last executing test programs:

1.898898566s ago: executing program 2 (id=730):
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='incremental-fs\x00', 0x940810, &(0x7f00000000c0)='$\x00')
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x100000, 0xe2, 0x31}, 0x18)
faccessat(r0, &(0x7f0000000180)='./file0\x00', 0x14)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f00000001c0)={'team_slave_0\x00', 0x1, 0x2})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000002c0)=0xffffffff00000001, 0x8)
pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4000)
write$P9_RREADLINK(r3, &(0x7f0000000340)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x220501, 0x10)
io_setup(0x9b, &(0x7f00000003c0)=<r5=>0x0)
r6 = eventfd(0x8)
io_cancel(r5, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x2, 0x3, r4, &(0x7f0000000400)="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", 0x1000, 0x2, 0x0, 0x3, r6}, &(0x7f0000001440))
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001540)={{{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in6=@private2}}, &(0x7f0000001640)=0xe8)
mount$nfs4(&(0x7f0000001480)='-\x00', &(0x7f00000014c0)='./file0\x00', &(0x7f0000001500), 0x150c0, &(0x7f0000001680)={[{'\\@(*-'}, {'team_slave_0\x00'}, {'incremental-fs\x00'}], [{@smackfsdef}, {@subj_type}, {@smackfsroot={'smackfsroot', 0x3d, '-,'}}, {@uid_eq={'uid', 0x3d, r8}}, {@dont_measure}]})
r9 = openat$panthor(0xffffffffffffff9c, &(0x7f0000001700), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r9, 0xc01064bd, &(0x7f0000001800)={&(0x7f0000001740)="a4346f10c2efde5ded280da15cdf6cc42b1370c8103551e382a34246d3bbdd0b21b748b051a3f92dbd7300ae3418c89f7c923d33cf87172282edab6b531a91a9bad1b2b17e27915a1a1b47980328a79850d4688a3c1818c5ebb960a0185d98c33e354ece1642141bec81206762aa6f23e2721b0609d67f2ca817ebe7691bd034de0c72691be9abaf3a3d28d1c47705ae85d3c515ffd451f2cd7a3e997f9f57e6", 0xa0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001840))
r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0)
sendmsg$nl_xfrm(r10, &(0x7f0000001c00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001900)=@flushsa={0x2b0, 0x1c, 0x8, 0x70bd25, 0x25dfdbfc, {0x2b}, [@replay_thresh={0x8, 0xb, 0x4}, @migrate={0x1cc, 0x11, [{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}, @in=@dev={0xac, 0x14, 0x14, 0x36}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2b, 0x4, 0x0, 0x3501, 0xa, 0x2}, {@in6=@dev={0xfe, 0x80, '\x00', 0xe}, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff, 0x0, 0x0, 0x3502, 0x2, 0xa}, {@in6=@empty, @in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x2b, 0x3, 0x0, 0x34ff, 0x0, 0xa}, {@in=@loopback, @in=@local, @in6=@local, @in6=@mcast2, 0x6c, 0x4, 0x0, 0x34ff, 0xa, 0xa}, {@in=@multicast1, @in=@empty, @in=@rand_addr=0x64010101, @in6=@private0, 0x6c, 0x1, 0x0, 0x3504, 0xa, 0x2}, {@in=@multicast1, @in=@local, @in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x32, 0x4, 0x0, 0x4, 0xa, 0xa}]}, @srcaddr={0x14, 0xd, @in=@private=0xa010100}, @tfcpad={0x8, 0x16, 0x7fffffff}, @policy={0xac, 0x7, {{@in6=@empty, @in=@broadcast, 0x4e24, 0x8, 0x4e20, 0xb2, 0x2, 0x80, 0x20, 0x87, r7, r8}, {0xf, 0x337d31a, 0x4, 0x0, 0x5, 0x0, 0x7f, 0xd8a5}, {0x800, 0x9, 0xd, 0x8}, 0xe8ce, 0x6e6bbd, 0x0, 0x0, 0x3, 0x2}}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x48082}, 0x4800)
getsockopt$bt_hci(r10, 0x0, 0x2, &(0x7f0000001c40)=""/176, &(0x7f0000001d00)=0xb0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001d80)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001d40), 0x0, r10}, 0x68)
ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0xe28ed407c0a89971)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001e00), &(0x7f0000001e40)=0xc)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000001e80)=0x2)
mount(&(0x7f0000001ec0)=@loop={'/dev/loop', 0x0}, &(0x7f0000001f00)='./file0\x00', &(0x7f0000001f40)='exfat\x00', 0x24000, &(0x7f0000001f80)='Z^\x00')
ioctl$DRM_IOCTL_GET_STATS(r9, 0x80f86406, &(0x7f0000001fc0)=""/162)
ioctl$XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f0000002080)={r4, 0x0, 0x80000001, 0x9, 0x9, 0x8})
gettid()
ioctl$NS_GET_OWNER_UID(r10, 0xb704, &(0x7f00000020c0))

1.682250324s ago: executing program 1 (id=732):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) (async)
r1 = fsopen(&(0x7f0000000200)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x0)
fchdir(r2) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000600)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7040010000000f0000000800030053429000113cdea2a62066ed5f1f752746fc234405f2e49d9f73fd14d54d8296dae13c6e6d9558d304ca91228387eb091fa776ce9b4fba229d7131d2fccbcca8e989fc7ed3da412f893f330b4deb1875587a42f241a67653d04e9e11f08c9fce679dedf3df325ad34cda9741c1cccec46b55808af35f9b4554b74d594d3c80f6685ac3cbccd8632ce18e297e644cd9e55461406d2ae2402cceb4728385ae655ed5a1210e5b6a51f1d56ca46edc", @ANYRES64=r4, @ANYBLOB="05002d0000000000050038000004000008002b001e0000000500290000000000050029000000000008002b00020000000500330001000000"], 0x54}, 0x1, 0x0, 0x0, 0xc4}, 0x40) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000002480)={'syztnl2\x00', &(0x7f0000002400)={'syztnl2\x00', r5, 0x2f, 0x5, 0x9, 0x80000001, 0x56, @mcast1, @mcast1, 0x80, 0x40, 0x100000b, 0x4}})
r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001780)={r3, 0x0, 0x2d, 0xf, @void}, 0x10)
r8 = dup(r7)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@o_path={&(0x7f00000000c0)='./file0\x00', r8}, 0x18) (async)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0xe0, 0xf, 0x7ffe7ffc}]})
close_range(r9, 0xffffffffffffffff, 0x3f00000000000000) (async)
unlink(&(0x7f00000004c0)='./file0\x00') (async)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080)={0x100, 0x6, 0x80, 0x200}, 0x8) (async)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e)
r10 = socket$kcm(0x29, 0x7, 0x0) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f00000022c0)='GPL\x00'}, 0x48) (async)
r12 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r12, &(0x7f0000002300)={&(0x7f0000002340)={0x2, 0x4001, @multicast1}, 0x10, 0x0}, 0x20000981) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000002380)={r12, r11}) (async)
setsockopt$sock_attach_bpf(r12, 0x1, 0x7, &(0x7f00000023c0), 0x4)
r13 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000024c0), 0x1000028e, 0x0, 0x0, 0xc9e}, 0x400c0c0)
sendto$inet6(r0, &(0x7f0000000180)="92d94cc6cf1cda3b7dacb06f10b3cae0f850f76b87807f217fca7f3f23dfae", 0x1f, 0xe0, &(0x7f0000000000)={0xa, 0x4e23, 0x8001, @mcast1, 0x4}, 0x1c)

1.628060256s ago: executing program 2 (id=733):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="a400000010000104080000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000000000005000c0000000000050007000700000005000a00000000000500080000000000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioprio_set$pid(0x2, 0x0, 0x2004)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x12, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

1.627640821s ago: executing program 1 (id=734):
unshare(0x10000)
unshare(0x48020200)
unshare(0x44000800)
r0 = syz_clone(0x8100, &(0x7f0000000000)="3732edaa0567dbcf25859e00b77a283a08635e8e78ff17f0b9a68462d75409406463e7453583910628774f7da260b53b47ba648ec18f", 0x36, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="1617dd3a7553aafbba577e11e97229d5fbbfc4f7978e67c8a4590f680f8c615b059685b3")
mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
unshare(0x10800)
ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, <r1=>r0})
r2 = openat$nsim_port_pp_hold(0xffffffffffffff9c, &(0x7f0000000180)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x33}, 0x6000c0, 0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r4 = syz_open_dev$I2C(&(0x7f0000000200), 0x6, 0x1)
kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000240)={r3, r4, 0x7})
mount(&(0x7f0000000280)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='ocfs2\x00', 0x882083, &(0x7f0000000340)='{*\xd2!(@/}#\x00')
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
unshare(0x4000000)
unshare(0x20000000)
unshare(0x400)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f00000004c0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000902, r6, &(0x7f0000000500))
syz_ublk_setup_io_uring(0x1626, 0xfffffffffffffffd, &(0x7f0000000580)=<r7=>0x0, &(0x7f00000005c0)=<r8=>0x0, &(0x7f0000000600))
r9 = syz_io_uring_complete(r7, r8)
setsockopt$inet_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000640), 0x3)
semget$private(0x0, 0x0, 0x5)
read(r4, &(0x7f0000000680)=""/127, 0x7f)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000700)={<r10=>0x0}, &(0x7f0000000740)=0xc)
process_vm_readv(r10, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/220, 0xdc}, {&(0x7f0000000880)=""/122, 0x7a}, {&(0x7f0000000900)=""/176, 0xb0}], 0x3, &(0x7f0000002f00)=[{&(0x7f0000000a00)=""/74, 0x4a}, {&(0x7f0000000a80)=""/243, 0xf3}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/117, 0x75}, {&(0x7f0000001c00)=""/115, 0x73}, {&(0x7f0000001c80)=""/233, 0xe9}, {&(0x7f0000001d80)=""/89, 0x59}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/243, 0xf3}], 0x9, 0x0)
getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000002fc0), &(0x7f0000003000)=0x4)
r11 = openat$userio(0xffffffffffffff9c, &(0x7f0000003040), 0x600, 0x0)
read(r11, &(0x7f0000003080)=""/217, 0xd9)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000031c0)={0x1, &(0x7f0000003180)=[{0x57d, 0x3, 0x0, 0x3}]})
ioctl$SNAPSHOT_FREE(r3, 0x3305)

722.163407ms ago: executing program 2 (id=735):
request_key(0x0, 0x0, &(0x7f0000000000)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0xa8002, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000700))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000600)="c1df07000000d30a298ee688884787", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
ptrace(0x10, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/vhci\x00', 0x8002, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket(0x10, 0x803, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendto(r6, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, 0x0, 0x4000000)
write(r4, &(0x7f0000000380)="ff80", 0x2)
name_to_handle_at(r4, &(0x7f0000000640)='./dev\x00', &(0x7f0000000680)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x400, 0x1, 0x3, 0xf0}}, &(0x7f00000006c0), 0x3600)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
close(r4)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc)
getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000180)=""/145, &(0x7f0000000240)=0x91)
fsopen(&(0x7f0000000040)='pstore\x00', 0x1)

667.341207ms ago: executing program 1 (id=736):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0xffffff42, &(0x7f0000000100)=[{&(0x7f0000000140)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x6890)
write$binfmt_register(0xffffffffffffffff, &(0x7f00000001c0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b<B\xc3k\xcd\x01\xe4\x05\n!\x02Y\xc7`ooveu`z\xb9\xf5r\xc0c\x95\xcbQbj5\xb1\x8f\xb9J\xa9#\x13\x92\x05H\x91\xa5\xdfxM\nD\xc70\xa11B\xf1\xab\xccw\x17\xbf\xc8W\xec\xb88\xc9\x1b*h\xc3c\x89n\x89ic\xfd\x9c\xfa~\xb5$VG\x85\xc2\x86\x89}*\x99\xda\x94\xba)\xb9b\xeb\xe9\x0f{V%TD\xbc\xee\x96C\x89No\xc9\n\x91\xe0\xfcqE4\x8c', 0x3a, '\x8c\xf0<\x06\xd3=(\xa0\x96k\xd8cf\x92\xd1\xed\xf5\x00\x00\xb5\xff\xd9o\x1c.\xecU \xc8\x12\xacf\x15I)S\xa5\xdb\x8f!\x8aA\xee$\x0e\x16\xf7wL\x9c~8\x10\xd2\nJ,D;Z \x92\xccY\xd7', 0x3a, './cgroup.cpu/cpuset.cpus/file0'}, 0x147)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00004c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000004c0)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'bridge0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000005c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000600)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
r2 = socket$packet(0x11, 0x2, 0x300) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x20000, 0x28000}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x68}}, 0x0) (async)
sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14)

564.710624ms ago: executing program 3 (id=737):
r0 = socket$inet6(0xa, 0x3, 0x38)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000100)=0xeffe, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e1e, 0x0, @empty, 0xb}, 0x1c)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000200)=',', 0xf338}], 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000f80010441e789566078add9e59d6b52fb16d655706a693bc402fdcb908c71663c7dae4d651eeed8e7372c752a6a2acfa7263f576893010511f24158c4a746b810a635e9f3fea1a3824bdd4244654a3932cae2e044d44fd09a556e6e1a3802d03fa6cb36fb0186ce6fb7a0f68fe113c5d3b8aaab0a45a9c623cc1ca301cd6a79f098a5a0aa84478fb", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800a001400bbbbbbbbbbbb0000"], 0x40}}, 0x40005)

564.357079ms ago: executing program 2 (id=738):
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000007c0)={{0x9, 0x2b2c, 0x3e, 0x9}, 'syz0\x00', 0x2d}) (async)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x51) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x220000c0}, 0x24004854) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x20000810) (async)
fdatasync(r0) (async, rerun: 64)
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) (async, rerun: 64)
socket$inet6(0xa, 0x3, 0x5) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) (rerun: 64)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2400c014) (async, rerun: 64)
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000004c0)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", <r7=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f0000000500)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[{}]}) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0xa8}}, 0x0) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
sendmsg$NFT_BATCH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) (async, rerun: 64)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4)
sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c0000040042801c0001800600200088a80000100004"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async, rerun: 64)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x2000, 0x103) (async, rerun: 64)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)

497.729445ms ago: executing program 3 (id=739):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r1, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x42}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x13}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xe}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x19f}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x8000]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffff97e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000fcffffff001002000000d7da08faffffffffffffff6d00000000010000050000000000000018010000000000000000001fdf6210104a46014f66d839ce03300aa1e709731eaad6bf0f1fce3a10db3b5f632ffa32810000000000000000000000000000008e013f7db83069071ae580de76d51132b03412614f5cef67b62bb746b05c7bb1be741b79d17daa1ea2658b4a8af38fc5ddcf102002a953efc0fee16f2d9b54a148285d70988bfe6d5e1cb8e41de834f91099f7b608371c9b8f21c19a1bab59faccc4d772482e8fb0"], 0x0, 0x3e}, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', <r3=>0x0, 0x29, 0xe6, 0x5, 0x3, 0x0, @mcast2, @rand_addr=' \x01\x00', 0x80, 0x40, 0x3}})
sendmsg$nl_route_sched(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@delchain={0x2c, 0x65, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x11, 0x4}, {0xfff2, 0xffff}, {0x0, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24024004)

379.750865ms ago: executing program 1 (id=740):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00')
preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000180)=""/113, 0x200000b1}], 0x1, 0x300, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000004c0)={@nl=@unspec, {&(0x7f0000000380)=""/205, 0xcd}, &(0x7f0000000480), 0x56}, 0xa0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x0, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xfffffffffffffffa}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0)

379.448926ms ago: executing program 3 (id=741):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001480)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfe99)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000740)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c)
socket(0x10, 0x803, 0x0)
unshare(0x20000400)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x101b01)
ioctl$USBDEVFS_SETINTERFACE(r2, 0x4004550c, 0x0)
writev(r1, &(0x7f0000000780)=[{&(0x7f0000007d80)="06c37127bd146834e177aae5c34b20e023a9eac0a37d847a4dd32cf3778fc0031d746b106dbb10d7644d50f8c4c96806dcb3ba4fa4181b7fa29e1ad2ff35dfa9e76b899322d13b773aff9f6ab00b14037f544cd126afce859a70d1db4d2ae358bd87243d44f3217d7e", 0x69}, {&(0x7f0000008380)="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", 0x5df}], 0x2)
socket$inet6(0xa, 0x3, 0xff) (async)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001480)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfe99) (async)
socket$inet6(0xa, 0x3, 0x3c) (async)
connect$inet6(r1, &(0x7f0000000740)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) (async)
socket(0x10, 0x803, 0x0) (async)
unshare(0x20000400) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x101b01) (async)
ioctl$USBDEVFS_SETINTERFACE(r2, 0x4004550c, 0x0) (async)
writev(r1, &(0x7f0000000780)=[{&(0x7f0000007d80)="06c37127bd146834e177aae5c34b20e023a9eac0a37d847a4dd32cf3778fc0031d746b106dbb10d7644d50f8c4c96806dcb3ba4fa4181b7fa29e1ad2ff35dfa9e76b899322d13b773aff9f6ab00b14037f544cd126afce859a70d1db4d2ae358bd87243d44f3217d7e", 0x69}, {&(0x7f0000008380)="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", 0x5df}], 0x2) (async)

378.668432ms ago: executing program 1 (id=742):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = io_uring_setup(0x86c, &(0x7f0000000280)={0x0, 0x1000, 0x10000, 0x100000, 0x75})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x14, &(0x7f0000000300)=[0xffffffff], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
r2 = creat(&(0x7f00000001c0)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x9)
write$tcp_mem(r2, &(0x7f0000000200)={0x5, 0x20, 0x2f, 0x20, 0x10}, 0x48)
r3 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8)
ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000080)=0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018500000ffff0008000000000000000062402000fcffffff95000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r3]}, 0x94)

376.251065ms ago: executing program 2 (id=743):
futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0xe1e, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e21, @local}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001580)={'lo\x00', <r2=>0x0})
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800)
sendto$inet(r0, &(0x7f00000016c0)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000001880), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/firmware/acpi/tables/APIC\x00', 0x4d02, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/firmware/acpi/tables/APIC\x00', 0x4d02, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'ipvlan1\x00', <r5=>0x0})
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000014c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x40, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000014c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x40, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
read(r3, &(0x7f00000004c0)=""/4096, 0x1000)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffd000/0x1000)=nil)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
recvfrom$inet(r7, &(0x7f0000001880)=""/251, 0xfb, 0x2020, &(0x7f0000001980)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) (async)
recvfrom$inet(r7, &(0x7f0000001880)=""/251, 0xfb, 0x2020, &(0x7f0000001980)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c000780080004000400000008000100070000000800020009000000080004000500000008000400009e"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x4008000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0)
recvfrom$inet(r7, 0x0, 0x0, 0x720, 0x0, 0x0) (async)
recvfrom$inet(r7, 0x0, 0x0, 0x720, 0x0, 0x0)
recvfrom(r7, &(0x7f0000000240)=""/234, 0xea, 0x0, 0x0, 0x0) (async)
recvfrom(r7, &(0x7f0000000240)=""/234, 0xea, 0x0, 0x0, 0x0)

295.660618ms ago: executing program 1 (id=744):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000001140)=ANY=[@ANYBLOB="bcea"])
r1 = syz_open_dev$evdev(&(0x7f0000001180), 0x40, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000011c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x5c, 0x0, 0x3, 0x2, 0x5, {0x1200, 0x100, 0x3, 0xcfae}, 0x3, &(0x7f0000001200)=[0x8edf, 0xe3, 0x4]}})

294.286084ms ago: executing program 2 (id=745):
r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000600)={0x3, &(0x7f00000004c0)=[{0x3d, 0x7, 0x8, 0x1}, {0x8, 0x5, 0x4, 0x9}, {0x0, 0x3, 0x2, 0x8}]})
syz_emit_ethernet(0x86, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x5, 0xb68, 0x0, &(0x7f00000005c0)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='proto\x00', &(0x7f0000000100)='tcp\x00', 0x0)

208.264501ms ago: executing program 0 (id=748):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r1, 0x4b4b, &(0x7f0000000000)) (async)
sendto(r0, &(0x7f0000000680)="64000000420001000200000000000000030100000f0000002e00010000112233445566778899aabb08004500001c000000004011f77dc0a80101c0a8010204d2162e000800000000040002801800038014000380100007000a000001c0a8010211004000", 0x64, 0x0, 0x0, 0x0)

207.867529ms ago: executing program 3 (id=749):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="5400000030000106010000000000000000000000400001803c0001800f00010074756e6e656c5f6b65790000280002801c00020000000000000000000000000000000000000000000100000008000b8004000380"], 0x54}], 0x1}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)={0x28, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0xa0420080}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r2, 0x2, 0x40, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x74}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000800))
r5 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000180), 0x81aeb913bf828d1a, 0x0)
ioctl$COMEDI_CMDTEST(r5, 0x8050640a, 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='name', &(0x7f00000000c0)='l\xa4\x9e\xab`\xf6\xfa\xfdC\x945\xa81\xad\xa2\xf4\xf5\x19\x82\xbb\x81G6\xa5\x973\xc7', 0x0)
openat$kvm(0x0, &(0x7f0000000840), 0x88000, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000880)={0x1, 0x0, [{0x4b564d07}]})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000008c0)={[{0x5, 0xc000, 0x4, 0xff, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0xcc}, {0x804, 0x2, 0x1, 0x45, 0x7, 0x1, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x40000001, 0x3, 0x38, 0x3, 0x84, 0x7, 0x6, 0x0, 0x8, 0x3, 0x4, 0x8, 0x24ab}], 0xffffffff})
r6 = openat$kvm(0xffffff9c, &(0x7f0000000940), 0x88000, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x9a783, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000a00)={0xa, 0xffffffffffffffff, 0x1})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000a40)={[0xfffffffffffffffb, 0x6, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0xc, 0x7d, 0x0, 0x3, 0x2, 0x2, 0x4, 0x9, 0x8d], 0x7000, 0x3511c0})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
syz_ublk_setup_io_uring(0x6de7, &(0x7f0000000240)={0x0, 0xca1e, 0x2000, 0x1, 0x304, 0x0, r5}, &(0x7f00000002c0), &(0x7f0000000340)=<r9=>0x0, &(0x7f0000000380))
syz_io_uring_submit(0x0, r9, 0x0, &(0x7f0000000480)=@IORING_OP_READ_MULTISHOT={0x31, 0x2, 0x6000, @fd_index=0x5, 0x3, 0x0, 0x0, 0x2, 0x1, {0x1, 0x0, 0x7, '\x00', &(0x7f0000000440)={0x1cb, 0x6, 0x2a, &(0x7f00000003c0)="f5bb5bdb0ef79b08e7c706b0becbd6afb70b226443af7a5d746cb13206705cbc713baba5f04f860b980f", 0x8}, 0x5}})
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./debugfs/file0\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debugfs/dri/1/Virtual-1/edid_override\x00', 0x1, 0x0)

