last executing test programs:

2.683684831s ago: executing program 1 (id=142):
setns(0xc9, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)
setns(0xc9, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e1f, 0x0, @mcast2}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x4c805, &(0x7f00000004c0)={0xa, 0x4e22, 0x400, @empty, 0x3}, 0x1c)

2.576927135s ago: executing program 1 (id=146):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x6}, 0x46, 0x2, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0x6, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x6}]}}]}, 0x3c}}, 0x20004055)
setns(0xc9, 0x0)
syz_usb_connect(0x3, 0x32, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002ff0000408c1059010100010203010902200001010080fa0904000002ff0000000705810200020007050202"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = socket$inet(0x2, 0x1, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="180005000000ffff000077b90800000095"], &(0x7f0000000b80)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, 0x0, &(0x7f0000000c00))
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl(r1, 0x8914, &(0x7f00000003c0)="63616e300000000000000400ee08ab9cb8")
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000180)={{0x0, 0x1}, {0xf}})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=ANY=[@ANYBLOB="14ea738517000000000000000001fb00000d00010000755da1d48a93c79a2d"], 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0xc40)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x17, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000fcff1f00000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600f7ffffff2400000006000000180100002020702500000000002020207b9af8ff00000000ac910000000000003701000004f80000b702000008000000b7030000f7ffffff14000000060000005d93000000000000b5030200f7ffffff8500000084000000b70000000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_IBSS(r7, &(0x7f0000000a40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2000a9d9", @ANYRES16=r8, @ANYBLOB="00042bbd7000fcdbdf252c0000000c0099000000000065000000"], 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x10)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='tracefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

2.31683988s ago: executing program 0 (id=151):
r0 = socket$kcm(0x10, 0x7, 0x0)
ioctl$FIOCLEX(r0, 0x5451)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000102525000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x4001})
r4 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', 0x1})
write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="000081000100000000001400"], 0x4a)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4021)

2.148756112s ago: executing program 0 (id=154):
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x181})
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000400)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000680)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) (async)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (rerun: 64)
mount(&(0x7f0000000340)=@filename='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='ecryptfs\x00', 0x0, &(0x7f0000000440)='ecryptfs_sig=syzlecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00\xcb\xe7\xcc\xeb\xfaB\xf3\x00\xf9)\xcc{7\xbc\x99\xfe\xe7\xa0\xa4\xa2q\xb4\"\xafv\x89t\xf3\xa0\xf0\xa9-\xf8')
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000240)=0xfffffff7, 0x4) (async)
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffffffffffffd]}, 0x0, 0x8) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x4, 0x7, 0x50000}]})
syz_clone(0x9da06180, 0x0, 0x4b, 0x0, 0x0, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000080)) (async)
clock_gettime(0x0, &(0x7f00000002c0)={<r2=>0x0, <r3=>0x0})
setitimer(0x2, &(0x7f00000001c0)={{0x77359400}, {r2, r3/1000+60000}}, 0x0)
r4 = signalfd(0xffffffffffffffff, &(0x7f0000000200)={[0x7fffffff]}, 0x8)
read$FUSE(r4, &(0x7f00000006c0)={0x2020}, 0xfffffef0) (async, rerun: 32)
ftruncate(r0, 0xdb6) (async, rerun: 32)
fcntl$dupfd(r0, 0x0, r0)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000280)={{&(0x7f000095f000/0x4000)=nil, 0x4000}, 0x1})

2.020017599s ago: executing program 1 (id=156):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000f80), 0x2000, 0x0)
ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f0000000fc0)) (async)
r1 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x100002) (async)
r2 = syz_open_dev$swradio(&(0x7f0000001180), 0x0, 0x2)
ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000011c0)={0xc, 0xb, 0x80, "da6f67fd69b3441f6e26260188500c1e1eb94cd717b0f61d4d43133a1cded988", 0x47314356}) (async, rerun: 32)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r4 = socket(0xa, 0x1, 0x0) (async)
r5 = syz_open_dev$evdev(&(0x7f0000005780), 0x0, 0x0)
syz_usb_disconnect(r5) (async)
syz_usb_connect$printer(0x4, 0x2d, &(0x7f00000057c0)=ANY=[], 0x0) (async)
ioctl$EVIOCRMFF(r5, 0xc0085504, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000f40)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) (async, rerun: 64)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001200), 0x42, 0x0) (rerun: 64)
mount$fuse(0x0, &(0x7f0000001240)='./file0\x00', &(0x7f0000001280), 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000055c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000005600)={'lo\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000005640)={0x0, 0x0, &(0x7f0000005680)={&(0x7f00000056c0)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3, 0x20}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async)
read$FUSE(r6, &(0x7f0000001340)={0x2020, 0x0, <r10=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000003380)={0x50, 0x0, r10, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) (async)
syz_fuse_handle_req(r6, &(0x7f0000003400)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000005400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000054c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r11 = openat(0xffffffffffffff9c, &(0x7f0000005500)='./file0\x00', 0x20c01, 0x0)
ppoll(&(0x7f0000005540)=[{r6, 0x9000}, {r11, 0x88a0}], 0x2, 0x0, 0x0, 0x0) (async)
ioctl$MEMGETREGIONCOUNT(r11, 0x80044d07, &(0x7f0000005580)) (async)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x2}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x3}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xa320, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x8000000, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0xfffffffc, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x400, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x58000000}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000}, {0x0, 0xe3, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800, 0x8001}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="98000000f6ff01040100c01c0300000000000000", @ANYRES32=0x0, @ANYBLOB="faa0817da4bdf31a64001280110001006272696467655f736c617665000000004c0005800500190003000000050007000100000005001e000100000005001c0010000000a1fe1c000000000005000600000000000500050000000000050001000300000005001e0000000000140003006272696467655f736c6176655f300000"], 0x98}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) (async)
ioctl$I2C_SLAVE(r1, 0x703, 0xc)
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000001000))

1.29065249s ago: executing program 3 (id=157):
mkdirat(0xffffffffffffff9c, &(0x7f0000004940)='./file0\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000004940)='./file0\x00', 0x1ff)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={<r1=>0x0, 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x1978, &(0x7f0000000440)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) (async)
r2 = io_uring_setup(0x1978, &(0x7f0000000440)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb})
socket$inet(0x2, 0x80001, 0x84) (async)
r3 = socket$inet(0x2, 0x80001, 0x84)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x130, 0x0, 0x4}})
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000006c0)=@assoc_value, &(0x7f0000000700)=0x8)
fchmodat(0xffffffffffffff9c, &(0x7f0000000740)='.\x00', 0xfffffffb) (async)
fchmodat(0xffffffffffffff9c, &(0x7f0000000740)='.\x00', 0xfffffffb)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000240)={<r4=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000280)={r1, r4, 0x8000000, 0x8, 0x2})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000002c0)={&(0x7f0000000300)=[r1, r1], &(0x7f0000000340)=[0xffffffffffffffff], 0x2})
mount$afs(0x0, &(0x7f0000004980)='./file0\x00', &(0x7f0000004b40), 0x803004, &(0x7f0000000000)=ANY=[@ANYRES8=r1])
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x200800, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

1.290136059s ago: executing program 0 (id=158):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000002c0)={'c6xdigio\x00', [0x100, 0x10002, 0x2, 0x10, 0x9, 0x0, 0x0, 0xfffffff8, 0x80008, 0x3, 0x7, 0x1, 0x8, 0x2, 0x0, 0xfffffffd, 0xfffffffe, 0x7, 0x100301, 0x80000003, 0x489, 0x0, 0x4, 0x20001e58, 0x2, 0xf3a2, 0x1, 0x8, 0x7, 0xfffffffc, 0xfffffff8]})
openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r1, 0x6, 0x2, 0xfffffffffffffffd, &(0x7f0000000380))
mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x8000, 0x0)
r2 = openat(r1, &(0x7f0000000500)='./file0\x00', 0x202002, 0x0)
write(r2, &(0x7f0000000240)='3', 0x4e)
munlockall()
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r3 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x54, r7, 0x1, 0x300, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
waitid(0x1, r5, 0x0, 0x21000006, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000008000100000000000000000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000780)={[0xd45, 0x1000009, 0xfffffffffffffffb, 0x10000000, 0x10000, 0x3, 0x4003004c2, 0xe, 0x9, 0xfffffffffffffffe, 0x1, 0x0, 0x3, 0x0, 0x9, 0x8d], 0x100000, 0x4880})
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000840)=""/4096, &(0x7f0000001840)=0x1000)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

1.228696878s ago: executing program 1 (id=159):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rpc\x00')
r1 = openat(r0, &(0x7f00000001c0)='auth.unix.ip/channel\x00', 0x2, 0x0)
read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020)
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x3, 0x1})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002700), 0x802, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000002740)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000019000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240003006d04000082c0000004000000000000000600ff0901a101851075dd950609018102090191028511750895130901810209019102c0c3"], 0x13c)
read(r2, &(0x7f0000002880), 0x1000)
write$UHID_INPUT2(r2, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r3)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002240), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000002280)={0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000022c0)=[@text16={0x10, &(0x7f0000002300)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0)
ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000002340)={[{0x9, 0xfff, 0x7, 0x9e, 0x12, 0x8, 0x40, 0x4, 0x5, 0x1, 0x7, 0x0, 0x7fffffffffffffff}, {0x7ff, 0x1ff, 0x9, 0x18, 0x0, 0x81, 0x96, 0x43, 0x4, 0xbc, 0x10, 0x9, 0x3}, {0xd3, 0x80b0, 0x7, 0x2, 0x84, 0x9, 0xfc, 0x8, 0xe, 0x9, 0xe, 0x6, 0x4}]})
write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000024c0)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x4, 0xffffffffdf350f4e, 0x200, 0x5, 0x200, 0xffeffffa, 0x0, 0x0, 0x2, 0x800}}, 0x50)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002540), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000002580)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000025c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000002600)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0)
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000002640)={[0x220, 0x1, 0x200000000000008, 0x38010000000000, 0x5, 0x2000006, 0x8002, 0x8, 0x1, 0x4000000000010, 0xffff, 0x6, 0x4001, 0xff, 0x4, 0xfffffffffffffffc], 0x0, 0x80})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000023c0)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000002400)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x7, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450})
ioctl$KVM_RUN(r9, 0xae80, 0x0)

1.225361638s ago: executing program 3 (id=160):
ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) (async)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) (async, rerun: 64)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0xe}, 0x0, 0x81, &(0x7f0000000040)={0x4c, 0xe, 0x4, 0x0, 0x3}, 0x8, 0x80, 0x2d, 0x0, 0x0, 0x7, &(0x7f0000000080)="e654f14147396aea5dfbaf139494024a4ad83af6c521752c86bf4bc5e87ce8ea52ad70ae014dab0bacaf3334fa34f6f57ec2cc0d9251c5b954f932f5f6e67b62ef4f40162c65786bc9be64c321fcd4fc3790d402b9ee51644148e3023debf723f3457d2144f167fb4c16a59d055108b6050e4b7f6e645fc8e5b4dad54d82141b3dd2ad4aaa41e51a7e7da268e777336561536cff"}) (async, rerun: 64)
r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x4, 0x400000)
ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f00000001c0)=0x8) (async)
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/87, 0x57}], 0x2, 0x5, 0x1) (async, rerun: 32)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x5, 0x8}, 0xc) (rerun: 32)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r2, &(0x7f0000000380)="7e5f26791d99f2346430577d9225a730e4d53bcf033ff7ed0125cafcd49b62d0cdf5bd347db23485e1f1d04e0f3845", &(0x7f00000003c0)=""/95}, 0x20) (async)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r3=>r0, {0x9, 0x2}}, './file0\x00'})
getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) (async)
getsockopt$sock_timeval(r3, 0x1, 0x57, &(0x7f0000000540), &(0x7f0000000580)=0x10) (async)
ioctl$VIDIOC_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000005c0)={0x0, @reserved}) (async)
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000700)={&(0x7f00000006c0), 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000740)={r5})
ioctl$SNDRV_PCM_IOCTL_DELAY(r3, 0x80084121, &(0x7f0000000780))
sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x17, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40090) (async, rerun: 64)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000008c0)={0x0, 0x80000, <r6=>0xffffffffffffffff}) (rerun: 64)
ioctl$DRM_IOCTL_INFO_BUFS(r6, 0xc0106418, &(0x7f0000000900)={0x80, 0x1f575ba0, 0x5, 0x9, 0x1, 0x169}) (async)
r7 = syz_clone(0x81020100, &(0x7f0000000940)="0ff1b5509ebbfa817537a7d18862ceba3562471e2d8759218ac8af0fd736df6b1899f425b3b205707d8e80b1f0ca8f6d06", 0x31, &(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)="63dca69dadd3a93766a2f04c4490cf3caea71f4c50573402d3e599d66f1d101054503bcb6462c035b1ce8035947325bde728f02c9e1e4d9635b0deadc6bb55cbe52d60c1b4c9dac1d890f7d1fee0edabb73b35")
prctl$PR_SCHED_CORE(0x3e, 0x3, r7, 0x2, &(0x7f0000000a80))
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x104, 0x0, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_MASTER={0x80, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x9e}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xd}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4004043}, 0x20000800) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000d40)={0x0, <r9=>0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000d00)=[0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000d80)={&(0x7f0000000cc0)=[0x0, 0x0, 0x0], 0x3, r9}) (async)
ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000e00)=0x1)
r10 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGPTPEER(r10, 0x5441, 0x3)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000ec0))

1.13157814s ago: executing program 3 (id=161):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./virtfs_dir\x00', 0x777)
mount(0x0, &(0x7f0000000200)='./virtfs_dir/file0\x00', &(0x7f0000000140)='msdos\x00', 0x2085ccd, &(0x7f00000001c0)='dax\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600140000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.130893273s ago: executing program 3 (id=162):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000001540), 0x2)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000001580), 0x8002)
write$binfmt_aout(r1, &(0x7f00000015c0)=ANY=[@ANYBLOB="03070000b5"], 0xc8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x6, &(0x7f0000000140)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x20}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0xd2, &(0x7f00000001c0)=""/210}, 0x22)
dup3(r0, r1, 0x0)

