/0x850
[   64.178052][ T6291]  ? __pfx_netlink_unicast+0x10/0x10
[   64.178080][ T6291]  netlink_sendmsg+0x8b0/0xda0
[   64.178106][ T6291]  ? __pfx_netlink_sendmsg+0x10/0x10
[   64.178131][ T6291]  ? selinux_socket_sendmsg+0x198/0x2f0
[   64.178155][ T6291]  ____sys_sendmsg+0xa4d/0xbe0
[   64.178172][ T6291]  ? __pfx_netlink_sendmsg+0x10/0x10
[   64.178195][ T6291]  ? __pfx_____sys_sendmsg+0x10/0x10
[   64.178219][ T6291]  ? lock_acquire+0x1d1/0x380
[   64.178236][ T6291]  ? get_pid_task+0x2a/0x250
[   64.178258][ T6291]  ___sys_sendmsg+0x190/0x1e0
[   64.178279][ T6291]  ? __pfx____sys_sendmsg+0x10/0x10
[   64.178298][ T6291]  ? get_pid_task+0x106/0x250
[   64.178326][ T6291]  ? find_held_lock+0x2b/0x80
[   64.178361][ T6291]  __sys_sendmsg+0x160/0x210
[   64.178377][ T6291]  ? __pfx___sys_sendmsg+0x10/0x10
[   64.178404][ T6291]  do_syscall_64+0x123/0x790
[   64.178427][ T6291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.178447][ T6291] RIP: 0033:0x7f997d19e2d9
[   64.178460][ T6291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   64.178473][ T6291] RSP: 002b:00007f997e039028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   64.178488][ T6291] RAX: ffffffffffffffda RBX: 00007f997d425fa0 RCX: 00007f997d19e2d9
[   64.178498][ T6291] RDX: 0000000000044050 RSI: 00002000000005c0 RDI: 0000000000000003
[   64.178507][ T6291] RBP: 00007f997e039090 R08: 0000000000000000 R09: 0000000000000000
[   64.178516][ T6291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   64.178525][ T6291] R13: 00007f997d426038 R14: 00007f997d425fa0 R15: 00007fff95290408
[   64.178547][ T6291]  </TASK>
[   64.263518][ T6299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.129'.
[   64.263534][ T6299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.129'.
[   64.263542][ T6299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.129'.
[   64.448083][ T6330] netlink: 'syz.2.134': attribute type 2 has an invalid length.
[   64.453741][ T6328] fuse: Bad value for 'group_id'
[   64.453761][ T6328] fuse: Bad value for 'group_id'
[   64.498705][ T6334] xt_hashlimit: size too large, truncated to 1048576
[   64.562481][ T6339] ip6gretap0: entered promiscuous mode
[   64.765145][ T6351] process 'syz.2.140' launched './file0' with NULL argv: empty string added
[   64.772400][ T6347] input: syz0 as /devices/virtual/input/input5
[   64.987234][ T6370] raw_sendmsg: syz.0.143 forgot to set AF_INET. Fix it!
[   65.176942][ T5836] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   65.290652][ T6382] macvlan2: entered promiscuous mode
[   65.290675][ T6382] bridge0: entered promiscuous mode
[   65.346839][ T5836] usb 6-1: Using ep0 maxpacket: 32
[   65.347855][ T5836] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   65.348694][ T5836] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[   65.350385][ T5836] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   65.350401][ T5836] usb 6-1: Product: syz
[   65.350411][ T5836] usb 6-1: Manufacturer: syz
[   65.350427][ T5836] usb 6-1: SerialNumber: syz
[   65.353335][ T5836] usb 6-1: config 0 descriptor??
[   65.356174][ T6366] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   65.357648][ T5836] hub 6-1:0.0: bad descriptor, ignoring hub
[   65.357666][ T5836] hub 6-1:0.0: probe with driver hub failed with error -5
[   65.394340][ T6393] FAULT_INJECTION: forcing a failure.
[   65.394340][ T6393] name failslab, interval 1, probability 0, space 0, times 0
[   65.394360][ T6393] CPU: 3 UID: 0 PID: 6393 Comm: syz.3.147 Not tainted syzkaller #0 PREEMPT(full) 
[   65.394372][ T6393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   65.394378][ T6393] Call Trace:
[   65.394382][ T6393]  <TASK>
[   65.394387][ T6393]  dump_stack_lvl+0x100/0x190
[   65.394407][ T6393]  should_fail_ex.cold+0x5/0xa
[   65.394431][ T6393]  should_failslab+0xc2/0x120
[   65.394448][ T6393]  kmem_cache_alloc_noprof+0x92/0x6a0
[   65.394462][ T6393]  ? skb_clone+0x190/0x400
[   65.394476][ T6393]  skb_clone+0x190/0x400
[   65.394488][ T6393]  netlink_deliver_tap+0xaed/0xcc0
[   65.394507][ T6393]  netlink_unicast+0x6a5/0x850
[   65.394526][ T6393]  ? __pfx_netlink_unicast+0x10/0x10
[   65.394565][ T6393]  netlink_ack+0x655/0xb80
[   65.394586][ T6393]  netlink_rcv_skb+0x333/0x420
[   65.394603][ T6393]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[   65.394618][ T6393]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   65.394644][ T6393]  xfrm_netlink_rcv+0x71/0x90
[   65.394655][ T6393]  netlink_unicast+0x585/0x850
[   65.394674][ T6393]  ? __pfx_netlink_unicast+0x10/0x10
[   65.394695][ T6393]  netlink_sendmsg+0x8b0/0xda0
[   65.394714][ T6393]  ? __pfx_netlink_sendmsg+0x10/0x10
[   65.394733][ T6393]  ? selinux_socket_sendmsg+0x198/0x2f0
[   65.394752][ T6393]  ____sys_sendmsg+0xa4d/0xbe0
[   65.394764][ T6393]  ? __pfx_netlink_sendmsg+0x10/0x10
[   65.394783][ T6393]  ? __pfx_____sys_sendmsg+0x10/0x10
[   65.394800][ T6393]  ? lock_acquire+0x1d1/0x380
[   65.394813][ T6393]  ? get_pid_task+0x2a/0x250
[   65.394830][ T6393]  ___sys_sendmsg+0x190/0x1e0
[   65.394845][ T6393]  ? __pfx____sys_sendmsg+0x10/0x10
[   65.394860][ T6393]  ? get_pid_task+0x106/0x250
[   65.394880][ T6393]  ? find_held_lock+0x2b/0x80
[   65.394905][ T6393]  __sys_sendmsg+0x160/0x210
[   65.394917][ T6393]  ? __pfx___sys_sendmsg+0x10/0x10
[   65.394936][ T6393]  do_syscall_64+0x123/0x790
[   65.394953][ T6393]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.394964][ T6393] RIP: 0033:0x7f137939e2d9
[   65.394974][ T6393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   65.394983][ T6393] RSP: 002b:00007f137a31f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   65.394994][ T6393] RAX: ffffffffffffffda RBX: 00007f1379625fa0 RCX: 00007f137939e2d9
[   65.395001][ T6393] RDX: 0000000000044050 RSI: 00002000000005c0 RDI: 0000000000000003
[   65.395007][ T6393] RBP: 00007f137a31f090 R08: 0000000000000000 R09: 0000000000000000
[   65.395014][ T6393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   65.395020][ T6393] R13: 00007f1379626038 R14: 00007f1379625fa0 R15: 00007ffc7cd5c4c8
[   65.395034][ T6393]  </TASK>
[   65.436569][ T6396] mmap: syz.3.148 (6396) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   65.573755][ T6409] comedi: No check for data length of config insn id 768 is implemented
[   65.573775][ T6409] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c
[   65.573787][ T6409] comedi: Assuming n=15 is correct
[   65.634370][   T43] kauditd_printk_skb: 134 callbacks suppressed
[   65.634387][   T43] audit: type=1400 audit(1791940005.217:421): avc:  denied  { name_bind } for  pid=6411 comm="syz.3.153" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   65.634428][   T43] audit: type=1400 audit(1791940005.217:422): avc:  denied  { bind } for  pid=6411 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   65.634722][   T43] audit: type=1400 audit(1791940005.217:423): avc:  denied  { node_bind } for  pid=6411 comm="syz.3.153" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[   65.635701][   T43] audit: type=1400 audit(1791940005.217:424): avc:  denied  { getopt } for  pid=6411 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   65.655655][   T43] audit: type=1400 audit(1791940005.247:425): avc:  denied  { write } for  pid=6416 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   65.737259][   T43] audit: type=1400 audit(1791940005.327:426): avc:  denied  { write } for  pid=6427 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   65.752249][ T6431] overlayfs: conflicting options: userxattr,metacopy=on
[   65.769803][   T43] audit: type=1400 audit(1791940005.357:427): avc:  denied  { map } for  pid=6430 comm="syz.2.155" path="socket:[12788]" dev="sockfs" ino=12788 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   65.774856][   T43] audit: type=1400 audit(1791940005.357:428): avc:  denied  { cmd } for  pid=6430 comm="iou-wrk-6431" path="socket:[12788]" dev="sockfs" ino=12788 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   65.881348][ T6441] FAULT_INJECTION: forcing a failure.
[   65.881348][ T6441] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   65.881378][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.0.158 Not tainted syzkaller #0 PREEMPT(full) 
[   65.881398][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   65.881408][ T6441] Call Trace:
[   65.881420][ T6441]  <TASK>
[   65.881427][ T6441]  dump_stack_lvl+0x100/0x190
[   65.881467][ T6441]  should_fail_ex.cold+0x5/0xa
[   65.881493][ T6441]  _copy_to_user+0x32/0xd0
[   65.881526][ T6441]  simple_read_from_buffer+0xcb/0x170
[   65.881555][ T6441]  proc_fail_nth_read+0x1af/0x230
[   65.881584][ T6441]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   65.881612][ T6441]  ? rw_verify_area+0xce/0x6d0
[   65.881632][ T6441]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   65.881659][ T6441]  vfs_read+0x1e4/0xb40
[   65.881681][ T6441]  ? lock_acquire+0x1d1/0x380
[   65.881705][ T6441]  ? __fget_files+0x34/0x3d0
[   65.881730][ T6441]  ? __pfx_vfs_read+0x10/0x10
[   65.881749][ T6441]  ? find_held_lock+0x2b/0x80
[   65.881776][ T6441]  ? __fget_files+0x215/0x3d0
[   65.881805][ T6441]  ? __fget_files+0x21f/0x3d0
[   65.881837][ T6441]  ksys_read+0x12a/0x250
[   65.881860][ T6441]  ? __pfx_ksys_read+0x10/0x10
[   65.881889][ T6441]  do_syscall_64+0x123/0x790
[   65.881923][ T6441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.881941][ T6441] RIP: 0033:0x7f0c0ed5eb0e
[   65.881958][ T6441] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   65.881974][ T6441] RSP: 002b:00007f0c0fd02fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   65.882002][ T6441] RAX: ffffffffffffffda RBX: 00007f0c0fd036c0 RCX: 00007f0c0ed5eb0e
[   65.882014][ T6441] RDX: 000000000000000f RSI: 00007f0c0fd030a0 RDI: 0000000000000004
[   65.882024][ T6441] RBP: 00007f0c0fd03090 R08: 0000000000000000 R09: 0000000000000000
[   65.882035][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   65.882046][ T6441] R13: 00007f0c0f026038 R14: 00007f0c0f025fa0 R15: 00007ffc651bc228
[   65.882072][ T6441]  </TASK>
[   65.984463][   T43] audit: type=1400 audit(1791940005.567:429): avc:  denied  { create } for  pid=6449 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   65.985092][   T43] audit: type=1400 audit(1791940005.567:430): avc:  denied  { setopt } for  pid=6449 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   65.989943][ T6366] usb 6-1: reset high-speed USB device number 3 using dummy_hcd
[   66.140933][ T6366] usb 6-1: device firmware changed
[   66.142828][ T5836] usb 6-1: USB disconnect, device number 3
[   66.179577][ T6466] overlay: upper is not a directory
[   66.183007][ T6466] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4.