142.93677ms ago: executing program 0 (id=750):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x900, 0x4, 0x28}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80, 0x0, 0x0, 0x400, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x3b}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40)

142.36676ms ago: executing program 0 (id=751):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f00000001c0)={0x6d, "3aa7ba6d55c58199612ae9cce2faffffff64b0162e32be8eebb3b21980e3d88a9aed1866b37b98b5a454bb8c2d4fbf991ca69ca08842e6ef030d4bf27195296564a1e2ba9d6dec860acf481535a03643ee02b1621eb36de865ca387d281fb30f97f538cbc6000035f5077d76cab9123d04e4c11962831bdefa8153d11178c087"})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000340)={&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000002c0)=""/91, 0x5b})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000034001a8006000000020000002800058024000180080001000100000008000200000000000800030001000000080004"], 0x54}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x4, 0x4, 0x400004, 0x10007, 0x18, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x50)

89.805758ms ago: executing program 0 (id=752):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0xfd}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x20)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b00d0cde377298a5816efff617069646764fff414000280061027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x4c011)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x101200, 0x0)
ioctl$CDROM_GET_MCN(r3, 0x5311, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x128, 0x1, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_STATUS_MASK={0x8}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x82}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1804}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_NAT_SRC={0x84, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x200}]}, 0x128}, 0x1, 0x0, 0x0, 0x80084}, 0x20000001)
r4 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder_logs/transactions\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000300)={0x0, @bt={0x6, 0x9, 0x1, 0x6, 0x0, 0xfffffff7, 0xffffffff, 0x1, 0x9, 0x0, 0x8, 0x9, 0x1ff, 0xa, 0x2, 0x3c, {0x1fffc000, 0xe}, 0x3, 0x45}})
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

89.16167ms ago: executing program 3 (id=753):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_emit_ethernet(0x103a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008050307fbce4a379ae48d941aae81a5906fd6ceee0bc6dc0e9c739b91c80ab5db06133db8fef10efdca51fc96d92941f4739468abd7c234f9749bc8518a4dda05b848a8004e564a3f07a6cb571b9917c2854d10a2e6c86fff9603f3803ad9313e6a1f9dbaf546e3c13d6568f1b0d8c0cb8873afebb8cea7053d1ebf20e15c814128f64f96ac546c5614f229f59cf2600d00807503bd3cc08704cecfa7a701dc8e0adb87d8b1bd444bfcaf4fe1b937034f14e3b2194f79e7f0e0b3f5c6ec3276aa1e25eacfa5e5dd0d29ec55ad485eaf74c549e3"], 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0xbf4, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xbc8, 0x3, 0x0, 0x1, [{0x7c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x270, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x13, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x71, 0x1, "f0968ab3bcc8caeceb529641ed2d2d9e29e2819bfe89a14e2432e44ac876b93af9e378690018be5b69f8e74af7967f1f492a97a4e862ba7053887aa52f5724b83588ce73ffd64989f67b430620577fcf8b78b2a480106fda48f6f450225d3eb8eac971858c9d023e6bde4a4c9a"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xc3, 0x1, "936dba2335b01d6fe43da78640a393e8d0da41d44ccff740967542263a611e3ebd16fe441bb02065e5092dcbcf242f8e234d586ac759d3cf1e4cb734afb4a1cd5658e947f8c2e7622ff478ef5114371f0d1f907f2581a2ef2338bad6a491d5fc989cf78ad08f8c75eef0a14054320ea1315b2558dd66a0c4f813e991940a07188c5e4ae157b06eb929d8b089119c862ec4b1fbe5a27d47b39d4954fcac3beb9b028944a9ed39ccff2ebd0e4e4fcefa9f2f76e3550800c9c0fd3f7ebb2e55b9"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x3c, 0x1, "a3cbf0d442972e9178bee43210d987667bbcb18a36dcaa00a4f9f513b8d20d278d4e09d22d50e5047b3076577cea25d13a7657cad00ccbc9"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x544, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x57}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x404, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x3f4, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_BITWISE_XOR={0xd8, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd4, 0x1, "3e02596b40a5fe6d3fac489382167d607243cf85f3434004e64631bc8298d744d9081365ac41f65b7533e1e37fad2fb6dcef5fe836b79b4cfa2f0fb54a2fe66e34e865bd42df92453266994b83d6ee78310a764e581a900495de1fd5e71d8c5d48424a0a88e3663c888b3a0dde026f355874fa59e2bbb228ab9960077900ef16a3e31d62f62c762d771f75980169ac6f2f2f13d45fba365b785ab41c8721f5c40052d6be1b6a02681dd21b2fba768db568009dcb2f579c5d2ab1f1b45f7af9445a747c20ba6228fadae0539500568282"}]}, @NFTA_BITWISE_XOR={0x2cc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x16, 0x1, "50ff3dffd4d1917ab2df17cf10d77afc4629"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc5, 0x1, "8bd1cbfac7db366e4ac74819038cccbf36017102d85af055229ec1e4b2e2ccdef90578f23231cf34858699a7edb53114d10f701613512d7a9629e927ed737cd63ea0f2b9c4b2bc16c59927c03ca2b46a1afaf2420c8005062458d44ca27c8933bf911de96124ea847cc6ee703831df8fc5382fdc945cfab516a6af6efd7778a183571ef15b6c073b0ce9c2ef7151a51e2d27e5cfdb08de03d8e7637bea3c24f9e9536a90d88c6f4f8828ea26c2513c87fe5e9ff48c02fec7cc5759dc210c09c8dd"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xf7, 0x1, "07dcbdddacd8900a9d762e327e35b19c5aab05a404062298f46a2059551aafa4ba5c6000f5699e9945be1dce7e12fa67af73b9d61a922d9198ff9780d995e9871e8bdd932d8d2edd2ed13e455476fe2fbc0a72ac24ddb9ce53adb368f8b30ae15270b998319f0fe0cd1a1cbd6a15a357a094645a535513c1c8e66bbfc5b856df52059ffaba0d314aa67da76e6b59905a7ae228f9a8ccff36340e1e7b89ebbe1c254e5fc9f46a1deb1511714627aa109a3b8688f725608f94357c968c89d4c1e3ce62a6d5c1a88fc646f6a1f2e087fd932880c88b8e308a9c39eedc7bda53c8dd06b660bd4fbae76ffdc1ec8f6fc16bb61133fe"}, @NFTA_DATA_VALUE={0x85, 0x1, "73e0fe16d0091bb3dbc9786e275cfa042fcf92e1c375a491d20b1579090241fb51d5a92cc38f26197a6667ccffe003ec896b77dcd748d841ca7439f687499fac96be5bce53e38be16152d0a62a69a78edf28c69be27617fecfb5d4683bc667efa6c3044be6347b70395309ccb388bda9a3fb63043cc76494cc41de475cd91db245"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_BITWISE_XOR={0x3c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x38, 0x1, "3a2a8f92cb7cbb82eafeef9ef818c0014768e4c3951881919928f0a484bcfe26783b7b1f0b5299d9249ff7b87d5d6a0a08601361"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x4}}}, {0x68, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x51}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x2a}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xef}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xd2}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xea}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xf7}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x58, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}]}, {0x2d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x2bc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8c, 0x1, "e0fa085f0687c9d105d5aa395a4b9c3d29e060a3cc434cab81b9b5524937344eb0b230a809bebea07a693b1c931bb470adec2e3861bf9ee91c2fc25f4066667481e166c22215a795759e9c36a51cdaad64351590cb89f090011b44c42b38a95ab90cefc5bf4cbfceb420c87e99c22a6fe5edbb390da999687bfb2c389b22c3e07af8de0e707a3c5e"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x10}, @NFTA_DATA_VALUE={0xa, 0x1, "9341d928c68c"}, @NFTA_DATA_VERDICT, @NFTA_DATA_VALUE={0xf7, 0x1, "c3f80fbb04c401d5a3d08f9448ccb1c58532ff86efcfeb891337e6e56cb1840b39ac7313ebe56dc8fe14c5a34d99dfb8f1c5962ab2abb4465d81b4c7e0f9e04b534ff53dfe6d0358a4ac658112337f2c6d6490793eb8e178bdb58d8d42de7c133808edf403cda5c9dfcc09427a31a41406cf0e4e3f6ddc40634957e5e0658940e4978c39d7ff76d3d1ad75dd0529a28b17b537b94fab4a3678a1f1b013e38c71755a0767c4693c74952df81111458587dbfe74e9247765adc17691f200487a6f236a469bce60bc0f01dd1cfa3d9e28e483273149ef5f5315c2b07843ef729074233335e49ca700e62bcba0cef363def4f60e3d"}]}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8}]}}}]}, {0x128, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x124, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcb, 0x1, "ee70bb918cc8a2f2651940805f38221193cc040b16f556e7ede2f2ba54a9a60402beb33a5944bc687261ab082a2d2d6544a5ae002f725366c3baec0fce1657e548793ebf811461e84759b43bffff2b2295e3e0f9eef955597708504c0236d86b1ca59b0537b97dbce657db0ad4d772dc776a1d0ea147d7196c1c81bebf52c5f94cac01946c0863a8de3cb7fac3ef61d99beeb539d065717de95e8c2b875718d09ca6d1de62c7d70673125c2bba539eeffc56f5b70a7a54762fc17ea861c351ac64333df9ed26c0"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc1c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r1=>0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0)
accept$inet6(r2, &(0x7f0000000740)={0xa, 0x0, 0x0, @empty}, &(0x7f0000001400)=0x1c)
ptrace$setregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x109})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040040)

584.07µs ago: executing program 3 (id=754):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002240)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x1, {0x7}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = syz_open_dev$dvb_frontend(&(0x7f0000001f80), 0x0, 0x202)
ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000001fc0)={0x3, &(0x7f0000002000)=[{0xb, '\x00', @data=0x6, 0x5}]})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000140)={0x30, r2, 0x4, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xa429, 0x7a}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x30}}, 0x0)
mkdir(&(0x7f0000002080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000020c0)='./sys\x00', &(0x7f0000002100)='sysfs\x00', 0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000002140)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
write(r5, &(0x7f0000002180)='1', 0x1)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x4, 0x2, 0x1f, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f0000001b40), &(0x7f0000002280)=@mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x40}, @device_a, @broadcast, @initial, {0x0, 0x5}}, 0x9, @default, 0x4, @val={0x0, 0x5, @random="0bba025264"}, @void, @void, @val={0x4, 0x6, {0x1, 0x8, 0xfff8, 0x68fe}}, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x10, 0x20}}, [{0xdd, 0x96, "087256d1b361840c0af04a12e2221596bab495f0bf7df6c43198d5a128ea129b8a0d0581281598c69f15a2229d31165d7ebcbfb9f982f6643d00edcc0c8c9fcbb796b4d1409c50f38422da8de00d99527bbab7ab6a0a1b232d2040ed8cb011b034ebd413d3b4af6f7b83fa4014bdcdd3a9f66c2ed1dd7304862053de3e7a32f1ab0754bbb8454af5655784751be5747daef10bb8f727"}, {0xdd, 0xab, "42652ea6099462feb0786b9effae1125668c95524859cee233ebad5edf3322a71d523e1123ca1adbe104c63e8661f8b074ae441adebdd12c28967d997f0bafb70a772ec6e72eb4a2b419df0544f2d653a1eb5aeffe90fc543f7c4e742272e2c3d09ce702d40b110c0b961ee6d10fddf93d7f3832ce185eeb583603b3625e1cebc5d8323b026c823604cb0fbfa406a0953e6b6ca83f28dd49fc"}, {0xdd, 0xf5, "bdde7f3570331c202ab3df5caff7d9b208fcadd9b8fe4903a9312e2adef06a5be627e8fa3d24cd84efd5dd7a3cc951c0e21c1b3d0d751a7fc943ae52d5c09b7d5eb0bf9cf6592fc785a509ca3adbe48cd54dbc79d527b607adac093d826c01975e25815ad9411a59bf8160a36f3b9bcc8540316497ad61ffce6e616bb8ac95c75f72d2b1c7e204901a4020ccadeaa8c2537bae4e29eb1269a6885b8c0845e12180e28baa47cb312cba166f7a73360f9aa53ecc729a4852293509cac8a61426f95942071339ada55c4162006c1a0239072757975f0f890107e5acbe88bc5ac641e0262bd3905fe6440621eff7b20af7785060146337"}, {0xdd, 0x73, "178b6864af963aa370d97c48601319e16b9759607bd44be07bc32666ab70180b3c4604da4b4a5fa2eb3c2accb0e05fbe8c6739a181b0a3cce0f331d8444f07ef99858f910f2d88ceb7a64db312ae9e049264cebb5857e8b0152550d53e19f761dee324c589f3d567833a8bbc66a13342a77963"}, {0xdd, 0x37, "ac9ee851aaa334662227f212fc1b5b1aa5a5e7a96d51a4843a11117ea34d3fcc7f4a76cfed55ac08f6c25dedea1738dcbc85355801cea2"}, {0xdd, 0xe0, "9c983362e1c3fd276b7548e22fbce717a038c461852c2e37bed3bc0fd7c9ee5bbe97087a4011b225a76b676da0ce00edb610453357c761193b49feb4b24d9a25d10088a08d82984ca2d9d6a081d57ac502d74d178e2fa37684ff171fdb6592b1f8cb2e1c7e8f9c7f95472d1e33bb02187167ec98ddca496e535e86f6029372ed174e530f70693031b2c836674be9132dd7eb5391d78563052afcdff6b1768b0a5c1cbc935d1fec2dd4573c8c1e7f57de2d6faecafa45f1a68e945ac1085a3a2114be40d3bc63a6dd63311343bbb0a5dd73d6a4428f5baf93c5d14be7c801ea11"}]}, 0x3fa)
r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
syz_80211_inject_frame(&(0x7f0000000740), &(0x7f0000000780)=@ctrl_frame=@ack={{}, {0x7}}, 0xa)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000001a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001a80)={@fallback=r7, r7, 0x2f}, 0x20)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000001ac0), 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001b00)={@cgroup=r7, r8, 0x2f, 0x10, 0x4, @void, @value=r7}, 0x20)
ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f00000006c0)={0xf030000, 0x9, 0x8000e, 0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x990a72, 0x2, '\x00', @ptr=0xbd02}})
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xd}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x5}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2f}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
nanosleep(&(0x7f0000000040)={0x77359400}, &(0x7f0000000640))

249.334µs ago: executing program 0 (id=755):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x9, 0x400004, 0x1000000, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x200, 0x3, 0x200}, 0x3}}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8080)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x68c102, 0x0)
ioctl$CDROMVOLCTRL(r1, 0x31e, &(0x7f0000000040)={0x23, 0x0, 0xc, 0x84})

0s ago: executing program 0 (id=756):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1b6)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
capset(&(0x7f0000000480)={0x20071026}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x1, 0x1, 0x0, 0x110}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94)
pwrite64(r1, &(0x7f0000000100)="0000010042", 0x5, 0x1be)
pwrite64(r1, &(0x7f0000000140)="55aa", 0x2, 0x1fe)
pwrite64(r1, &(0x7f0000000180)='PRIVHEAD', 0x8, 0xc00)
pwrite64(r1, &(0x7f00000001c0)="0002000b", 0x4, 0xc0c)
pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23)
pwrite64(r1, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b)
pwrite64(r1, &(0x7f0000000300)='\x00\x00', 0x2, 0x1e812b)
r2 = syz_open_dev$loop(&(0x7f0000000340), 0x0, 0x2)
ioctl$LOOP_SET_FD(r2, 0x4c00, r1)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})
r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x800)
setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000080)=0x98d7a037, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400f9e3bde20064ff00000000", @ANYRES32=0x0, @ANYBLOB="00000000c81400001c0012800b00010062726964676500000c000280080031"], 0x3c}, 0x1, 0xba01}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1b6) (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async)
capset(&(0x7f0000000480)={0x20071026}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x1, 0x1, 0x0, 0x110}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) (async)
pwrite64(r1, &(0x7f0000000100)="0000010042", 0x5, 0x1be) (async)
pwrite64(r1, &(0x7f0000000140)="55aa", 0x2, 0x1fe) (async)
pwrite64(r1, &(0x7f0000000180)='PRIVHEAD', 0x8, 0xc00) (async)
pwrite64(r1, &(0x7f00000001c0)="0002000b", 0x4, 0xc0c) (async)
pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) (async)
pwrite64(r1, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) (async)
pwrite64(r1, &(0x7f0000000300)='\x00\x00', 0x2, 0x1e812b) (async)
syz_open_dev$loop(&(0x7f0000000340), 0x0, 0x2) (async)
ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) (async)
accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x800) (async)
setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000080)=0x98d7a037, 0x4) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400f9e3bde20064ff00000000", @ANYRES32=0x0, @ANYBLOB="00000000c81400001c0012800b00010062726964676500000c000280080031"], 0x3c}, 0x1, 0xba01}, 0x0) (async)

kernel console output (not intermixed with test programs):

