last executing test programs:

3m46.311331368s ago: executing program 1 (id=2159):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000514010025bd7000fddbdf250800010000000000080003cd77d70501ad649e0003000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4)

3m46.31111964s ago: executing program 1 (id=2160):
r0 = socket$inet(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) (fail_nth: 1)

3m46.191048728s ago: executing program 1 (id=2161):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000e80)=[{{&(0x7f0000000100)={0x2, 0xe26, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000140)="2b3dcb037cf6eefdd865abf4cb8b1d17613cba0add0fc611e8e8edeb824ba694c30ed1d75eafde7ef357f25d275ad90b0ad65c4e3181039007d9096ab1a098bbd39415dc16914bbe91674f0deb1055864e2dc88798e3b3bf82e866c36f30af92cf204c04b58ef42e2744042bb5d5af77aff174539bd796f35aedbcaef63cce67d65f3321eb7700beef47308d9fc2b6d1a18e0484c097d27c0b2fc3b708c2897b9f55dd06c88b6db07b64431bff78a7eea64b1300bd6de2393e21f640e8b377e934245cd31a70d7f4823df271b235bd3d0b356a6bf5e7bd476d4ab8dd640f746dc0b90e080a494f", 0xe7}, {&(0x7f0000000280)="866f9be5741eea6b76e016794ce0643bb98d1c07715d51090783781fefb0a7b2b3e618c882ed4d2251b83d733eb420ce93c78f2f93f899e2bf36f1c58b9703d0bab566113ef2cb5b3e51b06e5925d81e6e4fd80f16439e01f64990254de92d67902dd61b93f3006dfe188282923bb8aa3c7af13dec03b0521221868f11d0301d273e3f6726d107520e8b6aed0a1ba5140011f729f8cc3255291014c332eb7a1958a88d150eb4e8dca1a80a824d203b4b38981012000000000000000000", 0xbd}, {&(0x7f0000000440)="862581263117a595cc8b4d91c81820960c318c8396349d812700e75e525fa32b7544ceb489026264e882e6b071a12ffdb5e7ff35e2e1002046d831da9a75680854fe172d076b8dc3803ff9d26d49bf4b103373dff834806016adcd95ad25f436a81a0bd5d8cdc59c4ade543b23b68110ccfd37ccc3c778d40629a5e61b0e8cd6af005f30363c40c4bca955232d75b1609cd8da8771356513bf156c823aed462a5773220cfff599bc209f5f2d7baf2ac7cb7a896eb9708cef3b8c24cb243997889d197ee8bc4ab9a5c69628751008577fcf4074fbdee3591a3a2641", 0xdb}, {&(0x7f00000000c0)="1da91706353d671ffb11e4f447350c1aae5cc28f91a212a31f3550b813a7c81cf5d7fa00"/48, 0x30}, {&(0x7f0000000b40)="853d812375877866806fdff43051b4023fa2334c45b8d31dff2233f12c7ffec14b58976722a067ecd394dcf55ad8bc6adf88e0dd053d47e5ddc3b08ac01e128339844430d1033bc401927fd38018f2b0e9b713aa160d7b265e90ca90a88cbb0b1493ccdd35f17ed434451c742e3d9c7607fb338490fb578a48c1853a42bbd171367e33a75c9cde0160143ad61ffad513ae1059f9e31087c6448fae895aa68e70fa53628160525c97bf79f68247bf691e8e46c94c3c0fa018fd9d10c19d7bf717ef1da47e10b55a09cb5e411146c03b26abef74a1b955c2202b9a4838f5b2495c6728602328820e2df2acfb22138f1d86c29f73641d1a55e8deadd320d9e951b33370ccebbd05a4d4358c514b5c7b695a9ec90b36ac77e9dd4e03569065d281b1b727a1692e26b8f363d7540e8ca2e806164a6fc46f8e2d2a6c128daf63a398077a13fbc0d539bda7fb8b904638e612482b548f1a089ec8d80fe0e6baf6379a037ce7efdf6ede864f2c8736b1abb71991ba15f2fd1372314390de9a3fa1a4eefc12dfd5bbf5c6606a4a5d2e08742f02fbc8aaa140a652369a2200736851cf259dde2999c8b2539d7702d0b37aae943e160e14d24b3eaa0b025d55a16c924f16e9eecebbc52b2069ba5223df0e252c78372aa13958a89a2b3a2044aa2275817ac942b261d2f2c25c45984b8af9dfa7652f7530aa4e714ad4c66b65ebaf42e223e415f1326bfd00d98bdaa4396a23aaa3623d0324beb61843f685a4e577247ae9b833aee04e55ae6d336d73513fbdcc62af87d2ba946a9c25d175e66990c636df62f853377274c1a04fb1fb235ee080cad746e239cdc728474812e995ac0c670f9885ad7704a281044948efd5170cab39daa5b034349741fb857260796231aa7864e9517c159e7a5e05d86dd4f4185d0ece85f3bcdaf83dab3e2dfbe8ee2786b23b7f0dda7243e217382da2d3f481447f0f54f2d4b0d52e7afb07cc615c06699f53aadaf1073cbc7e40477acad0a92ec51ee421524bc082abb17cd85d21caf69dafb65e4896f5879c8c4e5a1ac91d4b9529da9cab44e27a88a1d446d5e59f6e186083d7b10ba0cee1933f62e8326fac01b12bdf", 0x312}], 0x5}}], 0x1, 0x40080a0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4)
sendmmsg$inet(r0, &(0x7f0000001a40), 0x0, 0x24040052)

3m46.190716162s ago: executing program 1 (id=2162):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8)
mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0)
chroot(&(0x7f0000001140)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00')
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000100)=""/90, 0x5a}, {&(0x7f0000000340)=""/198, 0xc6}, {&(0x7f0000000440)=""/6, 0x6}, {&(0x7f0000000480)=""/76, 0x4c}, {&(0x7f0000000500)=""/49, 0x31}, {&(0x7f0000000540)=""/228, 0xe4}, {&(0x7f0000000640)=""/172, 0xac}, {&(0x7f0000000700)=""/93, 0x5d}, {&(0x7f0000000780)=""/175, 0xaf}], 0x9, &(0x7f0000000900)=""/191, 0xbf}, 0x40002101)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x200, 0x103)
write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x8, 0x590c0d22, 0x8001, 0x9, 0x5, 0x3, 0x0, 0x0, 0x2}}, 0x50)
r3 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581"], 0x0)
syz_usb_ep_write(r3, 0x81, 0x0, 0x0)
syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x0, 0x3ffffffffffc, 0x0, 0x1000000000000000, 0x80000000, 0xb22f, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffc, 0x4000, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000040)='./sys/bus/pci/devices/0000:00:1f.0/driver/unbind\x00', &(0x7f0000000080))
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r5=>r0, {0x4, 0x9}}, './sys/bus/pci/devices/0000:00:1f.0/driver/unbind\x00'})
ioctl$SCSI_IOCTL_PROBE_HOST(r5, 0x5385, &(0x7f0000000a00)={0xe7, ""/231})
r6 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./sys/bus/pci/devices/0000:00:1f.0/driver/unbind\x00', 0x1, 0x0)
write(r6, &(0x7f0000001900)='0000:00:1f.0', 0xc)

3m45.651075705s ago: executing program 1 (id=2164):
socket$packet(0x11, 0x3, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
r1 = mq_open(&(0x7f0000000280)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F.\xc3@.\b2i\xd9\xe5F\xf88n!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\x05\x00\x00\x00`83\xb7n#\xe0\xc1_\xec\xba\xdez\b\x00\x00\x00\x00\x00\x00\x00woo\xbcnq-\x90\x03\x00\x00\x00+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbf', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x7ffa, 0x0)
openat$ndctl0(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x8a402, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xe0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000100001082dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="002200000000000008001b00000000002199d58c450a7052dd791796a46ad11774458965a084d958cebf8f6e32814b598ddb39405a44d20abc5b9d3c73366bbbf2c88241442da4fcfacfd1ac9556e9fc9ada31aa0176b9bc"], 0x28}}, 0x4)
write(r2, &(0x7f0000000200)='2', 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_vhci(0x0, 0x7)

3m45.510869379s ago: executing program 1 (id=2165):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0x1, 0x4)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

3m45.502289195s ago: executing program 32 (id=2165):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0x1, 0x4)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

3m0.210180043s ago: executing program 2 (id=2700):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xa, 0x0, 0x0, 0x0, 0x10, 0x0, 0xfc, 0x80, 0x9, 0x2, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1})
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040eec070d04"], 0xd)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(&(0x7f0000000040), 0x800000001, 0x1a002)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0xffffd000)
r4 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0)
process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000700)="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", 0x69d}], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$TIOCCONS(r3, 0x541d)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$nl_route(0x10, 0x3, 0x0)

2m59.847494694s ago: executing program 2 (id=2708):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={<r0=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2000000, &(0x7f0000000200)='workdir') (async)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2000000, &(0x7f0000000200)='workdir')
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth1_virt_wifi\x00', &(0x7f0000000f00)=@ethtool_cmd={0x23, 0x9, 0x1008000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, 0x1000005, 0x8, 0x2, 0x0, 0x4, 0xfffffffe, [0xeaea, 0x3]}}) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth1_virt_wifi\x00', &(0x7f0000000f00)=@ethtool_cmd={0x23, 0x9, 0x1008000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, 0x1000005, 0x8, 0x2, 0x0, 0x4, 0xfffffffe, [0xeaea, 0x3]}})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='0000:00:03.0\x00', 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r2, &(0x7f00000000c0)='vmw_vmci\x00', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/vmw_vmci/bind\x00', 0x1, 0x0)
write(r3, &(0x7f0000000140)='0000:00:03.0\x00', 0xc)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6)

2m59.649779015s ago: executing program 2 (id=2710):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000006200), 0x1, 0x0)
write$tcp_congestion(r4, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x202, 0x0, 0x5}]})
r6 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1)
ioctl$MEMREADOOB64(r6, 0x1269, &(0x7f00000000c0)={0x2, 0x0, 0x0, &(0x7f0000000280)})
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r7, &(0x7f0000000000)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000080)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r7, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff)
r8 = syz_open_dev$vcsa(&(0x7f0000000100), 0x8, 0x121000)
getsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f0000000280), 0x4)
write(0xffffffffffffffff, 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7500}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
write(r9, &(0x7f0000000e00)='1\n', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000006a00000229bd7000fedbdf250200000000000000080001000000000004000b00080001000100000008000500", @ANYRES32=0x0, @ANYBLOB="2b0552e1f99e338158bf4fbaf146cef9adb56e666d976f4d07b7774c8b2f41ee20cc34608aa9582a1f47e61d58225982f0de7922ef65a6851787126e489e85b2fbb81c79c29686cd7c993161fa2beeef001b5bb50f691b564e89824169aff2227d76b24f94f2ae8b52157d"], 0x34}}, 0x20008090)
write(r11, &(0x7f0000000700)='1\n', 0x2)

2m59.600968751s ago: executing program 2 (id=2711):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x3, 0x4, 0x6, 0x6f, 0x0, 0x3}, &(0x7f0000000a00)=0x9c) (async)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) (async)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) (async, rerun: 64)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0)

2m59.470460084s ago: executing program 2 (id=2712):
openat$fb0(0xffffffffffffff9c, 0x0, 0x400440, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000000000)={0x8, {"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", 0x1000}}, 0x1006)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, 0x0, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000), 0xd)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000080), 0x0, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffffff, &(0x7f0000001040)='./sys/module/md_mod/parameters/new_array\x00', 0x41, 0x1c1)
write(r5, &(0x7f0000000280)='\x00', 0x1)
r6 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
accept4(r6, 0x0, 0x0, 0x800)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r8 = dup(r7)
r9 = dup(r8)
mmap(&(0x7f00009de000/0x4000)=nil, 0x4000, 0x3000002, 0x30, r9, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)

2m59.255529505s ago: executing program 2 (id=2716):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa6242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x38011, r1, 0x4000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x25dfdbfc, {{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x4d2, 0x33}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0xec2, 0x0, 0x0, 0x1c2d6959, 0xffffffffffffffe9, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x4, 0x0, 0x0, 0x15, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
recvmsg(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x40000100)

2m44.254290569s ago: executing program 33 (id=2716):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa6242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x38011, r1, 0x4000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x25dfdbfc, {{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x4d2, 0x33}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0xec2, 0x0, 0x0, 0x1c2d6959, 0xffffffffffffffe9, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x4, 0x0, 0x0, 0x15, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
recvmsg(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x40000100)

56.235354665s ago: executing program 0 (id=3765):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xffffffff, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x6e6bb7}}, 0xb8}}, 0x814)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000080)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x0, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f00000000c0)='./file1\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0xffffffffffffffff, 0x6, 0x4, 0x100fff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a})
sendfile(r3, r1, 0x0, 0x9)
write$sndseq(r5, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd})
ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
close_range(r4, 0xffffffffffffffff, 0x400000000000000)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x800009b}, 0x8)

55.90957813s ago: executing program 0 (id=3768):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x880c0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f8000", 0x9)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x4890)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

55.650204254s ago: executing program 0 (id=3769):
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4841)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r8=>0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000680)={{0x0, 0x3, 0x200, 0x1, '\x00', 0x800}, 0x0, [0x61, 0x6, 0x4, 0x6, 0xff, 0x2, 0x1, 0xf, 0x799, 0x7, 0x1, 0x4, 0x2, 0xe9, 0x9, 0x3, 0xffffffffffffd113, 0x31a5, 0x7fff, 0x8, 0x8001, 0xc39, 0x80000001, 0x24, 0x7, 0x1, 0x6, 0x8, 0x1, 0x0, 0x8, 0x10, 0x3, 0x800, 0x7, 0xfffffffffffffff7, 0x10001, 0xac8d, 0x1, 0x101, 0x8, 0xf, 0x7, 0x2, 0x79ac, 0xe0000, 0xe4, 0x1, 0x4, 0xbe1, 0x259f, 0x9, 0xaafe, 0x6, 0x7, 0xfffffffffffffffa, 0x6, 0x9, 0xff, 0x80000000, 0x6, 0x8b, 0xf, 0xddb, 0xff, 0xfffffffffffffffe, 0x8, 0x1, 0x7, 0x101, 0x1, 0x0, 0x7fffffff, 0x8, 0x9, 0x9, 0x4, 0xffffffffffffffff, 0xc53, 0x7, 0x618, 0x7, 0x80000000, 0x0, 0xffffffff, 0x9, 0x3, 0x0, 0xffffffffffff6175, 0x4, 0x522, 0x800, 0xf32, 0x31d, 0xfffffffffffffffe, 0x3, 0xfffffffffffffff9, 0x4, 0xd2, 0xfe60, 0xfffffffffffffffb, 0x6, 0x2, 0xd, 0x8, 0x8000000000000001, 0x6, 0xf0a, 0x7, 0x100, 0x5, 0x4, 0x100000000, 0x2, 0x0, 0x7, 0x3, 0xb, 0xfffffffffffffff3, 0x7f1a, 0x200, 0x0, 0x1, 0x6, 0x5, 0x8, 0x9, 0x4]})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014)

55.549265925s ago: executing program 0 (id=3770):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./cfg\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./cfg\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./cfg/usb_gadget/g1/os_desc/use\x00', 0x1dd)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./cfg/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './cfg/usb_gadget/g1'}, 0x17)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1600006d57c4c1c8449ddf5291503f2940ca1671609c5700000009000000a800000010000600", @ANYRES32=r0, @ANYBLOB="f8c700"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000000000000fcffffff00"/28], 0x50)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000080)={0x3})
sendmsg$nl_generic(r1, &(0x7f0000001d80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d40)={&(0x7f0000000b40)={0x11d4, 0x42, 0x2, 0x70bd28, 0x25dfdbfe, {0x4}, [@generic="61a58322c991edb97664ab560e817729ac15155a536cb8b819ad5a4dc2a951c0141a34d60bc6f0e27f560e71a63acea707a2c04422c9e08620c8899f3b0886fb2bdff596cb465020cc2d2ce764288c05622e9b773f3e3dad1e2f842f06a97cd134bf2efcce1d8efd706f35bc6e02acbe90cbcdb4c2c4d1ce8113cae9bb204616922241998e83995a21afa7143bf6193f15c1", @typed={0x14, 0xb3, 0x0, 0x0, @ipv6=@empty}, @nested={0x18, 0x77, 0x0, 0x1, [@typed={0x8, 0x120, 0x0, 0x0, @u32=0xd}, @typed={0x8, 0x6d, 0x0, 0x0, @pid=r3}, @nested={0x4, 0xc2}]}, @generic="4e0a8b428193d5ed1d707bafcc5a9d93cb669786740bfaa84893e2479613dfb278b0de2b79fbe264262536f56385b85cbafb215a3d80796bb9fbfae5503e40aa37d39bf65ba293a9f74912d40d056759486665868a4792417fb9423a66da339d125d273c097762d3d993c2242550dcea97fe508f742a484736f44396271b3d7f8d95914633382a233afad0f7779456678ff7875df927ee91ba16be4dbf698b3cd769322dd83113b5e7ea61b1b9e082cf15b311a84092f02030ee035e778ca3863350dd374eae3c6e5d7725c7fa03cab130cca37570139dc2fbc10cbb2c1e28d14fe1bc1394", @generic="84936593043d8f5839560012d9ea28d5f785a4c920a616afe1bb5e", @generic="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"]}, 0x11d4}, 0x1, 0x0, 0x0, 0x40801}, 0x2000c010)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080), 0x1)
sendto$inet6(r2, &(0x7f0000000100)="b8", 0x34000, 0x2404c8d5, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10)
mmap(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x11, r4, 0x0)
r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000040)='afs\x00', &(0x7f0000000080)='./file0\x00', r6)

55.300232803s ago: executing program 0 (id=3773):
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x1020, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0)
write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe)

53.260622389s ago: executing program 0 (id=3780):
ioprio_set$pid(0x2, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = open(0x0, 0x10507e, 0xa6)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r2, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$IOMMU_GET_HW_INFO(r1, 0x3b8a, &(0x7f0000000440)={0x28, 0x0, r3, 0x7f, &(0x7f00000003c0)=""/127})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1048}, 0x1, 0x0, 0x0, 0x8084}, 0x10)
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x104)
r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000001ac0)={&(0x7f0000000040)={0x14, 0x17, 0x1, 0x70bd2a, 0x25dfdbfc, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20044002)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r5, &(0x7f0000000c40)=ANY=[], 0x13)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r9, @ANYBLOB="140001000040"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r10 = socket$packet(0x11, 0x2, 0x300)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r12, @ANYBLOB="0000000000000000480012800e00010069703667726574617000000034000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r12, @ANYBLOB], 0x68}}, 0x0)
sendto$packet(r10, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r12, 0x1, 0x0, 0x6, @local}, 0x14)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r4, 0x0)
sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x1ffffffffffe, 0x7, 0x8, 0x3}, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r13=>0x0)
syz_ublk_setup_queues(r0, r13, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0x3, 0x3b2, 0x0, r5}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x8000, 0x3000002, 0x4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x22, 0x3, 0x1b0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8401, 0x3fffffff, 0x289}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab60, 0x20, 0x1, 0x4e}}], 0x1, 0x0, 0x0)

53.196762902s ago: executing program 34 (id=3780):
ioprio_set$pid(0x2, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = open(0x0, 0x10507e, 0xa6)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r2, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$IOMMU_GET_HW_INFO(r1, 0x3b8a, &(0x7f0000000440)={0x28, 0x0, r3, 0x7f, &(0x7f00000003c0)=""/127})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1048}, 0x1, 0x0, 0x0, 0x8084}, 0x10)
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x104)
r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000001ac0)={&(0x7f0000000040)={0x14, 0x17, 0x1, 0x70bd2a, 0x25dfdbfc, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20044002)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r5, &(0x7f0000000c40)=ANY=[], 0x13)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r9, @ANYBLOB="140001000040"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r10 = socket$packet(0x11, 0x2, 0x300)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r12, @ANYBLOB="0000000000000000480012800e00010069703667726574617000000034000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r12, @ANYBLOB], 0x68}}, 0x0)
sendto$packet(r10, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r12, 0x1, 0x0, 0x6, @local}, 0x14)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r4, 0x0)
sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x1ffffffffffe, 0x7, 0x8, 0x3}, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r13=>0x0)
syz_ublk_setup_queues(r0, r13, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0x3, 0x3b2, 0x0, r5}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x8000, 0x3000002, 0x4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x22, 0x3, 0x1b0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8401, 0x3fffffff, 0x289}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab60, 0x20, 0x1, 0x4e}}], 0x1, 0x0, 0x0)

