last executing test programs:

3m33.279570775s ago: executing program 0 (id=50):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000140), 0x0)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x109040, 0x0)
ioctl$DVD_AUTH(r1, 0x5392, &(0x7f0000000100)=@hrpcs={0xb, 0xa})
setns(0xc9, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0)
close(r0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002740)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback, 0x4d6}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x80}, {{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4}, {0x0, 0x9}, 0x3, 0x0, 0x0, 0x0, 0x2, 0x2}, 0xfffffff9, 0x2}}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/net/bridge0/bridge/multicast_querier\x00', 0x2, 0xe)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002580)={'netdevsim0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0x9}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x101, 0x0, 0x7, 0x3}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c840)
read$FUSE(r6, &(0x7f0000000540)={0x2020}, 0x2020)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/net\x00')
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r9=>0x0})
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r10, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3m33.150312373s ago: executing program 0 (id=51):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0xcb)
mount(&(0x7f00000000c0)=@filename='./lower\x00', &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140)='ecryptfs\x00', 0x100000000000000, &(0x7f0000000180)='ecryptfs_sig=0123456789abcdef\x00')

3m33.150017536s ago: executing program 0 (id=52):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000000000006110b0000000000063514800000000009500090000000000827573595f16aaba19dee4850fad9dc34ae0ec78734eb5ff8c80d4457498c5a7b0c59abd315c61996d140187d64787b68c0a1b3e361a405ed57dc367c33abfd46e35"], &(0x7f0000000180)='GPL\x00', 0x5, 0xfd90, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000002c0), 0x0, 0x10, &(0x7f0000000300), 0x85}, 0x52)
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000001e40)={0x4, 0x0, 0x0, 0x170, 0xfffffffffffffc99, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@raid={0x0, 0x40, 0x0, 0x0, 'raid\x00', {'raid6_zr', 0x20, '3 64 delta_disks 1', 0x20, 0x0, [{0x20, @none, 0x20, @ram={'/dev/ram', 0x0}}]}}]})

3m33.089959998s ago: executing program 0 (id=53):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0)
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7)
mkdir(&(0x7f0000000100)='./mytrace\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./mytrace\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0)
readv(r1, &(0x7f0000000280)=[{&(0x7f0000000600)=""/118, 0x76}], 0x1)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f00000002c0)={<r2=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f0000000680)={<r3=>0x0, 0x0, r1})
r4 = syz_open_dev$dri(&(0x7f00000006c0), 0x1, 0xc40)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000700)={<r5=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01864c1, &(0x7f0000000740)={r5})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000780)={<r6=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f00000007c0)={<r7=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000800)={<r8=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000840)={<r9=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f00000008c0)={&(0x7f0000000880)=[0x0, 0x0, r2, 0x0, r3, r5, r6, r7, r8, r9], 0xa})
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
r11 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r12=>0x0})
sendmsg$nl_xfrm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newsa={0x15c, 0x1a, 0x713, 0x0, 0x25dfdbff, {{@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in=@local, 0x104d2, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x5, 0x0, 0x800, 0xe91, 0xffffffff00000001, 0x10000000, 0x80000001, 0x543}, {0x1000000000004, 0x7fffffffffffffff, 0x100, 0xc}, {}, 0x70bd26, 0x3505, 0xa, 0x4, 0x40, 0x54}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r12}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400), 0x40, &(0x7f0000000440)={[{@index_off}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

3m33.000466015s ago: executing program 0 (id=54):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100004365000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=ANY=[@ANYBLOB="2c000000210a01e6ffffffffffffff000aa600010900020073797a31000000000800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

3m32.710597449s ago: executing program 0 (id=55):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0xa, 0x0, [{0xbb6, 0x0, 0xb}, {0xc0011020, 0x0, 0x4000000000000000}, {0x39d, 0x0, 0x5b}, {0xc001001f, 0x0, 0x5}, {0x865, 0x0, 0x41ad}, {0x371, 0x0, 0x5}, {0x4000036e, 0x0, 0x1}, {0x852, 0x0, 0x2}, {0x9e, 0x0, 0x3}, {0xa31, 0x0, 0xaf7}]})
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x109000, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000380)=0xe)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0xc0001, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000400)=0x1)
ioctl$PPPIOCSMAXCID(r3, 0x80207450, 0x0)
ioctl$DVB_DEMUX_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000000040)={0xfffffffb, 0x80000, <r4=>r0})
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r4, 0x4068aea3, &(0x7f0000000180)={0xa3, 0x0, &(0x7f0000000080)})
syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0)
io_uring_register$IORING_REGISTER_SEND_MSG_RING(r4, 0x1f, &(0x7f00000019c0)={0x28, 0x67, 0x0, r4, &(0x7f00000009c0)="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", 0x1, 0x8, 0x3, 0x1, {0x0, 0x0, r0, 0x3}}, 0x1)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0xffffffffffffffc4)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x0, 0x0, @ioapic={0x26ffc, 0x20f, 0x0, 0x3, 0x0, [{0x8b, 0x88, 0x7e, '\x00', 0xbd}, {0x8d, 0xf2, 0x6, '\x00', 0x8}, {0x3, 0xae, 0x1, '\x00', 0x80}, {0x4, 0x9, 0x2, '\x00', 0xe}, {0x9, 0xf7, 0x0, '\x00', 0x2}, {0x8, 0x1, 0x15, '\x00', 0x8}, {0x2a, 0x72, 0x2, '\x00', 0x6b}, {0x8, 0x5, 0x3, '\x00', 0x4}, {0x27, 0x8, 0x8, '\x00', 0x8}, {0x9b, 0x7, 0x80, '\x00', 0x5}, {0x0, 0x1a, 0x1, '\x00', 0x4}, {0x9, 0xda, 0xb, '\x00', 0x3d}, {0x6, 0x3, 0x5}, {0x40, 0x9, 0x3, '\x00', 0x4}, {0xf, 0x20, 0x1, '\x00', 0x8}, {0x24, 0x8, 0x7, '\x00', 0x1}, {0x2, 0x4, 0x80, '\x00', 0x4b}, {0x0, 0x1, 0x3, '\x00', 0x40}, {0x6, 0x2, 0xf}, {0x7, 0x8, 0xf9, '\x00', 0x6}, {0x1, 0x8, 0x0, '\x00', 0x7}, {0x6, 0x6f, 0x75, '\x00', 0xf9}, {0x95, 0x6, 0x8a, '\x00', 0x6}, {0x9, 0x8, 0x3, '\x00', 0x6}]}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000600)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x10}]}}, 0x0, 0x26}, 0x20)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000680)={[0x100000000005, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x911d, 0x7, 0x8, 0x10009c2, 0x5, 0x1006, 0xc, 0x8, 0x8000, 0xffffffffffffffff], 0x1000, 0xc2302})
open(&(0x7f0000000280)='./file0\x00', 0x40040, 0x1e9)
acct(&(0x7f00000002c0)='./file0\x00')
ioctl$KVM_RUN(r5, 0xae80, 0x0)

3m32.697557494s ago: executing program 32 (id=55):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0xa, 0x0, [{0xbb6, 0x0, 0xb}, {0xc0011020, 0x0, 0x4000000000000000}, {0x39d, 0x0, 0x5b}, {0xc001001f, 0x0, 0x5}, {0x865, 0x0, 0x41ad}, {0x371, 0x0, 0x5}, {0x4000036e, 0x0, 0x1}, {0x852, 0x0, 0x2}, {0x9e, 0x0, 0x3}, {0xa31, 0x0, 0xaf7}]})
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x109000, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000380)=0xe)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0xc0001, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000400)=0x1)
ioctl$PPPIOCSMAXCID(r3, 0x80207450, 0x0)
ioctl$DVB_DEMUX_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000000040)={0xfffffffb, 0x80000, <r4=>r0})
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r4, 0x4068aea3, &(0x7f0000000180)={0xa3, 0x0, &(0x7f0000000080)})
syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0)
io_uring_register$IORING_REGISTER_SEND_MSG_RING(r4, 0x1f, &(0x7f00000019c0)={0x28, 0x67, 0x0, r4, &(0x7f00000009c0)="d61f86c27acfa09b4af76be23a07e86fe6f4fc690d515efa8a76b3819507cbb501d2c7cecb51a0ced48122098651f0d22ed7d0d9aaa6f532a9d77afd2160f4f1044d7b8457fd5ce617c753b370886993cc93900bdf86a1b17ebf48a0ef8c2cc6a6f4c812e32227488138647a55c4e07bc5ed0e3f2b65ca312abe7195c67d372a97a5a76a5638aa44d02cd052c9c2827d32ec2e0b718e675b3c24d0e4119858e8a4bccd9fc499ca3e49156c66adf5858ec72c89c6581ba99eac51008bd0fa3d8f3e98c2e3948a2282d141b070262c6756959e7f8be35588c56a03977f6fad760a3896a8c2c792a190fdfbe524a9518c7da02193a55590462dcec6302b3422eadb54e70afc4dcdf945f2b4e6cd34e73746564d19a2a8205ce1cc936d2c7b91de274bda3834c8cee3a763e8bb1770350f2e20e52702f6ce908808b9e205da50e20b6d69c32403c78bdb0a9a486d094ca1b86a6eb811993964a3a0dab1d7544a1bf0ef878bdc7ab2ad6d81d7ab1ed7310e529e3761070d32bedd246a9966b4193854107bf7b2615659e3aecc40851df26de1f91687e9cbbd3cbd4698958ee9eb6a5f8d81ed0378ab82455dc0c34d96741bd8be3c86c4ac6e3e90f5f80adedf73f52349da7cec1188d544d38356cdb299d813e3bd7e3e1dbbd7c01897a95b19234b5746314802ff802746165ee2093437b15dc5d14cb13bb57e3e1c6f879e792df32ada71bf5a0d8542aed68b34baeae0a02600197cf0b2ff18605d7925930991b16b48b58eb01083d05b1cf7a464a6f7adb382c5d28a544994498650ecdfb15bf1648b8f073c8e6aec41370b9042a364c8b7245f247bfc3d850ca6d1f1e21dd8db78d7f13133e03ad4ae9a0cbcebdf3cb901e5ebf1982ed9ad37e435584025a3e7102465062d58ae00935e46741fb8a4ec672ce055a159578903ba28c962e512e3712f759bdfe727a353859a4c0616527f36f21e8dcc8a195c0004a661b2dac23bc2cc874f69e6d4b7bfc8597360a2bfefbb115819a751dcb9000344191d4be9c370b98a27d476c800a7ede9ea721e9ca07e43743cb99166dc646ae743f4a28d20561a9371104b06f3c85388d63494febcba5664371875b624efffd71604b42770dfbec3fd117ad482eaa20de94cbf70e8470ac740710699493a5eb47714121d02e6492b88991cf6da92456b7596303ed992861e345ccdd597ba086736c5658e401d9e2e5b7149f68377c18c9e26c9541e32c5f193d9543d1ba1410739387dbe6405db1d1fba671180101f9f4cc97535d208f54c68fcfbe936094d404c4e709bb059d0ef055968e532939d0296d3ae87ca4ee0e78634184bcb442d3672a05032436ebe7efa077f3787ded8afc439e4e815d9f92e8e5c9ca5b1dc2a62bf2879da14ff37080a7bfeabbf67cc44ca360fb8cbbd864074f392b28646408377d35d88fb2eff3077b46514ab39252e35d969bd65df93a1571e7f8a96e8c05e66b5a88a220594d35049a04bfbf87355a5c99d8c3b549c3c011bcc52959b824c68036f0bc72e7852ca3ff22edf609941bdac4cc37ac8b896dcc34e9b34f602cc0aeec32369b403467942e20f836e463d2121a506b440361b1f0e716156e0f1e71fa8b77bc067e754a1a45d24993899e66cdf302a71e6cbada87404fb5b06600c7efe24669a5d98fc88f766e72b6e14dd83efb23852d5b8f46b0297edf2d9658fe4b3ab8a00a23f111b676fedfa6551ea2251dd0a332859af1629e12c6f6c1331efeaddcbf8393fff5be70b9c3810229e8177cc654141e08da964d287ae7a9096a6b049f329fa32221f5b1b35060be18c8a8e26dcbeee4c8cfd02cec215afe087e00f9ca4803266e20b3ef237495f4234be08759846335dae7aa125594bff3d8c72f0b361fcf4dec31178e3ccfa83846cbe879f10890ba2b50c5ba6ce934a47dd3660396d1a955b29a728c94263877ed8019eed7fdec0183b5feff806ff82465d41d54816e57204332c9ae3f34bf9eedb34df199fc2ca2e28c5a83da65ff8ed11fb7efc3211ba115347c46ade8ea071d5a2af3dfdf9207bcd5955ccfea233d54ba2e97ef255f1041466b4f81a65b36604b5ad08cabcc593d3eb6fa58a8f3b6d8a229f0f410f0f4579697e3a613d8f0c5ffa641fafd4ee86a8fb57d041a685516fecf2127dbe1131e5e61249051b4c7d26695437134109e2b95638a7e67a3442532cdac0694a7d6c47947d3956a0ed5ea5c0c5f7b17d7960f53ea7e3a41374c1025c37e38a987d3c6829784de4c1174307c382a87f1f833553b6a32a69133a06fc401c0f9b3e883b1a6a71705107b8797db69f1e9e4cad36b34727b2602b24e5e58daa290f8473936984ff3af4ff72d8eb26df62846a81af064ef8ec798ecd4556dea3eae1ce3a1df868b7d71d06f839abbd474277fac951ee16955f9ed4906d7bc465d3a7b1fd67f50f3b654f6ce870f66c48ef32338c0c2323d7164efb579b85ac6d29c931a319357848943ec32922da6952ca8028dabdeded6d7a95689e9b8b5e1fcbba0c6ceb0e9f623ffbafba62d45f9f2a655377069ce77d003bde80db62da14de37b5811bfe21c625a14bcb1e64a509e5f491a42d837075aaa9c3b31f4e909d91f0eabd79bcdd49441bb436124379299c24cb780be6ccfb00fb5f52ade9b70c75d17a51a554aed1d93175f4c6908a66f9ce898b15391c39348501e840598c52439ed1b38f42f23a5efcbf6d58a3ee03436f43e2210d0ba95985f33cff4bdbda415f784945c07e32c5e6fc123a04dd7eb473ec71f029530e856a684ed5700bf7b45c0c56f2f816dfd8c32653686f1ab1e5b167ca38c6e4084264d2b345b2ccb55ed5a538c038bd06cb6248e932cf65c50deb935fccdfdeb6eff336b03a1d586684db3b392e04b2574c0835d9733e3a9c1dc5db883944646b60e12f850605bedd928056578b6d51e09866ef44849110e3df9afd4955066ec650b5ddb9554104b54af503d71d9701abd7e738cf131ab3b04d65de71657413ad8beaa105a5ff358ca65a36fc5ef1f815011b47dc78163eee1fb7db5d0bfc8d56b85365b848f36b4bcf444bf6d3aab6568fd5735f8d001f8303c11731a8cee9d6df7270806fb4dbd18ddcec7f4a4a86588e1b9c3643c2cd835960e2ae9cfc63a99cd821030e7a20ed19f3fc288b5a9bc4608d23e1cb8c0f2995010a430a3a1fc93f03e70b38f61943c06924fa34bcc61efc41d7aa9e6c922e39c857553e0e31aa8059308d4011734fa7db26b0573497b5d3f6ec705cf8649ade7ea48c28449912f62098a25537a40e43cfc2427d497fcabbcdca9f7c724dad10c50c637bae45672f93bd8bca30fe39ac103e177ecd4f020414deff93bf93ce3673d0c0c50b057b413f85d45a72397f6a59d2c97f05d753a93ba503da059e60f2f9d13d99466ff951e09b233e532b1d26d538f75b2cc2b2f7031f841deefd514061e87979442061ff528993ae1e9eb073ee7f90ee85182df293a883c4e9dd77f65855f76516468653ed6d4a20fbce4255d3b288034bce3cda12cde89499e11abba37e1261a893cf496176633b58de53c767b49a85fc757ec5ff7040af26f95db2034b46073f6620a4f07dd6f57a46d48eb1129c15bd41f6917c6c6b911e8f28c3934c16daab431d1f3c44c2e067ef19f7ead597853f2471d51c7401126fe889bfaa9afa096251c12e8e8010524827ac83b6fecc9c38b510ca777cef5b2ff60b2440700bf65c843ef53bc5181dec2618a971acfec5776351837719f913950f564445e10c0ee4713734d9c1ab0998e231e049515dabea26075f40251fb44e370ab8241e8efdc9f21368d4bd75c521a34846443906107beff74838229cad61ceec15525fe5050233a41893994e82fa7684d22d55b3e95e2c48a19bcae6615eeaeef93130bd8590a186903fca16db00e5b15e079952bc18fe23a5bdc104645adbe215df995d696fd254f03580e0f48af886399f8396908e97f43b4126c199c3fda0347160ae997966ddcfb2807be6b20ba91bbfbbd871756fa4ab421d104ef091851b022edfd2a4086475bc28adf72bb3a9f3e4a5ceb7cf814e0306391f7ce4776174da0b3cdbcde3356afa04bc01ce7f9ee74af0c8408d115834e2ac2111828704974efed5435e8a59721c1a6f31b7a4522606885f558dae2c05fe783d1e5646f3f7ecaccc0cf051559b1ccbef50b388e31bf63b9d5c4ccbf72846d4513558efd9bb1604fe1115f63037ce0d7d0fe7e03845e81cdfeadc55dde0bd977453215a687ea46aeefa59577d283dbf093a8c7b10c432288ce94843998aafc3e704d851251346801396dc79fe762e507022030a4fd0947087e3829dc5e899b844c9d201eedf8f97e9acd714ebe2a98b46bd68055373e7f963f968b640ef9c9a1414c7ccc74c9ad11c800445b90621a659682d4358ecd09db4dc4722cd63e6fdd7d3f08966ad3f2aac0d1df0253e81dd2f99c3b80513877721fa1cc474b2d66595da91f642313361cb7383ab319479a48c89009b7fef6ce5831467d05f76e61d2cdf194164fdc00191c1a64fddbb850fcb854502c9a9f5b94805c2011bcc170c261f47bfac238b0131f9e08bc133ed5ff13e5b70994a6715ca7674667aa851c720131e3d247e27f42ac35b1489b6a168a00c36523ab1d00115d82160b7bd4d5d735871973334e2c12656dc5bab6d48258809a72097694c4d908e86d4c23699cbfdd1f0ef20a1307975891626b55881e73b3f4057d41b34428148d920b687ad8feda5a756ff84a4a47ff39bef4780bab27615fa782acee6ec8e357e28ea76c8250ab3440f5838852d0623af9b1303e4c6f161cc77c30531d5bb3ba5122b66644276f29763ed767335119b60fa942632524b47e63a1201ec0bd240e3285674b28af37d1a86b7811e4bb7281ccc461c9e93145892c33448a28eb96142f453e3f4a58bb0fda777a4b5329416e8f86c16d1d40df59ee5a6f7145342bf0b38bfa4df0f7073c56007e8493d582800ced997c2c0f8d7b771642b068649b8728819882fde86f7532949275e9c0e062a77fcd3893dad27e054b22a707f1d7222d384f142995ae1f880dbae6e4a5ea685b60c904316dae4b1293508bd106452def30772eff53b5c99a8d67886233dda9f5648f346b6c97920b81a32ac318ec7363479f743a1b64e661f8b714ff9826bae7c9e18c738480dbe93e0eda80c1088c07483acbb2990c463ba57529d1a82934f90f5d4f2abffdef7ead7d470d62f7952a1ea30c147661314ad87acd3098bd7869d2e771a0cf220c17272871ed227fe4be9302c19766705e1f87073734f9bd6516833d4c1233e4e6903bafe1bd72cb1db5caa427b67af9fece117d958dfc7c56a3dcd38486c98710f455073cdcd51bff96045c0b4ee9f12181b6e242d9848f0084f439f97fa64ccf91dd33ee0a7a1d008454414e0af5df5e68c783d2ca179fefee406715033d8b65192cb43c338c1d30d005f5d576329f922d6a75cfce8d4bf6668aaa8db900272afd45aa67a9cfc5e3b56149650b90e3a1054edfdf3d3876a23e1a2c21cccaa5d6ffe88d8bedf87083f71b337e4c50939fddf3511661e9627af75cc0594f768d01c37d68c951e625bb30617a264df50a735f76f7c79f0c9ca689921a4e3375c618b3e7b6d98613f0aff7114f69d24bf37301aaaf8b525f5d79a5eec14f30bd8337da4fea1492f8a40e97dcf97173815d5b2567a2d342c728cab6f83dd94c7af96d9fee203e52b20abeec0b180c23be9b2f7c7c66ebf85f66e8b3f7ce354c94632d54d6410b3e6f9", 0x1, 0x8, 0x3, 0x1, {0x0, 0x0, r0, 0x3}}, 0x1)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0xffffffffffffffc4)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x0, 0x0, @ioapic={0x26ffc, 0x20f, 0x0, 0x3, 0x0, [{0x8b, 0x88, 0x7e, '\x00', 0xbd}, {0x8d, 0xf2, 0x6, '\x00', 0x8}, {0x3, 0xae, 0x1, '\x00', 0x80}, {0x4, 0x9, 0x2, '\x00', 0xe}, {0x9, 0xf7, 0x0, '\x00', 0x2}, {0x8, 0x1, 0x15, '\x00', 0x8}, {0x2a, 0x72, 0x2, '\x00', 0x6b}, {0x8, 0x5, 0x3, '\x00', 0x4}, {0x27, 0x8, 0x8, '\x00', 0x8}, {0x9b, 0x7, 0x80, '\x00', 0x5}, {0x0, 0x1a, 0x1, '\x00', 0x4}, {0x9, 0xda, 0xb, '\x00', 0x3d}, {0x6, 0x3, 0x5}, {0x40, 0x9, 0x3, '\x00', 0x4}, {0xf, 0x20, 0x1, '\x00', 0x8}, {0x24, 0x8, 0x7, '\x00', 0x1}, {0x2, 0x4, 0x80, '\x00', 0x4b}, {0x0, 0x1, 0x3, '\x00', 0x40}, {0x6, 0x2, 0xf}, {0x7, 0x8, 0xf9, '\x00', 0x6}, {0x1, 0x8, 0x0, '\x00', 0x7}, {0x6, 0x6f, 0x75, '\x00', 0xf9}, {0x95, 0x6, 0x8a, '\x00', 0x6}, {0x9, 0x8, 0x3, '\x00', 0x6}]}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000600)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x10}]}}, 0x0, 0x26}, 0x20)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000680)={[0x100000000005, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x911d, 0x7, 0x8, 0x10009c2, 0x5, 0x1006, 0xc, 0x8, 0x8000, 0xffffffffffffffff], 0x1000, 0xc2302})
open(&(0x7f0000000280)='./file0\x00', 0x40040, 0x1e9)
acct(&(0x7f00000002c0)='./file0\x00')
ioctl$KVM_RUN(r5, 0xae80, 0x0)