.467:511): avc:  denied  { open } for  pid=7104 comm="syz.2.321" path="/87/file0/file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[   89.547627][   T43] audit: type=1400 audit(1792933355.467:512): avc:  denied  { ioctl } for  pid=7104 comm="syz.2.321" path="/87/file0/file0" dev="fuse" ino=67 ioctlcmd=0x402c542d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[   89.680117][ T7114] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   89.708769][   T43] audit: type=1400 audit(1792933355.627:513): avc:  denied  { create } for  pid=7117 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   89.710615][   T43] audit: type=1400 audit(1792933355.627:514): avc:  denied  { setopt } for  pid=7117 comm="syz.2.325" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   89.717477][ T7118] xt_hashlimit: size too large, truncated to 1048576
[   89.722653][   T43] audit: type=1400 audit(1792933355.637:515): avc:  denied  { create } for  pid=7115 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   89.725063][   T43] audit: type=1400 audit(1792933355.637:516): avc:  denied  { setopt } for  pid=7115 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   89.725093][   T43] audit: type=1400 audit(1792933355.637:517): avc:  denied  { write } for  pid=7115 comm="syz.0.324" path="socket:[15993]" dev="sockfs" ino=15993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   89.768593][ T7120] : renamed from bridge_slave_0 (while UP)
[   89.788194][ T7122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.326'.
[   89.788458][ T7122] trusted_key: encrypted_key: insufficient parameters specified
[   89.792038][ T7122] sg_read: process 203 (syz.0.326) changed security contexts after opening file descriptor, this is not allowed.
[   89.841547][ T7091] vhci_hcd: connection reset by peer
[   89.843945][ T5850] vhci_hcd vhci_hcd.3: stop threads
[   89.843960][ T5850] vhci_hcd vhci_hcd.3: release socket
[   89.844713][ T5850] vhci_hcd vhci_hcd.3: disconnect device
[   89.911740][ T7129] trusted_key: encrypted_key: master key parameter is missing
[   89.949916][ T7141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7141 comm=syz.1.332
[   90.113058][    T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   90.237072][    T9] usb 7-1: device descriptor read/64, error -71
[   90.366884][  T856] wacom 0003:056A:003F.0002: hidraw1: USB HID vffffff.ff Gamepad [syz0] on syz0
[   90.422986][ T7163] fido_id[7163]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   90.427989][ T7168] FAULT_INJECTION: forcing a failure.
[   90.427989][ T7168] name fail_futex, interval 1, probability 0, space 0, times 1
[   90.428018][ T7168] CPU: 0 UID: 0 PID: 7168 Comm: syz.0.342 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   90.428042][ T7168] Tainted: [L]=SOFTLOCKUP
[   90.428048][ T7168] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   90.428057][ T7168] Call Trace:
[   90.428063][ T7168]  <TASK>
[   90.428070][ T7168]  dump_stack_lvl+0x100/0x190
[   90.428121][ T7168]  should_fail_ex.cold+0x5/0xa
[   90.428146][ T7168]  get_futex_key+0x1c9/0x13e0
[   90.428175][ T7168]  ? __pfx_get_futex_key+0x10/0x10
[   90.428208][ T7168]  futex_wait_setup+0x91/0x540
[   90.428241][ T7168]  __futex_wait+0x19f/0x360
[   90.428265][ T7168]  ? __pfx___futex_wait+0x10/0x10
[   90.428285][ T7168]  ? __pfx_try_to_wake_up+0x10/0x10
[   90.428308][ T7168]  ? futex_hash+0x311/0x400
[   90.428333][ T7168]  ? __pfx_futex_wake_mark+0x10/0x10
[   90.428357][ T7168]  ? find_held_lock+0x2b/0x80
[   90.428373][ T7168]  ? futex_wake+0x4ea/0x5e0
[   90.428398][ T7168]  futex_wait+0xe6/0x370
[   90.428419][ T7168]  ? __pfx_futex_wait+0x10/0x10
[   90.428443][ T7168]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   90.428468][ T7168]  ? do_vfs_ioctl+0x226/0x13e0
[   90.428491][ T7168]  do_futex+0x265/0x440
[   90.428509][ T7168]  ? __pfx_do_futex+0x10/0x10
[   90.428524][ T7168]  ? __fget_files+0x34/0x3d0
[   90.428552][ T7168]  __x64_sys_futex+0x34f/0x4d0
[   90.428573][ T7168]  ? __pfx___x64_sys_futex+0x10/0x10
[   90.428599][ T7168]  do_syscall_64+0x123/0x790
[   90.428618][ T7168]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.428635][ T7168] RIP: 0033:0x7effb5f9f559
[   90.428650][ T7168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.428666][ T7168] RSP: 002b:00007effb6d950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   90.428683][ T7168] RAX: ffffffffffffffda RBX: 00007effb6225fa8 RCX: 00007effb5f9f559
[   90.428696][ T7168] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007effb6225fa8
[   90.428706][ T7168] RBP: 00007effb6225fa0 R08: 0000000000000000 R09: 0000000000000000
[   90.428717][ T7168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   90.428726][ T7168] R13: 00007effb6226038 R14: 00007ffc3a515300 R15: 00007ffc3a5153e8
[   90.428748][ T7168]  </TASK>
[   90.434681][ T7169] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[   90.434962][ T7169] qnx6: wrong signature (magic) in superblock #1.
[   90.434972][ T7169] qnx6: unable to read the first superblock
[   90.475691][    T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   90.609396][    T9] usb 7-1: device descriptor read/64, error -71
[   90.716413][    T9] usb usb7-port1: attempt power cycle
[   90.857160][ T7175] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[   90.857187][ T7175] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   90.857283][ T7175] vhci_hcd vhci_hcd.0: Device attached
[   90.861715][ T7175] vhci_hcd vhci_hcd.0: port 0 already used
[   90.919053][ T7176] vhci_hcd: connection closed
[   90.920301][ T5866] vhci_hcd vhci_hcd.1: stop threads
[   90.920326][ T5866] vhci_hcd vhci_hcd.1: release socket
[   90.920344][ T5866] vhci_hcd vhci_hcd.1: disconnect device
[   91.057872][    T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   91.078203][    T9] usb 7-1: device descriptor read/8, error -71
[   91.186347][ T5885] net_ratelimit: 18 callbacks suppressed
[   91.186361][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.269676][ T7201] ip6gretap1: entered promiscuous mode
[   91.269691][ T7201] ip6gretap1: entered allmulticast mode
[   91.306127][   T24] hid-generic 0007:0009:0019.0003: unknown main item tag 0x0
[   91.306155][   T24] hid-generic 0007:0009:0019.0003: unknown main item tag 0x0
[   91.306167][   T24] hid-generic 0007:0009:0019.0003: unknown main item tag 0x0
[   91.306179][   T24] hid-generic 0007:0009:0019.0003: unknown main item tag 0x0
[   91.306190][   T24] hid-generic 0007:0009:0019.0003: unknown main item tag 0x0
[   91.306202][   T24] hid-generic 0007:0009:0019.0003: unknown main item tag 0x0
[   91.306213][   T24] hid-generic 0007:0009:0019.0003: unknown main item tag 0x0
[   91.306225][   T24] hid-generic 0007:0009:0019.0003: unknown main item tag 0x0
[   91.306236][   T24] hid-generic 0007:0009:0019.0003: unknown main item tag 0x0
[   91.306248][   T24] hid-generic 0007:0009:0019.0003: unknown main item tag 0x0
[   91.311285][   T24] hid-generic 0007:0009:0019.0003: hidraw1: <UNKNOWN> HID v0.89 Device [syz1] on syz1
[   91.313390][    T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   91.334377][    T9] usb 7-1: device descriptor read/8, error -71
[   91.359353][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.441236][    T9] usb usb7-port1: unable to enumerate USB device
[   91.498142][ T7218] Cannot find add_set index 0 as target
[   91.620273][ T7223] device-mapper: ioctl: device name cannot be "control", ".", or ".."
[   91.872146][ T7250] dns_resolver: Unsupported content type (234)
[   91.922124][ T7258] bridge0: entered promiscuous mode
[   91.922137][ T7258] bridge0: entered allmulticast mode
[   92.156139][ T7264] dummy0: left promiscuous mode
[   92.363272][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.542920][    T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[   92.715350][    T9] usb 5-1: not running at top speed; connect to a high speed hub
[   92.715381][    T9] usb 5-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00
[   92.716456][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64
[   92.716483][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64
[   92.716503][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64
[   92.716522][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64
[   92.716542][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64
[   92.716564][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[   92.718469][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.718489][    T9] usb 5-1: Product: syz
[   92.718501][    T9] usb 5-1: Manufacturer: syz
[   92.718514][    T9] usb 5-1: SerialNumber: syz
[   92.722490][ T7282] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   92.722631][ T7282] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   92.722765][ T7282] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   92.722848][ T7282] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   92.722999][ T7282] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   92.724978][    T9] usb 5-1: USB2VGA dongle found at address 9
[   92.729777][    T9] usb 5-1: Allocated 8 output buffers
[   92.729795][    T9] usb 5-1: Not attached to USB 2.0 hub, deferring init
[   92.854894][ T7295] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8
[   92.927042][ T7295] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   92.927106][ T7295] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   92.933198][ T7282] usb 5-1: Device not attached to USB 2.0 hub
[   92.936438][ T7282] validate_nla: 24 callbacks suppressed
[   92.936454][ T7282] netlink: 'syz.0.372': attribute type 1 has an invalid length.
[   92.942184][ T7302] xt_ecn: cannot match TCP bits for non-tcp packets
[   92.952106][ T7282] bond1: entered promiscuous mode
[   92.952280][ T7282] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.953730][ T7295] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   92.966935][ T7295] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   92.966982][ T7295] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   92.967570][ T7282] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.967723][ T7282] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[   92.967732][ T7282] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[   92.973126][ T7282] bond1: (slave ip6gre1): making interface the new active one
[   92.973139][ T7282] ip6gre1: entered promiscuous mode
[   92.973298][ T7295] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   92.974634][ T7282] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[   92.977285][ T7295] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   92.977487][    T9] usb 5-1: USB disconnect, device number 9
[   92.981384][ T7295] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   92.995690][ T7295] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   93.000802][ T7295] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   93.000831][ T7295] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   93.027254][ T7295] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   93.061416][ T7315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.379'.
[   93.081374][ T7318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.086980][ T7318] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.139988][ T7323] nfs: Unknown parameter 'mountporx'
[   93.247440][ T7331] FAULT_INJECTION: forcing a failure.
[   93.247440][ T7331] name failslab, interval 1, probability 0, space 0, times 0
[   93.247486][ T7331] CPU: 2 UID: 0 PID: 7331 Comm: syz.1.385 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   93.247512][ T7331] Tainted: [L]=SOFTLOCKUP
[   93.247519][ T7331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   93.247531][ T7331] Call Trace:
[   93.247549][ T7331]  <TASK>
[   93.247557][ T7331]  dump_stack_lvl+0x100/0x190
[   93.247667][ T7331]  should_fail_ex.cold+0x5/0xa
[   93.247694][ T7331]  should_failslab+0xc2/0x120
[   93.247725][ T7331]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[   93.247748][ T7331]  ? selinux_socket_create+0xe7/0x590
[   93.247795][ T7331]  ? sock_alloc_inode+0x26/0x2c0
[   93.247872][ T7331]  ? __pfx_sock_alloc_inode+0x10/0x10
[   93.247898][ T7331]  sock_alloc_inode+0x26/0x2c0
[   93.247922][ T7331]  ? __pfx_sock_alloc_inode+0x10/0x10
[   93.247955][ T7331]  alloc_inode+0x68/0x250
[   93.247979][ T7331]  sock_alloc+0x42/0x240
[   93.248003][ T7331]  __sock_create+0xc2/0x860
[   93.248033][ T7331]  __sys_socket+0x14d/0x260
[   93.248057][ T7331]  ? fput+0x7c/0x100
[   93.248083][ T7331]  ? __pfx___sys_socket+0x10/0x10
[   93.248107][ T7331]  ? ksys_write+0x1ac/0x250
[   93.248127][ T7331]  ? __pfx_ksys_write+0x10/0x10
[   93.248154][ T7331]  __x64_sys_socket+0x72/0xb0
[   93.248178][ T7331]  ? lockdep_hardirqs_on+0x7d/0x110
[   93.248284][ T7331]  do_syscall_64+0x123/0x790
[   93.248305][ T7331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.248325][ T7331] RIP: 0033:0x7f0fde39f559
[   93.248341][ T7331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.248359][ T7331] RSP: 002b:00007f0fdf30d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   93.248388][ T7331] RAX: ffffffffffffffda RBX: 00007f0fde625fa0 RCX: 00007f0fde39f559
[   93.248402][ T7331] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010
[   93.248414][ T7331] RBP: 00007f0fde436b20 R08: 0000000000000000 R09: 0000000000000000
[   93.248426][ T7331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   93.248438][ T7331] R13: 00007f0fde626038 R14: 00007f0fde625fa0 R15: 00007ffe60e3d038
[   93.248465][ T7331]  </TASK>
[   93.248475][ T7331] socket: no more sockets
[   93.322325][   T59] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[   93.340861][ T7339] lo: left promiscuous mode
[   93.341140][ T7339] tunl0: left promiscuous mode
[   93.341281][ T7339] gre0: left promiscuous mode
[   93.341391][ T7339] gretap0: left promiscuous mode
[   93.341483][ T7339] erspan0: left promiscuous mode
[   93.341583][ T7339] ip_vti0: left promiscuous mode
[   93.341703][ T7339] ip6_vti0: left promiscuous mode
[   93.341796][ T7339] sit0: left promiscuous mode
[   93.341889][ T7339] ip6tnl0: left promiscuous mode
[   93.342037][ T7339] ip6gre0: left promiscuous mode
[   93.342140][ T7339] syz_tun: left promiscuous mode
[   93.342262][ T7339] ip6gretap0: left promiscuous mode
[   93.342356][ T7339] vcan0: left promiscuous mode
[   93.342468][ T7339] bond0: left promiscuous mode
[   93.342620][ T7339] team0: left promiscuous mode
[   93.347336][ T7339] nlmon0: left promiscuous mode
[   93.347577][ T7339] batadv0: left promiscuous mode
[   93.347724][ T7339] vxcan0: left promiscuous mode
[   93.347898][ T7339] vxcan1: left promiscuous mode
[   93.348037][ T7339] veth0: left promiscuous mode
[   93.348183][ T7339] veth1: left promiscuous mode
[   93.348316][ T7339] wg0: left promiscuous mode
[   93.348446][ T7339] wg1: left promiscuous mode
[   93.348560][ T7339] wg2: left promiscuous mode
[   93.348673][ T7339] veth0_to_bridge: left promiscuous mode
[   93.348788][ T7339] bridge_slave_0: left promiscuous mode
[   93.348902][ T7339] veth1_to_bridge: left promiscuous mode
[   93.349039][ T7339] bridge_slave_1: left promiscuous mode
[   93.349155][ T7339] veth0_to_bond: left promiscuous mode
[   93.349271][ T7339] bond_slave_0: left promiscuous mode
[   93.349389][ T7339] veth1_to_bond: left promiscuous mode
[   93.349519][ T7339] bond_slave_1: left promiscuous mode
[   93.349632][ T7339] veth1_to_team: left promiscuous mode
[   93.349836][ T7339] team_slave_1: left promiscuous mode
[   93.349952][ T7339] veth0_to_batadv: left promiscuous mode
[   93.350154][ T7339] batadv_slave_0: left promiscuous mode
[   93.350268][ T7339] veth1_to_batadv: left promiscuous mode
[   93.350393][ T7339] batadv_slave_1: left promiscuous mode
[   93.350507][ T7339] xfrm0: left promiscuous mode
[   93.350641][ T7339] veth0_to_hsr: left promiscuous mode
[   93.350864][ T7339] veth1_to_hsr: left promiscuous mode
[   93.351199][ T7339] hsr0: left promiscuous mode
[   93.351406][ T7339] veth1_virt_wifi: left promiscuous mode
[   93.351523][ T7339] veth0_virt_wifi: left promiscuous mode
[   93.351637][ T7339] virt_wifi0: left promiscuous mode
[   93.351987][ T7339] vlan0: left promiscuous mode
[   93.352241][ T7339] vlan1: left promiscuous mode
[   93.352463][ T7339] macvlan0: left promiscuous mode
[   93.352578][ T7339] macvlan1: left promiscuous mode
[   93.352704][ T7339] ipvlan0: left promiscuous mode
[   93.352819][ T7339] ipvlan1: left promiscuous mode
[   93.353599][ T7339] macvtap0: left promiscuous mode
[   93.353773][ T7339] macsec0: left promiscuous mode
[   93.353869][ T7339] geneve0: left promiscuous mode
[   93.354004][ T7339] geneve1: left promiscuous mode
[   93.354162][ T7339] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[   93.354266][ T7339] netdevsim netdevsim1 netdevsim1: left promiscuous mode
[   93.354360][ T7339] netdevsim netdevsim1 netdevsim2: left promiscuous mode
[   93.354465][ T7339] netdevsim netdevsim1 netdevsim3: left promiscuous mode
[   93.354562][ T7339] mac80211_hwsim hwsim8 wlan0: left promiscuous mode
[   93.354703][ T7339] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[   93.358776][ T7339] bridge0: left promiscuous mode
[   93.358792][ T7339] bridge0: left allmulticast mode
[   93.425188][ T1176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.426449][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.428595][  T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.486622][   T59] usb 7-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00
[   93.488878][   T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.488891][   T59] usb 7-1: Product: syz
[   93.488898][   T59] usb 7-1: Manufacturer: syz
[   93.488905][   T59] usb 7-1: SerialNumber: syz
[   93.698872][   T59] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[   93.698902][   T59] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[   93.698912][   T59] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[   93.702853][   T59] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71
[   93.708208][   T59] usb 7-1: USB disconnect, device number 9
[   93.985920][ T5793] Bluetooth: hci0: unexpected event for opcode 0x0000
[   94.196806][   T43] kauditd_printk_skb: 52 callbacks suppressed
[   94.196819][   T43] audit: type=1400 audit(1792933360.133:570): avc:  denied  { connect } for  pid=7349 comm="syz.1.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   94.247669][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   94.252220][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   94.252260][ T7352] 9pnet_virtio: no channels available for device syz
[   94.402942][ T5570] vhci_hcd vhci_hcd.3: vhci_device speed not set
[   94.430687][ T7360] netlink: 'syz.0.394': attribute type 1 has an invalid length.
[   94.441294][ T7360] bond2: entered promiscuous mode
[   94.441513][ T7360] 8021q: adding VLAN 0 to HW filter on device bond2
[   94.447713][ T7360] vlan3: entered allmulticast mode
[   94.447732][ T7360] bond2: entered allmulticast mode
[   94.456682][ T7360] bond2: (slave bridge1): making interface the new active one
[   94.456696][ T7360] bridge1: entered promiscuous mode
[   94.456780][ T7360] bridge1: entered allmulticast mode
[   94.457625][ T7360] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   94.496248][ T7366] Illegal XDP return value 7366 on prog  (id 45) dev syz_tun, expect packet loss!
[   94.531105][   T43] audit: type=1400 audit(1792933360.451:571): avc:  denied  { listen } for  pid=7365 comm="syz.0.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   94.582819][ T7374] batman_adv: batadv0: Adding interface: syzkaller0
[   94.582835][ T7374] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.582861][ T7374] batman_adv: batadv0: Interface activated: syzkaller0
[   94.645659][ T7373] batman_adv: batadv0: Interface deactivated: syzkaller0
[   94.677268][ T7373] batman_adv: batadv0: Removing interface: syzkaller0
[   94.705359][ T7389] netlink: 112 bytes leftover after parsing attributes in process `syz.3.401'.
[   94.819626][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'.
[   94.897737][ T7405] netlink: 148 bytes leftover after parsing attributes in process `syz.2.403'.
[   94.965944][ T7387] ip6gretap1: left promiscuous mode
[   94.965958][ T7387] ip6gretap1: left allmulticast mode
[   94.968553][ T7387] bond1: left promiscuous mode
[   94.968565][ T7387] ip6gre1: left promiscuous mode
[   94.972180][ T7387] bond2: left promiscuous mode
[   94.972197][ T7387] bridge1: left promiscuous mode
[   94.975535][ T7387] vlan3: left allmulticast mode
[   94.975558][ T7387] bond2: left allmulticast mode
[   94.975569][ T7387] bridge1: left allmulticast mode
[   95.005582][ T5866] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.005624][ T5866] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.005653][ T5866] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.005683][ T5866] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.063093][   T43] audit: type=1400 audit(1792933360.961:572): avc:  denied  { listen } for  pid=7411 comm="syz.3.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   95.070051][ T5793] Bluetooth: hci2: command 0x0c1a tx timeout
[   95.070128][ T5793] Bluetooth: hci1: command 0x0c1a tx timeout
[   95.078584][   T43] audit: type=1400 audit(1792933360.980:573): avc:  denied  { unmount } for  pid=5786 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[   95.150771][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout
[   95.316325][ T7477] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   95.370282][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'.
[   95.370297][ T7481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.412'.
[   95.393708][   T43] audit: type=1400 audit(1792933361.266:574): avc:  denied  { cmd } for  pid=7480 comm="syz.2.412" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1
[   95.426421][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'.
[   95.484533][   T43] audit: type=1400 audit(1792933361.361:575): avc:  denied  { append } for  pid=7492 comm="syz.3.418" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   95.544465][ T7506] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   95.578312][ T7518] bond0: entered promiscuous mode
[   95.666890][   T43] audit: type=1400 audit(1792933361.542:576): avc:  denied  { getopt } for  pid=7525 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   95.757323][   T43] audit: type=1400 audit(1792933361.619:577): avc:  denied  { connect } for  pid=7535 comm="syz.0.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   96.069554][ T7547] fuse: Unknown parameter 'groupŒ�SL00000000000000000000'
