last executing test programs:

18.260400078s ago: executing program 3 (id=388):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x3, 0x1, 0x20d}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x800, 0x2, 0x0, 0x1, 0x96}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
io_setup(0x3fd, &(0x7f0000000500)=<r6=>0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x8804)
io_pgetevents(r6, 0x1, 0x1, &(0x7f0000000100)=[{}], 0x0, 0x0)
io_submit(r6, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000001c0)}])
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
preadv(0xffffffffffffffff, &(0x7f0000001400)=[{0x0}], 0x1, 0xc002a0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00'})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0)
setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8)

18.104093209s ago: executing program 0 (id=390):
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000003080101000000000000"], 0x1c}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)=ANY=[@ANYBLOB='nr_inodes=5'])
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000640)={0x10})
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$tty1(0xc, 0x4, 0x1)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './cgroup.cpu/cgroup.procs\x00'}, 0x6e)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0x0, 0x0, 0x6, 0x1, 0x86, 0x2, 0x1, 0xfc, 0x2, 0x4, 0x0, 0x7, 0x8004, 0x9, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xeeee0000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x5, 0x9, 0x1}, {0xffff1000, 0x200000, 0xd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x26000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0xfc}, {0x6000, 0xfffef001, 0x9, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x83}, {0xdddd0000, 0xb000, 0x0, 0x35, 0x3, 0x0, 0x42, 0x0, 0x0, 0x0, 0xb2}, {0xeeef0000, 0xe6e31000, 0x8, 0xfe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x30000, 0x25000, 0xf, 0x0, 0x0, 0x1, 0x0, 0xca, 0x3f, 0x0, 0x0, 0x1}, {0x80a0000, 0x807}, {0x7000}, 0x5df9ffdd, 0x0, 0x10000, 0x50, 0xfffffffffffffffc, 0x0, 0x0, [0x0, 0xe4, 0x1, 0x40]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

15.116472471s ago: executing program 0 (id=393):
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB="a2adf67ad85ee4b33cff20916328efbab88fbeee9b1f2cda424e74598d60d73c17e8db07124d35ec83436992fe98ea9d4c8f61ebfaf5e19f7865f17c4cc4a8371f6ded8c57a8b8084cabac62e5db0d523f4f332b4f84c2bb78863855e869dfddae9b2245d7d5c989c4df95ed9a4656d041d597624d"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000005c0)={0x2, 0x0, [{0x0, 0x1, 0x1, 0x0, @msi={0x5, 0x1, 0x2, 0x3}}, {0x3, 0x5, 0x0, 0x0, @sint={0x1, 0x81}}]})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
iopl(0x3)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
r5 = syz_open_dev$sg(0x0, 0x6f5e, 0x2)
ioctl$FIBMAP(r5, 0x227d, &(0x7f0000000040)=0x85)
chdir(&(0x7f0000000100)='./file0\x00')
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
pwritev2(r6, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)}], 0x1)
poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x44}], 0x1, 0xe6)
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)

14.296454347s ago: executing program 3 (id=395):
r0 = socket(0x29, 0xa, 0x1cb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff)
syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000340)="0a000300010040", 0x7)
r2 = fsopen(&(0x7f0000000140)='cgroup\x00', 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
close(r2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
mlockall(0x2)
r4 = syz_io_uring_setup(0x111, &(0x7f00000002c0)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f0000000500)='n', 0x1)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0))
close(r5)
r6 = timerfd_create(0x0, 0x0)
timerfd_gettime(r6, 0x0)
mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x80302, 0x0)
write(r7, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
syz_usb_disconnect(0xffffffffffffffff)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000040)="1300000043001f00030300f9002304000a04d6", 0x13)

14.199434765s ago: executing program 1 (id=396):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000090400"/18, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x80)
r3 = socket(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'hsr0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000140)="01154e00010000112233445588fbca010001160c", 0x22, 0x44011, &(0x7f0000000040)={0x11, 0x0, r4, 0x0, 0x0, 0x0}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'vxcan1\x00', <r5=>0x0})
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r7=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0xca)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000006c0)=0x14)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000700)={@private1, <r9=>0x0}, &(0x7f0000000740)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="4000000010003b0c00"/20, @ANYRES32=r11, @ANYBLOB="0000000000620000200012800b0e090065727370616e0000101002800400120005000a0001000000"], 0x40}, 0x1, 0x0, 0x0, 0x100}, 0x40080d0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x9, 0x40e, 0xa, @empty, @mcast1, 0x20, 0x7800, 0x9, 0x8}})
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)={0x220, 0x0, 0x10, 0x70bd29, 0x3, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x4000}, 0x50)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r12)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x14, r13, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x6, 0x180, 0x4, 0x10, 0xf1, 0x7, 0x7fffffffffffe, 0x5, 0x4, 0x9, 0x7f, 0x800000000f4a, 0x100000000, 0xbdb], 0xc000, 0x4000})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1})
r14 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0x2000, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r14, 0xc0045006, &(0x7f0000000080)=0x200)
r15 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r15, 0xae80, 0x0)
ioctl$KVM_RUN(r15, 0xae80, 0x0)

13.557645655s ago: executing program 2 (id=397):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000005a80), 0xce5, 0x2400)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000005ac0)=""/114)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000000280)='GPL\x00')
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300), 0x0, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, 0x0}}], 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r7=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r7, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x31, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r7, 0x1, 0x7800, 0xffff, 0x8004, {{0x5, 0x4, 0x0, 0x28, 0x59, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @remote}}}})
mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
getpriority(0x0, r1)
syz_open_dev$video(&(0x7f0000000080), 0x8003, 0x105580)

11.775310035s ago: executing program 1 (id=398):
r0 = socket(0x29, 0xa, 0x1cb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff)
syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000340)="0a000300010040", 0x7)
r2 = fsopen(&(0x7f0000000140)='cgroup\x00', 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
close(r2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
mlockall(0x2)
r4 = syz_io_uring_setup(0x111, &(0x7f00000002c0)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f0000000500)='n', 0x1)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0))
close(r5)
r6 = timerfd_create(0x0, 0x0)
timerfd_gettime(r6, 0x0)
mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x80302, 0x0)
ioctl$KVM_SET_CLOCK(r7, 0x4030ae7b, &(0x7f0000000000)={0x55, 0x6, 0x6, 0x873e, 0x200})
write(r7, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000040)="1300000043001f00030300f9002304000a04d6", 0x13)

11.774813919s ago: executing program 2 (id=399):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000005a80), 0xce5, 0x2400)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000005ac0)=""/114)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000000280)='GPL\x00')
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, 0x0}}], 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r7=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r7, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x31, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r7, 0x1, 0x7800, 0xffff, 0x8004, {{0x5, 0x4, 0x0, 0x28, 0x59, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @remote}}}})
mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
getpriority(0x0, r1)
syz_open_dev$video(0x0, 0x8003, 0x105580)

11.442094289s ago: executing program 0 (id=400):
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB="a2adf67ad85ee4b33cff20916328efbab88fbeee9b1f2cda424e74598d60d73c17e8db07124d35ec83436992fe98ea9d4c8f61ebfaf5e19f7865f17c4cc4a8371f6ded8c57a8b8084cabac62e5db0d523f4f332b4f84c2bb78863855e869dfddae9b2245d7d5c989c4df95ed9a46"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000005c0)={0x2, 0x0, [{0x0, 0x1, 0x1, 0x0, @msi={0x5, 0x1, 0x2, 0x3}}, {0x3, 0x5, 0x0, 0x0, @sint={0x1, 0x81}}]})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
iopl(0x3)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
r5 = syz_open_dev$sg(0x0, 0x6f5e, 0x2)
ioctl$FIBMAP(r5, 0x227d, &(0x7f0000000040)=0x85)
chdir(&(0x7f0000000100)='./file0\x00')
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
pwritev2(r6, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)}], 0x1)
poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x44}], 0x1, 0xe6)
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)

11.204718817s ago: executing program 3 (id=401):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
nanosleep(0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d")
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x0)
r1 = epoll_create1(0x80000)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0xe000200c})
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x29, 0x5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5})
preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000000)={0x2, 0x1, 0x3, 0x2, 0x4})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0xc, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})
socket$inet_udp(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl(r0, 0xc138fd08, &(0x7f0000000000))

10.270868369s ago: executing program 2 (id=402):
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000003080101000000000000"], 0x1c}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)=ANY=[@ANYBLOB='nr_inodes=5'])
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000640)={0x10})
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$tty1(0xc, 0x4, 0x1)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './cgroup.cpu/cgroup.procs\x00'}, 0x6e)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0x0, 0x0, 0x6, 0x1, 0x86, 0x2, 0x1, 0xfc, 0x2, 0x4, 0x0, 0x7, 0x8004, 0x9, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xeeee0000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x5, 0x9, 0x1}, {0xffff1000, 0x200000, 0xd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x26000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0xfc}, {0x6000, 0xfffef001, 0x9, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x83}, {0xdddd0000, 0xb000, 0x0, 0x35, 0x3, 0x0, 0x42, 0x0, 0x0, 0x0, 0xb2}, {0xeeef0000, 0xe6e31000, 0x8, 0xfe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x30000, 0x25000, 0xf, 0x0, 0x0, 0x1, 0x0, 0xca, 0x3f, 0x0, 0x0, 0x1}, {0x80a0000, 0x807}, {0x7000}, 0x5df9ffdd, 0x0, 0x10000, 0x50, 0xfffffffffffffffc, 0x0, 0x0, [0x0, 0xe4, 0x1, 0x40]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

10.238895224s ago: executing program 1 (id=403):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x0, 0x255}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000000740)='dummy_udc.0', 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0)
write(r5, 0x0, 0x0)
close(r5)
r6 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
r7 = landlock_create_ruleset(&(0x7f0000000080)={0xf4da, 0x1, 0x3}, 0x30, 0x3)
landlock_restrict_self(r7, 0x0)
landlock_restrict_self(r6, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xc58)
futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000200), 0x14fffffd)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r8, &(0x7f0000002fc0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058)
writev(r8, &(0x7f0000000480)=[{&(0x7f0000000000)='d', 0x1}], 0x1)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0x5, 0x0, 0x0, 0x5c}}}, &(0x7f0000000300))
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))

7.534556224s ago: executing program 0 (id=404):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000005a80), 0xce5, 0x2400)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000005ac0)=""/114)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000000280)='GPL\x00')
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, 0x0}}], 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r7=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r7, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x31, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r7, 0x1, 0x7800, 0xffff, 0x8004, {{0x5, 0x4, 0x0, 0x28, 0x59, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @remote}}}})
mount(0x0, 0x0, 0x0, 0x1214040, 0x0)
getpriority(0x0, r1)
syz_open_dev$video(&(0x7f0000000080), 0x8003, 0x105580)

7.355891087s ago: executing program 2 (id=405):
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000005c0)={0x2, 0x0, [{0x0, 0x1, 0x1, 0x0, @msi={0x5, 0x1, 0x2, 0x3}}, {0x3, 0x5, 0x0, 0x0, @sint={0x1, 0x81}}]})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
iopl(0x3)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
r5 = syz_open_dev$sg(0x0, 0x6f5e, 0x2)
ioctl$FIBMAP(r5, 0x227d, &(0x7f0000000040)=0x85)
chdir(&(0x7f0000000100)='./file0\x00')
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
pwritev2(r6, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)}], 0x1)
poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x44}], 0x1, 0xe6)
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)

7.235983916s ago: executing program 3 (id=406):
r0 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x8000)
socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002)
setrlimit(0x4, &(0x7f0000000280)={0x293, 0x40})
sched_setscheduler(r3, 0x4, &(0x7f00000003c0)=0x9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000e00)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = add_key$user(&(0x7f0000000380), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000600)="37278f2a2a613d948d67101fa12d210d5cb504d79f9e16360ec89f8f5f695e40651be42e07483973d59cf0928a49c9fc0571665dc76ed37ebed410288e3147243e0471f24615660437e4c81c6e6bc88425a31736ae1ef66ba331935515dd681ebe2c3785d1d25c7a0f0b89f52315acafe5debb32381df2c29ce33c47b22a4d10da537ceeef72bd1a3b33492a14b62b4e690404efcbe6439a8591075bafbd085e50bc022147d1017718bc454dcc0a50a70616459f40dcf70aa85119eac5d0bd1667b81b0a8b6e9a0e64df3b58ea2d20d520f292f7afa6e1bba248ad0450d8ed5189b32cccc041be60e67f2294fc5cb709e7407a349c76b3f105c7f7f64e66628d")
r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0)
r8 = add_key$user(&(0x7f0000006400), 0x0, &(0x7f0000000980)="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", 0x135, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r8}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}})
add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11f031bf8ed2", 0x35, 0xfffffffffffffffe)
syz_open_dev$video4linux(&(0x7f0000000300), 0xffffffff, 0x399083)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000080)={@lba=0x18, 0x1, 0x24, &(0x7f0000000040)=""/36})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket$inet6(0xa, 0x3, 0x5)
syz_clone(0x4006100, &(0x7f0000000400)="163413787d465f060d4d16c550a2210d85bb4f81ae4d4e6054ae612427ccd88d10338264b6166ed91747664157b5cd41eb39d75aef8c813d53c2ba8894146f9462a74f66e36f98c3a371ad800e59f43903eccc672684e60f80208f2b0ba6d698d3ee9d3c504981e0bf2b6b68432cc899", 0x70, &(0x7f0000000540), &(0x7f0000000580), &(0x7f0000000700)="f510f841e060d77cec7f39711c5d14c85f419f0727d17fef")