[   66.256224][ T6471] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[   66.256240][ T6471] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   66.258345][ T6471] vhci_hcd vhci_hcd.0: Device attached
[   66.260336][ T6473] vhci_hcd: connection closed
[   66.268220][ T5806] vhci_hcd vhci_hcd.3: stop threads
[   66.268667][ T5806] vhci_hcd vhci_hcd.3: release socket
[   66.268698][ T5806] vhci_hcd vhci_hcd.3: disconnect device
[   66.312408][ T5836] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   66.478444][ T5836] usb 6-1: Using ep0 maxpacket: 32
[   66.479198][ T5836] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   66.480367][ T5836] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[   66.484427][ T5836] usb 6-1: string descriptor 0 read error: -22
[   66.484529][ T5836] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   66.492783][ T5836] usb 6-1: config 0 descriptor??
[   66.493701][ T6415] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   66.497609][ T5836] hub 6-1:0.0: bad descriptor, ignoring hub
[   66.497629][ T5836] hub 6-1:0.0: probe with driver hub failed with error -5
[   66.807910][ T5807] usb 6-1: USB disconnect, device number 4
[   66.829142][ T6511] FAULT_INJECTION: forcing a failure.
[   66.829142][ T6511] name failslab, interval 1, probability 0, space 0, times 0
[   66.829164][ T6511] CPU: 2 UID: 0 PID: 6511 Comm: syz.3.168 Not tainted syzkaller #0 PREEMPT(full) 
[   66.829176][ T6511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   66.829183][ T6511] Call Trace:
[   66.829187][ T6511]  <TASK>
[   66.829193][ T6511]  dump_stack_lvl+0x100/0x190
[   66.829213][ T6511]  should_fail_ex.cold+0x5/0xa
[   66.829231][ T6511]  should_failslab+0xc2/0x120
[   66.829248][ T6511]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[   66.829264][ T6511]  ? __alloc_skb+0x140/0x710
[   66.829297][ T6511]  __alloc_skb+0x140/0x710
[   66.829313][ T6511]  ? __alloc_skb+0x5b7/0x710
[   66.829331][ T6511]  ? __pfx___alloc_skb+0x10/0x10
[   66.829350][ T6511]  ? idr_get_next+0xec/0x150
[   66.829367][ T6511]  ? __pfx_idr_get_next+0x10/0x10
[   66.829386][ T6511]  ctrl_build_family_msg+0x36/0xa0
[   66.829401][ T6511]  ctrl_getfamily+0x361/0x550
[   66.829419][ T6511]  ? __pfx_ctrl_getfamily+0x10/0x10
[   66.829432][ T6511]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0
[   66.829445][ T6511]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[   66.829461][ T6511]  genl_family_rcv_msg_doit+0x214/0x300
[   66.829475][ T6511]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   66.829488][ T6511]  ? genl_get_cmd+0x3e7/0x760
[   66.829503][ T6511]  ? __dev_queue_xmit+0xa81/0x4a40
[   66.829519][ T6511]  ? __radix_tree_lookup+0x217/0x2b0
[   66.829537][ T6511]  genl_rcv_msg+0x560/0x800
[   66.829550][ T6511]  ? __pfx_genl_rcv_msg+0x10/0x10
[   66.829562][ T6511]  ? __lock_acquire+0x5c0/0x1f40
[   66.829576][ T6511]  ? __pfx_ctrl_getfamily+0x10/0x10
[   66.829594][ T6511]  netlink_rcv_skb+0x159/0x420
[   66.829612][ T6511]  ? __pfx_genl_rcv_msg+0x10/0x10
[   66.829625][ T6511]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   66.829649][ T6511]  ? netlink_deliver_tap+0x1ae/0xcc0
[   66.829668][ T6511]  genl_rcv+0x28/0x40
[   66.829679][ T6511]  netlink_unicast+0x585/0x850
[   66.829698][ T6511]  ? __pfx_netlink_unicast+0x10/0x10
[   66.829720][ T6511]  netlink_sendmsg+0x8b0/0xda0
[   66.829741][ T6511]  ? __pfx_netlink_sendmsg+0x10/0x10
[   66.829760][ T6511]  ? selinux_socket_sendmsg+0x198/0x2f0
[   66.829780][ T6511]  __sys_sendto+0x48b/0x4e0
[   66.829797][ T6511]  ? __pfx_netlink_sendmsg+0x10/0x10
[   66.829815][ T6511]  ? __pfx___sys_sendto+0x10/0x10
[   66.829836][ T6511]  ? fd_install+0x223/0x580
[   66.829858][ T6511]  ? __pfx___sys_socket+0x10/0x10
[   66.829878][ T6511]  __x64_sys_sendto+0xe0/0x1c0
[   66.829894][ T6511]  ? do_syscall_64+0xae/0x790
[   66.829911][ T6511]  ? lockdep_hardirqs_on+0x7d/0x110
[   66.829927][ T6511]  do_syscall_64+0x123/0x790
[   66.829943][ T6511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.829954][ T6511] RIP: 0033:0x7f137935eb0e
[   66.829964][ T6511] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   66.829974][ T6511] RSP: 002b:00007f137a2fce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   66.829984][ T6511] RAX: ffffffffffffffda RBX: 00007f137a2fe6c0 RCX: 00007f137935eb0e
[   66.829991][ T6511] RDX: 0000000000000020 RSI: 00007f137a2fd000 RDI: 0000000000000008
[   66.829997][ T6511] RBP: 0000000000000000 R08: 00007f137a2fcf04 R09: 000000000000000c
[   66.830003][ T6511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[   66.830009][ T6511] R13: 00007f137a2fcf58 R14: 00007f137a2fd000 R15: 0000000000000000
[   66.830023][ T6511]  </TASK>
[   66.916899][ T5090] Bluetooth: hci0: command 0x0c1a tx timeout
[   66.917021][   T30] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   66.917039][   T30] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[   67.132123][ T6538] netlink: 'syz.0.173': attribute type 7 has an invalid length.
[   67.132142][ T6538] netlink: 'syz.0.173': attribute type 8 has an invalid length.
[   67.313953][ T6548] netlink: 'syz.1.175': attribute type 1 has an invalid length.
[   67.332595][ T6548] 8021q: adding VLAN 0 to HW filter on device bond2
[   67.343644][ T6548] bond2: (slave veth0_to_bond): making interface the new active one
[   67.345151][ T6548] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[   67.349732][ T6548] bond2: entered promiscuous mode
[   67.349750][ T6548] veth0_to_bond: entered promiscuous mode
[   67.349902][ T6548] bond2: entered allmulticast mode
[   67.349913][ T6548] veth0_to_bond: entered allmulticast mode
[   67.496150][ T6560] futex_wake_op: syz.1.177 tries to shift op by -1; fix this program
[   67.540956][ T6562] nbd: must specify at least one socket
[   67.543640][ T6562] Bluetooth: MGMT ver 1.23
[   67.676214][ T6571] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   67.752278][ T6578] fuse: Bad value for 'fd'
[   67.898147][ T6593] SELinux:  truncated policydb string identifier
[   67.898346][ T6593] SELinux: failed to load policy
[   67.994618][ T6600] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   68.217627][   T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   68.219843][ T6611] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.367610][   T25] usb 6-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00
[   68.368666][   T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   68.370513][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.370533][   T25] usb 6-1: Product: syz
[   68.370545][   T25] usb 6-1: Manufacturer: syz
[   68.370556][   T25] usb 6-1: SerialNumber: syz
[   68.378080][   T25] keyspan 6-1:1.0: Keyspan 1 port adapter converter detected
[   68.378226][   T25] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84
[   68.380219][   T25] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81
[   68.380280][   T25] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 82
[   68.380336][   T25] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1
[   68.380388][   T25] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2
[   68.380448][   T25] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 83
[   68.380504][   T25] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 3
[   68.382364][   T25] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[   68.575417][   T25] usb 6-1: USB disconnect, device number 5
[   68.581550][   T25] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[   68.582009][   T25] keyspan 6-1:1.0: device disconnected
[   68.585911][ T6579] overlayfs: statfs failed on './file0'
[   68.996986][ T5090] Bluetooth: hci1: command 0x0c1a tx timeout
[   68.997505][   T30] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[   68.997524][   T30] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[   70.693358][   T43] kauditd_printk_skb: 40 callbacks suppressed
[   70.693372][   T43] audit: type=1400 audit(1791940010.277:471): avc:  denied  { ioctl } for  pid=6694 comm="syz.3.210" path="socket:[9002]" dev="sockfs" ino=9002 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   70.694529][ T6695] netlink: 14 bytes leftover after parsing attributes in process `syz.3.210'.
[   70.747825][ T6698] netlink: 14 bytes leftover after parsing attributes in process `syz.3.210'.
[   70.786387][   T43] audit: type=1400 audit(1791940010.367:472): avc:  denied  { connect } for  pid=6703 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   70.856513][   T43] audit: type=1400 audit(1791940010.437:473): avc:  denied  { create } for  pid=6705 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   70.861766][   T43] audit: type=1400 audit(1791940010.447:474): avc:  denied  { create } for  pid=6705 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   70.862430][   T43] audit: type=1400 audit(1791940010.447:475): avc:  denied  { write } for  pid=6705 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   71.076888][   T30] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[   71.076912][   T30] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[   71.076996][ T5090] Bluetooth: hci2: command 0x0c1a tx timeout
[   71.267834][ T6713] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   71.274657][ T6713] iommufd_mock iommufd_mock1: Adding to iommu group 10
[   71.280523][   T43] audit: type=1400 audit(1791940010.867:476): avc:  denied  { setopt } for  pid=6712 comm="syz.0.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   71.284165][   T43] audit: type=1400 audit(1791940010.867:477): avc:  denied  { read } for  pid=6712 comm="syz.0.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   71.573047][ T1438] ieee802154 phy0 wpan0: encryption failed: -22
[   71.573109][ T1438] ieee802154 phy1 wpan1: encryption failed: -22
[   71.681052][   T43] audit: type=1400 audit(1791940011.267:478): avc:  denied  { read write } for  pid=6721 comm="syz.1.220" name="btrfs-control" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   71.681250][   T43] audit: type=1400 audit(1791940011.267:479): avc:  denied  { ioctl open } for  pid=6721 comm="syz.1.220" path="/dev/btrfs-control" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   71.690448][ T6724] capability: warning: `syz.3.219' uses 32-bit capabilities (legacy support in use)
[   71.696118][   T43] audit: type=1400 audit(1791940011.277:480): avc:  denied  { write } for  pid=6721 comm="syz.1.220" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   71.781305][ T6728] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   71.782110][ T6729] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   71.923868][ T6734] ip_tables: iptables: counters copy to user failed while replacing table
[   71.997171][ T6738] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   72.002369][ T6738] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   72.002893][ T6738] netlink: 280 bytes leftover after parsing attributes in process `syz.1.224'.