1.050514588s ago: executing program 3 (id=163):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x31b482, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000002c0)="610f8e0f3566b842000f00d8b805000000b9a0250000000001c13e8a0d0707de460b3cb4670f01c2f2360f217a0f07", 0x2f}], 0x1, 0x11, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x190)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x0, 0x0)
read(r4, &(0x7f00000003c0)=""/256, 0x100)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0)
syz_emit_ethernet(0x3a, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x2c, 0x0, 0x0, 0xc8, 0x6, 0x0, @initdev={0xac, 0x1e, 0x9, 0x0}, @dev={0xac, 0x14, 0x14, 0x40}}, {{0x1000, 0x2000, 0x1, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x40, 0x0, 0x0, {[@generic={0x1, 0x2}]}}}}}}}, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x404, &(0x7f00000001c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r3, &(0x7f0000000880)={0x2020, 0x0, <r6=>0x0, <r7=>0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f00000028c0)={0x50, 0x0, r6, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50)
statx(0xffffffffffffff9c, &(0x7f0000002940)='./file0/file1\x00', 0x1000, 0x100, 0x0)
syz_fuse_handle_req(r3, &(0x7f0000002980)="aa8e9df36226466e888b39901e75023156b5530e75c1e203314842ea78a6048cdec3383c60dcd8fa24f6928f6e02ab1090989c59ae38dceda05af132af4546a298837c63ea70975feb0919d7f7766791d530b90d522b23c58776ac7a4035383c5a0dd90d8b766c96816631f1742a0da0ce6ddd053a05966f6b6ec22dd28a0a2636d07696a307496b0b0d8bb370227dca3c96838e556681409be388f1dfbf500f1aee82b374f4473aecbdb77cf567fece7f8ec733fa91aa92a186f9768d16d0257ef826959fb3a73e4976a019bde8a82e9bb0a0443cbb1ab2c6e8f8748489948710294efb79d70edec2271491bc1cddc9c9d2713cc3063761f2bea07f5577bbe5224302ef23adcc96cb5ecee406c7977c97d7000000006e28198954bba79006fd58b2a2b43047e7f3ead143ccb6b27043d7a7512e9d3bad0138554f4b465ab6d1cec9b40cb301ac6491ee7fcdc0588e53eb2510471de91e3e73c98f0a3cc9929eac63f477a1208a80f8c75d0a1d9edb895d675d036a1863dddea98b18c846ac253b2470324b21eaaa6e69389b91bcd470995cd6835c6fac80d5ca41b66562c910f893124cf0f20dc65d90aa0f9cd1a7c88f755aaf33875d7639ae1b7413834636de57f44302b723646257ee7456bdfee10f2eaf0c05f2cf01a115ed8ac2908827af3d85da2f1bcf53d87ee830dc5e98fcfc1a22e547ce57508f606945a7599d8e1cc0268987cb7b3d00a6bfacea7bd05430255bc8b473a071b83695783944ef856fc89906e0b44a13166309bc8cc1dbae68399e1e8e4a2ea265c1a104dd862563cdaeee2b37e72fbda323cc72360b6d4fad2fd2409397f90422bbe6e9068aaf38e18918736e6357a6caac59ae803ffbe853ff716a388423bbc93bb2d6b1222bb94c96a3bddf421288d47039fa1b73573dbed87e1f6b280f8b045f9be8e0d85f6cf416bfc0f3f4ce988aefa2382cccf39e40b2a1657814b7953d0a0aea45d50d02d66982e5269f1ededd6a9f8f9e212314a4bb5c2f4898278fd3a585c1ff60e435b186c552134e5ddb0f2cc95dac405bc4bd32ccda41b05c6a376070c8ef2d6eb3ea7fce97da8f09440d47dc5faca6271d1ce4f4201b315d1cc3fa1d4cc2baa14e4c57bafb7b5bb2e9e859505360e1738a36100dd6c2fb6610fc0ed88e452148ecd8b73517f69c28f0c979525d21ba4fef353eebb2326f48217c44a322e9f1f08f92af1ff5ee5f2dc563f1a0edb09d0646105be0c46ddc8b71301e68013e863d539af5b3a2b11f770d8c0c086988216602619ec440f98d434add23bc7f54d145260773e53121188ca179832d5c406f2b4a91045edca91232416219fade02bf6ba002352943850294b05d9a142889205e6b69336cecfe8a7cfc88688368d54b475f3915eea851334395f80b41177ed4d17d91880a22c1c0cf33a550e32fbf76505458d07ebccc4e77bafae1700c9997f6fe28452f011e370642f228bbf0e2f3dc05741127f6d73e96c073b26e730ac19cb17dfc63c0ed4b5d53ffd6e312e3e80822c8bbea3cf2914f3f8ee53fb4edde1d4507fa9d7de54eecb75132befab6bf486cb05bc8727dadac49c83bf08d9eb94621b42241f9eb8fd1e6fbf969d932a023760faa62c178b7f0a1d43adbf5c21a35a58d381442ecdfc2dcce2d11e5efae8433b14fc9fc28294ae76eaa95f38ac121f255d9b478c81a1caf5c606c34e6efa80dd3aa77cc4001b9fceebcc77a1efea7bf9f749f62c7a8bd5deb0f70c54ab5daab010cf14b2f1012516dc1639edb2d890638b73559d060be47f594f322efdd40c5945148fe1690585923488910fcb3159006f935f7d184e4b4c404ccb6e2a799cc67aa2b56a13c16e3ad92b85a12060881c1d140708ffece6965f9746ed4eef74d37424e760f4b266c80c93390523eadc65494962bed4efc86a0fead2fe25c9108c5d591770cee92f9ff2d916ba0dedc6551a47ce3a4dbc97043e588b3483f0793786fe9f32f1b79ba3f4c4ccabba52a59861c8024bcdfc8ecb0acc821160b060d5dc24f0ade14d08b56218a32a03f9eba729c02fc6b714bc72b11cc7fe47b51b3a174cfa2d8f5df80a0fd4d1dd2ed36b868b46ee5a8cc72e91b57bd05005b5142b5531650813fb5496af379f9e7b1b73c49c64dead9725af0742a41b770205390791de856715c0138ca22f134911a28d2caf22ef21049d1ba721d278bcf675317c5303cbaf96535414fd92c55d741120200d49729e01e399e4c30fa8da659654196af7991a3d294c775a610f242a56c88d542641036de7eccbd64f9f306a3920596d350637a6409f667110b46c6d85ab94df4d7b0af12318522ba1e745e7de45176789a53213b9b3d23b2599275e4f1858fdb2fd63f8c6f7990235e2fb3c4c8f215715973b60b1e56d1f061b6ff33510d08fa403559cbcc21bd141b41f1e9ab4e163a0f80a918ba13031c483931a9dcdb790ad77fbdf5634662cb75e79d986e4724f64c80203600df7ac9950330431b83777bd968a86be5698b13c37513235ac89a0a1dcb799112a86a2d96b1708e0c5e983756d8243927fc7d42be6ff4c946c0763a9745897726f38b65920363b7c32051bf9e770ab1ec140ff11fc639f36fa760afcfd6ba2f609df8cb0949f26119895b69c8ffd0836a01da1e407ba08f37a1144674f5a71b3499ffcccb21e75f19cdfb33c7eded5fa5c264784a78edc5f6de17da15317a66fea522b6e92a52efa5013797212d816c3229c7dd523e2165f9f042c3b3b16e608a1d87ab9c46c2b291bf547e1f4312913b16e39a714c24ebc5cb4f4f80bb20ce4efdf2921db45b7389fef98bd0e8aa40be16758b0d7755ab631b27c5d49225e84fea63e3f031c665851ef4ed18628b26445da2cad4741800cf72a401ad79a7462657068e0f2ee65eeb86da66890247cb45b31d3ad06ea7500eac5be65528c55bf190b0ec27673b67b36117344097a0dbb9db47a2b5144218002d14cbb98629c2ed35db5cdcf93994e3e3d1a1673ff60ec0d9bae1217ba6f39ae4ac4c9e5a19f85634f3091150c4724aaabe3bd1445cfa33fac93b86c5871ca168a728899e2e0062a596fba22b962764420f1268bb8ae0a894559c488cfce6b71aa8478964d2eef5086b2cee891ca031b6543bb7ba55006621f1d80e17abcba9f9d05fc5e61c6c4a890aba4b205f5570e7866ec4de380420c4758de63ff0f7b1acb0521e45cd9bc54df1a4614c04c524f43e86f58757eddb645bbc56a63de5bb560f56a31796dc344d58e2ff2d3fe5228d87c0439e6353943c92160fb847a172eea37ad0c22de5d1e7cd66730218832c87b73366131e29a1545b26d4c500a9afd75864b460cea1ba33a5dca6e5585e9c78a8ee3361f20e2b79489ed2ef1c935d7deeef6de0d009b72a0751929209b351331c0225c29341f5d476b278061a0a33c1e455815bbb83eebf5f5c3fe97c4b3df32846a094501a157196b6c1db1e05cec4f2dee823ebea7da05f5ee63aee1670128471465ae83defcf26aba78f18544146fcc9305ed5899965edbcf9f677c499a52d984db346c12faf02553338e6553488c29c9f3f4537a9437b5eb7382f95f9e844d27fa0b1ffc48d2b44e383b1fdb567b7f23863e8e10b6210f8031859cea410d52f99b5a8d2f218e7c92e231904b171dc077c636db15087cfb0ca6a2cd09f6b7973627a03ebfb4772daddc8ad7c9e534d8bc58cfc6d1305374b589a2a85c8a3c471c7408712ff5cfd7a50bee627d0417a5667dba71866320857cdb84e071a37e477f1b5ac16bdd464d8bf3ae31860ad19722bea1d85d1a5c09e1ab36dcd6c4bf524ed2137745e3562147081027d7852bee1ccc9563e4ff0ce72affa7002e9a066591ddf31abc4388281d98d2d88fa1c5f22cb60523e72e3d838fc6b0163fe0082ce0d8d59098363a174818113182d40cdb6367cb4a867c5aaa480c95f4a98439a2b58291fedcbfedfc3ebb41fe6b0a12fce36518ea6082fb919cdff23e3b40aa26eac8d634e03fc3a1e0fafe402c875709b15b622f35bfdd233ea8d7989ec38dfa1e5b5688d76c615b5efba62dd7d50be97b92f16c838edecd426e18dd270ddda42121d7ad8d26ec28df29580e6dcd7f968885d1cbc5f573efda890a408b45701bdf5cb2e3c54f8481710145ac1f5bdb1b53a1e9a7efd8a3ad7dad7bd0fa017e080854913beda2ccc95631a5c1da5c5afaa84bcc3f1a7041208fac9e09ef52140f142bed882b8988ea062cc8ecd7fd78fd33aeee8e8d5cc891514e3407fbb171e84e45fa14713e995513e16763424e356032ac81047c8e2bfe05dfecc510b55866d4a8696c91afd7b6b809fcf2e0f8a21834f43149d8e2b5dc5fddacb8ff9341376281e8f7d762fdb61a8e6536529b0d4d3cd8217fdb4f0b8341587737da7f50dbe4e5b7851a25d52066bd0e3ad11aed47ee02bec11d0f125cdee1f505cc5c1223d386b2fda556331cf57d8df433927cf12a5fbff853be266c5a64b6424f7b106931d312f0fd447206d21c1945579915e7e21627c7fc423a813823ce5fa2c6f3114303d0995c5706418a088535c62eda2a60c82b727c31177252f8ea025c16a3676ea0ccec24ea57e68c7e0f1b0e06f78a8ccead63eb4c0ef5c59b1d3a805644f8089e604a5bd3aa4494ff7fca02dd5894a6f02e572edd487af04ace3e37f19074325613d6f7d2af73062607b45a3c9365337a1c5e6bae9702a65f0a1b9ce75e43f6381efd9d610ad37532b62c6ab5957ded77a5d01604f67d7ccaa495266ab7fe161268b9a6156643ab6289fa0be75ac433a0204df164c02d3d0cb1b7bf0acd92ca8ff19b710b0b511820d0500fdf58f598fc611380a0f7dffce7bbc934edc967ba0094a0281750176748a4e2c99684c1c4a40258b0da77a0bfb9a4b808d5932443389f0f346dad998cee519624aeb07ea4446064282b1448bfa2e5ac3393d30b5c3865a8995869f69bab0747cfcbbd2bfd407c82e198da326f36be9a508e12d6d73fb262b37fcd7ff70b372c966b7198a9f2364012ff8127f200c079cb70d550f9483c1bf9fba69ebc961c989a82fc38cffe853e4738f33f1fa42fe7167e4bb79110f237d7e4989d2f6f4bd21905e491e2d4b6ac5a66025c11a93ab1eddcade3c3e78c270eaf6a0a6ed43df6e35bcaea9aa716d547d2136c2388379abf645e3f7cad1cc1fdc92b882729ff92b0612302970bd9ca7e36d76b2eb4d9dfe35116bb7771e448867e57026e622e1e54422b064fdb707fef339aa16fde808f622a7269b77c292c7e85fade6dcde475c2f61d71370209bc0e46ba7c7b71e41df246d283f5574205ca6b4819c63d97193eb084fd6b0c20b956cfc4b45b51fd46b2e034ff0f003179c7539fbc4e888c0633767604ed0f07beb4fe00f5a3b56ad9f3997cb49c7a8b92a719411b20874686a8a5ab462914baa85d016df99796a868af3dfa6ad98ceaaa18af2f2fad2ebf3dee1df8c8863e84ed83d6da5e283ca9cc385e0ded20531f127ff4aa974b91634d8f367154d3e23ebb04571a5a453d1265e873d00d40be7e1eb7e74529822b4c81d742c981a988fb786084cbd1e721358c7a1ea5293aa609773b890a5c9de4d1349588def4232d41fa5d7cfbc3dd130754891c304118a895268555874613e9c89c66bceea609e7ca1a914ea327db1f85a3809098e801289d8ab71997c2ad5bd1f3fd4b3c6b80667ac2b6b23b35018206dbf708284f0e0fac58d0b6d72c0d0034b6ed37b1f9931158f2443f045f65e33084ebc6aac93d8c0e3c1c52878dd3f54b9f88a40821090cdeb3bdbb61f0be16338a2a7ba0f77e9ecd5400b6f809a49eee78346c69e7ab560fcc32f2d19e665bb91fbc00e4c00838a1385d5156d1696f694027a9e6a7ef66933202012caca81c1b3ebe64976a9d000e28a6aae5d6f061c5acf8e4bca00bc5ecc547ab1664cdb2125300130a5a92abc0d36cf911fb3123034e925ea097fde14253dd3de52bf5c8a6bf01436c92dbbf5450a9b7775a981b09eab05406dae83f8ddcf898b1bace4b8487f0b4ec5b5316a9b7e3bcd6da41caa23604b3932ff3daf31bb19e74c687773bb54503f6b3ed74aef1410dc4a9a72fa05b1e120e682a7e7f9b8c7b6836fa9d8f96d16fa17975bc3dd7784f0d621d5a69038b0947d1cb47381c82c6df030fc8033dd66b380d884b12991ef5d5283e552f723aaf791bf3af581423c57b536b91e5a158695b68f7eccfd72fd2af1016e261ec863215d1df0fe756366e56fa86c4495cd9a45e83227af93a5b431c5d33fea2b3d469aab08f57b85b3a14a47d7da8ca74dae34f963cf660057466dac3937ce00060f8db8099178944aa37474a37eaef3b9ca04bd0eb1d03c25887d530cd690625f5829830851a6a58a7b411bc87aa70f26e80514799664e35c44db243d61add5bcaba3695e45e9f1a3cbf8ebdfb87571c44b9dcddc5fd422e94cbeb02bb58abd14e140829e12f7f0c7e3cc1a1bcae8429775e531710bfa504e103b17c20c329f653c015ab514fd6cf162b96d871930de99413e148fa58c1ff262a997c6ed1bc008912c6b864031dc95b5a3ad6aa3521167a62fe771baff828cafaf178539048d2e91a62ee7a50df04062422150347774db320fb535ddd4c03a8cdfc3affd253c200e1d5678ff12eb6f5bd43da636778cd2f8551295f4cbbc902322e491c5c10fee144daeaec4cc2a2f855f5312f4c8cac1155c8d3b93a5fe6a60118a0a9912b16d583582b478e4f05c375247d4cd897c49a8cfd2540833311039d9b121e5d5779d71b206d0d862b95e0eab28005f86ddd6ec514d931a521fc035eaacfd10ec5f97af541cabf08512f6c79e7e0db5217bd14aab6d3e9458018c3e59769bcb689347d7e394b469e9c9d9da2be8fc7a54b1aab301b68c1faf7ba7bfd05b8a313c902ad3733e523fd64739d9af110e39a96f1048fd6a43d13045ec71ff3d1f64a904f3878cb18f58b3b84942331ec05d3372a328a83e8aab828574313964f6f6c5af246faf2c69a95e9ceca77c0fbf303103a2d38ef6da2929a3dbccae5823f82d9a37c989154c8a760df8e7d8589daf1fd69683cadd2c7ac13e285a7661c23913912ee272797e3a0808654fd0b9f74f2fe04cb34167aa630b8aa58efc2586bef8c7c2e354d7c8d08de7d25a80b08bae8d2326d16a15d537d8baffcbbae460ce608ded63a45bdf0caf9dc335aa8d2aac03a62a9c6c62ce7c2caa9a731baa549d1880d3facdb4bee43ae27ccd5a22f143da8e7b4deb5c2a194d450eb5ff6949a950115d4e1d60fc75115346a0aaaf1400a301dcc8a04f9d2762c093f88adac799f6bd5150ca9c7d3ac1f728b88b1b0807a7407ad9b8febd89a801c9845af62bf2fc98aea4835d52871774e72b9fc07d26d55ef163833fd2f5c951ff963f43fcdaf03995cf3f14360b05be587e7a19fb760a944166b1fbd04c0d02bda8ff5d92a23c4e683db1b2823a6b02a16a7bc7963aaeeec43d97a85752fa439544127fb71d8b4fee6a09b966bc4e7be67acca35bfe4acabf18f6e9cc938c1e0af43e11754cbe7b37738019d9a162083f5f1fcdd9299921a349f1e0ee840b19fed4c0b5273d5e71ff5f1f20dbb36c89e1edbbef78de1a6229a2cd22bcf2164a1b567f7c08c6ba78ff2e53bc348dd2ab53b9deffc9cf8726feaf9cb07b4f94d189314da8c0005f3bb031e44c402339588832779790e814c707fdbe0830d53b4d35812f27e7709bee185d6d6d67a65382dcf56d567180a4a74cb05b0f7d0202bf33b88729f2bab7003264a2d67ea93d022baea74d7ca54a0081923a82e56750f22f58bc997ea57afe1bce18405383055745f0c6bfbbc514df76107b3c5d04bfe033dace72bd5bead25e736a0052b6efe7eb1153d1afe9202e227d60e4e38f5f294894d2ef9b89998194492e427442a18506e24ddcc1952354fe0250ad949be08a63b6c0e206ecbac70415c36f1bf78d7068ce8eb804561eab2540c6c984e63d1217de1242ae70a5dd457d7a96f24ad9e8a59c060a2a95e9e04a6a4429f40d47d2770e9d3ece295d748aa30a7bbd2aec570733be7855c3a789d71d94b3c86ccdd3cca3ddcb35a969e8c2d5b17ded6ab8b81b90a4206ac2ff163c04ba9886b5ec6138db5eb6ffc19201f66a1057858e564960de679b2996bb93c8d2b440fde169d1fbb5886fe673639c514c2eb8bca75f79abbb73c4a125e5f4d7d4ccd5c9fc85cedc9fe6f2b2b75ec384fa6ecec37579a70bd29b4c9893badb36e1b33cf61b07ee7d2a5550ac9f23b5fe629297efe94eb8a8c2adce65a61ddae84544fe8f81455e2d053fdf7efde38b92b0b4d3e7ff9d81f5de7d571cb4db7e059cbe1ac2153b22b57b4d45d58fa50d152efa2d85d262238ce4816e40f93b65f53b6646297f69e3dde4ae7c57e9112054cb831eca5716863196db7667674b00be7c83f900c944ea2bc8e8e6b6b335a6e9f63e6f6635f6afc0889355aa4f0b928b90f76e6f03b5d40e9a0cace6243aff4590c0ef255860401b16da288687e890b1921b8ba63860df7aad86279c89d16cc4ad1ef4633639f203724c1958fb3b6a990f555e8df8f494fbdae25b353c14fe524541347c1d7f61c349f55773575fab73df09ebd1c635ad5f93fc8e075093ec3fd8b832e5331e329c2578d1f6f7a0a44838e578fe40db7d11645c2c73e0a438a80085988294d98a4ef4c5faa593dd5a9b0dec12d8a6dfd15cc4503bb2078739f26f9c10d0b1fc2634094cfd2ff6bec88a7513debde5fcabb85fd31df8d97bcfaf247edb89cb056fc52bc06f117a3e1022a57817b9abe1793cf279e163212f501681eb9ef08e39adb9ba80ec3cd45f5ae7afc0c256a3470e8ed3ca41c5502c510f0526eab848ec5a7115a53741cf05846989b9b5fc6d2ad74fb855a852e3fc7234bb0ed8b6937167133925dbeb4313a9895860e761300a0695e03e81c2c1e3fe3f4b8c42c946b010259ffa4c1d345350020cddc8e9697fb83c22fff5190558551584368e7a270f958bc72e2624c3e45bbef318b5134f0419e725945e445993f2f176f0a21f5dba86398529fe5159d57c0d75d64f950763b52935e778b20356615409dcb088514eeba3f811e9ce6ce2bd1ba6ac932bd79f7a518959f99d52acbc2a1d0c02c70b9ea46d662d39c315b36315f4220e5dce293275050a3e6df506d0c1d7786017572cd758ba4995963fa034ecd49cadb42bb1ee280600557ce2e17488e1dd4595b8c7d4f20f420a3a01b6228d764c5069222cc93e2091fd2053f05a50eda7840c13f45c6e2a2fbc0f9de4baefb7b40ea1fb7e9d30fb1fdb8f20eafca0c7c8c61c57dfcb8e2836e8d0ce546e8e37b9fc467e1bbeab314be171573398e0c2fb032049a99acf174a857c019609e83010dda8da078a4311efcaaff62fa908dde87cec4d41078c343eec5a80c42d0146d57e9a14f2b5611be05e3b665728c14ea9536d146926fe1e8d5acf12afca415ef5ad77bdfead7ea087183962592296d3d892c64a0a3b9fc95b50f03df7f4f50f950b43a289af09ca92a01a684e5c649b8da4a3365878273a00afd14b4fa2ddaeea5007f728899ba9f5fc9d1d7893a489e56c5fb152e5f775042f4b3bab6cea9cbf9a2b91647fe3c62d3ae4b5d065460b51d51b6e91f2f4fe90a3775e6312ffc805612fee8c314ee70c92de3feefb3cda56a59ddba83757b0e85cb0ee7ad1ac608a1e6a64656d9f586afc38fd1f6474b521724532d88cd351688db077dc9d229a78f8704b21f85324bf9c697874cac5f709c6701a421ac368edda0ec3a0b90268c449acf753d7e8cab501ae3d7e04788e899ec54a2517545b68fd928fb659349e1692bdeccca648fd13a7602868c44e77ed6fd587538a74adc6acdb1ebd1816af88ece2ca64f2603428a0aa842fe86be6b2b568fd29c23433c9e3f9f0e45bd13beb22ac06eb82ae0eb2b3b328aca4abba5e72a155e2cc82ac92c4697fdb9439511c1144fe2ba36f516fa181f7f8d58af69f87a6c936d1e561fff0509819e65a681aaea445a106f8ff3dfd987e2e24e977281cb85cc5e5eb987da2d17e73dacfd9880bd14ecad13d5705643f926303b389a61fd63139577de263a5fdef1facdac0068a9471fc17ac654e88e0a0d12c8aca1e850b64a88f2382e0cf3a4e3363827a06abc1eeb87216e3447dfbf8c04080ca2fe1a08cc2e2001eb386cf02ac0d3b328bcf1de009d048a03cd955c628971c30a137dc66879cbe938390a8f63251f55e559549dd11969b637876a20bc7c6f5fe2b753923d2f0269f2082206eb2312f40654cc95bb38add159104495018a5aa7b8f5836162de9a03b6981c662f2ee02a168d530a002616c09c4cc26c2a2726711e3e25b4e3acb6dcba25fde78ecede51f01e22a2f79409c77011a599ff57d81e70dbde5fcbdc841f9af0e49e8200cd2d3c73013e0e5608ee1951ac04a111864b545e7bc2434c2474286519feaff4da07324d1b13bb16d1daa1d485bcd5466b82c9622f92664f1153d08c6e644b3d0f5902b4d749895f7763015bf0e2849703ed920a3866a260f22fe40f46c76ca6ca10ae8994505fa613a6b1aec84ee6620c25ca4d002f56ddd21b12eed5132634a3194281283fe5fdac07d2fec091dc0f748fe25c6b08cf8d4ff893e863a43c4c92fba47d86c8dfbbabbdca0cec09f732bc0b8df2a97ee7208e64512249300aa4c44c10d4c4503bd76e7b4e2c9aa2e274166ef103d5c832a760f33b5a0eae4dab922f0fec5adbf409bff956b4ce40e6157d498d46ae053f1ad73655bfb0a3dfac6b96c09bac4d07e6bd7f3ac6337f58cccc631466985f6ad680d21a5fe9a9bde4b6980c689e6e8c7a413b6e3084997c089443ffaca9be80c96ce1d9b6de074b4aecfd2db3b679a2d5cf0523aa14414699d481eace4aa397d818ff4d3e73d82031849c7e4f1f1503b636728637f87cf7a7df5472abfcb7e5d77439e1018dba49a41e1c8e63942fe0d1a426f390e8e225fee14501a34762b8d835ca14d6a3a3d8042724ea9e6b568fe0eb84306397ffa8345935e9be8642e6ffbd96e636fd16cacae5d4b88fd0aa0bfbba8221f68eabc98c67de6f9eab2cca07b096b458bbfdc7f1da0bb845a1a6e19c6da87a958acb1aad0b74d6537e97fb0673a20178cbb963f909839e49ec593ddcfc3046aa54c22e3a54148c440d1f2ba1fa7417572c629e48e6d2e07760a87581971d1edccc03c0e465d4d6321d820b3346fb516c1813585a6a8462124f91428a90ed037f40cd6f23596dc90c03825636e55a061838964213c70104ec0c5909a0c62240e93314f9b67ce8fafa115251282a6ee7a036a861d1af11919dbfa7ceb7b2260e66be6300a536e78ebdf60a6f022574b35205341f3557e409d8ecc0c2304b372605c9284aebe1b92f13051db78210df83873b0496625507cf8e1ee5e90aa66f45be75e388d6e0a021b8af3787ee06cd710719b4d06ca5ba5f87de812a660f939584ea880d3c71bc58135e612431850180ee39b707bd98aff26d2c5e4396b43daefd82b2ec1004978637b8d389cc415d628fea6f66f28664f9409448e68a2d48a0a00", 0x2000, &(0x7f0000004980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x8000, 0x4, r7, r8, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r3, &(0x7f0000004b00)="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", 0x2000, &(0x7f0000006b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006bc0)={0x90, 0x0, 0x4, {0x10005, 0x3, 0x2000, 0x6, 0x0, 0x6, {0x2, 0x6, 0x108, 0x100000000000, 0x20000000007, 0x81, 0xfffffff8, 0x6, 0x2008, 0x8000, 0xe2, r7, r8, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000006c80)='./file0/file1\x00', 0x880cc2, 0x20)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