3m29.29972696s ago: executing program 1 (id=86):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, 0x31, 0x9, 0x70bd2d, 0x25dfdbff, {0x4}, [@typed={0x8, 0xd5, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42800}, 0x84)

3m29.299523011s ago: executing program 1 (id=87):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
write(0xffffffffffffffff, &(0x7f0000000800)=',\x00', 0x2)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
move_mount(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0xffffffffffffff9c, 0x0, 0x262)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402})
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000880)={0x4c, 0x12, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x2, 0xc, 0x1, {0x4e23, 0x4e22, [0x1dd, 0x3, 0xffffffff, 0xffffffff], [0x8, 0x7, 0x5, 0x101], 0x0, [0x401, 0x8]}, 0x7fff, 0x6}}, 0x4c}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000840)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (fail_nth: 9)

3m28.949840153s ago: executing program 1 (id=91):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000200)=""/4, &(0x7f0000000240)=0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000004c0), 0x80000, 0x0)
ioctl$RTC_PIE_ON(r2, 0x7005)
ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x14f2)
mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x1b7)
mount(&(0x7f0000000380)=@filename='./dev/sda1\x00', &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000400)='ext4\x00', 0x8410, 0x0)
r3 = open$dir(&(0x7f0000000440)='./mnt\x00', 0x0, 0x2)
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x400, 0xffffffff000, 0x5, 0x6})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYBLOB="e8c572ad64fe7e1137360c2c2b14e94978776d7c91b37373dda26d688e3f70832353756498800a659bbc787b32451bff009e05fe7c8950eba1df", @ANYBLOB="0400"/13], 0x24}, 0x1, 0x0, 0x0, 0x4008804}, 0xc0)

3m28.949565548s ago: executing program 1 (id=93):
r0 = syz_usbip_server_init(0x1)
syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x2e741)
syz_usb_connect(0x1, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0)
write$usbip_server(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="00000003"], 0x35)

3m27.670194715s ago: executing program 1 (id=104):
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000011c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000001200)='./proc\x00', &(0x7f0000001240)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f00000017c0)='27', 0x2)
r3 = openat$cdrom(0xffffff9c, &(0x7f0000001800), 0x80, 0x0)
ioctl$CDROMREADAUDIO(r3, 0x530e, &(0x7f0000001840)={@msf={0x10, 0xa9, 0xfd}, 0x1, 0x22, &(0x7f0000001880)=""/34})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$KVM_GET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea3)
bind$bt_hci(r4, &(0x7f0000001600)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000001700)="2b0000000600aabbccddeec0", 0xc)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000001180)={0x6, 0x4, 0x5, 0xe98, 0xb, "3a921def342c08184df1362e495db47378aca4"})
inotify_init()
r5 = creat(&(0x7f0000001480)='./file0\x00', 0x104)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x2, 0x4, &(0x7f0000001580)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f00000015c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r5, &(0x7f0000001600)=ANY=[], 0x13)
pread64(r1, &(0x7f0000001740)=""/119, 0x77, 0xffffffff)
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000018c0)='./proc\x00', 0x182)
pipe2(&(0x7f0000001900)={0x0, <r8=>0x0}, 0x0)
syz_io_uring_setup(0x4a72, &(0x7f0000001940)={0x0, 0x975d, 0x10000, 0x2, 0x36a, 0x0, r8}, 0x0, &(0x7f00000019c0), 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000001a00)={@local, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @private2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x3}, {0x8, 0x22eb, 0x3f000000}}}}}}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
setns(0xc9, 0x0)
r10 = socket(0x8, 0x5, 0x5)
ioctl$sock_TIOCINQ(r10, 0x400461f1, 0x0)
close_range(r9, 0xffffffffffffffff, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001640)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)=[0x5], 0x0, 0x0, 0x1, 0x1, r7}}, 0x40)

3m27.580661438s ago: executing program 1 (id=105):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000)
remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/156, 0x9c}], 0x100000000000026d, &(0x7f0000000100)=[{&(0x7f0000000140)=""/116, 0x20001c34}], 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb018618"], 0x0, 0x26}, 0x28)

3m12.565910805s ago: executing program 33 (id=105):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000)
remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/156, 0x9c}], 0x100000000000026d, &(0x7f0000000100)=[{&(0x7f0000000140)=""/116, 0x20001c34}], 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb018618"], 0x0, 0x26}, 0x28)

1m40.847304976s ago: executing program 2 (id=1586):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001040)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x1, 0x1234}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
syz_emit_ethernet(0x5a, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081000", 0x24, 0x2b, 0x0, @private0, @local, {[@srh={0x3a, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, [@empty]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0)

1m40.688137692s ago: executing program 2 (id=1588):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
creat(&(0x7f00000003c0)='./file0\x00', 0x7a)
capset(&(0x7f0000000400)={0x20080522}, &(0x7f0000000440)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80})
faccessat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x2, 0x1000)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="0f20e035000010000f22e00f0f2f9766ba6100b0f1eec4c3dd7d6b007066ba2000ed66baa100b0abeec4c1f950c4c4e1895568ffb9800000c00f3235010000000f30b805000000b9000000000f01d9", 0x4f}], 0x1, 0x11, 0x0, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r5=>0x0})
connect$can_bcm(r4, &(0x7f0000000200)={0x1d, r5}, 0x10)
sendmmsg$sock(r4, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="0100000003000000640000000000000000000000000000000000000000000000000000000000000020a1070000000000feffff7f01000000020000000100003f420f000000000000", 0x48}], 0x1}}], 0x1, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r6, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x1, 0x4)
listen(r0, 0x10)
shutdown(r0, 0x2)
listen(r0, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x38030540)
sendmsg$NFT_BATCH(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000859e00010000000000000000000500000a14000000030a010400000000000000000500000074000000060a0104884df40900000000050000000900010073797a30000000000900020073797a3000000000480004802c0001800e000100696d6d6564696174650000001800028008000140000000010c00028005000100010000001800018008000100667764000c0002800800014000000001140000001100010000000000000000000500000a"], 0xb0}}, 0x0)

1m40.447758891s ago: executing program 2 (id=1592):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x2, 0x5, 0x628, 0x398, 0x398, 0xffffffff, 0x0, 0x0, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00', @remote, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote], 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote, @port=0x4e22, @gre_key}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xff]}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv6=@local, @ipv4=@multicast2, @port=0x4e24, @port=0x4e21}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xa}, @ipv6=@rand_addr=' \x01\x00', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0xff0000ff, 0xff000000], [0xffffffff], 'veth1_macvtap\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x14000, 0x0, 0x0, {<r3=>0x0, {'syz', 0x0, '2\x00'}, @uuid={'LVM-syz', 0x0, '0\x00'}}})
ioctl$DM_TABLE_DEPS(r1, 0xc138fd0b, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x238, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_dev={r3}, "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"})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x29, 0x80, 0x0, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x7}}]}}}]}, 0x60}}, 0x0)
ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@snapshot={0x0, 0x408, 0x0, 0x80, 'snapshot-merge\x00', {@ram_num={'1:', 0x1}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, 'N', 0x20, '256', ' 2 discard_zeroes_cow discard_passdown_origin'}}]})

1m40.318261327s ago: executing program 2 (id=1594):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6(0xa, 0x800, 0xdc3)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000004, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x20200)

1m40.094541742s ago: executing program 2 (id=1596):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/lru_gen\x00', 0x2, 0x0)
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000ec0)=""/4096, 0x1000}], 0x1, 0x6, 0x3)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket(0x400000000010, 0x3, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000580)='./debug/lru_gen\x00', 0x410902, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r3, &(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000003c0)='batadv0\x00', 0xfc46)
r4 = socket(0x10, 0x2, 0x1ff)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x9, 0xfffffffe, 0x0, 0x2}, 0x10)
write(r4, &(0x7f00000002c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24)
sendmmsg$inet6(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="399b", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4400c840)
sendto$inet6(r3, &(0x7f0000000540)='X<H', 0x3, 0x3b00, 0x0, 0x0)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
r7 = syz_clone(0x102c8000, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace(0x10, r7)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="f80000001000130726bd70000000000000000000000000000000ffffe0000002ac1414240000000000000000000000004e22000efffd0003020000203a000000", @ANYRES32=r8, @ANYRES32, @ANYBLOB="fc000000000000000000000000000001ffffffff32000000ff0200000000000000000000000000010000000000000000000000000000000002000000000000000a0000000000000006000000000000000000000000000000fdffffffffffffff03000000000000000000000000000000fdfffffffffffffffe02000000000000f8ffffffffffffff0c0000000000000002000000bd70000135000002000400280000000000000008001e000080000000"], 0xf8}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

1m39.968227728s ago: executing program 2 (id=1598):
mount(0x0, &(0x7f0000000100)='./tracing\x00', 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff7}}}, 0x24}}, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write(r0, &(0x7f00000000c0)='nqn=test,transport=tcp,traddr=::', 0x20)
listen(0xffffffffffffffff, 0xfffffffc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), 0xffffffffffffffff)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0xa)
connect$inet(r3, &(0x7f0000000680)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x14, r2, 0x7}, 0x14}}, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./tracing\x00', &(0x7f0000000300)='nfs4\x00', 0x2000010, &(0x7f0000000340)='mptcp_pm\x00')

1m24.590735809s ago: executing program 34 (id=1598):
mount(0x0, &(0x7f0000000100)='./tracing\x00', 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff7}}}, 0x24}}, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write(r0, &(0x7f00000000c0)='nqn=test,transport=tcp,traddr=::', 0x20)
listen(0xffffffffffffffff, 0xfffffffc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), 0xffffffffffffffff)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0xa)
connect$inet(r3, &(0x7f0000000680)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x14, r2, 0x7}, 0x14}}, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./tracing\x00', &(0x7f0000000300)='nfs4\x00', 0x2000010, &(0x7f0000000340)='mptcp_pm\x00')

9.747724566s ago: executing program 6 (id=2543):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101})
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xfffffffffffffe59, [@enum]}}, 0x0, 0xfffffffffffffe50}, 0x20)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x42001, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000080))
close(r2)
r3 = syz_open_dev$vbi(&(0x7f00000007c0), 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000800)={0x0, @reserved})
r4 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000a40)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff08060001080106040003aaaaaaaaaa28ffffff09ffffffffffff0000006d4e7773604b937c1a66e721d500f5f495f2676fff88560344776f067429f8352471222e0e8f9419801bba693b27ff135f4290e47085e65581d57cd7f0a3cec7c0114cef06b288c3120e719d851737b3ef3f99ddf25e9e05a6aaf73f4de552621a7501"], 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x2d, 0x2, 0x0)
connect$netlink(r7, &(0x7f0000000600)=@unspec={0x2d}, 0xc)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c000000680001710000000000000000000000030000000008000100030000000600030001000000f000020001000000020009000200000000000000"], 0x3c}}, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r8)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a310000ae8200000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800880014000000001080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x14, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe, 0x1, "b375208e6d76e3310000"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000010900020073797a31008e60e818b73fa621797a3100e7ffff13000380100000800c00018006000100ffd7000c00"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
add_key(0x0, 0x0, &(0x7f0000000940)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d746573", 0x60, 0x0)
syz_open_dev$loop(&(0x7f00000009c0), 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)

9.677833272s ago: executing program 6 (id=2547):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000100)={0xc5, 0x0, 0x465})

9.605062076s ago: executing program 6 (id=2550):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a40)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x28, r1, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)

9.604585106s ago: executing program 6 (id=2551):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1)
sigaltstack(&(0x7f0000000700)={&(0x7f0000000740)=""/4085, 0x80000001, 0xffffffffffffffe0}, 0x0)
timer_create(0x0, &(0x7f0000001740)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000001780)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f00000017c0)={{}, {0x0, 0x3938700}}, 0x0)
sendmsg$NFC_CMD_DISABLE_SE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000480)='./tracing\x00', &(0x7f00000004c0)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_clone3(&(0x7f00000005c0)={0x8690b000, &(0x7f0000000680), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

9.526297126s ago: executing program 6 (id=2552):
syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x400, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000600))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r1)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x14, r2, 0x1, 0x123, 0x234}, 0x14}}, 0x0)
write$nci(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="710d06"], 0x12)

9.337154571s ago: executing program 6 (id=2556):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TIOCL_SETSEL(r1, 0x560e, &(0x7f0000000140)={0x2, {0x2, 0x103, 0x4, 0x54e, 0x2}})
symlink(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000004580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c0)
r2 = open(&(0x7f0000004600)='.\x00', 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004640)='.\x00', 0x0, 0x0)
r4 = fanotify_init(0xf00, 0x0)
r5 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='osd_request_timeout\x00', &(0x7f0000000080)='1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='mount_timeout\x00', &(0x7f0000000100)='1\x00', 0x0)
fanotify_mark(r4, 0x1, 0x5000003a, r3, 0x0)
mkdirat(r2, &(0x7f0000004680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0)
r6 = open(&(0x7f0000004700)='.\x00', 0x301f00, 0x393)
renameat2(r6, &(0x7f0000004740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r6, &(0x7f00000047c0)='./file0\x00', 0x2)

9.224514193s ago: executing program 35 (id=2556):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TIOCL_SETSEL(r1, 0x560e, &(0x7f0000000140)={0x2, {0x2, 0x103, 0x4, 0x54e, 0x2}})
symlink(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000004580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c0)
r2 = open(&(0x7f0000004600)='.\x00', 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004640)='.\x00', 0x0, 0x0)
r4 = fanotify_init(0xf00, 0x0)
r5 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='osd_request_timeout\x00', &(0x7f0000000080)='1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='mount_timeout\x00', &(0x7f0000000100)='1\x00', 0x0)
fanotify_mark(r4, 0x1, 0x5000003a, r3, 0x0)
mkdirat(r2, &(0x7f0000004680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0)
r6 = open(&(0x7f0000004700)='.\x00', 0x301f00, 0x393)
renameat2(r6, &(0x7f0000004740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r6, &(0x7f00000047c0)='./file0\x00', 0x2)

1.58720306s ago: executing program 7 (id=2662):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
setns(0xc9, 0x0) (async)
r1 = socket(0x1f, 0x5, 0x8)
setsockopt(r1, 0x112, 0x7, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', <r2=>0x0})
r3 = socket$alg(0x26, 0x5, 0x0) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) (async)
r4 = creat(&(0x7f00000004c0)='./file0\x00', 0x2e)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockname(r5, 0x0, 0x0)
ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000001500)={{{0x0, 0x1}}, 0x1000, 0x2, &(0x7f0000000500)="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"}) (async)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000007600090700000000000000000702e1ff", @ANYRES32=0x0, @ANYBLOB="0c000d80080003"], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x88800}, 0x0) (async)
capset(&(0x7f0000000180)={0x20071026}, &(0x7f00000001c0)) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) (async)
ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000001540)) (async)
getsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r1, 0x84, 0x84, &(0x7f0000001580)={<r7=>0x2, @in6={{0xa, 0x4e23, 0xc724, @local, 0x101}}, 0x4a22}, &(0x7f0000000380)=0x90)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000400)={r7, 0x7fff, 0x2, 0x5, 0x8, 0x9}, &(0x7f0000000440)=0x14) (async)
accept4$alg(r3, 0x0, 0x0, 0x80000) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r8=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

1.524473598s ago: executing program 7 (id=2666):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000480), &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2210088, 0x0)
chdir(&(0x7f0000000600)='./file0\x00')
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r0, r2, 0x16, 0x0, @void}, 0x10)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000540)=0xffff7fff, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x14, r5, 0x609, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48801}, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x40, 0x1)
write(r6, &(0x7f00000002c0)='0x47\x00', 0x5)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180)={0x0, <r7=>0x0}, &(0x7f0000000200)=0xc)
quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000140)=@sr0, r7, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000010401e50ece003fcbd2c5453bff010000000000000000010000030a000200000099fe0200f2ff060006400000000008000340000000072f0111377890b7bde9ac6a14352ad20e6dd8cd15c534b12e21f87900cff13d03947212eb930b8c1bff5b44272a590428aade8ff79058565d57f1dec31b2307b2fb72ad02252da7a43bd89417d00266006a984ed63c2c171616"], 0x30}, 0x1, 0x0, 0x0, 0x40400d4}, 0x4000851)