[   72.029806][ T6740] netlink: 36 bytes leftover after parsing attributes in process `syz.3.225'.
[   72.095670][ T6746] netlink: 16 bytes leftover after parsing attributes in process `syz.1.227'.
[   72.135898][ T6740] netlink: Invalid conntrack helper
[   72.135922][ T6740] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.189036][ T6754] random: crng reseeded on system resumption
[   72.267111][ T6760] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6
[   72.281510][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.282100][ T6766] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.285049][ T6766] bridge0: entered allmulticast mode
[   72.295273][ T6766] bridge_slave_1: left allmulticast mode
[   72.295301][ T6766] bridge_slave_1: left promiscuous mode
[   72.295929][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.302318][ T6766] bridge_slave_0: left allmulticast mode
[   72.302333][ T6766] bridge_slave_0: left promiscuous mode
[   72.302433][ T6766] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.305898][ T6767] netlink: 'syz.0.233': attribute type 39 has an invalid length.
[   72.391358][ T6771] syzkaller0: left promiscuous mode
[   72.391378][ T6771] syzkaller0: left allmulticast mode
[   72.718617][ T6780] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[   72.740803][ T6785] bond2: Unable to set up delay as MII monitoring is disabled
[   72.746014][ T6785] bond2 (unregistering): Released all slaves
[   73.166969][ T5090] Bluetooth: hci3: command 0x0c1a tx timeout
[   73.168212][   T30] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[   73.168232][   T30] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[   73.749604][ T6827] syzkaller0: entered promiscuous mode
[   73.749625][ T6827] syzkaller0: entered allmulticast mode
[   73.861440][ T6836] i2c i2c-0: delete_device: Can't parse I2C address
[   73.862595][ T6835] i2c i2c-0: delete_device: Can't parse I2C address
[   73.948207][ T6836] i2c i2c-0: delete_device: Can't parse I2C address
[   73.948400][ T6836] i2c i2c-0: delete_device: Can't parse I2C address
[   74.015848][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.259'.
[   74.170971][ T6852] fuse: Bad value for 'rootmode'
[   74.187310][ T6852] comedi comedi3: dt2801: I/O base address or length out of range
[   74.190111][ T5736] Bluetooth: hci5: sending frame failed (-49)
[   74.190290][   T66] Bluetooth: hci5: Opcode 0x1003 failed: -49
[   74.263897][ T6855] netlink: 112 bytes leftover after parsing attributes in process `syz.3.260'.
[   74.350813][ T6861] FAULT_INJECTION: forcing a failure.
[   74.350813][ T6861] name failslab, interval 1, probability 0, space 0, times 0
[   74.350833][ T6861] CPU: 0 UID: 0 PID: 6861 Comm: syz.1.264 Not tainted syzkaller #0 PREEMPT(full) 
[   74.350846][ T6861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   74.350852][ T6861] Call Trace:
[   74.350856][ T6861]  <TASK>
[   74.350860][ T6861]  dump_stack_lvl+0x100/0x190
[   74.350881][ T6861]  should_fail_ex.cold+0x5/0xa
[   74.350899][ T6861]  should_failslab+0xc2/0x120
[   74.350915][ T6861]  kmem_cache_alloc_noprof+0x92/0x6a0
[   74.350938][ T6861]  ? ksys_write+0x190/0x250
[   74.350953][ T6861]  ? prepare_creds+0x2c/0x950
[   74.350967][ T6861]  prepare_creds+0x2c/0x950
[   74.350980][ T6861]  cap_task_prctl+0x64a/0xa50
[   74.350996][ T6861]  security_task_prctl+0xc2/0x160
[   74.351011][ T6861]  __do_sys_prctl+0x9b/0x2270
[   74.351029][ T6861]  ? __pfx___do_sys_prctl+0x10/0x10
[   74.351050][ T6861]  do_syscall_64+0x123/0x790
[   74.351069][ T6861]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.351080][ T6861] RIP: 0033:0x7f0fd499e2d9
[   74.351090][ T6861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   74.351099][ T6861] RSP: 002b:00007f0fd58e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[   74.351110][ T6861] RAX: ffffffffffffffda RBX: 00007f0fd4c25fa0 RCX: 00007f0fd499e2d9
[   74.351117][ T6861] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 000000000000001c
[   74.351123][ T6861] RBP: 00007f0fd4a35888 R08: 0000000000000000 R09: 0000000000000000
[   74.351129][ T6861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   74.351135][ T6861] R13: 00007f0fd4c26038 R14: 00007f0fd4c25fa0 R15: 00007ffc3d1e9808
[   74.351149][ T6861]  </TASK>
[   74.604322][ T6887] FAULT_INJECTION: forcing a failure.
[   74.604322][ T6887] name failslab, interval 1, probability 0, space 0, times 0
[   74.604352][ T6887] CPU: 3 UID: 0 PID: 6887 Comm: syz.1.275 Not tainted syzkaller #0 PREEMPT(full) 
[   74.604370][ T6887] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   74.604381][ T6887] Call Trace:
[   74.604387][ T6887]  <TASK>
[   74.604394][ T6887]  dump_stack_lvl+0x100/0x190
[   74.604425][ T6887]  should_fail_ex.cold+0x5/0xa
[   74.604452][ T6887]  should_failslab+0xc2/0x120
[   74.604479][ T6887]  __kmalloc_cache_noprof+0x91/0x6d0
[   74.604498][ T6887]  ? drm_file_alloc+0x74/0xb40
[   74.604524][ T6887]  drm_file_alloc+0x74/0xb40
[   74.604547][ T6887]  drm_open_helper+0x1fc/0x540
[   74.604568][ T6887]  drm_open+0x1a0/0x3e0
[   74.604588][ T6887]  ? __pfx_drm_open+0x10/0x10
[   74.604606][ T6887]  drm_stub_open+0x20f/0x380
[   74.604625][ T6887]  ? __pfx_drm_stub_open+0x10/0x10
[   74.604644][ T6887]  chrdev_open+0x234/0x6a0
[   74.604668][ T6887]  ? __pfx_chrdev_open+0x10/0x10
[   74.604693][ T6887]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[   74.604719][ T6887]  do_dentry_open+0x6ab/0x14d0
[   74.604742][ T6887]  ? __pfx_chrdev_open+0x10/0x10
[   74.604770][ T6887]  vfs_open+0x82/0x3f0
[   74.604800][ T6887]  path_openat+0x19fa/0x2440
[   74.604827][ T6887]  ? __pfx_path_openat+0x10/0x10
[   74.604859][ T6887]  do_file_open+0x20e/0x430
[   74.604893][ T6887]  ? __pfx_do_file_open+0x10/0x10
[   74.604937][ T6887]  ? _raw_spin_unlock+0x28/0x50
[   74.604960][ T6887]  ? alloc_fd+0x471/0x7a0
[   74.604992][ T6887]  do_sys_openat2+0x10f/0x1e0
[   74.605028][ T6887]  ? __pfx_do_sys_openat2+0x10/0x10
[   74.605049][ T6887]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   74.605083][ T6887]  __x64_sys_openat+0x12d/0x210
[   74.605104][ T6887]  ? __pfx___x64_sys_openat+0x10/0x10
[   74.605132][ T6887]  do_syscall_64+0x123/0x790
[   74.605162][ T6887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.605182][ T6887] RIP: 0033:0x7f0fd499e2d9
[   74.605195][ T6887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   74.605212][ T6887] RSP: 002b:00007f0fd58e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   74.605230][ T6887] RAX: ffffffffffffffda RBX: 00007f0fd4c25fa0 RCX: 00007f0fd499e2d9
[   74.605243][ T6887] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c
[   74.605253][ T6887] RBP: 00007f0fd4a35888 R08: 0000000000000000 R09: 0000000000000000
[   74.605263][ T6887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   74.605274][ T6887] R13: 00007f0fd4c26038 R14: 00007f0fd4c25fa0 R15: 00007ffc3d1e9808
[   74.605298][ T6887]  </TASK>
[   74.659178][ T6890] ima: Unable to open file: / (-22)
[   74.918295][ T5807] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   75.077774][ T5807] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[   75.078811][ T5807] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   75.078847][ T5807] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   75.080737][ T5807] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.080756][ T5807] usb 8-1: Product: syz
[   75.080766][ T5807] usb 8-1: Manufacturer: syz
[   75.080776][ T5807] usb 8-1: SerialNumber: syz
[   75.297506][   T30] usb 8-1: USB disconnect, device number 2
[   75.326902][   T66] Bluetooth: hci4: command 0x1003 tx timeout
[   75.326981][ T5090] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   75.610599][ T5807] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[   75.632669][ T6919] netlink: 40 bytes leftover after parsing attributes in process `syz.1.282'.
[   75.867903][ T5807] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[   76.096477][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'.
[   76.379081][ T5807] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[   76.386975][   T35] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   76.392214][   T43] kauditd_printk_skb: 49 callbacks suppressed
[   76.392229][   T43] audit: type=1400 audit(1791940016.982:530): avc:  denied  { name_bind } for  pid=6931 comm="syz.2.287" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   76.403851][   T43] audit: type=1400 audit(1791940016.992:531): avc:  denied  { read } for  pid=6931 comm="syz.2.287" dev="sockfs" ino=16749 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   76.410016][ T6915] ceph: No mds server is up or the cluster is laggy
[   76.427484][ T6892] ima: policy update failed
[   76.427650][   T43] audit: type=1802 audit(1791940017.022:532): pid=6892 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.0.276" res=0 errno=0
[   76.438856][   T43] audit: type=1400 audit(1791940017.032:533): avc:  denied  { unmount } for  pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   76.485944][   T43] audit: type=1400 audit(1791940017.072:534): avc:  denied  { create } for  pid=6933 comm="syz.1.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   76.495078][   T43] audit: type=1400 audit(1791940017.082:535): avc:  denied  { setopt } for  pid=6933 comm="syz.1.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   76.501491][ T6934] x_tables: duplicate underflow at hook 1
[   76.526941][   T35] usb 8-1: device descriptor read/64, error -71
[   76.571964][ T6940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.290'.
[   76.591345][   T43] audit: type=1400 audit(1791940017.182:536): avc:  denied  { create } for  pid=6942 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   76.591808][   T43] audit: type=1400 audit(1791940017.182:537): avc:  denied  { connect } for  pid=6942 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   76.593843][ T6943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.292'.
[   76.593857][ T6943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.292'.
[   76.681284][    T9] cfg80211: failed to load regulatory.db
[   76.786871][   T35] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   76.903134][   T43] audit: type=1400 audit(1791940017.492:538): avc:  denied  { unmount } for  pid=5746 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[   76.918640][   T35] usb 8-1: device descriptor read/64, error -71
[   77.037068][   T35] usb usb8-port1: attempt power cycle
[   77.092879][   T43] audit: type=1400 audit(1791940017.682:539): avc:  denied  { write } for  pid=6960 comm="syz.0.296" name="kcm" dev="proc" ino=4026533432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   77.406962][   T35] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   77.437585][   T35] usb 8-1: device descriptor read/8, error -71
[   77.516971][ T5807] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   77.686852][ T5807] usb 5-1: Using ep0 maxpacket: 32
[   77.686899][   T35] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[   77.687383][ T5807] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   77.688246][ T5807] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[   77.688259][ T5807] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   77.688269][ T5807] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[   77.688291][ T5807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   77.688302][ T5807] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   77.688313][ T5807] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   77.688331][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.689764][ T5807] usb 5-1: config 0 descriptor??