970.262762ms ago: executing program 0 (id=165):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000019040), 0x4000000000602, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x1fe000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x400000000a882, 0x0)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000180)={0x600, 0x20000})
ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000000)={0x0, 0x2}) (async)
ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000000)={0x0, 0x2})

969.616449ms ago: executing program 0 (id=166):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000040)=0x1, 0x4)
r2 = socket(0x20000000000000a, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x48, &(0x7f0000000000)={0x0, 0x0}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', <r5=>0x0})
socket(0x27, 0x6, 0x7fff)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0xffffffffffffff82}}, 0x804)
sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=@newtfilter={0x2c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x6}}]}, 0x2c}}, 0x0)

810.489889ms ago: executing program 0 (id=167):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$int_in(r0, 0x5452, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'syzkaller1\x00', 0x2})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000440)={'veth0_to_hsr\x00', @link_local})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000002980)=0x4)
r4 = dup(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./my_debugfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='./my_debugfs\x00', &(0x7f00000005c0)='debugfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./my_debugfs/usb/devices\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000000840)={0x2020}, 0x2020)
read(r5, &(0x7f0000002880)=""/100, 0x7ffe)
r6 = fcntl$dupfd(r0, 0x406, r3)
r7 = userfaultfd(0x1)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000004c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f00000006c0)=""/251, 0x0})
ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f00000007c0)={0x0, r4})
socket$packet(0x11, 0x3, 0x300)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b774000000008500010000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r9}, 0xc)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r8, &(0x7f0000000340), &(0x7f0000000380)=""/5}, 0x20)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfbd}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

809.081009ms ago: executing program 1 (id=168):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt/status\x00', 0x1, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0x1b, 0x4e21, 0xc, @private2, 0x5}, {0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6b8d}, 0xffffffffffffffff, 0xffff3d9b}}, 0x48)
ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000000c0))
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x18, r3, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x4880)
close(r1)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498)
syz_emit_ethernet(0x4a, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)

740.633572ms ago: executing program 1 (id=170):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') (async)
r1 = shmget$private(0x0, 0x4000, 0x184, &(0x7f0000ff9000/0x4000)=nil)
r2 = inotify_init() (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x1c3040, 0x0) (async)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff, 0x40, 0x2d3, &(0x7f0000001400)="5674f1284b66baa4dba90b6e5a09937b27946e50751f39be0a54c925c96e4e3599a3b8a834f8a2be743fd8f77a5ff6a3cb874484426f2fe2d331bf3cd01efcdae7e61eb6bb6e89f481c283aaee3567b6e41774e76ce0c2f054354dd81bc0cc13573671a0d1ec39a094d06676949a280af58fd6b634719cc08a2effc5d9fb77fdf433df904e36af5da605eea32626d409b9cf32d0e803d00fa5a3e51daf0cfa4756b0d6479181799057ad546c8fe2a5ada085376b7bbb0f821fbec345638c9b4240d27cbbd0f2d8d3483daba12bbec9b79c67b05248a348728c3e617cb07d9bcfeb43b5e00b1c726cc7b5ac2a6a9966516e59a1fcbbf36a758565c77482c7ad749eec18be2fa279bbb5dbc5e72d0e6522b77cb9523658faeab1af6861277febf46f3b5a8dfc8a2891a555897ac0ed200b4a91042ef8751c441b16d9ad0759bbc10719800372545bbabddf6c9c024fd8e513b24101b86ac45d19024b10609b2e7e024988b9d5dc2670cdbedd7a3953122b59735e029dd9fbd20ecbec6f1dff21ea3355c5be7f3a3122eaa029abf5371380971b941a55d5c98821dd467c2b74af669dc8b9a5cfd1160ca392ec02902d6200d21dbfe5b122207cc1c74e59c9cb8f73d018621a568f78f36e6e65cfc4d8a6d87dd5045f5744deb710b81bd88ead5e8db7790dfa57bda48401595cce05a58437b373bb031f599295f476229f1339b42183197bf7c3bee3b0b14b6fffadb907af7b698b911889da4b36d5c60dd81eac7214528a8826c099add55b43d0dafab1053b5f8b8d2b9377fd72de6f318907b0dc47ab12df8d0050008b570b6f0bec4843629b495129823aa7263345d70cc42d2f5904da8d67720fa0072570a61af3175512719afdd90f9a31c496e3a6e98889abce111c92fb3f977011e7c367ce13a2ec7277d9082dae1c0454aadcf9c9f211fa66b5d15089deca4b4ba48735b2932a937e12b0258591c16b42f06b08c25d40ba3643be90d2ebc2b54d273ee3f4f1d68502a7ce", 0xfe, 0x27, 0x8, 0x6, 0x4c6f, 0x2, 0x5, 'syz0\x00'}) (async)
r3 = creat(&(0x7f0000001700)='./file0\x00', 0x104) (async)
r4 = open$dir(&(0x7f0000001740)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x2, 0x4, &(0x7f0000001840)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000001880)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r3, &(0x7f00000018c0)=ANY=[], 0x13) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001900)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000001940)='./file0\x00', &(0x7f0000001980)=[0x5], &(0x7f00000019c0), 0x0, 0x1, 0x1}}, 0x40) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001a00), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async)
close_range(r2, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$unix(r8, &(0x7f0000000040), 0x318, 0x0) (async)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000001180)=ANY=[@ANYRES8=r1], 0x0, 0x34, 0x0, 0x0, 0xffffffff}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="58d451fe3206cc93653de678a4d722497f3395a1029ae7035471e0462c4644b2d4afcf24aba03fa89bb32649221f213cf0546bcc1209022d4b83ea92a42a0ca765bbfe709d81ba493e256b4d692ec73b4a2a161ce67511d505f72607c128bca7b35da6315f13c204357ec13e7dcd16943c359be3739eeb915d8a8415b40b1b7593001c550bb485f9278ac563713e05923a5cc1c30b1c07d6c34938832847f8930eaa52ef4f9f68b7c7bee68bbb2759bcbf1c7dc9589ffd851efb9cb61f9b0acf38482427339bba4b6d735cb1678884b9f7092cea083862e1"], &(0x7f00000004c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000000500)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f480000}, 0x94) (async)
ioctl$CDROMREADCOOKED(r0, 0x5315, &(0x7f0000000680)) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1a, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2d71, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000002}, 0x94) (async)
recvmmsg(r7, &(0x7f0000000280), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffe0000000001, 0x3}, 0x0) (async)
syz_open_dev$vim2m(&(0x7f0000000300), 0x3, 0x2) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x4) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$vim2m(&(0x7f0000000340), 0x5, 0x2)
r10 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000280), 0x500, 0x0)
fadvise64(r10, 0x60, 0x7fff, 0x4)

419.374295ms ago: executing program 2 (id=174):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = fcntl$dupfd(r2, 0x406, r2)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={<r5=>0x0}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={r5, 0xab0, 0x30}, &(0x7f0000000140)=0xc)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x6, 0x4, 0x5, r5}, 0x10)
r6 = open(&(0x7f00000001c0)='./bus\x00', 0x90800, 0x0)
linkat(r6, &(0x7f0000000200)='./file1\x00', r6, &(0x7f0000000240)='./file0\x00', 0x1400)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f0000000480)={0x6, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}, {}]})
sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000300)='l', 0x1}], 0x70}], 0x1, 0x0)

360.529537ms ago: executing program 2 (id=175):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = gettid()
r3 = syz_open_procfs(r2, &(0x7f0000002180)='syscall\x00')
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f00000021c0)=[{&(0x7f0000002200)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002240)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1)
splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0)
splice(r4, 0x0, r7, 0x0, 0x25a5, 0x0)
ioctl$I2C_SMBUS(r5, 0x720, &(0x7f00000022c0)={0x1, 0x7, 0x2, &(0x7f0000002280)={0xd, "1a7cb09efa6e23a9d5698cfa4b331a40591e3405328cb71faa6ffac50f00c7f851"}})
read$FUSE(r3, &(0x7f0000000100)={0x2020}, 0x2020)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000002140)=0x25000)
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_ONE_REG(r8, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110009, &(0x7f0000000080)=0xd8})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000002300)={0x2, 0xf, 0x3, 0xbe65, 0x7, 0x0, [{0x5, 0x800, 0x9, '\x00', 0x3000}, {0x0, 0x1, 0x0, '\x00', 0x2}, {0x1, 0x1, 0xfffffffffffffffd, '\x00', 0x1100}, {0x6, 0xfffffffffffffffb, 0x4, '\x00', 0xc00}, {0x6, 0x6, 0x5, '\x00', 0x80}, {0x9, 0x3, 0xf1c, '\x00', 0x188}, {0x9, 0xffffffffffff7ea9, 0x7, '\x00', 0x1008}]})