[   96.100223][   T43] audit: type=1400 audit(1792933361.952:578): avc:  denied  { listen } for  pid=7548 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[   96.234272][ T7554] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   96.258554][   T43] audit: type=1400 audit(1792933362.103:579): avc:  denied  { write } for  pid=7548 comm="syz.1.433" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   96.433809][ T7552] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input9
[   96.468930][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.440'.
[   96.468948][ T7575] netlink: 24 bytes leftover after parsing attributes in process `syz.3.440'.
[   96.526856][ T7583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=7583 comm=syz.2.441
[   96.551704][ T7575] FAULT_INJECTION: forcing a failure.
[   96.551704][ T7575] name fail_futex, interval 1, probability 0, space 0, times 0
[   96.551742][ T7575] CPU: 2 UID: 0 PID: 7575 Comm: syz.3.440 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   96.551758][ T7575] Tainted: [L]=SOFTLOCKUP
[   96.551762][ T7575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   96.551768][ T7575] Call Trace:
[   96.551782][ T7575]  <TASK>
[   96.551787][ T7575]  dump_stack_lvl+0x100/0x190
[   96.551837][ T7575]  should_fail_ex.cold+0x5/0xa
[   96.551853][ T7575]  get_futex_key+0x1c9/0x13e0
[   96.551877][ T7575]  ? __pfx_get_futex_key+0x10/0x10
[   96.551893][ T7575]  ? __mutex_unlock_slowpath+0x35d/0x930
[   96.551951][ T7575]  futex_wake+0xf4/0x5e0
[   96.551966][ T7575]  ? __pfx_futex_wake+0x10/0x10
[   96.551980][ T7575]  ? lock_acquire+0x1d1/0x380
[   96.551994][ T7575]  ? detach_task_ctx_data+0x83/0x490
[   96.552011][ T7575]  do_futex+0x2b2/0x440
[   96.552023][ T7575]  ? __pfx_do_futex+0x10/0x10
[   96.552032][ T7575]  ? __might_fault+0xc5/0x140
[   96.552053][ T7575]  mm_exit_exec_release+0x256/0x2f0
[   96.552066][ T7575]  do_exit+0x6d8/0x2a00
[   96.552081][ T7575]  ? __pfx_do_exit+0x10/0x10
[   96.552094][ T7575]  ? do_raw_spin_lock+0x128/0x260
[   96.552109][ T7575]  ? find_held_lock+0x2b/0x80
[   96.552119][ T7575]  ? get_signal+0x7db/0x21d0
[   96.552132][ T7575]  do_group_exit+0xd5/0x2a0
[   96.552146][ T7575]  get_signal+0x1ebd/0x21d0
[   96.552162][ T7575]  ? __pfx_get_signal+0x10/0x10
[   96.552179][ T7575]  ? do_futex+0x190/0x440
[   96.552191][ T7575]  arch_do_signal_or_restart+0x91/0x7e0
[   96.552209][ T7575]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   96.552233][ T7575]  exit_to_user_mode_loop+0x139/0x700
[   96.552249][ T7575]  ? rcu_is_watching+0x13/0xc0
[   96.552261][ T7575]  do_syscall_64+0x661/0x790
[   96.552273][ T7575]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.552285][ T7575] RIP: 0033:0x7f439159f559
[   96.552295][ T7575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.552306][ T7575] RSP: 002b:00007f43925250e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   96.552325][ T7575] RAX: fffffffffffffe00 RBX: 00007f4391826098 RCX: 00007f439159f559
[   96.552332][ T7575] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4391826098
[   96.552338][ T7575] RBP: 00007f4391826090 R08: 0000000000000000 R09: 0000000000000000
[   96.552344][ T7575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   96.552350][ T7575] R13: 00007f4391826128 R14: 00007fff0f8d72c0 R15: 00007fff0f8d73a8
[   96.552364][ T7575]  </TASK>
[   96.572437][ T7585] FAULT_INJECTION: forcing a failure.
[   96.572437][ T7585] name failslab, interval 1, probability 0, space 0, times 0
[   96.572469][ T7585] CPU: 0 UID: 0 PID: 7585 Comm: syz.2.442 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   96.572492][ T7585] Tainted: [L]=SOFTLOCKUP
[   96.572498][ T7585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   96.572507][ T7585] Call Trace:
[   96.572513][ T7585]  <TASK>
[   96.572520][ T7585]  dump_stack_lvl+0x100/0x190
[   96.572549][ T7585]  should_fail_ex.cold+0x5/0xa
[   96.572571][ T7585]  should_failslab+0xc2/0x120
[   96.572596][ T7585]  __kmalloc_cache_noprof+0x91/0x6d0
[   96.572613][ T7585]  ? sr_read_tochdr.isra.0+0x1a0/0x280
[   96.572693][ T7585]  ? sr_read_tocentry.isra.0+0xad/0x540
[   96.572719][ T7585]  sr_read_tocentry.isra.0+0xad/0x540
[   96.572742][ T7585]  ? sr_read_tochdr.isra.0+0x1e4/0x280
[   96.572764][ T7585]  ? __pfx_sr_read_tocentry.isra.0+0x10/0x10
[   96.572793][ T7585]  ? __pfx_scsi_execute_cmd+0x10/0x10
[   96.572822][ T7585]  sr_audio_ioctl+0x113/0x2f0
[   96.572845][ T7585]  ? __pfx_sr_audio_ioctl+0x10/0x10
[   96.572870][ T7585]  ? __pfx_scsi_test_unit_ready+0x10/0x10
[   96.572905][ T7585]  cdrom_count_tracks+0x3e1/0x840
[   96.572940][ T7585]  ? __pfx_cdrom_count_tracks+0x10/0x10
[   96.572958][ T7585]  ? __pfx_sr_drive_status+0x10/0x10
[   96.572980][ T7585]  ? sd_probe+0xd41/0x11b0
[   96.573005][ T7585]  cdrom_open+0xa8a/0x2760
[   96.573026][ T7585]  ? __pfx_cdrom_open+0x10/0x10
[   96.573045][ T7585]  ? rcu_is_watching+0x13/0xc0
[   96.573060][ T7585]  ? trace_contention_end+0x126/0x160
[   96.573081][ T7585]  ? __mutex_lock+0x267/0x1c10
[   96.573096][ T7585]  ? sr_block_open+0xbc/0x180
[   96.573122][ T7585]  ? lock_acquire+0x1d1/0x380
[   96.573142][ T7585]  ? __pfx___mutex_lock+0x10/0x10
[   96.573158][ T7585]  ? mark_held_locks+0x40/0x70
[   96.573179][ T7585]  ? lockdep_hardirqs_on+0x7d/0x110
[   96.573211][ T7585]  ? __pfx_disk_check_media_change+0x10/0x10
[   96.573280][ T7585]  ? lockdep_hardirqs_on+0x7d/0x110
[   96.573305][ T7585]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   96.573348][ T7585]  sr_block_open+0xc8/0x180
[   96.573370][ T7585]  ? __pfx_sr_block_open+0x10/0x10
[   96.573394][ T7585]  blkdev_get_whole+0x99/0x290
[   96.573418][ T7585]  bdev_open+0x2c7/0xe40
[   96.573445][ T7585]  blkdev_open+0x34e/0x4f0
[   96.573462][ T7585]  do_dentry_open+0x674/0x1470
[   96.573483][ T7585]  ? __pfx_blkdev_open+0x10/0x10
[   96.573501][ T7585]  vfs_open_consume+0xcc/0x460
[   96.573527][ T7585]  path_openat+0x1547/0x23f0
[   96.573552][ T7585]  ? __pfx_path_openat+0x10/0x10
[   96.573579][ T7585]  do_file_open+0x20e/0x430
[   96.573601][ T7585]  ? __pfx_do_file_open+0x10/0x10
[   96.573638][ T7585]  ? _raw_spin_unlock+0x28/0x50
[   96.573658][ T7585]  ? alloc_fd+0x471/0x7a0
[   96.573687][ T7585]  do_sys_openat2+0x163/0x1d0
[   96.573701][ T7585]  ? __pfx_do_sys_openat2+0x10/0x10
[   96.573733][ T7585]  __x64_sys_openat+0x12d/0x210
[   96.573747][ T7585]  ? __pfx___x64_sys_openat+0x10/0x10
[   96.573770][ T7585]  do_syscall_64+0x123/0x790
[   96.573786][ T7585]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.573802][ T7585] RIP: 0033:0x7fe7cad9f559
[   96.573815][ T7585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.573829][ T7585] RSP: 002b:00007fe7cbbc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   96.573845][ T7585] RAX: ffffffffffffffda RBX: 00007fe7cb025fa0 RCX: 00007fe7cad9f559
[   96.573854][ T7585] RDX: 0000000000000000 RSI: 00002000000028c0 RDI: ffffffffffffff9c
[   96.573863][ T7585] RBP: 00007fe7cae36b20 R08: 0000000000000000 R09: 0000000000000000
[   96.573872][ T7585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   96.573881][ T7585] R13: 00007fe7cb026038 R14: 00007fe7cb025fa0 R15: 00007ffd842802e8
[   96.573904][ T7585]  </TASK>
[   96.582992][   T37] net_ratelimit: 43 callbacks suppressed
[   96.583009][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   96.583711][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   96.585758][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   96.593036][ T7587] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   96.670917][  T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   96.962264][ T7610] batadv0: entered promiscuous mode
[   96.964184][ T7610] macvlan2: entered promiscuous mode
[   96.964298][ T7610] macvlan2: entered allmulticast mode
[   96.964306][ T7610] batadv0: entered allmulticast mode
[   96.964950][ T7610] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   97.063218][ T7617] device-mapper: table: 248:0: zero-length target
[   97.063230][ T7617] device-mapper: ioctl: error adding target to table
[   97.064877][ T7622] trusted_key: syz.2.452 sent an empty control message without MSG_MORE.
[   97.079653][ T7624] lo: entered allmulticast mode
[   97.082838][ T7624] bond0: entered allmulticast mode
[   97.083364][ T7624] dummy0: entered allmulticast mode
[   97.083674][ T7624] eql: entered allmulticast mode
[   97.083861][ T7624] ifb0: entered allmulticast mode
[   97.085366][ T7624] ifb1: entered allmulticast mode
[   97.088309][ T7624] e1000 0000:00:07.0 eth0: entered allmulticast mode
[   97.096250][ T7624] e1000e 0000:00:02.0 eth1: entered allmulticast mode
[   97.099129][ T7624] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode
[   97.099336][ T7624] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode
[   97.099636][ T7624] hwsim0: entered allmulticast mode
[   97.099734][ T7624] ieee802154 phy0 wpan0: entered allmulticast mode
[   97.099827][ T7624] ieee802154 phy1 wpan1: entered allmulticast mode
[   97.099933][ T7624] teql0: entered allmulticast mode
[   97.099998][ T7624] tunl0: entered allmulticast mode
[   97.100049][ T7624] gre0: entered allmulticast mode
[   97.100091][ T7624] gretap0: entered allmulticast mode
[   97.100138][ T7624] erspan0: entered allmulticast mode
[   97.100190][ T7624] ip_vti0: entered allmulticast mode
[   97.100282][ T7624] ip6_vti0: entered allmulticast mode
[   97.100330][ T7624] sit0: entered allmulticast mode
[   97.100375][ T7624] ip6tnl0: entered allmulticast mode
[   97.100419][ T7624] ip6gre0: entered allmulticast mode
[   97.100475][ T7624] lapb0: entered allmulticast mode
[   97.100611][ T7624] lapb1: entered allmulticast mode
[   97.100709][ T7624] lapb2: entered allmulticast mode
[   97.100789][ T7624] lapb3: entered allmulticast mode
[   97.100869][ T7624] lapb4: entered allmulticast mode
[   97.100951][ T7624] lapb5: entered allmulticast mode
[   97.101038][ T7624] lapb6: entered allmulticast mode
[   97.103004][ T7624] lowpan0: entered allmulticast mode
[   97.103144][ T7624] rxe_eth0: entered allmulticast mode
[   97.104426][ T7624] mac80211_hwsim hwsim3 wlan2: entered allmulticast mode
[   97.104614][ T7624] lapb7: entered allmulticast mode
[   97.108040][ T1795] rxe_eth0 speed is unknown, defaulting to 1000
[   97.170831][ T7631] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[   97.170847][ T7631] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   97.172468][ T7631] vhci_hcd vhci_hcd.0: Device attached
[   97.174962][ T7636] vhci_hcd: unknown pdu 1
[   97.178645][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   97.178903][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   97.184628][ T5866] vhci_hcd vhci_hcd.2: stop threads
[   97.184644][ T5866] vhci_hcd vhci_hcd.2: release socket
[   97.184661][ T5866] vhci_hcd vhci_hcd.2: disconnect device
[   97.260545][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout
[   97.260581][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout
[   97.431013][ T5570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   97.445234][   T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[   97.601585][   T24] usb 7-1: Using ep0 maxpacket: 32
[   97.603132][   T24] usb 7-1: New USB device found: idVendor=05ac, idProduct=0292, bcdDevice=88.73
[   97.604091][   T24] usb 7-1: config 0 has an invalid interface number: 119 but max is 0
[   97.604111][   T24] usb 7-1: config 0 has no interface number 0
[   97.604142][   T24] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   97.604160][   T24] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[   97.604182][   T24] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   97.604210][   T24] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   97.606124][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.606143][   T24] usb 7-1: Product: syz
[   97.606156][   T24] usb 7-1: Manufacturer: syz
[   97.606168][   T24] usb 7-1: SerialNumber: syz
[   97.608690][   T24] usb 7-1: config 0 descriptor??
[   97.620999][   T24] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.119/input/input10
[   97.647936][    C0] bcm5974 7-1:0.119: trackpad urb failed: -1
[   97.774314][  T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   97.828653][ T5570] usb 7-1: USB disconnect, device number 10
[   98.105452][ T7651] tc_dump_action: action bad kind
[   98.112613][ T7656] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   98.114862][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead
[   98.114876][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead
[   98.114885][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x6ab4 instead
[   98.114895][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xe21f instead
[   98.114904][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead
[   98.114912][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead
[   98.114921][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead
[   98.114931][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead
[   98.114949][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead
[   98.114966][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead
[   98.114975][ T7656] jffs2: Further such events for this erase block will not be printed
[   98.115168][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead
[   98.115181][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead
[   98.115191][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x6ab4 instead
[   98.115201][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xe21f instead
[   98.115210][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead
[   98.115218][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead
[   98.115226][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead
[   98.115238][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead
[   98.115254][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead
[   98.115272][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead
[   98.115289][ T7656] jffs2: Further such events for this erase block will not be printed
[   98.115488][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead
[   98.115497][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead
[   98.115506][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x6ab4 instead
[   98.115515][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xe21f instead
[   98.115538][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead
[   98.115545][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead
[   98.115554][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x6ab4 instead
[   98.115568][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xe21f instead
[   98.115603][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead
[   98.115616][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead
[   98.115629][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x6ab4 instead
[   98.115646][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xe21f instead
[   98.115678][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead
[   98.115687][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead
[   98.115695][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x6ab4 instead
[   98.115705][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xe21f instead
[   98.115727][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead
[   98.115735][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead
[   98.115744][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x6ab4 instead
[   98.115753][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xe21f instead
[   98.115775][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead
[   98.115783][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead
[   98.115792][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x6ab4 instead
[   98.115801][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xe21f instead
[   98.115824][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead
[   98.115832][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead
[   98.115841][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x6ab4 instead
[   98.115850][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xe21f instead
[   98.115872][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead
[   98.115881][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead
[   98.115889][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x6ab4 instead
[   98.115899][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xe21f instead
[   98.115921][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead
[   98.115929][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead
[   98.115938][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x6ab4 instead
[   98.115947][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xe21f instead
[   98.115978][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead
[   98.115992][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead
[   98.116005][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x6ab4 instead
[   98.116021][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xe21f instead
[   98.116059][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead
[   98.116070][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead
[   98.116079][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x6ab4 instead
[   98.116088][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xe21f instead
[   98.116114][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead
[   98.116128][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead
[   98.116142][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x6ab4 instead
[   98.116158][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xe21f instead
[   98.116205][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead
[   98.116215][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead
[   98.116225][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x6ab4 instead
[   98.116235][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xe21f instead
[   98.116258][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead
[   98.116267][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead
[   98.116276][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x6ab4 instead
[   98.116286][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xe21f instead
[   98.116309][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead
[   98.116318][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead
[   98.116326][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x6ab4 instead
[   98.116335][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xe21f instead
[   98.116358][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead
[   98.116367][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead
[   98.116377][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x6ab4 instead
[   98.116387][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xe21f instead
[   98.116410][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead
[   98.116418][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead
[   98.116427][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x6ab4 instead
[   98.116436][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xe21f instead
[   98.116459][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead
[   98.116467][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead
[   98.116476][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x6ab4 instead
[   98.116485][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xe21f instead
[   98.117294][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead
[   98.117308][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead
[   98.117319][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x6ab4 instead
[   98.117329][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xe21f instead
[   98.117353][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead
[   98.117362][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead
[   98.117371][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x6ab4 instead
[   98.117381][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xe21f instead
[   98.117405][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead
[   98.117413][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead
[   98.117422][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x6ab4 instead
[   98.117431][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xe21f instead
[   98.117453][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead
[   98.117462][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead
[   98.117471][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x6ab4 instead
[   98.117480][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xe21f instead
[   98.117503][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead
[   98.117511][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead
[   98.117519][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x6ab4 instead
[   98.117529][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xe21f instead
[   98.117552][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead
[   98.117560][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead
[   98.117568][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x6ab4 instead
[   98.117578][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xe21f instead
[   98.117600][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead
[   98.117608][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead
[   98.117617][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x6ab4 instead
[   98.117626][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xe21f instead
[   98.117648][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead
[   98.117656][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead
[   98.117664][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x6ab4 instead
[   98.117674][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xe21f instead
[   98.117710][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead
[   98.117719][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead
[   98.117729][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x6ab4 instead
[   98.117739][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xe21f instead
[   98.117763][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead
[   98.117772][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead
[   98.117782][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x6ab4 instead
[   98.117793][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xe21f instead
[   98.117816][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead
[   98.117825][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead
[   98.117835][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x6ab4 instead
[   98.117845][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xe21f instead