1.456755442s ago: executing program 7 (id=2668):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='lp', 0x2)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'dummy0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xffffffffffffff61, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010)
setsockopt(r1, 0x84, 0x19, &(0x7f0000000100)="1a000000020000", 0x7)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r4, 0x560e, &(0x7f0000000080))
ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f00000000c0)={0xc, 0x1, 0x9, 0x27}) (fail_nth: 3)

1.336806695s ago: executing program 4 (id=2671):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000600)={0x2, 0x4e21, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@mask_fadd={0x58, 0x114, 0x8, {{0xe9, 0x2400}, 0x0, 0x0, 0x40, 0x0, 0x80000001, 0x6, 0x13, 0x1}}], 0x58}, 0x0)

1.336554726s ago: executing program 4 (id=2672):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {<r1=>0x0, {'syz', 0x0, '2\x00'}}})
syz_usbip_server_init(0x3)
syz_usbip_server_init(0x3)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan0\x00'})
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000003c0)={'wg0\x00', {0x2, 0x4e22, @broadcast}})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x1, 0xe000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x1, 'vlan1\x00', {}, 0x5832})
ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0xa8201, 0x0, 0x0, @by_dev={r1}, [@crypt={0x0, 0x3418, 0x0, 0x80, 'crypt\x00', {'aes-cbc-tcw', 0x20, @keyring=':64:encrypted:syz', 0x20, '128', 0x20, {@ram={'/dev/ram', 0x0}, 0x20, '8'}, ' 2 integrity:32:aead integrity_key_size:32'}}]})

860.417085ms ago: executing program 3 (id=2677):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000040)={0x0, 0xffffffffffffff5e, &(0x7f0000000340)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x7f}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r5, &(0x7f0000000100)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000001c0)="f8", 0x1}], 0x1}}], 0x1, 0x20008050)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="120000002a0000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000740)=r6}, 0x20)
r9 = socket$inet6(0xa, 0x2, 0x0)
io_setup(0x3ff, &(0x7f00000008c0)=<r10=>0x0)
io_submit(r10, 0x1, &(0x7f0000000900)=[&(0x7f0000000940)={0x0, 0x0, 0x8, 0x0, 0x2, r9, 0x0, 0x0, 0x4}])
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r8, &(0x7f00000007c0), 0x0}, 0x20)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)={0x0, 0x964, 0x89f8}, 0x8)
r11 = syz_open_procfs(0x0, &(0x7f00000007c0)='clear_refs\x00')
writev(r11, &(0x7f0000000800)=[{&(0x7f0000000840)='2', 0x1}, {&(0x7f0000000880)="4336fecc", 0x4}], 0x2)
sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0880000008440000300012800b00010067656e65766500001e0002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

744.540244ms ago: executing program 4 (id=2678):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000a00))
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000a80)='./sys\x00', &(0x7f0000000ac0)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/kernel/reboot/hw_protection\x00', 0x2, 0x0)
write(r2, &(0x7f0000000b40)='reboot', 0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setns(0xc9, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000740)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000780)={'veth1_vlan\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf251020000008000300", @ANYRES32=r6], 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x8010)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000a40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f0000000440), 0x40000000000009f, 0x0)
syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="041817aaaaaaaaaa10"], 0x1a)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000100000000000000300100000c000180080002006c6f0000080005"], 0x28}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

670.274008ms ago: executing program 5 (id=2679):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0xfffe, 0xfffffffb, @dev={0xfe, 0x80, '\x00', 0x41}, 0xe79}, 0x1c)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={<r1=>0x1, 0x35, 0xfffffff7, 0xfff, 0x5, 0x7a6, 0x0, 0xfffffffa, {0x2, @in6={{0xa, 0x4e24, 0xb, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}}, 0xb38e, 0x10001, 0x1ff, 0x1, 0xc000}}, &(0x7f0000000380)=0xb0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000003c0)={r1, 0x67b4, 0x6}, 0x8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffe41, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000200000000000a50000000060a010400000000001000000a0000010900010073797a31000000002400048020000180070001006374000014000280080002000000001108000140000000090900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000040)=0xb40, 0x4)

597.915549ms ago: executing program 3 (id=2680):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001580), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000001640)={0x1, 0x0, [{0x4b564d03, 0x0, 0x100000000000000}]})

597.790512ms ago: executing program 5 (id=2681):
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ef)
mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000000000003a0000ffff0000000000004cdb28270478a5baefc0fdb25459f7011b86b10460bb638a8fd20a04f78596218cd03d44323fd36618a1a640968200f0fabddeaadf8ca4da12d79d813d4488a1fc4bf2a1965f2af82204775fc2cbfdb796ed853ed7a503e7b5595e7d0a67c5844362d13e95a3e159d9ab5c0d0c68b8ae7c6329b5dec1b5b2fcc45e7bf307cf921daf8ebf30d388067f1153b7f319d70358b03b99fb8fd1bc8f1b429710255fa2fadc718f8c9d903a7c864254c94c3abc4de596ef71da009b58bad80ac4b6af6478d158bae5c3c9803ee6c195352cbbf04730252deb4f3438bff229ce00000000000000", @ANYRES32=r3, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848460000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850)

547.645192ms ago: executing program 5 (id=2682):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x181240, 0x0)
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rxrpc/locals\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0x2020)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
sendmmsg$inet6(r4, &(0x7f0000000100)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0)
ioctl$RTC_AIE_ON(r0, 0x7001)
ioctl$RTC_AIE_OFF(r0, 0x7002)

547.443969ms ago: executing program 3 (id=2683):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000600)={0x2, 0x4e21, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@mask_fadd={0x58, 0x114, 0x8, {{0xe9, 0x2400}, 0x0, 0x0, 0x40, 0x0, 0x80000001, 0x6, 0x13, 0x1}}], 0x58}, 0x0) (fail_nth: 3)

547.282784ms ago: executing program 5 (id=2684):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001000), 0x41, 0x0)
write$nbd(r1, &(0x7f0000001040)={0x1000000, 0x0, 0x0, 0x0, 0x200000, "82b0cfc4337965941538be02000000000000000000027400a391793ba7f40000000000fdf700"/48}, 0x40)

521.784031ms ago: executing program 3 (id=2685):
r0 = syz_open_procfs(0x0, &(0x7f0000000980)='maps\x00')
read$FUSE(r0, &(0x7f00000009c0)={0x2020}, 0x2020) (async)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000002a00), 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000600)={0x2, &(0x7f0000000640)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10)
sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r2, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "19072cb8d37596a55445e23d04f9f214"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "0613e98d534572a79a28df2de9d3c4a2"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "eeb4ddb4407114eac2288d374ca82971"}, @NL80211_ATTR_PMK={0x14, 0xfe, "266d0fc6affb29bd1497daa40600"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "8047fcfbf6bb5e536c1f92e413ee2434"}, @NL80211_ATTR_PMK={0x14, 0xfe, "989e000f455e50da03dbc4ee176300"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "4af14759c8604d1ea9071b3d0c788b74"}, @NL80211_ATTR_MAC={0xa}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4c120}, 0x20000004) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r1)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x110, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xb9, 0xa8, @random="ebc30367888d4249715c14dcd79fbd722ffc4ba743335983cf7fe3f422f1dff8266aeda8db31301ec7d341f1862d7af19e47ebc72387247201329f3bfb13c7ff6eff9d4d48bc4dd405f9ef6079347dab2189c357f1e6be795181c4c31fe0b06b1f3a608789b8b3c8245892ebb81c0d1fa7a9ecbb918d05d93c6293eccdcfa9870a5afba90b75d6102200e40edaca362e2dd571f421a7152b44b2eeeb2be467d4a760e9400f069f94808d04f310e8b46f8f5a64f1dc"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x110}, 0x1, 0x0, 0x0, 0x44}, 0x40)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x1040008, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@ipv4_newnexthop={0x18, 0x68, 0x521}, 0x18}}, 0x4020054) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r7=>0x0}) (async)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01006d2469929117ce51ec182600000200a7001400020076657468305f746f5f62df6e82d22bc7bb9c010073797a3200000000009cd80000000000"], 0x34}}, 0x800)
sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4008}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r8, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) (async)
setresuid(0x0, 0xffffffffffffffff, 0x0) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r7, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20000)

444.477444ms ago: executing program 7 (id=2686):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000400)={'pcmmio\x00', [0x2000, 0x2, 0x8, 0x1, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x287, 0x3, 0xfffffff7, 0x400001, 0x6, 0x5, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x4, 0x4, 0x20001e5b, 0x3, 0xe66, 0x3, 0x6, 0x4006, 0x0, 0x3]})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000580)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0x3, 0x73, 0x0, @rand_addr=0x64010120, @broadcast, {[@ra={0x94, 0x4}]}}, "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"}}, 0xfdef)
ioctl$COMEDI_DEVINFO(r0, 0x80b06401, &(0x7f00000004c0))

444.088774ms ago: executing program 5 (id=2687):
mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./bus\x00', 0x7)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000d00), 0x8, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}]})
r0 = socket$kcm(0x2d, 0x2, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000000400)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000440))
timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/221, 0xdd}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000)
chdir(&(0x7f0000000d80)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000dc0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x158)
mkdir(&(0x7f0000000940)='./file1\x00', 0xb)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000340)={0x3, <r3=>0x0}, 0x8)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r3, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f00000003c0)=r4, 0x4)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000a00), 0x0, &(0x7f0000000080)={[], [{@obj_role={'obj_role', 0x3d, 'lowerdir'}}, {@appraise}]})

444.011415ms ago: executing program 3 (id=2688):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
pwrite64(r0, &(0x7f0000000000)="ff", 0x582f5, 0x0)

387.405967ms ago: executing program 3 (id=2689):
io_setup(0xeffd, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/console\x00', 0x1, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x7fffffff, 0xfcd, 0x2, 0x1, 0x8f, "388d673f088b000000020000000000001af800"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xb8)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001580), 0x200, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000120000000800080000e100000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000200)={0x9, 0x2, 0x2, 0x2, &(0x7f0000000180)=[{}, {}]})
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000001640)={0x1, 0x0, [{0x4b564d03}]})

267.359578ms ago: executing program 7 (id=2691):
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9200183aff00000000000000000000000000000000ff020000000000000000000000000001870090782001000000000000000000000000000201003b226e6a321a724c4da76036"], 0x0)

207.793738ms ago: executing program 5 (id=2692):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x147)
mount(0x0, &(0x7f0000000440)='./dev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/console\x00', 0x801, 0x0)
r1 = gettid()
timer_create(0x7, &(0x7f0000000500)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000540))
timer_settime(0x0, 0x0, &(0x7f0000000580)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x545c, 0x0)

207.545369ms ago: executing program 7 (id=2693):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2702, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)={0x2})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000340)={[{0x2, 0x95c, 0x61, 0x7, 0xfe, 0xe, 0x1, 0x47, 0x8d, 0x0, 0x3, 0x18, 0x7}, {0x9, 0x800a, 0x8, 0xff, 0x0, 0x4, 0x5, 0x1, 0x72, 0xc0, 0x5, 0x3, 0x401}, {0x5, 0x5, 0x40, 0x2, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x12, 0x2c, 0xc}], 0x6})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000480)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000006c0)={[0xc9, 0x200000000d, 0x1, 0x6d, 0x2, 0x1002, 0xf1, 0x8, 0x7fffffffffff8, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
write(0xffffffffffffffff, &(0x7f0000000800)=',', 0x1)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
move_mount(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0xffffffffffffff9c, 0x0, 0x262)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000fc7000/0x1000)=nil, 0x1000, 0x1)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402})
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c020000120000002cbd7000ffdbdf2500020c0101008466faee859d6672f6321fcc2b0003000000ffffffffffffffe20800000007000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000840)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
socket$inet(0x2, 0x1, 0x0)

107.596687ms ago: executing program 4 (id=2694):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2f01, 0x0)
ioctl$SIOCGSKNS(r0, 0x894c, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000008882, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x9)
bind$inet(r1, &(0x7f0000002240)={0x2, 0x4e22, @private=0xa010102}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000180)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c)
listen(r1, 0x0)
listen(r3, 0x2)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x18f5)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc})

7.172339ms ago: executing program 4 (id=2695):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {<r1=>0x0, {'syz', 0x0, '2\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}})
r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x88841, 0x0)
ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000003280)={0x4, 0x0, 0x0, 0x278, 0x138, 0x1, 0x0, 0x25411, 0x0, 0x0, @by_dev={r1}, [@verity={0x0, 0x448, 0x0, 0x140, 'verity\x00', {'0', 0x20, @rnull={'/dev/syzrnull', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '1024', 0x20, '4096', 0x20, 0x61, 0x20, 0xea, 0x20, 'sha512', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, @hex=@fixed='0123456789abcdef0123456789abcdef01234567', ' 1 try_verify_in_tasklet'}}]})

0s ago: executing program 4 (id=2696):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioprio_get$pid(0x1, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
write(0xffffffffffffffff, &(0x7f0000000800)="2c0000001a", 0x5)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
move_mount(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0xffffffffffffff9c, 0x0, 0x262)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402})
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000880)={0x234, 0x12, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x2, 0xc, 0x1, {0x4e23, 0x4e22, [0x1dd, 0x3, 0xffffffff, 0xffffffff], [0x8, 0x7, 0x5, 0x101], 0x0, [0x401, 0x8]}, 0x7fff, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x15, 0x1, "daa516739e470f1c96ec62a2b1ab488f0d"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "771d7688fe1fbbdc04a484f4c4085d1dfe2653d0947ef4fef88e741fe24797bceed8c81353d3d004c9eb207ed6831073435371ec0349d3ce7035d4f2687d176edcbcd00ec0912c269942df14eacaec8897dcfb3d36e2cf47b87c0ae5d2c44f3c5b0b17d79c783c6cf18de509f83b9820ae0a17081cbd2f34f65d53c28e8224b4ef9bd65f0945d6edefe89b030e"}, @INET_DIAG_REQ_BYTECODE={0x69, 0x1, "cc438cb944e3c00bccb7bc57238af408d28d941f95ebd041a478c31eb88ae688dcfa078b6165bc7f7154f95343f201c9f52578ee8338fe4d88f46fe4287ffe25afc639fbe51458f2e11e0260f05be054bf1c38027977451ed85a94326e9ffc9e78438402ef"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "aef303390e61f7e7ee3fb4374e62961a4338bcfe7c103fff2e6cb94fc5f6d19663817921aafb2bce23f07823f4a0b3520b4e412b37b9c8e8f8a38fd8a0c5ab1715224a01f9cc312ed0"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x79, 0x1, "2f86fba2101775eaed143c85ea9c8f16833edffca236e3d5df3750ea577eee944b3b5f55e0c4ae74e43775db6d16cdb3b2e42c27b59c02e2f9e569037e04b203f2202e7fd617f157346e1432f7781f5ee89eeab1ba5446a5f889badb4db52430bd6fea93ef48df5efc69a6688bb858a44cbc50a526"}]}, 0x234}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000840)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