6.214214054s ago: executing program 1 (id=407):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000540), 0x9, 0x8a681)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00')
io_setup(0x98, &(0x7f0000000380)=<r3=>0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x1b)
sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
io_cancel(r3, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x2, 0x0, r4, &(0x7f0000001240)="a41a8ad9a4c0ff2be18adbb01382caf1aa9fcb03eae9eb273e0b35aa2c4154798e444b302e95b0083be3bf3ca6e80cc378fcadd6b881a226e8408553e27684a42bbe3dee93a12cdd3242f6f0851a50ba804ca814e889fbdabd5e459f521f795ba5ab5e7284632fc4cee875674ebd6dffb619cc14c2968181b438392c5fcc51292a9ee67c65428b17587afb9ff52512eb90474c2ae88286b40702480cc7d9e8ddb2d813781b176a83fd1c4124257f0b15eb617ccdb7a2778e54f09ea9328fa2777e6f2df82f11826485a36a4d38213411dd65839f9f534401c14c487af05d671c5b0bf16c2b6ce5d7c57c3e5883bcf3657d103aa08de5f7c1696662bbaabcb6e327917ad7ef7926b17a89a816c60c506295424201c6296a8f120ee0f8b20751c536e6bd9fb88e8e35636f0c369c1630a05132206f9e6e1b031ef8ad08966634c038d43e8a04dd6b0b9e8867efe9f0e4ae5b25c28ad49892c01dee55fcd37101861a43d876e19eb739c0c145fb7a03031f1aac6d1dc8eb1ac5f68e62228d7742d52a7a18b7326e4830125e70d43ee99d628293a9189295e22752e743bbda3cb751c28929688cb66a52c847a03bbcf3499fdb76dee498fffde5ad11bebbc2e8227fa4a1cfcc3023b886b3f2e597393bc1490ad45866a8de3055840ca049525a50cdf5b53ec67581c1b8c307dadaa914f5b5b50b53e7f68d12ddd702307274c60c44519d987b1b5d901f54b65e30aef0c03a4c7393cf3771cd8026cbd563c2aa6b12f987d7b5b5e26f8aa889c6539f93e1c58810cf1c75f6622c725da8494dcea88fb2129e1bdfd35d26427fa6c5f608490a8a9c5b1e8b25b6ad0f2236d6ed8c5f89c8e6ff664ad3c3734bf89e697e9e63ac25e646c25fccc6f545f66c713dcf7c926465dc9bb279f456a9b6cb080b993bbad1d851d039d494317097b1524bc28ec921c0823cb9be72156949d7c9d52bf6379d6a9e11f2889028b10ee6f25a354fee4b39e96248c8c4ccce23790d7830e7d89870b59263b2a56cbeec1e44648b64ebe8f050bea934f589cf7fac956f6546e11442df2749fb35c9ba0b13a1b392f2a78ec9846fff61110ff9192756f280dcf8a6cd6b501d92ece410f35f90c051683fa9796bc3e1b9d6532491180d84f7bb49787d267708fae430d7f004b7b006af3dd17a7cfa885acd28a9b1b52b05413425a0ecb22c01d795c68ca43b5081adec709c04744a98b1d73036b839fce33eeef4cb0be7c590b562d5822bf05170d0639992e385fe50ee022a65512c08886d6fcdc484d47b0ace7c124e56be626f3f5a748f106255aea5e033b9d8879b423070e9eee44a56d44c7e8f03bf45ab3bd7b1117a75e080b0aac150e9f60a61f65e55699ab856b24d628ebb5b30460685ba051253b127e800ace3b7ca2ec15d2e01ede77f9109e3538c5b4770133b87d226b6086b3dab6cddb34efe105a47d095fc32cd1e6cae1d6efc47be21b8d5e93e14ff8099759a9b74d5199fd7f58a99cb819b721302df14a1120e5a60c4db6a68d5c4b1ffb7439cf8cab2a737b1cbaecca6bc6548246173889b38a52bd9242af2128686c33867ce8a92f6e97dead5e94142e738e330d4abbc6632fefb0c1bfba64f51e87ba3c09da7ff400b5f497e90e55196eca962fffaf4b21b75870d9a7ad630fd22df63a0b44e67f4be92f51bb46bb84ae410ea2fed7b6452f055efaf7527a1ba39cfee4b942a98bfc988a228c4499e84d7f7c138404c77a006465568473072f1bacf7754092b41b93771263951a0c075d7eaa48261bd95dd534f7b800c20bcca0fa702cec3a1c5a1c59048dd11b3c85e5473094f9df46ddb000cf64da206e4eb7d0707cef6e533c816e19ac54d1a26ec98f04f07fd4e1941d78cf639ee24306d846364c08848969bdeda0c5a4bd0aeb6d9f3dfde8c972e936db34b537e40be4d4b2ecd9361d599aa32bf523016aace0a2c532e898560767706dcdd7a953baa8190b14ff3b66492b95690131aa0f36299c965a11bc9988c3017fc64002f97948e6766265c8755c2dac4263d38a0bb0b569d0f928fa18be42e8063cd469d625728e7e98435c79e529589a88fec92b315968644b7b3db4a8c6e41f579f49994ad3717bb7cbf882f4fa10557735df0b59f3fb53ea4f25ed7a754088d2f89a890fa3504e74cfa31069ec8962bd616c33d91a6b9f3f158a30f2055a585d6f418e964d9d8ca548aff48b6bec4f6165843005b4e86355eb91c5973ee234727a14b081f384049183808a931d10c064d5368ef1217ed166c471315a4de0cf216942c7187b721179e4cbb40e62da3c7fa1be87b728c6bb7dcea025e1c57cbea943b6e2aaa4fa3a1edcafe5a79164ffc67774616d71c9492916494c873ed191b6b7e8275b7139980a83e14934a3368c9c712cdd554fad78bc89ae4238d67059e4a672bb2429119d67760193482cdab6b38b787df498f0c17be30f12dd1519095c48a93e205fe112905555bdb8a97ce8a7309d9eb2b99e079ba77b43b4ac42812f2ee3421b3c21f18de5841c5cb66e7fda9e4f460dbdf45ef163a7695598e1e85da4b3e65f7ca76a73e86833cceeade48ae9b3eb66d3cd0990294d676e8bc051a5f5e88b6f1151dfd8a67e55e12aa604a8079420c7ef623e5cc7af59d86852088875a7324ba21bfefe430e8d9b76a6f55cf2847f5cfdb2a2b663c41281be6399a159d22cd67ef937386d3cf3626333966b0e2559417433ff3a9eb18189c51a24536559c76845b7ff8531aac2a6451c72676b64e312b9006785f35d54226b7e7b31c46528c229f28a41f296f7ecdbf2657ce6012f9bd6ee44760fcc190ab89aa89e6cdf33160da405c0a749484e728e1a3af647ef57cce63b345ceede70ca293328ba3a16e7a920007d642cc77160fea654b93aa3f7751d1b2a880e426f44ccab44346464b89c2c8ca25ddd9c82be237ad726dff53fb7d0f2d5b1ad10faa10df573d4830ebed85f74d598bc42617ed1478784f1328f5a754c2f0e83f8db31a388fd429093d4183dd70dffd8193661db1f69e4a9704cb7315b048873f092f5df04549e811accfa8a57fb56584f7e7e0dd50f2599e7e1bed25f22ca32c43244a7a6108fbeb75cd588c582bb1954ae9a957f0999e45ae8e7172ec40662f51097143debaa328d5e94da8a5c41a75bc6fc97fe1cf05c1c4198e57058e22878cd699aabb933c8bbd486010d2115f573ba6fa8511002ce4ca4ef56dd1c09e3d077100434c2232d93508154f0cf15962371a746b5b455878f568511ec8a1bb655adf1cad35cd7646ecd190284812c2b567f3a0b8026ccb268fdb96da86fb160baa1abb78fb38055004520da71482b6f55ca7799a536116335b85ceffb2c50ec60fea40000667ac70c6ea15c0331b32ae0bf39a18e273c889e51c8773f4aa5593da2284a38c42dcb08fcf411b5337cbc30ef30da59ee0879e7fe9a041a8148cdc6db4ecfa3cae7a0f909439ebaf5a12023fed8595fada4b07696cf13d59d2204f1ccf0931de4a0dc3ffd04d60561c2840e6bc78c613060298f8b113790ee2054391a2a964957ff1d228b4ac01ddd85e58aebf0f005a9de9d1a2008854babe2a77f48c4840bb679ca36826cdeec0eb6dc9a2593827b903706405c60f8eaf42c79b88ef022788a197e59b9591f63ef21139331a05747c95df70035ab6d78845d35260f09e299ed05ffd876a1bf2e4fb909af2d2fb5f2860b6facdd3b6c1ece36f9d01fe3bab25f60285aded85d5d5f49185dc1ed5a64c9a11ece817bbc769b3ff58a257bd4e5b29b91313a7e45198d2831ebebd5a3215fa4230ab0cdf6f766d09da6e1ed264e2e711738c04e1ed9b33d8b2f45ac865738cc2a30537e8fbdb98999fb55926146923e48849ec49611c5654b4b5398100d029e2128e73e5fea8de5c316f43acbe10fb17ae67a057932f7467fd2a7180fa56ee1d6fed16da9f2e8105a17df939710956885f9ffa8de17f6b5374609de438d95aac4b31da99b92e271bbfd3149d16e25c2c464d536eb552c9b7840b526ee4f78d625cfe2aec9685607a9d0fccc4c108b9209cb8646a88e9e89c0ff85b76b02acbb42a4b7dd7edb28339980bf31648815b39ec02e223c2b24545a7b8766a96f07d6ff8eeff0c4e779159ec64f9cc0a73c2e0fdbd784004da2b69664c420fc0ba264f49eea9826b4daedd2e387a36566a1a4a4682b9b4f3f22d636582e7b826c5f91a6cf85a0393b2a9f9e89d345bcfcc1ffd888d1af81b160d46a5934f72098832adc9a4d05f3e0c72ea2ed63adc0d42add971e2d08e393573a16a257ce94b9f979a979707e2ffa7bc51d4b1176cbda8d1fdad0326018af94183448f028f344c545ef2cb9038e6b49fbb6f446acec383e71dac1b7f3aefd65767017b4bdab01ce4f524f861cc7d97580d4926b5b60463e8608b11ab2cca6fe3b9295d1fcc1f5ef18ac39c41b82547135f909b419b3117c66f1d51196b98d9204ddbf1441acf4cf2bf3eb21270d2057ae1ce97ba9ef33788620a8d7ff54a4088ca8c076a6d489f5333e3587450c949ae7dc957ea6cae901a23d7b30a9c6667dd49cf0034d95eb62114171a387aa0d762cb6563bd93de1cc77fc75a7d30d987442fd60672dba769dd0ce5a049e261cf1666e9fd519ecd324145c1718822f8109091a8ec316cf10785dd857ec14005a63f4e1089f8e0cc32b00a269b78f57d327f6e452f7a7cdf496a7402e5ec22dc2393e0389eb617f95830dca8df15f2553d085470a8c66a9fec65f9ac20017de3cd3289d645270aeaac34925dc54ff4fcf1ff5537baa7af0df280584da2ec4a5b4b748437229790d676e7512abe2a2337909a88bf2e807a758bc412a0f8ead299bff5df20ef8e5bfc2c78390d9121c7c39cbdfeed20069e95819ae5613479167aabba25da59cc2c7501c0f0ec47c3fc39b1e6bd7625cd9a967945446f548af84eeaa07555c2167c5bb9ef0d17fa3efb2de61d0a83dbce53845c8bc06dc666cba76ae13194cfd37d4f6a4adaca5ee04dbc8d387db22b0d1159f4828b346af3f46fa6eebeca222287d70c52cb603e32b5323209a4d0f7421ea6c54c1c03819f0ca7272c680c7a8a4948ff47f3011dde0839ea6939738810bf9f2b05fa80783e53fec727372bab85d3ad4cc5d7db7cae3ab3576f9dae532e73a98246cb2a64a84e9bb842d3074e266458def02e5c74a376449cceb81439b2cbdc2ad5d91cbbf610d7d74c09cc2afd43fd5ca9712e2033daa9f127f65a6cca3f78e1229d316e5e9e5f1ca90625a2d70a027ee126f60c6144855e64e483f926eb8a678c848d2dffe8434d107759b7c0ffb25de8639688c022d26f387c6699dde6c84d792ec0296b1100a8c8eba13e79c18b0dbf964dedbcb00c30356e38ff3d1c1da29d2d323eaea9976a0a02d49d98bba27318593e3f065a5b4cf0bebffefc803ef82169e699b8d38c94fd6f088d8b203a6e45147681b27994ec57036f7f5531b3250b2c944aff40d74f515236c426def1e171c66b099a37648f59d0235c1777db322a4a559dbcb4e1f2a57f26a633faa5598d6d67a35926811b26880381cb06adc353f31448978099d77c0756ca51ab230d067db831ad4b4ddf2bbdb292959c30625655912f9d16a8db7afd3c8276b5ebac747f6381625a905e72e1c0cd51e5fc82d72fc8e256bc8ffae29c061a8afc6272b8b642b7503779ded5d0a5d931368a766f895b805b59e2c74e596cf5f4da13418786c0e1f02eadbda6b50ca7dd0f4325f220cac703375cc7560fc8042bb21ddd938975f63be85b", 0x1000, 0xfffffffffffffffb, 0x0, 0x2, r2}, &(0x7f0000002280))
write$tun(r2, 0x0, 0xfce)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r5], 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x1403, 0x300, 0x70bd27, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x200d5}, 0x1)
sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a14000000000a050000000000000000000100fffc3c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3000000000080007006e61740008000a40000000012c00ffffffff010400000000000000000100000008000b40000000000900010073797a300000000004000480140000001100010000000000000000000000000a"], 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
recvmmsg(r8, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x40012021, 0x0)
r9 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7ff, 0x0, 0x1}, 0x20)
setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x2}, 0x8)
sendmmsg(r9, &(0x7f0000003b80)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @loopback, 0xc21}, 0x80, 0x0}, 0x5b4}], 0x1, 0x20000850)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8, 0x14, "339f020bbe82b398000100000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e8333c691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f044158d9744b66cc530000000400000001000000002200", [0x0, 0x245]}})
ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0x4c09, 0x0)

5.008430772s ago: executing program 0 (id=408):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
close(r3)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r5, 0x0, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000280)=[0x0, 0x0], 0x5, 0x3, 0x0, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[<r6=>0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0x3, 0xa})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000600)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500), &(0x7f0000000580)=[<r7=>0x0], &(0x7f0000000700), 0x5, 0x0, 0x1, 0x400000a9})
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, r6, r7], 0x4, r5, 0x0, 0xc, 0x51, 0x401, 0x2, {0x755, 0xfffe, 0x2, 0xa6, 0x1, 0x400, 0x0, 0x7ff, 0x8, 0xc, 0x5, 0x5, 0x800, 0x3ff, "15c333e624eae939d971ba6862226eca63e775daa48f79d28d698ffb7651691b"}})
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000500), 0x402, 0x0)
ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, &(0x7f0000000240)={{0xffff, 0x6}, {0x7fffffffffffffff, 0x40}, 0xa})
sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r10 = syz_io_uring_setup(0x3d8d, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000100)=<r11=>0x0, &(0x7f0000000080)=<r12=>0x0, &(0x7f0000000180)=<r13=>0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0)
syz_io_uring_submit(r11, r12, r13, 0x0)
syz_ublk_setup_queues(r0, 0x0, &(0x7f0000019080)={0x0, 0x597f, 0x1, 0x2, 0x10d, 0x0, r0}, &(0x7f0000019180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2067, 0x8000, 0x3, 0x17, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xce5e, 0x10, 0x2, 0x2c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xecae, 0x200, 0x3, 0x11a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88d9, 0x800, 0x0, 0x3bd, 0x0, r0}}], 0x4, 0x0, &(0x7f000001a480))

4.510651125s ago: executing program 2 (id=409):
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB="a2adf67ad85ee4b33cff20916328efbab88fbeee9b1f2cda424e74598d60d73c17e8db07124d35ec83436992fe98ea9d4c8f61ebfaf5e19f7865f17c4cc4a8371f6ded8c57a8b8084cabac62e5db0d523f4f332b4f84c2bb78863855e869dfddae9b2245d7d5c989c4df95ed9a4656d041d597624d"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000005c0)={0x2, 0x0, [{0x0, 0x1, 0x1, 0x0, @msi={0x5, 0x1, 0x2, 0x3}}, {0x3, 0x5, 0x0, 0x0, @sint={0x1, 0x81}}]})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
iopl(0x3)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
r5 = syz_open_dev$sg(0x0, 0x6f5e, 0x2)
ioctl$FIBMAP(r5, 0x227d, &(0x7f0000000040)=0x85)
chdir(&(0x7f0000000100)='./file0\x00')
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
pwritev2(r6, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)}], 0x1)
poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x44}], 0x1, 0xe6)
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)

3.98282853s ago: executing program 3 (id=410):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, 0x0, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4c58, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x1ff, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x3d7, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf40, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x4, 0x25000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendto$inet6(r1, &(0x7f0000000380)="4e81", 0x2, 0x24000045, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', <r6=>0x0, 0x2f, 0x1, 0x4, 0x25a74f6b, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x1, 0x7800, 0x6, 0x80000000}})
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7fffffff, '\x00', r6, r7, 0x3, 0x0, 0x1}, 0x50)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04ff03"], 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x22}, 0x94)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0)
ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246)
writev(r8, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1)
add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)