[   98.117869][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead
[   98.117878][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead
[   98.117887][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x6ab4 instead
[   98.117897][ T7656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xe21f instead
[   98.117916][ T7656] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[   98.117920][ T7656] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[   98.121684][ T7654] IPv6: syztnl0: Disabled Multicast RS
[   98.122745][ T7654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.464'.
[   98.122763][ T7654] netlink: 32 bytes leftover after parsing attributes in process `syz.0.464'.
[   98.186525][ T7668] ip_tables: iptables: counters copy to user failed while replacing table
[   98.200977][ T5781] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   98.201149][ T5781] Bluetooth: hci0: Injecting HCI hardware error event
[   98.205179][ T5781] Bluetooth: hci0: hardware error 0x00
[   98.277867][ T7672] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted
[   98.465737][ T5793] Bluetooth: hci1: Malformed LE Event: 0x0d
[   98.667082][ T7685] 0x000000000004-0x000000010006 : ""
[   98.685033][ T7685] ftl_cs: FTL header corrupt!
[   98.794330][ T5793] Bluetooth: hci0: unexpected event for opcode 0x080e
[   98.795767][ T5793] Bluetooth: hci0: unexpected event for opcode 0x080e
[   99.074536][ T7716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=7716 comm=syz.2.484
[   99.482405][ T5793] Bluetooth: hci2: command 0x0c1a tx timeout
[   99.482451][   T68] Bluetooth: hci1: command 0x0c1a tx timeout
[   99.618309][ T7729] 9pnet_virtio: no channels available for device syz
[   99.832323][ T7745] usb usb8: usbfs: process 7745 (syz.0.494) did not claim interface 0 before use
[  100.411671][ T7776] netlink: 'syz.3.505': attribute type 42 has an invalid length.
[  100.430133][ T5781] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  100.540049][ T5781] Bluetooth: hci1: unexpected event for opcode 0x0c24
[  100.649034][ T7781] __nla_validate_parse: 6 callbacks suppressed
[  100.649103][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.507'.
[  100.779107][ T5570] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  100.788062][ T5570] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  100.793122][ T7796] comedi comedi0: Minor 2208 is invalid!
[  100.794101][ T7797] comedi comedi0: Minor 2208 is invalid!
[  100.955454][ T7811] PM: suspend entry (s2idle)
[  100.955518][ T7811] PM: Unsupported test mode for suspend to idle, please choose none/freezer/devices/platform.
[  100.955527][ T7811] PM: suspend exit
[  100.956993][   T43] kauditd_printk_skb: 26 callbacks suppressed
[  100.957006][   T43] audit: type=1400 audit(1792933366.503:604): avc:  denied  { mounton } for  pid=7810 comm="syz.0.515" path="/97/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  101.004247][ T5781] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  101.064911][ T5570] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  101.192329][   T43] audit: type=1400 audit(1792933366.717:605): avc:  denied  { connect } for  pid=7819 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  101.195618][   T43] audit: type=1400 audit(1792933366.717:606): avc:  denied  { audit_write } for  pid=7819 comm="syz.1.519" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  101.249339][   T43] audit: type=1400 audit(1792933366.773:607): avc:  denied  { read write } for  pid=7821 comm="syz.2.520" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1
[  101.249759][   T43] audit: type=1400 audit(1792933366.773:608): avc:  denied  { open } for  pid=7821 comm="syz.2.520" path="/125/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1
[  101.251164][ T7822] netlink: 'syz.2.520': attribute type 8 has an invalid length.
[  101.352391][ T7825] bpf: Bad value for 'uid'
[  101.370652][ T7820] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  101.371440][ T7820] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  101.371513][ T7820] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  101.373905][ T7820] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  101.385788][   T43] audit: type=1400 audit(1792933366.903:609): avc:  denied  { setattr } for  pid=7819 comm="syz.1.519" path="socket:[22447]" dev="sockfs" ino=22447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  101.625612][ T5885] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  101.685185][ T7845] overlayfs: failed to resolve './file0/file2': -2
[  101.705369][   T43] audit: type=1400 audit(1792933367.190:610): avc:  denied  { bind } for  pid=7853 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  101.705682][   T43] audit: type=1400 audit(1792933367.190:611): avc:  denied  { connect } for  pid=7853 comm="syz.0.527" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  101.707305][   T43] audit: type=1326 audit(1792933367.190:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.0.527" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effb5f9f559 code=0x0
[  101.707602][   T43] audit: type=1326 audit(1792933367.190:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.0.527" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effb5f9f559 code=0x0
[  101.722647][ T7436] nvmet: connect request for invalid subsystem testsu!
[  101.722818][ T7851] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsu"
[  101.895954][ T7860] xt_CT: No such helper "netbios-ns"
[  102.017871][ T7864] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  102.020801][ T7864] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  102.229439][ T7870] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  102.236905][ T7875] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  102.238256][ T7875] kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  102.238374][ T7875] kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  102.238485][ T7875] kvm: requested 85485 ns i8254 timer period limited to 200000 ns
[  102.238532][ T7875] kvm: requested 93028 ns i8254 timer period limited to 200000 ns
[  102.238582][ T7875] kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[  102.238702][ T7875] kvm: requested 10057 ns i8254 timer period limited to 200000 ns
[  102.238817][ T7875] kvm: requested 155047 ns i8254 timer period limited to 200000 ns
[  102.238864][ T7875] kvm: requested 160914 ns i8254 timer period limited to 200000 ns
[  102.249820][ T7436] net_ratelimit: 6 callbacks suppressed
[  102.249837][ T7436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.250708][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.282260][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.507120][ T5570] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  102.523502][ T7843] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  102.905879][ T1795] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  103.090095][ T1795] usb 7-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00
[  103.091065][ T1795] usb 7-1: config 1 has an invalid interface number: 3 but max is 0
[  103.091084][ T1795] usb 7-1: config 1 has no interface number 0
[  103.092958][ T1795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.092976][ T1795] usb 7-1: Product: syz
[  103.092986][ T1795] usb 7-1: Manufacturer: syz
[  103.092996][ T1795] usb 7-1: SerialNumber: syz
[  103.097880][ T1795] usb 7-1: 3:0 : does not exist
[  103.097892][ T1795] usb 7-1: 3:0 : does not exist
[  103.374888][ T1795] usb 7-1: USB disconnect, device number 11
[  103.387912][ T7904] ptrace attach of "/syz-executor exec"[5786] was attempted by ""[7904]
[  103.448692][  T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  103.532893][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout
[  103.532923][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout
[  103.618828][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout
[  103.976745][ T7436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  103.977356][ T5570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  103.978415][ T5570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  103.983754][ T7789] ceph: No mds server is up or the cluster is laggy
[  104.085812][ T7918] 9pnet_virtio: no channels available for device syz
[  104.161074][ T7922] iommufd_mock iommufd_mock0: Adding to iommu group 5
[  104.164039][ T7922] fuse: Bad value for 'user_id'
[  104.164048][ T7922] fuse: Bad value for 'user_id'
[  104.409704][ T7935] kAFS: No cell specified
[  104.492736][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'.
[  104.504641][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'.
[  104.575469][  T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.829643][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.829721][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  105.329705][ T7980] netlink: 'syz.2.562': attribute type 4 has an invalid length.
[  105.329745][ T7980] netlink: 152 bytes leftover after parsing attributes in process `syz.2.562'.
[  105.334409][ T7980] .`: renamed from bond0 (while UP)
[  105.402608][ T5132] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  105.586715][ T5132] usb 8-1: Using ep0 maxpacket: 32
[  105.587255][ T5132] usb 8-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  105.588175][ T5132] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  105.590019][ T5132] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  105.590032][ T5132] usb 8-1: Product: syz
[  105.590039][ T5132] usb 8-1: Manufacturer: syz
[  105.590051][ T5132] usb 8-1: SerialNumber: syz
[  105.594844][ T5132] usb 8-1: config 0 descriptor??
[  105.595392][ T7972] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  105.596114][ T5132] hub 8-1:0.0: bad descriptor, ignoring hub
[  105.596126][ T5132] hub 8-1:0.0: probe with driver hub failed with error -5
[  105.761889][ T8013] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  105.761916][ T8013] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  105.762061][ T8013] vhci_hcd vhci_hcd.0: Device attached
[  105.772472][ T8014] vhci_hcd: connection closed
[  105.773986][ T5866] vhci_hcd vhci_hcd.0: stop threads
[  105.774006][ T5866] vhci_hcd vhci_hcd.0: release socket
[  105.774024][ T5866] vhci_hcd vhci_hcd.0: disconnect device
[  105.792037][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout
[  105.867961][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout
[  105.872742][ T8019] FAULT_INJECTION: forcing a failure.
[  105.872742][ T8019] name failslab, interval 1, probability 0, space 0, times 0
[  105.872786][ T8019] CPU: 1 UID: 0 PID: 8019 Comm: syz.2.575 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  105.872813][ T8019] Tainted: [L]=SOFTLOCKUP
[  105.872820][ T8019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  105.872832][ T8019] Call Trace:
[  105.872852][ T8019]  <TASK>
[  105.872860][ T8019]  dump_stack_lvl+0x100/0x190
[  105.872973][ T8019]  should_fail_ex.cold+0x5/0xa
[  105.873001][ T8019]  should_failslab+0xc2/0x120
[  105.873036][ T8019]  __kmalloc_noprof+0xfc/0x840
[  105.873060][ T8019]  ? __vb2_queue_alloc+0x23e/0x1160
[  105.873137][ T8019]  __vb2_queue_alloc+0x23e/0x1160
[  105.873175][ T8019]  vb2_core_create_bufs+0x5fa/0xa30
[  105.873205][ T8019]  ? __pfx_vb2_core_create_bufs+0x10/0x10
[  105.873235][ T8019]  ? lock_acquire+0x1d1/0x380
[  105.873257][ T8019]  ? __video_do_ioctl+0x50f/0xdf0
[  105.873292][ T8019]  vb2_create_bufs+0x40c/0x830
[  105.873318][ T8019]  ? __pfx_vb2_create_bufs+0x10/0x10
[  105.873340][ T8019]  ? v4l_sanitize_colorspace+0x220/0x410
[  105.873368][ T8019]  vb2_ioctl_create_bufs+0x244/0x3e0
[  105.873390][ T8019]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  105.873421][ T8019]  vidioc_create_bufs+0x7d/0xf0
[  105.873462][ T8019]  v4l_create_bufs+0x17d/0x270
[  105.873489][ T8019]  __video_do_ioctl+0xb2a/0xdf0
[  105.873526][ T8019]  ? __might_fault+0xc5/0x140
[  105.873551][ T8019]  ? __pfx___video_do_ioctl+0x10/0x10
[  105.873589][ T8019]  video_usercopy+0x47a/0x1730
[  105.873614][ T8019]  ? __pfx___video_do_ioctl+0x10/0x10
[  105.873645][ T8019]  ? __pfx_video_usercopy+0x10/0x10
[  105.873691][ T8019]  v4l2_ioctl+0x1bd/0x250
[  105.873710][ T8019]  ? __pfx_v4l2_ioctl+0x10/0x10
[  105.873731][ T8019]  __x64_sys_ioctl+0x18e/0x210
[  105.873755][ T8019]  do_syscall_64+0x123/0x790
[  105.873859][ T8019]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.873882][ T8019] RIP: 0033:0x7fe7cad9f559
[  105.873899][ T8019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.873917][ T8019] RSP: 002b:00007fe7cbbc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  105.873950][ T8019] RAX: ffffffffffffffda RBX: 00007fe7cb025fa0 RCX: 00007fe7cad9f559
[  105.873989][ T8019] RDX: 0000200000000040 RSI: 00000000c100565c RDI: 0000000000000004
[  105.874002][ T8019] RBP: 00007fe7cae36b20 R08: 0000000000000000 R09: 0000000000000000
[  105.874013][ T8019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  105.874022][ T8019] R13: 00007fe7cb026038 R14: 00007fe7cb025fa0 R15: 00007ffd842802e8
[  105.874049][ T8019]  </TASK>
[  105.913700][ T8021] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  105.933073][ T5132] usb 8-1: USB disconnect, device number 4
[  105.958095][ T8025] 9pnet_virtio: no channels available for device syz
[  105.958307][ T8025] 9pnet_virtio: no channels available for device syz
[  105.958503][ T8025] 9pnet_virtio: no channels available for device syz
[  105.958688][ T8025] 9pnet_virtio: no channels available for device syz
[  105.959239][ T8025] 9pnet_virtio: no channels available for device syz
[  105.959446][ T8025] 9pnet_virtio: no channels available for device syz
[  105.959636][ T8025] 9pnet_virtio: no channels available for device syz
[  105.959838][ T8025] 9pnet_virtio: no channels available for device syz
[  105.960027][ T8025] 9pnet_virtio: no channels available for device syz
[  105.960255][ T8025] 9pnet_virtio: no channels available for device syz
[  105.960555][ T8025] 9pnet_virtio: no channels available for device syz
[  105.960765][ T8025] 9pnet_virtio: no channels available for device syz
[  105.960981][ T8025] 9pnet_virtio: no channels available for device syz
[  105.961219][ T8025] 9pnet_virtio: no channels available for device syz
[  105.961427][ T8025] 9pnet_virtio: no channels available for device syz
[  105.961979][ T8025] 9pnet_virtio: no channels available for device syz
[  105.962126][ T8025] 9pnet_virtio: no channels available for device syz
[  105.962264][ T8025] 9pnet_virtio: no channels available for device syz
[  105.962392][ T8025] 9pnet_virtio: no channels available for device syz
[  105.962534][ T8025] 9pnet_virtio: no channels available for device syz
[  105.964481][ T8025] 9pnet_virtio: no channels available for device syz
[  105.964635][ T8025] 9pnet_virtio: no channels available for device syz
[  105.964769][ T8025] 9pnet_virtio: no channels available for device syz
[  105.966352][ T8025] 9pnet_virtio: no channels available for device syz
[  105.966518][ T8025] 9pnet_virtio: no channels available for device syz
[  105.966654][ T8025] 9pnet_virtio: no channels available for device syz
[  105.966797][ T8025] 9pnet_virtio: no channels available for device syz
[  105.966991][ T8025] 9pnet_virtio: no channels available for device syz
[  105.967128][ T8025] 9pnet_virtio: no channels available for device syz
[  105.967269][ T8025] 9pnet_virtio: no channels available for device syz
[  105.967403][ T8025] 9pnet_virtio: no channels available for device syz
[  105.967536][ T8025] 9pnet_virtio: no channels available for device syz
[  105.967876][ T8025] 9pnet_virtio: no channels available for device syz
[  105.968016][ T8025] 9pnet_virtio: no channels available for device syz
[  105.968264][ T8025] 9pnet_virtio: no channels available for device syz
[  105.968405][ T8025] 9pnet_virtio: no channels available for device syz
[  105.968539][ T8025] 9pnet_virtio: no channels available for device syz
[  105.968671][ T8025] 9pnet_virtio: no channels available for device syz
[  105.968814][ T8025] 9pnet_virtio: no channels available for device syz
[  105.968957][ T8025] 9pnet_virtio: no channels available for device syz
[  105.969091][ T8025] 9pnet_virtio: no channels available for device syz
[  105.969233][ T8025] 9pnet_virtio: no channels available for device syz
[  105.969447][ T8025] 9pnet_virtio: no channels available for device syz
[  105.969579][ T8025] 9pnet_virtio: no channels available for device syz
[  105.969720][ T8025] 9pnet_virtio: no channels available for device syz
[  105.969853][ T8025] 9pnet_virtio: no channels available for device syz
[  105.970005][ T8025] 9pnet_virtio: no channels available for device syz
[  105.970163][ T8025] 9pnet_virtio: no channels available for device syz
[  105.970309][ T8025] 9pnet_virtio: no channels available for device syz
[  105.970534][ T8025] 9pnet_virtio: no channels available for device syz
[  105.970671][ T8025] 9pnet_virtio: no channels available for device syz
[  105.970803][ T8025] 9pnet_virtio: no channels available for device syz
[  105.970934][ T8025] 9pnet_virtio: no channels available for device syz
[  105.971088][ T8025] 9pnet_virtio: no channels available for device syz
[  105.971318][ T8025] 9pnet_virtio: no channels available for device syz
[  105.971453][ T8025] 9pnet_virtio: no channels available for device syz
[  105.971726][ T8025] 9pnet_virtio: no channels available for device syz
[  105.971868][ T8025] 9pnet_virtio: no channels available for device syz
[  105.971999][ T8025] 9pnet_virtio: no channels available for device syz
[  105.972130][ T8025] 9pnet_virtio: no channels available for device syz
[  105.972278][ T8025] 9pnet_virtio: no channels available for device syz
[  106.176524][ T8033] device-mapper: raid: Choosing default region size of 4MiB
[  106.177915][ T8033] device-mapper: table: 248:1: raid: Invalid flags combination (-EINVAL)
[  106.177929][ T8033] device-mapper: ioctl: error adding target to table
[  106.180214][ T8033] overlayfs: invalid origin (0000)
[  106.242698][ T8036] nvme_fc: nvme_fc_parse_traddr: bad traddr string
[  106.245693][ T8036] program syz.2.579 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  106.283923][ T8039] netlink: 'syz.2.580': attribute type 1 has an invalid length.
[  106.306325][ T8039] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.323678][ T8039] gretap1: entered promiscuous mode
[  106.327383][ T8039] bond0: (slave gretap1): making interface the new active one
[  106.328594][ T8039] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  106.357898][ T8039] 8021q: adding VLAN 0 to HW filter on device bond3
[  106.360740][ T8039] bond0: (slave bond3): Enslaving as an active interface with a down link
[  106.407904][ T8048] netlink: 'syz.0.582': attribute type 13 has an invalid length.
[  106.433033][ T8050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.584'.
[  106.433073][ T8050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.584'.
[  106.434934][ T8052] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  106.435094][ T8053] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  106.437402][ T8053] VFS: Can't find a romfs filesystem on dev nullb0.
[  106.437402][ T8053] 
[  106.438230][ T8050] erspan0: entered promiscuous mode
[  106.439135][ T8050] gretap0: entered promiscuous mode
[  106.440119][ T8050] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[  106.440138][ T8050] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  106.440547][ T8052] VFS: Can't find a romfs filesystem on dev nullb0.
[  106.440547][ T8052] 
[  106.444566][ T8052] netlink: 176 bytes leftover after parsing attributes in process `syz.2.585'.
[  106.444665][ T8053] netlink: 176 bytes leftover after parsing attributes in process `syz.2.585'.
[  106.444958][ T8052] syzkaller1: entered promiscuous mode
[  106.444967][ T8052] syzkaller1: entered allmulticast mode
[  106.463586][ T8056] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8056 comm=syz.3.586
[  106.466866][   T43] kauditd_printk_skb: 22 callbacks suppressed
[  106.466885][   T43] audit: type=1400 audit(1792933371.605:636): avc:  denied  { create } for  pid=8057 comm="syz.0.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  106.467632][   T43] audit: type=1400 audit(1792933371.605:637): avc:  denied  { setopt } for  pid=8057 comm="syz.0.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  106.480358][ T8058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.480703][ T8058] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.684714][   T43] audit: type=1400 audit(1792933371.799:638): avc:  denied  { ioctl } for  pid=8066 comm="syz.2.589" path="socket:[24135]" dev="sockfs" ino=24135 ioctlcmd=0x40105870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  106.734006][ T5885] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  106.762932][ T8072] Format for adding new port is "id [perm_addr]" (uint MAC).
[  106.840766][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'.
[  106.895964][ T5885] usb 5-1: Using ep0 maxpacket: 8
[  106.896634][ T5885] usb 5-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  106.898046][ T5885] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  106.898066][ T5885] usb 5-1: config 0 has no interface number 0
[  106.898098][ T5885] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  106.898118][ T5885] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  106.898134][ T5885] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  106.898155][ T5885] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  106.898186][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.900282][ T5885] usb 5-1: config 0 descriptor??
[  106.904546][ T5885] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  107.119716][   T43] audit: type=1400 audit(1792933372.196:639): avc:  denied  { append } for  pid=8083 comm="syz.2.596" name="event0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  107.182880][  T930] usb 5-1: USB disconnect, device number 10
[  107.182990][    C1] ldusb 5-1:0.55: usb_submit_urb failed (-19)
[  107.211613][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'.
[  107.302271][ T8090] program syz.2.597 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  107.309577][   T43] audit: type=1400 audit(1792933372.381:640): avc:  denied  { setopt } for  pid=8089 comm="syz.2.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  107.381468][   T43] audit: type=1400 audit(1792933372.436:641): avc:  denied  { bind } for  pid=8093 comm="syz.1.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  107.381742][   T43] audit: type=1400 audit(1792933372.436:642): avc:  denied  { listen } for  pid=8093 comm="syz.1.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  107.428701][   T43] audit: type=1400 audit(1792933372.491:643): avc:  denied  { write } for  pid=8095 comm="syz.2.599" path="socket:[24804]" dev="sockfs" ino=24804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  107.429492][   T43] audit: type=1400 audit(1792933372.491:644): avc:  denied  { ioctl } for  pid=8095 comm="syz.2.599" path="socket:[24805]" dev="sockfs" ino=24805 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  107.430417][   T43] audit: type=1400 audit(1792933372.491:645): avc:  denied  { ioctl } for  pid=8095 comm="syz.2.599" path="socket:[23266]" dev="sockfs" ino=23266 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1