220.563369ms ago: executing program 2 (id=176):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x899, &(0x7f00000000c0)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vxcan0\x00'})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='(\\\x00')
io_uring_enter(r0, 0x2219, 0x34d3, 0x16, 0x0, 0x0) (async)
socket$netlink(0x10, 0x3, 0x4)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = socket(0x8000000010, 0x2, 0x0)
write(r1, &(0x7f0000000140)="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", 0xfc) (async)
r2 = socket(0x840000000002, 0x3, 0x100)
sendmmsg$inet(r2, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}})

220.357952ms ago: executing program 2 (id=177):
r0 = dup(0xffffffffffffffff)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000000)={'netpci0\x00', @ifru_addrs=@hci={0x1f, 0x0, 0x3}})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1d)
ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f00000000c0)={0xc9, 0x0, 0xc})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000240)={0x1})
ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000340))
mount(&(0x7f0000000040)=@sr0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='rootfs\x00', 0x40000, &(0x7f00000001c0)=',\xee.#\\[$%#+]]\x00')
r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3})
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0xc080aed2, 0x0)

219.433672ms ago: executing program 3 (id=178):
fsopen(&(0x7f0000000040)='rootfs\x00', 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x800, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x0, 0x4}, 0x9c)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001)
r0 = add_key$user(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="15", 0x1, 0xfffffffffffffffe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xfd}}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000600)=0x1, 0x4)
r2 = fsopen(&(0x7f00000003c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = open(&(0x7f00000004c0)='./bus\x00', 0x143142, 0x80)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./bus\x00', 0x1c1040, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./bus\x00', 0x1c1002, 0x40)
write(r6, &(0x7f0000000580)='t', 0x1)
sendfile(r6, r5, 0x0, 0x7fffffff)
ftruncate(r4, 0x2007ffb)
r7 = syz_create_resource$futex(&(0x7f0000000800))
futex(0x0, 0x85, 0x0, 0x0, r7, 0xc5fffffd)
r8 = syz_create_resource$futex(&(0x7f0000000880)=0x2)
futex(r7, 0x5, 0x0, &(0x7f0000000840)={0x0, 0x989680}, r8, 0x1)
sendfile(r4, r4, 0x0, 0x1000000201005)
r9 = add_key$user(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), 0x390, 0xfffffffffffffffd)
r10 = add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
add_key$user(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x3}, &(0x7f00000006c0)="61687ae026820513cd3b994976fa5e679d37ce20f4752b93adb7c64cbcf54081c4970fc661680050da2690d8844eca909a754b6e0d0e7e0acb1840fd047d77494d549102350b629ded2a60a4b3c5bb5a96106b05240b55b12c954d33dd712c80943ee6962a1ae1e0116d1b325933f5441999a29d0c6c6531283dca03f8be0aaee108a351e7aa3a74b9e0682702d7", 0x8e, r10)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r9, r9}, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={'streebog512-generic\x00'}})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="0308010000000000240012800b0001006272696467650000140002800800040005000000050015"], 0x44}}, 0x4004010)

89.488595ms ago: executing program 2 (id=179):
r0 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000000), 0x82903, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f0000000040))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r2 = openat$md_node(0xffffffffffffff9c, &(0x7f00000000c0)='./md0\x00', 0x80000, 0x0)
ioctl$GET_BITMAP_FILE(r2, 0x90000915, &(0x7f0000000100))
quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000302, 0xffffffffffffffff, 0x0)
ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000001100)={'\x00', 0x1, 0x1, 0x3})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)={<r3=>0xffffffffffffffff})
bind$unix(r3, &(0x7f00000011c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000001240)={0x100, 0x0, <r4=>r3})
ioctl$SNDCTL_FM_4OP_ENABLE(r4, 0x4004510f, &(0x7f0000001280)=0x401)
r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000012c0), 0x240000, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x40, 0x0, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_BYTES={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000001400)={'\x00', 0x6c9, 0x8, 0x0, 0x1, 0x75, <r6=>0x0})
setpgid(0xffffffffffffffff, r6)
rt_sigqueueinfo(r6, 0x5, &(0x7f0000001480)={0x1e, 0xfffffff7, 0x51cf})
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0)
ioctl$RUN_ARRAY(r2, 0x400c0930, &(0x7f0000001500))
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86)
r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001540), 0x80000, 0x0)
r8 = syz_genetlink_get_family_id$fou(&(0x7f00000015c0), r4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001680)={'ip6_vti0\x00', &(0x7f0000001600)={'ip6_vti0\x00', <r9=>0x0, 0x29, 0xa9, 0x1, 0x140, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x8000, 0x1, 0x7f}})
getsockname$packet(0xffffffffffffffff, &(0x7f00000016c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001700)=0x14)
sendmsg$FOU_CMD_DEL(r7, &(0x7f0000001800)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x60, r8, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_IFINDEX={0x8, 0xb, r9}, @FOU_ATTR_IFINDEX={0x8, 0xb, r10}]}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x20000000)
io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r7)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001980)={&(0x7f00000018c0)={0xb0, r11, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x4}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1938c41ae98e82d8ac64ecbf72bce6c505f5dc653c311d28"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "25f6571af1e885481df440e7f1e0304c41f52c32c3618c88"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "97d9d5b0a5190aa5c9f199e6628682272fdaa1e7acf9e95d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x24004850)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2)
ioctl$XFS_IOC_FSGETXATTRA(r4, 0x801c582d, &(0x7f0000001a00))
syz_open_dev$usbmon(&(0x7f0000001a40), 0x5, 0x88180)

0s ago: executing program 2 (id=180):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0)
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000015c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'LVM-syz', 0x0, '3\x00'}}})
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@loopback, @private=0xa010102}, 0x8)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000400))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$dvb_frontend(&(0x7f0000000280), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f00000002c0)={0x3, &(0x7f0000000300)=[{0x13, '\x00', @buffer={"ea705485f014e817921bbc929061bc98a75eb37cf90e68c98cee65532fae3c47", 0x20}}, {0x14, '\x00', @st={0x4, [{0x0, @uvalue=0x1ef}, {0x3, @uvalue=0xbba}, {0x1, @svalue=0x1}, {0x3}]}, 0x1113b388}, {0xd, '\x00', @buffer={"b589320bfdac9ee98da189162222078021b63c41bb902fa197c19b33528cef5a", 0x20}, 0x2}]})
sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002900010027bdf000fddbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x200c84c}, 0x20040000)
ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x180, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@snapshot={0x0, 0x10, 0x0, 0x48, 'snapshot\x00', {@ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, 'PO', 0x20, '128'}}]})

kernel console output (not intermixed with test programs):