3.303477318s ago: executing program 4 (id=4136):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f", 0x9b}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76", 0x53}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}})
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000540)=0x9b, 0x4)
ioctl$XFS_IOC_OPEN_BY_HANDLE(r3, 0xc038586b, &(0x7f0000000ac0)={r1, &(0x7f0000000200)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), 0x0})
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000600)="c3e41400d8be0bae598875b40b18f224e709ec055e6b372eb252bbce09fa6d8205cd8e50ab11450dabcbae318e7e40e7944387d27c1c68387ba4767f4c6daeb3a824b9abe6b00d189c00fd72004c864ef44e8d625f2bf8d374b02c4930b1579603b735919e4291560c99a26dbc99f4b1b60779c490295fdf480b95e3e3bec9108e4c3f1f2de3ec1e48e275aa0922071e7913a8e96e82efadbc564d97f912717a4d69907a5008db8a", 0xa8}, {&(0x7f0000000b40)="f6c0a8fbc53a46ee25af91b902df8e7798be2dda9c805c23a35fb576b7e1e03c80b9d09c2cec9674512febdb70cf9c8b3b09656b0aa7bdf4da1bd039668be977e6354155fe7529a0c351320241c134b91d94efb7c83d15d9f7f5e948da423fb8a46555083083e5ef9fd45856257bf3ee00579425e82cdd10f6a19fc398d7eb6cee433120569a18f17d535365679028b4d4e5c148fa6a51edf0893c0ded6fc740cd2fc1a4f5cb655d70", 0xa9}, {&(0x7f0000000c00)="c062981d79652c5e0f5baa1876d51f14e4fddec5261f242a6d58c1d2e611dc72dffa2de51883cd1321127a27c23e4eec2b5b888cc9c915cdb268fddfa2c2c1cb371acd708a5f521ffd0a6c84dfbafeedcf3207965e7b415efa5f1ef13edf0c72f2827e53d39df1886a691672e1fdd06f81e495ed61a84cc0f62809c148e0657bb827e2200421bbe24ff5bd6fbba9f792e4dd1db28a45aeaa771176f2168cd619b6900b8ebc15865786a8ee86dcb4a376544c415fd618b89e70abd7c81333c56ec89f8714577c8ddb74b93b2a4ffc35bf9a9d818b71765208d320aac49be7350a55dab76f1cd82707d44a11fa10e32bdedebb6b42eaae", 0xf6}, {&(0x7f0000000d00)="2541a5aa69e0ac72e69c67bc074e6967d9e066362f9fe85048d74c29915850461947af76e10c4ec736b9adcf208da6303be7127ef757e91daaa85f7397c4b4", 0x3f}, {&(0x7f0000000dc0)="4da4dea78768cfd108d83778c876d721a9c553cfda6838173f70d7e6a1144c98cee30bb2d162805f51c70fd3d761b295af908071627e8b25eb106d92a23f72e3da030a5cb0b88c7978d11f715c4e436728ef2ccc84c49a9d8c2a2629d95c629ea6dd3d98a54e3b2ab5ab9db628f7e0a1f1431e6761df2f39014e64104b92cc9714366d6ea556e2c3d91e04f3541ecdcf7a28c9a97d4fa8db07cd", 0x9a}, {&(0x7f0000000e80)="c80a2e8c593ad7a68e3629bc94d6e15db0911585e06c219b953e519ea55e2d267dfeead54c43e56ca0137588d7d9667b1855fe399b94b2bbeeb19e41cd110f7eec4cc97f3a8e86c5644337d8a3bdb7407c24293e5016a5a426b2a2a8f00041e341492d6465d15cbf79465f7d4435e0be1ff9528bd6e1ec95f62f0f9f379adb6e94db34923d00498f3c005590a59c35f5fcbe640fa4021f96cf40468571ec3a403022857bc16df3505dab713e6fdd80b3b5b99aa51951f7880b40", 0xba}, {&(0x7f0000000f40)="e6ed24c54c220aeab1f7049e910a28ec7d4626e4c8e67d60dc2b68d756d18931edfbb18816d2e0d1509059e45d820d9f3fec7bb5a83f781107ddf08aebd025816ac4", 0x42}, {&(0x7f0000000fc0)}, {&(0x7f0000001000)="8d4562a532c9e029880a67b08579e93550cdbc83ace9b4014281586f27832b11b786d72ba0cd0db32cb6b3ce6c85c68aefba39b9e1734ca08f78d726ef1d126d61027a5a75c5f5bd5bed84382877187b704d2062e5cea84ef6c68b", 0x5b}], 0x9, 0x0, 0x0, 0x20000801}], 0x2, 0x40800)
recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000580)=""/95, 0x5f}], 0x2}, 0x160)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
r6 = syz_clone(0x4060000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x4206, r6)
ptrace(0x4208, r6)
ptrace(0x4207, r6)
r7 = fanotify_init(0x1a, 0x800)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8)
fanotify_mark(r7, 0x641, 0x1028, r8, 0x0)
fanotify_mark(r7, 0x1, 0x48000038, r8, 0x0)
ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f00000002c0))
bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0x2, 0x2}, 0x6)

2.836309236s ago: executing program 4 (id=4137):
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x170, 0xc8, 0x8, 0x170, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [0x0, 0xff], [], 'lo\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x0, 0x55}, 0x0, 0x108, 0x170, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@connbytes={{0x38}, {[{0x14}, {0xc000400000000001}], 0x1, 0x2}}, @common=@hl={{0x28}, {0x2, 0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x6, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x0, 0x7, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file2/file0\x00', 0x5)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')

2.750054577s ago: executing program 4 (id=4138):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x7, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94)
ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000400)={0x40000118})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000080), 0x400000000000042, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2.742966713s ago: executing program 4 (id=4139):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd26, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0xffff0000, 0x0, 0x200448d3}, 0x0)

1.418520682s ago: executing program 4 (id=4142):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000140)) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) (async, rerun: 32)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) (rerun: 32)
r2 = dup(r1) (async, rerun: 64)
syz_emit_ethernet(0x36, &(0x7f00000046c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "5678c1", 0x0, 0x2b, 0x0, @empty, @local}}}}, 0x0) (async, rerun: 64)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x7478b000) (async)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r4=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@mmap={0x0, 0x1, 0x4, 0x50, 0xfffffffa, {0x77359400}, {0x3, 0x2, 0xf, 0xfb, 0x98, 0x4, "97233035"}, 0x54dd9ee6, 0x1, {}, 0xff800000, 0x0, r4}) (async, rerun: 32)
readv(r0, &(0x7f0000002a80)=[{&(0x7f00000017c0)=""/214, 0xd6}], 0x1) (rerun: 32)

1.309848248s ago: executing program 6 (id=4144):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000015c000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f00000000c0)="2e0f785c7f06660fc7b503000000b9ec0200000f320f300f784e0026660fc7b69edf0000b8010000000f01c1ea53000000be00660f303e0fc75fab", 0x3b}], 0x1, 0x1c, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x26000, 0xdddd1000, {}, 0x0, 0x5}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f3874000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000001a49000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007b6e6f1b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"}})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 5)

889.609047ms ago: executing program 5 (id=4149):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2f)
r3 = open(&(0x7f00000002c0)='./file1\x00', 0x4c27e, 0x1bb)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x13, r3, 0x0)
fallocate(r3, 0x0, 0x9e1f, 0x575)
r4 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="0f20d835080000000f22d82e0f019e280000006447dfdef3400f086626f20f79ed66660fd12c48263e262e660f38808f71790000470f07c4a1ff707d00b0d97f00", 0x41}], 0x1, 0x8, 0x0, 0x45)
mprotect(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x3000008)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x293}]})
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0)

700.309281ms ago: executing program 6 (id=4152):
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f00000000c0)={0x20000000000084, @remote, 0x0, 0x0, 'sh\x00', 0x0, 0x200, 0x4}, 0x2c)
socket$netlink(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setresgid(0x0, 0xffffffffffffffff, 0xee00)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x480, 0x0, 0x101}]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
r6 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="030700000000000000000800000068000480"], 0x7c}}, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000300)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)})
ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000000)=[0x2], 0x0, 0x1})

700.021826ms ago: executing program 5 (id=4153):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f00000027c0)=""/4130, 0x1022}, {&(0x7f0000000a40)=""/4107, 0x100b}], 0x3}, 0xd}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xff}], 0x3, 0x40000102, 0x0) (fail_nth: 15)

649.969123ms ago: executing program 5 (id=4154):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000001040), 0x201, 0x0)
setresuid(0x0, 0xee00, 0x0)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, 0x0)
sendmmsg$alg(r2, 0x0, 0x0, 0x48040)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040), 0x0, 0x40800)
recvmsg(r6, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

587.809765ms ago: executing program 3 (id=4156):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000300)={0x28, 0x6, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000380)})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40881}, 0x4040800)

524.197529ms ago: executing program 4 (id=4157):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f00000000c0)=ANY=[], 0x342)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000080)=r2, 0x12)
r3 = openat$cgroup_int(r0, &(0x7f0000000040)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)
pipe(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
readv(r4, &(0x7f0000000b80)=[{&(0x7f00000002c0)=""/223, 0xdf}], 0x1)
write(r6, &(0x7f0000000280)="86", 0x1)
splice(r6, &(0x7f0000000040), r5, 0x0, 0x6, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000001300)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1b}}, 0x20)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94)
io_uring_enter(r7, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)
sendfile(r3, r3, 0x0, 0x4)
r8 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0)
syz_usb_control_io$uac1(r8, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

504.413043ms ago: executing program 6 (id=4158):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x60000084)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x0, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x402, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x9, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x5, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x2, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x1, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x100005, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x13, 0x8, 0x4, 0x53, 0x6, 0x4, 0x400, 0x6, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd36, 0x9, 0x8000, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x5, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x6]}, @TCA_TBF_PTAB={0x404, 0x3, [0x80000800, 0x9, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0x6, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0xe, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd4, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xffff0000, 0x7, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x2, 0x1, 0x2, 0x2, 0x5, 0x6, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x739f, 0x4, 0x0, 0x1856, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x409, 0x101, 0xefbc, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0)

425.171115ms ago: executing program 5 (id=4159):
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000004000000020000000700000000000000", @ANYRES32, @ANYBLOB="002000000000000000000000000000000000000068f7a92c16b590bd7090ac7f85b8b500ec20d65417f437f6c485d9e943fd93210500000000000000eeb2c91cc9042d26e3e6e284a8604380f4d3a08f3865ad1242c12c9ddb4b4f343c4f277fd3c9d3f610a5a08daa56d1f3479e09740123c35d19a993fb34b137173cadb2caeff37c3bd55a0a06e025aaa823848fd1501f89adf882b30ac00f4ebfbe6f54931860217607948db7e3ec37d7e79f9a", @ANYRES32=0x0, @ANYRES32], 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c045}, 0x4008000)
mount(0x0, 0x0, &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77<r\xe9\x9cD\xb0\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3wA\xf6`>\x8b')
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

348.803351ms ago: executing program 3 (id=4160):
r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}})
r2 = socket(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0)
write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x1, 0x0, 0x10001, 0x5})
r4 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x2, 0x1, 0x5})
mq_timedsend(r4, 0x0, 0x0, 0x5f8, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0xa, 0x0)
mq_timedreceive(r4, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f0000000500)=""/182, &(0x7f0000000800)=0xb6)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES64=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
syz_emit_ethernet(0xa4, &(0x7f0000000740)={@random="53427c180ac6", @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a2", 0x6e, 0x2f, 0x0, @private2={0xfc, 0x2, '\x00', 0x10}, @remote, {[@routing={0x2b, 0x8, 0x0, 0x0, 0x11, [@private0, @private0, @loopback, @mcast1]}], "d98d98eac60c4cee4843f4a69c432e2894745f45b4e31dfd7fc1664bc6f322898b1b89c30855"}}}}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000b4bffc)=0x102, 0x4)
write(r2, &(0x7f0000000000)='\"', 0xfdef)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591)

348.411108ms ago: executing program 5 (id=4161):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e22, 0x7ff, @private2}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) (async)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="12", 0x1}], 0x1}, 0x1) (async)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

347.446198ms ago: executing program 5 (id=4162):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x2}, {0xffff, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x400, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x20000000)
write(0xffffffffffffffff, &(0x7f0000000040)="3c00000058001f000307f4f9002304000a04d649080001000201000204000380050000009ddb973b91aa05797251725df70067", 0x33)
syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000305bfdd082e0c0007f4d40102030109022400016406200b0904ad8e02df30059e09050e124000fafa01090583"], &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x2, 0x0)

279.808151ms ago: executing program 6 (id=4163):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x28000, 0x80)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x5f9, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001040)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x30, r3, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc081}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)={0x2c, r1, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48040}, 0x0)

279.42262ms ago: executing program 6 (id=4164):
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002140), 0x40000, 0x0)
waitid$P_PIDFD(0x3, r5, 0x0, 0x4, 0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, r0, &(0x7f00000001c0)={0x20000004}, 0x3, 0x0, 0x1, {0x0, r4}})
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10)
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10)
sendmsg$tipc(r7, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
r8 = dup3(r6, r7, 0x0)
write$P9_RREADDIR(r8, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88)
ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000140)={0x0, 0xffff, 0x0, 0x0, <r9=>0xffffffffffffffff})
ioctl$BINDER_GET_FROZEN_INFO(r8, 0xc00c620f, &(0x7f0000000200)={r9})

219.633319ms ago: executing program 3 (id=4165):
r0 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x2000, 0x0}, 0xfffffdef}], 0x300, 0x401eb94)

170.039204ms ago: executing program 3 (id=4166):
r0 = socket(0x10, 0x803, 0x2)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000002500)='\f', 0x1}], 0x1)
r2 = signalfd(r0, &(0x7f0000000000)={[0x8]}, 0x8)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x30000, 0xf, 0xd, 0x3, 0xe5, 0x40, 0x2d, 0x0, 0x30, 0x19}, {0x25000, 0x50000, 0xc, 0x0, 0x40, 0x5, 0x7e, 0x9, 0x58, 0x3, 0x26, 0x1}, {0xdddd1000, 0xe000, 0x10, 0x7f, 0x3, 0x7, 0xfe, 0x40, 0x1, 0xab, 0x5}, {0x30000, 0x2000, 0x3, 0x5c, 0x4, 0x43, 0x9, 0x9, 0x80, 0x7, 0xe}, {0x0, 0x9000, 0xf, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x47, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0xb, 0xa0, 0xb1, 0xf4, 0x1, 0xd, 0x88, 0x13, 0x1, 0x53}, {0x54000, 0x2, 0x4, 0x6, 0x25, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x10000, 0xe, 0x5, 0xf, 0x7, 0xff, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x42024, 0x7, 0x0, 0xa000, [0x6840000000000002, 0x3, 0x91, 0xff]})
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00'})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000100000000000000", @ANYRES32=0x0, @ANYBLOB="00800000084400001c00128009000100626f6e64000000000c00028008000200", @ANYRES32=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x20008880}, 0x4000854)

169.867553ms ago: executing program 6 (id=4167):
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0x40015b0b, 0x0)

50.021169ms ago: executing program 3 (id=4168):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x800010, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0xc0184d03, &(0x7f0000000900)="00000100000000000000010001")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x6, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x6})
fcntl$lock(r2, 0x6, &(0x7f0000000080)={0x2, 0x13d1eaf1b4da8af5, 0x5, 0x3ff})
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
setresuid(0x0, 0xee00, 0x0)
r4 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x2300000000000000, &(0x7f0000000040)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r3, 0x10, 0xfffffffb, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0xfffffeac, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x5c}}, 0x40010)

0s ago: executing program 3 (id=4169):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
write(r1, &(0x7f0000000000)="ea", 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x2}, 0x10)
write(r1, &(0x7f00000002c0)="04", 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r4, r5, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x15, 0x0, &(0x7f0000000280))
fchdir(r3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000faffffff2a000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24040)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
move_mount(r8, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x204)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES64=r3, @ANYRES8=r3, @ANYRESHEX=r3, @ANYRES8=r8, @ANYRESOCT=r8, @ANYBLOB="bfc66f7ffee8f941f32babd5007efd93bc2d245e7140b994b36e28b0db67998ce0ab925bc3e471830ae4230822ddc25d309f0905d1a80ce49c4d2e85503b76be2e8455941739e4ce7e264efbbb6051b6e483014c0957a066b6bf38a2df88b0279a54be8ec19bc43656bee327efa6afa7765deaacc9a4088bffdd575c67b8a3a94d189cede947c55142094830a08f1011c30d73947c6611ead6e456e9efd5ae2cc9f391ebf83b4b710213febb", @ANYRES8=r3])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f00000000c0)='./file1\x00')
r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0x80049363, 0x0)

kernel console output (not intermixed with test programs):