2.181057732s ago: executing program 0 (id=411):
r0 = socket$l2tp(0x2, 0x2, 0x73)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1000000)
bind$inet(r0, 0x0, 0x0)
r1 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3})
syz_usb_connect(0xb, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000097ff8208582005109bc10000000109021200010000000009048f0000bf575a00b7cac6c59f827fbda30ad8a745e653846cc64cc3122e92a8eda8809552da0683ba094f3dba3eb63dd45b3392cd9a6340f6cea82390e6a3b46af5a50dc0a471ceffb2d170b075cb4240b119ef70991c2d5ee6bbedfa3f665bab33da9d8a558416586aa4f9984903774e41ae6faa2b04ce7c3bd6497330aa858c4339c1859b2c56c298d36e62936b8d58641ee7e8eacc88179d32e2f7050ea20e94726bc73249e373"], 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002)
readv(r2, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1)
write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00001a9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000160000/0x2000)=nil, &(0x7f00000f2000/0x4000)=nil, &(0x7f0000afd000/0x1000)=nil, &(0x7f00006b6000/0x1000)=nil, &(0x7f00001dd000/0x4000)=nil, &(0x7f000004e000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00000c4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xd9c21377a2367ba3}, 0x2)
io_uring_setup(0x1b7c, &(0x7f0000000640)={0x0, 0x96d, 0x1f480, 0x0, 0x39d})
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x1, 'hub\x00'})
ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="997425bd7000fbdbdf2515000000050001809af4ef94515bd9de398d8f883f2ea3de42eebb5a2190825e8e334d8e768ac7"], 0x18}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000)
ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521)
close(r3)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="5f54dd650856baf746a7422929c3907d60740d844b8bae211d8248d4790b7d44555c44f6f143b6aafecf9f6cd0851e631123d914bfe4736e4e80bd6dd4f8b049312260dab5c6b86495a917063be1d131e21cee73bbb27687e204a0763b818f5bb0c1b7870821deb582aca1bff39a160b5cc5323b1a12d12ec15344bc8265eafcfdc69c07990994cd58e465d25e7bfc602845f7e512d8000000000000"], 0x50)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r6, &(0x7f0000000380)="d55ed9b346fa18fd6fa8e64b489a21ddc1cab3395337a208000000000000002394d4c0540c4670e8dc474080705f77f30fea237005931d540fc0527488ed488e86bbf356bcb67ef638e734a2768b51daad9b", 0x52)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x3, 0x8, 0x10000, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x7, 0x0)
syz_usb_connect$cdc_ecm(0x1, 0x59, &(0x7f00000005c0)=ANY=[@ANYBLOB="12011102020000082505a1a440000102030109024700010107b0030904008702020600070b2406000032440000bfd2052400fbff0d240f01000000003908ff00db06241ae800100905820210001aff050905030200000a100b"], &(0x7f0000000580)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x200, 0x4, 0xff, 0xe1, 0x40, 0x4}, 0x3f, &(0x7f0000000500)=ANY=[], 0x1, [{0x26, &(0x7f0000000540)=ANY=[@ANYRES32]}]})

1.841212938s ago: executing program 1 (id=412):
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB="a2adf67ad85ee4b33cff20916328efbab88fbeee9b1f2cda424e74598d60d73c17e8db07124d35ec83436992fe98ea9d4c8f61ebfaf5e19f7865f17c4cc4a8371f6ded8c57a8b8084cabac62e5db0d523f4f332b4f84c2bb78863855e869dfddae9b2245d7d5c989c4df95ed9a46"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000005c0)={0x2, 0x0, [{0x0, 0x1, 0x1, 0x0, @msi={0x5, 0x1, 0x2, 0x3}}, {0x3, 0x5, 0x0, 0x0, @sint={0x1, 0x81}}]})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
iopl(0x3)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
r5 = syz_open_dev$sg(0x0, 0x6f5e, 0x2)
ioctl$FIBMAP(r5, 0x227d, &(0x7f0000000040)=0x85)
chdir(&(0x7f0000000100)='./file0\x00')
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
pwritev2(r6, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)}], 0x1)
poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x44}], 0x1, 0xe6)
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)

1.305670893s ago: executing program 3 (id=413):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@local})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r2, r2, 0x2f}, 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, <r5=>0x0}, 0x8)
r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r5, 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup=r2, r4, 0x2f, 0x2018, 0x4, @value=r6}, 0x20)
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOBLANK(r7, 0x4611, 0x5)
sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000020000c01e"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40086f52, &(0x7f0000000000)={0x2, &(0x7f0000000540)=[{0x3d, '\x00', @buffer={"a2640912951700", 0x20}, 0x8000}]})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000090}, 0x4004000)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0xa0000)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048110)
r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0)
syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0)
write$binfmt_elf64(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78)
r10 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r9, 0x5101)
socket$nl_route(0x10, 0x3, 0x0)

1.287726444s ago: executing program 2 (id=414):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x50)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=<r0=>0x0)
syz_open_procfs(r0, &(0x7f0000000140)='fdinfo\x00')
openat$nullb(0xffffff9c, &(0x7f0000000180), 0x4000, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
socketpair(0x1d, 0x2, 0x6, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
sendto(r1, 0x0, 0x0, 0x20050, 0x0, 0x0)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0xfffffffe}, {@private=0xa010101, 0x4908, 0x10000, 0x1}}, 0x44)
r5 = socket$inet(0x2, 0x1, 0x6)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, &(0x7f0000001280))
sendmsg$sock(r5, &(0x7f0000000940)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x1, 0x4, 0x1, {0xa, 0x4e20, 0x4, @loopback, 0x200}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000280)="7b8655c6b09a46fcd6e6ea7b2c8caff740cea82ce0fa692072d686062e92aa8e574a8f55cedfa4459be4ffb413db3a245909773b62014e366176542926d74ba5bd0ccdf41142f40dbda2573c5c5ac761d6ed04374e4128fb", 0x58}, {&(0x7f0000000300)="55d0c914ccbdc27b7be574c15b98a1c76709839250a7668f9ab44ecbb941a9b7f4eaa846c1a1b1940275d3e0531b79c42ed04a060236a641e179564cd2a1773aa5ed52d2f0e5e0b171d6fb2a919dc0c7ebe58828", 0x54}, {&(0x7f0000000380)="aae77e54e36236798e556003d2a241e205bce7aa4db9b5adedf667cc646224495de23f8a579579fba9a491255cb7c8967f8f33f0581402cdc4eb7804907211cad5f020e3e32241153a68d0ebed1d4308971083addd35f761f95e7e93dd3b500c7baf2914151e750a66038fd7a7f9f246f1a2e61b639032a24e81503a9b606e03666def2be5c9cdc125f3ce35a4506c954cc6b9", 0x93}, {&(0x7f0000000680)="55e3de85279ae278ac93c3544ea7dd8a885e7dc8874060a322e1681f1f343cff6f7b327ba10a615d5b5c71682090642f7a89ace843020fbaa6f0d18466842c85527bfc0fc52b4d4a3c7034a7c06e1c4cc5fb6c605e99b8aa5305b769717b16add3af36518c89e4253d8ef6715d8c7ab3c687fcf5465d8799900b99253ca2e90b175b51b344151ceb7664fbac8db1f5e48f81cb31", 0x94}, {&(0x7f0000000500)="914155c4d68e9a0a38df0a645c664aeb0b29ae2c63829da9257f08d1e178", 0x1e}, {&(0x7f0000000540)='G0b', 0x3}], 0x6, &(0x7f0000000580)=[@timestamping={{0x10, 0x1, 0x25, 0x9}}, @txtime={{0x14, 0x1, 0x3d, 0x53c}}, @txtime={{0x14, 0x1, 0x3d, 0x3}}, @mark={{0x10, 0x1, 0x24, 0xa}}], 0x48}, 0x0)
poll(&(0x7f0000000600)=[{r4, 0xf514}, {r5, 0x10420}, {r3, 0x310}, {r2, 0x2000}, {r3, 0xaa995775df62e7e8}, {r4, 0x8080}], 0x6, 0x9)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000640)=0x6089, 0x4)
socket$inet_smc(0x2b, 0x1, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r7)
sendmsg$NFC_CMD_START_POLL(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r8, @ANYBLOB="010027bd7000fdc7df250600000008000d000291000008000100"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20040010)
connect(r5, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10)
r9 = socket$inet6(0xa, 0x80002, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c)