[   28.920616][   T43] audit: type=1400 audit(1793150832.934:114): avc:  denied  { rlimitinh } for  pid=5679 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   28.920810][   T43] audit: type=1400 audit(1793150832.934:115): avc:  denied  { siginh } for  pid=5679 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '[localhost]:24747' (ED25519) to the list of known hosts.
[   30.673496][   T43] audit: type=1400 audit(1793150834.694:116): avc:  denied  { name_bind } for  pid=5690 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   32.252166][   T43] kauditd_printk_skb: 2 callbacks suppressed
[   32.252187][   T43] audit: type=1400 audit(1793150836.264:119): avc:  denied  { write } for  pid=5692 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   32.306296][   T43] audit: type=1400 audit(1793150836.324:120): avc:  denied  { write } for  pid=5695 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   32.737181][   T43] audit: type=1400 audit(1793150836.754:121): avc:  denied  { mounton } for  pid=5691 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   32.738872][   T43] audit: type=1400 audit(1793150836.754:122): avc:  denied  { mount } for  pid=5691 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   32.741016][ T5691] cgroup: Unknown subsys name 'net'
[   32.742258][   T43] audit: type=1400 audit(1793150836.754:123): avc:  denied  { unmount } for  pid=5691 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   32.865671][ T5691] cgroup: Unknown subsys name 'cpuset'
[   32.869433][ T5691] cgroup: Unknown subsys name 'rlimit'
[   32.923224][   T43] audit: type=1400 audit(1793150836.934:124): avc:  denied  { write } for  pid=5699 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   32.962595][   T43] audit: type=1400 audit(1793150836.974:125): avc:  denied  { write } for  pid=5702 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   33.008609][   T43] audit: type=1400 audit(1793150837.024:126): avc:  denied  { setattr } for  pid=5691 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   33.009154][   T43] audit: type=1400 audit(1793150837.024:127): avc:  denied  { create } for  pid=5691 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.009625][   T43] audit: type=1400 audit(1793150837.024:128): avc:  denied  { write } for  pid=5691 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.059641][ T5706] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   33.719977][ T5691] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   36.961194][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   36.961945][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   36.962124][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   36.964397][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   36.964811][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   36.965774][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   36.965785][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   36.966803][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   36.967665][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   36.968201][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   36.968300][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   36.969686][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   36.972231][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   36.972914][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   36.976886][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   36.985696][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   36.987601][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   36.988823][   T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   36.989664][   T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   36.990547][   T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   37.149412][ T5774] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   37.149650][ T5786] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   37.152000][ T5772] rxe_eth0 speed is unknown, defaulting to 1000
[   37.152800][ T5772] rxe_eth0 speed is unknown, defaulting to 1000
[   37.157738][ T5772] rxe_eth0 speed is unknown, defaulting to 1000
[   37.169802][ T5773] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   37.248889][ T5772] infiniband rxe0: set active
[   37.250018][ T5772] infiniband rxe0: added rxe_eth0
[   37.256424][   T50] rxe_eth0 speed is unknown, defaulting to 1000
[   37.260266][ T5772] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   37.260287][ T5772] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   37.260307][ T5772] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   37.275709][ T5772] RDS/IB: rxe0: added
[   37.279838][ T5772] smc: adding ib device rxe0 with port count 1
[   37.279917][ T5772] smc:    ib device rxe0 port 1 has no pnetid
[   37.297449][   T34] rxe_eth0 speed is unknown, defaulting to 1000
[   37.312966][ T5772] rxe_eth0 speed is unknown, defaulting to 1000
[   37.431112][ T5772] rxe_eth0 speed is unknown, defaulting to 1000
[   37.484453][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.484502][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.484649][ T5786] bridge_slave_0: entered allmulticast mode
[   37.485393][ T5786] bridge_slave_0: entered promiscuous mode
[   37.499723][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.499804][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.499862][ T5774] bridge_slave_0: entered allmulticast mode
[   37.500764][ T5774] bridge_slave_0: entered promiscuous mode
[   37.503919][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.504026][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.504117][ T5786] bridge_slave_1: entered allmulticast mode
[   37.505347][ T5786] bridge_slave_1: entered promiscuous mode
[   37.531721][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.531826][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.532110][ T5774] bridge_slave_1: entered allmulticast mode
[   37.533264][ T5774] bridge_slave_1: entered promiscuous mode
[   37.533888][ T5772] rxe_eth0 speed is unknown, defaulting to 1000
[   37.550334][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.550933][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.552060][ T5773] bridge_slave_0: entered allmulticast mode
[   37.553592][ T5773] bridge_slave_0: entered promiscuous mode
[   37.556107][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.556184][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.557327][ T5773] bridge_slave_1: entered allmulticast mode
[   37.558654][ T5773] bridge_slave_1: entered promiscuous mode
[   37.574490][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.596404][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.598409][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.599882][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.617410][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.625035][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.642799][ T5773] team0: Port device team_slave_0 added
[   37.649648][ T5786] team0: Port device team_slave_0 added
[   37.656809][ T5773] team0: Port device team_slave_1 added
[   37.663660][ T5786] team0: Port device team_slave_1 added
[   37.677355][ T5774] team0: Port device team_slave_0 added
[   37.685413][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.685423][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.685435][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.687429][ T5774] team0: Port device team_slave_1 added
[   37.687461][ T5772] rxe_eth0 speed is unknown, defaulting to 1000
[   37.687831][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.687839][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.687851][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.688529][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.688538][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.688554][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.690082][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.690091][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.690106][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.716947][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.716958][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.716970][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.718535][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.718546][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.718566][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.748732][ T5786] hsr_slave_0: entered promiscuous mode
[   37.749196][ T5786] hsr_slave_1: entered promiscuous mode
[   37.752249][ T5773] hsr_slave_0: entered promiscuous mode
[   37.752652][ T5773] hsr_slave_1: entered promiscuous mode
[   37.753284][ T5773] debugfs: 'hsr0' already exists in 'hsr'
[   37.753352][ T5773] Cannot create hsr debugfs directory
[   37.808696][ T5774] hsr_slave_0: entered promiscuous mode
[   37.809165][ T5774] hsr_slave_1: entered promiscuous mode
[   37.809458][ T5774] debugfs: 'hsr0' already exists in 'hsr'
[   37.809470][ T5774] Cannot create hsr debugfs directory
[   38.029240][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   38.032968][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   38.040774][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   38.045282][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   38.049581][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   38.052174][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   38.060561][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   38.062863][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   38.128806][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   38.132065][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   38.132762][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   38.137912][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   38.151612][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.151707][ T5786] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.152089][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.152263][ T5786] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.154936][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   38.157830][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   38.176059][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   38.178332][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   38.193582][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.193626][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.193683][ T5772] bridge_slave_0: entered allmulticast mode
[   38.194366][ T5772] bridge_slave_0: entered promiscuous mode
[   38.209357][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.209474][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.209568][ T5772] bridge_slave_1: entered allmulticast mode
[   38.210836][ T5772] bridge_slave_1: entered promiscuous mode
[   38.231245][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.245528][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.251317][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.251362][ T5773] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.251490][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.251533][ T5773] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.255247][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   38.259465][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   38.260055][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   38.263617][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   38.275117][ T5772] team0: Port device team_slave_0 added
[   38.277428][ T5772] team0: Port device team_slave_1 added
[   38.284484][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   38.288538][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   38.289146][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   38.291299][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   38.299158][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.299167][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.299179][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.300522][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.300530][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.300541][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.341201][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.341713][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.342848][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.345541][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.360916][ T5772] hsr_slave_0: entered promiscuous mode
[   38.361390][ T5772] hsr_slave_1: entered promiscuous mode
[   38.361688][ T5772] debugfs: 'hsr0' already exists in 'hsr'
[   38.361700][ T5772] Cannot create hsr debugfs directory
[   38.445324][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.497240][ T5786] 8021q: adding VLAN 0 to HW filter on device team0
[   38.508276][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.516467][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.516517][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.530916][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.530980][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.533631][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.535035][ T5773] 8021q: adding VLAN 0 to HW filter on device team0
[   38.551259][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.551303][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.554509][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   38.558717][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   38.559455][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   38.565098][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   38.565829][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   38.568171][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   38.575491][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.575547][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.578747][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   38.582657][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   38.595150][ T5774] 8021q: adding VLAN 0 to HW filter on device team0
[   38.613735][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.613785][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.635070][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.635116][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.673841][   T43] kauditd_printk_skb: 40 callbacks suppressed
[   38.673863][   T43] audit: type=1400 audit(1793150842.694:169): avc:  denied  { sys_module } for  pid=5786 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   38.687368][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.697863][ T5772] 8021q: adding VLAN 0 to HW filter on device team0
[   38.706315][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.706360][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.707047][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.707091][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.871122][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.890770][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.900370][ T5786] veth0_vlan: entered promiscuous mode
[   38.913733][ T5786] veth1_vlan: entered promiscuous mode
[   38.921596][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.931834][ T5773] veth0_vlan: entered promiscuous mode
[   38.944151][ T5786] veth0_macvtap: entered promiscuous mode
[   38.950721][ T5786] veth1_macvtap: entered promiscuous mode
[   38.953229][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.953488][ T5773] veth1_vlan: entered promiscuous mode
[   38.967104][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.977577][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.999314][ T5774] veth0_vlan: entered promiscuous mode
[   39.000785][ T5773] veth0_macvtap: entered promiscuous mode
[   39.003257][ T5867] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.019746][ T5772] veth0_vlan: entered promiscuous mode
[   39.021063][ T5774] veth1_vlan: entered promiscuous mode
[   39.021724][ T5773] veth1_macvtap: entered promiscuous mode
[   39.030749][ T5772] veth1_vlan: entered promiscuous mode
[   39.033672][ T5849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.043581][   T67] Bluetooth: hci3: command tx timeout
[   39.043907][ T5140] Bluetooth: hci0: command tx timeout
[   39.044209][ T5782] Bluetooth: hci1: command tx timeout
[   39.051861][ T5774] veth0_macvtap: entered promiscuous mode
[   39.053047][ T5782] Bluetooth: hci2: command tx timeout
[   39.063544][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.065041][ T5774] veth1_macvtap: entered promiscuous mode
[   39.069892][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.069903][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.073659][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.074547][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.098861][ T5772] veth0_macvtap: entered promiscuous mode
[   39.104967][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.104978][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.108048][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.108913][ T5772] veth1_macvtap: entered promiscuous mode
[   39.110852][   T43] audit: type=1400 audit(1793150843.124:170): avc:  denied  { mount } for  pid=5786 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   39.112590][   T43] audit: type=1400 audit(1793150843.124:171): avc:  denied  { mounton } for  pid=5786 comm="syz-executor" path="/syzkaller.wDfeMM/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   39.113561][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.113770][ T5867] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.113797][ T5867] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.113815][ T5867] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.115101][   T43] audit: type=1400 audit(1793150843.134:172): avc:  denied  { mount } for  pid=5786 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   39.120128][   T43] audit: type=1400 audit(1793150843.134:173): avc:  denied  { mounton } for  pid=5786 comm="syz-executor" path="/syzkaller.wDfeMM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   39.120155][   T43] audit: type=1400 audit(1793150843.134:174): avc:  denied  { mounton } for  pid=5786 comm="syz-executor" path="/syzkaller.wDfeMM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   39.125978][   T43] audit: type=1400 audit(1793150843.144:175): avc:  denied  { unmount } for  pid=5786 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   39.134508][   T43] audit: type=1400 audit(1793150843.154:176): avc:  denied  { mounton } for  pid=5786 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   39.135553][   T43] audit: type=1400 audit(1793150843.154:177): avc:  denied  { mount } for  pid=5786 comm="syz-executor" name="/" dev="gadgetfs" ino=9683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   39.171922][   T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.171937][   T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.190188][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.193004][ T5820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.193027][ T5820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.193045][ T5820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.193062][ T5820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.198214][   T43] audit: type=1400 audit(1793150843.214:178): avc:  denied  { mounton } for  pid=5786 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[   39.205601][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.216921][   T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.216933][   T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.218067][ T5786] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   39.218197][ T5820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.218227][ T5867] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.218250][ T5867] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.255758][   T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.255770][   T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.280005][   T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.280022][   T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.299706][   T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.299719][   T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.317952][   T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.317963][   T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.323362][ T5820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.323520][ T5820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.323539][ T5820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.409008][ T5948] netlink: 'syz.3.5': attribute type 1 has an invalid length.
[   39.417428][ T5953] netlink: 'syz.3.5': attribute type 1 has an invalid length.
[   39.462629][ T5959] Zero length message leads to an empty skb
[   39.481346][ T5958] bond1: Removing last arp target with arp_interval on
[   39.619242][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'.
[   39.730806][ T5974] bcache: register_bcache() error : failed to open device
[   39.733341][ T5974] iommufd_mock iommufd_mock0: Adding to iommu group 10
[   39.788616][ T5976] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   39.789061][ T5976] CIFS: Attempting to mount //127.0.0.1/test
[   39.792479][ T5976] CIFS: VFS: Error connecting to socket. Aborting operation.
[   39.792569][ T5976] CIFS: VFS: cifs_mount failed w/return code = -111
[   39.958454][ T5981] rdma_op ffff888058970a38 conn xmit_rdma 0000000000000000
[   40.018277][ T5985] ADFS-fs (nbd3): error: unable to read block 3, try 0
[   40.177316][ T5989] syz_tun: entered allmulticast mode
[   40.800907][ T5996] tipc: Started in network mode
[   40.800925][ T5996] tipc: Node identity e0000001, cluster identity 4711
[   40.800954][ T5996] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   40.872556][ T6008] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22'.
[   40.874410][ T6008] netlink: 9 bytes leftover after parsing attributes in process `syz.0.22'.
[   40.904421][ T6011] syzkaller0: entered promiscuous mode
[   40.904444][ T6011] syzkaller0: entered allmulticast mode
[   40.939823][ T6015] qnx4: unable to read the superblock
[   40.945716][ T6013] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[   40.954519][ T6013] futex_wake_op: syz.0.23 tries to shift op by 144; fix this program
[   40.964873][ T6017] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[   40.965665][ T6017] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[   40.968804][ T6017] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[   40.969378][ T6017] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[   40.969789][ T6017] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[   40.969838][ T6017] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[   40.970079][ T6017] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[   40.970121][ T6017] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[   40.970130][ T6017] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1)
[   41.007496][ T6023] netlink: 64 bytes leftover after parsing attributes in process `syz.3.28'.
[   41.070726][ T6029] SELinux: DCCP has been removed, pid=6029 comm=syz.0.30
[   41.076864][ T6029] Attempt to restore checkpoint with obsolete wellknown handles
[   41.133127][ T5782] Bluetooth: hci3: command tx timeout
[   41.154133][ T6035] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[   41.255630][ T6040] overlay: Unknown parameter 'smackfstransmute'
[   41.458399][ T5782] Bluetooth: hci2: command tx timeout
[   41.458433][ T5782] Bluetooth: hci1: command tx timeout
[   41.523089][ T5140] Bluetooth: hci0: command tx timeout
[   41.528109][ T6037] netlink: 16 bytes leftover after parsing attributes in process `syz.3.28'.
[   41.529164][ T6037] ip_tables: iptables: counters copy to user failed while replacing table
[   41.673308][ T6058] loop6: detected capacity change from 0 to 1
[   41.681838][ T6058] Dev loop6: unable to read RDB block 1
[   41.681871][ T6058]  loop6: unable to read partition table
[   41.682020][ T6058] loop6: partition table beyond EOD, truncated
[   41.682035][ T6058] loop_reread_partitions: partition scan of loop6 (ÿŸ¾‚³˜±Ä6�tPΪŔ±³×AÝÁ¬8ï*V^ñè3c) failed (rc=-5)
[   42.294860][ T6070] loop4: detected capacity change from 0 to 2640
[   42.298950][ T6070] Buffer I/O error on dev loop4, logical block 0, async page read
[   42.298974][ T6070] Buffer I/O error on dev loop4, logical block 0, async page read
[   42.298988][ T6070] Buffer I/O error on dev loop4, logical block 0, async page read