m0: Port device team_slave_1 added
[  665.578563][T16783] batman_adv: batadv0: Adding interface: batadv_slave_0
[  665.581079][T16783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  665.589602][T16783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  665.594029][T16783] batman_adv: batadv0: Adding interface: batadv_slave_1
[  665.596022][T16847] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3800'.
[  665.596275][T16783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  665.607593][T16783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  665.607773][T16847] netlink: 'syz.4.3800': attribute type 64 has an invalid length.
[  665.619716][T16847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3800'.
[  665.660617][   T42] audit: type=1400 audit(1786645281.977:1384): avc:  denied  { write } for  pid=16848 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  665.671270][T16783] hsr_slave_0: entered promiscuous mode
[  665.673937][T16783] hsr_slave_1: entered promiscuous mode
[  665.676316][T16783] debugfs: 'hsr0' already exists in 'hsr'
[  665.678494][T16783] Cannot create hsr debugfs directory
[  665.725317][   T42] audit: type=1400 audit(1786645282.037:1385): avc:  denied  { write } for  pid=16855 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  665.784446][   T42] audit: type=1400 audit(1786645282.097:1386): avc:  denied  { map } for  pid=16858 comm="syz.3.3803" path="socket:[74426]" dev="sockfs" ino=74426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  665.785004][ T5435] 8021q: adding VLAN 0 to HW filter on device eth11
[  665.891155][T16859] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3803'.
[  665.896209][ T5890] hsr_slave_0: left promiscuous mode
[  665.898057][T16859] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3803'.
[  665.902803][ T5890] hsr_slave_1: left promiscuous mode
[  665.915055][ T5890] veth1_macvtap: left promiscuous mode
[  665.917455][ T5890] veth0_macvtap: left promiscuous mode
[  665.920742][ T5890] veth1_vlan: left promiscuous mode
[  665.922899][ T5890] veth0_vlan: left promiscuous mode
[  665.954728][T16851] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO)
[  665.957813][T16851] device-mapper: ioctl: error adding target to table
[  666.095911][ T5890] team0 (unregistering): Port device team_slave_1 removed
[  666.207085][T16868] syzkaller0: entered promiscuous mode
[  666.209858][T16868] syzkaller0: entered allmulticast mode
[  666.303184][   T42] audit: type=1400 audit(1786645282.617:1387): avc:  denied  { write } for  pid=16872 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  666.337327][T16874] could not allocate digest TFM handle cmac(twofish-asm)
[  666.420491][ T5781] Bluetooth: hci3: command tx timeout
[  666.459135][T16783] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  666.479263][T16891] netlink: 'syz.5.3809': attribute type 64 has an invalid length.
[  666.493958][T16783] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  666.499429][T16783] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  666.505171][T16783] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  666.528607][ T5435] 8021q: adding VLAN 0 to HW filter on device eth12
[  666.535834][T16783] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  666.541469][T16783] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  666.547862][T16783] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  666.572223][T16783] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  666.640431][T16894] syzkaller0: entered promiscuous mode
[  666.642409][T16894] syzkaller0: entered allmulticast mode
[  666.647774][T16897] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22)
[  666.725337][ T5890] IPVS: stop unused estimator thread 0...
[  666.763288][T16783] 8021q: adding VLAN 0 to HW filter on device bond0
[  666.784378][T16783] 8021q: adding VLAN 0 to HW filter on device team0
[  666.797248][T12882] bridge0: port 1(bridge_slave_0) entered blocking state
[  666.799729][T12882] bridge0: port 1(bridge_slave_0) entered forwarding state
[  666.809560][T12882] bridge0: port 2(bridge_slave_1) entered blocking state
[  666.812527][T12882] bridge0: port 2(bridge_slave_1) entered forwarding state
[  666.998905][ T5435] 8021q: adding VLAN 0 to HW filter on device eth13
[  667.019010][ T5860] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  667.019104][T16919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  667.025796][T16920] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  667.113145][T16939] netlink: 'syz.3.3817': attribute type 64 has an invalid length.
[  667.116198][T16907] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO)
[  667.119498][T16907] device-mapper: ioctl: error adding target to table
[  667.161315][T16783] 8021q: adding VLAN 0 to HW filter on device batadv0
[  667.174800][ T5860] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[  667.180062][ T5860] usb 5-1: Dual-Role OTG device on HNP port
[  667.183316][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  667.215036][T16951] syzkaller0: entered promiscuous mode
[  667.216971][ T5860] gspca_main: spca501-2.14.0 probing 0000:0000
[  667.217101][T16951] syzkaller0: entered allmulticast mode
[  667.222275][ T5860] gspca_spca501: reg write: error -32
[  667.224806][ T5860] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  667.227058][ T5860] spca501 5-1:1.0: probe with driver spca501 failed with error -22
[  667.230246][ T5860] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  667.322327][T16783] veth0_vlan: entered promiscuous mode
[  667.329501][T16783] veth1_vlan: entered promiscuous mode
[  667.355806][T16783] veth0_macvtap: entered promiscuous mode
[  667.361486][T16783] veth1_macvtap: entered promiscuous mode
[  667.370122][T16783] batman_adv: batadv0: Interface activated: batadv_slave_0
[  667.376252][T16783] batman_adv: batadv0: Interface activated: batadv_slave_1
[  667.410498][ T5890] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  667.444038][T10941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  667.449382][T11540] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  667.454673][T10941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  667.478959][T10941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  667.482374][T10941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  667.488944][ T5890] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  667.491915][ T5890] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  668.498895][ T5781] Bluetooth: hci3: command tx timeout
[  670.589460][ T5781] Bluetooth: hci3: command tx timeout
[  672.669033][ T5781] Bluetooth: hci3: command tx timeout
[  678.037916][   T42] kauditd_printk_skb: 4 callbacks suppressed
[  678.037931][   T42] audit: type=1400 audit(1786645294.347:1392): avc:  denied  { write } for  pid=16973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  678.085188][   T42] audit: type=1400 audit(1786645294.397:1393): avc:  denied  { write } for  pid=16976 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  678.541919][   T42] audit: type=1400 audit(1786645294.857:1394): avc:  denied  { write } for  pid=16979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  678.592069][   T42] audit: type=1400 audit(1786645294.907:1395): avc:  denied  { write } for  pid=16982 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  679.060150][   T42] audit: type=1400 audit(1786645295.377:1396): avc:  denied  { write } for  pid=16985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  679.114191][   T42] audit: type=1400 audit(1786645295.427:1397): avc:  denied  { write } for  pid=16988 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  679.250939][   T42] audit: type=1400 audit(1786645295.567:1398): avc:  denied  { write } for  pid=16991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  679.307876][   T42] audit: type=1400 audit(1786645295.617:1399): avc:  denied  { write } for  pid=16994 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  685.941661][ T1437] ieee802154 phy0 wpan0: encryption failed: -22
[  685.944186][ T1437] ieee802154 phy1 wpan1: encryption failed: -22
[  686.856520][   T42] audit: type=1400 audit(1786645303.167:1400): avc:  denied  { connect } for  pid=17000 comm="syz.5.3822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  686.868047][   T42] audit: type=1400 audit(1786645303.167:1401): avc:  denied  { shutdown } for  pid=17000 comm="syz.5.3822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  686.877119][T17002] program syz.5.3822 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  686.890048][T17012] FAULT_INJECTION: forcing a failure.
[  686.890048][T17012] name failslab, interval 1, probability 0, space 0, times 0
[  686.895247][T17012] CPU: 0 UID: 0 PID: 17012 Comm: syz.6.3824 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  686.895275][T17012] Tainted: [L]=SOFTLOCKUP
[  686.895282][T17012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  686.895292][T17012] Call Trace:
[  686.895312][T17012]  <TASK>
[  686.895320][T17012]  dump_stack_lvl+0x100/0x190
[  686.895349][T17012]  should_fail_ex.cold+0x5/0xa
[  686.895370][T17012]  should_failslab+0xc2/0x120
[  686.895393][T17012]  __kmalloc_noprof+0xfc/0x820
[  686.895410][T17012]  ? rcu_is_watching+0x12/0xc0
[  686.895428][T17012]  ? tomoyo_realpath_from_path+0xb6/0x690
[  686.895452][T17012]  tomoyo_realpath_from_path+0xb6/0x690
[  686.895467][T17012]  tomoyo_path_number_perm+0x23c/0x580
[  686.895483][T17012]  ? tomoyo_path_number_perm+0x22e/0x580
[  686.895501][T17012]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  686.895531][T17012]  ? find_held_lock+0x2b/0x80
[  686.895542][T17012]  ? __fget_files+0x215/0x3d0
[  686.895554][T17012]  ? hook_file_ioctl_common+0x140/0x440
[  686.895568][T17012]  ? __fget_files+0x215/0x3d0
[  686.895582][T17012]  ? __fget_files+0x21f/0x3d0
[  686.895597][T17012]  security_file_ioctl+0xd3/0x230
[  686.895622][T17012]  __x64_sys_ioctl+0xb7/0x210
[  686.895641][T17012]  do_syscall_64+0x115/0x870
[  686.895660][T17012]  ? clear_bhb_loop+0x70/0xc0
[  686.895678][T17012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.895690][T17012] RIP: 0033:0x7fa40d19e0d9
[  686.895701][T17012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  686.895713][T17012] RSP: 002b:00007fa40e105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  686.895731][T17012] RAX: ffffffffffffffda RBX: 00007fa40d425fa0 RCX: 00007fa40d19e0d9
[  686.895738][T17012] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000011
[  686.895745][T17012] RBP: 00007fa40e105090 R08: 0000000000000000 R09: 0000000000000000
[  686.895752][T17012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  686.895758][T17012] R13: 00007fa40d426038 R14: 00007fa40d425fa0 R15: 00007ffd0e3c4058
[  686.895773][T17012]  </TASK>
[  686.895779][T17012] ERROR: Out of memory at tomoyo_realpath_from_path.
[  687.161617][T17021] __nla_validate_parse: 7 callbacks suppressed
[  687.161630][T17021] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3827'.
[  687.170845][T17021] netlink: 'syz.6.3827': attribute type 64 has an invalid length.
[  687.234821][T17024] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3827'.
[  687.248534][T17026] syzkaller0: entered promiscuous mode
[  687.250816][T17026] syzkaller0: entered allmulticast mode
[  687.374693][T17031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3831'.
[  687.431154][T17028] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO)
[  687.434454][T17028] device-mapper: ioctl: error adding target to table
[  687.527874][T17037] fuse: fd is not a fuse device
[  687.532826][T17037] openvswitch: netlink: Missing key (keys=40, expected=100)
[  687.535943][   T42] audit: type=1400 audit(1786645303.847:1402): avc:  denied  { create } for  pid=17036 comm="syz.3.3833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  687.553329][   T42] audit: type=1400 audit(1786645303.867:1403): avc:  denied  { write } for  pid=17036 comm="syz.3.3833" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  687.553867][T17037] random: crng reseeded on system resumption
[  687.563238][   T42] audit: type=1400 audit(1786645303.867:1404): avc:  denied  { open } for  pid=17036 comm="syz.3.3833" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  687.580011][   T42] audit: type=1400 aqemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details.
udit(1786645303.897:1405): avc:  denied  { ioctl } for  pid=17036 comm="syz.3.3833" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  687.642630][   T42] audit: type=1400 audit(1786645303.957:1406): avc:  denied  { setattr } for  pid=17036 comm="syz.3.3833" name="file0" dev="9p" ino=77093665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  687.786273][T17048] syzkaller0: entered promiscuous mode
[  687.788083][T17048] syzkaller0: entered allmulticast mode
[  687.857215][   T42] audit: type=1400 audit(1786645304.167:1407): avc:  denied  { ioctl } for  pid=17049 comm="syz.3.3837" path="socket:[79097]" dev="sockfs" ino=79097 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  687.931251][ T5825] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[  688.009491][T17062] syzkaller0: entered promiscuous mode
[  688.011746][T17062] syzkaller0: entered allmulticast mode
[  688.095871][T17066] syzkaller0: entered promiscuous mode
[  688.097715][T17066] syzkaller0: entered allmulticast mode
[  688.100893][ T5825] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  688.106100][ T5825] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  688.111088][ T5825] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  688.118623][ T5825] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.121618][ T5825] usb 9-1: Product: syz
[  688.123300][ T5825] usb 9-1: Manufacturer: syz
[  688.125332][ T5825] usb 9-1: SerialNumber: syz
[  688.133668][ T5825] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected
[  688.141258][T17070] ubi0: attaching mtd0
[  688.143661][T17070] FAULT_INJECTION: forcing a failure.
[  688.143661][T17070] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  688.170368][ T5825] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  688.170662][T17070] CPU: 3 UID: 0 PID: 17070 Comm: syz.3.3846 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  688.170690][T17070] Tainted: [L]=SOFTLOCKUP
[  688.170697][T17070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  688.170708][T17070] Call Trace:
[  688.170716][T17070]  <TASK>
[  688.170723][T17070]  dump_stack_lvl+0x100/0x190
[  688.170751][T17070]  should_fail_ex.cold+0x5/0xa
[  688.170771][T17070]  ? prepare_alloc_pages+0x16d/0x5f0
[  688.170798][T17070]  should_fail_alloc_page+0xeb/0x140
[  688.170830][T17070]  prepare_alloc_pages+0x1f0/0x5f0
[  688.170859][T17070]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  688.170885][T17070]  ? rcu_is_watching+0x12/0xc0
[  688.170912][T17070]  ? trace_mm_page_alloc+0x164/0x1c0
[  688.170937][T17070]  ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0
[  688.170957][T17070]  ? is_bpf_text_address+0x8a/0x1a0
[  688.170984][T17070]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  688.171005][T17070]  ? is_bpf_text_address+0x94/0x1a0
[  688.171030][T17070]  ? kernel_text_address+0x8d/0x100
[  688.171050][T17070]  ? __kernel_text_address+0xd/0x30
[  688.171071][T17070]  ? unwind_get_return_address+0x59/0xa0
[  688.171090][T17070]  ? arch_stack_walk+0xa6/0xf0
[  688.171110][T17070]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  688.171138][T17070]  ? stack_trace_save+0x8e/0xc0
[  688.171157][T17070]  ? __pfx_stack_trace_save+0x10/0x10
[  688.171187][T17070]  alloc_pages_bulk_noprof+0x5de/0x13c0
[  688.171213][T17070]  ? policy_nodemask+0xed/0x4f0
[  688.171240][T17070]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[  688.171275][T17070]  __kasan_populate_vmalloc+0xf0/0x210
[  688.171301][T17070]  alloc_vmap_area+0x95d/0x2bb0
[  688.171332][T17070]  ? kasan_save_track+0x14/0x30
[  688.171354][T17070]  ? __kasan_kmalloc+0xaa/0xb0
[  688.171374][T17070]  ? __pfx_alloc_vmap_area+0x10/0x10
[  688.171399][T17070]  ? __get_vm_area_node+0x101/0x330
[  688.171426][T17070]  __get_vm_area_node+0x1ca/0x330
[  688.171456][T17070]  __vmalloc_node_range_noprof+0x228/0x1630
[  688.171483][T17070]  ? ubi_attach_mtd_dev+0x1353/0x32a0
[  688.171549][T17070]  ? _printk+0xcf/0x110
[  688.171571][T17070]  ? ubi_attach_mtd_dev+0x1353/0x32a0
[  688.171596][T17070]  ? __debug_object_init+0x2de/0x3d0
[  688.171635][T17070]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  688.171661][T17070]  ? ubi_msg+0x114/0x159
[  688.171680][T17070]  ? __pfx_ubi_msg+0x10/0x10
[  688.171702][T17070]  ? lockdep_init_map_type+0x5c/0x250
[  688.171729][T17070]  ? ubi_attach_mtd_dev+0x1353/0x32a0
[  688.171753][T17070]  __vmalloc_node_noprof+0xad/0xf0
[  688.171798][T17070]  ? ubi_attach_mtd_dev+0x1353/0x32a0
[  688.171830][T17070]  ubi_attach_mtd_dev+0x1353/0x32a0
[  688.171867][T17070]  ? __pfx_ubi_attach_mtd_dev+0x10/0x10
[  688.171891][T17070]  ? __pfx_get_mtd_device+0x10/0x10
[  688.171918][T17070]  ctrl_cdev_ioctl+0x36a/0x400
[  688.171943][T17070]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  688.171970][T17070]  ? selinux_file_ioctl+0x13b/0x290
[  688.171997][T17070]  ? selinux_file_ioctl+0xb6/0x290
[  688.172026][T17070]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  688.172052][T17070]  __x64_sys_ioctl+0x18e/0x210
[  688.172082][T17070]  do_syscall_64+0x115/0x870
[  688.172108][T17070]  ? clear_bhb_loop+0x70/0xc0
[  688.172130][T17070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.172148][T17070] RIP: 0033:0x7fdd2519e0d9
[  688.172164][T17070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  688.172181][T17070] RSP: 002b:00007fdd260f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  688.172198][T17070] RAX: ffffffffffffffda RBX: 00007fdd25425fa0 RCX: 00007fdd2519e0d9
[  688.172210][T17070] RDX: 0000200000000300 RSI: 0000000040186f40 RDI: 0000000000000003
[  688.172221][T17070] RBP: 00007fdd260f8090 R08: 0000000000000000 R09: 0000000000000000
[  688.172232][T17070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  688.172242][T17070] R13: 00007fdd25426038 R14: 00007fdd25425fa0 R15: 00007fff1be2d3d8
[  688.172268][T17070]  </TASK>
[  688.186676][T17070] syz.3.3846: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null)
[  688.197226][ T5825] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  688.198987][T17070] ,cpuset=/,mems_allowed=0-1
[  688.336768][T17070] CPU: 3 UID: 0 PID: 17070 Comm: syz.3.3846 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  688.336795][T17070] Tainted: [L]=SOFTLOCKUP
[  688.336802][T17070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  688.336812][T17070] Call Trace:
[  688.336820][T17070]  <TASK>
[  688.336827][T17070]  dump_stack_lvl+0x100/0x190
[  688.336856][T17070]  warn_alloc.cold+0x94/0xa8
[  688.336876][T17070]  ? __pfx_warn_alloc+0x10/0x10
[  688.336895][T17070]  ? lockdep_hardirqs_on+0x78/0x100
[  688.336940][T17070]  ? __get_vm_area_node+0x2cd/0x330
[  688.336970][T17070]  ? __get_vm_area_node+0x208/0x330
[  688.337000][T17070]  __vmalloc_node_range_noprof+0xccd/0x1630
[  688.337030][T17070]  ? _printk+0xcf/0x110
[  688.337050][T17070]  ? ubi_attach_mtd_dev+0x1353/0x32a0
[  688.337078][T17070]  ? __debug_object_init+0x2de/0x3d0
[  688.337107][T17070]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  688.337133][T17070]  ? ubi_msg+0x114/0x159
[  688.337150][T17070]  ? __pfx_ubi_msg+0x10/0x10
[  688.337171][T17070]  ? lockdep_init_map_type+0x5c/0x250
[  688.337198][T17070]  ? ubi_attach_mtd_dev+0x1353/0x32a0
[  688.337221][T17070]  __vmalloc_node_noprof+0xad/0xf0
[  688.337247][T17070]  ? ubi_attach_mtd_dev+0x1353/0x32a0
[  688.337273][T17070]  ubi_attach_mtd_dev+0x1353/0x32a0
[  688.337308][T17070]  ? __pfx_ubi_attach_mtd_dev+0x10/0x10
[  688.337332][T17070]  ? __pfx_get_mtd_device+0x10/0x10
[  688.337358][T17070]  ctrl_cdev_ioctl+0x36a/0x400
[  688.337383][T17070]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  688.337409][T17070]  ? selinux_file_ioctl+0x13b/0x290
[  688.337435][T17070]  ? selinux_file_ioctl+0xb6/0x290
[  688.337463][T17070]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  688.337489][T17070]  __x64_sys_ioctl+0x18e/0x210
[  688.337518][T17070]  do_syscall_64+0x115/0x870
[  688.337542][T17070]  ? clear_bhb_loop+0x70/0xc0
[  688.337564][T17070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.337582][T17070] RIP: 0033:0x7fdd2519e0d9
[  688.337598][T17070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  688.337614][T17070] RSP: 002b:00007fdd260f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  688.337632][T17070] RAX: ffffffffffffffda RBX: 00007fdd25425fa0 RCX: 00007fdd2519e0d9
[  688.337644][T17070] RDX: 0000200000000300 RSI: 0000000040186f40 RDI: 0000000000000003
[  688.337654][T17070] RBP: 00007fdd260f8090 R08: 0000000000000000 R09: 0000000000000000
[  688.337665][T17070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  688.337675][T17070] R13: 00007fdd25426038 R14: 00007fdd25425fa0 R15: 00007fff1be2d3d8
[  688.337699][T17070]  </TASK>
[  688.337767][T17070] Mem-Info:
[  688.439448][T17070] active_anon:8914 inactive_anon:7 isolated_anon:0
[  688.439448][T17070]  active_file:6814 inactive_file:45203 isolated_file:0
[  688.439448][T17070]  unevictable:1000 dirty:268 writeback:0
[  688.439448][T17070]  slab_reclaimable:9609 slab_unreclaimable:75906
[  688.439448][T17070]  mapped:27685 shmem:1567 pagetables:1681
[  688.439448][T17070]  sec_pagetables:303 bounce:0
[  688.439448][T17070]  kernel_misc_reclaimable:0
[  688.439448][T17070]  free:448319 free_pcp:6973 free_cma:0
[  688.460695][T17070] Node 0 active_anon:35656kB inactive_anon:28kB active_file:27256kB inactive_file:180528kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:90208kB dirty:1048kB writeback:0kB shmem:4268kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15712kB pagetables:6496kB sec_pagetables:1212kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  688.473852][T17070] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:284kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:20532kB dirty:24kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  688.486829][T17070] Node 0 DMA free:11076kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:60kB local_pcp:48kB free_cma:0kB
[  688.496680][T17070] lowmem_reserve[]: 0 1225 1225 1225 1225
[  688.498502][T17070] Node 0 DMA32 free:184604kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35652kB inactive_anon:28kB active_file:27256kB inactive_file:180528kB unevictable:2000kB writepending:1048kB zspages:352kB present:2080628kB managed:1255316kB mlocked:0kB bounce:0kB free_pcp:20504kB local_pcp:5940kB free_cma:0kB
[  688.509443][T17070] lowmem_reserve[]: 0 0 0 0 0
[  688.511029][T17070] Node 1 Normal free:1597596kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:284kB unevictable:2000kB writepending:24kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:8432kB local_pcp:4096kB free_cma:0kB
[  688.522800][T17070] lowmem_reserve[]: 0 0 0 0 0
[  688.524849][T17070] Node 0 DMA: 3*4kB (UM) 3*8kB (UM) 8*16kB (UM) 7*32kB (UME) 5*64kB (UME) 1*128kB (E) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11076kB
[  688.531967][T17070] Node 0 DMA32: 461*4kB (UME) 1099*8kB (UME) 539*16kB (UME) 415*32kB (UME) 164*64kB (UME) 123*128kB (UME) 75*256kB (UME) 54*512kB (UM) 39*1024kB (UM) 11*2048kB (UM) 4*4096kB (UM) = 184476kB
[  688.540280][T17070] Node 1 Normal: 27*4kB (UM) 38*8kB (UME) 34*16kB (UM) 45*32kB (UME) 37*64kB (UME) 30*128kB (UME) 19*256kB (UM) 20*512kB (UM) 9*1024kB (UME) 14*2048kB (UME) 375*4096kB (UM) = 1597596kB
[  688.547784][T17070] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  688.551807][T17070] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=0 hugepages_size=2048kB
[  688.555718][T17070] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  688.560163][T17070] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  688.563824][T17070] 53591 total pagecache pages
[  688.565553][T17070] 11 pages in swap cache
[  688.566953][T17070] Free swap  = 124856kB
[  688.568359][T17070] Total swap = 124996kB
[  688.570535][T17070] 1048443 pages RAM
[  688.572248][T17070] 0 pages HighMem/MovableOnly
[  688.574277][T17070] 285303 pages reserved
[  688.576113][T17070] 0 pages cma reserved
[  690.610230][T17093] syzkaller0: entered promiscuous mode
[  690.612078][T17093] syzkaller0: entered allmulticast mode
[  690.707251][ T5825] usb 9-1: USB disconnect, device number 42
[  690.720737][ T5825] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  690.731318][ T5825] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  690.735536][ T5825] ti_usb_3410_5052 9-1:2.0: device disconnected
[  690.738901][   T42] audit: type=1400 audit(1786645307.047:1408): avc:  denied  { getattr } for  pid=17096 comm="syz.4.3851" path="pid:[4026532862]" dev="nsfs" ino=4026532862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  690.762637][   T42] audit: type=1400 audit(1786645307.077:1409): avc:  denied  { mounton } for  pid=17096 comm="syz.4.3851" path="/407/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[  690.762853][T17097] overlayfs: failed to resolve 'xino=on': -2
[  690.829700][T17106] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3853'.
[  690.833726][T17106] netlink: 'syz.3.3853': attribute type 64 has an invalid length.
[  690.850232][T17106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3853'.
[  690.891502][T17111] block2mtd: parameter too long
[  691.147767][T17125] FAULT_INJECTION: forcing a failure.
[  691.147767][T17125] name failslab, interval 1, probability 0, space 0, times 0
[  691.152773][T17125] CPU: 3 UID: 0 PID: 17125 Comm: syz.5.3861 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  691.152801][T17125] Tainted: [L]=SOFTLOCKUP
[  691.152808][T17125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  691.152819][T17125] Call Trace:
[  691.152826][T17125]  <TASK>
[  691.152834][T17125]  dump_stack_lvl+0x100/0x190
[  691.152862][T17125]  should_fail_ex.cold+0x5/0xa
[  691.152885][T17125]  should_failslab+0xc2/0x120
[  691.152910][T17125]  __kvmalloc_node_noprof+0x116/0x970
[  691.152949][T17125]  ? find_held_lock+0x2b/0x80
[  691.152967][T17125]  ? proc_sys_call_handler+0x169/0x5a0
[  691.153005][T17125]  ? proc_sys_call_handler+0x169/0x5a0
[  691.153026][T17125]  ? proc_sys_call_handler+0x2c7/0x5a0
[  691.153054][T17125]  proc_sys_call_handler+0x2c7/0x5a0
[  691.153079][T17125]  ? __pfx_proc_sys_call_handler+0x10/0x10
[  691.153110][T17125]  vfs_write+0x6ac/0x1050
[  691.153128][T17125]  ? __pfx_proc_sys_write+0x10/0x10
[  691.153152][T17125]  ? __pfx_vfs_write+0x10/0x10
[  691.153167][T17125]  ? find_held_lock+0x2b/0x80
[  691.153199][T17125]  __x64_sys_pwrite64+0x1eb/0x250
[  691.153218][T17125]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[  691.153245][T17125]  do_syscall_64+0x115/0x870
[  691.153270][T17125]  ? clear_bhb_loop+0x70/0xc0
[  691.153293][T17125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.153311][T17125] RIP: 0033:0x7f6b7cf9e0d9
[  691.153327][T17125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  691.153344][T17125] RSP: 002b:00007f6b7df06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  691.153362][T17125] RAX: ffffffffffffffda RBX: 00007f6b7d225fa0 RCX: 00007f6b7cf9e0d9
[  691.153374][T17125] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000006
[  691.153384][T17125] RBP: 00007f6b7df06090 R08: 0000000000000000 R09: 0000000000000000
[  691.153395][T17125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  691.153405][T17125] R13: 00007f6b7d226038 R14: 00007f6b7d225fa0 R15: 00007ffebac6ae08
[  691.153431][T17125]  </TASK>
[  691.274819][T17132] fuse: fd is not a fuse device
[  691.345591][T17136] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3865'.
[  691.349580][T17136] netlink: 'syz.3.3865': attribute type 64 has an invalid length.
[  691.356225][T17136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3865'.
[  691.518891][ T5825] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[  691.535499][T17140] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO)
[  691.540073][T17140] device-mapper: ioctl: error adding target to table
[  691.680856][ T5825] usb 11-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  691.686338][ T5825] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  691.691482][ T5825] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  691.696615][ T5825] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  691.700357][ T5825] usb 11-1: Product: syz
[  691.701832][ T5825] usb 11-1: Manufacturer: syz
[  691.703632][ T5825] usb 11-1: SerialNumber: syz
[  691.710807][ T5825] ti_usb_3410_5052 11-1:2.0: TI USB 5052 2 port adapter converter detected
[  691.715866][ T5825] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  691.721190][ T5825] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  691.776256][T17161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3874'.
[  691.779444][T17161] netlink: 'syz.3.3874': attribute type 64 has an invalid length.
[  691.785758][T17161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3874'.
[  691.823254][T17163] syzkaller0: entered promiscuous mode
[  691.825281][T17163] syzkaller0: entered allmulticast mode
[  691.858845][ T5860] usb 9-1: new full-speed USB device number 43 using dummy_hcd