[  107.430921][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'.
[  107.431062][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'.
[  107.431201][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'.
[  107.431332][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'.
[  107.497502][ T8103] netlink: 'syz.1.600': attribute type 12 has an invalid length.
[  107.506852][ T8103] geneve2: entered promiscuous mode
[  107.508160][ T5866] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0
[  107.508257][ T5866] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0
[  107.508276][ T5866] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0
[  107.525310][ T5866] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0
[  107.597050][ T8110] netlink: 'syz.1.603': attribute type 2 has an invalid length.
[  107.658967][ T5781] Bluetooth: hci1: SCO packet for unknown connection handle 200
[  107.811955][ T8118] net_ratelimit: 8 callbacks suppressed
[  107.811969][ T8118] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  107.845898][ T8120] SELinux: security_context_str_to_sid (5ýÆÉ]ÖS9q#“�ë) failed with errno=-22
[  107.864215][ T8120] bond2: option downdelay: invalid value (18446744073709551615)
[  107.864240][ T8120] bond2: option downdelay: allowed values 0 - 2147483647
[  107.865455][ T8120] bond2 (unregistering): Released all slaves
[  107.908162][ T8125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29213 sclass=netlink_route_socket pid=8125 comm=syz.1.608
[  107.958812][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.083153][ T8149] netlink: 'syz.3.615': attribute type 12 has an invalid length.
[  108.083167][ T8149] netlink: 'syz.3.615': attribute type 29 has an invalid length.
[  108.119589][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout
[  108.935180][ T8180] program syz.2.624 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  108.938283][ T8183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.938863][ T8183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.939475][ T8183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.939880][ T8183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.940150][ T8183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.941020][ T8179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.986309][ T5132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.072664][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.717420][  T930] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  109.734127][ T8215] fuse: Unknown parameter 'fÊ°•�Ðúºe1«Ìv£Ö'
[  109.742132][ T8218] 9pnet_virtio: no channels available for device syz
[  109.742205][ T8215] overlay: ./file0 is not a directory
[  110.158064][ T8243] FAULT_INJECTION: forcing a failure.
[  110.158064][ T8243] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  110.158087][ T8243] CPU: 1 UID: 0 PID: 8243 Comm: syz.1.641 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  110.158102][ T8243] Tainted: [L]=SOFTLOCKUP
[  110.158106][ T8243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  110.158118][ T8243] Call Trace:
[  110.158122][ T8243]  <TASK>
[  110.158126][ T8243]  dump_stack_lvl+0x100/0x190
[  110.158147][ T8243]  should_fail_ex.cold+0x5/0xa
[  110.158162][ T8243]  ? prepare_alloc_pages+0x16d/0x5b0
[  110.158178][ T8243]  should_fail_alloc_page+0xeb/0x140
[  110.158194][ T8243]  prepare_alloc_pages+0x1f0/0x5b0
[  110.158209][ T8243]  ? is_bpf_text_address+0x94/0x1a0
[  110.158222][ T8243]  __alloc_frozen_pages_noprof+0x1ee/0x3190
[  110.158255][ T8243]  ? stack_trace_save+0x8e/0xc0
[  110.158268][ T8243]  ? __pfx_stack_trace_save+0x10/0x10
[  110.158282][ T8243]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  110.158296][ T8243]  ? kasan_save_stack+0x3f/0x50
[  110.158309][ T8243]  ? kasan_save_stack+0x30/0x50
[  110.158321][ T8243]  ? kasan_save_track+0x14/0x30
[  110.158333][ T8243]  ? __kasan_slab_alloc+0x89/0x90
[  110.158346][ T8243]  ? kmem_cache_alloc_node_noprof+0x282/0x6e0
[  110.158359][ T8243]  ? alloc_vmap_area+0x643/0x2bc0
[  110.158371][ T8243]  ? __get_vm_area_node+0x1ed/0x350
[  110.158384][ T8243]  ? __vmalloc_node_range_noprof+0x2ad/0x1440
[  110.158398][ T8243]  ? __vmalloc_node_noprof+0xad/0xf0
[  110.158412][ T8243]  ? copy_process+0x80b/0x84c0
[  110.158423][ T8243]  ? vhost_task_create+0x1db/0x370
[  110.158434][ T8243]  ? kvm_mmu_post_init_vm+0x1b3/0x360
[  110.158447][ T8243]  ? kvm_arch_vcpu_ioctl_run+0xb5/0x1de0
[  110.158460][ T8243]  ? kvm_vcpu_ioctl+0x735/0x17b0
[  110.158474][ T8243]  ? __x64_sys_ioctl+0x18e/0x210
[  110.158486][ T8243]  ? do_syscall_64+0x123/0x790
[  110.158496][ T8243]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.158513][ T8243]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  110.158530][ T8243]  ? policy_nodemask+0xed/0x4f0
[  110.158547][ T8243]  alloc_pages_mpol+0x201/0x560
[  110.158564][ T8243]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  110.158583][ T8243]  alloc_pages_noprof+0x1a/0x160
[  110.158594][ T8243]  get_free_pages_noprof+0x10/0xb0
[  110.158607][ T8243]  __kasan_populate_vmalloc+0xa0/0x210
[  110.158623][ T8243]  alloc_vmap_area+0x963/0x2bc0
[  110.158640][ T8243]  ? kasan_save_track+0x14/0x30
[  110.158653][ T8243]  ? __kasan_kmalloc+0xaa/0xb0
[  110.158666][ T8243]  ? __pfx_alloc_vmap_area+0x10/0x10
[  110.158679][ T8243]  ? __get_vm_area_node+0x124/0x350
[  110.158695][ T8243]  __get_vm_area_node+0x1ed/0x350
[  110.158712][ T8243]  __vmalloc_node_range_noprof+0x2ad/0x1440
[  110.158727][ T8243]  ? vhost_task_create+0x1db/0x370
[  110.158738][ T8243]  ? lock_acquire+0x1d1/0x380
[  110.158755][ T8243]  ? vhost_task_create+0x1db/0x370
[  110.158767][ T8243]  ? __memcg_slab_post_alloc_hook+0x715/0x10b0
[  110.158780][ T8243]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  110.158797][ T8243]  ? rcu_is_watching+0x13/0xc0
[  110.158807][ T8243]  ? trace_kmem_cache_alloc+0xdd/0x100
[  110.158823][ T8243]  ? vhost_task_create+0x1db/0x370
[  110.158833][ T8243]  __vmalloc_node_noprof+0xad/0xf0
[  110.158848][ T8243]  ? vhost_task_create+0x1db/0x370
[  110.158860][ T8243]  copy_process+0x80b/0x84c0
[  110.158880][ T8243]  ? __pfx_copy_process+0x10/0x10
[  110.158891][ T8243]  ? kasan_save_track+0x14/0x30
[  110.158904][ T8243]  ? __kasan_kmalloc+0xaa/0xb0
[  110.158917][ T8243]  ? lockdep_init_map_type+0x5c/0x250
[  110.158932][ T8243]  ? lockdep_init_map_type+0x5c/0x250
[  110.158946][ T8243]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  110.158963][ T8243]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  110.158979][ T8243]  vhost_task_create+0x1db/0x370
[  110.158991][ T8243]  ? __pfx_vhost_task_create+0x10/0x10
[  110.159006][ T8243]  ? __pfx_vhost_task_fn+0x10/0x10
[  110.159018][ T8243]  ? register_lock_class+0x3f/0x7b0
[  110.159031][ T8243]  ? rcu_is_watching+0x13/0xc0
[  110.159041][ T8243]  ? trace_contention_end+0x126/0x160
[  110.159058][ T8243]  kvm_mmu_post_init_vm+0x1b3/0x360
[  110.159072][ T8243]  kvm_arch_vcpu_ioctl_run+0xb5/0x1de0
[  110.159086][ T8243]  ? __pfx___mutex_lock+0x10/0x10
[  110.159098][ T8243]  ? kasan_quarantine_put+0x104/0x240
[  110.159115][ T8243]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  110.159129][ T8243]  ? lock_acquire+0x1d1/0x380
[  110.159142][ T8243]  ? do_raw_write_lock+0x11e/0x260
[  110.159157][ T8243]  ? find_held_lock+0x2b/0x80
[  110.159166][ T8243]  ? kvm_vcpu_ioctl+0x15c6/0x17b0
[  110.159180][ T8243]  ? kvm_vcpu_ioctl+0x15c6/0x17b0
[  110.159197][ T8243]  kvm_vcpu_ioctl+0x735/0x17b0
[  110.159213][ T8243]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  110.159228][ T8243]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  110.159244][ T8243]  ? do_vfs_ioctl+0x226/0x13e0
[  110.159257][ T8243]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  110.159269][ T8243]  ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530
[  110.159310][ T8243]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  110.159330][ T8243]  ? __fget_files+0x34/0x3d0
[  110.159351][ T8243]  ? selinux_file_ioctl+0x1e0/0x290
[  110.159367][ T8243]  ? selinux_file_ioctl+0x1e7/0x290
[  110.159384][ T8243]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  110.159399][ T8243]  __x64_sys_ioctl+0x18e/0x210
[  110.159413][ T8243]  do_syscall_64+0x123/0x790
[  110.159425][ T8243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.159436][ T8243] RIP: 0033:0x7f0fde39f559
[  110.159445][ T8243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.159456][ T8243] RSP: 002b:00007f0fdf30d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  110.159467][ T8243] RAX: ffffffffffffffda RBX: 00007f0fde625fa0 RCX: 00007f0fde39f559
[  110.159474][ T8243] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a
[  110.159480][ T8243] RBP: 00007f0fdf30d090 R08: 0000000000000000 R09: 0000000000000000
[  110.159486][ T8243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  110.159492][ T8243] R13: 00007f0fde626038 R14: 00007f0fde625fa0 R15: 00007ffe60e3d038
[  110.159506][ T8243]  </TASK>
[  110.160074][ T8243] syz.1.641: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  110.160175][ T8243] CPU: 1 UID: 0 PID: 8243 Comm: syz.1.641 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  110.160190][ T8243] Tainted: [L]=SOFTLOCKUP
[  110.160194][ T8243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  110.160200][ T8243] Call Trace:
[  110.160204][ T8243]  <TASK>
[  110.160208][ T8243]  dump_stack_lvl+0x100/0x190
[  110.160225][ T8243]  warn_alloc.cold+0x9e/0xb2
[  110.160238][ T8243]  ? __pfx_warn_alloc+0x10/0x10
[  110.160249][ T8243]  ? lockdep_hardirqs_on+0x7d/0x110
[  110.160267][ T8243]  ? __get_vm_area_node+0x2f0/0x350
[  110.160285][ T8243]  ? __get_vm_area_node+0x22b/0x350
[  110.160302][ T8243]  __vmalloc_node_range_noprof+0xdc6/0x1440
[  110.160318][ T8243]  ? lock_acquire+0x1d1/0x380
[  110.160335][ T8243]  ? vhost_task_create+0x1db/0x370
[  110.160347][ T8243]  ? __memcg_slab_post_alloc_hook+0x715/0x10b0
[  110.160361][ T8243]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  110.160378][ T8243]  ? rcu_is_watching+0x13/0xc0
[  110.160388][ T8243]  ? trace_kmem_cache_alloc+0xdd/0x100
[  110.160422][ T8243]  ? vhost_task_create+0x1db/0x370
[  110.160433][ T8243]  __vmalloc_node_noprof+0xad/0xf0
[  110.160447][ T8243]  ? vhost_task_create+0x1db/0x370
[  110.160460][ T8243]  copy_process+0x80b/0x84c0
[  110.160479][ T8243]  ? __pfx_copy_process+0x10/0x10
[  110.160491][ T8243]  ? kasan_save_track+0x14/0x30
[  110.160504][ T8243]  ? __kasan_kmalloc+0xaa/0xb0
[  110.160517][ T8243]  ? lockdep_init_map_type+0x5c/0x250
[  110.160531][ T8243]  ? lockdep_init_map_type+0x5c/0x250
[  110.160546][ T8243]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  110.160563][ T8243]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  110.160580][ T8243]  vhost_task_create+0x1db/0x370
[  110.160591][ T8243]  ? __pfx_vhost_task_create+0x10/0x10
[  110.160606][ T8243]  ? __pfx_vhost_task_fn+0x10/0x10
[  110.160619][ T8243]  ? register_lock_class+0x3f/0x7b0
[  110.160632][ T8243]  ? rcu_is_watching+0x13/0xc0
[  110.160641][ T8243]  ? trace_contention_end+0x126/0x160
[  110.160658][ T8243]  kvm_mmu_post_init_vm+0x1b3/0x360
[  110.160672][ T8243]  kvm_arch_vcpu_ioctl_run+0xb5/0x1de0
[  110.160687][ T8243]  ? __pfx___mutex_lock+0x10/0x10
[  110.160697][ T8243]  ? kasan_quarantine_put+0x104/0x240
[  110.160711][ T8243]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  110.160725][ T8243]  ? lock_acquire+0x1d1/0x380
[  110.160738][ T8243]  ? do_raw_write_lock+0x11e/0x260
[  110.160753][ T8243]  ? find_held_lock+0x2b/0x80
[  110.160763][ T8243]  ? kvm_vcpu_ioctl+0x15c6/0x17b0
[  110.160776][ T8243]  ? kvm_vcpu_ioctl+0x15c6/0x17b0
[  110.160794][ T8243]  kvm_vcpu_ioctl+0x735/0x17b0
[  110.160810][ T8243]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  110.160825][ T8243]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  110.160842][ T8243]  ? do_vfs_ioctl+0x226/0x13e0
[  110.160855][ T8243]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  110.160867][ T8243]  ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530
[  110.160886][ T8243]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  110.160905][ T8243]  ? __fget_files+0x34/0x3d0
[  110.160927][ T8243]  ? selinux_file_ioctl+0x1e0/0x290
[  110.160942][ T8243]  ? selinux_file_ioctl+0x1e7/0x290
[  110.160959][ T8243]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  110.160974][ T8243]  __x64_sys_ioctl+0x18e/0x210
[  110.160989][ T8243]  do_syscall_64+0x123/0x790
[  110.161000][ T8243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.161011][ T8243] RIP: 0033:0x7f0fde39f559
[  110.161020][ T8243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.161030][ T8243] RSP: 002b:00007f0fdf30d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  110.161039][ T8243] RAX: ffffffffffffffda RBX: 00007f0fde625fa0 RCX: 00007f0fde39f559
[  110.161046][ T8243] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a
[  110.161052][ T8243] RBP: 00007f0fdf30d090 R08: 0000000000000000 R09: 0000000000000000
[  110.161058][ T8243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  110.161064][ T8243] R13: 00007f0fde626038 R14: 00007f0fde625fa0 R15: 00007ffe60e3d038
[  110.161078][ T8243]  </TASK>
[  110.161165][ T8243] Mem-Info:
[  110.161172][ T8243] active_anon:7342 inactive_anon:783 isolated_anon:0
[  110.161172][ T8243]  active_file:4871 inactive_file:26308 isolated_file:0
[  110.161172][ T8243]  unevictable:1000 dirty:94 writeback:0
[  110.161172][ T8243]  slab_reclaimable:9734 slab_unreclaimable:68896
[  110.161172][ T8243]  mapped:27014 shmem:1779 pagetables:3483
[  110.161172][ T8243]  sec_pagetables:298 bounce:0
[  110.161172][ T8243]  kernel_misc_reclaimable:0
[  110.161172][ T8243]  free:466863 free_pcp:19958 free_cma:0
[  110.161198][ T8243] Node 0 active_anon:29296kB inactive_anon:3132kB active_file:19484kB inactive_file:105024kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:108056kB dirty:376kB writeback:0kB shmem:5116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15232kB pagetables:9140kB sec_pagetables:1184kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  110.161226][ T8243] Node 1 active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:4792kB sec_pagetables:8kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  110.161251][ T8243] Node 0 DMA free:15336kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  110.161279][ T8243] lowmem_reserve[]: 0 1202 1202 1202 1202
[  110.161298][ T8243] Node 0 DMA32 free:254272kB boost:0kB min:27068kB low:33832kB high:40596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:29296kB inactive_anon:3132kB active_file:19484kB inactive_file:105024kB unevictable:2000kB writepending:376kB zspages:1924kB present:2080628kB managed:1231552kB mlocked:0kB bounce:0kB free_pcp:47336kB local_pcp:14100kB free_cma:0kB
[  110.161327][ T8243] lowmem_reserve[]: 0 0 0 0 0
[  110.161344][ T8243] Node 1 Normal free:1597844kB boost:0kB min:40164kB low:50204kB high:60244kB reserved_highatomic:0kB free_highatomic:0kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:32492kB local_pcp:9768kB free_cma:0kB
[  110.161373][ T8243] lowmem_reserve[]: 0 0 0 0 0
[  110.161390][ T8243] Node 0 DMA: 6*4kB (UM) 6*8kB (UM) 6*16kB (UM) 6*32kB (UM) 6*64kB (UM) 6*128kB (UM) 6*256kB (UM) 6*512kB (UM) 5*1024kB (UM) 2*2048kB (UM) 0*4096kB = 15336kB
[  110.161540][ T8243] Node 0 DMA32: 542*4kB (UME) 618*8kB (UME) 430*16kB (UME) 193*32kB (UME) 225*64kB (UME) 188*128kB (UME) 132*256kB (UME) 80*512kB (UME) 44*1024kB (UM) 9*2048kB (UM) 14*4096kB (UM) = 254216kB
[  110.161621][ T8243] Node 1 Normal: 22*4kB (UME) 154*8kB (UME) 159*16kB (UME) 176*32kB (UM) 162*64kB (UME) 148*128kB (UME) 136*256kB (UM) 139*512kB (UME) 111*1024kB (UM) 4*2048kB (UME) 325*4096kB (UM) = 1597848kB
[  110.161701][ T8243] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  110.161710][ T8243] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  110.161718][ T8243] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  110.161725][ T8243] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  110.161733][ T8243] 32955 total pagecache pages
[  110.161737][ T8243] 1 pages in swap cache
[  110.161741][ T8243] Free swap  = 122080kB
[  110.161744][ T8243] Total swap = 124996kB
[  110.161748][ T8243] 1048443 pages RAM
[  110.161752][ T8243] 0 pages HighMem/MovableOnly
[  110.161755][ T8243] 291245 pages reserved
[  110.161758][ T8243] 0 pages cma reserved
[  110.220907][ T5132] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  110.264108][ T8208] overlayfs: statfs failed on './file0'
[  110.374952][   T68] Bluetooth: hci3: command 0x0c1a tx timeout
[  110.383161][ T5132] usb 8-1: Using ep0 maxpacket: 8
[  110.383911][ T5132] usb 8-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  110.385036][ T5132] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  110.385059][ T5132] usb 8-1: config 179 has 0 interfaces, different from the descriptor's value: 1
[  110.385086][ T5132] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.620010][ T5132] usb 8-1: USB disconnect, device number 5
[  111.093612][ T8274] nvme_fc: nvme_fc_parse_traddr: bad traddr string
[  111.203556][ T8278] netlink: 'syz.3.651': attribute type 4 has an invalid length.
[  111.212517][ T8278] netlink: 'syz.3.651': attribute type 4 has an invalid length.
[  111.221866][ T8278] ima: policy update failed
[  111.259294][ T8280] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  111.320805][ T8283] FAULT_INJECTION: forcing a failure.
[  111.320805][ T8283] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  111.320827][ T8283] CPU: 0 UID: 0 PID: 8283 Comm: syz.3.653 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  111.320843][ T8283] Tainted: [L]=SOFTLOCKUP
[  111.320847][ T8283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  111.320853][ T8283] Call Trace:
[  111.320857][ T8283]  <TASK>
[  111.320863][ T8283]  dump_stack_lvl+0x100/0x190
[  111.320882][ T8283]  should_fail_ex.cold+0x5/0xa
[  111.320896][ T8283]  ? prepare_alloc_pages+0x16d/0x5b0
[  111.320913][ T8283]  should_fail_alloc_page+0xeb/0x140
[  111.320928][ T8283]  prepare_alloc_pages+0x1f0/0x5b0
[  111.320943][ T8283]  ? is_bpf_text_address+0x94/0x1a0
[  111.320957][ T8283]  __alloc_frozen_pages_noprof+0x1ee/0x3190
[  111.320978][ T8283]  ? stack_trace_save+0x8e/0xc0
[  111.320991][ T8283]  ? __pfx_stack_trace_save+0x10/0x10
[  111.321004][ T8283]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  111.321018][ T8283]  ? kasan_save_stack+0x3f/0x50
[  111.321031][ T8283]  ? kasan_save_stack+0x30/0x50
[  111.321043][ T8283]  ? kasan_save_track+0x14/0x30
[  111.321055][ T8283]  ? __kasan_slab_alloc+0x89/0x90
[  111.321069][ T8283]  ? kmem_cache_alloc_node_noprof+0x282/0x6e0
[  111.321082][ T8283]  ? alloc_vmap_area+0x643/0x2bc0
[  111.321094][ T8283]  ? __get_vm_area_node+0x1ed/0x350
[  111.321107][ T8283]  ? __vmalloc_node_range_noprof+0x2ad/0x1440
[  111.321121][ T8283]  ? __vmalloc_node_noprof+0xad/0xf0
[  111.321135][ T8283]  ? copy_process+0x80b/0x84c0
[  111.321145][ T8283]  ? vhost_task_create+0x1db/0x370
[  111.321156][ T8283]  ? kvm_mmu_post_init_vm+0x1b3/0x360
[  111.321169][ T8283]  ? kvm_arch_vcpu_ioctl_run+0xb5/0x1de0
[  111.321182][ T8283]  ? kvm_vcpu_ioctl+0x735/0x17b0
[  111.321196][ T8283]  ? __x64_sys_ioctl+0x18e/0x210
[  111.321208][ T8283]  ? do_syscall_64+0x123/0x790
[  111.321218][ T8283]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.321235][ T8283]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  111.321253][ T8283]  ? policy_nodemask+0xed/0x4f0
[  111.321270][ T8283]  alloc_pages_mpol+0x201/0x560
[  111.321287][ T8283]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  111.321306][ T8283]  alloc_pages_noprof+0x1a/0x160
[  111.321316][ T8283]  get_free_pages_noprof+0x10/0xb0
[  111.321329][ T8283]  __kasan_populate_vmalloc+0xa0/0x210
[  111.321345][ T8283]  alloc_vmap_area+0x963/0x2bc0
[  111.321363][ T8283]  ? kasan_save_track+0x14/0x30
[  111.321375][ T8283]  ? __kasan_kmalloc+0xaa/0xb0
[  111.321388][ T8283]  ? __pfx_alloc_vmap_area+0x10/0x10
[  111.321401][ T8283]  ? __get_vm_area_node+0x124/0x350
[  111.321435][ T8283]  __get_vm_area_node+0x1ed/0x350
[  111.321452][ T8283]  __vmalloc_node_range_noprof+0x2ad/0x1440
[  111.321489][ T8283]  ? vhost_task_create+0x1db/0x370
[  111.321499][ T8283]  ? lock_acquire+0x1d1/0x380
[  111.321517][ T8283]  ? vhost_task_create+0x1db/0x370
[  111.321529][ T8283]  ? __memcg_slab_post_alloc_hook+0x715/0x10b0
[  111.321542][ T8283]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  111.321559][ T8283]  ? rcu_is_watching+0x13/0xc0
[  111.321569][ T8283]  ? trace_kmem_cache_alloc+0xdd/0x100
[  111.321585][ T8283]  ? vhost_task_create+0x1db/0x370
[  111.321596][ T8283]  __vmalloc_node_noprof+0xad/0xf0
[  111.321622][ T8283]  ? vhost_task_create+0x1db/0x370
[  111.321635][ T8283]  copy_process+0x80b/0x84c0
[  111.321654][ T8283]  ? __pfx_copy_process+0x10/0x10
[  111.321666][ T8283]  ? kasan_save_track+0x14/0x30
[  111.321678][ T8283]  ? __kasan_kmalloc+0xaa/0xb0
[  111.321692][ T8283]  ? lockdep_init_map_type+0x5c/0x250
[  111.321706][ T8283]  ? lockdep_init_map_type+0x5c/0x250
[  111.321728][ T8283]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  111.321754][ T8283]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  111.321781][ T8283]  vhost_task_create+0x1db/0x370
[  111.321802][ T8283]  ? __pfx_vhost_task_create+0x10/0x10
[  111.321828][ T8283]  ? __pfx_vhost_task_fn+0x10/0x10
[  111.321846][ T8283]  ? register_lock_class+0x3f/0x7b0
[  111.321859][ T8283]  ? rcu_is_watching+0x13/0xc0
[  111.321869][ T8283]  ? trace_contention_end+0x126/0x160
[  111.321886][ T8283]  kvm_mmu_post_init_vm+0x1b3/0x360
[  111.321899][ T8283]  kvm_arch_vcpu_ioctl_run+0xb5/0x1de0
[  111.321914][ T8283]  ? __pfx___mutex_lock+0x10/0x10
[  111.321924][ T8283]  ? kasan_quarantine_put+0x104/0x240
[  111.321961][ T8283]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  111.321975][ T8283]  ? lock_acquire+0x1d1/0x380
[  111.321988][ T8283]  ? do_raw_write_lock+0x11e/0x260
[  111.322003][ T8283]  ? find_held_lock+0x2b/0x80
[  111.322012][ T8283]  ? kvm_vcpu_ioctl+0x15c6/0x17b0
[  111.322026][ T8283]  ? kvm_vcpu_ioctl+0x15c6/0x17b0
[  111.322054][ T8283]  kvm_vcpu_ioctl+0x735/0x17b0