0s ago: executing program 1 (id=415):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
sched_setscheduler(0x0, 0x1, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000005c0))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76"])
r1 = syz_open_dev$sg(0x0, 0x6f5e, 0x2)
ioctl$FIBMAP(r1, 0x227d, &(0x7f0000000040)=0x85)
chdir(&(0x7f0000000100)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
pwritev2(r2, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14)
ioctl$KVM_PRE_FAULT_MEMORY(r0, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)}], 0x1)
poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x44}], 0x1, 0xe6)
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:18914' (ED25519) to the list of known hosts.
[   33.072441][ T5650] cgroup: Unknown subsys name 'net'
[   33.250704][ T5650] cgroup: Unknown subsys name 'cpuset'
[   33.254761][ T5650] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   34.415137][ T5650] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   38.166764][ T5749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   38.168077][ T5749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   38.168534][ T5749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   38.168783][ T5748] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   38.168893][ T5750] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   38.169017][ T5749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   38.169338][ T5749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   38.172025][ T5751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   38.172299][ T5748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   38.173128][ T5748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   38.174247][ T5748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   38.175977][   T66] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   38.176306][   T66] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   38.182409][ T5751] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   38.183049][   T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   38.183299][   T66] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   38.184598][ T5099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   38.185846][ T5099] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   38.186550][   T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   38.186660][ T5099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   38.735698][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.735744][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.735800][ T5735] bridge_slave_0: entered allmulticast mode
[   38.737171][ T5735] bridge_slave_0: entered promiscuous mode
[   38.739707][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.739785][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.739842][ T5735] bridge_slave_1: entered allmulticast mode
[   38.740543][ T5735] bridge_slave_1: entered promiscuous mode
[   38.804701][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.804814][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.804874][ T5736] bridge_slave_0: entered allmulticast mode
[   38.805593][ T5736] bridge_slave_0: entered promiscuous mode
[   38.807042][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.807093][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.807148][ T5736] bridge_slave_1: entered allmulticast mode
[   38.807967][ T5736] bridge_slave_1: entered promiscuous mode
[   38.810886][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.858961][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.860588][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.860671][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.860712][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.860770][ T5738] bridge_slave_0: entered allmulticast mode
[   38.861547][ T5738] bridge_slave_0: entered promiscuous mode
[   38.871286][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.871340][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.871397][ T5737] bridge_slave_0: entered allmulticast mode
[   38.872045][ T5737] bridge_slave_0: entered promiscuous mode
[   38.873944][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.894939][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.895003][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.895148][ T5738] bridge_slave_1: entered allmulticast mode
[   38.895853][ T5738] bridge_slave_1: entered promiscuous mode
[   38.896660][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.896699][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.897434][ T5737] bridge_slave_1: entered allmulticast mode
[   38.899108][ T5737] bridge_slave_1: entered promiscuous mode
[   38.906554][ T5735] team0: Port device team_slave_0 added
[   38.921314][ T5736] team0: Port device team_slave_0 added
[   38.927931][ T5735] team0: Port device team_slave_1 added
[   38.940838][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.941799][ T5736] team0: Port device team_slave_1 added
[   38.951183][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.953425][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.963723][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.981506][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.981518][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.981530][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.982914][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.982922][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.982933][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.989662][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.989672][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.989684][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.012699][ T5738] team0: Port device team_slave_0 added
[   39.015927][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.015941][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.015959][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.023810][ T5737] team0: Port device team_slave_0 added
[   39.025483][ T5737] team0: Port device team_slave_1 added
[   39.036520][ T5738] team0: Port device team_slave_1 added
[   39.049073][ T5735] hsr_slave_0: entered promiscuous mode
[   39.050014][ T5735] hsr_slave_1: entered promiscuous mode
[   39.086469][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.086486][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.086535][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.087806][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.087817][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.087831][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.105008][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.105024][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.105045][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.111271][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.111284][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.111304][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.126937][ T5736] hsr_slave_0: entered promiscuous mode
[   39.128120][ T5736] hsr_slave_1: entered promiscuous mode
[   39.128477][ T5736] debugfs: 'hsr0' already exists in 'hsr'
[   39.128527][ T5736] Cannot create hsr debugfs directory
[   39.204350][ T5738] hsr_slave_0: entered promiscuous mode
[   39.205000][ T5738] hsr_slave_1: entered promiscuous mode
[   39.205559][ T5738] debugfs: 'hsr0' already exists in 'hsr'
[   39.205576][ T5738] Cannot create hsr debugfs directory
[   39.211758][ T5737] hsr_slave_0: entered promiscuous mode
[   39.212205][ T5737] hsr_slave_1: entered promiscuous mode
[   39.212492][ T5737] debugfs: 'hsr0' already exists in 'hsr'
[   39.212502][ T5737] Cannot create hsr debugfs directory
[   39.470333][ T5735] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   39.475590][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.476285][ T5735] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   39.481444][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.492805][ T5735] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   39.495251][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.495684][ T5735] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   39.499149][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.532543][ T5736] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   39.536599][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.537366][ T5736] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   39.541803][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.544094][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.544184][ T5735] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.544750][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.544841][ T5735] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.547328][ T5736] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   39.553171][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.554831][ T5736] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   39.559784][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.575548][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.576332][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.620889][ T5737] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   39.624662][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.629628][ T5737] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   39.634681][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.635135][ T5737] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   39.637375][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.638996][ T5737] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   39.648167][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.705728][ T5738] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   39.710357][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.711015][ T5738] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   39.716609][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.722893][ T5738] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   39.725622][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.726050][ T5738] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   39.730383][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.746974][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.809697][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.812838][ T5735] 8021q: adding VLAN 0 to HW filter on device team0
[   39.842033][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.842086][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.855929][ T5736] 8021q: adding VLAN 0 to HW filter on device team0
[   39.857580][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.857861][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.872911][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.882371][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.882446][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.883723][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.883764][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.925421][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.937117][ T5735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   39.938933][ T5737] 8021q: adding VLAN 0 to HW filter on device team0
[   39.954205][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.954350][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.976739][ T5738] 8021q: adding VLAN 0 to HW filter on device team0
[   39.989350][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.989427][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.993483][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.993560][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.019676][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.020092][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.209417][   T66] Bluetooth: hci2: command tx timeout
[   40.218401][   T66] Bluetooth: hci0: command tx timeout
[   40.218535][   T66] Bluetooth: hci3: command tx timeout
[   40.218598][   T66] Bluetooth: hci1: command tx timeout
[   40.289599][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.291013][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.300822][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.325926][ T5736] veth0_vlan: entered promiscuous mode
[   40.334330][ T5736] veth1_vlan: entered promiscuous mode
[   40.348466][ T5735] veth0_vlan: entered promiscuous mode
[   40.361537][ T5738] veth0_vlan: entered promiscuous mode
[   40.363732][ T5735] veth1_vlan: entered promiscuous mode
[   40.370100][ T5736] veth0_macvtap: entered promiscuous mode
[   40.374311][ T5738] veth1_vlan: entered promiscuous mode
[   40.376732][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.382424][ T5736] veth1_macvtap: entered promiscuous mode
[   40.394313][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.408777][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.434214][ T5738] veth0_macvtap: entered promiscuous mode
[   40.435476][ T5737] veth0_vlan: entered promiscuous mode
[   40.439375][ T5738] veth1_macvtap: entered promiscuous mode
[   40.449518][ T5735] veth0_macvtap: entered promiscuous mode
[   40.456365][ T5737] veth1_vlan: entered promiscuous mode
[   40.458535][ T5735] veth1_macvtap: entered promiscuous mode
[   40.484723][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.493287][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.497161][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.504680][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.534637][ T5737] veth0_macvtap: entered promiscuous mode
[   40.536207][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.536217][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.552429][ T5737] veth1_macvtap: entered promiscuous mode
[   40.581090][   T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.581103][   T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.607254][ T1271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.607273][ T1271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.613081][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.618114][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.634393][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.634411][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.638879][ T5736] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   40.642064][ T5736] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.647978][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.648296][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.656140][ T5736] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.657377][ T5736] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.671958][ T5736] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.677795][ T5814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.677984][ T5814] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.678004][ T5814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.678021][ T5814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.725140][ T1271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.725159][ T1271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.747569][  T203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.747582][  T203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.772946][ T1271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.772959][ T1271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.778619][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.778746][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.778942][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.779085][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.779266][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.779384][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.779601][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.779739][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.779851][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.780170][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.788982][ T5887] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'.
[   40.799521][  T203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.799534][  T203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.376867][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'.
[   42.053258][ T5917] Bluetooth: MGMT ver 1.23
[   42.213084][ T5917] gadgetfs: bound to dummy_udc driver
[   42.287970][ T5742] Bluetooth: hci2: command tx timeout
[   42.288112][ T5742] Bluetooth: hci1: command tx timeout
[   42.288433][   T66] Bluetooth: hci0: command tx timeout
[   42.289628][ T5742] Bluetooth: hci3: command tx timeout
[   42.467800][ T2416] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   42.468628][    C3] gadgetfs: connected
[   42.470044][ T2416] gadgetfs: disconnected
[   43.205824][ T5927] tipc: Started in network mode
[   43.205852][ T5927] tipc: Node identity eef46b6e1364, cluster identity 4711
[   43.206023][ T5927] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   43.206892][ T5927] syzkaller0: entered promiscuous mode
[   43.206904][ T5927] syzkaller0: entered allmulticast mode
[   43.643294][ T5925] tipc: Resetting bearer <eth:syzkaller0>
[   43.654317][ T5925] tipc: Disabling bearer <eth:syzkaller0>
[   43.691527][ T1127] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[   43.695381][ T1127] ata1.00: configured for UDMA/100
[   43.768839][ T5844] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[   43.826933][ T5940] Console: switching to colour dummy device 80x25
[   44.168772][ T5844] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   44.174563][ T5844] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10
[   44.174582][ T5844] usb 7-1: config 0 interface 0 has no altsetting 0
[   44.176117][ T5844] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   44.176129][ T5844] usb 7-1: Product: syz
[   44.176136][ T5844] usb 7-1: Manufacturer: syz
[   44.176143][ T5844] usb 7-1: SerialNumber: syz
[   44.181566][ T5844] usb 7-1: config 0 descriptor??
[   44.200906][ T5844] usb 7-1: selecting invalid altsetting 0
[   44.377802][   T66] Bluetooth: hci3: command tx timeout
[   44.377836][   T66] Bluetooth: hci0: command tx timeout
[   44.377856][   T66] Bluetooth: hci1: command tx timeout
[   44.377872][   T66] Bluetooth: hci2: command tx timeout
[   44.530680][ T5953] usb 7-1: BOGUS urb xfer, pipe 0 != type 1
[   45.087367][ T5961] 9pnet_virtio: no channels available for device syz
[   45.670028][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'.
[   46.190971][ T5964] LUN: removable file: (no medium)
[   46.196642][ T5964] LUN: removable file: (no medium)
[   46.271860][ T5971] process 'syz.1.22' launched '/dev/fd/12' with NULL argv: empty string added
[   46.457795][ T5099] Bluetooth: hci0: command tx timeout
[   46.457820][ T5099] Bluetooth: hci3: command 0x0419 tx timeout
[   46.460551][ T5739] Bluetooth: hci2: command tx timeout
[   46.460581][   T66] Bluetooth: hci1: command tx timeout
[   46.556567][ T5885] usb 7-1: USB disconnect, device number 2
[   46.857072][ T5980] Invalid ELF header magic: != ELF
[   47.478751][ T5986] gadgetfs: bound to dummy_udc driver
[   47.857706][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   47.857907][    C0] gadgetfs: connected
[   47.857994][    T9] gadgetfs: disconnected
[   47.902475][ T5997] Zero length message leads to an empty skb
[   48.014860][ T5997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30'.
[   48.313917][ T6007] pim6reg: entered allmulticast mode
[   48.451961][ T6007] pim6reg: left allmulticast mode
[   48.561001][ T5099] Bluetooth: hci3: command 0x0419 tx timeout
[   48.581697][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'.
[   50.016463][ T6025] 9pnet_virtio: no channels available for device syz
[   50.547268][ T6007] hsr_slave_1 (unregistering): left promiscuous mode
[   50.950337][ T2416] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[   51.108181][ T2416] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   51.108984][ T2416] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10