[   77.717639][   T35] usb 8-1: device descriptor read/8, error -71
[   77.772210][ T6982] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   77.772701][ T6982] batman_adv: batadv0: Adding interface: gretap1
[   77.772709][ T6982] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.772725][ T6982] batman_adv: batadv0: Interface activated: gretap1
[   77.820001][   T35] usb usb8-port1: unable to enumerate USB device
[   77.882952][ T6985] netlink: 'syz.1.303': attribute type 13 has an invalid length.
[   77.882967][ T6985] netlink: 44 bytes leftover after parsing attributes in process `syz.1.303'.
[   77.899147][ T5807] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   77.908490][ T5807] usb 5-1: USB disconnect, device number 4
[   77.928051][ T5807] usblp0: removed
[   78.216958][ T5807] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   78.366967][ T5807] usb 5-1: Using ep0 maxpacket: 32
[   78.367609][ T5807] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   78.368605][ T5807] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[   78.368623][ T5807] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   78.368640][ T5807] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[   78.368676][ T5807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   78.368692][ T5807] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   78.368712][ T5807] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   78.368742][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.372914][ T5807] usb 5-1: config 0 descriptor??
[   78.473377][ T6993] netlink: 'syz.2.306': attribute type 5 has an invalid length.
[   78.579725][ T5807] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   78.927033][ T5807] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   79.077118][ T5807] usb 7-1: Using ep0 maxpacket: 8
[   79.079210][ T5807] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   79.080152][ T5807] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[   79.080189][ T5807] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   79.080207][ T5807] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   79.080225][ T5807] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   79.080243][ T5807] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   79.080273][ T5807] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.391351][ T5807] usb 7-1: usb_control_msg returned -32
[   79.391391][ T5807] usbtmc 7-1:16.0: can't read capabilities
[   79.490960][ T7026] fuse: Unknown parameter '184467440737095516150x0000000000000003'
qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details.
[   80.113146][ T7038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.113665][ T7038] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.135502][ T7045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.136684][ T7044] netlink: 10 bytes leftover after parsing attributes in process `syz.1.317'.
[   80.137988][ T7045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.138683][ T7045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.139011][ T7045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.139796][ T7045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.140166][ T7045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.141600][ T7045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.141996][ T7045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.142926][ T7045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.146248][ T7045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.245102][    C2] usblp0: nonzero read bulk status received: -71
[   80.249833][   T35] usb 5-1: USB disconnect, device number 5
[   80.441752][ T7055] syzkaller0: entered allmulticast mode
[   80.451564][ T7054] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[   81.770866][ T7005] usblp0: removed
[   81.776443][   T30] usb 7-1: USB disconnect, device number 3
[   81.862287][   T43] kauditd_printk_skb: 30 callbacks suppressed
[   81.862305][   T43] audit: type=1400 audit(1791940022.452:570): avc:  denied  { name_bind } for  pid=7077 comm="syz.2.327" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   81.863598][ T7079] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[   81.863598][ T7079] 
[   81.863799][ T7079] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[   81.865777][ T7079] CIFS: Attempting to mount //172.20.20.170/share
[   81.876690][ T7076] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   81.876718][ T7076] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   81.879477][ T7076] netlink: 'syz.3.326': attribute type 2 has an invalid length.
[   82.131337][   T43] audit: type=1400 audit(1791940022.722:571): avc:  denied  { write } for  pid=7094 comm="syz.3.332" name="cluster" dev="configfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   82.135879][ T7095] overlayfs: cannot append lower layer
[   82.137945][   T43] audit: type=1400 audit(1791940022.732:572): avc:  denied  { write } for  pid=7094 comm="syz.3.332" name="node" dev="configfs" ino=19532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   82.141687][ T7095] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   82.141824][ T7095] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   82.144105][ T7095] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   82.144181][ T7095] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   82.150355][ T7095] hsr_slave_0: left promiscuous mode
[   82.157535][ T7095] hsr_slave_1: left promiscuous mode
[   82.539443][   T43] audit: type=1400 audit(1791940023.132:573): avc:  denied  { setattr } for  pid=7098 comm="syz.0.333" name="sequencer2" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[   82.541457][ T7099] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7099 comm=syz.0.333
[   82.592287][ T7101] FAULT_INJECTION: forcing a failure.
[   82.592287][ T7101] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   82.592321][ T7101] CPU: 1 UID: 0 PID: 7101 Comm: syz.0.334 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   82.592346][ T7101] Tainted: [L]=SOFTLOCKUP
[   82.592353][ T7101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   82.592363][ T7101] Call Trace:
[   82.592369][ T7101]  <TASK>
[   82.592376][ T7101]  dump_stack_lvl+0x100/0x190
[   82.592422][ T7101]  should_fail_ex.cold+0x5/0xa
[   82.592444][ T7101]  ? prepare_alloc_pages+0x16d/0x5b0
[   82.592478][ T7101]  should_fail_alloc_page+0xeb/0x140
[   82.592505][ T7101]  prepare_alloc_pages+0x1f0/0x5b0
[   82.592533][ T7101]  __alloc_frozen_pages_noprof+0x1e9/0x3300
[   82.592556][ T7101]  ? __pfx_get_page_from_freelist+0x10/0x10
[   82.592578][ T7101]  ? prepare_alloc_pages+0x1f0/0x5b0
[   82.592604][ T7101]  ? rcu_is_watching+0x13/0xc0
[   82.592628][ T7101]  ? __alloc_frozen_pages_noprof+0x56b/0x3300
[   82.592652][ T7101]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   82.592675][ T7101]  ? find_held_lock+0x2b/0x80
[   82.592700][ T7101]  ? is_bpf_text_address+0x8a/0x1a0
[   82.592725][ T7101]  ? is_bpf_text_address+0x8a/0x1a0
[   82.592750][ T7101]  ? bpf_ksym_find+0x128/0x1c0
[   82.592767][ T7101]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   82.592788][ T7101]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   82.592808][ T7101]  ? is_bpf_text_address+0x94/0x1a0
[   82.592835][ T7101]  ? __kernel_text_address+0xd/0x30
[   82.592895][ T7101]  alloc_pages_bulk_noprof+0x5e1/0x13c0
[   82.592925][ T7101]  ? policy_nodemask+0xed/0x4f0
[   82.592953][ T7101]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[   82.592988][ T7101]  __kasan_populate_vmalloc+0xf0/0x210
[   82.593017][ T7101]  alloc_vmap_area+0x95d/0x2bb0
[   82.593046][ T7101]  ? kasan_save_track+0x14/0x30
[   82.593070][ T7101]  ? __kasan_kmalloc+0xaa/0xb0
[   82.593093][ T7101]  ? __pfx_alloc_vmap_area+0x10/0x10
[   82.593118][ T7101]  ? __get_vm_area_node+0x124/0x350
[   82.593146][ T7101]  __get_vm_area_node+0x1ed/0x350
[   82.593176][ T7101]  __vmalloc_node_range_noprof+0x268/0x1420
[   82.593204][ T7101]  ? bpf_prog_alloc_no_stats+0x59/0x690
[   82.593227][ T7101]  ? __pfx_stack_trace_save+0x10/0x10
[   82.593246][ T7101]  ? stack_depot_save_flags+0x27/0x9f0
[   82.593296][ T7101]  ? bpf_prog_alloc_no_stats+0x59/0x690
[   82.593323][ T7101]  ? __kasan_kmalloc+0xaa/0xb0
[   82.593345][ T7101]  ? do_syscall_64+0x123/0x790
[   82.593382][ T7101]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   82.593419][ T7101]  ? bpf_prog_alloc_no_stats+0x59/0x690
[   82.593442][ T7101]  __vmalloc_node_noprof+0xad/0xf0
[   82.593468][ T7101]  ? bpf_prog_alloc_no_stats+0x59/0x690
[   82.593495][ T7101]  __vmalloc_noprof+0xa3/0x120
[   82.593521][ T7101]  ? __pfx___vmalloc_noprof+0x10/0x10
[   82.593556][ T7101]  bpf_prog_alloc_no_stats+0x59/0x690
[   82.593584][ T7101]  bpf_prog_alloc+0x3b/0x200
[   82.593608][ T7101]  bpf_prog_create_from_user+0xb4/0x2e0
[   82.593640][ T7101]  ? __pfx_seccomp_check_filter+0x10/0x10
[   82.593670][ T7101]  do_seccomp+0x870/0x27c0
[   82.593687][ T7101]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   82.593716][ T7101]  ? __pfx_do_seccomp+0x10/0x10
[   82.593734][ T7101]  ? xfd_validate_state+0x129/0x190
[   82.593763][ T7101]  do_syscall_64+0x123/0x790
[   82.593791][ T7101]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.593811][ T7101] RIP: 0033:0x7f0c0ed9e2d9
[   82.593828][ T7101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   82.593853][ T7101] RSP: 002b:00007f0c0fd03028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[   82.593872][ T7101] RAX: ffffffffffffffda RBX: 00007f0c0f025fa0 RCX: 00007f0c0ed9e2d9
[   82.593883][ T7101] RDX: 0000200000000280 RSI: 0000000000000000 RDI: 0000000000000001
[   82.593893][ T7101] RBP: 00007f0c0ee35888 R08: 0000000000000000 R09: 0000000000000000
[   82.593903][ T7101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   82.593913][ T7101] R13: 00007f0c0f026038 R14: 00007f0c0f025fa0 R15: 00007ffc651bc228
[   82.593936][ T7101]  </TASK>
[   82.594266][ T7101] syz.0.334: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   82.594434][ T7101] CPU: 1 UID: 0 PID: 7101 Comm: syz.0.334 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   82.594461][ T7101] Tainted: [L]=SOFTLOCKUP
[   82.594469][ T7101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   82.594480][ T7101] Call Trace:
[   82.594487][ T7101]  <TASK>
[   82.594494][ T7101]  dump_stack_lvl+0x100/0x190
[   82.594526][ T7101]  warn_alloc.cold+0x9e/0xb2
[   82.594546][ T7101]  ? __pfx_warn_alloc+0x10/0x10
[   82.594566][ T7101]  ? lockdep_hardirqs_on+0x7d/0x110
[   82.594593][ T7101]  ? __get_vm_area_node+0x2f0/0x350
[   82.594625][ T7101]  ? __get_vm_area_node+0x22b/0x350
[   82.594654][ T7101]  __vmalloc_node_range_noprof+0xfa2/0x1420
[   82.594680][ T7101]  ? __pfx_stack_trace_save+0x10/0x10
[   82.594700][ T7101]  ? stack_depot_save_flags+0x27/0x9f0