[   42.299002][ T6070] Buffer I/O error on dev loop4, logical block 0, async page read
[   42.299016][ T6070] Buffer I/O error on dev loop4, logical block 0, async page read
[   42.299039][ T6070] Buffer I/O error on dev loop4, logical block 0, async page read
[   42.299059][ T6070] Buffer I/O error on dev loop4, logical block 0, async page read
[   42.299072][ T6070] Buffer I/O error on dev loop4, logical block 0, async page read
[   42.299080][ T6070] ldm_validate_partition_table(): Disk read failed.
[   42.299092][ T6070] Buffer I/O error on dev loop4, logical block 0, async page read
[   42.299106][ T6070] Buffer I/O error on dev loop4, logical block 0, async page read
[   42.299127][ T6070] Dev loop4: unable to read RDB block 0
[   42.299254][ T6070]  loop4: unable to read partition table
[   42.299339][ T6070] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[   42.308863][ T6073] FAULT_INJECTION: forcing a failure.
[   42.308863][ T6073] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   42.308905][ T6073] CPU: 3 UID: 0 PID: 6073 Comm: syz.1.40 Not tainted syzkaller #0 PREEMPT(full) 
[   42.308924][ T6073] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   42.308934][ T6073] Call Trace:
[   42.308940][ T6073]  <TASK>
[   42.308948][ T6073]  dump_stack_lvl+0x100/0x190
[   42.308978][ T6073]  should_fail_ex.cold+0x5/0xa
[   42.309003][ T6073]  __kvm_read_guest_page+0x186/0x250
[   42.309028][ T6073]  kvm_fetch_guest_virt+0x10d/0x180
[   42.309054][ T6073]  __do_insn_fetch_bytes+0x5e2/0x7b0
[   42.309079][ T6073]  ? __pfx___do_insn_fetch_bytes+0x10/0x10
[   42.309103][ T6073]  ? emulator_get_segment+0x38d/0x440
[   42.309127][ T6073]  ? __pfx_emulator_get_segment+0x10/0x10
[   42.309152][ T6073]  x86_decode_insn+0x3ca/0x6da0
[   42.309171][ T6073]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   42.309197][ T6073]  ? vmx_segment_cache_test_set+0x151/0x400
[   42.309221][ T6073]  ? __pfx_x86_decode_insn+0x10/0x10
[   42.309237][ T6073]  ? vmx_cache_reg+0x535/0x700
[   42.309257][ T6073]  ? init_decode_cache+0xd/0x2b0
[   42.309272][ T6073]  ? init_emulate_ctxt+0x3fb/0x6b0
[   42.309292][ T6073]  ? __pfx_init_emulate_ctxt+0x10/0x10
[   42.309312][ T6073]  ? vmx_cache_reg+0x535/0x700
[   42.309327][ T6073]  ? init_emulate_ctxt+0x3fb/0x6b0
[   42.309348][ T6073]  ? __pfx_init_emulate_ctxt+0x10/0x10
[   42.309370][ T6073]  x86_emulate_instruction+0x10bc/0x1dd0
[   42.309397][ T6073]  kvm_mmu_page_fault+0xc81/0x1c10
[   42.309427][ T6073]  ? __pfx_kvm_mmu_page_fault+0x10/0x10
[   42.309449][ T6073]  ? __pfx_kvm_io_bus_write+0x10/0x10
[   42.309470][ T6073]  ? vmx_vcpu_run+0x1536/0x32d0
[   42.309500][ T6073]  handle_ept_misconfig+0x11e/0x3f0
[   42.309537][ T6073]  vmx_handle_exit+0x1216/0x14f0
[   42.309563][ T6073]  vt_handle_exit+0x1c/0x170
[   42.309585][ T6073]  vcpu_run+0x3623/0x60d0
[   42.309616][ T6073]  ? __pfx_vcpu_run+0x10/0x10
[   42.309642][ T6073]  ? complete_emulated_mmio+0x102/0x710
[   42.309665][ T6073]  ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0
[   42.309686][ T6073]  kvm_arch_vcpu_ioctl_run+0x1355/0x1de0
[   42.309709][ T6073]  ? lockdep_hardirqs_on+0x7d/0x110
[   42.309729][ T6073]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   42.309755][ T6073]  ? tomoyo_path_number_perm+0x188/0x580
[   42.309784][ T6073]  kvm_vcpu_ioctl+0x735/0x17b0
[   42.309808][ T6073]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   42.309831][ T6073]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   42.309857][ T6073]  ? do_vfs_ioctl+0x226/0x13e0
[   42.309874][ T6073]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   42.309886][ T6073]  ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530
[   42.309899][ T6073]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   42.309912][ T6073]  ? __fget_files+0x34/0x3d0
[   42.309934][ T6073]  ? selinux_file_ioctl+0x1e0/0x290
[   42.309944][ T6073]  ? selinux_file_ioctl+0x1e7/0x290
[   42.309955][ T6073]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   42.309971][ T6073]  __x64_sys_ioctl+0x18e/0x210
[   42.309986][ T6073]  do_syscall_64+0x123/0x790
[   42.309998][ T6073]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.310009][ T6073] RIP: 0033:0x7fdd1a99f559
[   42.310018][ T6073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   42.310031][ T6073] RSP: 002b:00007fdd1b91f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   42.310061][ T6073] RAX: ffffffffffffffda RBX: 00007fdd1ac25fa0 RCX: 00007fdd1a99f559
[   42.310071][ T6073] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   42.310080][ T6073] RBP: 00007fdd1b91f090 R08: 0000000000000000 R09: 0000000000000000
[   42.310089][ T6073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   42.310099][ T6073] R13: 00007fdd1ac26038 R14: 00007fdd1ac25fa0 R15: 00007ffe1de087d8
[   42.310121][ T6073]  </TASK>
[   42.520980][ T6080] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   42.521587][ T6080] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size.
[   42.528212][ T6080] loop7: detected capacity change from 0 to 7
[   42.529811][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   42.530314][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   42.531812][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   42.532005][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   42.532160][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   42.532440][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   42.532589][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   42.532666][ T6080] ldm_validate_partition_table(): Disk read failed.
[   42.532744][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   42.532917][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   42.535481][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   42.535835][ T6080] Dev loop7: unable to read RDB block 0
[   42.536498][ T6080]  loop7: unable to read partition table
[   42.536631][ T6080] loop7: partition table beyond EOD, truncated
[   42.536688][ T6080] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[   42.708953][ T6083] xt_MASQUERADE: bad MAP_IPS.
[   42.783605][ T6087] iommufd_mock iommufd_mock0: Adding to iommu group 10
[   43.117582][ T6101] block nbd1: shutting down sockets
[   43.165261][ T6102] FAULT_INJECTION: forcing a failure.
[   43.165261][ T6102] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   43.165300][ T6102] CPU: 3 UID: 0 PID: 6102 Comm: syz.0.49 Not tainted syzkaller #0 PREEMPT(full) 
[   43.165313][ T6102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   43.165319][ T6102] Call Trace:
[   43.165331][ T6102]  <TASK>
[   43.165336][ T6102]  dump_stack_lvl+0x100/0x190
[   43.165365][ T6102]  should_fail_ex.cold+0x5/0xa
[   43.165389][ T6102]  _copy_to_user+0x32/0xd0
[   43.165409][ T6102]  simple_read_from_buffer+0xcb/0x170
[   43.165426][ T6102]  proc_fail_nth_read+0x1af/0x230
[   43.165444][ T6102]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   43.165462][ T6102]  ? rw_verify_area+0xce/0x6d0
[   43.165474][ T6102]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   43.165490][ T6102]  vfs_read+0x1e4/0xb40
[   43.165504][ T6102]  ? lock_acquire+0x1d1/0x380
[   43.165518][ T6102]  ? __fget_files+0x34/0x3d0
[   43.165533][ T6102]  ? __pfx_vfs_read+0x10/0x10
[   43.165545][ T6102]  ? find_held_lock+0x2b/0x80
[   43.165556][ T6102]  ? __fget_files+0x215/0x3d0
[   43.165574][ T6102]  ? __fget_files+0x21f/0x3d0
[   43.165593][ T6102]  ksys_read+0x12a/0x250
[   43.165606][ T6102]  ? __pfx_ksys_read+0x10/0x10
[   43.165623][ T6102]  do_syscall_64+0x123/0x790
[   43.165640][ T6102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.165651][ T6102] RIP: 0033:0x7fa96275fd8e
[   43.165660][ T6102] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   43.165670][ T6102] RSP: 002b:00007fa9635b9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   43.165688][ T6102] RAX: ffffffffffffffda RBX: 00007fa9635ba6c0 RCX: 00007fa96275fd8e
[   43.165694][ T6102] RDX: 000000000000000f RSI: 00007fa9635ba0a0 RDI: 0000000000000006
[   43.165700][ T6102] RBP: 00007fa9635ba090 R08: 0000000000000000 R09: 0000000000000000
[   43.165706][ T6102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   43.165712][ T6102] R13: 00007fa962a26038 R14: 00007fa962a25fa0 R15: 00007ffe55f730e8
[   43.165726][ T6102]  </TASK>
[   43.389532][ T6115] Bluetooth: MGMT ver 1.23
[   43.398548][ T6115] capability: warning: `syz.0.53' uses 32-bit capabilities (legacy support in use)
[   43.525233][ T5140] Bluetooth: hci1: command tx timeout
[   43.525257][ T5140] Bluetooth: hci2: command tx timeout
[   43.604633][ T5782] Bluetooth: hci0: command tx timeout
[   43.725365][   T43] kauditd_printk_skb: 101 callbacks suppressed
[   43.725379][   T43] audit: type=1400 audit(1793150847.744:280): avc:  denied  { read write } for  pid=6124 comm="syz.0.57" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   43.725404][   T43] audit: type=1400 audit(1793150847.744:281): avc:  denied  { open } for  pid=6124 comm="syz.0.57" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   43.732248][   T43] audit: type=1400 audit(1793150847.744:282): avc:  denied  { ioctl } for  pid=6124 comm="syz.0.57" path="/dev/ppp" dev="devtmpfs" ino=729 ioctlcmd=0xc004743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   43.785692][ T6128] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   43.786862][ T6127] netlink: 'syz.2.58': attribute type 1 has an invalid length.
[   43.786872][ T6127] netlink: 72 bytes leftover after parsing attributes in process `syz.2.58'.
[   43.811185][ T6125] netlink: 36 bytes leftover after parsing attributes in process `syz.0.57'.
[   43.811199][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.57'.
[   43.811204][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.57'.
[   43.811210][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.57'.
[   43.842817][   T43] audit: type=1400 audit(1793150847.854:283): avc:  denied  { ioctl } for  pid=6131 comm="syz.2.59" path="socket:[12622]" dev="sockfs" ino=12622 ioctlcmd=0x8b29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   43.842862][ T6132] warning: `syz.2.59' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   43.918152][   T43] audit: type=1400 audit(1793150847.934:284): avc:  denied  { map } for  pid=6135 comm="syz.0.61" path="socket:[12634]" dev="sockfs" ino=12634 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   43.962449][ T6134] kvm: emulating exchange as write
[   43.965699][   T43] audit: type=1400 audit(1793150847.984:285): avc:  denied  { bind } for  pid=6138 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   43.970461][   T43] audit: type=1400 audit(1793150847.984:286): avc:  denied  { ioctl } for  pid=6138 comm="syz.0.62" path="socket:[12644]" dev="sockfs" ino=12644 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   43.971846][   T43] audit: type=1400 audit(1793150847.984:287): avc:  denied  { ioctl } for  pid=6138 comm="syz.0.62" path="socket:[12645]" dev="sockfs" ino=12645 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   44.129539][   T43] audit: type=1400 audit(1793150848.144:288): avc:  denied  { bind } for  pid=6148 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   44.130446][   T43] audit: type=1400 audit(1793150848.144:289): avc:  denied  { setopt } for  pid=6148 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   44.146125][ T6154] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[   44.385203][   T50] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   44.407374][ T6172] jffs2: notice: (6172) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   44.543164][   T50] usb 7-1: Using ep0 maxpacket: 8
[   44.544737][   T50] usb 7-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   44.546210][   T50] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[   44.546234][   T50] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   44.546250][   T50] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   44.546261][   T50] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   44.546272][   T50] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   44.546291][   T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.758809][   T50] usb 7-1: GET_CAPABILITIES returned 0
[   44.758848][   T50] usbtmc 7-1:16.0: can't read capabilities
[   44.893365][ T5782] Bluetooth: hci3: command tx timeout
[   44.961836][   T34] usb 7-1: USB disconnect, device number 2
[   45.076611][ T6196] __nla_validate_parse: 2 callbacks suppressed
[   45.076623][ T6196] netlink: 56 bytes leftover after parsing attributes in process `syz.1.79'.
[   45.143900][ T6201] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[   45.143917][ T6201] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   45.144578][ T6201] vhci_hcd vhci_hcd.0: Device attached
[   45.148877][ T6201] vhci_hcd vhci_hcd.0: port 0 already used
[   45.149668][ T6201] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   45.413895][   T10] usb 40-1: SetAddress Request (2) to port 0
[   45.413930][   T10] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd
[   45.423150][ T2557] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   45.590261][ T2557] usb 6-1: Using ep0 maxpacket: 16
[   45.595049][ T2557] usb 6-1: New USB device found: idVendor=0595, idProduct=4343, bcdDevice=6.74
[   45.598235][ T2557] usb 6-1: config 9 has an invalid interface number: 48 but max is 3
[   45.598257][ T2557] usb 6-1: config 9 has an invalid interface number: 95 but max is 3
[   45.598273][ T2557] usb 6-1: config 9 has an invalid interface number: 69 but max is 3
[   45.598289][ T2557] usb 6-1: config 9 has an invalid interface number: 241 but max is 3
[   45.598306][ T2557] usb 6-1: config 9 has an invalid interface number: 180 but max is 3
[   45.598339][ T2557] usb 6-1: config 9 has 5 interfaces, different from the descriptor's value: 4
[   45.598358][ T2557] usb 6-1: config 9 has no interface number 0
[   45.598371][ T2557] usb 6-1: config 9 has no interface number 1
[   45.598386][ T2557] usb 6-1: config 9 has no interface number 2
[   45.598398][ T2557] usb 6-1: config 9 has no interface number 3
[   45.598412][ T2557] usb 6-1: config 9 has no interface number 4
[   45.598473][ T2557] usb 6-1: config 9 interface 48 altsetting 5 endpoint 0xE has invalid maxpacket 927, setting to 64
[   45.598496][ T2557] usb 6-1: config 9 interface 48 altsetting 5 has a duplicate endpoint with address 0xD, skipping
[   45.598515][ T2557] usb 6-1: config 9 interface 48 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[   45.598532][ T2557] usb 6-1: config 9 interface 48 altsetting 5 bulk endpoint 0x2 has invalid maxpacket 1023
[   45.598583][ T2557] usb 6-1: config 9 interface 48 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[   45.598601][ T2557] usb 6-1: config 9 interface 48 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 32
[   45.598620][ T2557] usb 6-1: config 9 interface 48 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[   45.598636][ T2557] usb 6-1: config 9 interface 48 altsetting 5 has a duplicate endpoint with address 0x2, skipping
[   45.598653][ T2557] usb 6-1: config 9 interface 48 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[   45.598670][ T2557] usb 6-1: config 9 interface 48 altsetting 5 endpoint 0x9 has invalid maxpacket 1983, setting to 64
[   45.598691][ T2557] usb 6-1: config 9 interface 48 altsetting 5 has a duplicate endpoint with address 0xE, skipping
[   45.598709][ T2557] usb 6-1: config 9 interface 48 altsetting 5 has 13 endpoint descriptors, different from the interface descriptor's value: 15
[   45.598731][ T2557] usb 6-1: config 9 interface 95 altsetting 76 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[   45.598797][ T2557] usb 6-1: config 9 interface 69 altsetting 85 has an endpoint descriptor with address 0x9B, changing to 0x8B
[   45.598818][ T2557] usb 6-1: config 9 interface 69 altsetting 85 endpoint 0x8B has invalid maxpacket 1023, setting to 64
[   45.598839][ T2557] usb 6-1: config 9 interface 69 altsetting 85 has a duplicate endpoint with address 0x6, skipping
[   45.598858][ T2557] usb 6-1: config 9 interface 69 altsetting 85 has a duplicate endpoint with address 0xB, skipping
[   45.598876][ T2557] usb 6-1: config 9 interface 69 altsetting 85 has a duplicate endpoint with address 0x9, skipping
[   45.598901][ T2557] usb 6-1: config 9 interface 241 altsetting 0 has a duplicate endpoint with address 0x7, skipping
[   45.598918][ T2557] usb 6-1: config 9 interface 241 altsetting 0 has a duplicate endpoint with address 0x5, skipping
[   45.598935][ T2557] usb 6-1: config 9 interface 241 altsetting 0 has a duplicate endpoint with address 0xB, skipping
[   45.598952][ T2557] usb 6-1: config 9 interface 241 altsetting 0 has a duplicate endpoint with address 0x9, skipping
[   45.598969][ T2557] usb 6-1: config 9 interface 241 altsetting 0 has a duplicate endpoint with address 0x7, skipping
[   45.598986][ T2557] usb 6-1: config 9 interface 241 altsetting 0 has a duplicate endpoint with address 0x5, skipping
[   45.599004][ T2557] usb 6-1: config 9 interface 241 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   45.599021][ T2557] usb 6-1: config 9 interface 241 altsetting 0 has a duplicate endpoint with address 0x6, skipping
[   45.599039][ T2557] usb 6-1: config 9 interface 241 altsetting 0 has a duplicate endpoint with address 0xF, skipping
[   45.599056][ T2557] usb 6-1: config 9 interface 48 has no altsetting 0
[   45.599070][ T2557] usb 6-1: config 9 interface 95 has no altsetting 0
[   45.599084][ T2557] usb 6-1: config 9 interface 69 has no altsetting 0
[   45.599098][ T2557] usb 6-1: config 9 interface 180 has no altsetting 0
[   45.601927][ T2557] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.601943][ T2557] usb 6-1: Product: syz
[   45.601953][ T2557] usb 6-1: Manufacturer: syz
[   45.601964][ T2557] usb 6-1: SerialNumber: syz
[   45.611226][ T6201] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   45.611639][ T6201] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   45.612029][ T6201] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   45.761546][    C3] vxcan1: j1939_tp_rxtimer: 0xffff888056ab5800: rx timeout, send abort
[   45.772008][ T6225] bcache: register_bcache() error : failed to open device
[   45.781495][ T6225] syz.0.86: page allocation failure: order:9, mode:0x40cc0(GFP_KERNEL|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1
[   45.782284][ T6225] CPU: 1 UID: 0 PID: 6225 Comm: syz.0.86 Not tainted syzkaller #0 PREEMPT(full) 
[   45.782307][ T6225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   45.782319][ T6225] Call Trace:
[   45.782326][ T6225]  <TASK>
[   45.782334][ T6225]  dump_stack_lvl+0x100/0x190
[   45.782379][ T6225]  warn_alloc.cold+0x9e/0xb2
[   45.782401][ T6225]  ? __pfx_warn_alloc+0x10/0x10
[   45.782439][ T6225]  ? __pfx___might_resched+0x10/0x10
[   45.782461][ T6225]  ? lockdep_hardirqs_on+0x7d/0x110
[   45.782492][ T6225]  __alloc_frozen_pages_noprof+0x17ab/0x3190
[   45.782528][ T6225]  ? __page_table_check_zero+0x7a/0x410
[   45.782556][ T6225]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   45.782583][ T6225]  ? lock_acquire+0x1d1/0x380
[   45.782606][ T6225]  ? avc_has_perm_noaudit+0x56/0x470
[   45.782631][ T6225]  ? find_held_lock+0x2b/0x80
[   45.782656][ T6225]  ? avc_has_perm_noaudit+0x145/0x470
[   45.782683][ T6225]  ? avc_has_perm+0x135/0x1e0
[   45.782705][ T6225]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   45.782735][ T6225]  ? policy_nodemask+0xed/0x4f0
[   45.782765][ T6225]  alloc_pages_mpol+0x201/0x560
[   45.782799][ T6225]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   45.782844][ T6225]  ? selinux_key_permission+0x157/0x1d0
[   45.782876][ T6225]  ? __lock_acquire+0x5c0/0x1f40
[   45.782904][ T6225]  ___kmalloc_large_node+0x103/0x170
[   45.782934][ T6225]  __kmalloc_large_node_noprof+0x1c/0x70
[   45.782963][ T6225]  __kmalloc_noprof+0x5a3/0x840
[   45.782985][ T6225]  ? dns_resolver_preparse+0x639/0x9f0
[   45.783013][ T6225]  dns_resolver_preparse+0x639/0x9f0
[   45.783037][ T6225]  ? lock_acquire+0x1d1/0x380
[   45.783059][ T6225]  ? __key_create_or_update+0x127/0xe10
[   45.783077][ T6225]  ? __pfx_dns_resolver_preparse+0x10/0x10
[   45.783100][ T6225]  ? __pfx___might_resched+0x10/0x10
[   45.783119][ T6225]  ? avc_has_perm+0x135/0x1e0
[   45.783146][ T6225]  ? down_read+0x136/0x4c0
[   45.783167][ T6225]  ? __pfx_down_read+0x10/0x10
[   45.783191][ T6225]  ? __pfx_dns_resolver_preparse+0x10/0x10
[   45.783216][ T6225]  __key_create_or_update+0x3f6/0xe10
[   45.783239][ T6225]  ? __pfx___key_create_or_update+0x10/0x10
[   45.783258][ T6225]  ? lookup_user_key+0x58c/0x14f0
[   45.783288][ T6225]  ? __pfx_lookup_user_key+0x10/0x10
[   45.783319][ T6225]  ? lockdep_hardirqs_on+0x7d/0x110
[   45.783345][ T6225]  ? __pfx_keyring_search_iterator+0x10/0x10
[   45.783372][ T6225]  key_create_or_update+0x42/0x60
[   45.783395][ T6225]  __do_sys_add_key+0x2e8/0x460
[   45.783420][ T6225]  ? __pfx___do_sys_add_key+0x10/0x10
[   45.783453][ T6225]  do_syscall_64+0x123/0x790
[   45.783474][ T6225]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.783493][ T6225] RIP: 0033:0x7fa96279f559
[   45.783509][ T6225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   45.783526][ T6225] RSP: 002b:00007fa9635ba028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   45.783557][ T6225] RAX: ffffffffffffffda RBX: 00007fa962a25fa0 RCX: 00007fa96279f559
[   45.783569][ T6225] RDX: 0000200000000080 RSI: 0000200000000400 RDI: 00002000000003c0
[   45.783582][ T6225] RBP: 00007fa962836b20 R08: 0000000006df0c4d R09: 0000000000000000
[   45.783593][ T6225] R10: 00000000000fffff R11: 0000000000000246 R12: 0000000000000000
[   45.783605][ T6225] R13: 00007fa962a26038 R14: 00007fa962a25fa0 R15: 00007ffe55f730e8
[   45.783632][ T6225]  </TASK>
[   45.787726][ T6225] Mem-Info:
[   45.787738][ T6225] active_anon:18992 inactive_anon:2991 isolated_anon:0
[   45.787738][ T6225]  active_file:4433 inactive_file:14162 isolated_file:0
[   45.787738][ T6225]  unevictable:1000 dirty:81 writeback:0
[   45.787738][ T6225]  slab_reclaimable:9201 slab_unreclaimable:68041
[   45.787738][ T6225]  mapped:22456 shmem:17605 pagetables:3393
[   45.787738][ T6225]  sec_pagetables:301 bounce:0
[   45.787738][ T6225]  kernel_misc_reclaimable:0
[   45.787738][ T6225]  free:117405 free_pcp:446 free_cma:0
[   45.787794][ T6225] Node 0 active_anon:65460kB inactive_anon:11716kB active_file:14080kB inactive_file:17920kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:88428kB dirty:292kB writeback:0kB shmem:58396kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13056kB pagetables:4232kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   45.787842][ T6225] Node 1 active_anon:10508kB inactive_anon:248kB active_file:3652kB inactive_file:38728kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:1396kB dirty:32kB writeback:0kB shmem:12024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:192kB pagetables:9340kB sec_pagetables:8kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   45.787891][ T6225] Node 0 DMA free:5772kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   45.787942][ T6225] lowmem_reserve[]: 0 1202 1202 1202 1202
[   45.787975][ T6225] Node 0 DMA32 free:68860kB boost:0kB min:27068kB low:33832kB high:40596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:65460kB inactive_anon:11716kB active_file:14080kB inactive_file:17912kB unevictable:2000kB writepending:292kB zspages:48kB present:2080628kB managed:1231124kB mlocked:0kB bounce:0kB free_pcp:896kB local_pcp:436kB free_cma:0kB
[   45.788029][ T6225] lowmem_reserve[]: 0 0 0 0 0
[   45.788060][ T6225] Node 1 Normal free:394988kB boost:0kB min:40164kB low:50204kB high:60244kB reserved_highatomic:0kB free_highatomic:0kB active_anon:10508kB inactive_anon:248kB active_file:3652kB inactive_file:38728kB unevictable:2000kB writepending:32kB zspages:3680kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:888kB local_pcp:0kB free_cma:0kB
[   45.788112][ T6225] lowmem_reserve[]: 0 0 0 0 0
[   45.788143][ T6225] Node 0 DMA: 7*4kB (U) 10*8kB (UM) 12*16kB (UM) 11*32kB (UM) 4*64kB (UM) 4*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 1*2048kB (U) 0*4096kB = 5772kB
[   45.788309][ T6225] Node 0 DMA32: 688*4kB (UME) 631*8kB (UME) 627*16kB (UME) 701*32kB (UME) 214*64kB (UME) 64*128kB (UME) 26*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 68808kB
[   45.788434][ T6225] Node 1 Normal: 255*4kB (UM) 293*8kB (UME) 277*16kB (UME) 113*32kB (UME) 260*64kB (UME) 256*128kB (UME) 220*256kB (UM) 203*512kB (UM) 170*1024kB (UM) 0*2048kB 0*4096kB = 395156kB
[   45.788565][ T6225] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   45.788579][ T6225] Node 0 hugepages_total=165 hugepages_free=165 hugepages_surp=0 hugepages_size=2048kB
[   45.788593][ T6225] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   45.788606][ T6225] Node 1 hugepages_total=569 hugepages_free=569 hugepages_surp=0 hugepages_size=2048kB