[  691.928877][ T5889] usb 10-1: new full-speed USB device number 29 using dummy_hcd
[  692.011566][ T5860] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  692.018305][ T5860] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0
[  692.025266][ T5860] usb 9-1: config 0 interface 0 has no altsetting 0
[  692.033843][ T5860] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  692.038852][ T5860] usb 9-1: Product: syz
[  692.040260][ T5860] usb 9-1: Manufacturer: syz
[  692.041806][ T5860] usb 9-1: SerialNumber: syz
[  692.045926][ T5860] usb 9-1: config 0 descriptor??
[  692.053199][ T5860] usb 9-1: selecting invalid altsetting 0
[  692.080613][ T5889] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  692.084426][ T5889] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  692.087860][ T5889] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  692.093658][ T5889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  692.275559][ T5825] usb 9-1: USB disconnect, device number 43
[  692.309472][ T5889] usb 10-1: usb_control_msg returned -32
[  692.315807][ T5889] usbtmc 10-1:16.0: can't read capabilities
[  692.416695][T17175] block device autoloading is deprecated and will be removed.
[  692.465108][T17177] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3880'.
[  692.502655][T17177] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17177 comm=syz.3.3880
[  692.830695][T17180] syzkaller0: entered promiscuous mode
[  692.832972][T17180] syzkaller0: entered allmulticast mode
[  692.843835][T17180] tipc: Started in network mode
[  692.845644][T17180] tipc: Node identity 92b5feb04ea1, cluster identity 4711
[  692.850104][T17180] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  692.853230][T17179] tipc: Resetting bearer <eth:syzkaller0>
[  692.870011][T17179] tipc: Disabling bearer <eth:syzkaller0>
[  692.980170][T17133] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110
[  692.983604][T17133] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32
[  692.985873][T17133] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32
[  692.990389][T17133] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32
[  692.995856][   T24] usb 11-1: USB disconnect, device number 2
[  693.008002][   T24] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  693.013638][   T24] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  693.017515][   T24] ti_usb_3410_5052 11-1:2.0: device disconnected
[  693.026742][T17182] FAULT_INJECTION: forcing a failure.
[  693.026742][T17182] name failslab, interval 1, probability 0, space 0, times 0
[  693.031139][T17182] CPU: 0 UID: 0 PID: 17182 Comm: syz.4.3882 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  693.031157][T17182] Tainted: [L]=SOFTLOCKUP
[  693.031162][T17182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  693.031169][T17182] Call Trace:
[  693.031174][T17182]  <TASK>
[  693.031179][T17182]  dump_stack_lvl+0x100/0x190
[  693.031216][T17182]  should_fail_ex.cold+0x5/0xa
[  693.031231][T17182]  should_failslab+0xc2/0x120
[  693.031247][T17182]  kmem_cache_alloc_noprof+0x91/0x6a0
[  693.031263][T17182]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  693.031280][T17182]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  693.031298][T17182]  mmu_topup_memory_caches+0x25/0x170
[  693.031316][T17182]  kvm_mmu_load+0xe2/0x2570
[  693.031332][T17182]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  693.031344][T17182]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  693.031358][T17182]  ? __pfx_kvm_mmu_load+0x10/0x10
[  693.031374][T17182]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  693.031388][T17182]  ? kvm_check_and_inject_events+0x873/0x12a0
[  693.031405][T17182]  ? record_steal_time+0x3a0/0xbb0
[  693.031419][T17182]  vcpu_run+0x3aaa/0x5de0
[  693.031435][T17182]  ? mark_held_locks+0x40/0x70
[  693.031455][T17182]  ? __pfx_vcpu_run+0x10/0x10
[  693.031477][T17182]  ? rcu_is_watching+0x12/0xc0
[  693.031497][T17182]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  693.031514][T17182]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  693.031536][T17182]  kvm_vcpu_ioctl+0x730/0x1700
[  693.031550][T17182]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  693.031563][T17182]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  693.031579][T17182]  ? do_vfs_ioctl+0x226/0x13e0
[  693.031597][T17182]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  693.031614][T17182]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  693.031639][T17182]  ? __fget_files+0x215/0x3d0
[  693.031650][T17182]  ? hook_file_ioctl_common+0x140/0x440
[  693.031667][T17182]  ? selinux_file_ioctl+0x13b/0x290
[  693.031684][T17182]  ? selinux_file_ioctl+0xb6/0x290
[  693.031704][T17182]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  693.031718][T17182]  __x64_sys_ioctl+0x18e/0x210
[  693.031737][T17182]  do_syscall_64+0x115/0x870
[  693.031754][T17182]  ? clear_bhb_loop+0x70/0xc0
[  693.031768][T17182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.031779][T17182] RIP: 0033:0x7f519179e0d9
[  693.031790][T17182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  693.031801][T17182] RSP: 002b:00007f5192695028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  693.031813][T17182] RAX: ffffffffffffffda RBX: 00007f5191a25fa0 RCX: 00007f519179e0d9
[  693.031820][T17182] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[  693.031826][T17182] RBP: 00007f5192695090 R08: 0000000000000000 R09: 0000000000000000
[  693.031833][T17182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  693.031839][T17182] R13: 00007f5191a26038 R14: 00007f5191a25fa0 R15: 00007ffde30a1118
[  693.031854][T17182]  </TASK>
[  693.255778][T17185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3883'.
[  693.262368][T17185] l2tp_ppp: sess 2/0: no socket in recv
[  693.328852][   T42] audit: type=1400 audit(1786645309.637:1410): avc:  denied  { getopt } for  pid=17184 comm="syz.4.3883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  693.652215][T17202] netlink: 'syz.6.3888': attribute type 1 has an invalid length.
[  693.657186][T17202] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3888'.
[  694.305092][T17210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3891'.
[  694.309208][T17210] netlink: 'syz.3.3891': attribute type 64 has an invalid length.
[  694.318959][T17210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3891'.
[  694.557365][T17229] netlink: NAT attribute type 1 has unexpected length (1 != 0)
[  694.560978][T17229] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  694.664855][T17236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3901'.
[  694.668487][T17236] netlink: 'syz.4.3901': attribute type 64 has an invalid length.
[  694.677074][T17236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3901'.
[  694.707259][   T42] audit: type=1400 audit(1786645311.017:1411): avc:  denied  { setcurrent } for  pid=17237 comm="syz.6.3902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  694.720029][T11098] usb 10-1: USB disconnect, device number 29
[  694.723212][   T42] audit: type=1401 audit(1786645311.017:1412): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t
[  694.828415][T17247] fuse: fd is not a fuse device
[  694.995077][T17255] FAULT_INJECTION: forcing a failure.
[  694.995077][T17255] name failslab, interval 1, probability 0, space 0, times 0
[  695.011081][T17255] CPU: 3 UID: 0 PID: 17255 Comm: syz.3.3909 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  695.011130][T17255] Tainted: [L]=SOFTLOCKUP
[  695.011137][T17255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  695.011154][T17255] Call Trace:
[  695.011171][T17255]  <TASK>
[  695.011179][T17255]  dump_stack_lvl+0x100/0x190
[  695.011227][T17255]  should_fail_ex.cold+0x5/0xa
[  695.011247][T17255]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  695.011285][T17255]  should_failslab+0xc2/0x120
[  695.011310][T17255]  kmem_cache_alloc_noprof+0x91/0x6a0
[  695.011334][T17255]  ? skb_clone+0x190/0x400
[  695.011399][T17255]  skb_clone+0x190/0x400
[  695.011424][T17255]  netlink_deliver_tap+0xaed/0xcc0
[  695.011485][T17255]  netlink_unicast+0x62b/0x850
[  695.011510][T17255]  ? __pfx_netlink_unicast+0x10/0x10
[  695.011537][T17255]  netlink_sendmsg+0x8b0/0xda0
[  695.011562][T17255]  ? __pfx_netlink_sendmsg+0x10/0x10
[  695.011585][T17255]  ? selinux_socket_sendmsg+0x198/0x2f0
[  695.011622][T17255]  ____sys_sendmsg+0xa4d/0xbe0
[  695.011656][T17255]  ? __pfx_netlink_sendmsg+0x10/0x10
[  695.011677][T17255]  ? __pfx_____sys_sendmsg+0x10/0x10
[  695.011713][T17255]  ___sys_sendmsg+0x190/0x1e0
[  695.011733][T17255]  ? __pfx____sys_sendmsg+0x10/0x10
[  695.011749][T17255]  ? __lock_acquire+0x49f/0x1a40
[  695.011772][T17255]  ? get_pid_task+0x106/0x250
[  695.011813][T17255]  __sys_sendmsg+0x160/0x210
[  695.011837][T17255]  ? __pfx___sys_sendmsg+0x10/0x10
[  695.011873][T17255]  do_syscall_64+0x115/0x870
[  695.011945][T17255]  ? clear_bhb_loop+0x70/0xc0
[  695.011965][T17255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.011984][T17255] RIP: 0033:0x7fdd2519e0d9
[  695.012007][T17255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  695.012024][T17255] RSP: 002b:00007fdd260f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  695.012055][T17255] RAX: ffffffffffffffda RBX: 00007fdd25425fa0 RCX: 00007fdd2519e0d9
[  695.012066][T17255] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000003
[  695.012076][T17255] RBP: 00007fdd260f8090 R08: 0000000000000000 R09: 0000000000000000
[  695.012086][T17255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  695.012096][T17255] R13: 00007fdd25426038 R14: 00007fdd25425fa0 R15: 00007fff1be2d3d8
[  695.012118][T17255]  </TASK>
[  695.023034][T17256] FAULT_INJECTION: forcing a failure.
[  695.023034][T17256] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  695.113033][T17256] CPU: 1 UID: 0 PID: 17256 Comm: syz.5.3910 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  695.113053][T17256] Tainted: [L]=SOFTLOCKUP
[  695.113057][T17256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  695.113064][T17256] Call Trace:
[  695.113069][T17256]  <TASK>
[  695.113074][T17256]  dump_stack_lvl+0x100/0x190
[  695.113093][T17256]  should_fail_ex.cold+0x5/0xa
[  695.113108][T17256]  _copy_from_user+0x2e/0xd0
[  695.113133][T17256]  copy_msghdr_from_user+0x9f/0x4c0
[  695.113147][T17256]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  695.113161][T17256]  ? rcu_is_watching+0x12/0xc0
[  695.113179][T17256]  ? ___sys_sendmsg+0x19d/0x1e0
[  695.113189][T17256]  ? kfree+0x1e5/0x6c0
[  695.113201][T17256]  ___sys_sendmsg+0x106/0x1e0
[  695.113214][T17256]  ? __pfx____sys_sendmsg+0x10/0x10
[  695.113237][T17256]  ? __pfx___might_resched+0x10/0x10
[  695.113255][T17256]  __sys_sendmmsg+0x20c/0x440
[  695.113272][T17256]  ? __pfx___sys_sendmmsg+0x10/0x10
[  695.113287][T17256]  ? ksys_write+0x190/0x250
[  695.113307][T17256]  ? fput+0x79/0x100
[  695.113321][T17256]  ? ksys_write+0x1ac/0x250
[  695.113331][T17256]  ? __pfx_ksys_write+0x10/0x10
[  695.113344][T17256]  __x64_sys_sendmmsg+0x9c/0x100
[  695.113359][T17256]  ? lockdep_hardirqs_on+0x78/0x100
[  695.113376][T17256]  do_syscall_64+0x115/0x870
[  695.113392][T17256]  ? clear_bhb_loop+0x70/0xc0
[  695.113406][T17256]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.113418][T17256] RIP: 0033:0x7f6b7cf9e0d9
[  695.113432][T17256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  695.113444][T17256] RSP: 002b:00007f6b7df06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  695.113456][T17256] RAX: ffffffffffffffda RBX: 00007f6b7d225fa0 RCX: 00007f6b7cf9e0d9
[  695.113463][T17256] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000007
[  695.113470][T17256] RBP: 00007f6b7df06090 R08: 0000000000000000 R09: 0000000000000000
[  695.113477][T17256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  695.113483][T17256] R13: 00007f6b7d226038 R14: 00007f6b7d225fa0 R15: 00007ffebac6ae08
[  695.113498][T17256]  </TASK>
[  695.260033][T17267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65521 sclass=netlink_route_socket pid=17267 comm=syz.5.3914
[  695.266723][   T42] audit: type=1400 audit(1786645311.577:1413): avc:  denied  { write } for  pid=17266 comm="syz.5.3914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  695.275026][T17267] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[  695.350725][T17276] xt_hashlimit: size too large, truncated to 1048576
[  695.402273][T17280] FAULT_INJECTION: forcing a failure.
[  695.402273][T17280] name failslab, interval 1, probability 0, space 0, times 0
[  695.408311][T17280] CPU: 3 UID: 0 PID: 17280 Comm: syz.3.3918 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  695.408331][T17280] Tainted: [L]=SOFTLOCKUP
[  695.408335][T17280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  695.408349][T17280] Call Trace:
[  695.408355][T17280]  <TASK>
[  695.408360][T17280]  dump_stack_lvl+0x100/0x190
[  695.408391][T17280]  should_fail_ex.cold+0x5/0xa
[  695.408406][T17280]  should_failslab+0xc2/0x120
[  695.408422][T17280]  kmem_cache_alloc_noprof+0x91/0x6a0
[  695.408436][T17280]  ? net_generic+0xea/0x2a0
[  695.408481][T17280]  ? __nf_conntrack_alloc+0xb7/0x5e0
[  695.408499][T17280]  __nf_conntrack_alloc+0xb7/0x5e0
[  695.408517][T17280]  init_conntrack.isra.0+0xf51/0x1380
[  695.408533][T17280]  ? __nf_conntrack_find_get+0xa0d/0xd00
[  695.408549][T17280]  ? __pfx_init_conntrack.isra.0+0x10/0x10
[  695.408565][T17280]  ? ipv6_get_l4proto+0x13a/0x220
[  695.408579][T17280]  ? __local_bh_enable_ip+0x9e/0x120
[  695.408596][T17280]  ? ip6t_do_table+0xc1d/0x1c90
[  695.408622][T17280]  nf_conntrack_in+0xe70/0x1690
[  695.408642][T17280]  ? __lock_acquire+0x49f/0x1a40
[  695.408656][T17280]  ? __pfx_nf_conntrack_in+0x10/0x10
[  695.408671][T17280]  ? __netif_receive_skb_core.constprop.0+0xd4d/0x3530
[  695.408698][T17280]  ? ip6t_do_table+0x64/0x1c90
[  695.408715][T17280]  ? ipv6_defrag+0x1e1/0x480
[  695.408748][T17280]  ? ipv6_defrag+0x2a8/0x480
[  695.408771][T17280]  nf_hook_slow+0xbf/0x220
[  695.408792][T17280]  nf_hook.constprop.0+0x2a6/0x750
[  695.408819][T17280]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  695.408837][T17280]  ? __pfx_nf_hook.constprop.0+0x10/0x10
[  695.408857][T17280]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  695.408877][T17280]  ? __pfx_ipv6_rcv+0x10/0x10
[  695.408894][T17280]  ipv6_rcv+0xa4/0x3d0
[  695.408912][T17280]  ? __pfx_ipv6_rcv+0x10/0x10
[  695.408928][T17280]  __netif_receive_skb_one_core+0x12d/0x1e0
[  695.408942][T17280]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[  695.408956][T17280]  ? lock_acquire+0x1b9/0x370
[  695.408974][T17280]  __netif_receive_skb+0x1f/0x120
[  695.408990][T17280]  netif_receive_skb+0x139/0x7d0
[  695.409003][T17280]  ? __pfx_netif_receive_skb+0x10/0x10
[  695.409020][T17280]  tun_rx_batched.isra.0+0x3f6/0x750
[  695.409060][T17280]  ? __pfx_tun_rx_batched.isra.0+0x10/0x10
[  695.409082][T17280]  ? tun_get_user+0x1cc8/0x3c20
[  695.409096][T17280]  tun_get_user+0x1e31/0x3c20
[  695.409113][T17280]  ? __pfx_tun_get_user+0x10/0x10
[  695.409126][T17280]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  695.409153][T17280]  ? find_held_lock+0x2b/0x80
[  695.409164][T17280]  ? tun_get+0x191/0x370
[  695.409173][T17280]  ? tun_get+0x191/0x370
[  695.409186][T17280]  tun_chr_write_iter+0xdc/0x200
[  695.409200][T17280]  vfs_write+0x6ac/0x1050
[  695.409212][T17280]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  695.409226][T17280]  ? __pfx_vfs_write+0x10/0x10
[  695.409235][T17280]  ? find_held_lock+0x2b/0x80
[  695.409254][T17280]  ksys_write+0x12a/0x250
[  695.409264][T17280]  ? __pfx_ksys_write+0x10/0x10
[  695.409278][T17280]  do_syscall_64+0x115/0x870
[  695.409334][T17280]  ? clear_bhb_loop+0x70/0xc0
[  695.409348][T17280]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.409360][T17280] RIP: 0033:0x7fdd2515e90e
[  695.409372][T17280] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  695.409384][T17280] RSP: 002b:00007fdd260d6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  695.409396][T17280] RAX: ffffffffffffffda RBX: 00007fdd260d76c0 RCX: 00007fdd2515e90e
[  695.409403][T17280] RDX: 0000000000000045 RSI: 0000200000001180 RDI: 00000000000000c8
[  695.409410][T17280] RBP: 00007fdd260d7090 R08: 0000000000000000 R09: 0000000000000000
[  695.409417][T17280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  695.409424][T17280] R13: 00007fdd25426128 R14: 00007fdd25426090 R15: 00007fff1be2d3d8
[  695.409439][T17280]  </TASK>
[  695.439829][   T42] audit: type=1400 audit(1786645311.727:1414): avc:  denied  { bind } for  pid=17281 comm="syz.6.3919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  695.563090][T17287] ubi0: attaching mtd0
[  695.566353][T17272] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO)
[  695.569360][T17272] device-mapper: ioctl: error adding target to table
[  695.574562][T17287] ubi0: scanning is finished
[  695.576507][T17287] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  695.629991][T17291] fuse: fd is not a fuse device
[  695.643641][T17292] block nbd6: NBD_DISCONNECT
[  695.795645][T17287] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  695.994113][ T5772] usb 9-1: new high-speed USB device number 44 using dummy_hcd
[  696.012832][   T42] audit: type=1800 audit(1786645312.327:1415): pid=17318 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.3932" name="file0" dev="overlay" ino=181 res=0 errno=0
[  696.015562][T17318] FAULT_INJECTION: forcing a failure.
[  696.015562][T17318] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  696.026397][T17318] CPU: 2 UID: 0 PID: 17318 Comm: syz.6.3932 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  696.026426][T17318] Tainted: [L]=SOFTLOCKUP
[  696.026433][T17318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  696.026443][T17318] Call Trace:
[  696.026452][T17318]  <TASK>
[  696.026461][T17318]  dump_stack_lvl+0x100/0x190
[  696.026491][T17318]  should_fail_ex.cold+0x5/0xa
[  696.026510][T17318]  ? prepare_alloc_pages+0x16d/0x5f0
[  696.026538][T17318]  should_fail_alloc_page+0xeb/0x140
[  696.026563][T17318]  prepare_alloc_pages+0x1f0/0x5f0
[  696.026592][T17318]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  696.026627][T17318]  ? stack_trace_save+0x8e/0xc0
[  696.026648][T17318]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  696.026670][T17318]  ? kasan_quarantine_put+0x104/0x240
[  696.026693][T17318]  ? kasan_save_stack+0x3f/0x50
[  696.026713][T17318]  ? kasan_save_stack+0x30/0x50
[  696.026733][T17318]  ? kasan_save_track+0x14/0x30
[  696.026753][T17318]  ? __kasan_kmalloc+0xaa/0xb0
[  696.026771][T17318]  ? __kmalloc_noprof+0x322/0x820
[  696.026791][T17318]  ? copy_splice_read+0x1a3/0xbb0
[  696.026826][T17318]  ? do_splice_read+0x2bd/0x370
[  696.026843][T17318]  ? splice_direct_to_actor+0x2a1/0xa30
[  696.026863][T17318]  ? do_splice_direct+0x174/0x240
[  696.026881][T17318]  ? do_sendfile+0xadc/0xe20
[  696.026905][T17318]  ? __x64_sys_sendfile64+0x154/0x220
[  696.026942][T17318]  alloc_pages_bulk_noprof+0x5de/0x13c0
[  696.026972][T17318]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[  696.026991][T17318]  ? rcu_is_watching+0x12/0xc0
[  696.027018][T17318]  ? trace_kmalloc+0xeb/0x110
[  696.027040][T17318]  ? __kasan_kmalloc+0xaa/0xb0
[  696.027063][T17318]  ? ovl_splice_write+0x360/0x610
[  696.027095][T17318]  ? copy_splice_read+0x1a3/0xbb0
[  696.027118][T17318]  copy_splice_read+0x1e1/0xbb0
[  696.027141][T17318]  ? ovl_splice_write+0x360/0x610
[  696.027158][T17318]  ? __pfx_copy_splice_read+0x10/0x10
[  696.027175][T17318]  ? __pfx_ovl_splice_write+0x10/0x10
[  696.027188][T17318]  ? __pfx_ovl_file_end_write+0x10/0x10
[  696.027208][T17318]  ? find_held_lock+0x2b/0x80
[  696.027222][T17318]  ? __pfx_ovl_splice_read+0x10/0x10
[  696.027240][T17318]  do_splice_read+0x2bd/0x370
[  696.027255][T17318]  splice_direct_to_actor+0x2a1/0xa30
[  696.027270][T17318]  ? __pfx_direct_splice_actor+0x10/0x10
[  696.027286][T17318]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  696.027304][T17318]  do_splice_direct+0x174/0x240
[  696.027323][T17318]  ? __pfx_do_splice_direct+0x10/0x10
[  696.027336][T17318]  ? avc_policy_seqno+0x9/0x20
[  696.027359][T17318]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  696.027374][T17318]  ? rw_verify_area+0xce/0x6d0
[  696.027392][T17318]  do_sendfile+0xadc/0xe20
[  696.027412][T17318]  ? __pfx_do_sendfile+0x10/0x10
[  696.027434][T17318]  __x64_sys_sendfile64+0x154/0x220
[  696.027449][T17318]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  696.027466][T17318]  do_syscall_64+0x115/0x870
[  696.027484][T17318]  ? clear_bhb_loop+0x70/0xc0
[  696.027498][T17318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  696.027510][T17318] RIP: 0033:0x7fa40d19e0d9
[  696.027522][T17318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  696.027534][T17318] RSP: 002b:00007fa40e105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  696.027546][T17318] RAX: ffffffffffffffda RBX: 00007fa40d425fa0 RCX: 00007fa40d19e0d9
[  696.027553][T17318] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003
[  696.027560][T17318] RBP: 00007fa40e105090 R08: 0000000000000000 R09: 0000000000000000
[  696.027566][T17318] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002
[  696.027573][T17318] R13: 00007fa40d426038 R14: 00007fa40d425fa0 R15: 00007ffd0e3c4058
[  696.027587][T17318]  </TASK>
[  696.259695][ T5772] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  696.264960][ T5772] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  696.273351][ T5772] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  696.280274][ T5772] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.283189][ T5772] usb 9-1: Product: syz
[  696.284943][ T5772] usb 9-1: Manufacturer: syz
[  696.286909][ T5772] usb 9-1: SerialNumber: syz
[  696.293400][ T5772] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected
[  696.298549][ T5772] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  696.304196][ T5772] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  696.311524][T17316] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO)
[  696.314522][T17316] device-mapper: ioctl: error adding target to table
[  696.423670][T17328] syzkaller0: entered promiscuous mode
[  696.425816][T17328] syzkaller0: entered allmulticast mode
[  696.431651][T17328] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  696.436317][T17327] tipc: Resetting bearer <eth:syzkaller0>
[  696.452112][T17327] tipc: Disabling bearer <eth:syzkaller0>
[  696.633671][T17335] fuse: fd is not a fuse device
[  696.640402][T17335] fuse: fd is not a fuse device
[  696.710568][T17335] overlayfs: failed to resolve 'permit_directio': -2
[  696.713965][   T42] audit: type=1400 audit(1786645313.027:1416): avc:  denied  { remount } for  pid=17334 comm="syz.5.3939" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  696.713998][T17335] cgroup2: Unknown parameter 'trans'
[  696.843487][T17344] pimreg: entered allmulticast mode
[  696.851881][T17344] pimreg: left allmulticast mode
[  697.147485][T17360] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3947'.
[  697.152385][T17360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  697.198879][T11098] usb 8-1: new high-speed USB device number 54 using dummy_hcd
[  697.215433][T17365] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3949'.
[  697.220646][T17365] netlink: 'syz.6.3949': attribute type 64 has an invalid length.
[  697.278248][T17368] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3949'.
[  697.350087][T11098] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  697.353983][T11098] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 108, changing to 10
[  697.357703][T11098] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25610, setting to 1024
[  697.362195][T11098] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 108, changing to 10
[  697.365778][T11098] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25610, setting to 1024
[  697.371699][T11098] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.374292][T11098] usb 8-1: Product: syz
[  697.375588][T11098] usb 8-1: Manufacturer: syz
[  697.377109][T11098] usb 8-1: SerialNumber: syz
[  697.382425][T17349] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  697.386156][T11098] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected
[  697.391011][T11098] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB2
[  697.395648][T11098] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB3
[  697.573780][T17372] syzkaller1: entered promiscuous mode
[  697.575482][T17372] syzkaller1: entered allmulticast mode
[  698.149860][T17386] syzkaller0: entered promiscuous mode
[  698.151660][T17386] syzkaller0: entered allmulticast mode
[  698.207934][ T1038] usb 10-1: new full-speed USB device number 30 using dummy_hcd
[  698.338958][ T1038] usb 10-1: device descriptor read/64, error -71
[  698.362317][ T5860] usb 8-1: USB disconnect, device number 54
[  698.373301][ T5860] ti_usb_3410_5052_2 ttyUSB2: TI USB 5052 2 port adapter converter now disconnected from ttyUSB2
[  698.408991][ T5860] ti_usb_3410_5052_2 ttyUSB3: TI USB 5052 2 port adapter converter now disconnected from ttyUSB3
[  698.413166][ T5860] ti_usb_3410_5052 8-1:2.0: device disconnected
[  698.598097][ T1038] usb 10-1: new full-speed USB device number 31 using dummy_hcd
[  698.728837][ T1038] usb 10-1: device descriptor read/64, error -71
[  698.842520][ T1038] usb usb10-port1: attempt power cycle
[  699.178894][ T1038] usb 10-1: new full-speed USB device number 32 using dummy_hcd
[  699.200421][ T1038] usb 10-1: device descriptor read/8, error -71
[  699.442513][ T1038] usb 10-1: new full-speed USB device number 33 using dummy_hcd
[  699.497132][ T1038] usb 10-1: device descriptor read/8, error -71
[  699.609241][ T1038] usb usb10-port1: unable to enumerate USB device
[  699.624973][T17297] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110
[  699.668601][T17297] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32
[  699.695088][ T5772] usb 9-1: USB disconnect, device number 44
[  699.720040][ T5772] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  699.747388][ T5772] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  699.753176][ T5772] ti_usb_3410_5052 9-1:2.0: device disconnected
[  699.865512][T17400] x_tables: duplicate underflow at hook 2
[  700.690199][T17405] syzkaller0: entered promiscuous mode
[  700.692670][T17405] syzkaller0: entered allmulticast mode
[  700.744648][T17409] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3966'.
[  700.751277][T17409] netlink: 'syz.3.3966': attribute type 64 has an invalid length.
[  700.758238][T17409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3966'.
[  700.845176][ T5781] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  700.854531][ T5781] CPU: 3 UID: 0 PID: 5781 Comm: kworker/u34:2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  700.854567][ T5781] Tainted: [L]=SOFTLOCKUP
[  700.854574][ T5781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  700.854608][ T5781] Workqueue: hci3 hci_rx_work
[  700.854665][ T5781] Call Trace:
[  700.854674][ T5781]  <TASK>
[  700.854682][ T5781]  dump_stack_lvl+0x100/0x190
[  700.854712][ T5781]  sysfs_warn_dup.cold+0x1c/0x28
[  700.854745][ T5781]  sysfs_create_dir_ns+0x24b/0x2b0
[  700.854777][ T5781]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  700.854799][ T5781]  ? find_held_lock+0x2b/0x80
[  700.854818][ T5781]  ? kobject_add_internal+0x25f/0x930
[  700.854842][ T5781]  ? kobject_add_internal+0x25f/0x930
[  700.854867][ T5781]  ? do_raw_spin_unlock+0x145/0x1e0
[  700.854898][ T5781]  kobject_add_internal+0x2c8/0x930
[  700.854921][ T5781]  kobject_add+0x16a/0x1e0
[  700.854940][ T5781]  ? __pfx_kobject_add+0x10/0x10
[  700.854971][ T5781]  ? class_to_subsys+0x10f/0x150
[  700.855016][ T5781]  ? kobject_put+0xb9/0x640
[  700.855044][ T5781]  ? _raw_spin_unlock+0x28/0x50
[  700.855079][ T5781]  device_add+0x294/0x1970
[  700.855117][ T5781]  ? __pfx_dev_set_name+0x10/0x10
[  700.855135][ T5781]  ? __pfx_device_add+0x10/0x10
[  700.855170][ T5781]  ? mgmt_send_event_skb+0x2fb/0x460
[  700.855212][ T5781]  hci_conn_add_sysfs+0x1a3/0x260
[  700.855250][ T5781]  le_conn_complete_evt+0x11eb/0x1f60
[  700.855295][ T5781]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  700.855322][ T5781]  ? hci_event_packet+0x186/0xcd0
[  700.855353][ T5781]  ? hci_event_packet+0x186/0xcd0
[  700.855381][ T5781]  hci_le_enh_conn_complete_evt+0x23d/0x3b0
[  700.855418][ T5781]  ? skb_pull_data+0x15f/0x1e0
[  700.855459][ T5781]  hci_le_meta_evt+0x34a/0x5f0
[  700.855486][ T5781]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  700.855523][ T5781]  hci_event_packet+0x51c/0xcd0
[  700.855548][ T5781]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  700.855582][ T5781]  ? __pfx_hci_event_packet+0x10/0x10
[  700.855623][ T5781]  ? kcov_remote_start+0x384/0x670
[  700.855650][ T5781]  ? lockdep_hardirqs_on+0x78/0x100
[  700.855698][ T5781]  hci_rx_work+0x451/0xfc0
[  700.855730][ T5781]  process_one_work+0xa23/0x1940
[  700.855774][ T5781]  ? __pfx_process_one_work+0x10/0x10
[  700.855804][ T5781]  ? __pfx_hci_rx_work+0x10/0x10
[  700.855838][ T5781]  worker_thread+0x5ef/0xe50
[  700.855879][ T5781]  ? kthread+0x13a/0x450