ting to 1000
[  248.494002][ T5857] bridge_slave_1: left allmulticast mode
[  248.494021][ T5857] bridge_slave_1: left promiscuous mode
[  248.494170][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.508713][ T5857] bridge_slave_0: left allmulticast mode
[  248.508723][ T5857] bridge_slave_0: left promiscuous mode
[  248.508839][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.609190][ T5573] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  248.628823][ T5573] usb 9-1: device descriptor read/8, error -71
[  248.690022][ T5857] .` (unregistering): (slave bridge0): Releasing backup interface
[  248.708304][ T5857] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  248.711528][ T5857] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  248.712457][ T5857] .` (unregistering): Released all slaves
[  248.717376][ T5857] bond1 (unregistering): (slave veth3): Releasing active interface
[  248.732383][ T5857] bond1 (unregistering): Released all slaves
[  248.751572][ T5496] 8021q: adding VLAN 0 to HW filter on device eth10
[  248.760736][   T43] kauditd_printk_skb: 290 callbacks suppressed
[  248.760746][   T43] audit: type=1400 audit(249.664:8404): avc:  denied  { unmount } for  pid=5781 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  248.868021][ T5573] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  248.888484][ T5573] usb 9-1: device descriptor read/8, error -71
[  248.903244][   T43] audit: type=1400 audit(249.804:8405): avc:  denied  { write } for  pid=14038 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  248.979485][   T43] audit: type=1400 audit(249.874:8406): avc:  denied  { write } for  pid=14043 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  248.998340][ T5573] usb usb9-port1: unable to enumerate USB device
[  249.033242][   T43] audit: type=1800 audit(249.934:8407): pid=14050 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2561" name="attach" dev="sysfs" ino=36689 res=0 errno=-13
[  249.043282][ T5496] 8021q: adding VLAN 0 to HW filter on device eth11
[  249.043971][T14050] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  249.043994][T14050] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  249.044066][T14050] vhci_hcd vhci_hcd.0: Device attached
[  249.047037][   T43] audit: type=1800 audit(249.944:8408): pid=14050 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2561" name="attach" dev="sysfs" ino=36689 res=0 errno=-13
[  249.064261][T14050] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6)
[  249.064282][T14050] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  249.064355][T14050] vhci_hcd vhci_hcd.0: Device attached
[  249.122536][T14055] vhci_hcd: connection closed
[  249.123065][   T12] vhci_hcd vhci_hcd.3: stop threads
[  249.123078][   T12] vhci_hcd vhci_hcd.3: release socket
[  249.123088][   T12] vhci_hcd vhci_hcd.3: disconnect device
[  249.125253][T14053] vhci_hcd: connection closed
[  249.130167][ T6195] vhci_hcd vhci_hcd.3: stop threads
[  249.130183][ T6195] vhci_hcd vhci_hcd.3: release socket
[  249.130199][ T6195] vhci_hcd vhci_hcd.3: disconnect device
[  249.249374][   T43] audit: type=1400 audit(250.154:8409): avc:  denied  { write } for  pid=14059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  249.297531][   T43] audit: type=1400 audit(250.194:8410): avc:  denied  { write } for  pid=14066 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  249.331386][ T5496] 8021q: adding VLAN 0 to HW filter on device eth12
[  249.331942][T14021] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.334387][T14021] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.334569][T14021] bridge_slave_0: entered allmulticast mode
[  249.335338][T14021] bridge_slave_0: entered promiscuous mode
[  249.338494][T14021] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.338533][T14021] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.338614][T14021] bridge_slave_1: entered allmulticast mode
[  249.341682][T14021] bridge_slave_1: entered promiscuous mode
[  249.415293][T14021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  249.439831][T14021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.497947][T14069] mac80211_hwsim hwsim14 syzkaller0: left promiscuous mode
[  249.497957][T14069] mac80211_hwsim hwsim14 syzkaller0: left allmulticast mode
[  249.505422][   T43] audit: type=1800 audit(250.404:8411): pid=14069 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2563" name="attach" dev="sysfs" ino=36689 res=0 errno=-13
[  249.506107][T14021] team0: Port device team_slave_0 added
[  249.508594][T14069] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9)
[  249.508609][T14069] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  249.509484][T14069] vhci_hcd vhci_hcd.0: Device attached
[  249.509563][T14021] team0: Port device team_slave_1 added
[  249.509867][T14070] vhci_hcd: cannot find the pending unlink 6
[  249.575793][T14021] batman_adv: batadv0: Adding interface: batadv_slave_0
[  249.575799][T14021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  249.575812][T14021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  249.576338][T14070] vhci_hcd: connection closed
[  249.576714][T14021] batman_adv: batadv0: Adding interface: batadv_slave_1
[  249.576720][T14021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  249.576733][T14021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  249.577092][   T12] vhci_hcd vhci_hcd.5: stop threads
[  249.577105][   T12] vhci_hcd vhci_hcd.5: release socket
[  249.577115][   T12] vhci_hcd vhci_hcd.5: disconnect device
[  249.619948][ T5857] hsr_slave_0: left promiscuous mode
[  249.623934][ T5857] hsr_slave_1: left promiscuous mode
[  249.624437][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  249.624446][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_0
[  249.626619][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  249.626627][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_1
[  249.635837][ T5857] veth1_macvtap: left promiscuous mode
[  249.635857][ T5857] veth0_macvtap: left promiscuous mode
[  249.635899][ T5857] veth1_vlan: left promiscuous mode
[  249.635913][ T5857] veth0_vlan: left promiscuous mode
[  249.642736][   T43] audit: type=1400 audit(250.544:8412): avc:  denied  { write } for  pid=14074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  249.720836][   T43] audit: type=1400 audit(250.624:8413): avc:  denied  { write } for  pid=14079 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  249.883921][ T5857] team0 (unregistering): Port device team_slave_1 removed
[  249.903575][ T5857] team0 (unregistering): Port device team_slave_0 removed
[  249.924614][T14088] __nla_validate_parse: 9 callbacks suppressed
[  249.924625][T14088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2568'.
[  249.924635][T14088] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2568'.
[  250.010993][ T5496] 8021q: adding VLAN 0 to HW filter on device eth13
[  250.066198][T14021] hsr_slave_0: entered promiscuous mode
[  250.066744][T14021] hsr_slave_1: entered promiscuous mode
[  250.067214][T14021] debugfs: 'hsr0' already exists in 'hsr'
[  250.067225][T14021] Cannot create hsr debugfs directory
[  250.132535][T14100] FAULT_INJECTION: forcing a failure.
[  250.132535][T14100] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  250.132554][T14100] CPU: 0 UID: 0 PID: 14100 Comm: syz.3.2572 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  250.132569][T14100] Tainted: [L]=SOFTLOCKUP
[  250.132573][T14100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  250.132580][T14100] Call Trace:
[  250.132584][T14100]  <TASK>
[  250.132589][T14100]  dump_stack_lvl+0x100/0x190
[  250.132608][T14100]  should_fail_ex.cold+0x5/0xa
[  250.132625][T14100]  _copy_from_user+0x2e/0xd0
[  250.132639][T14100]  ctl_ioctl+0xf3/0xcc0
[  250.132673][T14100]  ? __pfx_ctl_ioctl+0x10/0x10
[  250.132699][T14100]  ? selinux_file_ioctl+0x1e0/0x290
[  250.132718][T14100]  dm_ctl_ioctl+0x22/0x30
[  250.132730][T14100]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[  250.132742][T14100]  __x64_sys_ioctl+0x18e/0x210
[  250.132757][T14100]  do_syscall_64+0x123/0x790
[  250.132774][T14100]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.132786][T14100] RIP: 0033:0x7f143739f559
[  250.132796][T14100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  250.132807][T14100] RSP: 002b:00007f14381b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  250.132818][T14100] RAX: ffffffffffffffda RBX: 00007f1437625fa0 RCX: 00007f143739f559
[  250.132825][T14100] RDX: 0000200000000280 RSI: 00000000c138fd09 RDI: 0000000000000003
[  250.132832][T14100] RBP: 00007f14381b3090 R08: 0000000000000000 R09: 0000000000000000
[  250.132838][T14100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  250.132845][T14100] R13: 00007f1437626038 R14: 00007f1437625fa0 R15: 00007ffebcd3fea8
[  250.132859][T14100]  </TASK>
[  250.227897][ T5144] Bluetooth: hci0: command tx timeout
[  250.230235][T14104] CUSE: unknown device info ""
[  250.230242][T14104] CUSE: unknown device info ""
[  250.230247][T14104] CUSE: unknown device info "ÿ"
[  250.230251][T14104] CUSE: unknown device info ""
[  250.230255][T14104] CUSE: unknown device info "ý"
[  250.230259][T14104] CUSE: unknown device info ""
[  250.230263][T14104] CUSE: unknown device info ""
[  250.230266][T14104] CUSE: DEVNAME unspecified
[  250.305372][ T5857] IPVS: stop unused estimator thread 0...
[  250.328774][T14021] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  250.334712][T14021] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  250.335222][T14021] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  250.339944][T14021] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  250.342977][T14021] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  250.351410][T14021] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  250.351825][T14021] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  250.355940][T14021] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  250.404409][T14021] 8021q: adding VLAN 0 to HW filter on device bond0
[  250.415655][T14021] 8021q: adding VLAN 0 to HW filter on device team0
[  250.420587][  T166] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.420630][  T166] bridge0: port 1(bridge_slave_0) entered forwarding state
[  250.428371][  T166] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.428431][  T166] bridge0: port 2(bridge_slave_1) entered forwarding state
[  250.709592][T14139] FAULT_INJECTION: forcing a failure.
[  250.709592][T14139] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  250.709622][T14139] CPU: 3 UID: 0 PID: 14139 Comm: syz.5.2579 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  250.709638][T14139] Tainted: [L]=SOFTLOCKUP
[  250.709643][T14139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  250.709650][T14139] Call Trace:
[  250.709655][T14139]  <TASK>
[  250.709660][T14139]  dump_stack_lvl+0x100/0x190
[  250.709681][T14139]  should_fail_ex.cold+0x5/0xa
[  250.709700][T14139]  _copy_to_user+0x32/0xd0
[  250.709715][T14139]  simple_read_from_buffer+0xcb/0x170
[  250.709735][T14139]  proc_fail_nth_read+0x1af/0x230
[  250.709772][T14139]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  250.709791][T14139]  ? rw_verify_area+0xce/0x6d0
[  250.709803][T14139]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  250.709821][T14139]  vfs_read+0x1e4/0xb40
[  250.709835][T14139]  ? lock_acquire+0x1d1/0x380
[  250.709849][T14139]  ? __fget_files+0x34/0x3d0
[  250.709865][T14139]  ? __pfx_vfs_read+0x10/0x10
[  250.709878][T14139]  ? find_held_lock+0x2b/0x80
[  250.709889][T14139]  ? __fget_files+0x215/0x3d0
[  250.709908][T14139]  ? __fget_files+0x21f/0x3d0
[  250.709929][T14139]  ksys_read+0x12a/0x250
[  250.709942][T14139]  ? __pfx_ksys_read+0x10/0x10
[  250.709960][T14139]  do_syscall_64+0x123/0x790
[  250.709978][T14139]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.709991][T14139] RIP: 0033:0x7f0a24b5fd8e
[  250.710001][T14139] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  250.710012][T14139] RSP: 002b:00007f0a22df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  250.710023][T14139] RAX: ffffffffffffffda RBX: 00007f0a22df66c0 RCX: 00007f0a24b5fd8e
[  250.710031][T14139] RDX: 000000000000000f RSI: 00007f0a22df60a0 RDI: 0000000000000004
[  250.710038][T14139] RBP: 00007f0a22df6090 R08: 0000000000000000 R09: 0000000000000000
[  250.710044][T14139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  250.710051][T14139] R13: 00007f0a24e26038 R14: 00007f0a24e25fa0 R15: 00007ffea82a87f8
[  250.710066][T14139]  </TASK>
[  250.716285][T14021] 8021q: adding VLAN 0 to HW filter on device batadv0
[  250.866184][T14021] veth0_vlan: entered promiscuous mode
[  250.875357][T14021] veth1_vlan: entered promiscuous mode
[  250.895269][T14021] veth0_macvtap: entered promiscuous mode
[  250.897480][T14021] veth1_macvtap: entered promiscuous mode
[  250.911083][T14021] batman_adv: batadv0: Interface activated: batadv_slave_0
[  250.922194][T14021] batman_adv: batadv0: Interface activated: batadv_slave_1
[  250.941778][T14021] net_ratelimit: 462 callbacks suppressed
[  251.044198][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.044212][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.048089][ T6195] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.048133][ T6195] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.048155][ T6195] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.070809][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.070821][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.080513][ T5857] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.274727][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xacdb instead
[  251.274738][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x20a4 instead
[  251.274750][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x283f instead
[  251.274762][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x71bf instead
[  251.274774][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xec80 instead
[  251.274786][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x8bb6 instead
[  251.274794][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x2cc7 instead
[  251.274802][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x7c79 instead
[  251.274810][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x3ad3 instead
[  251.274819][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xf73b instead
[  251.274827][T14181] jffs2: Further such events for this erase block will not be printed
[  251.275050][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0xd0b7 instead
[  251.275063][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0xf5db instead
[  251.275075][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0xd42e instead
[  251.275085][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0x1133 instead
[  251.275093][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0xb653 instead
[  251.275101][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x9ed9 instead
[  251.275109][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xe29e instead
[  251.275117][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0xa8ad instead
[  251.275125][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x013b instead
[  251.275134][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x5b00 instead
[  251.275141][T14181] jffs2: Further such events for this erase block will not be printed
[  251.275388][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0xa6d0 instead
[  251.275398][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x741a instead
[  251.275406][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x3562 instead
[  251.275414][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0x2542 instead
[  251.275423][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0xe991 instead
[  251.275440][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0x4c0b instead
[  251.275449][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x52f2 instead
[  251.275457][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x56e7 instead
[  251.275465][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0xaacf instead
[  251.275472][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0x601c instead
[  251.275480][T14181] jffs2: Further such events for this erase block will not be printed
[  251.275698][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x30ae instead
[  251.275706][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0xc4ac instead
[  251.275715][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x68be instead
[  251.275723][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0xd992 instead
[  251.275731][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0xc24c instead
[  251.275739][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x415a instead
[  251.275747][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x19f2 instead
[  251.275755][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0xe896 instead
[  251.275763][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0x00df instead
[  251.275771][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0x0c86 instead
[  251.275779][T14181] jffs2: Further such events for this erase block will not be printed
[  251.275993][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x9aed instead
[  251.276002][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x29ae instead
[  251.276010][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0xbef3 instead
[  251.276018][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0xc8cd instead
[  251.276026][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0xb767 instead
[  251.276034][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0x8c8d instead
[  251.276042][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x7667 instead
[  251.276050][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0xd77e instead
[  251.276058][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x0bcf instead
[  251.276066][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0x7dfe instead
[  251.276074][T14181] jffs2: Further such events for this erase block will not be printed
[  251.276287][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x24e9 instead
[  251.276296][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x3890 instead
[  251.276304][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x5f2b instead
[  251.276312][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0x739b instead
[  251.276320][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0x6cbb instead
[  251.276328][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0xcefc instead
[  251.276336][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xa8f1 instead
[  251.276344][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x51b7 instead
[  251.276352][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0xd533 instead
[  251.276360][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0xf759 instead
[  251.276367][T14181] jffs2: Further such events for this erase block will not be printed
[  251.276586][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0xc9bb instead
[  251.276594][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x1ace instead
[  251.276602][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x6fd9 instead
[  251.276611][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0xa44c instead
[  251.276662][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0x2035 instead
[  251.276673][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0xad0c instead
[  251.276681][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x29f9 instead
[  251.276689][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0x362c instead
[  251.276697][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0x831e instead
[  251.276705][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x9035 instead
[  251.276712][T14181] jffs2: Further such events for this erase block will not be printed
[  251.276972][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x6e58 instead
[  251.276983][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x05a5 instead
[  251.276991][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0x1c99 instead
[  251.277002][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0x535e instead
[  251.277012][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x1dc6 instead
[  251.277020][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x8c5a instead
[  251.277029][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x2681 instead
[  251.277037][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0xde4e instead
[  251.277045][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0x6c2d instead
[  251.277053][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x8ff8 instead
[  251.277061][T14181] jffs2: Further such events for this erase block will not be printed
[  251.277277][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0xeae8 instead
[  251.277286][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0xde27 instead
[  251.277294][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0xd2f2 instead
[  251.277302][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0xb531 instead
[  251.277310][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0xf37c instead
[  251.277318][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0xe928 instead
[  251.277326][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xcc69 instead
[  251.277334][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0x4f1e instead
[  251.277342][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x9fd8 instead
[  251.277350][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0xd098 instead
[  251.277375][T14181] jffs2: Further such events for this erase block will not be printed
[  251.277609][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0xe7ea instead
[  251.277619][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0aac instead
[  251.277627][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0x1048 instead
[  251.277636][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0x944d instead
[  251.277644][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0xcdc3 instead
[  251.277652][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0x5f2a instead
[  251.277660][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x1819 instead
[  251.277668][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0x3147 instead
[  251.277676][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0x5f05 instead
[  251.277684][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0x2793 instead
[  251.277691][T14181] jffs2: Further such events for this erase block will not be printed
[  251.278332][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0xf1ce instead
[  251.278343][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x5d7b instead
[  251.278351][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0x5462 instead
[  251.278359][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0xf13e instead
[  251.278367][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0x0a86 instead
[  251.278375][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0x2e37 instead
[  251.278383][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x9693 instead
[  251.278391][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x7075 instead
[  251.278399][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0xcfe5 instead
[  251.278407][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x7d11 instead
[  251.278414][T14181] jffs2: Further such events for this erase block will not be printed
[  251.278632][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x1fca instead
[  251.278641][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x7041 instead
[  251.278649][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0x9297 instead
[  251.278657][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0xfe02 instead
[  251.278665][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x00fc instead
[  251.278673][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0x6015 instead
[  251.278681][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x8a2e instead
[  251.278689][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x7d04 instead
[  251.278697][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0x799e instead
[  251.278705][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x3e10 instead
[  251.278712][T14181] jffs2: Further such events for this erase block will not be printed
[  251.278960][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0xa8ee instead
[  251.278970][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x5d7b instead