[   82.594721][ T7101]  ? bpf_prog_alloc_no_stats+0x59/0x690
[   82.594744][ T7101]  ? __kasan_kmalloc+0xaa/0xb0
[   82.594765][ T7101]  ? do_syscall_64+0x123/0x790
[   82.594791][ T7101]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   82.594825][ T7101]  ? bpf_prog_alloc_no_stats+0x59/0x690
[   82.594859][ T7101]  __vmalloc_node_noprof+0xad/0xf0
[   82.594886][ T7101]  ? bpf_prog_alloc_no_stats+0x59/0x690
[   82.594912][ T7101]  __vmalloc_noprof+0xa3/0x120
[   82.594939][ T7101]  ? __pfx___vmalloc_noprof+0x10/0x10
[   82.594975][ T7101]  bpf_prog_alloc_no_stats+0x59/0x690
[   82.595002][ T7101]  bpf_prog_alloc+0x3b/0x200
[   82.595023][ T7101]  bpf_prog_create_from_user+0xb4/0x2e0
[   82.595046][ T7101]  ? __pfx_seccomp_check_filter+0x10/0x10
[   82.595102][ T7101]  do_seccomp+0x870/0x27c0
[   82.595122][ T7101]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   82.595181][ T7101]  ? __pfx_do_seccomp+0x10/0x10
[   82.595205][ T7101]  ? xfd_validate_state+0x129/0x190
[   82.595237][ T7101]  do_syscall_64+0x123/0x790
[   82.595265][ T7101]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.595284][ T7101] RIP: 0033:0x7f0c0ed9e2d9
[   82.595300][ T7101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   82.595317][ T7101] RSP: 002b:00007f0c0fd03028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[   82.595335][ T7101] RAX: ffffffffffffffda RBX: 00007f0c0f025fa0 RCX: 00007f0c0ed9e2d9
[   82.595347][ T7101] RDX: 0000200000000280 RSI: 0000000000000000 RDI: 0000000000000001
[   82.595389][ T7101] RBP: 00007f0c0ee35888 R08: 0000000000000000 R09: 0000000000000000
[   82.595400][ T7101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   82.595412][ T7101] R13: 00007f0c0f026038 R14: 00007f0c0f025fa0 R15: 00007ffc651bc228
[   82.595437][ T7101]  </TASK>
[   82.595543][ T7101] Mem-Info:
[   82.595553][ T7101] active_anon:9621 inactive_anon:6 isolated_anon:0
[   82.595553][ T7101]  active_file:23 inactive_file:63343 isolated_file:0
[   82.595553][ T7101]  unevictable:1003 dirty:153 writeback:0
[   82.595553][ T7101]  slab_reclaimable:12654 slab_unreclaimable:66915
[   82.595553][ T7101]  mapped:24970 shmem:1558 pagetables:1227
[   82.595553][ T7101]  sec_pagetables:297 bounce:0
[   82.595553][ T7101]  kernel_misc_reclaimable:0
[   82.595553][ T7101]  free:445533 free_pcp:10202 free_cma:0
[   82.595598][ T7101] Node 0 active_anon:38484kB inactive_anon:24kB active_file:92kB inactive_file:253172kB unevictable:2012kB isolated(anon):0kB isolated(file):0kB mapped:99880kB dirty:608kB writeback:0kB shmem:4232kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14400kB pagetables:4724kB sec_pagetables:1188kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   82.595645][ T7101] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   82.595686][ T7101] Node 0 DMA free:15360kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   82.595733][ T7101] lowmem_reserve[]: 0 1204 1204 1204 1204
[   82.595764][ T7101] Node 0 DMA32 free:125100kB boost:0kB min:27108kB low:33884kB high:40660kB reserved_highatomic:0kB free_highatomic:0kB active_anon:38484kB inactive_anon:24kB active_file:92kB inactive_file:253172kB unevictable:2012kB writepending:608kB zspages:0kB present:2080628kB managed:1233668kB mlocked:12kB bounce:0kB free_pcp:38396kB local_pcp:2808kB free_cma:0kB
[   82.595813][ T7101] lowmem_reserve[]: 0 0 0 0 0
[   82.595850][ T7101] Node 1 Normal free:1641672kB boost:0kB min:40124kB low:50152kB high:60180kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:2000kB writepending:4kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:2412kB local_pcp:0kB free_cma:0kB
[   82.595901][ T7101] lowmem_reserve[]: 0 0 0 0 0
[   82.595929][ T7101] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   82.596027][ T7101] Node 0 DMA32: 97*4kB (UME) 174*8kB (UME) 221*16kB (UME) 121*32kB (UME) 85*64kB (UME) 47*128kB (UME) 26*256kB (UM) 7*512kB (UME) 6*1024kB (UME) 7*2048kB (UME) 18*4096kB (UM) = 125092kB
[   82.596161][ T7101] Node 1 Normal: 2*4kB (U) 4*8kB (UM) 2*16kB (UM) 12*32kB (UM) 4*64kB (UM) 6*128kB (UM) 3*256kB (U) 4*512kB (UM) 1*1024kB (U) 1*2048kB (U) 399*4096kB (M) = 1641672kB
[   82.596288][ T7101] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   82.596302][ T7101] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[   82.596315][ T7101] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   82.596328][ T7101] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[   82.596340][ T7101] 64920 total pagecache pages
[   82.596346][ T7101] 0 pages in swap cache
[   82.596352][ T7101] Free swap  = 124996kB
[   82.596358][ T7101] Total swap = 124996kB
[   82.596365][ T7101] 1048443 pages RAM
[   82.596371][ T7101] 0 pages HighMem/MovableOnly
[   82.596376][ T7101] 290716 pages reserved
[   82.596383][ T7101] 0 pages cma reserved
[   82.702484][ T7079] CIFS: VFS: cifs_mount failed w/return code = -112
[   82.755411][   T43] audit: type=1400 audit(1791940023.342:574): avc:  denied  { append } for  pid=7107 comm="syz.2.337" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   82.778056][   T43] audit: type=1400 audit(1791940023.372:575): avc:  denied  { write } for  pid=7107 comm="syz.2.337" name="/" dev="9p" ino=71827647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   82.787705][   T43] audit: type=1400 audit(1791940023.382:576): avc:  denied  { write } for  pid=7107 comm="syz.2.337" name="/" dev="9p" ino=71827647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   82.792859][   T43] audit: type=1800 audit(1791940023.382:577): pid=7108 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.337" name="bus" dev="9p" ino=71827925 res=0 errno=0
[   82.852191][ T7115] netlink: 20 bytes leftover after parsing attributes in process `syz.0.340'.
[   82.853419][   T43] audit: type=1400 audit(1791940023.442:578): avc:  denied  { ioctl } for  pid=7113 comm="syz.0.340" path="/dev/nullb0" dev="devtmpfs" ino=705 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   82.862811][ T7115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.340'.
[   82.862834][ T7115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.340'.
[   82.862847][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'.
[   82.895629][   T43] audit: type=1400 audit(1791940023.482:579): avc:  denied  { getopt } for  pid=7112 comm="syz.3.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   82.959280][ T7118] rnbd_client L607: Mapping device / on session s0, (access_mode: rw, nr_poll_queues: 0)
[   82.960740][ T7118] rnbd_client L1256: Session s0 not found, and path parameter not given
[   83.095746][ T7128] openvswitch: netlink: Missing key (keys=d0, expected=500)
[   83.170007][ T7139] tmpfs: Group quota inode hardlimit too large.
[   83.184398][ T7143] misc userio: Begin command sent, but we're already running
[   83.272836][ T7149] overlayfs: cannot append lower layer
[   83.275609][ T7149] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   83.275684][ T7149] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   83.278059][ T7149] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   83.278147][ T7149] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   83.282817][ T7149] hsr_slave_0: left promiscuous mode
[   83.285566][ T7149] hsr_slave_1: left promiscuous mode
[   83.670590][ T7162] netlink: 104 bytes leftover after parsing attributes in process `syz.2.353'.
[   83.976457][ T7182] netlink: 'syz.3.358': attribute type 3 has an invalid length.
[   83.996551][ T7169] bond3 (unregistering): Released all slaves
[   84.025169][ T7188] trusted_key: encrypted_key: insufficient parameters specified
[   84.029525][ T7180] input: syz0 as /devices/virtual/input/input8
[   84.029549][ T7180] input: failed to attach handler leds to device input8, error: -6
[   84.054858][ T7188] overlayfs: failed to resolve './proc/thread-self/fail-nth': -2
[   84.079206][ T7180] PKCS7: Unknown OID: [98] 1.2.10824.113549.1.1.1
[   84.079225][ T7180] Unsupported pkey algo: 106
[   84.079775][ T7180] comedi comedi3: dt2801: I/O base address or length out of range
[   84.097842][ T7188] FAULT_INJECTION: forcing a failure.
[   84.097842][ T7188] name failslab, interval 1, probability 0, space 0, times 0
[   84.097874][ T7188] CPU: 3 UID: 0 PID: 7188 Comm: syz.3.359 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   84.097898][ T7188] Tainted: [L]=SOFTLOCKUP
[   84.097905][ T7188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   84.097915][ T7188] Call Trace:
[   84.097922][ T7188]  <TASK>
[   84.097929][ T7188]  dump_stack_lvl+0x100/0x190
[   84.097960][ T7188]  should_fail_ex.cold+0x5/0xa
[   84.097985][ T7188]  should_failslab+0xc2/0x120
[   84.098013][ T7188]  __kmalloc_noprof+0xfc/0x840
[   84.098036][ T7188]  ? rcu_is_watching+0x13/0xc0
[   84.098062][ T7188]  ? tomoyo_realpath_from_path+0xb6/0x690
[   84.098114][ T7188]  tomoyo_realpath_from_path+0xb6/0x690
[   84.098150][ T7188]  tomoyo_path_number_perm+0x23c/0x580
[   84.098173][ T7188]  ? tomoyo_path_number_perm+0x22e/0x580
[   84.098200][ T7188]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   84.098226][ T7188]  ? __pfx_futex_wait+0x10/0x10
[   84.098252][ T7188]  ? __lock_acquire+0x5c0/0x1f40
[   84.098283][ T7188]  ? __fget_files+0x34/0x3d0
[   84.098315][ T7188]  ? find_held_lock+0x2b/0x80
[   84.098342][ T7188]  ? hook_file_ioctl_common+0x140/0x440
[   84.098365][ T7188]  ? __fget_files+0x21f/0x3d0
[   84.098395][ T7188]  security_file_ioctl+0xd3/0x230
[   84.098421][ T7188]  __x64_sys_ioctl+0xb7/0x210
[   84.098446][ T7188]  do_syscall_64+0x123/0x790
[   84.098474][ T7188]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.098494][ T7188] RIP: 0033:0x7f137939e2d9
[   84.098509][ T7188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   84.098526][ T7188] RSP: 002b:00007f137a31f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   84.098544][ T7188] RAX: ffffffffffffffda RBX: 00007f1379625fa0 RCX: 00007f137939e2d9
[   84.098554][ T7188] RDX: 0000200000000980 RSI: 0000000080506409 RDI: 0000000000000017
[   84.098563][ T7188] RBP: 00007f1379435888 R08: 0000000000000000 R09: 0000000000000000
[   84.098572][ T7188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   84.098583][ T7188] R13: 00007f1379626038 R14: 00007f1379625fa0 R15: 00007ffc7cd5c4c8
[   84.098610][ T7188]  </TASK>
[   84.098648][ T7188] ERROR: Out of memory at tomoyo_realpath_from_path.
[   84.345996][ T7203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.347886][ T7203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.367666][ T7203] qnx4: no qnx4 filesystem (no root dir).
[   84.367915][ T7205] overlayfs: cannot append lower layer
[   84.373689][ T7205] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   84.375394][ T7203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.375908][ T7205] hsr_slave_0: left promiscuous mode
[   84.381369][ T7206] qnx4: no qnx4 filesystem (no root dir).