[  700.855897][ T5781]  ? __pfx_worker_thread+0x10/0x10
[  700.855917][ T5781]  kthread+0x370/0x450
[  700.855944][ T5781]  ? __pfx_kthread+0x10/0x10
[  700.855968][ T5781]  ret_from_fork+0x72b/0xd50
[  700.856005][ T5781]  ? __pfx_ret_from_fork+0x10/0x10
[  700.856038][ T5781]  ? __switch_to+0x800/0x10f0
[  700.856066][ T5781]  ? __pfx_kthread+0x10/0x10
[  700.856087][ T5781]  ret_from_fork_asm+0x1a/0x30
[  700.856134][ T5781]  </TASK>
[  700.856163][ T5781] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  700.976309][ T5781] Bluetooth: hci3: failed to register connection device
[  701.031667][T17407] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO)
[  701.034595][T17407] device-mapper: ioctl: error adding target to table
[  701.082154][T17426] syzkaller0: entered promiscuous mode
[  701.084130][T17426] syzkaller0: entered allmulticast mode
[  701.120479][ T5860] usb 8-1: new full-speed USB device number 55 using dummy_hcd
[  701.225806][T17430] syzkaller0: entered promiscuous mode
[  701.228037][T17430] syzkaller0: entered allmulticast mode
[  701.284982][ T5860] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  701.289270][ T5860] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  701.293041][ T5860] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  701.296500][ T5860] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  701.301548][ T5860] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.307854][T12883] Bluetooth: hci4: Frame reassembly failed (-84)
[  701.310308][ T5860] usbtmc 8-1:16.0: bulk endpoints not found
[  701.315720][T12883] Bluetooth: hci4: Frame reassembly failed (-84)
[  703.306540][ T5781] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  703.766980][T17443] syzkaller0: entered promiscuous mode
[  703.769375][T17443] syzkaller0: entered allmulticast mode
[  703.824238][ T5772] usb 8-1: USB disconnect, device number 55
[  703.865449][   T42] audit: type=1400 audit(1786645320.177:1417): avc:  denied  { create } for  pid=17454 comm="syz.5.3979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  703.918356][   T42] audit: type=1400 audit(1786645320.227:1418): avc:  denied  { read write } for  pid=17452 comm="syz.3.3978" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  703.939545][   T42] audit: type=1400 audit(1786645320.227:1419): avc:  denied  { open } for  pid=17452 comm="syz.3.3978" path="/384/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  703.966186][T17464] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=17464 comm=syz.6.3981
[  704.015540][T17466] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3982'.
[  704.061918][T17466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3982'.
[  704.065672][T17466] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3982'.
[  704.077241][T17466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3982'.
[  704.080462][T17466] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3982'.
[  704.089156][ T5832] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  704.094408][ T5832] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  704.097945][ T5832] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  704.107886][ T5832] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  704.747810][T17482] syzkaller0: entered promiscuous mode
[  704.750059][T17482] syzkaller0: entered allmulticast mode
[  704.925474][   T42] audit: type=1400 audit(1786645321.237:1420): avc:  denied  { name_bind } for  pid=17491 comm="syz.3.3995" src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  705.009190][T17499] syzkaller0: entered promiscuous mode
[  705.011708][T17499] syzkaller0: entered allmulticast mode
[  705.128890][ T5860] usb 10-1: new high-speed USB device number 34 using dummy_hcd
[  705.134616][T17506] fuse: fd is not a fuse device
[  705.289418][ T5860] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  705.293939][ T5860] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  705.298216][ T5860] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  705.302412][ T5860] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  705.308251][T17488] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  705.314715][ T5860] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  705.446304][T17521] syzkaller0: entered promiscuous mode
[  705.448923][T17521] syzkaller0: entered allmulticast mode
[  705.520531][ T5860] usb 10-1: USB disconnect, device number 34
[  705.970965][T17547] No such timeout policy "syz1"
[  705.980393][   T42] audit: type=1400 audit(1786645322.297:1421): avc:  denied  { create } for  pid=17548 comm="syz.3.4018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  706.014659][   T42] audit: type=1400 audit(1786645322.327:1422): avc:  denied  { append } for  pid=17552 comm="syz.4.4020" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  706.058467][T17550] netlink: 'syz.3.4018': attribute type 10 has an invalid length.
[  706.067596][T17550] team0: Port device dummy0 added
[  706.298916][ T5901] usb 9-1: new full-speed USB device number 45 using dummy_hcd
[  706.408888][T11098] usb 10-1: new full-speed USB device number 35 using dummy_hcd
[  706.449730][ T5901] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  706.457302][ T5901] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  706.461050][ T5901] usb 9-1: Product: syz
[  706.462870][ T5901] usb 9-1: Manufacturer: syz
[  706.464878][ T5901] usb 9-1: SerialNumber: syz
[  706.472860][ T5901] usb 9-1: config 0 descriptor??
[  706.499385][   T24] usb 8-1: new high-speed USB device number 56 using dummy_hcd
[  706.559717][T11098] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  706.566471][T11098] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  706.570138][T11098] usb 10-1: Product: syz
[  706.572030][T11098] usb 10-1: Manufacturer: syz
[  706.574074][T11098] usb 10-1: SerialNumber: syz
[  706.581165][T11098] usb 10-1: config 0 descriptor??
[  706.668835][   T24] usb 8-1: Using ep0 maxpacket: 32
[  706.672084][   T24] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  706.676347][   T24] usb 8-1: config index 0 descriptor too short (expected 156, got 27)
[  706.680205][   T24] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  706.686622][   T24] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  706.689595][T11098] usb 9-1: USB disconnect, device number 45
[  706.692504][   T24] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  706.700943][   T24] usb 8-1: config 0 interface 0 has no altsetting 0
[  706.706293][   T24] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  706.710736][   T24] usb 8-1: Product: syz
[  706.712684][   T24] usb 8-1: Manufacturer: syz
[  706.714596][   T24] usb 8-1: SerialNumber: syz
[  706.723380][   T24] usb 8-1: config 0 descriptor??
[  706.732119][   T24] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  706.739956][   T24] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  706.787670][T17564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  706.791807][T17564] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  706.796564][ T5901] usb 10-1: USB disconnect, device number 35
[  707.185936][T17579] program syz.6.4029 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  707.189571][ T5860] usb 8-1: USB disconnect, device number 56
[  707.198436][ T5860] ldusb 8-1:0.0: LD USB Device #0 now disconnected
[  707.200001][T17579] ata1.00: invalid command format 67
[  707.343808][T17584] syzkaller0: entered promiscuous mode
[  707.345972][T17584] syzkaller0: entered allmulticast mode
[  707.751499][T17594] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  707.757611][T17594] fuse: fd is not a fuse device
[  707.763666][T17594] fuse: fd is not a fuse device
[  707.827475][   T42] audit: type=1400 audit(1786645324.137:1423): avc:  denied  { map } for  pid=17597 comm="syz.3.4038" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  707.838430][   T42] audit: type=1400 audit(1786645324.137:1424): avc:  denied  { execute } for  pid=17597 comm="syz.3.4038" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  707.849707][T17598] kernel read not supported for file /sg0 (pid: 17598 comm: syz.3.4038)
[  707.856418][T17600] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4039'.
[  707.984745][T17609] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4043'.
[  707.989257][T17609] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4043'.
[  707.992975][T17609] netlink: 'syz.6.4043': attribute type 15 has an invalid length.
[  707.999843][T17609] netlink: 'syz.6.4043': attribute type 18 has an invalid length.
[  708.014238][T17609] netlink: 'syz.6.4043': attribute type 14 has an invalid length.
[  708.211091][T17615] jffs2: notice: (17615) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[  708.218928][   T42] audit: type=1400 audit(1786645324.527:1425): avc:  denied  { remount } for  pid=17614 comm="syz.5.4045" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  708.923130][   T42] audit: type=1400 audit(1786645325.237:1426): avc:  denied  { watch } for  pid=17644 comm="syz.4.4058" path="/proc/1192/fdinfo" dev="proc" ino=81277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  708.936270][   T42] audit: type=1400 audit(1786645325.237:1427): avc:  denied  { watch_sb watch_reads } for  pid=17644 comm="syz.4.4058" path="/proc/1192/fdinfo" dev="proc" ino=81277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  709.096671][   T42] audit: type=1400 audit(1786645325.407:1428): avc:  denied  { mount } for  pid=17655 comm="syz.3.4061" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  709.106324][   T42] audit: type=1400 audit(1786645325.417:1429): avc:  denied  { search } for  pid=17655 comm="syz.3.4061" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[  709.185094][T17656] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4061'.
[  709.252854][   T42] audit: type=1400 audit(1786645325.567:1430): avc:  denied  { unmount } for  pid=12527 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  709.317735][T17664] lo: entered allmulticast mode
[  709.320289][T17664] tunl0: entered allmulticast mode
[  709.322494][T17664] gre0: entered allmulticast mode
[  709.325089][T17664] gretap0: entered allmulticast mode
[  709.331483][T17664] erspan0: entered allmulticast mode
[  709.334524][T17664] ip_vti0: entered allmulticast mode
[  709.337562][T17664] ip6_vti0: entered allmulticast mode
[  709.342231][T17664] sit0: entered allmulticast mode
[  709.347687][T17664] ip6tnl0: entered allmulticast mode
[  709.352668][T17664] ip6gre0: entered allmulticast mode
[  709.361317][T17664] syz_tun: entered allmulticast mode
[  709.364451][T17664] FAULT_INJECTION: forcing a failure.
[  709.364451][T17664] name failslab, interval 1, probability 0, space 0, times 0
[  709.372269][T17664] CPU: 2 UID: 0 PID: 17664 Comm: syz.3.4064 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  709.372304][T17664] Tainted: [L]=SOFTLOCKUP
[  709.372312][T17664] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  709.372349][T17664] Call Trace:
[  709.372381][T17664]  <TASK>
[  709.372392][T17664]  dump_stack_lvl+0x100/0x190
[  709.372428][T17664]  should_fail_ex.cold+0x5/0xa
[  709.372456][T17664]  should_failslab+0xc2/0x120
[  709.372487][T17664]  __kmalloc_noprof+0xfc/0x820
[  709.372509][T17664]  ? __lock_acquire+0x49f/0x1a40
[  709.372537][T17664]  ? nsim_fib_event_nb+0x64c/0xe40
[  709.372611][T17664]  nsim_fib_event_nb+0x64c/0xe40
[  709.372644][T17664]  ? lock_acquire+0x1b9/0x370
[  709.372672][T17664]  notifier_call_chain+0x99/0x3f0
[  709.372698][T17664]  atomic_notifier_call_chain+0x71/0x1c0
[  709.372719][T17664]  call_fib_notifiers+0x33/0x70
[  709.372786][T17664]  fib6_del+0xbc3/0x1790
[  709.372834][T17664]  ? __pfx_fib6_del+0x10/0x10
[  709.372865][T17664]  ? fib6_ifdown+0xcd/0x7e0
[  709.372888][T17664]  fib6_clean_node+0x424/0x5d0
[  709.372918][T17664]  ? __pfx_fib6_clean_node+0x10/0x10
[  709.372955][T17664]  fib6_walk_continue+0x451/0x8d0
[  709.372985][T17664]  fib6_walk+0x182/0x370
[  709.373009][T17664]  fib6_clean_tree+0xdc/0x120
[  709.373030][T17664]  ? __pfx_fib6_ifdown+0x10/0x10
[  709.373050][T17664]  ? __pfx_fib6_clean_tree+0x10/0x10
[  709.373071][T17664]  ? __css_rstat_updated+0x1ce/0x5a0
[  709.373102][T17664]  ? __pfx_fib6_clean_node+0x10/0x10
[  709.373125][T17664]  ? __pfx_fib6_ifdown+0x10/0x10
[  709.373150][T17664]  ? __pfx_fib6_ifdown+0x10/0x10
[  709.373167][T17664]  __fib6_clean_all+0x107/0x2d0
[  709.373194][T17664]  rt6_disable_ip+0x2a6/0x980
[  709.373223][T17664]  ? __pfx_rt6_disable_ip+0x10/0x10
[  709.373249][T17664]  addrconf_ifdown.isra.0+0x11d/0x1b70
[  709.373274][T17664]  ? trace_contention_end+0x126/0x160
[  709.373300][T17664]  ? __mutex_lock+0x26d/0x1bd0
[  709.373370][T17664]  ? tee_netdev_event+0x8a/0x3d0
[  709.373412][T17664]  ? find_held_lock+0x2b/0x80
[  709.373432][T17664]  ? tee_netdev_event+0x300/0x3d0
[  709.373462][T17664]  ? __pfx_addrconf_ifdown.isra.0+0x10/0x10
[  709.373498][T17664]  addrconf_notify+0x4a3/0x1ba0
[  709.373530][T17664]  ? __pfx_tls_dev_event+0x10/0x10
[  709.373552][T17664]  ? __pfx_addrconf_notify+0x10/0x10
[  709.373585][T17664]  ? ip6mr_device_event+0x1c4/0x230
[  709.373626][T17664]  notifier_call_chain+0x99/0x3f0
[  709.373651][T17664]  call_netdevice_notifiers_info+0xbe/0x110
[  709.373696][T17664]  __dev_notify_flags+0x1f7/0x2e0
[  709.373723][T17664]  ? __pfx___dev_notify_flags+0x10/0x10
[  709.373750][T17664]  ? __pfx___dev_change_flags+0x10/0x10
[  709.373782][T17664]  netif_change_flags+0x108/0x160
[  709.373809][T17664]  do_setlink.isra.0+0x1ac4/0x3e60
[  709.373838][T17664]  ? stack_trace_save+0x8e/0xc0
[  709.373864][T17664]  ? __pfx_do_setlink.isra.0+0x10/0x10
[  709.373925][T17664]  ? __lock_acquire+0x49f/0x1a40
[  709.373963][T17664]  ? lock_acquire+0x1b9/0x370
[  709.373994][T17664]  ? rcu_is_watching+0x12/0xc0
[  709.374027][T17664]  ? trace_contention_end+0x126/0x160
[  709.374056][T17664]  ? __mutex_lock+0x26d/0x1bd0
[  709.374086][T17664]  ? rtnl_newlink+0x8bb/0x2380
[  709.374117][T17664]  ? __pfx___mutex_lock+0x10/0x10
[  709.374144][T17664]  ? rcu_is_watching+0x12/0xc0
[  709.374172][T17664]  ? cap_capable+0x107/0x430
[  709.374236][T17664]  rtnl_newlink+0x1b7e/0x2380
[  709.374276][T17664]  ? __pfx_rtnl_newlink+0x10/0x10
[  709.374303][T17664]  ? find_held_lock+0x2b/0x80
[  709.374321][T17664]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  709.374347][T17664]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  709.374377][T17664]  ? avc_has_perm_noaudit+0x145/0x3b0
[  709.374409][T17664]  ? __lock_acquire+0x49f/0x1a40
[  709.374448][T17664]  ? find_held_lock+0x2b/0x80
[  709.374465][T17664]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  709.374490][T17664]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  709.374517][T17664]  ? __pfx_rtnl_newlink+0x10/0x10
[  709.374544][T17664]  rtnetlink_rcv_msg+0x95e/0xe90
[  709.374572][T17664]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  709.374605][T17664]  ? ref_tracker_free+0x37e/0x6c0
[  709.374643][T17664]  netlink_rcv_skb+0x159/0x420
[  709.374674][T17664]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  709.374704][T17664]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  709.374738][T17664]  ? netlink_deliver_tap+0x1ae/0xcc0
[  709.374765][T17664]  netlink_unicast+0x585/0x850
[  709.374793][T17664]  ? __pfx_netlink_unicast+0x10/0x10
[  709.374823][T17664]  netlink_sendmsg+0x8b0/0xda0
[  709.374848][T17664]  ? __pfx_netlink_sendmsg+0x10/0x10
[  709.374872][T17664]  ? selinux_socket_sendmsg+0x198/0x2f0
[  709.374903][T17664]  ____sys_sendmsg+0xa4d/0xbe0
[  709.374943][T17664]  ? __pfx_netlink_sendmsg+0x10/0x10
[  709.374968][T17664]  ? __pfx_____sys_sendmsg+0x10/0x10
[  709.375010][T17664]  ___sys_sendmsg+0x190/0x1e0
[  709.375032][T17664]  ? __pfx____sys_sendmsg+0x10/0x10
[  709.375049][T17664]  ? __lock_acquire+0x49f/0x1a40
[  709.375106][T17664]  __sys_sendmsg+0x160/0x210
[  709.375132][T17664]  ? __pfx___sys_sendmsg+0x10/0x10
[  709.375171][T17664]  do_syscall_64+0x115/0x870
[  709.375210][T17664]  ? clear_bhb_loop+0x70/0xc0
[  709.375234][T17664]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  709.375254][T17664] RIP: 0033:0x7fdd2519e0d9
[  709.375273][T17664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  709.375293][T17664] RSP: 002b:00007fdd260f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  709.375322][T17664] RAX: ffffffffffffffda RBX: 00007fdd25425fa0 RCX: 00007fdd2519e0d9
[  709.375335][T17664] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 000000000000000c
[  709.375346][T17664] RBP: 00007fdd25235024 R08: 0000000000000000 R09: 0000000000000000
[  709.375357][T17664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  709.375368][T17664] R13: 00007fdd25426038 R14: 00007fdd25425fa0 R15: 00007fff1be2d3d8
[  709.375397][T17664]  </TASK>
[  709.394774][T17666] FAULT_INJECTION: forcing a failure.
[  709.394774][T17666] name failslab, interval 1, probability 0, space 0, times 0
[  709.450213][T17671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4066'.
[  709.450845][T17666] CPU: 1 UID: 0 PID: 17666 Comm: syz.6.4065 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  709.450870][T17666] Tainted: [L]=SOFTLOCKUP
[  709.450877][T17666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  709.450889][T17666] Call Trace:
[  709.450895][T17666]  <TASK>
[  709.450902][T17666]  dump_stack_lvl+0x100/0x190
[  709.450931][T17666]  should_fail_ex.cold+0x5/0xa
[  709.450955][T17666]  should_failslab+0xc2/0x120
[  709.450979][T17666]  kmem_cache_alloc_noprof+0x91/0x6a0
[  709.451002][T17666]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  709.451030][T17666]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  709.451065][T17666]  mmu_topup_memory_caches+0x25/0x170
[  709.451093][T17666]  kvm_mmu_load+0xe2/0x2570
[  709.451119][T17666]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  709.451137][T17666]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  709.451160][T17666]  ? __pfx_kvm_mmu_load+0x10/0x10
[  709.451183][T17666]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  709.451206][T17666]  ? kvm_check_and_inject_events+0x873/0x12a0
[  709.451230][T17666]  ? record_steal_time+0x3a0/0xbb0
[  709.451253][T17666]  vcpu_run+0x3aaa/0x5de0
[  709.451287][T17666]  ? __pfx_vcpu_run+0x10/0x10
[  709.451321][T17666]  ? rcu_is_watching+0x12/0xc0
[  709.451351][T17666]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  709.451377][T17666]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  709.451406][T17666]  ? kvm_vcpu_ioctl+0x68b/0x1700
[  709.451429][T17666]  kvm_vcpu_ioctl+0x730/0x1700
[  709.451451][T17666]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  709.451472][T17666]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  709.451493][T17664] ip6gretap0: entered allmulticast mode
[  709.451496][T17666]  ? do_vfs_ioctl+0x226/0x13e0
[  709.451523][T17666]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  709.451549][T17666]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  709.451583][T17666]  ? __fget_files+0x215/0x3d0
[  709.451601][T17666]  ? hook_file_ioctl_common+0x140/0x440
[  709.451643][T17666]  ? selinux_file_ioctl+0x13b/0x290
[  709.451667][T17666]  ? selinux_file_ioctl+0xb6/0x290
[  709.451695][T17666]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  709.451716][T17666]  __x64_sys_ioctl+0x18e/0x210
[  709.451744][T17666]  do_syscall_64+0x115/0x870
[  709.451769][T17666]  ? clear_bhb_loop+0x70/0xc0
[  709.451793][T17666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  709.451812][T17666] RIP: 0033:0x7fa40d19e0d9
[  709.451827][T17666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  709.451844][T17666] RSP: 002b:00007fa40e105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  709.451861][T17666] RAX: ffffffffffffffda RBX: 00007fa40d425fa0 RCX: 00007fa40d19e0d9
[  709.451874][T17666] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[  709.451884][T17666] RBP: 00007fa40e105090 R08: 0000000000000000 R09: 0000000000000000
[  709.451894][T17666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  709.451906][T17666] R13: 00007fa40d426038 R14: 00007fa40d425fa0 R15: 00007ffd0e3c4058
[  709.451930][T17666]  </TASK>
[  709.729596][T17664] bond0: entered allmulticast mode
[  709.731677][T17664] bond_slave_0: entered allmulticast mode
[  709.733981][T17664] bond_slave_1: entered allmulticast mode
[  709.737851][T17664] team0: entered allmulticast mode
[  709.740691][T17664] team_slave_0: entered allmulticast mode
[  709.742588][T17664] dummy0: entered allmulticast mode
[  709.750934][T17664] nlmon0: entered allmulticast mode
[  709.753558][T17664] batadv0: entered allmulticast mode
[  709.756978][T17664] vxcan0: entered allmulticast mode
[  709.763154][T17664] vxcan1: entered allmulticast mode
[  709.766713][T17664] wg0: entered allmulticast mode
[  709.770344][T17664] wg1: entered allmulticast mode
[  709.773502][T17664] wg2: entered allmulticast mode
[  709.776292][T17664] veth0_to_bridge: entered allmulticast mode
[  709.781355][T17664] bridge_slave_0: entered allmulticast mode
[  709.784476][T17664] veth1_to_bridge: entered allmulticast mode
[  709.787537][T17664] bridge_slave_1: entered allmulticast mode
[  709.793430][T17664] veth0_to_bond: entered allmulticast mode
[  709.796996][T17664] veth1_to_bond: entered allmulticast mode
[  709.800437][T17664] veth0_to_team: entered allmulticast mode
[  709.804636][T17664] veth1_to_team: entered allmulticast mode
[  709.812205][T17664] team_slave_1: entered allmulticast mode
[  709.814981][T17664] veth0_to_batadv: entered allmulticast mode
[  709.820060][T17664] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  709.823249][T17664] batadv_slave_0: entered allmulticast mode
[  709.828120][T17664] veth1_to_batadv: entered allmulticast mode
[  709.834814][T17664] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  709.837942][T17664] batadv_slave_1: entered allmulticast mode
[  709.845813][T17664] xfrm0: entered allmulticast mode
[  709.850475][T17664] veth1_to_hsr: entered allmulticast mode
[  709.855101][T17664] hsr_slave_1: entered allmulticast mode
[  709.861243][T17664] hsr0: entered allmulticast mode
[  709.865619][T17664] veth1_virt_wifi: entered allmulticast mode
[  709.870513][T17664] veth0_virt_wifi: entered allmulticast mode
[  709.875218][T17664] virt_wifi0: entered allmulticast mode
[  709.877935][T17664] veth1_vlan: entered allmulticast mode
[  709.883709][T17664] veth0_vlan: entered allmulticast mode
[  709.888596][T17664] vlan0: entered allmulticast mode
[  709.893209][T17664] vlan1: entered allmulticast mode
[  709.897821][T17664] macvlan0: entered allmulticast mode
[  709.904804][T17664] macvlan1: entered allmulticast mode
[  709.908938][T17664] ipvlan0: entered allmulticast mode
[  709.911167][T17664] ipvlan1: entered allmulticast mode
[  709.913524][T17664] veth1_macvtap: entered allmulticast mode
[  709.917524][T17664] veth0_macvtap: entered allmulticast mode
[  709.932885][T17664] macvtap0: entered allmulticast mode
[  709.937697][T17664] macsec0: entered allmulticast mode
[  709.941827][T17664] geneve0: entered allmulticast mode
[  709.947059][T17664] geneve1: entered allmulticast mode
[  709.953091][T17664] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  709.959406][T17664] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[  709.972848][T17664] netdevsim netdevsim3 netdevsim2: entered allmulticast mode
[  709.980459][T17664] netdevsim netdevsim3 netdevsim3: entered allmulticast mode
[  709.998922][   T42] audit: type=1400 audit(1786645326.307:1431): avc:  denied  { accept } for  pid=17688 comm="syz.6.4070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  710.009748][T17664] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode
[  710.020689][T17664] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode
[  710.025233][T17664] sit1: entered allmulticast mode
[  710.028553][T17664] bridge0: entered allmulticast mode
[  710.031962][T17664] veth0: entered allmulticast mode
[  710.034353][T17664] veth1: entered allmulticast mode
[  710.036762][T17664] veth2: entered allmulticast mode
[  710.038672][T17691] Bluetooth: MGMT ver 1.23
[  710.039098][T17664] veth3: entered allmulticast mode
[  710.045966][T17664] bridge1: entered allmulticast mode
[  710.070121][T11540] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  710.077693][T11540] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  710.138987][ T5832] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  710.142362][ T5832] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  710.524612][   T42] audit: type=1400 audit(1786645326.837:1432): avc:  denied  { getopt } for  pid=17722 comm="syz.4.4080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  710.524918][T17723] tmpfs: Invalid uid '0x00000000ffffffff'
[  710.531342][   T42] audit: type=1400 audit(1786645326.837:1433): avc:  denied  { mounton } for  pid=17722 comm="syz.4.4080" path="/syzcgroup/unified/syz4" dev="pstore" ino=4911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1
[  710.607590][   T42] audit: type=1400 audit(1786645326.917:1434): avc:  denied  { map } for  pid=17729 comm="syz.4.4083" path="socket:[82212]" dev="sockfs" ino=82212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  710.663914][T17730] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4083'.
[  710.899062][ T5889] usb 10-1: new high-speed USB device number 36 using dummy_hcd
[  710.987079][T17741] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO)
[  710.992882][T17741] device-mapper: ioctl: error adding target to table
[  711.028977][ T5889] usb 10-1: device descriptor read/64, error -71
[  711.118321][   T42] audit: type=1400 audit(1786645327.427:1435): avc:  denied  { append } for  pid=17754 comm="syz.4.4093" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  711.278958][ T5889] usb 10-1: new high-speed USB device number 37 using dummy_hcd
[  711.408927][ T5889] usb 10-1: device descriptor read/64, error -71
[  711.519181][ T5889] usb usb10-port1: attempt power cycle
[  711.532620][T17779] xt_hashlimit: size too large, truncated to 1048576
[  711.584785][T17776] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO)
[  711.588046][T17776] device-mapper: ioctl: error adding target to table
[  711.646774][T17783] loop6: detected capacity change from 0 to 7
[  711.665521][    C0] blk_print_req_error: 10 callbacks suppressed
[  711.665542][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2
[  711.688943][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  711.692901][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  711.701099][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  711.705216][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  711.709753][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  711.712828][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  711.716632][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  711.720748][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  711.724747][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  711.729206][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  711.747580][T17786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4105'.
[  711.751533][T17786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4105'.
[  711.814959][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  711.818143][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  711.827519][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  711.831115][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  711.834762][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  711.837881][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  711.840617][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  711.843772][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  711.861328][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  711.867729][T17787] ldm_validate_partition_table(): Disk read failed.
[  711.871393][T17787] Dev loop6: unable to read RDB block 0
[  711.883745][T17787]  loop6: unable to read partition table
[  711.888027][T17787] loop6: partition table beyond EOD, truncated
[  711.890824][T17787] loop_reread_partitions: partition scan of loop6 (��[{Bѷ���Mܾ`*��Z��5��]�z(�Ť�4+hG�pX����gm
[  711.890824][T17787] ������.B�L_se�) failed (rc=-5)
[  711.898914][ T5889] usb 10-1: new high-speed USB device number 38 using dummy_hcd
[  711.919461][ T5889] usb 10-1: device descriptor read/8, error -71
[  711.948142][T17796] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4108'.
[  711.955311][T17796] netlink: 'syz.3.4108': attribute type 64 has an invalid length.
[  711.960354][T17796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4108'.
[  712.156342][T17808] xt_hashlimit: size too large, truncated to 1048576
[  712.176867][ T5889] usb 10-1: new high-speed USB device number 39 using dummy_hcd
[  712.208173][T17811] FAULT_INJECTION: forcing a failure.
[  712.208173][T17811] name failslab, interval 1, probability 0, space 0, times 0
[  712.209256][ T5889] usb 10-1: device descriptor read/8, error -71
[  712.213454][T17811] CPU: 2 UID: 0 PID: 17811 Comm: syz.4.4114 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  712.213486][T17811] Tainted: [L]=SOFTLOCKUP
[  712.213493][T17811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  712.213503][T17811] Call Trace:
[  712.213511][T17811]  <TASK>
[  712.213518][T17811]  dump_stack_lvl+0x100/0x190
[  712.213547][T17811]  should_fail_ex.cold+0x5/0xa
[  712.213571][T17811]  should_failslab+0xc2/0x120
[  712.213597][T17811]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[  712.213623][T17811]  ? rcu_is_watching+0x12/0xc0
[  712.213653][T17811]  ? trace_kmem_cache_alloc+0xdd/0x100
[  712.213677][T17811]  ? nf_ct_ext_add+0x1b0/0x3c0
[  712.213725][T17811]  krealloc_node_align_noprof+0x321/0x3e0
[  712.213750][T17811]  nf_ct_ext_add+0x1b0/0x3c0
[  712.213776][T17811]  init_conntrack.isra.0+0x6bf/0x1380
[  712.213806][T17811]  ? __nf_conntrack_find_get+0xa0d/0xd00
[  712.213831][T17811]  ? __pfx_init_conntrack.isra.0+0x10/0x10
[  712.213856][T17811]  ? ipv6_get_l4proto+0x13a/0x220
[  712.213909][T17811]  ? __local_bh_enable_ip+0x9e/0x120
[  712.213933][T17811]  ? ip6t_do_table+0xc1d/0x1c90
[  712.213967][T17811]  nf_conntrack_in+0xe70/0x1690
[  712.214002][T17811]  ? __lock_acquire+0x49f/0x1a40
[  712.214023][T17811]  ? __pfx_nf_conntrack_in+0x10/0x10
[  712.214045][T17811]  ? __netif_receive_skb_core.constprop.0+0xd4d/0x3530
[  712.214067][T17811]  ? ip6t_do_table+0x64/0x1c90
[  712.214097][T17811]  ? ipv6_defrag+0x1e1/0x480
[  712.214123][T17811]  ? ipv6_defrag+0x2a8/0x480
[  712.214151][T17811]  nf_hook_slow+0xbf/0x220
[  712.214175][T17811]  nf_hook.constprop.0+0x2a6/0x750
[  712.214203][T17811]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  712.214231][T17811]  ? __pfx_nf_hook.constprop.0+0x10/0x10
[  712.214259][T17811]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  712.214295][T17811]  ? __pfx_ipv6_rcv+0x10/0x10
[  712.214322][T17811]  ipv6_rcv+0xa4/0x3d0
[  712.214347][T17811]  ? __pfx_ipv6_rcv+0x10/0x10
[  712.214371][T17811]  __netif_receive_skb_one_core+0x12d/0x1e0
[  712.214392][T17811]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[  712.214418][T17811]  ? lock_acquire+0x1b9/0x370
[  712.214443][T17811]  ? find_held_lock+0x2b/0x80
[  712.214466][T17811]  __netif_receive_skb+0x1f/0x120
[  712.214489][T17811]  netif_receive_skb+0x139/0x7d0
[  712.214508][T17811]  ? __pfx_netif_receive_skb+0x10/0x10
[  712.214526][T17811]  ? _copy_from_iter+0x270/0x1690
[  712.214569][T17811]  tun_rx_batched.isra.0+0x3f6/0x750
[  712.214622][T17811]  ? __pfx_tun_rx_batched.isra.0+0x10/0x10
[  712.214657][T17811]  ? tun_get_user+0x1cc8/0x3c20
[  712.214681][T17811]  tun_get_user+0x1e31/0x3c20
[  712.214716][T17811]  ? __pfx_tun_get_user+0x10/0x10
[  712.214736][T17811]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  712.214773][T17811]  ? find_held_lock+0x2b/0x80
[  712.214791][T17811]  ? tun_get+0x191/0x370
[  712.214807][T17811]  ? tun_get+0x191/0x370
[  712.214830][T17811]  tun_chr_write_iter+0xdc/0x200
[  712.214852][T17811]  vfs_write+0x6ac/0x1050
[  712.214870][T17811]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  712.214889][T17811]  ? __pfx_vfs_write+0x10/0x10
[  712.214904][T17811]  ? find_held_lock+0x2b/0x80
[  712.214938][T17811]  ksys_write+0x12a/0x250
[  712.214958][T17811]  ? __pfx_ksys_write+0x10/0x10
[  712.214982][T17811]  do_syscall_64+0x115/0x870
[  712.215009][T17811]  ? clear_bhb_loop+0x70/0xc0
[  712.215031][T17811]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.215049][T17811] RIP: 0033:0x7f519175e90e
[  712.215067][T17811] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  712.215086][T17811] RSP: 002b:00007f5192673fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  712.215106][T17811] RAX: ffffffffffffffda RBX: 00007f51926746c0 RCX: 00007f519175e90e
[  712.215120][T17811] RDX: 0000000000000f87 RSI: 0000200000001180 RDI: 00000000000000c8
[  712.215131][T17811] RBP: 00007f5192674090 R08: 0000000000000000 R09: 0000000000000000
[  712.215142][T17811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  712.215152][T17811] R13: 00007f5191a26128 R14: 00007f5191a26090 R15: 00007ffde30a1118
[  712.215177][T17811]  </TASK>
[  712.282290][T17816] Bluetooth: hci0: invalid length 0, exp 2 for type 12
[  712.415319][T17822] FAULT_INJECTION: forcing a failure.
[  712.415319][T17822] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  712.419954][T17822] CPU: 2 UID: 0 PID: 17822 Comm: syz.4.4117 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  712.419974][T17822] Tainted: [L]=SOFTLOCKUP
[  712.419978][T17822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  712.419985][T17822] Call Trace:
[  712.419990][T17822]  <TASK>
[  712.419997][T17822]  dump_stack_lvl+0x100/0x190
[  712.420016][T17822]  should_fail_ex.cold+0x5/0xa
[  712.420031][T17822]  __kvm_read_guest_page+0x186/0x250
[  712.420047][T17822]  kvm_fetch_guest_virt+0x128/0x1a0
[  712.420062][T17822]  __do_insn_fetch_bytes+0x5e2/0x7b0
[  712.420080][T17822]  ? __pfx___do_insn_fetch_bytes+0x10/0x10
[  712.420104][T17822]  ? __pfx_folio_mark_accessed+0x10/0x10
[  712.420120][T17822]  x86_decode_insn+0x3ca/0x6da0
[  712.420139][T17822]  ? __pfx_x86_decode_insn+0x10/0x10
[  712.420152][T17822]  ? handle_task_switch+0x6a0/0xa20
[  712.420165][T17822]  ? init_decode_cache+0xd/0x2b0
[  712.420177][T17822]  ? init_emulate_ctxt+0x43c/0x700
[  712.420190][T17822]  ? __pfx_init_emulate_ctxt+0x10/0x10
[  712.420203][T17822]  ? __pfx_kvm_set_msr_common+0x10/0x10
[  712.420222][T17822]  ? kvm_multiple_exception+0x5b0/0x710
[  712.420235][T17822]  x86_emulate_instruction+0x1052/0x1df0
[  712.420253][T17822]  ? kvm_mmu_page_fault+0x289/0x1ab0
[  712.420269][T17822]  ? __pfx_vmx_set_msr+0x10/0x10
[  712.420287][T17822]  handle_ud+0x100/0x5b0
[  712.420303][T17822]  ? __pfx_handle_ud+0x10/0x10
[  712.420319][T17822]  ? rcu_qs+0x2a/0xe0
[  712.420335][T17822]  ? rcu_note_context_switch+0x174/0x19c0
[  712.420354][T17822]  ? __lock_acquire+0x49f/0x1a40
[  712.420370][T17822]  ? __vmx_complete_interrupts+0x129/0x570
[  712.420388][T17822]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  712.420405][T17822]  handle_exception_nmi+0xd0c/0x1af0
[  712.420424][T17822]  ? __pfx_handle_exception_nmi+0x10/0x10
[  712.420441][T17822]  vmx_handle_exit+0x4d6/0x1ef0
[  712.420461][T17822]  vcpu_run+0x35ab/0x5de0
[  712.420489][T17822]  ? __pfx_vcpu_run+0x10/0x10
[  712.420520][T17822]  ? rcu_is_watching+0x12/0xc0
[  712.420547][T17822]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  712.420570][T17822]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  712.420599][T17822]  kvm_vcpu_ioctl+0x730/0x1700
[  712.420615][T17822]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  712.420629][T17822]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  712.420643][T17822]  ? do_vfs_ioctl+0x226/0x13e0
[  712.420664][T17822]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  712.420682][T17822]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  712.420706][T17822]  ? __fget_files+0x215/0x3d0
[  712.420717][T17822]  ? hook_file_ioctl_common+0x140/0x440
[  712.420735][T17822]  ? selinux_file_ioctl+0x13b/0x290
[  712.420752][T17822]  ? selinux_file_ioctl+0xb6/0x290
[  712.420771][T17822]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  712.420785][T17822]  __x64_sys_ioctl+0x18e/0x210
[  712.420803][T17822]  do_syscall_64+0x115/0x870
[  712.420821][T17822]  ? clear_bhb_loop+0x70/0xc0
[  712.420835][T17822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.420847][T17822] RIP: 0033:0x7f519179e0d9
[  712.420859][T17822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  712.420870][T17822] RSP: 002b:00007f5192695028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  712.420882][T17822] RAX: ffffffffffffffda RBX: 00007f5191a25fa0 RCX: 00007f519179e0d9
[  712.420889][T17822] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  712.420896][T17822] RBP: 00007f5192695090 R08: 0000000000000000 R09: 0000000000000000
[  712.420902][T17822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  712.420909][T17822] R13: 00007f5191a26038 R14: 00007f5191a25fa0 R15: 00007ffde30a1118
[  712.420924][T17822]  </TASK>
[  712.479401][ T5889] usb usb10-port1: unable to enumerate USB device
[  712.945651][T17839] __nla_validate_parse: 1 callbacks suppressed
[  712.945670][T17839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4125'.
[  712.951895][T17839] netlink: 'syz.4.4125': attribute type 5 has an invalid length.
[  712.955398][T17839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4125'.
[  712.967794][T17839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4125'.
[  712.972799][T17839] netlink: 'syz.4.4125': attribute type 5 has an invalid length.
[  712.978075][T17839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4125'.
[  712.989355][ T5832] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  712.992151][ T5832] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  712.995056][ T5832] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  712.997697][ T5832] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  713.031130][T17844] syzkaller0: entered promiscuous mode
[  713.033030][T17844] syzkaller0: entered allmulticast mode
[  713.111759][T17848] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  713.328353][T17855] FAULT_INJECTION: forcing a failure.
[  713.328353][T17855] name failslab, interval 1, probability 0, space 0, times 0
[  713.332637][T17855] CPU: 3 UID: 0 PID: 17855 Comm: syz.3.4132 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  713.332656][T17855] Tainted: [L]=SOFTLOCKUP
[  713.332660][T17855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  713.332667][T17855] Call Trace:
[  713.332671][T17855]  <TASK>
[  713.332676][T17855]  dump_stack_lvl+0x100/0x190
[  713.332696][T17855]  should_fail_ex.cold+0x5/0xa
[  713.332711][T17855]  should_failslab+0xc2/0x120
[  713.332727][T17855]  __kmalloc_noprof+0xfc/0x820
[  713.332741][T17855]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[  713.332763][T17855]  genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[  713.332781][T17855]  genl_family_rcv_msg_doit+0xc7/0x300
[  713.332797][T17855]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  713.332816][T17855]  ? bpf_lsm_capable+0x9/0x10
[  713.332829][T17855]  ? security_capable+0x80/0x260
[  713.332845][T17855]  ? ns_capable+0xd2/0xf0
[  713.332861][T17855]  genl_rcv_msg+0x560/0x800
[  713.332877][T17855]  ? __pfx_genl_rcv_msg+0x10/0x10
[  713.332891][T17855]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  713.332936][T17855]  ? __pfx_nl80211_set_bss+0x10/0x10
[  713.332950][T17855]  ? __pfx_nl80211_post_doit+0x10/0x10
[  713.332969][T17855]  ? __lock_acquire+0x49f/0x1a40
[  713.332986][T17855]  netlink_rcv_skb+0x159/0x420
[  713.332999][T17855]  ? __pfx_genl_rcv_msg+0x10/0x10
[  713.333014][T17855]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  713.333036][T17855]  ? netlink_deliver_tap+0x1ae/0xcc0
[  713.333050][T17855]  genl_rcv+0x28/0x40
[  713.333063][T17855]  netlink_unicast+0x585/0x850
[  713.333077][T17855]  ? __pfx_netlink_unicast+0x10/0x10
[  713.333093][T17855]  netlink_sendmsg+0x8b0/0xda0
[  713.333108][T17855]  ? __pfx_netlink_sendmsg+0x10/0x10
[  713.333122][T17855]  ? selinux_socket_sendmsg+0x198/0x2f0
[  713.333142][T17855]  ____sys_sendmsg+0xa4d/0xbe0
[  713.333160][T17855]  ? __pfx_netlink_sendmsg+0x10/0x10
[  713.333173][T17855]  ? __pfx_____sys_sendmsg+0x10/0x10
[  713.333198][T17855]  ___sys_sendmsg+0x190/0x1e0
[  713.333210][T17855]  ? __pfx____sys_sendmsg+0x10/0x10
[  713.333221][T17855]  ? __lock_acquire+0x49f/0x1a40
[  713.333235][T17855]  ? get_pid_task+0x106/0x250
[  713.333270][T17855]  __sys_sendmsg+0x160/0x210
[  713.333292][T17855]  ? __pfx___sys_sendmsg+0x10/0x10
[  713.333324][T17855]  do_syscall_64+0x115/0x870
[  713.333346][T17855]  ? clear_bhb_loop+0x70/0xc0
[  713.333367][T17855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  713.333386][T17855] RIP: 0033:0x7fdd2519e0d9
[  713.333402][T17855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  713.333420][T17855] RSP: 002b:00007fdd260f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  713.333437][T17855] RAX: ffffffffffffffda RBX: 00007fdd25425fa0 RCX: 00007fdd2519e0d9
[  713.333447][T17855] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  713.333454][T17855] RBP: 00007fdd260f8090 R08: 0000000000000000 R09: 0000000000000000
[  713.333461][T17855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  713.333468][T17855] R13: 00007fdd25426038 R14: 00007fdd25425fa0 R15: 00007fff1be2d3d8
[  713.333483][T17855]  </TASK>
[  714.592786][T17872] xt_connbytes: Forcing CT accounting to be enabled
[  714.600921][T17872] xt_CT: You must specify a L4 protocol and not use inversions on it
[  715.990149][T17882] netlink: 'syz.4.4142': attribute type 20 has an invalid length.
[  716.103750][   T42] kauditd_printk_skb: 4 callbacks suppressed
[  716.103766][   T42] audit: type=1400 audit(1786645332.417:1440): avc:  denied  { mounton } for  pid=17890 comm="syz.3.4145" path="/425/config" dev="configfs" ino=3122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  716.131835][T17889] FAULT_INJECTION: forcing a failure.
[  716.131835][T17889] name failslab, interval 1, probability 0, space 0, times 0
[  716.137056][T17889] CPU: 0 UID: 0 PID: 17889 Comm: syz.6.4144 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  716.137083][T17889] Tainted: [L]=SOFTLOCKUP
[  716.137090][T17889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  716.137099][T17889] Call Trace:
[  716.137105][T17889]  <TASK>
[  716.137112][T17889]  dump_stack_lvl+0x100/0x190
[  716.137145][T17889]  should_fail_ex.cold+0x5/0xa
[  716.137169][T17889]  should_failslab+0xc2/0x120
[  716.137191][T17889]  __kmalloc_cache_node_noprof+0x94/0x6c0
[  716.137215][T17889]  ? __get_vm_area_node+0x101/0x330
[  716.137241][T17889]  __get_vm_area_node+0x101/0x330
[  716.137267][T17889]  __vmalloc_node_range_noprof+0x228/0x1630
[  716.137292][T17889]  ? vhost_task_create+0x1db/0x370
[  716.137320][T17889]  ? vhost_task_create+0x1db/0x370
[  716.137344][T17889]  ? __memcg_slab_post_alloc_hook+0x749/0x1160
[  716.137369][T17889]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  716.137400][T17889]  ? trace_kmem_cache_alloc+0xdd/0x100
[  716.137425][T17889]  ? vhost_task_create+0x1db/0x370
[  716.137443][T17889]  __vmalloc_node_noprof+0xad/0xf0
[  716.137466][T17889]  ? vhost_task_create+0x1db/0x370
[  716.137488][T17889]  copy_process+0x7fb/0x8030
[  716.137525][T17889]  ? __pfx_copy_process+0x10/0x10
[  716.137547][T17889]  ? __kasan_kmalloc+0xaa/0xb0
[  716.137568][T17889]  ? lockdep_init_map_type+0x5c/0x250
[  716.137617][T17889]  ? lockdep_init_map_type+0x5c/0x250
[  716.137638][T17889]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  716.137660][T17889]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  716.137679][T17889]  vhost_task_create+0x1db/0x370
[  716.137698][T17889]  ? __pfx_vhost_task_create+0x10/0x10
[  716.137725][T17889]  ? __pfx_vhost_task_fn+0x10/0x10
[  716.137745][T17889]  ? __pfx___mutex_lock+0x10/0x10
[  716.137769][T17889]  ? kasan_quarantine_put+0x104/0x240
[  716.137794][T17889]  kvm_mmu_post_init_vm+0x1b3/0x360
[  716.137820][T17889]  kvm_arch_vcpu_ioctl_run+0x66/0x1960
[  716.137873][T17889]  ? kvm_vcpu_ioctl+0x1531/0x1700
[  716.137899][T17889]  kvm_vcpu_ioctl+0x730/0x1700
[  716.137920][T17889]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  716.137939][T17889]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  716.137961][T17889]  ? do_vfs_ioctl+0x226/0x13e0
[  716.137985][T17889]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  716.138009][T17889]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  716.138044][T17889]  ? __fget_files+0x215/0x3d0
[  716.138060][T17889]  ? hook_file_ioctl_common+0x140/0x440
[  716.138086][T17889]  ? selinux_file_ioctl+0x13b/0x290
[  716.138110][T17889]  ? selinux_file_ioctl+0xb6/0x290
[  716.138134][T17889]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  716.138161][T17889]  __x64_sys_ioctl+0x18e/0x210
[  716.138187][T17889]  do_syscall_64+0x115/0x870
[  716.138209][T17889]  ? clear_bhb_loop+0x70/0xc0
[  716.138230][T17889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  716.138246][T17889] RIP: 0033:0x7fa40d19e0d9
[  716.138262][T17889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  716.138278][T17889] RSP: 002b:00007fa40e105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  716.138296][T17889] RAX: ffffffffffffffda RBX: 00007fa40d425fa0 RCX: 00007fa40d19e0d9
[  716.138307][T17889] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  716.138317][T17889] RBP: 00007fa40e105090 R08: 0000000000000000 R09: 0000000000000000
[  716.138327][T17889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  716.138337][T17889] R13: 00007fa40d426038 R14: 00007fa40d425fa0 R15: 00007ffd0e3c4058
[  716.138361][T17889]  </TASK>
[  716.138464][T17889] warn_alloc: 1 callbacks suppressed
[  716.138475][T17889] syz.6.4144: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[  716.158314][T17896] syzkaller0: entered promiscuous mode
[  716.163135][T17889] ,cpuset=
[  716.163816][T17896] syzkaller0: entered allmulticast mode
[  716.166523][T17889] /,mems_allowed=0-1
[  716.291134][T17889] CPU: 0 UID: 0 PID: 17889 Comm: syz.6.4144 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  716.291168][T17889] Tainted: [L]=SOFTLOCKUP
[  716.291174][T17889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  716.291184][T17889] Call Trace:
[  716.291191][T17889]  <TASK>
[  716.291197][T17889]  dump_stack_lvl+0x100/0x190
[  716.291224][T17889]  warn_alloc.cold+0x94/0xa8
[  716.291243][T17889]  ? __pfx_warn_alloc+0x10/0x10
[  716.291259][T17889]  ? __kasan_kmalloc+0x8a/0xb0
[  716.291289][T17889]  ? __get_vm_area_node+0x208/0x330
[  716.291317][T17889]  __vmalloc_node_range_noprof+0xccd/0x1630
[  716.291350][T17889]  ? vhost_task_create+0x1db/0x370
[  716.291376][T17889]  ? __memcg_slab_post_alloc_hook+0x749/0x1160
[  716.291401][T17889]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  716.291431][T17889]  ? trace_kmem_cache_alloc+0xdd/0x100
[  716.291457][T17889]  ? vhost_task_create+0x1db/0x370
[  716.291475][T17889]  __vmalloc_node_noprof+0xad/0xf0
[  716.291498][T17889]  ? vhost_task_create+0x1db/0x370
[  716.291520][T17889]  copy_process+0x7fb/0x8030
[  716.291557][T17889]  ? __pfx_copy_process+0x10/0x10
[  716.291579][T17889]  ? __kasan_kmalloc+0xaa/0xb0
[  716.291600][T17889]  ? lockdep_init_map_type+0x5c/0x250
[  716.291622][T17889]  ? lockdep_init_map_type+0x5c/0x250
[  716.291645][T17889]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  716.291666][T17889]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  716.291684][T17889]  vhost_task_create+0x1db/0x370
[  716.291703][T17889]  ? __pfx_vhost_task_create+0x10/0x10
[  716.291729][T17889]  ? __pfx_vhost_task_fn+0x10/0x10
[  716.291750][T17889]  ? __pfx___mutex_lock+0x10/0x10
[  716.291773][T17889]  ? kasan_quarantine_put+0x104/0x240
[  716.291799][T17889]  kvm_mmu_post_init_vm+0x1b3/0x360
[  716.291824][T17889]  kvm_arch_vcpu_ioctl_run+0x66/0x1960
[  716.291848][T17889]  ? kvm_vcpu_ioctl+0x1531/0x1700
[  716.291893][T17889]  kvm_vcpu_ioctl+0x730/0x1700
[  716.291916][T17889]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  716.291936][T17889]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  716.291958][T17889]  ? do_vfs_ioctl+0x226/0x13e0
[  716.291982][T17889]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  716.292006][T17889]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  716.292040][T17889]  ? __fget_files+0x215/0x3d0
[  716.292057][T17889]  ? hook_file_ioctl_common+0x140/0x440
[  716.292082][T17889]  ? selinux_file_ioctl+0x13b/0x290
[  716.292105][T17889]  ? selinux_file_ioctl+0xb6/0x290
[  716.292130][T17889]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  716.292156][T17889]  __x64_sys_ioctl+0x18e/0x210
[  716.292182][T17889]  do_syscall_64+0x115/0x870
[  716.292204][T17889]  ? clear_bhb_loop+0x70/0xc0
[  716.292225][T17889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  716.292242][T17889] RIP: 0033:0x7fa40d19e0d9
[  716.292257][T17889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  716.292273][T17889] RSP: 002b:00007fa40e105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  716.292290][T17889] RAX: ffffffffffffffda RBX: 00007fa40d425fa0 RCX: 00007fa40d19e0d9
[  716.292301][T17889] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  716.292311][T17889] RBP: 00007fa40e105090 R08: 0000000000000000 R09: 0000000000000000
[  716.292320][T17889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  716.292330][T17889] R13: 00007fa40d426038 R14: 00007fa40d425fa0 R15: 00007ffd0e3c4058
[  716.292355][T17889]  </TASK>
[  716.292428][T17889] Mem-Info:
[  716.355694][T17900] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4148'.
[  716.358006][T17889] active_anon:10273 inactive_anon:7 isolated_anon:0
[  716.358006][T17889]  active_file:6818 inactive_file:48162 isolated_file:0
[  716.358006][T17889]  unevictable:1000 dirty:273 writeback:0
[  716.358006][T17889]  slab_reclaimable:9673 slab_unreclaimable:75569
[  716.358006][T17889]  mapped:28786 shmem:1567 pagetables:1705
[  716.358006][T17889]  sec_pagetables:303 bounce:0
[  716.358006][T17889]  kernel_misc_reclaimable:0
[  716.358006][T17889]  free:439738 free_pcp:11130 free_cma:0
[  716.450875][T17889] Node 0 active_anon:41092kB inactive_anon:28kB active_file:27272kB inactive_file:192364kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:98700kB dirty:1088kB writeback:0kB shmem:4268kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15808kB pagetables:6592kB sec_pagetables:1212kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  716.464254][T17889] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:284kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:16444kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  716.476637][T17889] Node 0 DMA free:11076kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:60kB local_pcp:12kB free_cma:0kB
[  716.488348][T17889] lowmem_reserve[]: 0 1225 1225 1225 1225
[  716.490908][T17889] Node 0 DMA32 free:145168kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41088kB inactive_anon:28kB active_file:27272kB inactive_file:192364kB unevictable:2000kB writepending:1088kB zspages:352kB present:2080628kB managed:1255316kB mlocked:0kB bounce:0kB free_pcp:41476kB local_pcp:24512kB free_cma:0kB
[  716.503865][T17889] lowmem_reserve[]: 0 0 0 0 0
[  716.505792][T17889] Node 1 Normal free:1602708kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:284kB unevictable:2000kB writepending:4kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:3320kB local_pcp:2448kB free_cma:0kB
[  716.517902][   T42] audit: type=1800 audit(1786645332.827:1441): pid=17905 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.4149" name="file1" dev="tmpfs" ino=1643 res=0 errno=0
[  716.526720][T17889] lowmem_reserve[]: 0 0 0 0 0
[  716.528706][T17889] Node 0 DMA: 3*4kB (UM) 3*8kB (UM) 8*16kB (UM) 7*32kB (UME) 5*64kB (UME) 1*128kB (E) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11076kB
[  716.535601][T17889] Node 0 DMA32: 1503*4kB (UM) 1037*8kB (UME) 442*16kB (UME) 329*32kB (UME) 167*64kB (UME) 65*128kB (UME) 11*256kB (ME) 44*512kB (UM) 31*1024kB (UM) 10*2048kB (UM) 4*4096kB (UM) = 144868kB
[  716.543506][T17889] Node 1 Normal: 27*4kB (UM) 43*8kB (UME) 37*16kB (UM) 42*32kB (UME) 37*64kB (UME) 28*128kB (UME) 18*256kB (UM) 19*512kB (UM) 9*1024kB (UME) 13*2048kB (UME) 377*4096kB (UM) = 1602708kB
[  716.549590][T17889] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  716.552699][T17889] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=0 hugepages_size=2048kB
[  716.555654][T17889] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  716.558627][T17889] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  716.561884][T17889] 56554 total pagecache pages
[  716.563377][T17889] 11 pages in swap cache
[  716.564759][T17889] Free swap  = 124856kB
[  716.566242][T17889] Total swap = 124996kB
[  716.567534][T17889] 1048443 pages RAM
[  716.568788][T17889] 0 pages HighMem/MovableOnly
[  716.572445][T17889] 285303 pages reserved
[  716.573900][T17889] 0 pages cma reserved
[  716.651180][T17909] tmpfs: Bad value for 'mode'
[  716.652419][T17910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4151'.
[  716.699625][   T24] IPVS: starting estimator thread 0...
[  716.732153][T17915] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4152'.
[  716.798877][T17918] IPVS: using max 43 ests per chain, 103200 per kthread
[  716.852531][T17926] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  716.942956][T17932] syzkaller0: entered promiscuous mode
[  716.946139][T17932] syzkaller0: entered allmulticast mode
[  717.068113][T17937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17937 comm=syz.3.4160
[  717.156276][   T42] audit: type=1400 audit(1786645333.467:1442): avc:  denied  { override_creds } for  pid=17945 comm="syz.6.4164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  717.213675][   T42] audit: type=1400 audit(1786645333.527:1443): avc:  denied  { read } for  pid=17949 comm="syz.3.4166" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  717.221736][   T42] audit: type=1400 audit(1786645333.527:1444): avc:  denied  { ioctl } for  pid=17945 comm="syz.6.4164" path="socket:[85081]" dev="sockfs" ino=85081 ioctlcmd=0x620f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  717.232058][   T42] audit: type=1400 audit(1786645333.537:1445): avc:  denied  { open } for  pid=17949 comm="syz.3.4166" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  717.337446][   T42] audit: type=1400 audit(1786645333.647:1446): avc:  denied  { ioctl } for  pid=17955 comm="syz.3.4168" path="/434/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  717.358825][ T5772] usb 10-1: new low-speed USB device number 40 using dummy_hcd
[  717.388861][   T42] audit: type=1400 audit(1786645333.697:1447): avc:  denied  { accept } for  pid=17957 comm="syz.3.4169" lport=41998 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  717.416070][T17958] 8021q: adding VLAN 0 to HW filter on device bond0
[  717.419858][T17958] 8021q: adding VLAN 0 to HW filter on device team0
[  717.425941][T17958] 8021q: adding VLAN 0 to HW filter on device batadv0
[  717.444622][   T42] audit: type=1400 audit(1786645333.757:1448): avc:  denied  { write } for  pid=17957 comm="syz.3.4169" path="socket:[83484]" dev="sockfs" ino=83484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  717.452814][   T42] audit: type=1400 audit(1786645333.767:1449): avc:  denied  { setopt } for  pid=17957 comm="syz.3.4169" lport=41998 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  717.468891][T17958] batman_adv: batadv0: Interface activated: batadv_slave_0
[  717.473904][T17958] batman_adv: batadv0: Interface activated: batadv_slave_1
[  717.480008][T17958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  717.490913][T17958] veth1_vlan: left promiscuous mode
[  717.494420][T17958] veth0_vlan: left promiscuous mode
[  717.497615][T17958] veth0_vlan: entered promiscuous mode
[  717.500998][T17958] veth1_vlan: entered promiscuous mode
[  717.506995][T17958] veth1_macvtap: left promiscuous mode
[  717.509785][T17958] veth0_macvtap: left promiscuous mode
[  717.512086][T17958] veth0_macvtap: entered promiscuous mode
[  717.515680][T17958] veth1_macvtap: entered promiscuous mode
[  717.521141][ T5772] usb 10-1: unable to get BOS descriptor or descriptor too short
[  717.527582][T17958] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  717.530356][ T5772] usb 10-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4
[  717.534647][ T5772] usb 10-1: config 100 has an invalid interface number: 173 but max is 0
[  717.542264][ T5772] usb 10-1: config 100 has no interface number 0
[  717.545055][T17958] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  717.548072][ T5772] usb 10-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt
[  717.553214][T17958] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  717.554782][ T5772] usb 10-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  717.560355][ T5772] usb 10-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 26368, setting to 8
[  717.561436][T17958] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  717.565332][ T5772] usb 10-1: config 100 interface 173 has no altsetting 0
[  717.573382][ T5772] usb 10-1: string descriptor 0 read error: -22
[  717.578679][ T5772] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  717.594012][T17942] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  717.598881][T17942] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  717.603483][ T5772] metro_usb 10-1:100.173: Metrologic USB to Serial converter detected
[  717.610591][ T5832] IPv6: BUG: Address fc00:: on device lo is missing its host route.
[  717.627574][ T5772] usb 10-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  717.729071][T11540] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  717.733483][T11540] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  717.737207][T11540] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  717.741827][T11540] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  717.812765][T17942] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8
[  717.818877][ T5772] usb 10-1: USB disconnect, device number 40
[  717.841305][ T5772] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  717.847363][ T5772] metro_usb 10-1:100.173: device disconnected