[   51.109000][ T2416] usb 5-1: config 0 interface 0 has no altsetting 0
[   51.110486][ T2416] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   51.110497][ T2416] usb 5-1: Product: syz
[   51.110505][ T2416] usb 5-1: Manufacturer: syz
[   51.110511][ T2416] usb 5-1: SerialNumber: syz
[   51.136580][ T2416] usb 5-1: config 0 descriptor??
[   51.150509][ T2416] usb 5-1: selecting invalid altsetting 0
[   51.731226][ T6036] orangefs_mount: mount request failed with -4
[   52.739394][ T6069] input: syz1 as /devices/virtual/input/input5
[   53.637699][ T6079] 9pnet_virtio: no channels available for device syz
[   53.733035][ T5885] usb 5-1: USB disconnect, device number 4
[   54.417612][ T6082] Invalid ELF header magic: != ELF
[   54.728106][ T5885] libceph: connect (1)[c::]:6789 error -101
[   54.729724][ T5885] libceph: mon0 (1)[c::]:6789 connect error
[   54.770535][ T6094] ceph: No mds server is up or the cluster is laggy
[   55.015260][ T5885] libceph: connect (1)[c::]:6789 error -101
[   55.018163][ T5885] libceph: mon0 (1)[c::]:6789 connect error
[   55.543118][ T6108] gadgetfs: bound to dummy_udc driver
[   55.765420][ T6114] binder: 6113:6114 unknown command 0
[   55.765434][ T6114] binder: 6113:6114 ioctl c0306201 800001c0 returned -22
[   55.777578][ T6108] gadgetfs: suspended from state 2
[   55.788272][ T5885] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   56.449407][ T6124] 9pnet_virtio: no channels available for device syz
[   56.708992][ T6135] netlink: 'syz.3.52': attribute type 1 has an invalid length.
[   56.709033][ T6135] netlink: 'syz.3.52': attribute type 2 has an invalid length.
[   56.709041][ T6135] netlink: 'syz.3.52': attribute type 3 has an invalid length.
[   56.709072][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'.
[   56.739656][ T6134] 9pnet_virtio: no channels available for device syz
[   56.813085][ T6135] mmap: syz.3.52 (6135) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   57.481452][ T6139] gadgetfs: bound to dummy_udc driver
[   57.747876][ T6073] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   57.748070][    C2] gadgetfs: connected
[   57.748140][ T6073] gadgetfs: disconnected
[   57.870341][ T6139] gadgetfs: suspended from state 2
[   58.097776][ T6073] usb 5-1: device not accepting address 6, error -71
[   58.116521][ T6151] 9pnet_virtio: no channels available for device syz
[   58.832070][ T5787] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.359184][ T6127] syz.3.52 (6127): drop_caches: 3
[   59.420376][    T0] NOHZ tick-stop error: local softirq work is pending, handler #2c0!!!
[   60.158885][ T6170] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[   60.158913][ T6170] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   60.159712][ T6170] vhci_hcd vhci_hcd.0: Device attached
[   60.427749][    T9] usb 44-1: SetAddress Request (2) to port 0
[   60.427783][    T9] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd
[   60.551652][ T6185] Invalid ELF header magic: != ELF
[   60.790484][ T6182] netlink: 'syz.1.64': attribute type 1 has an invalid length.
[   60.790504][ T6182] netlink: 208 bytes leftover after parsing attributes in process `syz.1.64'.
[   60.791334][ T6193] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   60.810987][ T6193] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref]
[   60.811307][ T6193] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff]
[   60.814429][ T6193] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   60.819576][ T6177] vhci_hcd: connection reset by peer
[   60.824769][ T5787] vhci_hcd vhci_hcd.3: stop threads
[   60.825232][ T5787] vhci_hcd vhci_hcd.3: release socket
[   60.826145][ T5787] vhci_hcd vhci_hcd.3: disconnect device
[   60.829619][ T6193] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   60.891075][ T6193] pci 0000:00:01.0: Adding to iommu group 1
[   60.900581][ T6193] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   60.900602][ T6193] pci 0000:00:01.0: vgaarb: bridge control possible
[   60.900615][ T6193] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   60.911597][ T6193] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint
[   60.918292][ T6193] pci 0000:00:05.0: BAR 0 [io  0xc0c0-0xc0df]
[   60.918388][ T6193] pci 0000:00:05.0: BAR 1 [mem 0xfeaf6000-0xfeaf6fff]
[   60.918777][ T6193] pci 0000:00:05.0: BAR 4 [mem 0xfe204000-0xfe207fff 64bit pref]
[   60.959614][ T6193] pci 0000:00:05.0: Adding to iommu group 5
[   60.989390][ T6193] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   60.993160][ T6193] pci 0000:00:05.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned
[   60.996426][ T6193] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   60.998575][ T6193] pci 0000:00:05.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned
[   60.999725][ T6193] pci 0000:00:05.0: BAR 0 [io  0x2000-0x201f]: assigned
[   61.020014][ T6193] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   61.054346][ T6193] [drm] Found bochs VGA, ID 0xb0c5.
[   61.054363][ T6193] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   61.093339][ T6200] 9pnet_virtio: no channels available for device syz
[   61.118583][ T6193] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[   61.446572][ T6193] Console: switching to colour frame buffer device 160x50
[   61.475668][ T6193] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[   61.642771][ T6203] 9pnet_virtio: no channels available for device syz
[   61.711367][ T1291] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[   61.816568][ T5885] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[   61.893911][ T6206] ceph: No mds server is up or the cluster is laggy
[   61.894677][ T6209] ceph: No mds server is up or the cluster is laggy
[   61.972765][   T30] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[   62.567770][ T6073] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   62.926935][ T6226] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6
[   62.940861][ T6227] Invalid ELF header magic: != ELF
[   62.967558][ T6228] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter
[   62.968750][ T6228] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95
[   62.969513][ T6228] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22
[   63.007978][ T6226] i2c i2c-0: new_device: Instantiated device tcpci at 0x02
[   63.256266][ T6073] usb 8-1: Using ep0 maxpacket: 32
[   63.256708][ T6073] usb 8-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40
[   63.262910][ T6073] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   63.262923][ T6073] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[   63.265735][ T6073] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.265749][ T6073] usb 8-1: Product: syz
[   63.265756][ T6073] usb 8-1: Manufacturer: syz
[   63.265763][ T6073] usb 8-1: SerialNumber: syz
[   63.487024][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'.
[   63.563080][ T6234] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   63.564159][ T6234] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   63.673940][ T6234] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   63.689174][ T6234] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   63.689281][ T6234] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   63.752194][ T6234] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   63.754855][ T6234] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   63.754928][ T6234] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   63.755925][ T6234] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   63.760351][ T6234] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   63.760398][ T6234] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   63.764228][ T6234] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   63.780288][ T6215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   63.780658][ T6215] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   63.859490][ T6242] Invalid ELF header magic: != ELF
[   64.058098][ T6073] usb 8-1: USB disconnect, device number 2
[   64.352188][ T1271] nvmet: connect request for invalid subsystem testsubsys!
[   64.354725][ T6247] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys"
[   64.874496][ T6256] Console: switching to colour dummy device 80x25
[   64.970080][ T6258] 9pnet_virtio: no channels available for device syz
[   65.039589][ T6264] 9pnet_virtio: no channels available for device syz
[   65.487795][    T9] usb 44-1: device descriptor read/8, error -110
[   65.568750][   T66] Bluetooth: hci1: command 0x0c1a tx timeout
[   65.727790][   T66] Bluetooth: hci2: command 0x0c1a tx timeout
[   65.807791][ T5099] Bluetooth: hci0: command 0x0c1a tx timeout
[   65.807849][   T66] Bluetooth: hci3: command 0x0419 tx timeout
[   65.930310][    T9] usb usb44-port1: attempt power cycle
[   66.446472][ T6287] Invalid ELF header magic: != ELF
[   66.763267][    T9] usb usb44-port1: unable to enumerate USB device
[   66.824665][ T6294] Invalid ELF header magic: != ELF
[   67.042038][ T6301] bridge1: entered promiscuous mode
[   67.309988][ T6305] 9pnet_virtio: no channels available for device syz
[   67.649396][   T66] Bluetooth: hci1: command 0x0c1a tx timeout
[   67.808609][   T66] Bluetooth: hci2: command 0x0c1a tx timeout
[   67.887961][   T66] Bluetooth: hci3: command 0x0419 tx timeout
[   67.887975][ T5099] Bluetooth: hci0: command 0x0c1a tx timeout
[   68.029470][ T1127] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[   68.030515][ T1127] ata1.00: configured for UDMA/100
[   68.483801][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.105'.
[   68.934614][ T6341] binder: 6340:6341 unknown command 0
[   68.934628][ T6341] binder: 6340:6341 ioctl c0306201 800001c0 returned -22
[   69.124405][ T6339] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[   69.124421][ T6339] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   69.124473][ T6339] vhci_hcd vhci_hcd.0: Device attached
[   69.628521][ T1683] usb 38-1: SetAddress Request (2) to port 0
[   69.628576][ T1683] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd
[   69.722434][ T6369] 9pnet_virtio: no channels available for device syz
[   69.739497][   T66] Bluetooth: hci1: command 0x0c1a tx timeout
[   69.778694][ T6350] vhci_hcd: connection reset by peer
[   69.781117][ T6187] vhci_hcd vhci_hcd.0: stop threads
[   69.781140][ T6187] vhci_hcd vhci_hcd.0: release socket
[   69.781496][ T6187] vhci_hcd vhci_hcd.0: disconnect device
[   69.897827][   T66] Bluetooth: hci2: command 0x0c1a tx timeout
[   69.970097][   T66] Bluetooth: hci0: command 0x0c1a tx timeout
[   69.977864][   T66] Bluetooth: hci3: command 0x0419 tx timeout
[   70.787810][ T6073] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   70.934267][ T1438] ieee802154 phy0 wpan0: encryption failed: -22
[   70.934328][ T1438] ieee802154 phy1 wpan1: encryption failed: -22
[   70.944385][   T62] cfg80211: failed to load regulatory.db
[   70.971730][ T6073] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[   70.972748][ T6073] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.978961][ T6073] usb 7-1: config 0 descriptor??
[   71.358154][ T6398] xt_CT: No such helper "syz1"
[   71.362447][ T6381] batman_adv: batadv0: Adding interface: macvtap1
[   71.362458][ T6381] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.362472][ T6381] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[   71.976476][ T6381] batman_adv: batadv0: Removing interface: macvtap1
[   72.317573][ T6073] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor
[   72.318205][ T6073] [drm:udl_init] *ERROR* Selecting channel failed
[   72.362511][ T6073] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 1
[   72.362533][ T6073] [drm] Initialized udl on minor 1
[   72.696315][ T6073] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[   72.701220][   T25] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[   72.705482][ T6073] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[   72.713631][ T6073] usb 7-1: USB disconnect, device number 3
[   72.714487][   T25] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[   72.714821][   T25] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[   73.496919][ T6430] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   73.503549][ T6430] =======================================================
[   73.503549][ T6430] WARNING: The mand mount option has been deprecated and
[   73.503549][ T6430]          and is ignored by this kernel. Remove the mand
[   73.503549][ T6430]          option from the mount to silence this warning.
[   73.503549][ T6430] =======================================================
[   73.580212][ T6428] 9pnet_virtio: no channels available for device syz
[   74.208890][ T6435] netlink: 'syz.2.123': attribute type 12 has an invalid length.
[   74.208949][ T6435] netlink: 'syz.2.123': attribute type 29 has an invalid length.
[   74.208962][ T6435] netlink: 148 bytes leftover after parsing attributes in process `syz.2.123'.
[   74.208979][ T6435] netlink: 'syz.2.123': attribute type 3 has an invalid length.
[   74.208989][ T6435] netlink: 'syz.2.123': attribute type 2 has an invalid length.
[   74.208998][ T6435] netlink: 35 bytes leftover after parsing attributes in process `syz.2.123'.
[   74.749090][ T1683] usb 38-1: device descriptor read/8, error -110
[   75.257913][ T6463] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   75.258143][ T6463] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   75.262618][ T6463] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   75.262774][ T6463] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   75.384507][ T1683] usb usb38-port1: attempt power cycle
[   75.999734][ T1683] usb usb38-port1: unable to enumerate USB device
[   77.154491][ T6470] netlink: 'syz.2.127': attribute type 1 has an invalid length.
[   77.154505][ T6470] netlink: 208 bytes leftover after parsing attributes in process `syz.2.127'.
[   77.247833][   T66] Bluetooth: hci1: command 0x0c1a tx timeout
[   77.260675][ T6486] netlink: 'syz.0.129': attribute type 1 has an invalid length.
[   77.260689][ T6486] netlink: 'syz.0.129': attribute type 2 has an invalid length.
[   77.260695][ T6486] netlink: 'syz.0.129': attribute type 3 has an invalid length.
[   77.260702][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.129'.
[   77.327850][   T66] Bluetooth: hci3: command 0x0419 tx timeout
[   77.327875][   T66] Bluetooth: hci0: command 0x0c1a tx timeout
[   77.327889][   T66] Bluetooth: hci2: command 0x0c1a tx timeout
[   77.854014][ T6484] syz.0.129 (6484): drop_caches: 3
[   78.023782][ T6505] 9pnet_virtio: no channels available for device syz
[   79.262276][ T6522] netlink: 'syz.0.137': attribute type 1 has an invalid length.
[   79.262298][ T6522] netlink: 224 bytes leftover after parsing attributes in process `syz.0.137'.
[   80.494474][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.137'.
[   85.519468][ T6559] Invalid ELF header magic: != ELF
[   86.248647][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'.
[   86.577781][ T5822] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   86.598411][ T6570] netlink: 'syz.3.142': attribute type 1 has an invalid length.
[   86.740197][ T5822] usb 5-1: Using ep0 maxpacket: 32
[   86.763761][ T5822] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[   86.764719][ T5822] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[   86.764747][ T5822] usb 5-1: config 0 has no interface number 0
[   86.766698][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.766720][ T5822] usb 5-1: Product: syz
[   86.766737][ T5822] usb 5-1: Manufacturer: syz
[   86.766750][ T5822] usb 5-1: SerialNumber: syz
[   86.832553][ T5822] usb 5-1: config 0 descriptor??
[   86.873215][ T5822] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[   86.873291][ T5822] usb 5-1: selecting invalid altsetting 1
[   86.873308][ T5822] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[   86.937324][ T5822] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   86.955828][ T5822] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[   86.955894][ T5822] usb 5-1: media controller created
[   87.093814][ T5099] Bluetooth: hci1: ACL packet for unknown connection handle 201
[   87.098082][ T5822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   87.430831][ T6581] Invalid ELF header magic: != ELF
[   88.943480][ T5822] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[   88.943546][ T5822] zl10353_read_register: readreg error (reg=127, ret==-71)
[   88.946033][ T5822] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[   89.082549][ T5822] usb 5-1: USB disconnect, device number 8
[   93.803583][ T5099] Bluetooth: hci3: unexpected event for opcode 0x2041
[   97.882868][ T6659] syz.0.162 uses obsolete (PF_INET,SOCK_PACKET)
[   98.456224][ T6666] syz.3.161: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1
[   98.475972][ T6666] CPU: 3 UID: 0 PID: 6666 Comm: syz.3.161 Not tainted syzkaller #0 PREEMPT(full) 
[   98.475993][ T6666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   98.476003][ T6666] Call Trace:
[   98.476009][ T6666]  <TASK>
[   98.476017][ T6666]  dump_stack_lvl+0x100/0x190
[   98.476045][ T6666]  warn_alloc.cold+0x9e/0xb2
[   98.476073][ T6666]  ? __pfx_warn_alloc+0x10/0x10
[   98.476097][ T6666]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   98.476171][ T6666]  ? __pfx_get_page_from_freelist+0x10/0x10
[   98.476193][ T6666]  __alloc_frozen_pages_noprof+0xcb6/0x3300
[   98.476222][ T6666]  ? do_raw_spin_lock+0x128/0x260
[   98.476250][ T6666]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   98.476271][ T6666]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   98.476292][ T6666]  ? lockdep_hardirqs_on+0x7d/0x110
[   98.476317][ T6666]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   98.476357][ T6666]  ? stack_depot_save_flags+0x49a/0x9f0
[   98.476391][ T6666]  ? comedi_isadma_alloc+0xc6/0x620
[   98.476442][ T6666]  ? pcl818_attach+0xffa/0x17d0
[   98.476460][ T6666]  ? comedi_device_attach+0x40e/0x6b0
[   98.476475][ T6666]  ? do_devconfig_ioctl+0x1b3/0x6d0
[   98.476496][ T6666]  ? comedi_unlocked_ioctl+0x860/0x3310
[   98.476531][ T6666]  alloc_pages_node_noprof+0x93/0x200
[   98.476549][ T6666]  ? __pfx_alloc_pages_node_noprof+0x10/0x10
[   98.476572][ T6666]  __dma_direct_alloc_pages.isra.0+0x35e/0x540
[   98.476597][ T6666]  dma_direct_alloc+0x104/0x8a0
[   98.476619][ T6666]  dma_alloc_attrs+0x1b9/0x3e0
[   98.476638][ T6666]  ? __pfx_dma_alloc_attrs+0x10/0x10
[   98.476656][ T6666]  ? __kmalloc_noprof+0x350/0x840
[   98.476675][ T6666]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   98.476697][ T6666]  ? dma_direct_supported+0xca/0x220
[   98.476722][ T6666]  comedi_isadma_alloc+0x331/0x620
[   98.476748][ T6666]  ? __pfx_comedi_isadma_alloc+0x10/0x10
[   98.476772][ T6666]  ? request_threaded_irq+0x27b/0x3e0
[   98.476799][ T6666]  pcl818_attach+0xffa/0x17d0
[   98.476826][ T6666]  comedi_device_attach+0x40e/0x6b0
[   98.476850][ T6666]  do_devconfig_ioctl+0x1b3/0x6d0
[   98.476869][ T6666]  ? comedi_unlocked_ioctl+0x180/0x3310
[   98.476895][ T6666]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[   98.476960][ T6666]  ? tomoyo_path_number_perm+0x46d/0x580
[   98.476984][ T6666]  ? kasan_save_stack+0x3f/0x50
[   98.477003][ T6666]  ? kasan_save_stack+0x30/0x50
[   98.477020][ T6666]  ? kasan_save_track+0x14/0x30
[   98.477039][ T6666]  ? kasan_save_free_info+0x3b/0x70
[   98.477073][ T6666]  comedi_unlocked_ioctl+0x860/0x3310
[   98.477103][ T6666]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[   98.477144][ T6666]  ? kasan_quarantine_put+0x104/0x240
[   98.477163][ T6666]  ? lockdep_hardirqs_on+0x7d/0x110
[   98.477187][ T6666]  ? find_held_lock+0x2b/0x80
[   98.477204][ T6666]  ? tomoyo_path_number_perm+0x28f/0x580
[   98.477227][ T6666]  ? tomoyo_path_number_perm+0x28f/0x580
[   98.477255][ T6666]  ? tomoyo_path_number_perm+0x188/0x580
[   98.477285][ T6666]  comedi_compat_ioctl+0x438/0xe20
[   98.477310][ T6666]  ? __pfx_comedi_compat_ioctl+0x10/0x10