[  251.278979][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0x93c0 instead
[  251.278986][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0xb143 instead
[  251.278994][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0x128e instead
[  251.279002][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0xea64 instead
[  251.279010][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x9613 instead
[  251.279018][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0xac2b instead
[  251.279026][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x1520 instead
[  251.279034][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0x31a9 instead
[  251.279042][T14181] jffs2: Further such events for this erase block will not be printed
[  251.280639][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0xaf56 instead
[  251.280649][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x4055 instead
[  251.280657][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0x66c9 instead
[  251.280665][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0xdfb6 instead
[  251.280673][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0xc6db instead
[  251.280681][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0x3ed3 instead
[  251.280689][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xc7bb instead
[  251.280697][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0xb832 instead
[  251.280705][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0x5518 instead
[  251.280713][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x4165 instead
[  251.280721][T14181] jffs2: Further such events for this erase block will not be printed
[  251.280956][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0xa29f instead
[  251.280967][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0xfd5a instead
[  251.280975][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0x66bd instead
[  251.280983][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x368f instead
[  251.280991][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0x0c8e instead
[  251.280999][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x45ac instead
[  251.281011][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xd0f3 instead
[  251.281019][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x3ea3 instead
[  251.281027][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x9710 instead
[  251.281035][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0xe800 instead
[  251.281043][T14181] jffs2: Further such events for this erase block will not be printed
[  251.281260][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0xa65c instead
[  251.281268][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x4d2c instead
[  251.281277][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x406f instead
[  251.281284][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0xb29b instead
[  251.281292][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0xcc5c instead
[  251.281300][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0xf037 instead
[  251.281308][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x62bd instead
[  251.281316][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0xcf5e instead
[  251.281324][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x01e8 instead
[  251.281332][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0x953f instead
[  251.281340][T14181] jffs2: Further such events for this erase block will not be printed
[  251.281586][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x8294 instead
[  251.281596][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0xa70e instead
[  251.281604][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0x4a1d instead
[  251.281612][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001000c: 0xfceb instead
[  251.281620][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010010: 0xfa74 instead
[  251.281628][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0x452e instead
[  251.281636][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x9f73 instead
[  251.281644][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0xe097 instead
[  251.281652][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0x146a instead
[  251.281660][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0x7806 instead
[  251.281668][T14181] jffs2: Further such events for this erase block will not be printed
[  251.281895][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x25b1 instead
[  251.281904][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x32cb instead
[  251.281912][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011008: 0x5919 instead
[  251.281920][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001100c: 0x63d0 instead
[  251.281928][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011010: 0x4144 instead
[  251.281936][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011014: 0x5be4 instead
[  251.281944][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xcb11 instead
[  251.281952][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001101c: 0x2c65 instead
[  251.281960][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011020: 0x253c instead
[  251.281968][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011024: 0x4bf4 instead
[  251.281975][T14181] jffs2: Further such events for this erase block will not be printed
[  251.282189][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0xe050 instead
[  251.282197][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0xb0dd instead
[  251.282205][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0x7e9b instead
[  251.282213][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0x60d7 instead
[  251.282221][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0x334e instead
[  251.282229][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012014: 0xc366 instead
[  251.282237][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x1e55 instead
[  251.282245][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0x5669 instead
[  251.282253][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0xb9b8 instead
[  251.282261][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0x9694 instead
[  251.282269][T14181] jffs2: Further such events for this erase block will not be printed
[  251.282482][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0xba44 instead
[  251.282491][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x1c21 instead
[  251.282499][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0x7b5c instead
[  251.282507][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0x285a instead
[  251.282515][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0x990f instead
[  251.282523][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0xd3f7 instead
[  251.282531][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x6448 instead
[  251.282539][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0xb674 instead
[  251.282547][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0xe41d instead
[  251.282558][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0x3287 instead
[  251.282566][T14181] jffs2: Further such events for this erase block will not be printed
[  251.288099][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x438e instead
[  251.288112][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0xf7d8 instead
[  251.288120][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0x4d83 instead
[  251.288128][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0xb370 instead
[  251.288136][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0xa2ae instead
[  251.288144][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0x9d9f instead
[  251.288152][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x54d8 instead
[  251.288160][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0x8e7b instead
[  251.288168][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0x90f4 instead
[  251.288176][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0x26e1 instead
[  251.288183][T14181] jffs2: Further such events for this erase block will not be printed
[  251.288399][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0xcb60 instead
[  251.288421][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x401f instead
[  251.288429][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0x8c8e instead
[  251.288437][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0xf153 instead
[  251.288445][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0x34e5 instead
[  251.288453][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0xc6b4 instead
[  251.288461][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x73ee instead
[  251.288469][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0xce97 instead
[  251.288477][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0x2438 instead
[  251.288485][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0x99c7 instead
[  251.288493][T14181] jffs2: Further such events for this erase block will not be printed
[  251.288708][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0xcc87 instead
[  251.288717][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0xe08e instead
[  251.288725][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0x8ee1 instead
[  251.288733][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0x602b instead
[  251.288741][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0x9bc3 instead
[  251.288749][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0x9ecd instead
[  251.288757][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x0108 instead
[  251.288765][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0x9588 instead
[  251.288773][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0xce3c instead
[  251.288781][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0x0a17 instead
[  251.288789][T14181] jffs2: Further such events for this erase block will not be printed
[  251.289022][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x0182 instead
[  251.289033][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x1e6a instead
[  251.289041][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0x33c5 instead
[  251.289049][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0xdc3a instead
[  251.289057][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0x5d27 instead
[  251.289065][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0x50b4 instead
[  251.289073][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xce59 instead
[  251.289081][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0x11f1 instead
[  251.289089][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0xb180 instead
[  251.289097][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0xbe56 instead
[  251.289105][T14181] jffs2: Further such events for this erase block will not be printed
[  251.289333][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x7dcd instead
[  251.289343][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x2e97 instead
[  251.289351][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0x7085 instead
[  251.289359][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0x91ef instead
[  251.289367][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0x7efc instead
[  251.289375][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0x1875 instead
[  251.289383][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x04a6 instead
[  251.289391][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0xffd8 instead
[  251.289399][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0xd8a7 instead
[  251.289407][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0x8c62 instead
[  251.289415][T14181] jffs2: Further such events for this erase block will not be printed
[  251.293087][T14182] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[  251.293109][T14182] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  251.293189][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0xe853 instead
[  251.293200][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x7095 instead
[  251.293209][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0x045a instead
[  251.293217][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0x4487 instead
[  251.293225][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0x04a4 instead
[  251.293233][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0x99ac instead
[  251.293241][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x6dfc instead
[  251.293249][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0x1d12 instead
[  251.293257][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0x0b58 instead
[  251.293265][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0x9546 instead
[  251.293273][T14181] jffs2: Further such events for this erase block will not be printed
[  251.293487][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x81e4 instead
[  251.293496][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x6c1f instead
[  251.293504][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0xe5e9 instead
[  251.293512][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0xab3e instead
[  251.293520][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0xa2a2 instead
[  251.293528][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0xb7c2 instead
[  251.293536][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x521c instead
[  251.293544][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0xef12 instead
[  251.293552][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0xbca5 instead
[  251.293560][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0x255c instead
[  251.293567][T14181] jffs2: Further such events for this erase block will not be printed
[  251.293774][T14182] vhci_hcd vhci_hcd.0: Device attached
[  251.293808][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0xb095 instead
[  251.293818][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0xc633 instead
[  251.293826][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0x0161 instead
[  251.293834][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0x7ef9 instead
[  251.293842][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0x2fb0 instead
[  251.293850][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0x0d0c instead
[  251.293858][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x83b3 instead
[  251.293866][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0x8909 instead
[  251.293874][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0xe733 instead
[  251.293882][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0xb5b1 instead
[  251.293889][T14181] jffs2: Further such events for this erase block will not be printed
[  251.294103][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0xaca4 instead
[  251.294112][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x979c instead
[  251.294120][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0x3bbe instead
[  251.294128][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0x74d3 instead
[  251.294136][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0xbcad instead
[  251.294144][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0x443d instead
[  251.294152][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xe8e2 instead
[  251.294160][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0x63f1 instead
[  251.294168][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0xa1a9 instead
[  251.294176][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0x99d7 instead
[  251.294183][T14181] jffs2: Further such events for this erase block will not be printed
[  251.294395][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x2eba instead
[  251.294404][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x1e53 instead
[  251.294412][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0x4a28 instead
[  251.294419][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0xcc50 instead
[  251.294427][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0x569c instead
[  251.294435][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0x3ee7 instead
[  251.294443][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x2d2a instead
[  251.294451][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0xd458 instead
[  251.294459][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0x0d59 instead
[  251.294467][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0xe552 instead
[  251.294475][T14181] jffs2: Further such events for this erase block will not be printed
[  251.294690][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x55e2 instead
[  251.294699][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x029c instead
[  251.294707][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0xcd36 instead
[  251.294715][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0x69ca instead
[  251.294723][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0x1d80 instead
[  251.294731][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0xdf3f instead
[  251.294738][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x69da instead
[  251.294746][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0xc68e instead
[  251.294754][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0x99ac instead
[  251.294762][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0xd882 instead
[  251.294770][T14181] jffs2: Further such events for this erase block will not be printed
[  251.294988][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x39c0 instead
[  251.294996][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x66ee instead
[  251.295004][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0xb98b instead
[  251.295012][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0x2340 instead
[  251.295020][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0x13a3 instead
[  251.295028][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0x530d instead
[  251.295036][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x92cc instead
[  251.295044][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0xcfe6 instead
[  251.295052][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0x2c6b instead
[  251.295060][T14181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0xe4ec instead
[  251.295067][T14181] jffs2: Further such events for this erase block will not be printed
[  251.295209][T14183] vhci_hcd: cannot find the pending unlink 6
[  251.296179][T14183] vhci_hcd: connection closed
[  251.296513][ T6195] vhci_hcd vhci_hcd.4: stop threads
[  251.296526][ T6195] vhci_hcd vhci_hcd.4: release socket
[  251.296541][ T6195] vhci_hcd vhci_hcd.4: disconnect device
[  251.298945][T14181] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  251.298951][T14181] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  251.300708][T14181] FAULT_INJECTION: forcing a failure.
[  251.300708][T14181] name failslab, interval 1, probability 0, space 0, times 0
[  251.300726][T14181] CPU: 3 UID: 0 PID: 14181 Comm: syz.5.2589 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  251.300741][T14181] Tainted: [L]=SOFTLOCKUP
[  251.300745][T14181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  251.300751][T14181] Call Trace:
[  251.300755][T14181]  <TASK>
[  251.300760][T14181]  dump_stack_lvl+0x100/0x190
[  251.300781][T14181]  should_fail_ex.cold+0x5/0xa
[  251.300798][T14181]  should_failslab+0xc2/0x120
[  251.300814][T14181]  kmem_cache_alloc_noprof+0x92/0x6a0
[  251.300828][T14181]  ? alloc_empty_file+0x5b/0x1c0
[  251.300841][T14181]  alloc_empty_file+0x5b/0x1c0
[  251.300852][T14181]  path_openat+0xd6/0x23f0
[  251.300870][T14181]  ? __pfx_path_openat+0x10/0x10
[  251.300913][T14181]  do_file_open+0x20e/0x430
[  251.300932][T14181]  ? __pfx_do_file_open+0x10/0x10
[  251.300957][T14181]  ? _raw_spin_unlock+0x28/0x50
[  251.300971][T14181]  ? alloc_fd+0x471/0x7a0
[  251.300992][T14181]  do_sys_openat2+0x163/0x1d0
[  251.301003][T14181]  ? __pfx_do_sys_openat2+0x10/0x10
[  251.301014][T14181]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  251.301031][T14181]  ? __fget_files+0x21f/0x3d0
[  251.301049][T14181]  __x64_sys_openat+0x12d/0x210
[  251.301060][T14181]  ? __pfx___x64_sys_openat+0x10/0x10
[  251.301070][T14181]  ? ksys_write+0x1ac/0x250
[  251.301088][T14181]  do_syscall_64+0x123/0x790
[  251.301105][T14181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.301116][T14181] RIP: 0033:0x7f0a24b9f559
[  251.301126][T14181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  251.301137][T14181] RSP: 002b:00007f0a22df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  251.301148][T14181] RAX: ffffffffffffffda RBX: 00007f0a24e25fa0 RCX: 00007f0a24b9f559
[  251.301155][T14181] RDX: 0000000000101042 RSI: 0000200000004ec0 RDI: ffffffffffffff9c
[  251.301161][T14181] RBP: 00007f0a22df6090 R08: 0000000000000000 R09: 0000000000000000
[  251.301168][T14181] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000001
[  251.301174][T14181] R13: 00007f0a24e26038 R14: 00007f0a24e25fa0 R15: 00007ffea82a87f8
[  251.301189][T14181]  </TASK>
[  251.344059][T14186] FAULT_INJECTION: forcing a failure.
[  251.344059][T14186] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  251.344088][T14186] CPU: 1 UID: 0 PID: 14186 Comm: syz.5.2591 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  251.344111][T14186] Tainted: [L]=SOFTLOCKUP
[  251.344117][T14186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  251.344128][T14186] Call Trace:
[  251.344134][T14186]  <TASK>
[  251.344141][T14186]  dump_stack_lvl+0x100/0x190
[  251.344171][T14186]  should_fail_ex.cold+0x5/0xa
[  251.344196][T14186]  strncpy_from_user+0x3b/0x2d0
[  251.344223][T14186]  setxattr_copy+0x8a/0x210
[  251.344242][T14186]  io_fsetxattr_prep+0x1f1/0x320
[  251.344272][T14186]  io_submit_sqes+0xa48/0x2760
[  251.344304][T14186]  __do_sys_io_uring_enter+0xa88/0x1b10
[  251.344327][T14186]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  251.344354][T14186]  ? __fget_files+0x21f/0x3d0
[  251.344379][T14186]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[  251.344402][T14186]  ? fput+0x7c/0x100
[  251.344428][T14186]  ? ksys_write+0x1ac/0x250
[  251.344449][T14186]  ? __pfx_ksys_write+0x10/0x10
[  251.344476][T14186]  do_syscall_64+0x123/0x790
[  251.344501][T14186]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.344520][T14186] RIP: 0033:0x7f0a24b9f559
[  251.344536][T14186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  251.344551][T14186] RSP: 002b:00007f0a22df5fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  251.344568][T14186] RAX: ffffffffffffffda RBX: 0000200000004340 RCX: 00007f0a24b9f559
[  251.344579][T14186] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000003
[  251.344589][T14186] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000008
[  251.344600][T14186] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  251.344609][T14186] R13: 00007f0a24e26038 R14: 00007f0a24e25fa0 R15: 00007ffea82a87f8
[  251.344639][T14186]  </TASK>
[  251.450552][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xacdb instead
[  251.450563][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x20a4 instead
[  251.450573][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x283f instead
[  251.450584][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x71bf instead
[  251.450594][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xec80 instead
[  251.450605][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x8bb6 instead
[  251.450616][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x2cc7 instead
[  251.450626][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x7c79 instead
[  251.450637][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x3ad3 instead
[  251.450647][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xf73b instead
[  251.450656][T14191] jffs2: Further such events for this erase block will not be printed
[  251.451723][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0xd0b7 instead
[  251.451743][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0xf5db instead
[  251.451759][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0xd42e instead
[  251.451774][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0x1133 instead
[  251.451851][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0xb653 instead
[  251.451869][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x9ed9 instead
[  251.451887][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xe29e instead
[  251.451902][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0xa8ad instead
[  251.451916][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x013b instead
[  251.451928][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x5b00 instead