[  111.322070][ T8283]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  111.322085][ T8283]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  111.322101][ T8283]  ? do_vfs_ioctl+0x226/0x13e0
[  111.322115][ T8283]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  111.322127][ T8283]  ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530
[  111.322146][ T8283]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  111.322165][ T8283]  ? __fget_files+0x34/0x3d0
[  111.322187][ T8283]  ? selinux_file_ioctl+0x1e0/0x290
[  111.322203][ T8283]  ? selinux_file_ioctl+0x1e7/0x290
[  111.322220][ T8283]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  111.322235][ T8283]  __x64_sys_ioctl+0x18e/0x210
[  111.322249][ T8283]  do_syscall_64+0x123/0x790
[  111.322261][ T8283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.322272][ T8283] RIP: 0033:0x7f439159f559
[  111.322281][ T8283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.322292][ T8283] RSP: 002b:00007f4392546028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  111.322303][ T8283] RAX: ffffffffffffffda RBX: 00007f4391825fa0 RCX: 00007f439159f559
[  111.322309][ T8283] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a
[  111.322316][ T8283] RBP: 00007f4392546090 R08: 0000000000000000 R09: 0000000000000000
[  111.322322][ T8283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  111.322328][ T8283] R13: 00007f4391826038 R14: 00007f4391825fa0 R15: 00007fff0f8d73a8
[  111.322342][ T8283]  </TASK>
[  111.655084][ T8314] batman_adv: batadv0: Adding interface: syz_tun
[  111.655102][ T8314] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  111.655129][ T8314] batman_adv: batadv0: Interface activated: syz_tun
[  111.710366][ T8312] autofs: Unknown parameter './file1'
[  111.714760][ T8312] overlayfs: failed lookup in lower (newroot/179, name='file0', err=-40): overlapping layers
[  111.723032][ T8317] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[  111.736524][ T8315] Process accounting resumed
[  112.051746][  T930] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  112.214091][  T930] usb 6-1: Using ep0 maxpacket: 8
[  112.214891][  T930] usb 6-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40
[  112.215881][  T930] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  112.215900][  T930] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  112.215918][  T930] usb 6-1: config 1 has no interface number 0
[  112.215948][  T930] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0
[  112.217914][  T930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.217958][  T930] usb 6-1: Product: syz
[  112.217970][  T930] usb 6-1: Manufacturer: syz
[  112.217983][  T930] usb 6-1: SerialNumber: syz
[  112.588952][  T930] usb 6-1: USB disconnect, device number 3
[  112.610770][ T7641] udevd[7641]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  112.720348][ T8331] FAULT_INJECTION: forcing a failure.
[  112.720348][ T8331] name failslab, interval 1, probability 0, space 0, times 0
[  112.720381][ T8331] CPU: 1 UID: 0 PID: 8331 Comm: syz.2.668 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  112.720406][ T8331] Tainted: [L]=SOFTLOCKUP
[  112.720412][ T8331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  112.720423][ T8331] Call Trace:
[  112.720429][ T8331]  <TASK>
[  112.720437][ T8331]  dump_stack_lvl+0x100/0x190
[  112.720469][ T8331]  should_fail_ex.cold+0x5/0xa
[  112.720497][ T8331]  should_failslab+0xc2/0x120
[  112.720522][ T8331]  kmem_cache_alloc_noprof+0x92/0x6a0
[  112.720562][ T8331]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  112.720596][ T8331]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  112.720624][ T8331]  ? kvm_msr_allowed+0x2d0/0x450
[  112.720650][ T8331]  kvm_mmu_load+0xe3/0x25b0
[  112.720673][ T8331]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  112.720706][ T8331]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  112.720736][ T8331]  ? __pfx_kvm_mmu_load+0x10/0x10
[  112.720757][ T8331]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  112.720777][ T8331]  ? kvm_check_and_inject_events+0x896/0x1050
[  112.720804][ T8331]  vcpu_run+0x4009/0x60d0
[  112.720838][ T8331]  ? __pfx_vcpu_run+0x10/0x10
[  112.720858][ T8331]  ? kvm_arch_vcpu_load+0x15e/0xcf0
[  112.720888][ T8331]  ? lock_acquire+0x1d1/0x380
[  112.720909][ T8331]  ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0
[  112.720935][ T8331]  ? fpu_swap_kvm_fpstate+0x25e/0x4b0
[  112.720961][ T8331]  ? __local_bh_enable_ip+0xa5/0x120
[  112.720985][ T8331]  ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0
[  112.721007][ T8331]  kvm_arch_vcpu_ioctl_run+0x1355/0x1de0
[  112.721037][ T8331]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  112.721060][ T8331]  ? lock_acquire+0x1d1/0x380
[  112.721082][ T8331]  ? do_raw_write_lock+0x11e/0x260
[  112.721109][ T8331]  ? find_held_lock+0x2b/0x80
[  112.721126][ T8331]  ? kvm_vcpu_ioctl+0x15c6/0x17b0
[  112.721149][ T8331]  ? kvm_vcpu_ioctl+0x15c6/0x17b0
[  112.721180][ T8331]  kvm_vcpu_ioctl+0x735/0x17b0
[  112.721207][ T8331]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  112.721232][ T8331]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  112.721260][ T8331]  ? do_vfs_ioctl+0x226/0x13e0
[  112.721282][ T8331]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  112.721301][ T8331]  ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530
[  112.721333][ T8331]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  112.721365][ T8331]  ? __fget_files+0x34/0x3d0
[  112.721403][ T8331]  ? selinux_file_ioctl+0x1e0/0x290
[  112.721435][ T8331]  ? selinux_file_ioctl+0x1e7/0x290
[  112.721476][ T8331]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  112.721501][ T8331]  __x64_sys_ioctl+0x18e/0x210
[  112.721525][ T8331]  do_syscall_64+0x123/0x790
[  112.721547][ T8331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.721565][ T8331] RIP: 0033:0x7fe7cad9f559
[  112.721581][ T8331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.721597][ T8331] RSP: 002b:00007fe7cbbc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  112.721616][ T8331] RAX: ffffffffffffffda RBX: 00007fe7cb025fa0 RCX: 00007fe7cad9f559
[  112.721628][ T8331] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a
[  112.721638][ T8331] RBP: 00007fe7cbbc5090 R08: 0000000000000000 R09: 0000000000000000
[  112.721648][ T8331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.721658][ T8331] R13: 00007fe7cb026038 R14: 00007fe7cb025fa0 R15: 00007ffd842802e8
[  112.721683][ T8331]  </TASK>
[  112.907337][ T8335] FAULT_INJECTION: forcing a failure.
[  112.907337][ T8335] name failslab, interval 1, probability 0, space 0, times 0
[  112.907361][ T8335] CPU: 2 UID: 0 PID: 8335 Comm: syz.2.669 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  112.907376][ T8335] Tainted: [L]=SOFTLOCKUP
[  112.907380][ T8335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  112.907386][ T8335] Call Trace:
[  112.907390][ T8335]  <TASK>
[  112.907395][ T8335]  dump_stack_lvl+0x100/0x190
[  112.907415][ T8335]  should_fail_ex.cold+0x5/0xa
[  112.907446][ T8335]  should_failslab+0xc2/0x120
[  112.907468][ T8335]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  112.907483][ T8335]  ? selinux_socket_create+0xe7/0x590
[  112.907498][ T8335]  ? sock_alloc_inode+0x26/0x2c0
[  112.907542][ T8335]  ? __pfx_sock_alloc_inode+0x10/0x10
[  112.907557][ T8335]  sock_alloc_inode+0x26/0x2c0
[  112.907572][ T8335]  ? __pfx_sock_alloc_inode+0x10/0x10
[  112.907585][ T8335]  alloc_inode+0x68/0x250
[  112.907599][ T8335]  sock_alloc+0x42/0x240
[  112.907613][ T8335]  __sock_create+0xc2/0x860
[  112.907631][ T8335]  __sys_socketpair+0x1ec/0x580
[  112.907648][ T8335]  ? __pfx___sys_socketpair+0x10/0x10
[  112.907664][ T8335]  ? __pfx___x64_sys_futex+0x10/0x10
[  112.907676][ T8335]  ? __pfx_ksys_write+0x10/0x10
[  112.907692][ T8335]  __x64_sys_socketpair+0x96/0x100
[  112.907707][ T8335]  ? lockdep_hardirqs_on+0x7d/0x110
[  112.907724][ T8335]  do_syscall_64+0x123/0x790
[  112.907735][ T8335]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.907747][ T8335] RIP: 0033:0x7fe7cad9f559
[  112.907756][ T8335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.907767][ T8335] RSP: 002b:00007fe7cbbc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  112.907778][ T8335] RAX: ffffffffffffffda RBX: 00007fe7cb025fa0 RCX: 00007fe7cad9f559
[  112.907785][ T8335] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001
[  112.907791][ T8335] RBP: 00007fe7cae36b20 R08: 0000000000000000 R09: 0000000000000000
[  112.907798][ T8335] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000
[  112.907805][ T8335] R13: 00007fe7cb026038 R14: 00007fe7cb025fa0 R15: 00007ffd842802e8
[  112.907821][ T8335]  </TASK>
[  112.947785][ T8338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.948101][ T8338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.124770][ T8340] __nla_validate_parse: 40 callbacks suppressed
[  113.124789][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.671'.
[  113.125297][ T8340] hsr_slave_0: left promiscuous mode
[  113.126134][ T8340] hsr_slave_1: left promiscuous mode
[  113.187141][ T8345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.672'.
[  113.200098][   T29] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  113.260511][   T43] kauditd_printk_skb: 16 callbacks suppressed
[  113.260525][   T43] audit: type=1400 audit(1792933377.873:662): avc:  denied  { bind } for  pid=8350 comm="syz.1.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  113.260989][   T43] audit: type=1400 audit(1792933377.873:663): avc:  denied  { write } for  pid=8350 comm="syz.1.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  113.267199][ T8352] sctp: [Deprecated]: syz.1.675 (pid 8352) Use of int in max_burst socket option.
[  113.267199][ T8352] Use struct sctp_assoc_value instead
[  113.273643][ T8353] No control pipe specified
[  113.340654][   T43] audit: type=1400 audit(1792933377.938:664): avc:  denied  { ioctl } for  pid=8361 comm="syz.3.679" path="socket:[25490]" dev="sockfs" ino=25490 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  113.349900][   T43] audit: type=1400 audit(1792933377.947:665): avc:  denied  { setopt } for  pid=8361 comm="syz.3.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  113.351221][ T8362] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  113.385519][   T29] usb 7-1: Using ep0 maxpacket: 32
[  113.386028][   T29] usb 7-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  113.387050][   T29] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  113.387077][   T29] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  113.387113][   T29] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  113.387134][   T29] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  113.387155][   T29] usb 7-1: config 0 interface 0 has no altsetting 0
[  113.404480][   T29] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  113.404511][   T29] usb 7-1: Product: syz
[  113.404525][   T29] usb 7-1: Manufacturer: syz
[  113.404537][   T29] usb 7-1: SerialNumber: syz
[  113.411402][   T29] usb 7-1: config 0 descriptor??
[  113.418046][   T29] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  113.426063][   T29] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  113.464473][ T8365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.680'.
[  113.464506][ T8365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.680'.
[  113.592665][  T930] net_ratelimit: 33 callbacks suppressed
[  113.592684][  T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  113.630148][ T5930] usb 7-1: USB disconnect, device number 12
[  113.636614][ T5930] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  113.688985][ T1795] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  113.691310][ T8389] 9pnet_virtio: no channels available for device syz
[  113.697231][ T8389] SELinux: DCCP has been removed, pid=8389 comm=syz.0.685
[  113.736563][ T8389] kvm [8388]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  113.737166][ T8389] kvm [8388]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  113.743776][ T8390] Invalid logical block size (4)
[  113.850573][ T1795] usb 8-1: Using ep0 maxpacket: 32
[  113.851125][ T1795] usb 8-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  113.852061][ T1795] usb 8-1: config index 0 descriptor too short (expected 156, got 27)
[  113.852079][ T1795] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  113.852100][ T1795] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  113.852113][ T1795] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  113.852126][ T1795] usb 8-1: config 0 interface 0 has no altsetting 0
[  113.854007][ T1795] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  113.854024][ T1795] usb 8-1: Product: syz
[  113.854032][ T1795] usb 8-1: Manufacturer: syz
[  113.854039][ T1795] usb 8-1: SerialNumber: syz
[  113.855916][ T1795] usb 8-1: config 0 descriptor??
[  113.863404][ T1795] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  113.864205][ T1795] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  114.078085][ T1795] usb 8-1: USB disconnect, device number 6
[  114.090003][ T1795] ldusb 8-1:0.0: LD USB Device #0 now disconnected
[  114.323202][ T8399] mmap: syz.2.687 (8399) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  114.359843][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  114.598518][ T8406] FAULT_INJECTION: forcing a failure.
[  114.598518][ T8406] name failslab, interval 1, probability 0, space 0, times 0
[  114.598550][ T8406] CPU: 0 UID: 0 PID: 8406 Comm: syz.2.690 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  114.598578][ T8406] Tainted: [L]=SOFTLOCKUP
[  114.598583][ T8406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  114.598589][ T8406] Call Trace:
[  114.598603][ T8406]  <TASK>
[  114.598608][ T8406]  dump_stack_lvl+0x100/0x190
[  114.598706][ T8406]  should_fail_ex.cold+0x5/0xa
[  114.598725][ T8406]  should_failslab+0xc2/0x120
[  114.598745][ T8406]  __kmalloc_noprof+0xfc/0x840
[  114.598758][ T8406]  ? __reuseport_alloc+0x1d/0x90
[  114.598815][ T8406]  __reuseport_alloc+0x1d/0x90
[  114.598830][ T8406]  reuseport_alloc+0x1ed/0x420
[  114.598847][ T8406]  udp_lib_get_port+0xbd0/0x1b50
[  114.598922][ T8406]  ? __pfx_udp_lib_get_port+0x10/0x10
[  114.598939][ T8406]  ? do_raw_spin_lock+0x128/0x260
[  114.598961][ T8406]  ? __local_bh_enable_ip+0xa5/0x120
[  114.598975][ T8406]  inet_autobind+0xba/0x1a0
[  114.598988][ T8406]  inet_send_prepare+0x244/0x470
[  114.599002][ T8406]  inet_sendmsg+0x43/0x140
[  114.599022][ T8406]  sock_write_iter+0x4fd/0x5d0
[  114.599043][ T8406]  ? __pfx_inet_sendmsg+0x10/0x10
[  114.599064][ T8406]  ? __pfx_sock_write_iter+0x10/0x10
[  114.599095][ T8406]  ? bpf_lsm_file_permission+0x9/0x10
[  114.599124][ T8406]  ? security_file_permission+0x76/0x210
[  114.599186][ T8406]  ? rw_verify_area+0xce/0x6d0
[  114.599210][ T8406]  vfs_write+0x6af/0x1050
[  114.599234][ T8406]  ? __pfx_sock_write_iter+0x10/0x10
[  114.599255][ T8406]  ? __pfx_vfs_write+0x10/0x10
[  114.599267][ T8406]  ? find_held_lock+0x2b/0x80
[  114.599288][ T8406]  ksys_write+0x1f8/0x250
[  114.599301][ T8406]  ? __pfx_ksys_write+0x10/0x10
[  114.599319][ T8406]  do_syscall_64+0x123/0x790
[  114.599358][ T8406]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.599371][ T8406] RIP: 0033:0x7fe7cad9f559
[  114.599381][ T8406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.599392][ T8406] RSP: 002b:00007fe7cbbc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  114.599413][ T8406] RAX: ffffffffffffffda RBX: 00007fe7cb025fa0 RCX: 00007fe7cad9f559
[  114.599420][ T8406] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  114.599427][ T8406] RBP: 00007fe7cae36b20 R08: 0000000000000000 R09: 0000000000000000
[  114.599434][ T8406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  114.599441][ T8406] R13: 00007fe7cb026038 R14: 00007fe7cb025fa0 R15: 00007ffd842802e8
[  114.599456][ T8406]  </TASK>
[  114.608618][ T8406] phram: illegal start address
[  114.658926][   T43] audit: type=1400 audit(1792933379.156:666): avc:  denied  { write } for  pid=8413 comm="syz.3.692" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  114.659204][   T43] audit: type=1400 audit(1792933379.156:667): avc:  denied  { open } for  pid=8413 comm="syz.3.692" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  114.713236][ T6270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  114.722903][   T43] audit: type=1400 audit(1792933379.221:668): avc:  denied  { getopt } for  pid=8413 comm="syz.3.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  114.865478][ T8426] netlink: 'syz.2.697': attribute type 4 has an invalid length.
[  114.991474][ T8438] input: syz0 as /devices/virtual/input/input11
[  114.994144][   T43] audit: type=1400 audit(1792933379.470:669): avc:  denied  { write } for  pid=8433 comm="syz.0.698" name="usb_gadget" dev="configfs" ino=3895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  114.994473][   T43] audit: type=1400 audit(1792933379.470:670): avc:  denied  { create } for  pid=8433 comm="syz.0.698" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[  114.997505][   T43] audit: type=1400 audit(1792933379.470:671): avc:  denied  { write } for  pid=8433 comm="syz.0.698" name="functions" dev="configfs" ino=26145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  115.011509][   T68] Bluetooth: hci1: unexpected event for opcode 0x2010
[  115.065234][ T8438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.701'.
[  115.069191][ T8438] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  115.077605][ T8438] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  115.077889][ T8438] VFS: Can't find a romfs filesystem on dev nullb0.
[  115.077889][ T8438] 
[  115.102593][ T8447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.703'.
[  115.111996][ T8446] block nbd3: shutting down sockets
[  115.266466][ T8464] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [100]
[  115.266508][ T8464] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4]
[  115.266516][ T8464] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[  115.266522][ T8464] One or more global auth toks could not properly register; rc = [-22]
[  115.266539][ T8464] Error validating options; rc = [-22]
[  115.267889][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.709'.
[  115.345930][ T5570] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  115.440545][ T8471] syz_tun (unregistering): left allmulticast mode
[  115.530418][ T5570] usb 5-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.03
[  115.531127][ T5570] usb 5-1: Dual-Role OTG device on HNP port
[  115.531417][ T5570] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.553486][ T5570] gspca_main: spca501-2.14.0 probing 0000:0000
[  115.554461][ T5570] gspca_spca501: reg write: error -32
[  115.554472][ T5570] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  115.554530][ T5570] spca501 5-1:1.0: probe with driver spca501 failed with error -22
[  115.555502][ T5570] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  115.603471][ T8471] i801_smbus 0000:00:1f.3: SMBus using PCI interrupt
[  115.632324][ T8471] i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD
[  115.838128][ T6270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  115.956727][ T8482] device-mapper: table: 248:0: flakey: Feature error_writes conflicts with feature drop_writes (-EINVAL)
[  115.956751][ T8482] device-mapper: ioctl: error adding target to table
[  116.140277][ T8485] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  116.199104][ T8487] xt_ipcomp: unknown flags 1D
[  116.402613][   T68] Bluetooth: hci1: unexpected event for opcode 0x0c5b
[  116.611549][ T8515] device-mapper: table: 248:3: adding target device ram3 caused an alignment inconsistency: physical_block_size=4096, logical_block_size=512, alignment_offset=0, start=512
[  116.611627][ T8515] device-mapper: table: 248:3: adding target device ram3 caused an alignment inconsistency: physical_block_size=4096, logical_block_size=512, alignment_offset=0, start=512
[  116.840577][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.726'.
[  116.964349][ T6270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  116.984764][ T8523] netlink: 168 bytes leftover after parsing attributes in process `syz.2.727'.
[  117.376839][ T8545] rxe_eth0 speed is unknown, defaulting to 1000
[  117.654248][ T5570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.089470][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.354927][ T8552] ptrace attach of "/syz-executor exec"[5782] was attempted by ""[8552]
[  118.358620][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.358767][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.491383][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.738'.
[  118.498628][ T8556] input: syz0 as /devices/virtual/input/input12
[  118.599322][ T8571] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  118.656302][ T8577] __nla_validate_parse: 64 callbacks suppressed
[  118.656315][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.743'.
[  118.656329][ T8577] netlink: 20 bytes leftover after parsing attributes in process `syz.2.743'.
[  118.789132][ T8600] netlink: 'syz.0.748': attribute type 1 has an invalid length.
[  118.921948][ T1795] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  118.928025][ T8612] netlink: 1360 bytes leftover after parsing attributes in process `syz.3.753'.
[  118.928044][ T8612] netlink: 456 bytes leftover after parsing attributes in process `syz.3.753'.
[  118.928051][ T8612] netlink: 24 bytes leftover after parsing attributes in process `syz.3.753'.
[  118.934618][ T8610] netlink: 20 bytes leftover after parsing attributes in process `syz.0.752'.
[  118.969397][ T8616] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  118.972887][ T8616] uhci_hcd 0000:00:1d.0: remove, state 4
[  118.972984][ T8616] usb usb2: USB disconnect, device number 1
[  119.009002][ T8616] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered
[  119.018705][ 
** replaying previous printk message **
[  119.018705][ T8616] ==================================================================
[  119.018716][ T8616] BUG: KASAN: slab-use-after-free in acpi_ns_get_attached_object+0x148/0x1b0
[  119.018820][ T8616] Read of size 1 at addr ffff8880244e53b0 by task syz.3.754/8616
[  119.018830][ T8616] 
[  119.018845][ T8616] CPU: 0 UID: 0 PID: 8616 Comm: syz.3.754 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  119.018862][ T8616] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  119.018866][ T8616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  119.018873][ T8616] Call Trace:
[  119.018885][ T8616]  <TASK>
[  119.018890][ T8616]  dump_stack_lvl+0x100/0x190
[  119.018930][ T8616]  print_report+0x13d/0x4b0
[  119.018949][ T8616]  ? __virt_addr_valid+0x239/0x430