VM DIAGNOSIS:
18:17:58  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000438369 RBX=ffffffff8e891480 RCX=ffffffff8bbaf335 RDX=0000000000000000
RSI=ffffffff8e1a9ca0 RDI=ffffffff8c400480 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10
R8 =0000000000000001 R9 =ffffed100d48678d R10=ffff88806a433c6b R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000
RIP=ffffffff8bbad8ff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5de9000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f6b7cfeb7c0 CR3=0000000055b05000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebac6b2f6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebac6b2f6 00007ffebac6b2fc
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b7d035607
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b7d035647
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b7d0357ab
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b7d035639
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000352e63 64755f796d6d7564
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7865000a64657275 6769666e6f63203a 7463656e6e6f635f 6273755f7a797300
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d40000a41405750 424c434b4a46051f 5146404b4b4a465f 4756505f5f5c5600
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b7d1f25f8 00007f6b7d1f25c8 00007f6b7d1f2600 00007f6b7d1f25e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000002818 RBX=ffffc90006522818 RCX=ffffffff86f61d15 RDX=0000000000000000
RSI=ffffffff86f61d23 RDI=ffff88802b784cb6 RBP=000000000000007e RSP=ffffc900006a0a28
R8 =0000000000000005 R9 =0000000000000000 R10=000000000000007f R11=0000000000000000
R12=000000000000007f R13=ffff88802b784c80 R14=00000000ffcb07c0 R15=0000000000000000
RIP=ffffffff86f61d8c RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb02298e880 ffffffff 00c00000
GS =0000 ffff8880d5ee9000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000000000000 CR3=0000000034964000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000002000002 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000000010000
Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562a79a3fdd0 0000562a79a3fdd0
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562a79a29fd0
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562a79a3c650
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0223f1b20
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737163 7373737373737353
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737325590ad29493 73730cc3514c6843
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69646165520073 25203a656c696620 7974706d6520676e 697070696b530065
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4245484d4952005f 090c164940454a0c 55585c41490c4b42 455c5c4547530049
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 352e6463685f796d 6d75642f6d726f66 74616c702f736563 697665642f737973
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3032785c3032785c 3032785c3032785c 3032785c3032785c 3032785c3032785c
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3032785c3032785c 3032785c3032785c 3032785c3032785c 3032785c3032785c
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3032785c3032785c 3032785c3032785c 3032785c3032785c 3032785c3032785c
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3032785c3032785c 3032785c4b534944 445241483032785c 554d45513d434e45
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000
RSI=000000009064fda6 RDI=0000000081bbc1f6 RBP=ffffffff8ebe8200 RSP=ffffc900065e73a0
R8 =000000003b567e27 R9 =0000000000000007 R10=0000000000000000 R11=0000000000000000
R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81e605f9 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555563fb8500 ffffffff 00c00000
GS =0000 ffff8880d5fe9000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f51925556c8 CR3=0000000013e61000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000
Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=9923328ca42a7f50 e7e890c5c31d3123 9923328ca42a7f50 e7e890c5c31d3123 9923328ca42a7f50 e7e890c5c31d3123 9923328ca42a7f50 e7e890c5c31d3123
ZMM18=34a59fd23fd130a3 4b18a46c73bb6a80 34a59fd23fd130a3 4b18a46c73bb6a80 34a59fd23fd130a3 4b18a46c73bb6a80 34a59fd23fd130a3 4b18a46c73bb6a80
ZMM19=9b19000000000000 0000000000000005 9b19000000000000 0000000000000004 9b19000000000000 0000000000000003 9b19000000000000 0000000000000002
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8003068004028003 0280044ba0030008 004b90030fffffff ffffff044b800308
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04a0040504800404 a4e6080001000002 080606013eee0000 0000315f6576616c
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 735f6d61657401ff ffffffffffffffdf 0804800300080002 1000021000060274
ZMM24=73bb6a8073bb6a80 73bb6a8073bb6a80 73bb6a8073bb6a80 73bb6a8073bb6a80 73bb6a8073bb6a80 73bb6a8073bb6a80 73bb6a8073bb6a80 73bb6a8073bb6a80
ZMM25=4b18a46c4b18a46c 4b18a46c4b18a46c 4b18a46c4b18a46c 4b18a46c4b18a46c 4b18a46c4b18a46c 4b18a46c4b18a46c 4b18a46c4b18a46c 4b18a46c4b18a46c
ZMM26=3fd130a33fd130a3 3fd130a33fd130a3 3fd130a33fd130a3 3fd130a33fd130a3 3fd130a33fd130a3 3fd130a33fd130a3 3fd130a33fd130a3 3fd130a33fd130a3
ZMM27=34a59fd234a59fd2 34a59fd234a59fd2 34a59fd234a59fd2 34a59fd234a59fd2 34a59fd234a59fd2 34a59fd234a59fd2 34a59fd234a59fd2 34a59fd234a59fd2
ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=9a1900009a190000 9a1900009a190000 9a1900009a190000 9a1900009a190000 9a1900009a190000 9a1900009a190000 9a1900009a190000 9a1900009a190000
info registers vcpu 3