[  251.451942][T14191] jffs2: Further such events for this erase block will not be printed
[  251.452191][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0xa6d0 instead
[  251.452202][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x741a instead
[  251.452212][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x3562 instead
[  251.452223][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0x2542 instead
[  251.452233][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0xe991 instead
[  251.452243][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0x4c0b instead
[  251.452254][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x52f2 instead
[  251.452264][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x56e7 instead
[  251.452274][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0xaacf instead
[  251.452284][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0x601c instead
[  251.452293][T14191] jffs2: Further such events for this erase block will not be printed
[  251.452554][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x30ae instead
[  251.452565][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0xc4ac instead
[  251.452576][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x68be instead
[  251.452586][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0xd992 instead
[  251.452596][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0xc24c instead
[  251.452607][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x415a instead
[  251.452618][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x19f2 instead
[  251.452627][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0xe896 instead
[  251.452636][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0x00df instead
[  251.452646][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0x0c86 instead
[  251.452655][T14191] jffs2: Further such events for this erase block will not be printed
[  251.452919][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x9aed instead
[  251.452931][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x29ae instead
[  251.452946][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0xbef3 instead
[  251.452955][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0xc8cd instead
[  251.452963][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0xb767 instead
[  251.452972][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0x8c8d instead
[  251.452980][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x7667 instead
[  251.452988][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0xd77e instead
[  251.452997][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x0bcf instead
[  251.453006][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0x7dfe instead
[  251.453014][T14191] jffs2: Further such events for this erase block will not be printed
[  251.453312][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x24e9 instead
[  251.453323][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x3890 instead
[  251.453332][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x5f2b instead
[  251.453340][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0x739b instead
[  251.453348][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0x6cbb instead
[  251.453357][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0xcefc instead
[  251.453365][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xa8f1 instead
[  251.453373][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x51b7 instead
[  251.453382][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0xd533 instead
[  251.453390][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0xf759 instead
[  251.453398][T14191] jffs2: Further such events for this erase block will not be printed
[  251.453621][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0xc9bb instead
[  251.453630][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x1ace instead
[  251.453639][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x6fd9 instead
[  251.453647][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0xa44c instead
[  251.453655][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0x2035 instead
[  251.453664][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0xad0c instead
[  251.453672][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x29f9 instead
[  251.453680][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0x362c instead
[  251.453689][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0x831e instead
[  251.453697][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x9035 instead
[  251.453705][T14191] jffs2: Further such events for this erase block will not be printed
[  251.453927][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x6e58 instead
[  251.453940][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x05a5 instead
[  251.453948][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0x1c99 instead
[  251.453957][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0x535e instead
[  251.453965][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x1dc6 instead
[  251.453973][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x8c5a instead
[  251.453982][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x2681 instead
[  251.454031][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0xde4e instead
[  251.454041][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0x6c2d instead
[  251.454049][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x8ff8 instead
[  251.454058][T14191] jffs2: Further such events for this erase block will not be printed
[  251.454279][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0xeae8 instead
[  251.454287][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0xde27 instead
[  251.454296][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0xd2f2 instead
[  251.454304][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0xb531 instead
[  251.454313][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0xf37c instead
** 37 printk messages dropped **
[  251.455275][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x3e10 instead
** 195 printk messages dropped **
[  251.463397][T14191] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0x3ee7 instead
** 261 printk messages dropped **
** 60 printk messages dropped **
** 35 printk messages dropped **
[  251.914181][T14207] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x52f2 instead
** 201 printk messages dropped **
[  251.922174][T14207] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0xb370 instead
** 217 printk messages dropped **
** 63 printk messages dropped **
** 79 printk messages dropped **
** 114 printk messages dropped **
** 98 printk messages dropped **
** 98 printk messages dropped **
** 35 printk messages dropped **
[  252.308793][ T5144] Bluetooth: hci0: command tx timeout
[  252.644227][T14238] blktrace: Concurrent blktraces are not allowed on sg0
[  252.904093][T14249] FAULT_INJECTION: forcing a failure.
[  252.904093][T14249] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  252.904111][T14249] CPU: 0 UID: 0 PID: 14249 Comm: syz.7.2607 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  252.904126][T14249] Tainted: [L]=SOFTLOCKUP
[  252.904130][T14249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  252.904137][T14249] Call Trace:
[  252.904141][T14249]  <TASK>
[  252.904145][T14249]  dump_stack_lvl+0x100/0x190
[  252.904165][T14249]  should_fail_ex.cold+0x5/0xa
[  252.904183][T14249]  _copy_from_user+0x2e/0xd0
[  252.904197][T14249]  usbdev_ioctl+0x2914/0x3b40
[  252.904228][T14249]  ? __pfx_usbdev_ioctl+0x10/0x10
[  252.904245][T14249]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  252.904264][T14249]  ? do_vfs_ioctl+0x226/0x13e0
[  252.904279][T14249]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  252.904299][T14249]  ? __fget_files+0x34/0x3d0
[  252.904321][T14249]  ? selinux_file_ioctl+0x1e0/0x290
[  252.904338][T14249]  ? selinux_file_ioctl+0x1e7/0x290
[  252.904355][T14249]  ? __pfx_usbdev_ioctl+0x10/0x10
[  252.904369][T14249]  __x64_sys_ioctl+0x18e/0x210
[  252.904384][T14249]  do_syscall_64+0x123/0x790
** 79 printk messages dropped **
** 54 printk messages dropped **
** 59 printk messages dropped **
** 69 printk messages dropped **
** 80 printk messages dropped **
** 64 printk messages dropped **
** 49 printk messages dropped **
** 46 printk messages dropped **
** 64 printk messages dropped **
** 97 printk messages dropped **
** 81 printk messages dropped **
** 97 printk messages dropped **
** 95 printk messages dropped **
** 85 printk messages dropped **
** 87 printk messages dropped **
** 114 printk messages dropped **
** 98 printk messages dropped **
** 78 printk messages dropped **
** 105 printk messages dropped **
** 95 printk messages dropped **
** 89 printk messages dropped **
** 83 printk messages dropped **
** 83 printk messages dropped **
** 83 printk messages dropped **
** 59 printk messages dropped **
** 95 printk messages dropped **
** 66 printk messages dropped **
** 70 printk messages dropped **
** 61 printk messages dropped **
** 66 printk messages dropped **
** 61 printk messages dropped **
** 47 printk messages dropped **
** 59 printk messages dropped **
** 57 printk messages dropped **
** 61 printk messages dropped **
** 57 printk messages dropped **
** 59 printk messages dropped **
** 49 printk messages dropped **
** 65 printk messages dropped **
** 65 printk messages dropped **
** 59 printk messages dropped **
** 53 printk messages dropped **
** 65 printk messages dropped **
** 58 printk messages dropped **
** 62 printk messages dropped **
** 65 printk messages dropped **
** 63 printk messages dropped **
** 66 printk messages dropped **
** 76 printk messages dropped **
** 64 printk messages dropped **
** 70 printk messages dropped **
** 62 printk messages dropped **
** 59 printk messages dropped **
** 61 printk messages dropped **
** 58 printk messages dropped **
** 63 printk messages dropped **
** 68 printk messages dropped **
** 59 printk messages dropped **
** 80 printk messages dropped **
** 61 printk messages dropped **
** 59 printk messages dropped **
** 89 printk messages dropped **
** 83 printk messages dropped **
** 89 printk messages dropped **
** 77 printk messages dropped **
** 87 printk messages dropped **
** 69 printk messages dropped **
** 85 printk messages dropped **
** 72 printk messages dropped **
** 71 printk messages dropped **
** 54 printk messages dropped **
** 79 printk messages dropped **
** 37 printk messages dropped **
[  253.073824][T14253] syzkaller0: entered promiscuous mode
[  253.073832][T14253] syzkaller0: entered allmulticast mode
[  253.132692][T14256] bridge0: port 3(bond0) entered blocking state
[  253.132806][T14256] bridge0: port 3(bond0) entered disabled state
[  253.134100][T14256] bond0: entered allmulticast mode
[  253.134119][T14256] bond_slave_0: entered allmulticast mode
[  253.134135][T14256] bond_slave_1: entered allmulticast mode
[  253.156239][T14256] bond0: entered promiscuous mode
[  253.156248][T14256] bond_slave_0: entered promiscuous mode
[  253.156337][T14256] bond_slave_1: entered promiscuous mode
[  253.156831][T14256] bridge0: port 3(bond0) entered blocking state
[  253.156927][T14256] bridge0: port 3(bond0) entered forwarding state
[  253.722000][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xacdb instead
[  253.722013][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x20a4 instead
[  253.722028][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x283f instead
[  253.722042][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x71bf instead
[  253.722057][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xec80 instead
[  253.722071][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x8bb6 instead
[  253.722085][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x2cc7 instead
[  253.722095][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x7c79 instead
[  253.722109][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x3ad3 instead
[  253.722129][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xf73b instead
[  253.722143][T14265] jffs2: Further such events for this erase block will not be printed
[  253.722556][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0xd0b7 instead
[  253.722573][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0xf5db instead
[  253.722587][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0xd42e instead
[  253.722600][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0x1133 instead
[  253.722609][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0xb653 instead
[  253.722624][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x9ed9 instead
[  253.722638][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xe29e instead
[  253.722652][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0xa8ad instead
[  253.722666][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x013b instead
[  253.722680][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x5b00 instead
[  253.722693][T14265] jffs2: Further such events for this erase block will not be printed
[  253.723009][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0xa6d0 instead
[  253.723024][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x741a instead
[  253.723038][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x3562 instead
[  253.723053][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0x2542 instead
[  253.723069][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0xe991 instead
[  253.723082][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0x4c0b instead
[  253.723096][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x52f2 instead
[  253.723106][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x56e7 instead
[  253.723125][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0xaacf instead
[  253.723139][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0x601c instead
[  253.723153][T14265] jffs2: Further such events for this erase block will not be printed
[  253.723485][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x30ae instead
[  253.723499][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0xc4ac instead
[  253.723508][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x68be instead
[  253.723521][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0xd992 instead
[  253.723534][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0xc24c instead
[  253.723547][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x415a instead
** 50 printk messages dropped **
[  253.725743][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0xde27 instead
[  253.725756][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0xd2f2 instead
[  253.725770][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0xb531 instead
[  253.725783][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0xf37c instead
[  253.725798][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0xe928 instead
[  253.725812][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xcc69 instead
[  253.725827][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0x4f1e instead
[  253.725841][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x9fd8 instead
[  253.725851][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0xd098 instead
[  253.725863][T14265] jffs2: Further such events for this erase block will not be printed
[  253.726194][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0xe7ea instead
[  253.726209][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0aac instead
** 3 printk messages dropped **
[  253.726268][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0x5f2a instead
** 24 printk messages dropped **
[  253.727190][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0x799e instead
[  253.727203][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x3e10 instead
[  253.727216][T14265] jffs2: Further such events for this erase block will not be printed
** 2 printk messages dropped **
[  253.727559][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0x93c0 instead
[  253.727567][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0xb143 instead
[  253.727581][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0x128e instead
[  253.727594][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0xea64 instead
[  253.727607][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x9613 instead
[  253.727621][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0xac2b instead
** 14 printk messages dropped **
[  253.728555][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0xa29f instead
[  253.728566][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0xfd5a instead
[  253.728577][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0x66bd instead
[  253.728590][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x368f instead
[  253.728604][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0x0c8e instead
[  253.728616][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x45ac instead
[  253.728629][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xd0f3 instead
[  253.728643][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x3ea3 instead
[  253.728653][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x9710 instead
[  253.728663][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0xe800 instead
[  253.728676][T14265] jffs2: Further such events for this erase block will not be printed
[  253.729015][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0xa65c instead
[  253.729026][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x4d2c instead
[  253.729040][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x406f instead
[  253.729053][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0xb29b instead
[  253.729066][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0xcc5c instead
[  253.729080][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0xf037 instead
[  253.729093][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x62bd instead
** 1 printk messages dropped **
[  253.729121][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x01e8 instead
** 4 printk messages dropped **
[  253.729495][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0x4a1d instead
** 2 printk messages dropped **
[  253.729536][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0x452e instead
[  253.729547][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x9f73 instead
[  253.729557][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0xe097 instead
[  253.729570][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0x146a instead
[  253.729584][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0x7806 instead
[  253.729597][T14265] jffs2: Further such events for this erase block will not be printed
[  253.729916][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x25b1 instead
[  253.729931][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x32cb instead
[  253.729945][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011008: 0x5919 instead
[  253.729958][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001100c: 0x63d0 instead
[  253.729969][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011010: 0x4144 instead
[  253.729979][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011014: 0x5be4 instead
[  253.729992][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xcb11 instead
[  253.730006][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001101c: 0x2c65 instead
[  253.730019][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011020: 0x253c instead
[  253.730034][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011024: 0x4bf4 instead
[  253.730047][T14265] jffs2: Further such events for this erase block will not be printed
[  253.730364][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0xe050 instead
[  253.730378][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0xb0dd instead
[  253.730392][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0x7e9b instead
[  253.730406][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0x60d7 instead
[  253.730419][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0x334e instead
[  253.730432][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012014: 0xc366 instead
[  253.730444][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x1e55 instead
[  253.730452][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0x5669 instead
[  253.730466][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0xb9b8 instead
[  253.730479][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0x9694 instead
[  253.730492][T14265] jffs2: Further such events for this erase block will not be printed
[  253.730811][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0xba44 instead
[  253.730822][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x1c21 instead
[  253.730836][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0x7b5c instead
[  253.730849][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0x285a instead
[  253.730863][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0x990f instead
[  253.730876][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0xd3f7 instead
[  253.730890][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x6448 instead
[  253.730901][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0xb674 instead
[  253.730909][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0xe41d instead
[  253.730917][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0x3287 instead
[  253.730925][T14265] jffs2: Further such events for this erase block will not be printed
[  253.731141][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x438e instead
[  253.731150][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0xf7d8 instead
[  253.731158][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0x4d83 instead
[  253.731166][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0xb370 instead
[  253.731174][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0xa2ae instead
[  253.731182][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0x9d9f instead
[  253.731190][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x54d8 instead
[  253.731198][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0x8e7b instead
[  253.731206][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0x90f4 instead
[  253.731214][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0x26e1 instead
[  253.731222][T14265] jffs2: Further such events for this erase block will not be printed
[  253.731434][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0xcb60 instead
[  253.731443][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x401f instead
[  253.731451][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0x8c8e instead
[  253.731459][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0xf153 instead
[  253.731468][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0x34e5 instead
[  253.731476][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0xc6b4 instead
[  253.731484][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x73ee instead
[  253.731492][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0xce97 instead
[  253.731500][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0x2438 instead
[  253.731508][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0x99c7 instead
[  253.731516][T14265] jffs2: Further such events for this erase block will not be printed
[  253.731730][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0xcc87 instead
[  253.731739][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0xe08e instead
[  253.731747][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0x8ee1 instead
[  253.731755][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0x602b instead
[  253.731763][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0x9bc3 instead
[  253.731772][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0x9ecd instead
[  253.731780][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x0108 instead
[  253.731788][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0x9588 instead
[  253.731796][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0xce3c instead
[  253.731804][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0x0a17 instead
[  253.731812][T14265] jffs2: Further such events for this erase block will not be printed
[  253.732035][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x0182 instead
[  253.732050][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x1e6a instead
[  253.732063][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0x33c5 instead
[  253.732077][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0xdc3a instead
[  253.732087][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0x5d27 instead
[  253.732097][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0x50b4 instead