[   45.788620][ T6225] 36428 total pagecache pages
[   45.788626][ T6225] 261 pages in swap cache
[   45.788632][ T6225] Free swap  = 114240kB
[   45.788668][ T6225] Total swap = 124996kB
[   45.788675][ T6225] 1048443 pages RAM
[   45.788681][ T6225] 0 pages HighMem/MovableOnly
[   45.788687][ T6225] 291352 pages reserved
[   45.788693][ T6225] 0 pages cma reserved
[   45.823702][ T6227] batman_adv: batadv0: Adding interface: syzkaller0
[   45.823718][ T6227] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   45.823741][ T6227] batman_adv: batadv0: Interface activated: syzkaller0
[   45.828560][ T6227] FAULT_INJECTION: forcing a failure.
[   45.828560][ T6227] name failslab, interval 1, probability 0, space 0, times 1
[   45.828591][ T6227] CPU: 3 UID: 0 PID: 6227 Comm: syz.2.87 Not tainted syzkaller #0 PREEMPT(full) 
[   45.828603][ T6227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   45.828609][ T6227] Call Trace:
[   45.828613][ T6227]  <TASK>
[   45.828617][ T6227]  dump_stack_lvl+0x100/0x190
[   45.828657][ T6227]  should_fail_ex.cold+0x5/0xa
[   45.828676][ T6227]  should_failslab+0xc2/0x120
[   45.828692][ T6227]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[   45.828706][ T6227]  ? __d_alloc+0x34/0xad0
[   45.828718][ T6227]  __d_alloc+0x34/0xad0
[   45.828730][ T6227]  __d_alloc_parallel+0x105/0x15e0
[   45.828748][ T6227]  ? lock_acquire+0x1d1/0x380
[   45.828762][ T6227]  ? lookup_slow+0x41/0x80
[   45.828773][ T6227]  ? __pfx___d_alloc_parallel+0x10/0x10
[   45.828787][ T6227]  ? __pfx___might_resched+0x10/0x10
[   45.828799][ T6227]  ? find_held_lock+0x2b/0x80
[   45.828811][ T6227]  ? down_read+0x136/0x4c0
[   45.828824][ T6227]  ? __pfx_down_read+0x10/0x10
[   45.828840][ T6227]  __lookup_slow+0x98/0x320
[   45.828853][ T6227]  lookup_slow+0x54/0x80
[   45.828865][ T6227]  link_path_walk+0x171c/0x1cc0
[   45.828884][ T6227]  path_openat+0x1a7/0x23f0
[   45.828917][ T6227]  ? __pfx_path_openat+0x10/0x10
[   45.828937][ T6227]  do_file_open+0x20e/0x430
[   45.828955][ T6227]  ? __pfx_do_file_open+0x10/0x10
[   45.828976][ T6227]  ? __pfx_kfree_link+0x10/0x10
[   45.828995][ T6227]  ? _raw_spin_unlock+0x28/0x50
[   45.829010][ T6227]  ? alloc_fd+0x471/0x7a0
[   45.829030][ T6227]  do_sys_openat2+0x163/0x1d0
[   45.829041][ T6227]  ? __pfx_do_sys_openat2+0x10/0x10
[   45.829052][ T6227]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   45.829067][ T6227]  __x64_sys_openat+0x12d/0x210
[   45.829078][ T6227]  ? __pfx___x64_sys_openat+0x10/0x10
[   45.829094][ T6227]  do_syscall_64+0x123/0x790
[   45.829106][ T6227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.829117][ T6227] RIP: 0033:0x7fdaf215fd8e
[   45.829127][ T6227] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   45.829137][ T6227] RSP: 002b:00007fdaf2fc5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   45.829148][ T6227] RAX: ffffffffffffffda RBX: 00007fdaf2fc66c0 RCX: 00007fdaf215fd8e
[   45.829158][ T6227] RDX: 0000000000000002 RSI: 00007fdaf2fc5f90 RDI: ffffffffffffff9c
[   45.829167][ T6227] RBP: 00007fdaf2236b20 R08: 0000000000000000 R09: 0000000000000000
[   45.829176][ T6227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   45.829184][ T6227] R13: 00007fdaf2426038 R14: 00007fdaf2425fa0 R15: 00007ffcef34c2e8
[   45.829208][ T6227]  </TASK>
[   45.832020][ T6230] capability: warning: `syz.0.88' uses deprecated v2 capabilities in a way that may be insecure
[   45.837358][ T6228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.87'.
[   45.841856][ T6202] vhci_hcd: connection reset by peer
[   45.843400][ T5849] vhci_hcd vhci_hcd.1: stop threads
[   45.843613][ T5849] vhci_hcd vhci_hcd.1: release socket
[   45.849369][ T5849] vhci_hcd vhci_hcd.1: disconnect device
[   45.850699][ T2557] usb-storage 6-1:9.48: USB Mass Storage device detected
[   45.938884][ T2557] usb-storage 6-1:9.95: USB Mass Storage device detected
[   45.985079][ T6226] batman_adv: batadv0: Interface deactivated: syzkaller0
[   46.010853][ T6226] batman_adv: batadv0: Removing interface: syzkaller0
[   46.042525][ T6241] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   46.042579][ T6241] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   46.054716][ T2557] usb-storage 6-1:9.69: USB Mass Storage device detected
[   46.086253][ T6241] nvme nvme0: rdma_resolve_addr failed (-99).
[   46.170411][ T2557] usb-storage 6-1:9.241: USB Mass Storage device detected
[   46.262263][    C3] vxcan1: j1939_tp_rxtimer: 0xffff888056ab5800: abort rx timeout. Force session deactivation
[   46.292505][ T2557] usb-storage 6-1:9.180: USB Mass Storage device detected
[   46.405156][ T2557] usb 6-1: USB disconnect, device number 2
[   46.512528][ T6261] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6261 comm=syz.3.91
[   46.516229][ T6261] netlink: 80 bytes leftover after parsing attributes in process `syz.3.91'.
[   46.570584][ T6264] bond2: invalid ARP target 0.0.0.0 specified for addition
[   46.570599][ T6264] bond2: option arp_ip_target: invalid value (0)
[   46.573608][ T6264] bond2 (unregistering): Released all slaves
[   46.837602][ T6276] tmpfs: Unknown parameter ''
[   47.113806][ T6297] netlink: 108 bytes leftover after parsing attributes in process `syz.3.102'.
[   47.118520][ T6297] netlink: 108 bytes leftover after parsing attributes in process `syz.3.102'.
[   47.118537][ T6297] netlink: 84 bytes leftover after parsing attributes in process `syz.3.102'.
[   47.137412][ T6294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.101'.
[   47.185413][ T5847] bridge0: entered promiscuous mode
[   47.899031][ T2557] rxe_eth0 speed is unknown, defaulting to 1000
[   47.925962][ T6341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.108'.
[   47.942199][ T6341] syzkaller1: entered promiscuous mode
[   47.942219][ T6341] syzkaller1: entered allmulticast mode
[   48.748692][   T43] kauditd_printk_skb: 109 callbacks suppressed
[   48.748717][   T43] audit: type=1400 audit(1793150852.764:399): avc:  denied  { write } for  pid=6375 comm="syz.3.115" name="kcm" dev="proc" ino=4026533152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   48.750606][   T43] audit: type=1400 audit(1793150852.764:400): avc:  denied  { create } for  pid=6375 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   48.751261][   T43] audit: type=1400 audit(1793150852.764:401): avc:  denied  { setopt } for  pid=6375 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   48.751501][   T43] audit: type=1400 audit(1793150852.764:402): avc:  denied  { bind } for  pid=6375 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   48.751783][   T43] audit: type=1400 audit(1793150852.764:403): avc:  denied  { name_bind } for  pid=6375 comm="syz.3.115" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   48.751939][   T43] audit: type=1400 audit(1793150852.764:404): avc:  denied  { node_bind } for  pid=6375 comm="syz.3.115" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[   48.753631][   T43] audit: type=1400 audit(1793150852.774:405): avc:  denied  { write } for  pid=6375 comm="syz.3.115" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   48.753673][   T43] audit: type=1400 audit(1793150852.774:406): avc:  denied  { connect } for  pid=6375 comm="syz.3.115" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   48.753725][   T43] audit: type=1400 audit(1793150852.774:407): avc:  denied  { name_connect } for  pid=6375 comm="syz.3.115" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   48.809015][   T43] audit: type=1400 audit(1793150852.824:408): avc:  denied  { search } for  pid=6378 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   48.832107][ T6381] =======================================================
[   48.832107][ T6381] WARNING: The mand mount option has been deprecated and
[   48.832107][ T6381]          and is ignored by this kernel. Remove the mand
[   48.832107][ T6381]          option from the mount to silence this warning.
[   48.832107][ T6381] =======================================================
[   49.163716][ T6410] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   49.163841][ T6410] block device autoloading is deprecated and will be removed.
[   49.285495][ T6418] smbdirect: ib_dev[rxe0] renamed to [syz0]
[   49.325599][ T6417] md/raid10:md0: active with 1 out of 3 devices
[   49.326612][ T6417] md0: detected capacity change from 0 to 3840
[   49.334584][ T6410] md: invalid raid superblock magic on ram1
[   49.334597][ T6410] md: ram1 does not have a valid v0.90 superblock, not importing!
[   49.334660][ T6410] md: md_import_device returned -22
[   49.517013][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'.
[   49.594003][ T6428] MTD: Attempt to mount non-MTD device "/dev/sr0"
[   49.599325][ T6428] /dev/sr0: Can't open blockdev
[   49.637744][ T6430] input: syz0 as /devices/virtual/input/input6
[   49.819683][ T6430] device-mapper: table: 248:1: crypt: Device lookup failed (-EBUSY)
[   49.819700][ T6430] device-mapper: ioctl: error adding target to table
[   49.925216][ T6442] netlink: 80 bytes leftover after parsing attributes in process `syz.0.128'.
[   49.925235][ T6442] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   50.483391][   T10] usb 40-1: device descriptor read/8, error -110
[   50.696385][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.135'.
[   50.873860][   T10] usb usb40-port1: attempt power cycle
[   51.456321][   T10] usb usb40-port1: unable to enumerate USB device
[   51.924753][ T6481] loop7: detected capacity change from 0 to 7
[   51.925775][ T6481] Dev loop7: unable to read RDB block 7
[   51.925799][ T6481]  loop7: unable to read partition table
[   51.925907][ T6481] loop7: partition table beyond EOD, truncated
[   51.925916][ T6481] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5)
[   51.929571][ T6481] veth0_vlan: entered allmulticast mode
[   53.784576][   T43] kauditd_printk_skb: 110 callbacks suppressed
[   53.784589][   T43] audit: type=1400 audit(1793150857.804:519): avc:  denied  { read write } for  pid=6480 comm="syz.3.140" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   53.784632][   T43] audit: type=1400 audit(1793150857.804:520): avc:  denied  { open } for  pid=6480 comm="syz.3.140" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   53.785276][   T43] audit: type=1400 audit(1793150857.804:521): avc:  denied  { write } for  pid=6480 comm="syz.3.140" name="comedi2" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   55.120824][ T6480] veth0_vlan: left allmulticast mode
[   55.231838][ T6495] overlayfs: conflicting options: userxattr,redirect_dir=on
[   55.295156][ T6501] Driver unsupported XDP return value 0 on prog  (id 28) dev N/A, expect packet loss!
[   55.317175][   T43] audit: type=1400 audit(1793150859.334:522): avc:  denied  { write } for  pid=6499 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   55.330952][ T6506] netlink: 108 bytes leftover after parsing attributes in process `syz.2.147'.
[   55.331152][ T6506] netlink: 108 bytes leftover after parsing attributes in process `syz.2.147'.
[   55.331161][ T6506] netlink: 84 bytes leftover after parsing attributes in process `syz.2.147'.
[   55.347698][   T43] audit: type=1400 audit(1793150859.364:523): avc:  denied  { mount } for  pid=6504 comm="syz.2.147" name="/" dev="9p" ino=71827863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   55.496526][   T43] audit: type=1400 audit(1793150859.514:524): avc:  denied  { create } for  pid=6512 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   55.562074][   T43] audit: type=1400 audit(1793150859.574:525): avc:  denied  { create } for  pid=6522 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[   55.565613][   T43] audit: type=1400 audit(1793150859.574:526): avc:  denied  { write } for  pid=6522 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[   55.600685][   T43] audit: type=1400 audit(1793150859.614:527): avc:  denied  { listen } for  pid=6526 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   55.601211][   T43] audit: type=1400 audit(1793150859.614:528): avc:  denied  { accept } for  pid=6526 comm="syz.3.153" lport=42991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   55.676584][ T6530] Could not find key with description: [syzlecryptfs_fne]
[   55.676627][ T6530] process_request_key_err: No key
[   55.676634][ T6530] Could not find valid key in user session keyring for sig specified in mount option: [syzlecryptfs_fne]
[   55.676643][ T6530] One or more global auth toks could not properly register; rc = [-2]
[   55.676674][ T6530] Error validating options; rc = [-2]
[   55.813874][   T52] IPVS: starting estimator thread 0...
[   55.819265][ T6538] netlink: 'syz.1.156': attribute type 4 has an invalid length.
[   55.822252][ T6539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65526 sclass=netlink_route_socket pid=6539 comm=syz.1.156
[   55.903024][ T6544] IPVS: using max 24 ests per chain, 57600 per kthread
[   56.597563][ T6549] tipc: Started in network mode
[   56.597588][ T6549] tipc: Node identity e0000001, cluster identity 4711
[   56.597659][ T6549] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   56.680088][ T6562] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.681644][ T6562] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.789231][ T6568] ip_tables: iptables: counters copy to user failed while replacing table
[   56.989684][   T34] logitech-hidpp-device 0003:046D:C082.0002: hidraw1: USB HID v0.04 Device [syz0] on syz0
[   57.031601][ T6579] syz.0.167 uses obsolete (PF_INET,SOCK_PACKET)
[   57.049863][ T6575] fido_id[6575]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   57.051852][ T6581] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   57.055966][ T6583] netlink: 'syz.2.169': attribute type 6 has an invalid length.
[   57.055980][ T6583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.169'.
[   57.219882][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'.
[   57.219896][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.171'.
[   57.609345][ T6608] netlink: '(\': attribute type 12 has an invalid length.
[   57.745201][ T6618] futex_wake_op: syz.3.178 tries to shift op by -1; fix this program
[   57.863572][ T6621] ==================================================================
[   57.863581][ T6621] BUG: KASAN: slab-use-after-free in snapshot_ctr+0x1c20/0x1fd0
[   57.863610][ T6621] Read of size 8 at addr ffff888058c5ee18 by task syz.2.180/6621
[   57.863619][ T6621] 
[   57.863634][ T6621] CPU: 3 UID: 0 PID: 6621 Comm: syz.2.180 Not tainted syzkaller #0 PREEMPT(full) 
[   57.863647][ T6621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   57.863655][ T6621] Call Trace:
[   57.863660][ T6621]  <TASK>
[   57.863665][ T6621]  dump_stack_lvl+0x100/0x190
[   57.863683][ T6621]  print_report+0x13d/0x4b0
[   57.863699][ T6621]  ? __virt_addr_valid+0x239/0x430
[   57.863712][ T6621]  ? snapshot_ctr+0x1c20/0x1fd0
[   57.863727][ T6621]  kasan_report+0xdf/0x1c0
[   57.863747][ T6621]  ? snapshot_ctr+0x1c20/0x1fd0
[   57.863765][ T6621]  snapshot_ctr+0x1c20/0x1fd0
[   57.863781][ T6621]  ? kasan_save_track+0x14/0x30
[   57.863794][ T6621]  ? __pfx_snapshot_ctr+0x10/0x10
[   57.863809][ T6621]  ? dm_split_args+0xc1/0x570
[   57.863821][ T6621]  ? rcu_is_watching+0x13/0xc0
[   57.863832][ T6621]  ? dm_split_args+0xc1/0x570
[   57.863841][ T6621]  ? kfree+0x1e5/0x6d0
[   57.863851][ T6621]  ? skip_spaces+0xee/0x130
[   57.863866][ T6621]  dm_table_add_target+0x58b/0xee0
[   57.863878][ T6621]  ? __pfx_dm_table_add_target+0x10/0x10
[   57.863889][ T6621]  ? dm_table_create+0x2d3/0x3d0
[   57.863920][ T6621]  table_load+0x3b9/0x7b0
[   57.863938][ T6621]  ? __pfx_table_load+0x10/0x10
[   57.863954][ T6621]  ? __might_fault+0xc5/0x140
[   57.863976][ T6621]  ? __might_fault+0xc5/0x140
[   57.864002][ T6621]  ctl_ioctl+0x4d2/0xcc0
[   57.864017][ T6621]  ? __pfx_table_load+0x10/0x10
[   57.864032][ T6621]  ? __pfx_ctl_ioctl+0x10/0x10
[   57.864052][ T6621]  ? selinux_file_ioctl+0x1e0/0x290
[   57.864064][ T6621]  dm_ctl_ioctl+0x22/0x30
[   57.864078][ T6621]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[   57.864091][ T6621]  __x64_sys_ioctl+0x18e/0x210
[   57.864120][ T6621]  do_syscall_64+0x123/0x790
[   57.864136][ T6621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.864148][ T6621] RIP: 0033:0x7fdaf219f559
[   57.864157][ T6621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.864168][ T6621] RSP: 002b:00007fdaf2fc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   57.864187][ T6621] RAX: ffffffffffffffda RBX: 00007fdaf2425fa0 RCX: 00007fdaf219f559
[   57.864195][ T6621] RDX: 0000200000000000 RSI: 00000000c138fd09 RDI: 0000000000000003
[   57.864202][ T6621] RBP: 00007fdaf2236b20 R08: 0000000000000000 R09: 0000000000000000
[   57.864208][ T6621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   57.864215][ T6621] R13: 00007fdaf2426038 R14: 00007fdaf2425fa0 R15: 00007ffcef34c2e8
[   57.864226][ T6621]  </TASK>
[   57.864230][ T6621] 
[   57.864232][ T6621] Allocated by task 6621:
[   57.864238][ T6621]  kasan_save_stack+0x30/0x50
[   57.864252][ T6621]  kasan_save_track+0x14/0x30
[   57.864264][ T6621]  __kasan_kmalloc+0xaa/0xb0
[   57.864276][ T6621]  __kmalloc_cache_node_noprof+0x30c/0x710
[   57.864289][ T6621]  dm_get_table_device+0x2fc/0x820
[   57.864301][ T6621]  dm_get_device+0x525/0x7e0
[   57.864309][ T6621]  snapshot_ctr+0x201/0x1fd0
[   57.864325][ T6621]  dm_table_add_target+0x58b/0xee0
[   57.864335][ T6621]  table_load+0x3b9/0x7b0
[   57.864348][ T6621]  ctl_ioctl+0x4d2/0xcc0
[   57.864360][ T6621]  dm_ctl_ioctl+0x22/0x30
[   57.864373][ T6621]  __x64_sys_ioctl+0x18e/0x210
[   57.864384][ T6621]  do_syscall_64+0x123/0x790
[   57.864393][ T6621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.864403][ T6621] 
[   57.864405][ T6621] Freed by task 6621:
[   57.864410][ T6621]  kasan_save_stack+0x30/0x50
[   57.864423][ T6621]  kasan_save_track+0x14/0x30
[   57.864435][ T6621]  kasan_save_free_info+0x3b/0x70
[   57.864445][ T6621]  __kasan_slab_free+0x5f/0x80
[   57.864458][ T6621]  kfree+0x22b/0x6d0
[   57.864465][ T6621]  dm_put_table_device+0x2bf/0x380
[   57.864478][ T6621]  dm_get_device+0x3f1/0x7e0
[   57.864486][ T6621]  snapshot_ctr+0x326/0x1fd0
[   57.864499][ T6621]  dm_table_add_target+0x58b/0xee0
[   57.864508][ T6621]  table_load+0x3b9/0x7b0
[   57.864522][ T6621]  ctl_ioctl+0x4d2/0xcc0
[   57.864534][ T6621]  dm_ctl_ioctl+0x22/0x30
[   57.864546][ T6621]  __x64_sys_ioctl+0x18e/0x210
[   57.864557][ T6621]  do_syscall_64+0x123/0x790
[   57.864565][ T6621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.864574][ T6621] 
[   57.864576][ T6621] The buggy address belongs to the object at ffff888058c5ee00
[   57.864576][ T6621]  which belongs to the cache kmalloc-96 of size 96
[   57.864607][ T6621] The buggy address is located 24 bytes inside of
[   57.864607][ T6621]  freed 96-byte region [ffff888058c5ee00, ffff888058c5ee60)
[   57.864618][ T6621] 
[   57.864620][ T6621] The buggy address belongs to the physical page:
[   57.864626][ T6621] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58c5e
[   57.864636][ T6621] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   57.864645][ T6621] page_type: f5(slab)
[   57.864654][ T6621] raw: 00fff00000000000 ffff88801d442280 dead000000000100 dead000000000122
[   57.864664][ T6621] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000
[   57.864670][ T6621] page dumped because: kasan: bad access detected
[   57.864675][ T6621] page_owner tracks the page as allocated
[   57.864678][ T6621] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 95, tgid 95 (kworker/u33:5), ts 39844490628
[   57.864693][ T6621]  post_alloc_hook+0xfd/0x120
[   57.864709][ T6621]  get_page_from_freelist+0x1113/0x35e0
[   57.864719][ T6621]  __alloc_frozen_pages_noprof+0x2f6/0x3190
[   57.864730][ T6621]  new_slab+0xb1/0x6d0
[   57.864739][ T6621]  refill_objects+0xe3/0x410
[   57.864748][ T6621]  __pcs_replace_empty_main+0x35e/0x650
[   57.864756][ T6621]  __kmalloc_noprof+0x677/0x840
[   57.864767][ T6621]  cfg80211_inform_single_bss_data+0x557/0x1dc0
[   57.864782][ T6621]  cfg80211_inform_bss_data+0x230/0x37c0
[   57.864796][ T6621]  cfg80211_inform_bss_frame_data+0x449/0xa40
[   57.864811][ T6621]  ieee80211_bss_info_update+0x310/0xa90
[   57.864822][ T6621]  ieee80211_ibss_rx_queued_mgmt+0xe0b/0x1c70
[   57.864832][ T6621]  ieee80211_iface_work+0xa91/0x1010
[   57.864843][ T6621]  cfg80211_wiphy_work+0x2b7/0x550
[   57.864857][ T6621]  process_one_work+0xac7/0x1b10
[   57.864866][ T6621]  worker_thread+0x5ef/0xe50
[   57.864875][ T6621] page last free pid 117 tgid 117 ts 39693225747 stack trace:
[   57.864881][ T6621]  __free_frozen_pages+0x7b4/0x1110
[   57.864895][ T6621]  tlb_remove_table_rcu+0x2cf/0x380
[   57.864908][ T6621]  rcu_core+0x5f0/0x1220
[   57.864922][ T6621]  handle_softirqs+0x216/0xa20
[   57.864930][ T6621]  __irq_exit_rcu+0x178/0x220
[   57.864939][ T6621]  irq_exit_rcu+0x9/0x30
[   57.864948][ T6621]  sysvec_apic_timer_interrupt+0xa3/0xc0
[   57.864962][ T6621]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   57.864973][ T6621] 
[   57.864975][ T6621] Memory state around the buggy address:
[   57.864980][ T6621]  ffff888058c5ed00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[   57.864986][ T6621]  ffff888058c5ed80: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[   57.864993][ T6621] >ffff888058c5ee00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[   57.864997][ T6621]                             ^
[   57.865002][ T6621]  ffff888058c5ee80: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc
[   57.865009][ T6621]  ffff888058c5ef00: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc
[   57.865014][ T6621] ==================================================================
[   57.867267][ T6621] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   58.089292][ T6621] CPU: 3 UID: 0 PID: 6621 Comm: syz.2.180 Not tainted syzkaller #0 PREEMPT(full) 
[   58.092088][ T6621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   58.095171][ T6621] Call Trace:
[   58.096217][ T6621]  <TASK>
[   58.097163][ T6621]  dump_stack_lvl+0x100/0x190
[   58.098644][ T6621]  vpanic+0x553/0x970
[   58.099890][ T6621]  ? __pfx_vpanic+0x10/0x10
[   58.101262][ T6621]  ? mark_held_locks+0x40/0x70
[   58.102738][ T6621]  ? snapshot_ctr+0x1c20/0x1fd0
[   58.104223][ T6621]  panic+0xd1/0xe0
[   58.105694][ T6621]  ? __pfx_panic+0x10/0x10
[   58.107253][ T6621]  ? snapshot_ctr+0x1c20/0x1fd0
[   58.108726][ T6621]  ? preempt_schedule+0x57/0xd0
[   58.110173][ T6621]  check_panic_on_warn.cold+0x19/0x34
[   58.111781][ T6621]  end_report.part.0+0x3a/0x90
[   58.113271][ T6621]  kasan_report.cold+0xe/0x18
[   58.114695][ T6621]  ? snapshot_ctr+0x1c20/0x1fd0
[   58.116220][ T6621]  snapshot_ctr+0x1c20/0x1fd0
[   58.117710][ T6621]  ? kasan_save_track+0x14/0x30
[   58.119228][ T6621]  ? __pfx_snapshot_ctr+0x10/0x10
[   58.120809][ T6621]  ? dm_split_args+0xc1/0x570
[   58.122299][ T6621]  ? rcu_is_watching+0x13/0xc0
[   58.123804][ T6621]  ? dm_split_args+0xc1/0x570
[   58.125289][ T6621]  ? kfree+0x1e5/0x6d0
[   58.126567][ T6621]  ? skip_spaces+0xee/0x130
[   58.128006][ T6621]  dm_table_add_target+0x58b/0xee0
[   58.129607][ T6621]  ? __pfx_dm_table_add_target+0x10/0x10
[   58.131369][ T6621]  ? dm_table_create+0x2d3/0x3d0
[   58.132935][ T6621]  table_load+0x3b9/0x7b0
[   58.134289][ T6621]  ? __pfx_table_load+0x10/0x10
[   58.135808][ T6621]  ? __might_fault+0xc5/0x140
[   58.137286][ T6621]  ? __might_fault+0xc5/0x140
[   58.138763][ T6621]  ctl_ioctl+0x4d2/0xcc0
[   58.140090][ T6621]  ? __pfx_table_load+0x10/0x10
[   58.141641][ T6621]  ? __pfx_ctl_ioctl+0x10/0x10
[   58.143141][ T6621]  ? selinux_file_ioctl+0x1e0/0x290
[   58.144777][ T6621]  dm_ctl_ioctl+0x22/0x30
[   58.146129][ T6621]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[   58.147700][ T6621]  __x64_sys_ioctl+0x18e/0x210
[   58.149207][ T6621]  do_syscall_64+0x123/0x790
[   58.150652][ T6621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.152500][ T6621] RIP: 0033:0x7fdaf219f559
[   58.153896][ T6621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   58.159749][ T6621] RSP: 002b:00007fdaf2fc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   58.162340][ T6621] RAX: ffffffffffffffda RBX: 00007fdaf2425fa0 RCX: 00007fdaf219f559
[   58.164665][ T6621] RDX: 0000200000000000 RSI: 00000000c138fd09 RDI: 0000000000000003
[   58.167106][ T6621] RBP: 00007fdaf2236b20 R08: 0000000000000000 R09: 0000000000000000
[   58.169556][ T6621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   58.172017][ T6621] R13: 00007fdaf2426038 R14: 00007fdaf2425fa0 R15: 00007ffcef34c2e8
[   58.174460][ T6621]  </TASK>
[   58.175991][ T6621] Kernel Offset: disabled
[   58.177348][ T6621] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:27:42  Registers:
info registers vcpu 0