[   98.477334][ T6666]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   98.477359][ T6666]  ? do_vfs_ioctl+0x226/0x13e0
[   98.477387][ T6666]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   98.477417][ T6666]  ? __fget_files+0x34/0x3d0
[   98.477435][ T6666]  ? find_held_lock+0x2b/0x80
[   98.477451][ T6666]  ? __fget_files+0x215/0x3d0
[   98.477468][ T6666]  ? hook_file_ioctl_common+0x140/0x440
[   98.477496][ T6666]  ? __fget_files+0x21f/0x3d0
[   98.477520][ T6666]  ? __pfx_comedi_compat_ioctl+0x10/0x10
[   98.477544][ T6666]  __ia32_compat_sys_ioctl+0x2cf/0x360
[   98.477573][ T6666]  __do_fast_syscall_32+0x13a/0x8b0
[   98.477604][ T6666]  do_fast_syscall_32+0x32/0x70
[   98.477630][ T6666]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   98.477653][ T6666] RIP: 0023:0xf700efec
[   98.477675][ T6666] Code: Unable to access opcode bytes at 0xf700efc2.
[   98.477683][ T6666] RSP: 002b:00000000f53bb50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[   98.477700][ T6666] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400
[   98.477712][ T6666] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000
[   98.477722][ T6666] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   98.477732][ T6666] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   98.477742][ T6666] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   98.477766][ T6666]  </TASK>
[   98.477936][ T6666] Mem-Info:
[   98.477947][ T6666] active_anon:6739 inactive_anon:115 isolated_anon:0
[   98.477947][ T6666]  active_file:26 inactive_file:20285 isolated_file:0
[   98.477947][ T6666]  unevictable:0 dirty:191 writeback:0
[   98.477947][ T6666]  slab_reclaimable:8975 slab_unreclaimable:56447
[   98.477947][ T6666]  mapped:30112 shmem:480 pagetables:1292
[   98.477947][ T6666]  sec_pagetables:301 bounce:0
[   98.477947][ T6666]  kernel_misc_reclaimable:0
[   98.477947][ T6666]  free:62750 free_pcp:91 free_cma:0
[   98.477989][ T6666] Node 0 active_anon:0kB inactive_anon:8kB active_file:104kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8704kB pagetables:1196kB sec_pagetables:1096kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   98.478033][ T6666] Node 0 DMA free:2324kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:364kB local_pcp:0kB free_cma:0kB
[   98.478088][ T6666] lowmem_reserve[]: 0 277 277 277 277
[   98.478118][ T6666] Node 0 DMA: 61*4kB (U) 24*8kB (UE) 2*16kB (U) 24*32kB (UE) 9*64kB (UE) 2*128kB (U) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2324kB
[   98.478226][ T6666] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   98.478239][ T6666] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   98.478252][ T6666] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   98.478264][ T6666] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   98.478277][ T6666] 20930 total pagecache pages
[   98.478282][ T6666] 146 pages in swap cache
[   98.478288][ T6666] Free swap  = 120900kB
[   98.478293][ T6666] Total swap = 124996kB
[   98.478300][ T6666] 524155 pages RAM
[   98.478305][ T6666] 0 pages HighMem/MovableOnly
[   98.478310][ T6666] 212121 pages reserved
[   98.478315][ T6666] 0 pages cma reserved
[  100.432510][   T62] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  100.446238][   T62] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  100.523426][   T50] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  100.570788][ T6685] ceph: No mds server is up or the cluster is laggy
[  100.631621][ T6689] ceph: No mds server is up or the cluster is laggy
[  100.718326][ T5885] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  100.778397][ T6073] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  102.594812][ T6705] Invalid ELF header magic: != ELF
[  103.767919][ T6073] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  103.928591][ T6073] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  103.935623][ T6073] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.954534][ T6073] usb 5-1: config 0 descriptor??
[  104.167109][ T6725] Invalid ELF header magic: != ELF
[  104.455783][ T6714] batman_adv: batadv0: Adding interface: macvtap1
[  104.455802][ T6714] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.455827][ T6714] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  104.715032][ T5099] Bluetooth: hci0: command 0x0c1a tx timeout
[  104.774744][ T6720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.512756][ T6727] batman_adv: batadv0: Removing interface: macvtap1
[  106.386710][ T6753] netlink: 'syz.1.181': attribute type 10 has an invalid length.
[  107.412576][ T6753] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  107.884662][ T6073] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  107.885591][ T6073] [drm:udl_init] *ERROR* Selecting channel failed
[  107.981665][ T6073] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1
[  107.981688][ T6073] [drm] Initialized udl on minor 1
[  107.991442][ T6073] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  107.991884][ T6073] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  107.995398][ T1683] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  107.996974][ T1683] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  108.012363][ T1683] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  108.014940][ T6073] usb 5-1: USB disconnect, device number 9
[  108.457299][ T6759] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  109.026466][ T6764] loop6: detected capacity change from 0 to 8
[  109.099536][ T6764] Dev loop6: unable to read RDB block 8
[  109.099573][ T6764]  loop6: unable to read partition table
[  109.099727][ T6764] loop6: partition table beyond EOD, truncated
[  109.099749][ T6764] loop_reread_partitions: partition scan of loop6 (þ被xü^>Ñà–ì) failed (rc=-5)
[  109.164563][ T6765] futex_wake_op: syz.0.176 tries to shift op by 144; fix this program
[  109.198187][ T6765] openvswitch: netlink: Multiple metadata blocks provided
[  110.052808][  T854] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  110.132873][  T854] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  110.134396][  T854] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  110.207051][ T6772] ceph: No mds server is up or the cluster is laggy
[  110.238583][ T6776] ceph: No mds server is up or the cluster is laggy
[  110.363279][ T6773] netlink: 'syz.2.177': attribute type 1 has an invalid length.
[  110.363304][ T6773] netlink: 'syz.2.177': attribute type 2 has an invalid length.
[  110.363316][ T6773] netlink: 'syz.2.177': attribute type 3 has an invalid length.
[  110.363327][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'.
[  111.078998][ T6787] Invalid ELF header magic: != ELF
[  111.849073][ T6771] syz.2.177 (6771): drop_caches: 3
[  113.303258][ T6804] bridge1: entered promiscuous mode
[  113.678323][ T1291] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  113.705178][ T1291] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  113.818826][ T5823] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  113.959263][ T1291] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  114.089124][ T5823] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  114.488344][ T1291] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  114.501309][ T6809] ceph: No mds server is up or the cluster is laggy
[  114.502735][ T6806] ceph: No mds server is up or the cluster is laggy
[  114.760047][ T5823] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  114.844440][ T1291] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  115.004743][ T1291] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  115.005792][ T1291] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  115.005820][ T1291] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  115.005841][ T1291] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  115.181429][ T1291] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.181451][ T1291] usb 6-1: Product: syz
[  115.181460][ T1291] usb 6-1: Manufacturer: syz
[  115.181469][ T1291] usb 6-1: SerialNumber: syz
[  115.314832][ T1291] hub 6-1:1.0: bad descriptor, ignoring hub
[  115.314855][ T1291] hub 6-1:1.0: probe with driver hub failed with error -5
[  115.692895][ T1291] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  115.779379][ T6820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.779722][ T6820] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.845004][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'.
[  116.862504][  T854] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  116.971560][ T1683] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  116.995301][ T6834] ceph: No mds server is up or the cluster is laggy
[  117.005724][ T6836] ceph: No mds server is up or the cluster is laggy
[  117.090198][ T5885] usb 6-1: USB disconnect, device number 2
[  117.117614][ T5885] usblp0: removed
[  117.642797][  T854] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  117.912881][  T854] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  117.962623][ T6853] netlink: 'syz.1.192': attribute type 1 has an invalid length.
[  117.962643][ T6853] netlink: 'syz.1.192': attribute type 2 has an invalid length.
[  117.962654][ T6853] netlink: 'syz.1.192': attribute type 3 has an invalid length.
[  117.962709][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.192'.
[  118.391590][ T6843] ceph: No mds server is up or the cluster is laggy
[  118.422592][  T854] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  119.474985][ T6847] syz.1.192 (6847): drop_caches: 3
[  120.945213][ T6073] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  121.025220][ T6873] gadgetfs: bound to dummy_udc driver
[  121.068176][   T62] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  121.204396][ T6073] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  121.267799][ T5885] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  121.268050][    C3] gadgetfs: connected
[  121.268163][ T5885] gadgetfs: disconnected
[  121.332555][   T62] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  121.356521][ T6873] gadgetfs: suspended from state 2
[  121.609135][ T5885] usb 5-1: device not accepting address 10, error -71
[  121.772223][ T6880] ceph: No mds server is up or the cluster is laggy
[  121.804072][ T6877] ceph: No mds server is up or the cluster is laggy
[  121.848574][ T2416] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  121.915360][ T6073] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  122.610368][ T2416] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  122.660446][ T1291] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  122.671618][ T1291] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  122.809731][ T6897] ceph: No mds server is up or the cluster is laggy
[  122.824293][ T2416] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  122.831157][ T2416] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.833773][ T2416] usb 6-1: config 0 descriptor??
[  122.859772][ T6901] ceph: No mds server is up or the cluster is laggy
[  122.860646][   T62] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  122.873752][ T6893] null_blk: nullb1: using native zone append
[  122.957995][ T1291] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  123.268559][ T5885] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  123.348089][ T6892] batman_adv: batadv0: Adding interface: macvtap1
[  123.348107][ T6892] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  123.348131][ T6892] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  123.479359][ T5844] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  123.781749][ T5885] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  124.455407][ T6893] null_blk: disk nullb1 created
[  124.651678][ T6907] batman_adv: batadv0: Removing interface: macvtap1
[  124.830152][ T5844] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  124.911559][ T6918] bridge_slave_0: left allmulticast mode
[  124.911587][ T6918] bridge_slave_0: left promiscuous mode
[  124.934768][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.999125][ T6918] bridge_slave_1: left allmulticast mode
[  124.999151][ T6918] bridge_slave_1: left promiscuous mode
[  124.999428][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.038888][ T6918] bond0: (slave bond_slave_0): Releasing backup interface
[  125.053725][ T6918] bond0: (slave bond_slave_1): Releasing backup interface
[  125.094301][ T6918] team0: Port device team_slave_0 removed
[  125.098771][ T5844] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  125.162321][ T6918] team0: Port device team_slave_1 removed
[  125.163251][ T6918] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.163270][ T6918] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.195778][ T6918] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.195802][ T6918] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.217784][ T6918] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  125.399755][ T6918] kernel profiling enabled (shift: 7)
[  125.629906][ T1291] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  125.635781][ T6913] ceph: No mds server is up or the cluster is laggy
[  125.703233][ T6918] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  126.072700][ T6923] team0: Mode changed to "loadbalance"
[  126.139109][ T2416] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  126.139385][ T2416] [drm:udl_init] *ERROR* Selecting channel failed
[  126.147601][ T2416] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1
[  126.157347][ T2416] [drm] Initialized udl on minor 1
[  126.162862][ T2416] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  126.163223][ T2416] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  126.201381][ T5885] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  126.203674][ T5885] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  126.203852][ T5885] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  126.204119][ T2416] usb 6-1: USB disconnect, device number 3
[  126.937009][ T6934] netlink: 'syz.0.205': attribute type 1 has an invalid length.
[  126.937032][ T6934] netlink: 'syz.0.205': attribute type 2 has an invalid length.
[  126.937044][ T6934] netlink: 'syz.0.205': attribute type 3 has an invalid length.
[  126.937056][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.205'.
[  127.720023][ T6929] syz.0.205 (6929): drop_caches: 3
[  127.841421][ T6936] bridge2: entered promiscuous mode
[  132.391385][ T1438] ieee802154 phy0 wpan0: encryption failed: -22
[  133.263671][ T6949] 9pnet_virtio: no channels available for device syz
[  134.005708][ T6958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.214'.
[  134.885862][ T6966] bridge_slave_0: left allmulticast mode
[  134.885891][ T6966] bridge_slave_0: left promiscuous mode
[  134.886086][ T6966] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.246087][ T6966] bridge_slave_1: left allmulticast mode
[  135.246115][ T6966] bridge_slave_1: left promiscuous mode
[  135.246417][ T6966] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.713758][ T5815] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  136.075965][ T5815] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  136.287911][ T6966] bond0: (slave bond_slave_0): Releasing backup interface
[  136.470444][ T6966] bond0: (slave bond_slave_1): Releasing backup interface
[  136.500416][ T6966] team0: Port device team_slave_0 removed
[  136.516592][ T6971] ceph: No mds server is up or the cluster is laggy
[  136.561042][ T6966] team0: Port device team_slave_1 removed
[  136.561731][ T6966] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.561749][ T6966] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.565509][ T6966] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.565532][ T6966] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.575942][ T6966] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  136.578350][ T5815] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  136.696327][ T6969] team0: Mode changed to "loadbalance"
[  137.132121][ T6073] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  137.468021][ T6073] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  137.547142][   T62] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  137.725566][ T6989] Set syz0 is full, maxelem 0 reached
[  137.744862][   T62] usb 7-1: Using ep0 maxpacket: 32
[  137.745680][   T62] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  137.746804][   T62] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  137.746824][   T62] usb 7-1: config 0 has no interface number 0
[  137.833093][   T62] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.833115][   T62] usb 7-1: Product: syz
[  137.833126][   T62] usb 7-1: Manufacturer: syz
[  137.833136][   T62] usb 7-1: SerialNumber: syz
[  137.836230][   T62] usb 7-1: config 0 descriptor??
[  137.888516][   T62] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  137.888542][   T62] usb 7-1: selecting invalid altsetting 1
[  137.888556][   T62] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  137.892310][   T62] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  137.892692][   T62] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  137.892743][   T62] usb 7-1: media controller created
[  137.949565][ T6985] ceph: No mds server is up or the cluster is laggy
[  137.982871][   T62] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  138.001854][ T5823] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  138.354642][ T6991] netlink: 'syz.2.219': attribute type 1 has an invalid length.
[  138.354724][ T6991] netlink: 244 bytes leftover after parsing attributes in process `syz.2.219'.
[  138.744435][ T6995] Invalid ELF header magic: != ELF
[  139.135755][   T62] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  139.137109][   T62] zl10353_read_register: readreg error (reg=127, ret==-110)
[  140.205926][   T62] usb 7-1: USB disconnect, device number 4
[  141.346834][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'.
[  142.393391][    T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  142.486606][ T7018] ceph: No mds server is up or the cluster is laggy
[  142.540375][ T7023] ceph: No mds server is up or the cluster is laggy
[  142.542255][   T62] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  143.024880][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'.
[  143.115973][ T7034] futex_wake_op: syz.3.232 tries to shift op by 144; fix this program
[  145.241787][ T7048] bridge1: entered promiscuous mode
[  145.311699][ T7050] block nbd0: not configured, cannot reconfigure
[  145.314608][ T7037] Process accounting resumed
[  145.531673][   T66] Bluetooth: hci1: unexpected event for opcode 0x2011
[  145.671257][ T7057] jffs2: notice: (7057) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  145.784438][ T7057] overlayfs: upper fs does not support tmpfile.
[  145.821632][ T7057] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  147.647825][ T7081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  148.314998][ T7086] netlink: 'syz.0.241': attribute type 10 has an invalid length.
[  150.665500][ T7095] gadgetfs: bound to dummy_udc driver
[  150.782359][ T7088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.241'.
[  150.943812][ T2416] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  150.944137][    C3] gadgetfs: connected
[  150.944269][ T2416] gadgetfs: disconnected
[  151.134497][    C3] gadgetfs: connected
[  151.134705][ T2416] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[  151.137949][ T2416] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.237588][ T7095] gadgetfs: suspended from state 3
[  151.237988][ T7095] gadgetfs: disconnected
[  152.235129][ T2416] usb 5-1: can't set config #1, error -71
[  152.255661][ T2416] usb 5-1: USB disconnect, device number 12
[  154.829364][   T35] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  155.089907][   T35] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  155.112442][ T7138] 9pnet_virtio: no channels available for device syz