CPU#3
RAX=0000000000000001 RBX=ffff88801f6d5698 RCX=0000000000000200 RDX=0000000000000000
RSI=ffff88801f6d5698 RDI=ffff88801f6d4a80 RBP=ffff88801f6d4a80 RSP=ffffc90004bd7968
R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000
R12=0000000000000007 R13=0000000000000003 R14=0000000000000000 R15=0000000000000003
RIP=ffffffff81e5eeae RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d60e9000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c2f1995 CR3=0000000013315000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000002000002 Opmask01=0000000000000200 Opmask02=000000007ffeffff Opmask03=0000000008000000
Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562a79ae76a0 0000562a79ae76a0
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562a79a3d4b0
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562a79a25170
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0223f1b20
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000ff0000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 101a1a101a1a1a1a 051a1a101a1a1a1a
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 43495a05594f4943 5c4f4e0559535905
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69646165520073 25203a656c696620 7974706d6520676e 697070696b530065
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4245484d4952005f 090c164940454a0c 55585c41490c4b42 455c5c4547530049
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 352e6463685f796d 6d75642f6d726f66 74616c702f736563 697665642f737973
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000562a79a3b88a 0000562a79a1e7b0 6900323a38383100
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 58455f48541f7d26 ecfa175f441f510f cdad242d6e215d56 c7a125796279410a
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff7fff7d7f7f7f77 ffff575f5d7f7f7f fdff3f7f7f6fff7f ffef7f7f7f7f6f5f
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b53494444524148 5f554d45512d6174 612f64692d79622f 6b7369642f766564
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 696400644e2d4953 2f4554584500484f 49534e4554574544 485449575f242d57
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554500484e2d4945 2f45524144004449 0053242d5457452d 484e2d4953242d54
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000