[   84.383552][ T7205] hsr_slave_1: left promiscuous mode
[   85.002811][ T7254] scsi_nl_rcv_msg: discarding partial message
[   85.009495][ T7256] scsi_nl_rcv_msg: discarding partial message
[   85.174736][ T7266] binder: 7265:7266 ioctl 40046205 0 returned -22
[   85.175193][ T7266] binder: 7265:7266 ioctl c0306201 2000000000c0 returned -11
[   85.263574][ T7274] XFS (sr0): Invalid superblock magic number
[   85.876714][ T7289] netlink: 44 bytes leftover after parsing attributes in process `syz.3.381'.
[   86.404938][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'.
[   86.404976][ T7308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.387'.
[   86.428119][ T5806] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   86.428165][ T5806] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   86.428196][ T5806] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   86.428235][ T5806] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   86.530315][ T7315] macvtap1: entered allmulticast mode
[   86.530337][ T7315] bond0: entered allmulticast mode
[   86.530350][ T7315] bond_slave_0: entered allmulticast mode
[   86.530364][ T7315] bond_slave_1: entered allmulticast mode
[   86.530450][ T7315] bond_slave_0: entered promiscuous mode
[   86.530477][ T7315] bond_slave_1: entered promiscuous mode
[   86.531580][ T7315] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   86.534341][ T7315] bond0: left allmulticast mode
[   86.534362][ T7315] bond_slave_0: left allmulticast mode
[   86.534376][ T7315] bond_slave_1: left allmulticast mode
[   86.561816][   T42] bond_slave_0: left promiscuous mode
[   86.561841][   T42] bond_slave_1: left promiscuous mode
[   86.740791][ T7325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'.
[   86.930213][ T7342] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   87.020798][ T7342] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[   87.382575][   T43] kauditd_printk_skb: 21 callbacks suppressed
[   87.382594][   T43] audit: type=1400 audit(1791940027.972:601): avc:  denied  { read write } for  pid=7360 comm="syz.1.405" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   87.383229][   T43] audit: type=1400 audit(1791940027.972:602): avc:  denied  { open } for  pid=7360 comm="syz.1.405" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   87.390664][   T43] audit: type=1400 audit(1791940027.982:603): avc:  denied  { ioctl } for  pid=7355 comm="syz.0.403" path="socket:[20642]" dev="sockfs" ino=20642 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   87.390904][ T7356] syzkaller1: entered promiscuous mode
[   87.390921][ T7356] syzkaller1: entered allmulticast mode
[   87.395099][ T7356] tipc: Started in network mode
[   87.395123][ T7356] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   87.396275][ T7356] tipc: Enabled bearer <udp:syz0>, priority 10
[   87.608012][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.407'.
[   87.629562][ T7375] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   87.637032][   T43] audit: type=1400 audit(1791940028.232:604): avc:  denied  { create } for  pid=7376 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   87.651363][   T43] audit: type=1400 audit(1791940028.242:605): avc:  denied  { create } for  pid=7376 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   87.654368][   T43] audit: type=1400 audit(1791940028.242:606): avc:  denied  { setopt } for  pid=7376 comm="syz.0.409" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   87.655005][   T43] audit: type=1400 audit(1791940028.242:607): avc:  denied  { getopt } for  pid=7376 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   87.663730][ T7377] pimreg: entered allmulticast mode
[   87.697738][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   87.697781][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   87.697811][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   87.697839][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   87.713563][ T7379] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[   87.778241][ T7376] pimreg: left allmulticast mode
[   87.939108][   T43] audit: type=1400 audit(1791940028.522:608): avc:  denied  { mount } for  pid=7386 comm="syz.1.413" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   87.949348][   T43] audit: type=1400 audit(1791940028.542:609): avc:  denied  { connect } for  pid=7390 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   88.063470][   T43] audit: type=1400 audit(1791940028.652:610): avc:  denied  { setopt } for  pid=7394 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   88.071273][ T7395] netlink: 'syz.0.415': attribute type 1 has an invalid length.
[   88.192229][ T7398] binder: 7397:7398 ioctl c0306201 2000000009c0 returned -14
[   88.317337][   T57] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   88.322813][ T7408] X.509: Couldn't decode AuthKeyIdentifier
[   88.387414][ T3975] tipc: Node number set to 1
[   88.420366][ T7421] FAULT_INJECTION: forcing a failure.
[   88.420366][ T7421] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   88.420401][ T7421] CPU: 3 UID: 0 PID: 7421 Comm: syz.3.425 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   88.420425][ T7421] Tainted: [L]=SOFTLOCKUP
[   88.420431][ T7421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   88.420441][ T7421] Call Trace:
[   88.420447][ T7421]  <TASK>
[   88.420455][ T7421]  dump_stack_lvl+0x100/0x190
[   88.420501][ T7421]  should_fail_ex.cold+0x5/0xa
[   88.420529][ T7421]  _copy_to_user+0x32/0xd0
[   88.420557][ T7421]  simple_read_from_buffer+0xcb/0x170
[   88.420586][ T7421]  proc_fail_nth_read+0x1af/0x230
[   88.420613][ T7421]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   88.420641][ T7421]  ? rw_verify_area+0xce/0x6d0
[   88.420662][ T7421]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   88.420688][ T7421]  vfs_read+0x1e4/0xb40
[   88.420718][ T7421]  ? lock_acquire+0x1d1/0x380
[   88.420739][ T7421]  ? __fget_files+0x34/0x3d0
[   88.420764][ T7421]  ? __pfx_vfs_read+0x10/0x10
[   88.420782][ T7421]  ? find_held_lock+0x2b/0x80
[   88.420809][ T7421]  ? __fget_files+0x215/0x3d0
[   88.420836][ T7421]  ? __fget_files+0x21f/0x3d0
[   88.420867][ T7421]  ksys_read+0x12a/0x250
[   88.420886][ T7421]  ? __pfx_ksys_read+0x10/0x10
[   88.420914][ T7421]  do_syscall_64+0x123/0x790
[   88.420938][ T7421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.420956][ T7421] RIP: 0033:0x7f137939e2d9
[   88.420974][ T7421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   88.420990][ T7421] RSP: 002b:00007f137a31f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   88.421009][ T7421] RAX: ffffffffffffffda RBX: 00007f1379625fa0 RCX: 00007f137939e2d9
[   88.421023][ T7421] RDX: 0000000000000015 RSI: 0000200000000640 RDI: 0000000000000003
[   88.421034][ T7421] RBP: 00007f1379435888 R08: 0000000000000000 R09: 0000000000000000
[   88.421044][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   88.421054][ T7421] R13: 00007f1379626038 R14: 00007f1379625fa0 R15: 00007ffc7cd5c4c8
[   88.421080][ T7421]  </TASK>
[   88.469097][   T57] usb 5-1: device descriptor read/64, error -71
[   88.509137][ T7431] Illegal XDP return value 4294967274 on prog  (id 36) dev N/A, expect packet loss!
[   88.604693][ T7437] futex_wake_op: syz.2.429 tries to shift op by 144; fix this program
[   88.604805][ T7437] futex_wake_op: syz.2.429 tries to shift op by 144; fix this program
[   88.706875][   T57] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   88.848227][   T57] usb 5-1: device descriptor read/64, error -71
[   88.967273][   T57] usb usb5-port1: attempt power cycle
[   88.982222][ T7440] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7440 comm=syz.1.428
[   89.306945][   T57] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   89.337605][   T57] usb 5-1: device descriptor read/8, error -71
[   89.576937][   T57] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   89.597626][   T57] usb 5-1: device descriptor read/8, error -71
[   89.708890][   T57] usb usb5-port1: unable to enumerate USB device
[   91.776498][ T7453] FAULT_INJECTION: forcing a failure.
[   91.776498][ T7453] name failslab, interval 1, probability 0, space 0, times 0
[   91.776624][ T7453] CPU: 3 UID: 0 PID: 7453 Comm: syz.2.432 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   91.776649][ T7453] Tainted: [L]=SOFTLOCKUP
[   91.776655][ T7453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   91.776672][ T7453] Call Trace:
[   91.776678][ T7453]  <TASK>
[   91.776686][ T7453]  dump_stack_lvl+0x100/0x190
[   91.776714][ T7453]  should_fail_ex.cold+0x5/0xa
[   91.776738][ T7453]  should_failslab+0xc2/0x120
[   91.776781][ T7453]  __kmalloc_cache_node_noprof+0x94/0x720
[   91.776805][ T7453]  ? __get_vm_area_node+0x124/0x350
[   91.776833][ T7453]  __get_vm_area_node+0x124/0x350
[   91.776861][ T7453]  __vmalloc_node_range_noprof+0x268/0x1420
[   91.776885][ T7453]  ? bpf_prog_alloc_no_stats+0x59/0x690
[   91.776913][ T7453]  ? __lock_acquire+0x5c0/0x1f40
[   91.776934][ T7453]  ? bpf_prog_alloc_no_stats+0x59/0x690
[   91.776957][ T7453]  ? lock_acquire+0x1d1/0x380
[   91.776978][ T7453]  ? find_held_lock+0x2b/0x80
[   91.777002][ T7453]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   91.777027][ T7453]  ? avc_has_perm_noaudit+0x11e/0x470
[   91.777052][ T7453]  ? avc_has_perm_noaudit+0x145/0x470
[   91.777072][ T7453]  ? bpf_prog_alloc_no_stats+0x59/0x690
[   91.777094][ T7453]  __vmalloc_node_noprof+0xad/0xf0
[   91.777121][ T7453]  ? bpf_prog_alloc_no_stats+0x59/0x690
[   91.777145][ T7453]  __vmalloc_noprof+0xa3/0x120
[   91.777168][ T7453]  ? __pfx___vmalloc_noprof+0x10/0x10
[   91.777196][ T7453]  ? rcu_is_watching+0x13/0xc0
[   91.777221][ T7453]  ? cap_capable+0x107/0x430
[   91.777242][ T7453]  bpf_prog_alloc_no_stats+0x59/0x690
[   91.777264][ T7453]  ? security_capable+0x80/0x260
[   91.777287][ T7453]  bpf_prog_alloc+0x3b/0x200
[   91.777309][ T7453]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   91.777332][ T7453]  bpf_prog_load+0x49e/0x2ab0
[   91.777361][ T7453]  ? __pfx_bpf_prog_load+0x10/0x10
[   91.777406][ T7453]  __sys_bpf+0x1f46/0x4a30
[   91.777425][ T7453]  ? plist_check_list+0x1b8/0x280
[   91.777447][ T7453]  ? plist_check_list+0x190/0x280
[   91.777468][ T7453]  ? __pfx___sys_bpf+0x10/0x10
[   91.777484][ T7453]  ? find_held_lock+0x2b/0x80
[   91.777507][ T7453]  ? futex_wake+0x4ea/0x5e0
[   91.777527][ T7453]  ? futex_private_hash_put.part.0+0xdc/0x180
[   91.777551][ T7453]  ? futex_private_hash_put+0x24/0x30
[   91.777578][ T7453]  ? __pfx_futex_wake+0x10/0x10
[   91.777600][ T7453]  ? rcu_read_lock_any_held+0x6a/0x90
[   91.777625][ T7453]  ? find_held_lock+0x2b/0x80
[   91.777648][ T7453]  ? ksys_write+0x190/0x250
[   91.777678][ T7453]  ? ksys_write+0x190/0x250
[   91.777714][ T7453]  ? __x64_sys_futex+0x34f/0x4d0
[   91.777738][ T7453]  ? __x64_sys_futex+0x358/0x4d0
[   91.777765][ T7453]  ? xfd_validate_state+0x129/0x190
[   91.777788][ T7453]  ? __x64_sys_bpf+0xce/0x140
[   91.777806][ T7453]  __x64_sys_bpf+0xce/0x140
[   91.777826][ T7453]  ? do_syscall_64+0xae/0x790
[   91.777852][ T7453]  do_syscall_64+0x123/0x790
[   91.777881][ T7453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.777899][ T7453] RIP: 0033:0x7f997d19e2d9
[   91.777914][ T7453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.777931][ T7453] RSP: 002b:00007f997e039028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   91.777951][ T7453] RAX: ffffffffffffffda RBX: 00007f997d425fa0 RCX: 00007f997d19e2d9
[   91.777963][ T7453] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005
[   91.777973][ T7453] RBP: 00007f997d235888 R08: 0000000000000000 R09: 0000000000000000
[   91.777984][ T7453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   91.777994][ T7453] R13: 00007f997d426038 R14: 00007f997d425fa0 R15: 00007fff95290408
[   91.778018][ T7453]  </TASK>
[   91.947651][ T7476] net_ratelimit: 3 callbacks suppressed
[   91.947679][ T7476] ip_tables: iptables: counters copy to user failed while replacing table
[   91.954406][ T7472] __nla_validate_parse: 1 callbacks suppressed
[   91.954424][ T7472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'.