CPU#0
RAX=00000000000b3c45 RBX=ffffffff8fc91580 RCX=ffffffff8bea6325 RDX=0000000000000001
RSI=ffffffff8e61da07 RDI=ffffffff8c831380 RBP=fffffbfff1f922b0 RSP=ffffffff8fc07cf0
R8 =0000000000000001 R9 =ffffed100d406825 R10=ffff88806a03412b R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1f80fa2 R15=dffffc0000000000
RIP=ffffffff8bea47bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d4498000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fdaf22fbfa0 CR3=0000000147d95000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd1b75d560
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1de08cc6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1de08cc6 00007ffe1de08ccc
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd1aa3714a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd1aa37184
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd1aa372e8
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd1aa37176
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd1abf9600 00007fdd1abf95e0 00007fdd1abf95e8 00007fdd1abf9618
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000700080006
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd1abf95f8 00007fdd1abf95c8 00007fdd1abf9600 00007fdd1abf95e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 863d804a8c966e13 a645e7f957eedc5d 438efae8de41b25a a34a328f406a5a53
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 558c9d1075831e9c a5a193c83516b045 b95f66b3b70b62d5 c9a445d698ed9acf
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d814f6732c9b1ba3 f8e059af36369c6e 5d26dd40c1f23264 c8bdd9b02410ef5e
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 684fd945f58635f6 1a36241115432ff9 4a7442c0941b1977 f7d087934d813ffe
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f2f63fca5863d80 4a8c966e13a645e7 f957eedc5d438efa e8de41b25aa34a32
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffff888033100bb0 RBX=ffffffff8ffeb520 RCX=ffffc90003aa6d3c RDX=0000000000000001
RSI=ffffffff8ffeb520 RDI=ffff888033100bb0 RBP=ffffffff81bb2d4e RSP=ffffc90003aa6d30
R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=00000000000152fa
R12=ffff888033100000 R13=ffffc90003aa6de8 R14=0000000000000202 R15=0000000000000001
RIP=ffffffff81e93702 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 00007fe6d7e7a6c0 ffffffff 00c00000
GS =0000 ffff8880d4598000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fe6d6fecc40 CR3=000000002d790000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd1b75d560
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1de08cc6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1de08cc6 00007ffe1de08ccc
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd1aa3714a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd1aa37184
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd1aa372e8
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd1aa37176
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd1abf9600 00007fdd1abf95e0 00007fdd1abf95e8 00007fdd1abf9618
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000700080006
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd1abf95f8 00007fdd1abf95c8 00007fdd1abf9600 00007fdd1abf95e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 863d804a8c966e13 a645e7f957eedc5d 438efae8de41b25a a34a328f406a5a53
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 558c9d1075831e9c a5a193c83516b045 b95f66b3b70b62d5 c9a445d698ed9acf
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d814f6732c9b1ba3 f8e059af36369c6e 5d26dd40c1f23264 c8bdd9b02410ef5e
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 684fd945f58635f6 1a36241115432ff9 4a7442c0941b1977 f7d087934d813ffe
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f2f63fca5863d80 4a8c966e13a645e7 f957eedc5d438efa e8de41b25aa34a32
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=dffffc0000000000 RBX=ffff88806a234128 RCX=ffffffff821687c1 RDX=1ffffffff1d1d926
RSI=ffffffff8c831300 RDI=ffffffff8e8ec930 RBP=0000000000000002 RSP=ffffc90000a1f220
R8 =0000000000000000 R9 =fffffbfff24d32ab R10=ffffffff9269955f R11=0000000000000000
R12=dffffc0000000000 R13=ffff888046929000 R14=ffffffff9cec0978 R15=0000000000002bab
RIP=ffffffff81f1cae6 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d4698000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00005643be81c000 CR3=000000002bec3000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000
Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000bc 0000001000000000 0000000000000000 0000000000000015
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000400088008000f ffffffffffff0401 c7100008014dfe1e 000005a400000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9098080001000000 0806060112fc0000 0000000000000000 000001ffffffffff
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffe70812b003 10080012a8030408 0012a00313800412 9003018d9fc18af8
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d98efcba08001288 0301c08080860800 1280030004002880 080011800401c710
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008004dfe003469 64656d6f632f7665 642f01ffffffffff ffffffe508118003
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffd0803b2 037a020003b00372 69647265776f6c01 ffffffffffffffff
ZMM25=09fa90d009fa90d0 09fa90d009fa90d0 09fa90d009fa90d0 09fa90d009fa90d0 09fa90d009fa90d0 09fa90d009fa90d0 09fa90d009fa90d0 09fa90d009fa90d0
ZMM26=bc876238bc876238 bc876238bc876238 bc876238bc876238 bc876238bc876238 bc876238bc876238 bc876238bc876238 bc876238bc876238 bc876238bc876238
ZMM27=d6c6ea12d6c6ea12 d6c6ea12d6c6ea12 d6c6ea12d6c6ea12 d6c6ea12d6c6ea12 d6c6ea12d6c6ea12 d6c6ea12d6c6ea12 d6c6ea12d6c6ea12 d6c6ea12d6c6ea12
ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=2002000020020000 2002000020020000 2002000020020000 2002000020020000 2002000020020000 2002000020020000 2002000020020000 2002000020020000
info registers vcpu 3

CPU#3
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85bf56c5 RDI=ffffffff9cf2f280 RBP=ffffffff9cf2f240 RSP=ffffc90003adf0a0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000032363654
R12=0000000000000000 R13=0000000000000020 R14=0000000000000006 R15=ffffc90003adf3b8
RIP=ffffffff85bf56ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fdaf2fc66c0 ffffffff 00c00000
GS =0000 ffff8880d4798000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fdaf22ea540 CR3=000000002b789000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f736e6f69746365 6e6e6f632f657375
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1d5f5f16
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1d5f5f16 00007fff1d5f5f1c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe6d703714a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe6d7037184
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe6d70372e8
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe6d7037176
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000