[  253.732114][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xce59 instead
[  253.732128][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0x11f1 instead
[  253.732142][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0xb180 instead
[  253.732155][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0xbe56 instead
[  253.732168][T14265] jffs2: Further such events for this erase block will not be printed
[  253.732480][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x7dcd instead
[  253.732495][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x2e97 instead
[  253.732509][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0x7085 instead
[  253.732522][T14265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0x91ef instead
** 107 printk messages dropped **
** 89 printk messages dropped **
** 4 printk messages dropped **
[  253.924161][T14281] FAULT_INJECTION: forcing a failure.
[  253.924161][T14281] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  253.924181][T14281] CPU: 2 UID: 0 PID: 14281 Comm: syz.5.2617 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  253.924196][T14281] Tainted: [L]=SOFTLOCKUP
[  253.924200][T14281] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  253.924206][T14281] Call Trace:
[  253.924210][T14281]  <TASK>
[  253.924216][T14281]  dump_stack_lvl+0x100/0x190
[  253.924236][T14281]  should_fail_ex.cold+0x5/0xa
[  253.924252][T14281]  _copy_from_user+0x2e/0xd0
[  253.924266][T14281]  kstrtouint_from_user+0xd6/0x1d0
[  253.924282][T14281]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  253.924300][T14281]  ? lock_acquire+0x1d1/0x380
[  253.924336][T14281]  proc_fail_nth_write+0x83/0x220
[  253.924357][T14281]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  253.924378][T14281]  vfs_write+0x2aa/0x1050
[  253.924392][T14281]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  253.924409][T14281]  ? lock_acquire+0x1d1/0x380
[  253.924421][T14281]  ? __fget_files+0x34/0x3d0
[  253.924437][T14281]  ? __pfx_vfs_write+0x10/0x10
[  253.924449][T14281]  ? find_held_lock+0x2b/0x80
[  253.924460][T14281]  ? __fget_files+0x215/0x3d0
[  253.924478][T14281]  ? __fget_files+0x21f/0x3d0
[  253.924498][T14281]  ksys_write+0x12a/0x250
[  253.924511][T14281]  ? __pfx_ksys_write+0x10/0x10
[  253.924528][T14281]  do_syscall_64+0x123/0x790
[  253.924551][T14281]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.924563][T14281] RIP: 0033:0x7f0a24b5fd8e
[  253.924572][T14281] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  253.924583][T14281] RSP: 002b:00007f0a22dd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  253.924594][T14281] RAX: ffffffffffffffda RBX: 00007f0a22dd56c0 RCX: 00007f0a24b5fd8e
[  253.924601][T14281] RDX: 0000000000000001 RSI: 00007f0a22dd50a0 RDI: 0000000000000005
[  253.924608][T14281] RBP: 00007f0a22dd5090 R08: 0000000000000000 R09: 0000000000000000
[  253.924614][T14281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  253.924620][T14281] R13: 00007f0a24e26128 R14: 00007f0a24e26090 R15: 00007ffea82a87f8
[  253.924635][T14281]  </TASK>
[  253.974661][   T43] kauditd_printk_skb: 45 callbacks suppressed
[  253.974671][   T43] audit: type=1800 audit(254.874:8459): pid=14283 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2619" name="attach" dev="sysfs" ino=36689 res=0 errno=-13
[  253.979217][T14283] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[  253.979231][T14283] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  253.979266][T14283] vhci_hcd vhci_hcd.0: Device attached
[  253.980943][   T43] audit: type=1800 audit(254.884:8460): pid=14283 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2619" name="attach" dev="sysfs" ino=36689 res=0 errno=-13
[  253.982995][T14283] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6)
[  253.983008][T14283] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  253.983072][T14283] vhci_hcd vhci_hcd.0: Device attached
[  253.989580][T14285] vhci_hcd: connection closed
[  253.989664][T14287] vhci_hcd: connection closed
[  253.989893][ T6195] vhci_hcd vhci_hcd.5: stop threads
[  253.989905][ T6195] vhci_hcd vhci_hcd.5: release socket
[  253.989915][ T6195] vhci_hcd vhci_hcd.5: disconnect device
[  253.990141][ T6195] vhci_hcd vhci_hcd.5: stop threads
[  253.990150][ T6195] vhci_hcd vhci_hcd.5: release socket
[  253.990159][ T6195] vhci_hcd vhci_hcd.5: disconnect device
[  254.157198][T14290] CUSE: unknown device info ""
[  254.157210][T14290] CUSE: unknown device info ""
[  254.157217][T14290] CUSE: unknown device info "ÿ"
[  254.157224][T14290] CUSE: unknown device info ""
[  254.157231][T14290] CUSE: unknown device info "ý"
[  254.157238][T14290] CUSE: unknown device info ""
[  254.157245][T14290] CUSE: unknown device info ""
[  254.157253][T14290] CUSE: DEVNAME unspecified
[  254.157846][T14290] fuse: Unknown parameter 'allo'
[  254.212583][   T43] audit: type=1800 audit(255.114:8461): pid=14292 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2622" name="rotate_all" dev="sysfs" ino=1604 res=0 errno=-13
[  254.216329][T14292] netlink: 42 bytes leftover after parsing attributes in process `syz.4.2622'.
[  254.216723][T14292] comedi comedi0: comedi_config --init_data is deprecated
[  254.318547][T14298] syzkaller0: entered promiscuous mode
[  254.318561][T14298] syzkaller0: entered allmulticast mode
[  254.330847][    T9] usb 8-1: USB disconnect, device number 46
[  254.335492][    T9] navman ttyUSB0: navman converter now disconnected from ttyUSB0
[  254.338045][    T9] navman 8-1:1.0: device disconnected
[  254.372705][T14300] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=57108 sclass=netlink_xfrm_socket pid=14300 comm=syz.3.2626
[  254.397924][ T5144] Bluetooth: hci0: command tx timeout
[  254.402815][T14302] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2627'.
[  254.403030][T14302] netlink: 'syz.3.2627': attribute type 10 has an invalid length.
[  254.403056][T14302] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  254.405101][T14302] team0: Port device wlan0 added
[  254.409788][   T43] audit: type=1800 audit(255.314:8462): pid=14302 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2627" name="arp_validate" dev="sysfs" ino=119915 res=0 errno=-22
[  254.548093][ T6164] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  254.551038][T14312] FAULT_INJECTION: forcing a failure.
[  254.551038][T14312] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  254.551059][T14312] CPU: 0 UID: 0 PID: 14312 Comm: syz.5.2631 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  254.551075][T14312] Tainted: [L]=SOFTLOCKUP
[  254.551080][T14312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  254.551086][T14312] Call Trace:
[  254.551091][T14312]  <TASK>
[  254.551096][T14312]  dump_stack_lvl+0x100/0x190
[  254.551117][T14312]  should_fail_ex.cold+0x5/0xa
[  254.551136][T14312]  _copy_from_iter+0x1f4/0x1690
[  254.551153][T14312]  ? __pfx__copy_from_iter+0x10/0x10
[  254.551170][T14312]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  254.551189][T14312]  skb_copy_datagram_from_iter+0x11f/0x710
[  254.551210][T14312]  packet_sendmsg+0x2145/0x4f30
[  254.551232][T14312]  ? sock_has_perm+0x254/0x320
[  254.551250][T14312]  ? __pfx_sock_has_perm+0x10/0x10
[  254.551270][T14312]  ? __pfx_packet_sendmsg+0x10/0x10
[  254.551286][T14312]  ? __might_fault+0xc5/0x140
[  254.551307][T14312]  ? selinux_socket_sendmsg+0x198/0x2f0
[  254.551325][T14312]  __sys_sendto+0x492/0x4e0
[  254.551340][T14312]  ? __pfx_packet_sendmsg+0x10/0x10
[  254.551357][T14312]  ? __pfx___sys_sendto+0x10/0x10
[  254.551377][T14312]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  254.551399][T14312]  ? ksys_write+0x1ac/0x250
[  254.551414][T14312]  ? __pfx_ksys_write+0x10/0x10
[  254.551430][T14312]  __x64_sys_sendto+0xe0/0x1c0
[  254.551446][T14312]  ? do_syscall_64+0xae/0x790
[  254.551462][T14312]  ? lockdep_hardirqs_on+0x7d/0x110
[  254.551484][T14312]  do_syscall_64+0x123/0x790
[  254.551501][T14312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.551513][T14312] RIP: 0033:0x7f0a24b9f559
[  254.551524][T14312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  254.551535][T14312] RSP: 002b:00007f0a22df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  254.551547][T14312] RAX: ffffffffffffffda RBX: 00007f0a24e25fa0 RCX: 00007f0a24b9f559
[  254.551554][T14312] RDX: 0000000000000012 RSI: 0000200000000880 RDI: 0000000000000004
[  254.551562][T14312] RBP: 00007f0a22df6090 R08: 00002000000008c0 R09: 0000000000000014
[  254.551569][T14312] R10: 0000000020000010 R11: 0000000000000246 R12: 0000000000000001
[  254.551576][T14312] R13: 00007f0a24e26038 R14: 00007f0a24e25fa0 R15: 00007ffea82a87f8
[  254.551591][T14312]  </TASK>
[  254.583943][T14317] iommufd_mock iommufd_mock0: Adding to iommu group 1
[  254.584483][   T43] audit: type=1800 audit(255.484:8463): pid=5193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=296561 res=0 errno=-22
[  254.589141][T14317] iommufd_mock iommufd_mock1: Adding to iommu group 10
[  254.589789][   T43] audit: type=1800 audit(255.494:8464): pid=5193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=296583 res=0 errno=-22
[  254.676619][T14314] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  254.676660][T14314] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  254.720542][   T43] audit: type=1400 audit(255.624:8465): avc:  denied  { mount } for  pid=14323 comm="syz.3.2635" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  254.734816][ T6164] usb 9-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00
[  254.738697][ T6164] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  254.738714][ T6164] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  254.738726][ T6164] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  254.738739][ T6164] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  254.738765][ T6164] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.741544][   T43] audit: type=1800 audit(255.644:8466): pid=6569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=296602 res=0 errno=-22
[  254.741858][T14296] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  254.741913][T14296] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  254.743419][ T6164] pl2303 9-1:1.0: pl2303 converter detected
[  254.747903][   T43] audit: type=1800 audit(255.644:8467): pid=6569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=296631 res=0 errno=-22
[  254.747931][   T43] audit: type=1800 audit(255.644:8468): pid=6569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=296609 res=0 errno=-22
[  254.753779][ T6164] usb 9-1: pl2303 converter now attached to ttyUSB0
[  254.771397][T14330] ieee802154 phy0 wpan0: encryption failed: -22
[  254.792580][T14328] FAULT_INJECTION: forcing a failure.
[  254.792580][T14328] name failslab, interval 1, probability 0, space 0, times 0
[  254.792602][T14328] CPU: 1 UID: 0 PID: 14328 Comm: syz.5.2634 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  254.792617][T14328] Tainted: [L]=SOFTLOCKUP
[  254.792621][T14328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  254.792628][T14328] Call Trace:
[  254.792632][T14328]  <TASK>
[  254.792637][T14328]  dump_stack_lvl+0x100/0x190
[  254.792657][T14328]  should_fail_ex.cold+0x5/0xa
[  254.792674][T14328]  should_failslab+0xc2/0x120
[  254.792690][T14328]  __kmalloc_noprof+0xfc/0x840
[  254.792702][T14328]  ? rcu_is_watching+0x13/0xc0
[  254.792714][T14328]  ? tomoyo_realpath_from_path+0xb6/0x690
[  254.792730][T14328]  tomoyo_realpath_from_path+0xb6/0x690
[  254.792744][T14328]  tomoyo_path_number_perm+0x23c/0x580
[  254.792760][T14328]  ? tomoyo_path_number_perm+0x22e/0x580
[  254.792777][T14328]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  254.792798][T14328]  ? __lock_acquire+0x5c0/0x1f40
[  254.792818][T14328]  ? __fget_files+0x34/0x3d0
[  254.792835][T14328]  ? find_held_lock+0x2b/0x80
[  254.792845][T14328]  ? hook_file_ioctl_common+0x140/0x440
[  254.792862][T14328]  ? __fget_files+0x21f/0x3d0
[  254.792899][T14328]  security_file_ioctl+0xd3/0x230
[  254.792917][T14328]  __x64_sys_ioctl+0xb7/0x210
[  254.792932][T14328]  do_syscall_64+0x123/0x790
[  254.792949][T14328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.792961][T14328] RIP: 0033:0x7f0a24b9f559
[  254.792971][T14328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  254.792982][T14328] RSP: 002b:00007f0a22db4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  254.792993][T14328] RAX: ffffffffffffffda RBX: 00007f0a24e26180 RCX: 00007f0a24b9f559
[  254.793000][T14328] RDX: 0000200000000080 RSI: 00000000c0045005 RDI: 0000000000000003
[  254.793007][T14328] RBP: 00007f0a22db4090 R08: 0000000000000000 R09: 0000000000000000
[  254.793013][T14328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  254.793020][T14328] R13: 00007f0a24e26218 R14: 00007f0a24e26180 R15: 00007ffea82a87f8
[  254.793034][T14328]  </TASK>
[  254.793040][T14328] ERROR: Out of memory at tomoyo_realpath_from_path.
[  254.909576][T14338] FAULT_INJECTION: forcing a failure.
[  254.909576][T14338] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  254.909592][T14338] CPU: 0 UID: 0 PID: 14338 Comm: syz.3.2638 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  254.909607][T14338] Tainted: [L]=SOFTLOCKUP
[  254.909611][T14338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  254.909618][T14338] Call Trace:
[  254.909622][T14338]  <TASK>
[  254.909627][T14338]  dump_stack_lvl+0x100/0x190
[  254.909647][T14338]  should_fail_ex.cold+0x5/0xa
[  254.909664][T14338]  _copy_from_iter+0x1f4/0x1690
[  254.909681][T14338]  ? __pfx__copy_from_iter+0x10/0x10
[  254.909694][T14338]  ? __pfx_sock_has_perm+0x10/0x10
[  254.909709][T14338]  ? __pfx_avc_has_perm+0x10/0x10
[  254.909725][T14338]  hci_sock_sendmsg+0x4c3/0x26f0
[  254.909747][T14338]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  254.909764][T14338]  ? selinux_socket_sendmsg+0x198/0x2f0
[  254.909782][T14338]  sock_write_iter+0x560/0x5d0
[  254.909794][T14338]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  254.909811][T14338]  ? __pfx_sock_write_iter+0x10/0x10
[  254.909827][T14338]  ? bpf_lsm_file_permission+0x9/0x10
[  254.909841][T14338]  ? security_file_permission+0x76/0x210
[  254.909852][T14338]  ? rw_verify_area+0xce/0x6d0
[  254.909867][T14338]  vfs_write+0x6af/0x1050
[  254.909880][T14338]  ? __pfx_sock_write_iter+0x10/0x10
[  254.909894][T14338]  ? __pfx_vfs_write+0x10/0x10
[  254.909907][T14338]  ? find_held_lock+0x2b/0x80
[  254.909926][T14338]  ksys_write+0x1f8/0x250
[  254.909939][T14338]  ? __pfx_ksys_write+0x10/0x10
[  254.909957][T14338]  do_syscall_64+0x123/0x790
[  254.909981][T14338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.909993][T14338] RIP: 0033:0x7f143739f559
[  254.910002][T14338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  254.910013][T14338] RSP: 002b:00007f14381b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  254.910024][T14338] RAX: ffffffffffffffda RBX: 00007f1437625fa0 RCX: 00007f143739f559
[  254.910031][T14338] RDX: 0000000000000006 RSI: 0000200000000000 RDI: 0000000000000004
[  254.910038][T14338] RBP: 00007f14381b3090 R08: 0000000000000000 R09: 0000000000000000
[  254.910044][T14338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  254.910051][T14338] R13: 00007f1437626038 R14: 00007f1437625fa0 R15: 00007ffebcd3fea8
[  254.910065][T14338]  </TASK>
[  255.009018][T14296] pl2303 9-1:1.0: pl2303_vendor_write - failed to write [0007]: -71
[  255.009209][T13636] usb 9-1: USB disconnect, device number 18
[  255.009262][T14296] pl2303 ttyUSB0: pl2303_get_line_request - failed: -19
[  255.009351][T14296] pl2303 ttyUSB0: pl2303_set_line_request - failed: -19
[  255.011036][T14296] pl2303 9-1:1.0: pl2303_vendor_read - failed to read [000a]: -19
[  255.011065][T14296] pl2303 ttyUSB0: failed to submit interrupt urb: -19
[  255.032228][T14348] dvmrp6: entered allmulticast mode
[  255.034992][T13636] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  255.040604][T13636] pl2303 9-1:1.0: device disconnected
[  255.137630][T14357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2647'.
[  255.230853][T14371] FAULT_INJECTION: forcing a failure.
[  255.230853][T14371] name failslab, interval 1, probability 0, space 0, times 0
[  255.230872][T14371] CPU: 1 UID: 0 PID: 14371 Comm: syz.3.2652 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  255.230888][T14371] Tainted: [L]=SOFTLOCKUP
[  255.230892][T14371] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  255.230902][T14371] Call Trace:
[  255.230907][T14371]  <TASK>
[  255.230914][T14371]  dump_stack_lvl+0x100/0x190
[  255.230943][T14371]  should_fail_ex.cold+0x5/0xa
[  255.230965][T14371]  should_failslab+0xc2/0x120
[  255.230987][T14371]  __kmalloc_cache_noprof+0x91/0x6d0
[  255.231006][T14371]  ? copy_mount_options+0x55/0x190
[  255.231034][T14371]  copy_mount_options+0x55/0x190
[  255.231056][T14371]  __x64_sys_mount+0x1ab/0x310
[  255.231073][T14371]  ? __pfx___x64_sys_mount+0x10/0x10
[  255.231089][T14371]  do_syscall_64+0x123/0x790
[  255.231106][T14371]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.231118][T14371] RIP: 0033:0x7f143739f559
[  255.231128][T14371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  255.231139][T14371] RSP: 002b:00007f14381b3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  255.231150][T14371] RAX: ffffffffffffffda RBX: 00007f1437625fa0 RCX: 00007f143739f559
[  255.231157][T14371] RDX: 0000200000000a00 RSI: 00002000000009c0 RDI: 0000000000000000
[  255.231164][T14371] RBP: 00007f14381b3090 R08: 0000200000000a40 R09: 0000000000000000
[  255.231171][T14371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  255.231177][T14371] R13: 00007f1437626038 R14: 00007f1437625fa0 R15: 00007ffebcd3fea8
[  255.231191][T14371]  </TASK>
[  255.252861][T14373] dvmrp6: entered allmulticast mode
[  255.360121][T14386] tmpfs: Bad value for 'mpol'
[  255.376001][T14387] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2656'.
[  255.398126][T14388] CUSE: unknown device info ""
[  255.398135][T14388] CUSE: unknown device info ""
[  255.398139][T14388] CUSE: unknown device info "ÿ"
[  255.398143][T14388] CUSE: unknown device info ""
[  255.398148][T14388] CUSE: unknown device info "ý"
[  255.398152][T14388] CUSE: unknown device info ""
[  255.398156][T14388] CUSE: unknown device info ""
[  255.398160][T14388] CUSE: DEVNAME unspecified
[  255.398437][T14388] fuse: Unknown parameter 'allo'
[  255.403846][T14390] FAULT_INJECTION: forcing a failure.
[  255.403846][T14390] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  255.403865][T14390] CPU: 1 UID: 0 PID: 14390 Comm: syz.7.2659 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  255.403880][T14390] Tainted: [L]=SOFTLOCKUP
[  255.403884][T14390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  255.403891][T14390] Call Trace:
[  255.403896][T14390]  <TASK>
[  255.403900][T14390]  dump_stack_lvl+0x100/0x190
[  255.403920][T14390]  should_fail_ex.cold+0x5/0xa
[  255.403937][T14390]  _copy_from_user+0x2e/0xd0
[  255.403951][T14390]  ctl_ioctl+0xf3/0xcc0
[  255.403966][T14390]  ? __pfx_ctl_ioctl+0x10/0x10
[  255.403992][T14390]  ? selinux_file_ioctl+0x1e0/0x290
[  255.404015][T14390]  dm_ctl_ioctl+0x22/0x30
[  255.404026][T14390]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[  255.404039][T14390]  __x64_sys_ioctl+0x18e/0x210
[  255.404054][T14390]  do_syscall_64+0x123/0x790
[  255.404071][T14390]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.404083][T14390] RIP: 0033:0x7fe46159f559
[  255.404092][T14390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  255.404103][T14390] RSP: 002b:00007fe46246a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  255.404114][T14390] RAX: ffffffffffffffda RBX: 00007fe461825fa0 RCX: 00007fe46159f559
[  255.404122][T14390] RDX: 0000200000000140 RSI: 00000000c138fd02 RDI: 0000000000000003
[  255.404128][T14390] RBP: 00007fe46246a090 R08: 0000000000000000 R09: 0000000000000000
[  255.404135][T14390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  255.404141][T14390] R13: 00007fe461826038 R14: 00007fe461825fa0 R15: 00007ffe1d0d9fc8
[  255.404155][T14390]  </TASK>
[  255.510622][ T1448] ieee802154 phy0 wpan0: encryption failed: -22
[  255.510650][ T1448] ieee802154 phy1 wpan1: encryption failed: -22
[  255.673705][T14406] FAULT_INJECTION: forcing a failure.
[  255.673705][T14406] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  255.673725][T14406] CPU: 3 UID: 0 PID: 14406 Comm: syz.4.2663 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  255.673741][T14406] Tainted: [L]=SOFTLOCKUP
[  255.673745][T14406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  255.673752][T14406] Call Trace:
[  255.673756][T14406]  <TASK>
[  255.673761][T14406]  dump_stack_lvl+0x100/0x190
[  255.673781][T14406]  should_fail_ex.cold+0x5/0xa
[  255.673797][T14406]  _copy_from_user+0x2e/0xd0
[  255.673812][T14406]  bsg_sg_io+0x9b/0x2a0
[  255.673828][T14406]  ? __pfx_bsg_sg_io+0x10/0x10
[  255.673842][T14406]  ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530
[  255.673871][T14406]  bsg_ioctl+0x39f/0x5b0
[  255.673885][T14406]  ? __pfx_bsg_ioctl+0x10/0x10
[  255.673901][T14406]  __x64_sys_ioctl+0x18e/0x210
[  255.673916][T14406]  do_syscall_64+0x123/0x790
[  255.673933][T14406]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.673945][T14406] RIP: 0033:0x7f9e7879f559
[  255.673954][T14406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  255.673965][T14406] RSP: 002b:00007f9e796e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  255.673976][T14406] RAX: ffffffffffffffda RBX: 00007f9e78a25fa0 RCX: 00007f9e7879f559
[  255.673983][T14406] RDX: 0000200000000940 RSI: 0000000000002285 RDI: 0000000000000003
[  255.673990][T14406] RBP: 00007f9e796e2090 R08: 0000000000000000 R09: 0000000000000000
[  255.673996][T14406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  255.674005][T14406] R13: 00007f9e78a26038 R14: 00007f9e78a25fa0 R15: 00007fff3cee0548
[  255.674020][T14406]  </TASK>
[  255.680792][T14401] bond0: entered promiscuous mode
[  255.680801][T14401] bond_slave_0: entered promiscuous mode
[  255.680953][T14401] bond_slave_1: entered promiscuous mode
[  255.684319][T14401] batadv0: entered promiscuous mode
[  255.686770][T14401] 8021q: adding VLAN 0 to HW filter on device hsr1
[  255.692909][T14401] bond0: left promiscuous mode
[  255.692919][T14401] bond_slave_0: left promiscuous mode
[  255.693022][T14401] bond_slave_1: left promiscuous mode
[  255.694427][T14401] batadv0: left promiscuous mode
[  255.833410][T14422] FAULT_INJECTION: forcing a failure.
[  255.833410][T14422] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  255.833431][T14422] CPU: 2 UID: 0 PID: 14422 Comm: syz.4.2669 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  255.833447][T14422] Tainted: [L]=SOFTLOCKUP
[  255.833452][T14422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  255.833459][T14422] Call Trace:
[  255.833463][T14422]  <TASK>
[  255.833468][T14422]  dump_stack_lvl+0x100/0x190
[  255.833490][T14422]  should_fail_ex.cold+0x5/0xa
[  255.833507][T14422]  _copy_from_user+0x2e/0xd0
[  255.833529][T14422]  kstrtouint_from_user+0xd6/0x1d0
[  255.833545][T14422]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  255.833565][T14422]  ? lock_acquire+0x1d1/0x380
[  255.833582][T14422]  proc_fail_nth_write+0x83/0x220
[  255.833601][T14422]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  255.833622][T14422]  vfs_write+0x2aa/0x1050
[  255.833638][T14422]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  255.833656][T14422]  ? lock_acquire+0x1d1/0x380
[  255.833669][T14422]  ? __fget_files+0x34/0x3d0
[  255.833686][T14422]  ? __pfx_vfs_write+0x10/0x10
[  255.833699][T14422]  ? find_held_lock+0x2b/0x80
[  255.833710][T14422]  ? __fget_files+0x215/0x3d0
[  255.833729][T14422]  ? __fget_files+0x21f/0x3d0
[  255.833750][T14422]  ksys_write+0x12a/0x250
[  255.833764][T14422]  ? __pfx_ksys_write+0x10/0x10
[  255.833782][T14422]  do_syscall_64+0x123/0x790
[  255.833801][T14422]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.833813][T14422] RIP: 0033:0x7f9e7875fd8e
[  255.833824][T14422] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  255.833835][T14422] RSP: 002b:00007f9e796e1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  255.833846][T14422] RAX: ffffffffffffffda RBX: 00007f9e796e26c0 RCX: 00007f9e7875fd8e
[  255.833853][T14422] RDX: 0000000000000001 RSI: 00007f9e796e20a0 RDI: 0000000000000004
[  255.833860][T14422] RBP: 00007f9e796e2090 R08: 0000000000000000 R09: 0000000000000000
[  255.833867][T14422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  255.833874][T14422] R13: 00007f9e78a26038 R14: 00007f9e78a25fa0 R15: 00007fff3cee0548
[  255.833890][T14422]  </TASK>