[   91.954440][ T7472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'.
[   91.955287][ T7472] TC_ACT_REPEAT abuse ?
[   92.613516][ T7514] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   92.699443][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'.
[   92.948298][   T43] kauditd_printk_skb: 15 callbacks suppressed
[   92.948315][   T43] audit: type=1400 audit(1791940033.542:626): avc:  denied  { read } for  pid=7525 comm="iou-wrk-7527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   92.993497][ T7531] Bluetooth: ISO socket layer initialized
[   93.248679][   T43] audit: type=1400 audit(1791940033.842:627): avc:  denied  { read } for  pid=7539 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   93.354808][   T43] audit: type=1400 audit(1791940033.942:628): avc:  denied  { write } for  pid=7545 comm="syz.2.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   93.619467][ T7557] kvm [7556]: vcpu0, guest rIP: 0x9143 Unhandled WRMSR(0x11e) = 0xbe702111
[   93.814935][ T7565] ip_tables: iptables: counters copy to user failed while replacing table
[   93.894692][ T7574] ALSA: mixer_oss: invalid OSS volume ''
[   93.897115][   T43] audit: type=1400 audit(1791940034.482:629): avc:  denied  { append } for  pid=7571 comm="syz.1.469" name="001" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   93.902479][ T7574] usb usb7: usbfs: process 7574 (syz.1.469) did not claim interface 0 before use
[   93.902820][ T7574] netlink: 32 bytes leftover after parsing attributes in process `syz.1.469'.
[   93.932407][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'.
[   93.983393][ T7580] netlink: 'syz.0.472': attribute type 10 has an invalid length.
[   93.983415][ T7580] netlink: 55 bytes leftover after parsing attributes in process `syz.0.472'.
[   94.070880][ T7584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.473'.
[   94.070912][ T7584] netlink: 'syz.1.473': attribute type 7 has an invalid length.
[   94.070923][ T7584] netlink: 'syz.1.473': attribute type 8 has an invalid length.
[   94.070933][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'.
[   94.173601][ T7595] xt_connbytes: Forcing CT accounting to be enabled
[   94.225361][ T7599] xt_hashlimit: size too large, truncated to 1048576
[   94.320826][   T43] audit: type=1400 audit(1791940034.912:630): avc:  denied  { load_policy } for  pid=7605 comm="syz.3.479" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   94.320850][ T7606] SELinux:  policydb string  does not match my string SE Linux
[   94.320906][ T7606] SELinux: failed to load policy
[   94.324310][ T7606] SELinux: security_context_str_to_sid (��a`yv��-�|J+0l�8G[�kT��_��|n��U�5
[   94.324310][ T7606] M9) failed with errno=-22
[   94.333426][   T43] audit: type=1400 audit(1791940034.922:631): avc:  denied  { mount } for  pid=7605 comm="syz.3.479" name="/" dev="ramfs" ino=23087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   94.333813][ T7606] tipc: Started in network mode
[   94.333834][ T7606] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   94.333985][ T7606] tipc: Enabled bearer <eth:team0>, priority 0
[   94.335153][ T7606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.479'.
[   94.458227][ T7610] dlm: non-version read from control device 8224
[   94.496572][ T7614] binder: 7613:7614 ioctl c0305616 2000000002c0 returned -22
[   94.542921][ T7618] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   94.571619][ T7623] syzkaller1: entered promiscuous mode
[   94.571641][ T7623] syzkaller1: entered allmulticast mode
[   94.576900][ T7625] SELinux: security_context_str_to_sid (measure) failed with errno=-22
[   94.577786][ T7625] netlink: 32 bytes leftover after parsing attributes in process `syz.2.485'.
[   94.577804][ T7625] openvswitch: netlink: Flow key attr not present in new flow.
[   94.912751][ T7649] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size.
[   94.915690][   T43] audit: type=1400 audit(1791940035.502:632): avc:  denied  { write } for  pid=7648 comm="syz.3.493" name="configs" dev="configfs" ino=11833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   94.916552][   T43] audit: type=1400 audit(1791940035.502:633): avc:  denied  { write } for  pid=7648 comm="syz.3.493" name="functions" dev="configfs" ino=11832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   94.921364][   T43] audit: type=1400 audit(1791940035.512:634): avc:  denied  { write } for  pid=7648 comm="syz.3.493" name="ep.0" dev="configfs" ino=20142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   94.990499][ T7655] tipc: New replicast peer: 172.20.20.187
[   94.991177][ T7655] tipc: Enabled bearer <udp:syz0>, priority 10
[   94.994597][ T7655] tipc: Can't bind to reserved service type 0
[   95.026923][   T43] audit: type=1400 audit(1791940035.612:635): avc:  denied  { read } for  pid=5444 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   95.038900][ T7657] bond2: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[   95.045632][ T7657] bond2 (unregistering): Released all slaves
[   95.289636][ T7669] netlink: 'syz.3.499': attribute type 4 has an invalid length.
[   95.296312][ T7669] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   95.356185][ T7675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4163 sclass=netlink_route_socket pid=7675 comm=syz.3.500
[   95.448563][   T10] tipc: Node number set to 11578026
[   95.605067][ T7702] bond2: invalid ARP target 0.0.0.0 specified for addition
[   95.605083][ T7702] bond2: option arp_ip_target: invalid value (0)
[   95.606050][ T7702] bond2 (unregistering): Released all slaves
[   96.711833][ T7788] No control pipe specified
[   96.893008][ T7801] syz.0.523 (7801) used greatest stack depth: 19288 bytes left
[   96.973181][ T7812] tmpfs: Group quota block hardlimit too large.
[   96.974294][ T7812] __nla_validate_parse: 4 callbacks suppressed
[   96.974308][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.526'.
[   97.137088][   T30] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   97.280001][ T7819] netlink: 'syz.0.529': attribute type 2 has an invalid length.
[   97.280022][ T7819] netlink: 224 bytes leftover after parsing attributes in process `syz.0.529'.
[   97.297640][   T30] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[   97.298555][   T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   97.298596][   T30] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   97.298623][   T30] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   97.300770][   T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   97.300792][   T30] usb 6-1: Product: syz
[   97.300805][   T30] usb 6-1: Manufacturer: syz
[   97.304530][ T7806] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   97.308479][   T30] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected
[   97.318094][   T30] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[   97.511190][   T30] usb 6-1: USB disconnect, device number 7
[   97.529910][   T30] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[   97.530221][   T30] garmin_gps 6-1:1.0: device disconnected
[   97.607657][   T42] usb 8-1: new low-speed USB device number 7 using dummy_hcd
[   97.761221][   T42] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   97.762150][   T42] usb 8-1: config 0 has an invalid interface number: 55 but max is 0
[   97.762172][   T42] usb 8-1: config 0 has no interface number 0
[   97.762208][   T42] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   97.762227][   T42] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[   97.762248][   T42] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   97.762267][   T42] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[   97.762288][   T42] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[   97.762310][   T42] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   97.762341][   T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.765480][   T42] usb 8-1: config 0 descriptor??
[   97.766398][ T7826] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   97.766534][ T7826] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   97.772080][   T42] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   97.933973][ T7844] netlink: 92 bytes leftover after parsing attributes in process `syz.2.537'.
[   98.049559][ T7849] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[   98.064394][   T43] kauditd_printk_skb: 19 callbacks suppressed
[   98.064411][   T43] audit: type=1400 audit(1791940038.652:655): avc:  denied  { map } for  pid=7848 comm="syz.2.539" path="/dev/ptmx" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1
[   98.101584][   T30] usb 8-1: USB disconnect, device number 7
[   98.113031][ T7855] SELinux: syz.1.541 (7855) wrote to user. This is no longer supported.
[   98.115766][   T30] ldusb 8-1:0.55: LD USB Device #0 now disconnected
[   98.129290][   T43] audit: type=1400 audit(1791940038.722:656): avc:  denied  { ioctl } for  pid=7853 comm="syz.1.541" path="socket:[20381]" dev="sockfs" ino=20381 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   98.132709][   T43] audit: type=1400 audit(1791940038.722:657): avc:  denied  { getopt } for  pid=7854 comm="syz.0.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   98.136041][   T43] audit: type=1400 audit(1791940038.722:658): avc:  denied  { getopt } for  pid=7854 comm="syz.0.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   98.239588][   T43] audit: type=1400 audit(1791940038.832:659): avc:  denied  { create } for  pid=7864 comm="syz.3.543" name="#b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   98.240135][   T43] audit: type=1400 audit(1791940038.832:660): avc:  denied  { link } for  pid=7864 comm="syz.3.543" name="#b" dev="tmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   98.240947][   T43] audit: type=1400 audit(1791940038.832:661): avc:  denied  { rename } for  pid=7864 comm="syz.3.543" name="#c" dev="tmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   98.390854][   T43] audit: type=1400 audit(1791940038.982:662): avc:  denied  { create } for  pid=7881 comm="syz.3.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   98.394935][   T43] audit: type=1400 audit(1791940038.982:663): avc:  denied  { bind } for  pid=7881 comm="syz.3.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   98.397583][   T43] audit: type=1400 audit(1791940038.992:664): avc:  denied  { write } for  pid=7881 comm="syz.3.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   98.456269][ T7891] binder: 7889:7891 ioctl c0306201 2000000005c0 returned -14
[   98.459930][ T7891] binder: 7889:7891 ioctl c0306201 2000000006c0 returned -14
[   99.136106][ T7905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7905 comm=syz.3.557
[   99.137129][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'.
[   99.137157][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.557'.
[   99.345221][ T7914] bond2: invalid ARP target 0.0.0.0 specified for addition
[   99.345243][ T7914] bond2: option arp_ip_target: invalid value (0)
[   99.346647][ T7914] bond2 (unregistering): Released all slaves
[   99.509255][ T7920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=7920 comm=syz.0.562
[   99.510334][ T7920] netlink: 'syz.0.562': attribute type 1 has an invalid length.
[   99.545674][ T7920] 8021q: adding VLAN 0 to HW filter on device bond3
[   99.699874][ T7934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.567'.