[  119.018966][ T8616]  ? acpi_ns_get_attached_object+0x148/0x1b0
[  119.018980][ T8616]  kasan_report+0xdf/0x1c0
[  119.018995][ T8616]  ? acpi_ns_get_attached_object+0x148/0x1b0
[  119.019018][ T8616]  acpi_ns_get_attached_object+0x148/0x1b0
[  119.019039][ T8616]  acpi_ex_resolve_node_to_value+0xb7/0x9a0
[  119.019060][ T8616]  ? acpi_ut_trace_ptr+0x1d2/0x2a0
[  119.019080][ T8616]  ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10
[  119.019105][ T8616]  ? acpi_ds_create_operand+0x267/0xc20
[  119.019125][ T8616]  acpi_ex_resolve_to_value+0x3da/0xcd0
[  119.019147][ T8616]  ? __pfx_acpi_ex_resolve_to_value+0x10/0x10
[  119.019168][ T8616]  ? __pfx_acpi_ns_lookup+0x10/0x10
[  119.019185][ T8616]  ? __asan_memset+0x23/0x50
[  119.019203][ T8616]  ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[  119.019222][ T8616]  acpi_ds_evaluate_name_path+0x30d/0x4a0
[  119.019233][ T8616]  ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10
[  119.019244][ T8616]  ? acpi_ps_get_next_namepath+0x1f6/0xa10
[  119.019254][ T8616]  ? acpi_ut_trace_ptr+0x191/0x2a0
[  119.019267][ T8616]  acpi_ds_exec_end_op+0xb78/0x1e60
[  119.019278][ T8616]  ? __pfx_acpi_ds_exec_end_op+0x10/0x10
[  119.019288][ T8616]  acpi_ps_parse_loop+0x5e1/0x26e0
[  119.019300][ T8616]  ? __pfx_acpi_ps_parse_loop+0x10/0x10
[  119.019310][ T8616]  ? kmem_cache_alloc_noprof+0x2d5/0x6a0
[  119.019322][ T8616]  ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[  119.019353][ T8616]  ? acpi_ut_create_thread_state+0x6d/0x170
[  119.019366][ T8616]  acpi_ps_parse_aml+0x81e/0x1120
[  119.019379][ T8616]  acpi_ps_execute_method+0x5c4/0xe90
[  119.019394][ T8616]  acpi_ns_evaluate+0x640/0x1670
[  119.019409][ T8616]  acpi_ut_evaluate_object+0xf7/0x610
[  119.019425][ T8616]  acpi_rs_get_prt_method_data+0xa0/0x150
[  119.019439][ T8616]  ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10
[  119.019454][ T8616]  ? acpi_ut_status_exit+0x111/0x1c0
[  119.019472][ T8616]  ? acpi_rs_validate_parameters+0x104/0x210
[  119.019486][ T8616]  acpi_get_irq_routing_table+0xb8/0x140
[  119.019501][ T8616]  ? __pfx_acpi_get_irq_routing_table+0x10/0x10
[  119.019514][ T8616]  ? mark_held_locks+0x40/0x70
[  119.019530][ T8616]  acpi_pci_irq_find_prt_entry+0x178/0xdd0
[  119.019546][ T8616]  ? preempt_schedule_thunk+0x16/0x40
[  119.019561][ T8616]  ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10
[  119.019577][ T8616]  acpi_pci_irq_lookup+0x8e/0x6b0
[  119.019591][ T8616]  ? __pfx_acpi_pci_irq_lookup+0x10/0x10
[  119.019607][ T8616]  acpi_pci_irq_disable+0x1a8/0x360
[  119.019622][ T8616]  ? __pfx_acpi_pci_irq_disable+0x10/0x10
[  119.019636][ T8616]  pcibios_disable_device+0x89/0xb0
[  119.019712][ T8616]  do_pci_disable_device+0x9f/0x100
[  119.019728][ T8616]  ? __pfx_do_pci_disable_device+0x10/0x10
[  119.019741][ T8616]  ? hub_suspend+0x143/0x9e0
[  119.019777][ T8616]  ? kfree+0x22b/0x6d0
[  119.019787][ T8616]  pci_disable_device+0x130/0x270
[  119.019801][ T8616]  usb_hcd_pci_remove+0x1ed/0x300
[  119.019812][ T8616]  pci_device_remove+0xb2/0x1d0
[  119.019824][ T8616]  ? __pfx_pci_device_remove+0x10/0x10
[  119.019837][ T8616]  device_remove+0xcb/0x180
[  119.019857][ T8616]  device_release_driver_internal+0x44e/0x620
[  119.019871][ T8616]  pci_stop_bus_device+0x120/0x160
[  119.019892][ T8616]  pci_stop_and_remove_bus_device+0x58/0xa0
[  119.019905][ T8616]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[  119.019918][ T8616]  remove_store+0x123/0x140
[  119.019933][ T8616]  ? __pfx_remove_store+0x10/0x10
[  119.019947][ T8616]  ? find_held_lock+0x2b/0x80
[  119.019958][ T8616]  ? sysfs_file_kobj+0xe4/0x290
[  119.019998][ T8616]  ? sysfs_file_kobj+0xe4/0x290
[  119.020015][ T8616]  ? __pfx_remove_store+0x10/0x10
[  119.020031][ T8616]  dev_attr_store+0x58/0x80
[  119.020048][ T8616]  ? __pfx_dev_attr_store+0x10/0x10
[  119.020064][ T8616]  sysfs_kf_write+0xf2/0x150
[  119.020089][ T8616]  kernfs_fop_write_iter+0x3e0/0x5f0
[  119.020110][ T8616]  ? __pfx_sysfs_kf_write+0x10/0x10
[  119.020137][ T8616]  vfs_write+0x6af/0x1050
[  119.020157][ T8616]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  119.020182][ T8616]  ? __pfx_vfs_write+0x10/0x10
[  119.020201][ T8616]  ? find_held_lock+0x2b/0x80
[  119.020223][ T8616]  ksys_write+0x12a/0x250
[  119.020242][ T8616]  ? __pfx_ksys_write+0x10/0x10
[  119.020267][ T8616]  do_syscall_64+0x123/0x790
[  119.020284][ T8616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.020304][ T8616] RIP: 0033:0x7f439159f559
[  119.020319][ T8616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.020337][ T8616] RSP: 002b:00007f4392546028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  119.020367][ T8616] RAX: ffffffffffffffda RBX: 00007f4391825fa0 RCX: 00007f439159f559
[  119.020382][ T8616] RDX: 0000000000000001 RSI: 0000200000002180 RDI: 0000000000000006
[  119.020395][ T8616] RBP: 00007f4391636b20 R08: 0000000000000000 R09: 0000000000000000
[  119.020407][ T8616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.020416][ T8616] R13: 00007f4391826038 R14: 00007f4391825fa0 R15: 00007fff0f8d73a8
[  119.020435][ T8616]  </TASK>
[  119.020443][ T8616] 
[  119.020446][ T8616] Allocated by task 1:
[  119.020453][ T8616]  kasan_save_stack+0x30/0x50
[  119.020481][ T8616]  kasan_save_track+0x14/0x30
[  119.020502][ T8616]  __kasan_slab_alloc+0x89/0x90
[  119.020524][ T8616]  kmem_cache_alloc_noprof+0x269/0x6a0
[  119.020541][ T8616]  acpi_ut_allocate_object_desc_dbg+0x86/0x240
[  119.020568][ T8616]  acpi_ut_create_internal_object_dbg+0x51/0x260
[  119.020592][ T8616]  acpi_ds_build_internal_object+0x173/0x790
[  119.020613][ T8616]  acpi_ds_create_node+0xe3/0x280
[  119.020627][ T8616]  acpi_ds_exec_end_op+0x10cf/0x1e60
[  119.020635][ T8616]  acpi_ps_parse_loop+0x5e1/0x26e0
[  119.020645][ T8616]  acpi_ps_parse_aml+0x81e/0x1120
[  119.020654][ T8616]  acpi_ps_execute_table+0x393/0x500
[  119.020665][ T8616]  acpi_ns_execute_table+0x596/0x970
[  119.020678][ T8616]  acpi_ns_parse_table+0xcb/0x160
[  119.020690][ T8616]  acpi_ns_load_table+0xc9/0x490
[  119.020702][ T8616]  acpi_tb_load_namespace+0x2b0/0x8f0
[  119.020710][ T8616]  acpi_load_tables+0x89/0x160
[  119.020769][ T8616]  acpi_init+0x146/0x840
[  119.020779][ T8616]  do_one_initcall+0x11c/0x6f0
[  119.020790][ T8616]  kernel_init_freeable+0x6ea/0x7b0
[  119.020805][ T8616]  kernel_init+0x21/0x1d0
[  119.020817][ T8616]  ret_from_fork+0x730/0xd60
[  119.020829][ T8616]  ret_from_fork_asm+0x1a/0x30
[  119.020839][ T8616] 
[  119.020841][ T8616] Freed by task 5946:
[  119.020846][ T8616]  kasan_save_stack+0x30/0x50
[  119.020857][ T8616]  kasan_save_track+0x14/0x30
[  119.020868][ T8616]  kasan_save_free_info+0x3b/0x70
[  119.020877][ T8616]  __kasan_slab_free+0x5f/0x80
[  119.020889][ T8616]  kmem_cache_free+0x127/0x6c0
[  119.020897][ T8616]  acpi_os_release_object+0x1c/0x30
[  119.020909][ T8616]  acpi_ut_delete_object_desc+0xea/0x130
[  119.020924][ T8616]  acpi_ut_update_ref_count.part.0+0x510/0x2250
[  119.020936][ T8616]  acpi_ut_update_object_reference+0x5f9/0x800
[  119.020948][ T8616]  acpi_ut_remove_reference+0x192/0x1d0
[  119.020962][ T8616]  acpi_rs_get_prt_method_data+0xcd/0x150
[  119.020975][ T8616]  acpi_get_irq_routing_table+0xb8/0x140
[  119.020988][ T8616]  acpi_pci_irq_find_prt_entry+0x178/0xdd0
[  119.021001][ T8616]  acpi_pci_irq_lookup+0x8e/0x6b0
[  119.021013][ T8616]  acpi_pci_irq_disable+0x1a8/0x360
[  119.021025][ T8616]  pcibios_disable_device+0x89/0xb0
[  119.021038][ T8616]  do_pci_disable_device+0x9f/0x100
[  119.021050][ T8616]  pci_disable_device+0x130/0x270
[  119.021061][ T8616]  virtio_pci_remove+0xcf/0x110
[  119.021073][ T8616]  pci_device_remove+0xb2/0x1d0
[  119.021082][ T8616]  device_remove+0xcb/0x180
[  119.021091][ T8616]  device_release_driver_internal+0x44e/0x620
[  119.021102][ T8616]  pci_stop_bus_device+0x120/0x160
[  119.021113][ T8616]  pci_stop_and_remove_bus_device+0x58/0xa0
[  119.021125][ T8616]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[  119.021137][ T8616]  remove_store+0x123/0x140
[  119.021150][ T8616]  dev_attr_store+0x58/0x80
[  119.021160][ T8616]  sysfs_kf_write+0xf2/0x150
[  119.021173][ T8616]  kernfs_fop_write_iter+0x3e0/0x5f0
[  119.021186][ T8616]  vfs_write+0x6af/0x1050
[  119.021197][ T8616]  ksys_write+0x12a/0x250
[  119.021208][ T8616]  do_syscall_64+0x123/0x790
[  119.021216][ T8616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.021226][ T8616] 
[  119.021228][ T8616] The buggy address belongs to the object at ffff8880244e53a8
[  119.021228][ T8616]  which belongs to the cache Acpi-Operand of size 72
[  119.021237][ T8616] The buggy address is located 8 bytes inside of
[  119.021237][ T8616]  freed 72-byte region [ffff8880244e53a8, ffff8880244e53f0)
[  119.021247][ T8616] 
[  119.021249][ T8616] The buggy address belongs to the physical page:
[  119.021255][ T8616] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880244e5958 pfn:0x244e5
[  119.021265][ T8616] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[  119.021274][ T8616] page_type: f5(slab)
[  119.021284][ T8616] raw: 00fff00000000200 ffff88801d44da40 ffffea0000914790 ffffea0000914090
[  119.021293][ T8616] raw: ffff8880244e5958 000000020027000f 00000000f5000000 0000000000000000
[  119.021298][ T8616] page dumped because: kasan: bad access detected
[  119.021303][ T8616] page_owner tracks the page as allocated
[  119.021306][ T8616] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3434763301
[  119.021322][ T8616]  post_alloc_hook+0xfd/0x120
[  119.021338][ T8616]  get_page_from_freelist+0x1113/0x35e0
[  119.021349][ T8616]  __alloc_frozen_pages_noprof+0x2f6/0x3190
[  119.021359][ T8616]  new_slab+0xb1/0x6d0
[  119.021368][ T8616]  refill_objects+0xe3/0x410
[  119.021377][ T8616]  __pcs_replace_empty_main+0x35e/0x650
[  119.021385][ T8616]  kmem_cache_alloc_noprof+0x4bf/0x6a0
[  119.021396][ T8616]  acpi_ut_allocate_object_desc_dbg+0x86/0x240
[  119.021411][ T8616]  acpi_ut_create_internal_object_dbg+0x51/0x260
[  119.021441][ T8616]  acpi_ds_build_internal_object+0x173/0x790
[  119.021463][ T8616]  acpi_ds_build_internal_package_obj+0x481/0xe60
[  119.021479][ T8616]  acpi_ds_eval_data_object_operands+0x2fd/0x640
[  119.021496][ T8616]  acpi_ds_exec_end_op+0xe41/0x1e60
[  119.021505][ T8616]  acpi_ps_parse_loop+0x5e1/0x26e0
[  119.021515][ T8616]  acpi_ps_parse_aml+0x81e/0x1120
[  119.021525][ T8616]  acpi_ps_execute_table+0x393/0x500
[  119.021537][ T8616] page_owner free stack trace missing
[  119.021540][ T8616] 
[  119.021542][ T8616] Memory state around the buggy address:
[  119.021548][ T8616]  ffff8880244e5280: 00 00 00 00 00 00 00 fc fc fc fc fa fb fb fb fb
[  119.021555][ T8616]  ffff8880244e5300: fb fb fb fb fc fc fc fc fa fb fb fb fb fb fb fb
[  119.021563][ T8616] >ffff8880244e5380: fb fc fc fc fc fa fb fb fb fb fb fb fb fb fc fc
[  119.021568][ T8616]                                      ^
[  119.021574][ T8616]  ffff8880244e5400: fc fc fa fb fb fb fb fb fb fb fb fc fc fc fc fa
[  119.021581][ T8616]  ffff8880244e5480: fb fb fb fb fb fb fb fb fc fc fc fc fa fb fb fb
[  119.021587][ T8616] ==================================================================
[  119.025072][ T8616] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  119.401764][ T8616] CPU: 0 UID: 0 PID: 8616 Comm: syz.3.754 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  119.405200][ T8616] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  119.407486][ T8616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  119.411486][ T8616] Call Trace:
[  119.412619][ T8616]  <TASK>
[  119.413728][ T8616]  dump_stack_lvl+0x100/0x190
[  119.415422][ T8616]  vpanic+0x553/0x970
[  119.417039][ T8616]  ? __pfx_vpanic+0x10/0x10
[  119.418851][ T8616]  ? mark_held_locks+0x40/0x70
[  119.420594][ T8616]  ? acpi_ns_get_attached_object+0x148/0x1b0
[  119.422640][ T8616]  panic+0xd1/0xe0
[  119.423825][ T8616]  ? __pfx_panic+0x10/0x10
[  119.425227][ T8616]  ? acpi_ns_get_attached_object+0x148/0x1b0
[  119.427106][ T8616]  ? preempt_schedule+0x57/0xd0
[  119.428779][ T8616]  check_panic_on_warn.cold+0x19/0x34
[  119.430566][ T8616]  end_report.part.0+0x3a/0x90
[  119.432011][ T8616]  kasan_report.cold+0xe/0x18
[  119.433445][ T8616]  ? acpi_ns_get_attached_object+0x148/0x1b0
[  119.435243][ T8616]  acpi_ns_get_attached_object+0x148/0x1b0
[  119.437016][ T8616]  acpi_ex_resolve_node_to_value+0xb7/0x9a0
[  119.438967][ T8616]  ? acpi_ut_trace_ptr+0x1d2/0x2a0
[  119.440523][ T8616]  ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10
[  119.442559][ T8616]  ? acpi_ds_create_operand+0x267/0xc20
[  119.444275][ T8616]  acpi_ex_resolve_to_value+0x3da/0xcd0
[  119.446007][ T8616]  ? __pfx_acpi_ex_resolve_to_value+0x10/0x10
[  119.448088][ T8616]  ? __pfx_acpi_ns_lookup+0x10/0x10
[  119.449869][ T8616]  ? __asan_memset+0x23/0x50
[  119.451375][ T8616]  ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[  119.453160][ T8616]  acpi_ds_evaluate_name_path+0x30d/0x4a0
[  119.454894][ T8616]  ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10
[  119.456834][ T8616]  ? acpi_ps_get_next_namepath+0x1f6/0xa10
[  119.458735][ T8616]  ? acpi_ut_trace_ptr+0x191/0x2a0
[  119.460326][ T8616]  acpi_ds_exec_end_op+0xb78/0x1e60
[  119.461914][ T8616]  ? __pfx_acpi_ds_exec_end_op+0x10/0x10
[  119.463647][ T8616]  acpi_ps_parse_loop+0x5e1/0x26e0
[  119.465276][ T8616]  ? __pfx_acpi_ps_parse_loop+0x10/0x10
[  119.467004][ T8616]  ? kmem_cache_alloc_noprof+0x2d5/0x6a0
[  119.469059][ T8616]  ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[  119.470958][ T8616]  ? acpi_ut_create_thread_state+0x6d/0x170
[  119.472806][ T8616]  acpi_ps_parse_aml+0x81e/0x1120
[  119.474387][ T8616]  acpi_ps_execute_method+0x5c4/0xe90
[  119.476052][ T8616]  acpi_ns_evaluate+0x640/0x1670
[  119.477648][ T8616]  acpi_ut_evaluate_object+0xf7/0x610
[  119.479318][ T8616]  acpi_rs_get_prt_method_data+0xa0/0x150
[  119.481106][ T8616]  ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10
[  119.483078][ T8616]  ? acpi_ut_status_exit+0x111/0x1c0
[  119.484714][ T8616]  ? acpi_rs_validate_parameters+0x104/0x210
[  119.486578][ T8616]  acpi_get_irq_routing_table+0xb8/0x140
[  119.488338][ T8616]  ? __pfx_acpi_get_irq_routing_table+0x10/0x10
[  119.490273][ T8616]  ? mark_held_locks+0x40/0x70
[  119.491773][ T8616]  acpi_pci_irq_find_prt_entry+0x178/0xdd0
[  119.493543][ T8616]  ? preempt_schedule_thunk+0x16/0x40
[  119.495153][ T8616]  ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10
[  119.497063][ T8616]  acpi_pci_irq_lookup+0x8e/0x6b0
[  119.498652][ T8616]  ? __pfx_acpi_pci_irq_lookup+0x10/0x10
[  119.500414][ T8616]  acpi_pci_irq_disable+0x1a8/0x360
[  119.502068][ T8616]  ? __pfx_acpi_pci_irq_disable+0x10/0x10
[  119.503835][ T8616]  pcibios_disable_device+0x89/0xb0
[  119.505447][ T8616]  do_pci_disable_device+0x9f/0x100
[  119.507088][ T8616]  ? __pfx_do_pci_disable_device+0x10/0x10
[  119.509119][ T8616]  ? hub_suspend+0x143/0x9e0
[  119.510615][ T8616]  ? kfree+0x22b/0x6d0
[  119.511905][ T8616]  pci_disable_device+0x130/0x270
[  119.513474][ T8616]  usb_hcd_pci_remove+0x1ed/0x300
[  119.515074][ T8616]  pci_device_remove+0xb2/0x1d0
[  119.516603][ T8616]  ? __pfx_pci_device_remove+0x10/0x10
[  119.518604][ T8616]  device_remove+0xcb/0x180
[  119.520133][ T8616]  device_release_driver_internal+0x44e/0x620
[  119.522100][ T8616]  pci_stop_bus_device+0x120/0x160
[  119.523699][ T8616]  pci_stop_and_remove_bus_device+0x58/0xa0
[  119.525557][ T8616]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[  119.527631][ T8616]  remove_store+0x123/0x140
[  119.529066][ T8616]  ? __pfx_remove_store+0x10/0x10
[  119.530652][ T8616]  ? find_held_lock+0x2b/0x80
[  119.532395][ T8616]  ? sysfs_file_kobj+0xe4/0x290
[  119.533937][ T8616]  ? sysfs_file_kobj+0xe4/0x290
[  119.535551][ T8616]  ? __pfx_remove_store+0x10/0x10
[  119.537128][ T8616]  dev_attr_store+0x58/0x80
[  119.538585][ T8616]  ? __pfx_dev_attr_store+0x10/0x10
[  119.540202][ T8616]  sysfs_kf_write+0xf2/0x150
[  119.541619][ T8616]  kernfs_fop_write_iter+0x3e0/0x5f0
[  119.543216][ T8616]  ? __pfx_sysfs_kf_write+0x10/0x10
[  119.544795][ T8616]  vfs_write+0x6af/0x1050
[  119.546078][ T8616]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  119.547818][ T8616]  ? __pfx_vfs_write+0x10/0x10
[  119.549260][ T8616]  ? find_held_lock+0x2b/0x80
[  119.550754][ T8616]  ksys_write+0x12a/0x250
[  119.552107][ T8616]  ? __pfx_ksys_write+0x10/0x10
[  119.553636][ T8616]  do_syscall_64+0x123/0x790
[  119.555095][ T8616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.556908][ T8616] RIP: 0033:0x7f439159f559
[  119.558304][ T8616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.564081][ T8616] RSP: 002b:00007f4392546028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  119.566572][ T8616] RAX: ffffffffffffffda RBX: 00007f4391825fa0 RCX: 00007f439159f559
[  119.569002][ T8616] RDX: 0000000000000001 RSI: 0000200000002180 RDI: 0000000000000006
[  119.571488][ T8616] RBP: 00007f4391636b20 R08: 0000000000000000 R09: 0000000000000000
[  119.573951][ T8616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.576389][ T8616] R13: 00007f4391826038 R14: 00007f4391825fa0 R15: 00007fff0f8d73a8
[  119.578875][ T8616]  </TASK>
[  119.580477][ T8616] Kernel Offset: disabled
[  119.581882][ T8616] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:03:05  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85bc8f45 RDI=ffffffff9cf11f80 RBP=ffffffff9cf11f40 RSP=ffffc90004eee9e0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552
R12=0000000000000000 R13=0000000000000066 R14=000000000000000e R15=ffffc90004eeecf8
RIP=ffffffff85bc8f6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f43925466c0 ffffffff 00c00000
GS =0000 ffff8880d44b4000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007effb5fecc40 CR3=0000000027cba000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000005000001 Opmask01=0000000000000001 Opmask02=0000000000000040 Opmask03=0000000000000000
Opmask04=00000000ff7fffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6f12e21b 00007ffc6f12e21b
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6f12e720 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6f12e720 0000003000000018
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 697063615f786670 5f5f203f20205d36 31363854205b5d33 33323931302e3931
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3231353d74726174 73202c303d746573 66666f5f746e656d 6e67696c61202c32
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 31353d657a69735f 6b636f6c625f6c61 6369676f6c202c36 3930343d657a6973
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f6b636f6c625f6c 6163697379687020 3a79636e65747369 736e6f636e692074
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e656d6e67696c61 206e612064657375 616320336d617220 6563697665642074
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3136323d6f6e6920 2273666769666e6f 63223d7665642022 736e6f6974636e75
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=ffff8880287ccb00
RSI=ffffffff820159ce RDI=ffff8880287ccb00 RBP=ffff88806a044500 RSP=ffffc90004bf7550
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffffed10050f9c13 R13=0000000000000003 R14=ffffed100d4088a1 R15=0000000000000001
RIP=ffffffff820159d0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d45b4000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007effb4171ff8 CR3=0000000035f4f000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 656d69745f656c64 692e7166622e6f69
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd842807d6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd842807d6 00007ffd842807dc
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7cae3714a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7cae37184
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7cae372e8
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7cae37176
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=00000000000f4c9f RBX=ffff888020aa4b00 RCX=ffffffff8be65325 RDX=0000000000000001
RSI=ffffffff8e6161a6 RDI=ffffffff8c831680 RBP=ffffed1004154960 RSP=ffffc90000187e00
R8 =0000000000000001 R9 =ffffed100d446825 R10=ffff88806a23412b R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=dffffc0000000000
RIP=ffffffff8be637bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d46b4000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c2fbd8a CR3=0000000028a4e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000008000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fefffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f69169f9e80
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f69169f9e80
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555621d9ad8
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0401c70800060145 ce06ec0400018408 0003800401c70800 080248a00030656c
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080007000c0008
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0482801000000401 000000080606016d e604c08080800800 6003001000500300
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c7100008024de400 6d6f7264632f7665 642f01ffffffffff ffffffe908028003
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010180040cbc0800 0100000208060601 12b2028802000186 0318020001840300
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200018203460200 01800300040006c6 8484080002800401 c7100008024de400
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d6f7264632f7665 642f01ffffffffff ffffffe908028003 0482801000000401
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000080606016d e604c08080800800 6003001000500300 1000400302100030
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=fffffbfff21be778 RBX=fffffbfff21be779 RCX=ffffffff81ec1619 RDX=0000000000000000
RSI=0000000000000004 RDI=ffffffff90df3bc0 RBP=fffffbfff21be778 RSP=ffffc900007cf938
R8 =0000000000000000 R9 =fffffbfff21be778 R10=ffffffff90df3bc3 R11=3d3d3d3d3d3d3d3d
R12=0000000000000000 R13=ffffc900007cfda8 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff828726be RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d47b4000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000055555ff270a8 CR3=0000000058a97000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd842807d6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd842807d6 00007ffd842807dc
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7cae3714a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7cae37184
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7cae372e8
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7cae37176
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3307509122aca1e0 24cd62f3991a44a5 30e0f6815f12e49d c222e24e735c8056
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7caff95f8 00007fe7caff95c8 00007fe7caff9600 00007fe7caff95e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000