[  255.942565][T14431] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2668'.
[  255.950098][T14428] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  255.950110][T14428] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  255.950164][T14428] vhci_hcd vhci_hcd.0: Device attached
[  255.953090][T14428] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6)
[  255.953103][T14428] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  255.953141][T14428] vhci_hcd vhci_hcd.0: Device attached
[  255.956605][T14432] vhci_hcd: connection closed
[  255.956697][T14434] vhci_hcd: connection closed
[  255.956948][ T5824] vhci_hcd vhci_hcd.4: stop threads
[  255.956966][ T5824] vhci_hcd vhci_hcd.4: release socket
[  255.956976][ T5824] vhci_hcd vhci_hcd.4: disconnect device
[  255.957088][ T5824] vhci_hcd vhci_hcd.4: stop threads
[  255.957096][ T5824] vhci_hcd vhci_hcd.4: release socket
[  255.957105][ T5824] vhci_hcd vhci_hcd.4: disconnect device
[  255.987883][    C1] net_ratelimit: 733 callbacks suppressed
[  255.994764][T14436] FAULT_INJECTION: forcing a failure.
[  255.994764][T14436] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  255.994783][T14436] CPU: 2 UID: 0 PID: 14436 Comm: syz.7.2668 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  255.994798][T14436] Tainted: [L]=SOFTLOCKUP
[  255.994802][T14436] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  255.994809][T14436] Call Trace:
[  255.994813][T14436]  <TASK>
[  255.994818][T14436]  dump_stack_lvl+0x100/0x190
[  255.994837][T14436]  should_fail_ex.cold+0x5/0xa
[  255.994854][T14436]  _copy_from_user+0x2e/0xd0
[  255.994868][T14436]  tty_ioctl+0xb57/0x1870
[  255.994910][T14436]  ? __pfx_tty_ioctl+0x10/0x10
[  255.994925][T14436]  ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530
[  255.994946][T14436]  ? __fget_files+0x34/0x3d0
[  255.994968][T14436]  ? selinux_file_ioctl+0x1e0/0x290
[  255.994984][T14436]  ? selinux_file_ioctl+0x1e7/0x290
[  255.995001][T14436]  ? __pfx_tty_ioctl+0x10/0x10
[  255.995018][T14436]  __x64_sys_ioctl+0x18e/0x210
[  255.995033][T14436]  do_syscall_64+0x123/0x790
[  255.995049][T14436]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.995061][T14436] RIP: 0033:0x7fe46159f559
[  255.995070][T14436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  255.995081][T14436] RSP: 002b:00007fe462449028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  255.995092][T14436] RAX: ffffffffffffffda RBX: 00007fe461826090 RCX: 00007fe46159f559
[  255.995099][T14436] RDX: 00002000000000c0 RSI: 0000000000005414 RDI: 0000000000000006
[  255.995106][T14436] RBP: 00007fe462449090 R08: 0000000000000000 R09: 0000000000000000
[  255.995112][T14436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  255.995119][T14436] R13: 00007fe461826128 R14: 00007fe461826090 R15: 00007ffe1d0d9fc8
[  255.995133][T14436]  </TASK>
[  256.266802][T14441] nfs: Bad value for 'context'
[  256.405790][T14449] netlink: 'syz.3.2677': attribute type 1 has an invalid length.
[  256.418720][T14449] 8021q: adding VLAN 0 to HW filter on device bond5
[  256.468889][ T5144] Bluetooth: hci0: command tx timeout
[  256.491112][T14449] bond5: (slave geneve3): making interface the new active one
[  256.492171][T14449] bond5: (slave geneve3): Enslaving as an active interface with an up link
[  256.528181][T14452] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2678'.
[  256.653844][T14458] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2681'.
[  256.654328][T14458] netlink: 'syz.5.2681': attribute type 10 has an invalid length.
[  256.671106][T14458] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode
[  256.674413][T14458] team0: Port device wlan0 added
[  256.719304][T14462] FAULT_INJECTION: forcing a failure.
[  256.719304][T14462] name failslab, interval 1, probability 0, space 0, times 0
[  256.719330][T14462] CPU: 2 UID: 0 PID: 14462 Comm: syz.3.2683 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  256.719352][T14462] Tainted: [L]=SOFTLOCKUP
[  256.719358][T14462] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  256.719368][T14462] Call Trace:
[  256.719374][T14462]  <TASK>
[  256.719381][T14462]  dump_stack_lvl+0x100/0x190
[  256.719424][T14462]  should_fail_ex.cold+0x5/0xa
[  256.719441][T14462]  should_failslab+0xc2/0x120
[  256.719458][T14462]  __kmalloc_noprof+0xfc/0x840
[  256.719471][T14462]  ? sock_kmalloc+0x111/0x170
[  256.719486][T14462]  sock_kmalloc+0x111/0x170
[  256.719499][T14462]  ____sys_sendmsg+0x90e/0xc30
[  256.719513][T14462]  ? __pfx_____sys_sendmsg+0x10/0x10
[  256.719529][T14462]  ? lock_acquire+0x1d1/0x380
[  256.719543][T14462]  ? get_pid_task+0x2a/0x250
[  256.719561][T14462]  ___sys_sendmsg+0x190/0x1e0
[  256.719579][T14462]  ? __pfx____sys_sendmsg+0x10/0x10
[  256.719592][T14462]  ? get_pid_task+0x106/0x250
[  256.719613][T14462]  ? find_held_lock+0x2b/0x80
[  256.719643][T14462]  __sys_sendmsg+0x160/0x210
[  256.719662][T14462]  ? __pfx___sys_sendmsg+0x10/0x10
[  256.719687][T14462]  do_syscall_64+0x123/0x790
[  256.719703][T14462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.719715][T14462] RIP: 0033:0x7f143739f559
[  256.719725][T14462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  256.719735][T14462] RSP: 002b:00007f14381b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  256.719746][T14462] RAX: ffffffffffffffda RBX: 00007f1437625fa0 RCX: 00007f143739f559
[  256.719754][T14462] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003
[  256.719760][T14462] RBP: 00007f14381b3090 R08: 0000000000000000 R09: 0000000000000000
[  256.719767][T14462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  256.719773][T14462] R13: 00007f1437626038 R14: 00007f1437625fa0 R15: 00007ffebcd3fea8
[  256.719787][T14462]  </TASK>
[  256.819389][T14472] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  256.819416][T14472] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  256.859184][T14470] syzkaller1: entered promiscuous mode
[  256.859193][T14470] syzkaller1: entered allmulticast mode
[  257.069248][   T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  257.071210][   T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  257.072195][   T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  257.074063][   T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  257.075451][   T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  257.191269][ T6516] syz_tun (unregistering): left allmulticast mode
[  257.191773][ T6516] batman_adv: batadv0: Removing interface: syz_tun
[  257.429882][T14485] rxe_eth0 speed is unknown, defaulting to 1000
[  257.458269][T14485] kobject: 'gid_attrs' (ffff888053600008): kobject_add_internal: parent: '1', set: '<NULL>'
[  257.459100][ T6516] sock ffff888055d11d00 sk ffff888029b02000
[  257.459363][ T6516] channel 2 len 10
[  257.459925][ T6516] sock ffff888055d122c0 sk ffff88802d42e000
[  257.459947][ T6516] channel 2 len 10
[  257.460749][ T6516] vgaarb: vga_arb_release
[  257.460766][ T6516] ==================================================================
[  257.460775][ T6516] BUG: KASAN: slab-use-after-free in __dynamic_dev_dbg+0x2fc/0x310
[  257.460818][ T6516] Read of size 8 at addr ffff888024d6e120 by task syz.3.134/6516
[  257.460827][ T6516] 
[  257.460843][ T6516] CPU: 0 UID: 0 PID: 6516 Comm: syz.3.134 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  257.460879][ T6516] Tainted: [L]=SOFTLOCKUP
[  257.460884][ T6516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  257.460891][ T6516] Call Trace:
[  257.460905][ T6516]  <TASK>
[  257.460910][ T6516]  dump_stack_lvl+0x100/0x190
[  257.460942][ T6516]  print_report+0x13d/0x4b0
[  257.460965][ T6516]  ? __virt_addr_valid+0x239/0x430
[  257.460990][ T6516]  ? __dynamic_dev_dbg+0x2fc/0x310
[  257.461021][ T6516]  kasan_report+0xdf/0x1c0
[  257.461046][ T6516]  ? __dynamic_dev_dbg+0x2fc/0x310
[  257.461063][ T6516]  __dynamic_dev_dbg+0x2fc/0x310
[  257.461079][ T6516]  ? __pfx___dynamic_dev_dbg+0x10/0x10
[  257.461100][ T6516]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  257.461116][ T6516]  ? _raw_spin_lock_irqsave+0x52/0x60
[  257.461139][ T6516]  vga_arb_release+0x3e7/0x540
[  257.461179][ T6516]  ? __pfx_vga_arb_release+0x10/0x10
[  257.461191][ T6516]  __fput+0x3fb/0xb50
[  257.461208][ T6516]  fput_close_sync+0x118/0x250
[  257.461219][ T6516]  ? __pfx_fput_close_sync+0x10/0x10
[  257.461231][ T6516]  filp_close_sync+0x75/0xa0
[  257.461241][ T6516]  put_files_struct+0x1f7/0x390
[  257.461260][ T6516]  exit_files+0x85/0xb0
[  257.461275][ T6516]  do_exit+0x896/0x2a00
[  257.461290][ T6516]  ? __pfx_do_exit+0x10/0x10
[  257.461302][ T6516]  ? cgroup_update_frozen_flag+0x125/0x240
[  257.461316][ T6516]  ? find_held_lock+0x2b/0x80
[  257.461325][ T6516]  ? get_signal+0x1845/0x21d0
[  257.461337][ T6516]  do_group_exit+0xd5/0x2a0
[  257.461351][ T6516]  get_signal+0x1ebd/0x21d0
[  257.461364][ T6516]  ? __pfx_get_signal+0x10/0x10
[  257.461375][ T6516]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[  257.461389][ T6516]  arch_do_signal_or_restart+0x91/0x7e0
[  257.461413][ T6516]  ? get_timespec64+0x147/0x240
[  257.461427][ T6516]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  257.461445][ T6516]  ? __x64_sys_clock_nanosleep+0x347/0x480
[  257.461460][ T6516]  exit_to_user_mode_loop+0x139/0x700
[  257.461479][ T6516]  ? rcu_is_watching+0x13/0xc0
[  257.461491][ T6516]  do_syscall_64+0x661/0x790
[  257.461506][ T6516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.461517][ T6516] RIP: 0033:0x7f143735fd8e
[  257.461526][ T6516] Code: Unable to access opcode bytes at 0x7f143735fd64.
[  257.461531][ T6516] RSP: 002b:00007f1438191f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[  257.461542][ T6516] RAX: fffffffffffffdfc RBX: 00007f14381926c0 RCX: 00007f143735fd8e
[  257.461549][ T6516] RDX: 00007f1438191fb0 RSI: 0000000000000000 RDI: 0000000000000000
[  257.461556][ T6516] RBP: 00007f1437436b20 R08: 0000000000000000 R09: 0000000000000000
[  257.461562][ T6516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  257.461568][ T6516] R13: 00007f1437626128 R14: 00007f1437626090 R15: 00007ffebcd3fea8
[  257.461586][ T6516]  </TASK>
[  257.461590][ T6516] 
[  257.461593][ T6516] Allocated by task 166:
[  257.461598][ T6516]  kasan_save_stack+0x30/0x50
[  257.461611][ T6516]  kasan_save_track+0x14/0x30
[  257.461623][ T6516]  __kasan_kmalloc+0xaa/0xb0
[  257.461634][ T6516]  __kmalloc_node_track_caller_noprof+0x33d/0x870
[  257.461647][ T6516]  kmalloc_reserve+0xe8/0x350
[  257.461659][ T6516]  __alloc_skb+0x185/0x710
[  257.461672][ T6516]  nsim_dev_trap_report_work+0x2af/0xd20
[  257.461695][ T6516]  process_one_work+0xac7/0x1b10
[  257.461705][ T6516]  worker_thread+0x5ef/0xe50
[  257.461714][ T6516]  kthread+0x373/0x450
[  257.461728][ T6516]  ret_from_fork+0x730/0xd60
[  257.461746][ T6516]  ret_from_fork_asm+0x1a/0x30
[  257.461756][ T6516] 
[  257.461759][ T6516] Freed by task 166:
[  257.461763][ T6516]  kasan_save_stack+0x30/0x50
[  257.461775][ T6516]  kasan_save_track+0x14/0x30
[  257.461786][ T6516]  kasan_save_free_info+0x3b/0x70
[  257.461796][ T6516]  __kasan_slab_free+0x5f/0x80
[  257.461808][ T6516]  kfree+0x22b/0x6d0
[  257.461816][ T6516]  skb_free_head+0xb9/0x160
[  257.461828][ T6516]  skb_release_data+0x698/0x860
[  257.461842][ T6516]  consume_skb+0xc4/0x110
[  257.461851][ T6516]  nsim_dev_trap_report_work+0x8de/0xd20
[  257.461865][ T6516]  process_one_work+0xac7/0x1b10
[  257.461874][ T6516]  worker_thread+0x5ef/0xe50
[  257.461883][ T6516]  kthread+0x373/0x450
[  257.461896][ T6516]  ret_from_fork+0x730/0xd60
[  257.461907][ T6516]  ret_from_fork_asm+0x1a/0x30
[  257.461917][ T6516] 
[  257.461920][ T6516] The buggy address belongs to the object at ffff888024d6e000
[  257.461920][ T6516]  which belongs to the cache kmalloc-4k of size 4096
[  257.461928][ T6516] The buggy address is located 288 bytes inside of
[  257.461928][ T6516]  freed 4096-byte region [ffff888024d6e000, ffff888024d6f000)
[  257.461937][ T6516] 
[  257.461941][ T6516] The buggy address belongs to the physical page:
[  257.461946][ T6516] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24d68
[  257.461955][ T6516] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  257.461963][ T6516] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  257.461973][ T6516] page_type: f5(slab)
[  257.461982][ T6516] raw: 00fff00000000040 ffff88801d443040 dead000000000100 dead000000000122
[  257.461992][ T6516] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  257.462001][ T6516] head: 00fff00000000040 ffff88801d443040 dead000000000100 dead000000000122
[  257.462009][ T6516] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  257.462018][ T6516] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  257.462027][ T6516] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  257.462033][ T6516] page dumped because: kasan: bad access detected
[  257.462044][ T6516] page_owner tracks the page as allocated
[  257.462048][ T6516] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3042882616
[  257.462071][ T6516]  post_alloc_hook+0xfd/0x120
[  257.462086][ T6516]  get_page_from_freelist+0x1113/0x35e0
[  257.462096][ T6516]  __alloc_frozen_pages_noprof+0x2f6/0x3190
[  257.462107][ T6516]  new_slab+0xb1/0x6d0
[  257.462115][ T6516]  refill_objects+0xe3/0x410
[  257.462124][ T6516]  __pcs_replace_empty_main+0x35e/0x650
[  257.462133][ T6516]  __kmalloc_cache_noprof+0x4ef/0x6d0
[  257.462142][ T6516]  pci_alloc_dev+0x47/0x270
[  257.462151][ T6516]  pci_scan_single_device+0x10c/0x240
[  257.462161][ T6516]  pci_scan_slot+0x1c9/0x7c0
[  257.462171][ T6516]  pci_scan_child_bus_extend+0x6b/0x7b0
[  257.462182][ T6516]  acpi_pci_root_create.cold+0x551/0x697
[  257.462201][ T6516]  pci_acpi_scan_root+0x4a9/0x5c0
[  257.462217][ T6516]  acpi_pci_root_add.cold+0x91e/0x16ed
[  257.462228][ T6516]  acpi_bus_attach+0x7b2/0xbd0
[  257.462239][ T6516]  acpi_dev_for_one_check+0x97/0xd0
[  257.462253][ T6516] page_owner free stack trace missing
[  257.462256][ T6516] 
[  257.462259][ T6516] Memory state around the buggy address:
[  257.462264][ T6516]  ffff888024d6e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  257.462271][ T6516]  ffff888024d6e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  257.462278][ T6516] >ffff888024d6e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  257.462284][ T6516]                                ^
[  257.462289][ T6516]  ffff888024d6e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  257.462296][ T6516]  ffff888024d6e200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  257.462301][ T6516] ==================================================================
[  257.462308][ T6516] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  257.700340][ T6516] CPU: 0 UID: 0 PID: 6516 Comm: syz.3.134 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  257.703634][ T6516] Tainted: [L]=SOFTLOCKUP
[  257.705007][ T6516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  257.708092][ T6516] Call Trace:
[  257.709145][ T6516]  <TASK>
[  257.710085][ T6516]  dump_stack_lvl+0x100/0x190
[  257.711567][ T6516]  vpanic+0x553/0x970
[  257.712826][ T6516]  ? __pfx_vpanic+0x10/0x10
[  257.714281][ T6516]  ? __pfx_vprintk_emit+0x10/0x10
[  257.715852][ T6516]  ? __dynamic_dev_dbg+0x2fc/0x310
[  257.717463][ T6516]  panic+0xd1/0xe0
[  257.718646][ T6516]  ? __pfx_panic+0x10/0x10
[  257.720040][ T6516]  ? end_report.part.0+0x23/0x90
[  257.721592][ T6516]  ? rcu_is_watching+0x13/0xc0
[  257.723078][ T6516]  ? end_report.part.0+0x23/0x90
[  257.724624][ T6516]  check_panic_on_warn.cold+0x19/0x34
[  257.726290][ T6516]  end_report.part.0+0x3a/0x90
[  257.727784][ T6516]  kasan_report.cold+0xe/0x18
[  257.729294][ T6516]  ? __dynamic_dev_dbg+0x2fc/0x310
[  257.730892][ T6516]  __dynamic_dev_dbg+0x2fc/0x310
[  257.732433][ T6516]  ? __pfx___dynamic_dev_dbg+0x10/0x10
[  257.734142][ T6516]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  257.735739][ T6516]  ? _raw_spin_lock_irqsave+0x52/0x60
[  257.737401][ T6516]  vga_arb_release+0x3e7/0x540
[  257.738910][ T6516]  ? __pfx_vga_arb_release+0x10/0x10
[  257.740555][ T6516]  __fput+0x3fb/0xb50
[  257.741825][ T6516]  fput_close_sync+0x118/0x250
[  257.743346][ T6516]  ? __pfx_fput_close_sync+0x10/0x10
[  257.745124][ T6516]  filp_close_sync+0x75/0xa0
[  257.746581][ T6516]  put_files_struct+0x1f7/0x390
[  257.748114][ T6516]  exit_files+0x85/0xb0
[  257.749439][ T6516]  do_exit+0x896/0x2a00
[  257.750747][ T6516]  ? __pfx_do_exit+0x10/0x10
[  257.752190][ T6516]  ? cgroup_update_frozen_flag+0x125/0x240
[  257.754009][ T6516]  ? find_held_lock+0x2b/0x80
[  257.755446][ T6516]  ? get_signal+0x1845/0x21d0
[  257.756870][ T6516]  do_group_exit+0xd5/0x2a0
[  257.758228][ T6516]  get_signal+0x1ebd/0x21d0
[  257.759588][ T6516]  ? __pfx_get_signal+0x10/0x10
[  257.761050][ T6516]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[  257.762702][ T6516]  arch_do_signal_or_restart+0x91/0x7e0
[  257.764343][ T6516]  ? get_timespec64+0x147/0x240
[  257.765804][ T6516]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  257.767636][ T6516]  ? __x64_sys_clock_nanosleep+0x347/0x480
[  257.769437][ T6516]  exit_to_user_mode_loop+0x139/0x700
[  257.771107][ T6516]  ? rcu_is_watching+0x13/0xc0
[  257.772604][ T6516]  do_syscall_64+0x661/0x790
[  257.774057][ T6516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.775823][ T6516] RIP: 0033:0x7f143735fd8e
[  257.777223][ T6516] Code: Unable to access opcode bytes at 0x7f143735fd64.
[  257.779364][ T6516] RSP: 002b:00007f1438191f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[  257.781932][ T6516] RAX: fffffffffffffdfc RBX: 00007f14381926c0 RCX: 00007f143735fd8e
[  257.784371][ T6516] RDX: 00007f1438191fb0 RSI: 0000000000000000 RDI: 0000000000000000
[  257.786811][ T6516] RBP: 00007f1437436b20 R08: 0000000000000000 R09: 0000000000000000
[  257.789248][ T6516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  257.791678][ T6516] R13: 00007f1437626128 R14: 00007f1437626090 R15: 00007ffebcd3fea8
[  257.794133][ T6516]  </TASK>
[  258.868622][ T6516] Shutting down cpus with NMI
[  258.870644][ T6516] Kernel Offset: disabled
[  258.871989][ T6516] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:22:03  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85bca2e5 RDI=ffffffff9cf19f80 RBP=ffffffff9cf19f40 RSP=ffffc90005dd6f60
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552
R12=0000000000000000 R13=0000000000000031 R14=0000000000000003 R15=ffffc90005dd7278
RIP=ffffffff85bca30f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d44ac000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000000000000 CR3=000000002f3af000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000008000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000003fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ffffffff82005314
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000001
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea82a8ce6 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a24c3714a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a24c37184
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a24c372e8
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a24c37176
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000007 0000000000000001 ffffffff82005314
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000400000000 0000000b000c000e
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000009 0000000000000001 ffffffff82005314
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 000000000000000a 0000000000000001 ffffffff82005314
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000f4240 0000000000000001 ffffffff8200f776
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 000000000000000d 0000000000000001 ffffffff82005314
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 000000000000000c 0000000000000001 ffffffff82005314
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 000000000000000b 0000000000000001 ffffffff82005314
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffff8880390eb488 RCX=0000000000000000 RDX=0000000000000000
RSI=ffffffff84eb4e16 RDI=ffff8880391b89e8 RBP=0000000000000045 RSP=ffffc90003a6f348
R8 =0000000000000002 R9 =0000000000000312 R10=0000000000000045 R11=0000000000000001
R12=0000000000000312 R13=dffffc0000000000 R14=0000000000000259 R15=0000000000000009
RIP=ffffffff84eb4e37 RFL=00010246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 00007f6701ae5c80 ffffffff 00c00000
GS =0000 ffff8880d45ac000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000000000000 CR3=0000000037296000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000081000 Opmask01=0000000000000000 Opmask02=0000000010400000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557679a4b600 0000557679a4b600
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff67842620 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 776f5f6567617020 5d3631353654205b 5d3434303236342e 37353220205b203a
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20296c6c75662854 504d454552502030 232072656c6c616b 7a79732020202020
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20204c2020202020 2020202020202020 47203a6465746e69 6154203433312e33
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e7a7973203a6d6d 6f43203631353620 3a4449502030203a 4449552030203a55
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5043205d36313536 54205b5d33343830 36342e3735322020 5b203a6c656e7265
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=fffffbfff21be7df RBX=ffffffff90df3ee0 RCX=dffffc0000000000 RDX=0000000000000001
RSI=ffffffff8c831600 RDI=ffffffff8c831640 RBP=ffffffff90df3ef0 RSP=ffffc900061a7900
R8 =0000000000000000 R9 =fffffbfff21be7dc R10=ffffffff90df3ee3 R11=000000000007fffc
R12=ffffffff90df3e40 R13=ffffffff90df3ef0 R14=ffffffff90df3e40 R15=ffffffff90df3efc
RIP=ffffffff820e1b10 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0a22df66c0 ffffffff 00c00000
GS =0000 ffff8880d46ac000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000556695e86e28 CR3=000000002f3af000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea82a8ce6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea82a8ce6 00007ffea82a8cec
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a24c3714a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a24c37184
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a24c372e8
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a24c37176
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a24df95f8 00007f0a24df95c8 00007f0a24df9600 00007f0a24df95e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=0000000000000001 RCX=1ffffffff39896b8 RDX=dffffc0000000000
RSI=ffffffff8e5f4837 RDI=0000000000000001 RBP=1ffff92000bdeede RSP=ffffc90005ef76d0
R8 =000000000003137f R9 =000000000000008e R10=0000000000000200 R11=0000000000000000
R12=dffffc0000000000 R13=ffff88804ce49500 R14=ffff88804ce51780 R15=ffff88804ce517f0
RIP=ffffffff81d8a0bf RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555566cdf500 ffffffff 00c00000
GS =0000 ffff8880d47ac000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f196e111e9c CR3=0000000039b12000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000000008004
Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a4e4bf81007d948c a4e4bf81007d948c
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0883c2b55b36783c 7819b8bc93a246f8
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f39a50fd520a1c96 f3c3aa4e558ba17f
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8b4140d625dafa58 dcd711a656f39431
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d07f0f58c2fb400e c44d4089d0b70c6b
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ce6e47c49201dd37 a93ce67524df9bf2
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 de73468f4183f095 3322e8aafd40f880
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 558ba17ff3c3aa4e 93a246f87819b8bc
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c0d0e0f08090a0b 0405060700010203
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6a09e667bb67ae85 510e527f9b05688c
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3c6ef372a54ff53a 1f83d9ab5be0cd19
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564eb5f85df0 0000564eb5f80e70 0000564eb5f8bfd0 0000564eb5f8b480
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0048544150564544 0000000000000021 0000000000000032
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000031 2e73656c75000030 0030346c6c696b66 722f217f4fb741ad
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3532302c42353230 2c413532302c4134 32302c343432302c 363132302c453032
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c433032302c42 3032302c41303230 2c393032302c3830 32302c363032302c
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000