[   99.700030][ T7934] xfrm0: entered promiscuous mode
[   99.700046][ T7934] xfrm0: entered allmulticast mode
[   99.703244][ T7934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.567'.
[   99.991201][ T7950] netlink: 24 bytes leftover after parsing attributes in process `syz.1.574'.
[  100.009839][ T7954] syzkaller0: entered promiscuous mode
[  100.009862][ T7954] syzkaller0: entered allmulticast mode
[  100.119859][ T5090] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  100.237323][ T7961] libceph: resolve '1�7..0.1' (ret=-3): failed
[  100.245563][ T7961] ------------[ cut here ]------------
[  100.245578][ T7961] kernel BUG at net/ceph/mon_client.c:211!
[  100.245600][ T7961] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[  100.257096][ T7961] CPU: 1 UID: 0 PID: 7961 Comm: syz.2.578 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  100.263413][ T7961] Tainted: [L]=SOFTLOCKUP
[  100.265236][ T7961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  100.269656][ T7961] RIP: 0010:__open_session+0x60f/0x740
[  100.272147][ T7961] Code: f6 44 89 e7 e8 92 90 25 fa 89 c5 e9 2b fb ff ff e8 56 a8 7a f6 c7 83 b4 09 00 00 0a 00 00 00 e9 22 fc ff ff e8 42 a8 7a f6 90 <0f> 0b e8 da e9 ee f6 e9 7b fa ff ff 4c 89 f7 e8 cd e9 ee f6 e9 16
[  100.280761][ T7961] RSP: 0018:ffffc9000632fbe0 EFLAGS: 00010283
[  100.283358][ T7961] RAX: 0000000000005f32 RBX: ffff88802cb30290 RCX: ffffc90006c52000
[  100.286706][ T7961] RDX: 0000000000080000 RSI: ffffffff8b919e4e RDI: ffff88805b514b00
[  100.289907][ T7961] RBP: ffff88803e1f5a40 R08: 0000000000000005 R09: 0000000000000000
[  100.293232][ T7961] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  100.296410][ T7961] R13: 00000000ffffffff R14: ffff88802cb30400 R15: ffff88802cb30298
[  100.299767][ T7961] FS:  00007f997e0396c0(0000) GS:ffff8880d4a46000(0000) knlGS:0000000000000000
[  100.303511][ T7961] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  100.306415][ T7961] CR2: 000000110c2f3aa5 CR3: 0000000026110000 CR4: 0000000000352ef0
[  100.309892][ T7961] DR0: ffffffffffffffff DR1: 0000000000000006 DR2: 0000000000000083
[  100.313336][ T7961] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  100.316705][ T7961] Call Trace:
[  100.318160][ T7961]  <TASK>
[  100.319481][ T7961]  ? __ceph_monc_want_map+0x189/0x360
[  100.321839][ T7961]  ceph_monc_open_session+0x46/0x60
[  100.324301][ T7961]  __ceph_open_session+0x135/0x590
[  100.326551][ T7961]  ? __pfx___mutex_lock+0x10/0x10
[  100.328731][ T7961]  ? super_setup_bdi_name+0x1a3/0x250
[  100.330802][ T7961]  ? __pfx___ceph_open_session+0x10/0x10
[  100.333151][ T7961]  ? __pfx_woken_wake_function+0x10/0x10
[  100.335516][ T7961]  ceph_get_tree+0xd98/0x1fd0
[  100.337525][ T7961]  ? security_capable+0x80/0x260
[  100.339596][ T7961]  vfs_get_tree+0x92/0x320
[  100.341482][ T7961]  vfs_cmd_create+0xd7/0x2a0
[  100.343375][ T7961]  __do_sys_fsconfig+0x55a/0xcb0
[  100.345422][ T7961]  ? __pfx___do_sys_fsconfig+0x10/0x10
[  100.347592][ T7961]  do_syscall_64+0x123/0x790
[  100.349422][ T7961]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.351681][ T7961] RIP: 0033:0x7f997d19e2d9
[  100.353447][ T7961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.360528][ T7961] RSP: 002b:00007f997e039028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  100.363614][ T7961] RAX: ffffffffffffffda RBX: 00007f997d425fa0 RCX: 00007f997d19e2d9
[  100.366573][ T7961] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[  100.369584][ T7961] RBP: 00007f997d235888 R08: 0000000000000000 R09: 0000000000000000
[  100.372907][ T7961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  100.376333][ T7961] R13: 00007f997d426038 R14: 00007f997d425fa0 R15: 00007fff95290408
[  100.380060][ T7961]  </TASK>
[  100.381393][ T7961] Modules linked in:
[  100.383329][ T7961] ---[ end trace 0000000000000000 ]---
[  100.385809][ T7961] RIP: 0010:__open_session+0x60f/0x740
[  100.385850][ T7961] Code: f6 44 89 e7 e8 92 90 25 fa 89 c5 e9 2b fb ff ff e8 56 a8 7a f6 c7 83 b4 09 00 00 0a 00 00 00 e9 22 fc ff ff e8 42 a8 7a f6 90 <0f> 0b e8 da e9 ee f6 e9 7b fa ff ff 4c 89 f7 e8 cd e9 ee f6 e9 16
[  100.385870][ T7961] RSP: 0018:ffffc9000632fbe0 EFLAGS: 00010283
[  100.385886][ T7961] RAX: 0000000000005f32 RBX: ffff88802cb30290 RCX: ffffc90006c52000
[  100.385898][ T7961] RDX: 0000000000080000 RSI: ffffffff8b919e4e RDI: ffff88805b514b00
[  100.385910][ T7961] RBP: ffff88803e1f5a40 R08: 0000000000000005 R09: 0000000000000000
[  100.385921][ T7961] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  100.385932][ T7961] R13: 00000000ffffffff R14: ffff88802cb30400 R15: ffff88802cb30298
[  100.385945][ T7961] FS:  00007f997e0396c0(0000) GS:ffff8880d4a46000(0000) knlGS:0000000000000000
[  100.385982][ T7961] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  100.385997][ T7961] CR2: 000000110c2f3aa5 CR3: 0000000026110000 CR4: 0000000000352ef0
[  100.386009][ T7961] DR0: ffffffffffffffff DR1: 0000000000000006 DR2: 0000000000000083
[  100.386021][ T7961] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  100.386035][ T7961] Kernel panic - not syncing: Fatal exception
[  100.438411][ T7961] Kernel Offset: disabled
[  100.440272][ T7961] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:07:20  Registers:
info registers vcpu 0

CPU#0
RAX=000000000019bf0c RBX=ffffffff8fa91580 RCX=ffffffff8bd47235 RDX=0000000000000001
RSI=ffffffff8c625500 RDI=ffffffff81e094ae RBP=fffffbfff1f522b0 RSP=ffffffff8fa07cf0
R8 =0000000000000000 R9 =ffffed100d4467bd R10=ffff88806a233deb R11=ffffffff81d75a69
R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1f40fa2 R15=dffffc0000000000
RIP=ffffffff8bd4576f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d4946000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f13793eb9c0 CR3=00000000145d0000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0068746e2d6c6961 662f666c65732d64
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3d1e9cf6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3d1e9cf6 00007ffc3d1e9cfc
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fd4a35e6b
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fd4a35eab
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fd4a3600f
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fd4a35e9d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000004010a09 0000006400000000 307a797300010009 0000000200000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8002001c80090020 8400000040030008 0800000040050008 00000000307a7973
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 307a797300010009 00000000317a7973 0002000900000002 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01010a0e00000044 0400000040010008 8001000c03000000 400100088001000c
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8002001c80090020 8400000040030008 0800000040050008 00000000307a7973
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001000900000000 317a797300020009 01000000400a0008 0000000200000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=ffffffff85b2baa5 RDI=ffffffff9cc7e660 RBP=ffffffff9cc7e620 RSP=ffffc9000632f3c8
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=7a7973203a6d6d43
R12=0000000000000000 R13=0000000000000000 R14=0000000000000079 R15=0000000000000000
RIP=ffffffff85b2bacf RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f997e0396c0 ffffffff 00c00000
GS =0000 ffff8880d4a46000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c2f3aa5 CR3=0000000026110000 CR4=00352ef0
DR0=ffffffffffffffff DR1=0000000000000006 DR2=0000000000000083 DR3=ffffffffefffff15 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000fefef000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7570637265705f65 676173752e746363
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc651bc716
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc651bc716 00007ffc651bc71c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c0ee35e6b
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c0ee35eab
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c0ee3600f
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c0ee35e9d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000098
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000098
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=000000000019d414 RBX=ffff88802069a580 RCX=ffffffff8bd47235 RDX=0000000000000001
RSI=ffffffff8c625500 RDI=ffffffff81e094ae RBP=ffffed10040d34b0 RSP=ffffc90000197e00
R8 =0000000000000000 R9 =ffffed100d4867bd R10=ffff88806a433deb R11=ffffffff81d75a69
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000
RIP=ffffffff8bd4576f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d4b46000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f997d187900 CR3=0000000025bdf000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006e61 6c765f3068746576
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc7cd5c9b6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc7cd5c9b6 00007ffc7cd5c9bc
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1379435e6b
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1379435eab
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f137943600f
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1379435e9d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a34c788662bb9e9e 28094c1cb3b47c5a 8af358d728e9b4f6 1422600a837628a5
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a34c788662bb9e9e 28094c1cb3b47c5a 8af358d728e9b4f6 1422600a837628a5
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13795f45f8 00007f13795f45c8 00007f13795f4600 00007f13795f45e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=00000000000dd124 RBX=ffff888020698000 RCX=ffffffff8bd47235 RDX=0000000000000001
RSI=ffffffff8c625500 RDI=ffffffff81e094ae RBP=ffffed10040d3000 RSP=ffffc900001a7e00
R8 =0000000000000000 R9 =ffffed100d4a67bd R10=ffff88806a533deb R11=ffffffff81d75a69
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000034fc4 R15=dffffc0000000000
RIP=ffffffff8bd4576f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d4c46000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c45c96a CR3=0000000036f15000 CR4=00352ef0
DR0=ffffffffffffffff DR1=0000000000000006 DR2=0000000000000083 DR3=ffffffffefffff15 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f449a7f4e80
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f449a7f4e80
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558257b6a8
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0fffffffffffff04 23a0031008002398 0301080023900300 0800238803000800
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 23d80300080023d0 030fffffffffffff 0423c00320080023 b80300080023b003
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff042480030fff ffffffffff0423f0 0300080023e80300 080023e003000800
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80040a1000060102 a400080024a00300 0800249803200800 2490030fffffffff
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0102a81000228004 0a1000060102a400 080024a003000800 2498032008002490
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030fffffffffffff 042480030fffffff ffffff0423f00300 080023e803000800
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 23e00300080023d8 0300080023d0030f ffffffffffff0423 c00320080023b803
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080023b0030fff ffffffffff0423a0 0310080023980301 0800239003000800
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f5f206220303834 3335656339666666 66666666660a3732 2e79656b5f5f2062
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 775f70636c6c2062 2030633433356563 3966666666666666 660a38322e79656b
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6666660a302e7965 6b5f5f2062203030 3533356563396666 6666666666660a71
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2062203038623735 6563396666666666 6666660a302e7965 6b5f5f2062203034
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 79656b5f5f206220 3063623735656339 6666666666666666 0a332e79656b5f5f
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66660a312e79656b 5f5f206220303063 3735656339666666 66666666660a302e
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6666666666660a35 312e79656b5f5f20 6220303463373565 6339666666666666