[  155.624984][   T62] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  156.103805][ T7130] ceph: No mds server is up or the cluster is laggy
[  157.002884][   T43] audit: type=1800 audit(1789741033.145:2): pid=7132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.248" name="bus" dev="ramfs" ino=18532 res=0 errno=0
[  159.795044][ T7175] Invalid ELF header magic: != ELF
[  160.486363][ T7182] Bluetooth: MGMT ver 1.23
[  160.486900][ T7182] netlink: 'syz.2.259': attribute type 1 has an invalid length.
[  160.486915][ T7182] netlink: 224 bytes leftover after parsing attributes in process `syz.2.259'.
[  160.498459][ T5815] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  160.504463][ T7182] FAULT_INJECTION: forcing a failure.
[  160.504463][ T7182] name failslab, interval 1, probability 0, space 0, times 0
[  160.504495][ T7182] CPU: 1 UID: 0 PID: 7182 Comm: syz.2.259 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  160.504519][ T7182] Tainted: [L]=SOFTLOCKUP
[  160.504526][ T7182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  160.504535][ T7182] Call Trace:
[  160.504541][ T7182]  <TASK>
[  160.504549][ T7182]  dump_stack_lvl+0x100/0x190
[  160.504582][ T7182]  should_fail_ex.cold+0x5/0xa
[  160.504606][ T7182]  should_failslab+0xc2/0x120
[  160.504670][ T7182]  __kmalloc_noprof+0xfc/0x840
[  160.504690][ T7182]  ? rcu_is_watching+0x13/0xc0
[  160.504718][ T7182]  ? tomoyo_realpath_from_path+0xb6/0x690
[  160.504745][ T7182]  tomoyo_realpath_from_path+0xb6/0x690
[  160.504771][ T7182]  tomoyo_path_number_perm+0x23c/0x580
[  160.504798][ T7182]  ? tomoyo_path_number_perm+0x22e/0x580
[  160.504824][ T7182]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  160.504846][ T7182]  ? futex_wait+0x11e/0x370
[  160.504876][ T7182]  ? __lock_acquire+0x5c0/0x1f40
[  160.504910][ T7182]  ? __fget_files+0x34/0x3d0
[  160.504931][ T7182]  ? find_held_lock+0x2b/0x80
[  160.504949][ T7182]  ? __fget_files+0x215/0x3d0
[  160.504965][ T7182]  ? hook_file_ioctl_common+0x140/0x440
[  160.504989][ T7182]  ? __fget_files+0x215/0x3d0
[  160.505012][ T7182]  ? __fget_files+0x21f/0x3d0
[  160.505033][ T7182]  security_file_ioctl_compat+0xd3/0x230
[  160.505059][ T7182]  __ia32_compat_sys_ioctl+0xc2/0x360
[  160.505089][ T7182]  __do_fast_syscall_32+0x13a/0x8b0
[  160.505116][ T7182]  ? lockdep_hardirqs_on+0x7d/0x110
[  160.505144][ T7182]  do_fast_syscall_32+0x32/0x70
[  160.505170][ T7182]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  160.505193][ T7182] RIP: 0023:0xf706efec
[  160.505215][ T7182] Code: Unable to access opcode bytes at 0xf706efc2.
[  160.505225][ T7182] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  160.505243][ T7182] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040086806
[  160.505255][ T7182] RDX: 0000000000000021 RSI: 0000000000000000 RDI: 0000000000000000
[  160.505265][ T7182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  160.505274][ T7182] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  160.505283][ T7182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  160.505306][ T7182]  </TASK>
[  160.505314][ T7182] ERROR: Out of memory at tomoyo_realpath_from_path.
[  160.521463][ T7182] kAFS: bad VL server IP address
[  160.682381][ T5815] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  160.706530][ T5815] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.059961][ T5815] usb 8-1: config 0 descriptor??
[  161.533694][   T50] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  161.591165][   T35] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  161.599471][ T7178] batman_adv: batadv0: Adding interface: macvtap1
[  161.599489][ T7178] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  161.599589][ T7178] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  161.617316][ T7198] ceph: No mds server is up or the cluster is laggy
[  161.669151][ T7194] ceph: No mds server is up or the cluster is laggy
[  162.206060][ T7209] 9pnet_virtio: no channels available for device syz
[  162.709756][ T7178] batman_adv: batadv0: Removing interface: macvtap1
[  163.443982][ T7217] 9pnet_virtio: no channels available for device syz
[  164.861440][ T5815] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  164.861895][ T5815] [drm:udl_init] *ERROR* Selecting channel failed
[  164.978254][ T5815] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 1
[  164.978281][ T5815] [drm] Initialized udl on minor 1
[  164.979219][ T5815] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  164.979557][ T5815] udl 8-1:0.0: [drm] Cannot find any crtc or sizes
[  164.982813][ T1291] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  164.983373][ T1291] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  164.983578][ T1291] udl 8-1:0.0: [drm] Cannot find any crtc or sizes
[  164.983671][ T5815] usb 8-1: USB disconnect, device number 3
[  165.167613][ T7221] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  165.483810][ T7229] Invalid ELF header magic: != ELF
[  166.418385][ T7243] Invalid ELF header magic: != ELF
[  166.508904][ T7241] Rounding down aligned max_sectors from 4294967295 to 4294967288
[  167.652970][ T7252] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  167.653001][ T7252] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  167.654360][ T7252] vhci_hcd vhci_hcd.0: Device attached
[  168.027816][ T5815] usb 44-1: SetAddress Request (6) to port 0
[  168.027879][ T5815] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd
[  168.273823][ T7253] vhci_hcd: connection reset by peer
[  168.275533][   T13] vhci_hcd vhci_hcd.3: stop threads
[  168.275562][   T13] vhci_hcd vhci_hcd.3: release socket
[  168.278866][   T13] vhci_hcd vhci_hcd.3: disconnect device
[  168.673341][ T7257] netlink: 'syz.2.275': attribute type 2 has an invalid length.
[  168.860619][ T7257] : entered promiscuous mode
[  169.715583][ T7273] 9pnet_virtio: no channels available for device syz
[  170.227404][ T7277] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  170.256986][ T7277] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  170.257574][ T7277] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  170.258291][ T7277] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  170.260222][ T7277] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  170.261632][ T7277] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  170.261945][ T7277] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  170.262446][ T7277] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  170.263020][ T7277] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  170.263412][ T7277] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  170.901412][ T7279] netlink: 'syz.0.280': attribute type 10 has an invalid length.
[  170.901434][ T7279] netlink: 40 bytes leftover after parsing attributes in process `syz.0.280'.
[  170.901893][ T7279] dummy0: entered promiscuous mode
[  170.905305][ T7279] bridge0: port 1(dummy0) entered blocking state
[  170.905513][ T7279] bridge0: port 1(dummy0) entered disabled state
[  170.905680][ T7279] dummy0: entered allmulticast mode
[  170.909153][ T7279] bridge0: port 1(dummy0) entered blocking state
[  170.909247][ T7279] bridge0: port 1(dummy0) entered forwarding state
[  170.924235][ T7279] fuse: Bad value for 'fd'
[  171.327074][ T7285] Invalid ELF header magic: != ELF
[  172.368195][ T7294] syz.2.283 (7294): drop_caches: 2
[  172.542219][ T7301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  172.604598][ T7302] FAULT_INJECTION: forcing a failure.
[  172.604598][ T7302] name failslab, interval 1, probability 0, space 0, times 0
[  172.604625][ T7302] CPU: 1 UID: 0 PID: 7302 Comm: syz.0.284 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  172.604646][ T7302] Tainted: [L]=SOFTLOCKUP
[  172.604652][ T7302] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  172.604661][ T7302] Call Trace:
[  172.604666][ T7302]  <TASK>
[  172.604671][ T7302]  dump_stack_lvl+0x100/0x190
[  172.604698][ T7302]  should_fail_ex.cold+0x5/0xa
[  172.604717][ T7302]  should_failslab+0xc2/0x120
[  172.604739][ T7302]  __kmalloc_noprof+0xfc/0x840
[  172.604757][ T7302]  ? trace_kmalloc+0xeb/0x110
[  172.604777][ T7302]  ? lsm_blob_alloc+0x68/0x90
[  172.604797][ T7302]  lsm_blob_alloc+0x68/0x90
[  172.604814][ T7302]  security_sk_alloc+0x2d/0x290
[  172.604836][ T7302]  sk_prot_alloc+0x12a/0x2a0
[  172.604860][ T7302]  sk_alloc+0x36/0xe80
[  172.604879][ T7302]  can_create+0x1e5/0x630
[  172.604901][ T7302]  __sock_create+0x339/0x860
[  172.604931][ T7302]  __sys_socket+0x14d/0x260
[  172.604947][ T7302]  ? xfd_validate_state+0x129/0x190
[  172.604968][ T7302]  ? __pfx___sys_socket+0x10/0x10
[  172.604988][ T7302]  __ia32_sys_socket+0x72/0xb0
[  172.605002][ T7302]  ? lockdep_hardirqs_on+0x7d/0x110
[  172.605024][ T7302]  __do_fast_syscall_32+0x13a/0x8b0
[  172.605050][ T7302]  do_fast_syscall_32+0x32/0x70
[  172.605075][ T7302]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  172.605095][ T7302] RIP: 0023:0xf6feefec
[  172.605110][ T7302] Code: Unable to access opcode bytes at 0xf6feefc2.
[  172.605117][ T7302] RSP: 002b:00000000f539b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167
[  172.605132][ T7302] RAX: ffffffffffffffda RBX: 000000000000001d RCX: 0000000000000002
[  172.605141][ T7302] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  172.605149][ T7302] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  172.605157][ T7302] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  172.605165][ T7302] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  172.605183][ T7302]  </TASK>
[  172.726677][ T7304] Invalid ELF header magic: != ELF
[  173.228950][ T5815] usb 44-1: device descriptor read/8, error -110
[  173.778087][ T7302] ceph: No mds server is up or the cluster is laggy
[  173.788794][ T5815] usb usb44-port1: attempt power cycle
[  173.815701][ T5823] libceph: connect (1)[c::]:6789 error -101
[  173.815845][ T5823] libceph: mon0 (1)[c::]:6789 connect error
[  174.058045][   T66] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  174.151248][ T7315] netlink: 'syz.3.286': attribute type 10 has an invalid length.
[  174.214620][ T7317] netlink: 14 bytes leftover after parsing attributes in process `syz.3.286'.
[  174.335932][ T7318] syz.3.286: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  174.336021][ T7318] CPU: 3 UID: 0 PID: 7318 Comm: syz.3.286 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  174.336050][ T7318] Tainted: [L]=SOFTLOCKUP
[  174.336058][ T7318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  174.336069][ T7318] Call Trace:
[  174.336075][ T7318]  <TASK>
[  174.336082][ T7318]  dump_stack_lvl+0x100/0x190
[  174.336115][ T7318]  warn_alloc.cold+0x9e/0xb2
[  174.336137][ T7318]  ? __pfx_warn_alloc+0x10/0x10
[  174.336164][ T7318]  ? __pfx___schedule+0x10/0x10
[  174.336193][ T7318]  ? __lock_acquire+0x5c0/0x1f40
[  174.336226][ T7318]  __vmalloc_node_range_noprof+0x123b/0x1420
[  174.336250][ T7318]  ? __lock_acquire+0x5c0/0x1f40
[  174.336276][ T7318]  ? __lock_acquire+0x5c0/0x1f40
[  174.336306][ T7318]  ? do_replace+0x1c6/0x490
[  174.336327][ T7318]  ? do_raw_spin_lock+0x128/0x260
[  174.336356][ T7318]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  174.336379][ T7318]  ? __lock_acquire+0x5c0/0x1f40
[  174.336404][ T7318]  ? do_raw_spin_unlock+0x145/0x1e0
[  174.336423][ T7318]  ? do_replace+0x1c6/0x490
[  174.336441][ T7318]  __vmalloc_node_noprof+0xad/0xf0
[  174.336463][ T7318]  ? do_replace+0x1c6/0x490
[  174.336487][ T7318]  __vmalloc_noprof+0xa3/0x120
[  174.336508][ T7318]  ? __pfx___vmalloc_noprof+0x10/0x10
[  174.336536][ T7318]  do_replace+0x1c6/0x490
[  174.336588][ T7318]  ? __pfx_do_replace+0x10/0x10
[  174.336625][ T7318]  compat_do_replace+0x589/0x7a0
[  174.336647][ T7318]  ? __pfx_compat_do_replace+0x10/0x10
[  174.336683][ T7318]  ? bpf_lsm_capable+0x9/0x10
[  174.336709][ T7318]  ? security_capable+0x80/0x260
[  174.336742][ T7318]  do_ebt_set_ctl+0x3f4/0x4a0
[  174.336767][ T7318]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  174.336791][ T7318]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  174.336806][ T7318]  ? futex_wake+0x4ea/0x5e0
[  174.336826][ T7318]  ? nf_sockopt_find.isra.0+0x222/0x290
[  174.336850][ T7318]  nf_setsockopt+0x8d/0xf0
[  174.336870][ T7318]  ip_setsockopt+0xcb/0xf0
[  174.336886][ T7318]  tcp_setsockopt+0xa7/0x100
[  174.336908][ T7318]  smc_setsockopt+0x1b6/0xa40
[  174.336927][ T7318]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  174.336955][ T7318]  ? __pfx_smc_setsockopt+0x10/0x10
[  174.336983][ T7318]  ? aa_sock_opt_perm+0x114/0x1e0
[  174.337026][ T7318]  ? __pfx_smc_setsockopt+0x10/0x10
[  174.337051][ T7318]  do_sock_setsockopt+0xf3/0x1d0
[  174.337083][ T7318]  __sys_setsockopt+0x119/0x190
[  174.337110][ T7318]  __ia32_sys_setsockopt+0xbc/0x160
[  174.337131][ T7318]  ? __do_fast_syscall_32+0xb3/0x8b0
[  174.337158][ T7318]  ? lockdep_hardirqs_on+0x7d/0x110
[  174.337184][ T7318]  __do_fast_syscall_32+0x13a/0x8b0
[  174.337211][ T7318]  do_fast_syscall_32+0x32/0x70
[  174.337237][ T7318]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  174.337259][ T7318] RIP: 0023:0xf700efec
[  174.337281][ T7318] Code: Unable to access opcode bytes at 0xf700efc2.
[  174.337288][ T7318] RSP: 002b:00000000f535a50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e
[  174.337306][ T7318] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000000
[  174.337318][ T7318] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108
[  174.337329][ T7318] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  174.337338][ T7318] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  174.337348][ T7318] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  174.337369][ T7318]  </TASK>
[  174.337410][ T7318] Mem-Info:
[  174.337421][ T7318] active_anon:6699 inactive_anon:126 isolated_anon:0
[  174.337421][ T7318]  active_file:27 inactive_file:11354 isolated_file:0
[  174.337421][ T7318]  unevictable:0 dirty:467 writeback:0
[  174.337421][ T7318]  slab_reclaimable:5891 slab_unreclaimable:54999
[  174.337421][ T7318]  mapped:24401 shmem:498 pagetables:1265
[  174.337421][ T7318]  sec_pagetables:305 bounce:0
[  174.337421][ T7318]  kernel_misc_reclaimable:0
[  174.337421][ T7318]  free:78252 free_pcp:11436 free_cma:0
[  174.337465][ T7318] Node 0 active_anon:284kB inactive_anon:48kB active_file:108kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:416kB dirty:4kB writeback:0kB shmem:24kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8960kB pagetables:1440kB sec_pagetables:1096kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  174.337505][ T7318] Node 1 active_anon:26512kB inactive_anon:456kB active_file:0kB inactive_file:45388kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97188kB dirty:1864kB writeback:0kB shmem:1968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5116kB pagetables:3620kB sec_pagetables:124kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  174.337545][ T7318] Node 0 DMA free:2348kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:12kB inactive_anon:36kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:196kB local_pcp:40kB free_cma:0kB
[  174.337589][ T7318] lowmem_reserve[]: 0 277 277 277 277
[  174.337774][ T7318] Node 0 DMA32 free:17572kB boost:0kB min:12628kB low:15784kB high:18940kB reserved_highatomic:0kB free_highatomic:0kB active_anon:272kB inactive_anon:76kB active_file:108kB inactive_file:28kB unevictable:0kB writepending:4kB zspages:0kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:7696kB local_pcp:3148kB free_cma:0kB
[  174.337828][ T7318] lowmem_reserve[]: 0 0 0 0 0
[  174.337856][ T7318] Node 1 DMA32 free:293088kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:26512kB inactive_anon:456kB active_file:0kB inactive_file:45388kB unevictable:0kB writepending:1864kB zspages:2360kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:37852kB local_pcp:13892kB free_cma:0kB
[  174.337906][ T7318] lowmem_reserve[]: 0 0 0 0 0
[  174.337937][ T7318] Node 0 DMA: 110*4kB (U) 25*8kB (UE) 6*16kB (U) 11*32kB (UE) 12*64kB (UE) 2*128kB (U) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2368kB
[  174.339708][ T7318] Node 0 DMA32: 4*4kB (UM) 55*8kB (UME) 26*16kB (UME) 63*32kB (UME) 24*64kB (UME) 13*128kB (UME) 7*256kB (UME) 7*512kB (UME) 4*1024kB (UE) 1*2048kB (M) 0*4096kB = 17608kB
[  174.339853][ T7318] Node 1 DMA32: 882*4kB (UM) 448*8kB (UM) 261*16kB (UME) 390*32kB (UME) 147*64kB (UME) 212*128kB (UME) 125*256kB (UME) 70*512kB (UME) 29*1024kB (UM) 6*2048kB (UME) 30*4096kB (UM) = 293016kB
[  174.339989][ T7318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  174.340003][ T7318] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  174.340017][ T7318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  174.340030][ T7318] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  174.340043][ T7318] 12019 total pagecache pages
[  174.340049][ T7318] 151 pages in swap cache
[  174.340055][ T7318] Free swap  = 120940kB
[  174.340062][ T7318] Total swap = 124996kB
[  174.340069][ T7318] 524155 pages RAM
[  174.340074][ T7318] 0 pages HighMem/MovableOnly
[  174.340081][ T7318] 212121 pages reserved
[  174.340086][ T7318] 0 pages cma reserved
[  174.478697][ T5815] usb usb44-port1: unable to enumerate USB device
[  174.580650][ T7315] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  174.582507][ T7315] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  175.220042][ T7317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  175.375133][ T7317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  175.425516][ T7317] bond0 (unregistering): (slave netdevsim1): Releasing backup interface
[  175.458555][ T7317] bond0 (unregistering): Released all slaves
[  176.514862][ T7334] 9pnet_virtio: no channels available for device syz
[  177.329334][ T7335] tipc: New replicast peer: 0.0.0.0
[  177.329906][ T7335] tipc: Enabled bearer <udp:syz0>, priority 10
[  177.353622][ T7338] dlm: plock device version mismatch: kernel (1.2.0), user (2227959591.3024829116.1683162433)
[  177.794071][ T5822] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  178.206891][ T5822] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  178.214046][ T5822] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  178.214072][ T5822] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  178.214102][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.309466][ T5822] spcp8x5 5-1:1.0: SPCP8x5 converter detected
[  178.359496][    T9] tipc: Node number set to 4254100334
[  178.441391][ T5822] usb 5-1: SPCP8x5 converter now attached to ttyUSB0
[  178.871620][ T7333] SPCP8x5 ttyUSB0: failed to set control lines: -110
[  178.882363][ T7333] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32)
[  178.883255][ T7333] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  178.979124][ T7333] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  179.115529][ T7332] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  179.133356][ T5885] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  179.137343][ T5885] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  179.188888][ T5885] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  179.295693][ T7341] ceph: No mds server is up or the cluster is laggy
[  179.399037][ T2416] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  179.404226][ T7344] ceph: No mds server is up or the cluster is laggy
[  179.453745][ T5885] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  179.986631][    T9] usb 5-1: USB disconnect, device number 13
[  180.286073][    T9] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  180.286792][    T9] spcp8x5 5-1:1.0: device disconnected
[  180.434358][ T7351] jffs2: notice: (7351) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 4 orphan) and 4 of xref (1 dead, 3 orphan) found.
[  180.478898][ T7351] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it!
[  180.508694][ T7356] overlayfs: upper fs does not support tmpfile.
[  180.509114][ T7356] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  181.578471][ T7370] trusted_key: syz.3.296 sent an empty control message without MSG_MORE.
[  181.657262][ T7372] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10)
[  181.657290][ T7372] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  181.657347][ T7372] vhci_hcd vhci_hcd.0: Device attached
[  181.742543][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.297'.
[  181.796788][ T7373] vhci_hcd: connection closed
[  181.797133][   T13] vhci_hcd vhci_hcd.1: stop threads
[  181.797269][   T13] vhci_hcd vhci_hcd.1: release socket
[  181.797306][   T13] vhci_hcd vhci_hcd.1: disconnect device
[  181.844171][ T2416] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  181.845147][ T2416] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  181.848101][ T6073] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  181.991248][ T5823] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  182.078496][ T2416] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  182.100222][ T5885] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  182.177858][ T5823] usb 7-1: Using ep0 maxpacket: 8
[  182.178594][ T5823] usb 7-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  182.179560][ T5823] usb 7-1: config 3 has an invalid interface number: 45 but max is 0
[  182.179580][ T5823] usb 7-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[  182.179596][ T5823] usb 7-1: config 3 has no interface number 0
[  182.179627][ T5823] usb 7-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  182.179647][ T5823] usb 7-1: config 3 interface 45 has no altsetting 0
[  182.182198][ T5823] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.182222][ T5823] usb 7-1: Product: syz
[  182.182235][ T5823] usb 7-1: Manufacturer: syz
[  182.182249][ T5823] usb 7-1: SerialNumber: syz
[  182.506878][ T7381] gadgetfs: bound to dummy_udc driver
[  182.628488][ T5885] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  182.638703][ T7376] ceph: No mds server is up or the cluster is laggy
[  182.757759][ T5822] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  182.757991][    C0] gadgetfs: connected
[  182.758232][ T5822] gadgetfs: disconnected
[  182.854720][ T5823] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  182.958513][    C0] gadgetfs: connected
[  182.958646][ T5822] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[  182.959432][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.986023][    T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  183.003243][    C0] gadgetfs: configuration #1
[  183.034476][ T6073] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  183.074177][ T5822] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input8
[  183.082706][ T7379] gadgetfs: suspended from state 3
[  183.082772][ T7379] gadgetfs: disconnected
[  183.266027][    T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  183.305312][ T1683] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  183.339726][ T5823] usb 7-1: USB disconnect, device number 5
[  183.389122][ T7392] ceph: No mds server is up or the cluster is laggy
[  183.389610][ T7389] ceph: No mds server is up or the cluster is laggy
[  183.401557][ T5822] usb 5-1: USB disconnect, device number 14
[  183.863862][ T6449] udevd[6449]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  184.473061][   T43] audit: type=1800 audit(1789741060.615:3): pid=7386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.301" name="bus" dev="ramfs" ino=17377 res=0 errno=0
[  184.598587][ T7400] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.708217][ T7405] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  184.708244][ T7405] CIFS mount error: No usable UNC path provided in device string!
[  184.708244][ T7405] 
[  184.708472][ T7405] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  184.968483][ T5815] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  184.980955][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.304'.
[  185.170571][ T5815] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  185.171780][ T5815] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.225731][ T5815] usb 8-1: config 0 descriptor??
[  185.270808][ T7413] hsr_slave_1 (unregistering): left promiscuous mode
[  186.837396][ T7401] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.070532][ T7401] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.274509][ T7401] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.363176][ T5815] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  187.363582][ T5815] [drm:udl_init] *ERROR* Selecting channel failed
[  187.487403][ T7439] Invalid ELF header magic: != ELF
[  187.953891][ T5815] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 1
[  187.953915][ T5815] [drm] Initialized udl on minor 1
[  187.954875][ T5815] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  187.958736][ T5815] udl 8-1:0.0: [drm] Cannot find any crtc or sizes
[  187.960418][ T5815] usb 8-1: USB disconnect, device number 4
[  188.184251][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.324466][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'.
[  188.356937][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.356978][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.357007][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.647951][ T5815] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  188.960381][ T7451] gadgetfs: bound to dummy_udc driver
[  189.078360][ T5815] usb 8-1: Using ep0 maxpacket: 8
[  189.088238][ T5815] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  189.108574][ T5815] usb 8-1: config index 0 descriptor too short (expected 74, got 45)
[  189.108614][ T5815] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  189.108631][ T5815] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  189.108646][ T5815] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  189.108662][ T5815] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  189.108677][ T5815] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  189.108702][ T5815] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.226693][ T1683] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  189.237693][    C2] gadgetfs: connected
[  189.238035][ T1683] gadgetfs: disconnected
[  189.421829][ T7450] gadgetfs: suspended from state 2
[  189.423849][ T1683] usb 5-1: device descriptor read/all, error -71
[  189.532844][ T5815] usb 8-1: usb_control_msg returned -32
[  189.532886][ T5815] usbtmc 8-1:16.0: can't read capabilities
[  190.172901][ T1291] usb 8-1: USB disconnect, device number 5
[  191.029539][ T7467] jffs2: notice: (7467) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (0 unchecked, 8 orphan) and 8 of xref (2 dead, 6 orphan) found.
[  191.230760][ T7467] overlayfs: upper fs does not support tmpfile.
[  191.261335][ T7467] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  191.840282][ T7475] Invalid ELF header magic: != ELF
[  192.251006][ T7484] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2.1.3), cmd(8)
[  192.630385][ T7488] Invalid ELF header magic: != ELF
[  193.836108][ T1438] ieee802154 phy0 wpan0: encryption failed: -22
[  196.767563][ T7504] gadgetfs: bound to dummy_udc driver
[  196.910939][ T7514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.327'.
[  197.084928][   T66] Bluetooth: hci3: ISO packet for unknown connection handle 0
[  197.124508][ T1291] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  197.125071][    C1] gadgetfs: connected
[  197.125539][ T1291] gadgetfs: disconnected
[  197.313059][ T7502] gadgetfs: suspended from state 2
[  197.372956][ T1291] usb 5-1: device descriptor read/all, error -71
[  199.473188][ T7527] Invalid ELF header magic: != ELF
[  200.540905][ T7540] gadgetfs: bound to dummy_udc driver
[  200.601036][ T7534] overlayfs: conflicting lowerdir path
[  200.601279][ T1271] nvmet: connect request for invalid subsystem testsubsys!
[  200.628287][ T7531] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys"
[  200.806068][ T6286] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  200.806308][    C0] gadgetfs: connected
[  200.819422][ T6286] gadgetfs: disconnected
[  201.089794][    C0] gadgetfs: connected
[  201.089928][ T6286] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[  201.090590][ T6286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.374467][ T7535] gadgetfs: suspended from state 3
[  201.374629][ T7535] gadgetfs: disconnected
[  201.478516][ T6286] usb 5-1: can't set config #1, error -71
[  201.495907][ T6286] usb 5-1: USB disconnect, device number 19
[  201.905020][ T7548] dlm: plock device version mismatch: kernel (1.2.0), user (2227959591.3024829116.1683162433)
[  201.906248][ T7548] tipc: Started in network mode
[  201.906272][ T7548] tipc: Node identity 7f000001, cluster identity 4711
[  201.906474][ T7548] tipc: New replicast peer: 0.0.0.0
[  201.909993][ T7548] tipc: Enabled bearer <udp:syz0>, priority 10
[  202.217784][ T5823] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  202.371146][ T5823] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  202.374753][ T5823] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  202.374781][ T5823] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  202.374817][ T5823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.438753][ T5823] spcp8x5 7-1:1.0: SPCP8x5 converter detected
[  202.466483][ T5823] usb 7-1: SPCP8x5 converter now attached to ttyUSB0
[  202.542194][ T7550] Invalid ELF header magic: != ELF
[  202.835168][ T7548] SPCP8x5 ttyUSB0: failed to set control lines: -110
[  202.857952][ T7548] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32)
[  202.873393][ T7548] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  202.901681][ T7548] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  203.011319][ T7547] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  203.025062][ T5823] usb 7-1: USB disconnect, device number 6
[  203.030670][ T1683] tipc: Node number set to 2130706433
[  203.047151][ T5823] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  203.059080][ T5823] spcp8x5 7-1:1.0: device disconnected
[  203.238014][ T7563] gadgetfs: bound to dummy_udc driver
[  203.551003][ T7570] netlink: 'syz.3.341': attribute type 4 has an invalid length.
[  203.551024][ T7570] netlink: 17 bytes leftover after parsing attributes in process `syz.3.341'.
[  203.609119][   T62] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  203.672915][ T5823] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  203.725458][ T7573] ceph: No mds server is up or the cluster is laggy
[  203.730201][ T7578] ceph: No mds server is up or the cluster is laggy
[  205.131955][ T7589] Invalid ELF header magic: != ELF
[  205.877679][ T7597] Invalid ELF header magic: != ELF
[  206.274409][ T7603] FAULT_INJECTION: forcing a failure.
[  206.274409][ T7603] name failslab, interval 1, probability 0, space 0, times 0
[  206.274445][ T7603] CPU: 2 UID: 0 PID: 7603 Comm: syz.3.346 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  206.274469][ T7603] Tainted: [L]=SOFTLOCKUP
[  206.274477][ T7603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  206.274489][ T7603] Call Trace:
[  206.274496][ T7603]  <TASK>
[  206.274503][ T7603]  dump_stack_lvl+0x100/0x190
[  206.274535][ T7603]  should_fail_ex.cold+0x5/0xa
[  206.274563][ T7603]  should_failslab+0xc2/0x120
[  206.274589][ T7603]  __kmalloc_cache_noprof+0x91/0x6d0
[  206.274616][ T7603]  ? resv_map_alloc+0x46/0x400
[  206.274642][ T7603]  resv_map_alloc+0x46/0x400
[  206.274667][ T7603]  hugetlbfs_get_inode+0x385/0x700
[  206.274695][ T7603]  ? do_raw_spin_lock+0x128/0x260
[  206.274729][ T7603]  hugetlb_file_setup+0x15b/0x5b0
[  206.274754][ T7603]  memfd_alloc_file+0xc2/0x610
[  206.274779][ T7603]  ? _raw_spin_unlock+0x28/0x50
[  206.274808][ T7603]  ? __pfx_memfd_alloc_file+0x10/0x10
[  206.274839][ T7603]  __do_sys_memfd_create+0x236/0x3d0
[  206.274870][ T7603]  __do_fast_syscall_32+0x13a/0x8b0
[  206.274906][ T7603]  do_fast_syscall_32+0x32/0x70
[  206.274935][ T7603]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  206.274960][ T7603] RIP: 0023:0xf700efec
[  206.274980][ T7603] Code: Unable to access opcode bytes at 0xf700efc2.
[  206.274988][ T7603] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000164
[  206.275008][ T7603] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000004
[  206.275019][ T7603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  206.275030][ T7603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  206.275042][ T7603] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  206.275055][ T7603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  206.275088][ T7603]  </TASK>
[  206.754780][ T7607] netlink: 'syz.1.347': attribute type 21 has an invalid length.
[  206.754820][ T7607] IPv6: NLM_F_CREATE should be specified when creating new route
[  207.496588][ T7620] gadgetfs: bound to dummy_udc driver
[  207.915709][ T6073] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  207.951713][ T2416] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  208.017839][ T7626] ceph: No mds server is up or the cluster is laggy
[  208.025900][ T7632] ceph: No mds server is up or the cluster is laggy
[  208.184705][ T5823] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  208.531403][ T2416] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  208.697198][ T2416] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  208.704521][ T2416] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  208.704578][ T2416] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65344, setting to 1024
[  208.704603][ T2416] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  208.704623][ T2416] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  208.706177][ T2416] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  208.706201][ T2416] usb 5-1: Product: syz
[  208.706216][ T2416] usb 5-1: Manufacturer: syz
[  208.710303][ T7636] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  208.711897][ T2416] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected
[  208.768509][ T2416] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  209.041171][ T7636] uhci_hcd 0000:00:1d.0: remove, state 4
[  209.041336][ T7636] usb usb1: USB disconnect, device number 1
[  209.071594][ T7647] Invalid ELF header magic: != ELF
[  209.263772][ T7636] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered
[  209.837320][ T7653] gadgetfs: bound to dummy_udc driver
[  209.939625][ T2416] usb 5-1: USB disconnect, device number 20
[  209.950943][ T2416] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  209.951463][ T2416] garmin_gps 5-1:1.0: device disconnected
[  210.089492][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  210.089738][    C0] gadgetfs: connected
[  210.090157][    T9] gadgetfs: disconnected
[  211.421182][ T7675] Invalid ELF header magic: != ELF
[  211.777489][    T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  211.968114][    T9] usb 6-1: Using ep0 maxpacket: 8
[  211.969034][    T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  211.970446][    T9] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  211.970469][    T9] usb 6-1: config 0 has no interface number 0
[  211.970498][    T9] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  211.970517][    T9] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  211.970537][    T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  211.970557][    T9] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  211.970591][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.972871][    T9] usb 6-1: config 0 descriptor??
[  212.027592][    T9] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  212.492443][ T1291] usb 6-1: USB disconnect, device number 6
[  212.492683][    C1] ldusb 6-1:0.55: usb_submit_urb failed (-19)
[  213.980504][ T7693] lo: entered promiscuous mode
[  214.025131][ T7693] tunl0: entered promiscuous mode
[  214.028579][ T7693] gre0: entered promiscuous mode
[  214.034134][ T7693] gretap0: entered promiscuous mode
[  214.048258][ T7693] erspan0: entered promiscuous mode
[  214.049461][ T7693] ip_vti0: entered promiscuous mode
[  214.050203][ T7693] ip6_vti0: entered promiscuous mode
[  214.050940][ T7693] sit0: entered promiscuous mode
[  214.055676][ T7693] ip6tnl0: entered promiscuous mode
[  214.063594][ T7693] ip6gre0: entered promiscuous mode
[  214.076911][ T1291] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  214.110201][ T7693] syz_tun: entered promiscuous mode
[  214.170717][ T7693] ip6gretap0: entered promiscuous mode
[  214.192068][ T7693] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.192649][ T7693] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.194151][ T7693] bridge0: entered promiscuous mode
[  214.196877][ T7693] vcan0: entered promiscuous mode
[  214.199855][ T7693] team0: entered promiscuous mode
[  214.199874][ T7693] team_slave_0: entered promiscuous mode
[  214.200041][ T7693] team_slave_1: entered promiscuous mode
[  214.229761][ T7693] dummy0: entered promiscuous mode
[  214.250051][ T7693] nlmon0: entered promiscuous mode
[  214.252146][ T7693] batadv0: entered promiscuous mode
[  214.255048][ T7693] vxcan0: entered promiscuous mode
[  214.255899][ T7693] vxcan1: entered promiscuous mode
[  214.257012][ T7693] veth0: entered promiscuous mode
[  214.285008][ T7693] veth1: entered promiscuous mode
[  214.357340][ T7693] wg0: entered promiscuous mode
[  214.374333][ T7693] wg1: entered promiscuous mode
[  214.383457][ T7693] wg2: entered promiscuous mode
[  214.385362][ T7693] veth0_to_bridge: entered promiscuous mode
[  214.399512][ T7693] veth1_to_bridge: entered promiscuous mode
[  214.421937][ T7693] veth0_to_bond: entered promiscuous mode
[  214.440580][ T7693] bond_slave_0: entered promiscuous mode
[  214.446399][ T7693] veth1_to_bond: entered promiscuous mode
[  214.449500][ T7693] bond_slave_1: entered promiscuous mode
[  214.449775][ T7693] veth0_to_team: entered promiscuous mode
[  214.471295][ T7693] veth1_to_team: entered promiscuous mode
[  214.478258][ T7693] veth0_to_batadv: entered promiscuous mode
[  214.480839][ T7693] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  214.482702][ T7693] batadv_slave_0: entered promiscuous mode
[  214.495744][ T7693] veth1_to_batadv: entered promiscuous mode
[  214.498394][ T7693] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  214.498455][ T7693] batadv_slave_1: entered promiscuous mode
[  214.517287][ T7693] xfrm0: entered promiscuous mode
[  214.519529][ T7693] veth0_to_hsr: entered promiscuous mode
[  214.523870][ T7693] veth1_to_hsr: entered promiscuous mode
[  214.548314][ T7693] hsr0: entered promiscuous mode
[  214.550824][ T7693] veth1_virt_wifi: entered promiscuous mode
[  214.553557][ T7693] veth0_virt_wifi: entered promiscuous mode
[  214.575530][ T7693] virt_wifi0: entered promiscuous mode
[  214.583542][ T7693] vlan0: entered promiscuous mode
[  214.586547][ T7693] vlan1: entered promiscuous mode
[  214.629652][ T7693] macvlan0: entered promiscuous mode
[  214.632411][ T7693] macvlan1: entered promiscuous mode
[  214.634474][ T7693] ipvlan0: entered promiscuous mode
[  214.634614][ T7693] ipvlan1: entered promiscuous mode
[  214.675433][ T7693] macvtap0: entered promiscuous mode
[  214.742560][ T7705] Invalid ELF header magic: != ELF
[  214.788889][ T7693] macsec0: entered promiscuous mode
[  214.791710][ T7693] geneve0: entered promiscuous mode
[  214.828019][ T7693] geneve1: entered promiscuous mode
[  215.109164][ T7693] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  215.155678][ T7693] netdevsim netdevsim3 netdevsim1: entered promiscuous mode
[  215.244754][ T7693] netdevsim netdevsim3 netdevsim2: entered promiscuous mode
[  215.281274][ T7693] netdevsim netdevsim3 netdevsim3: entered promiscuous mode
[  215.404065][ T7693] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  215.414414][ T7693] syztnl0: entered promiscuous mode
[  215.419528][ T5787] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.592265][ T7704] bridge2: entered promiscuous mode
[  215.747842][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.747891][   T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.747924][   T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.997295][ T7716] gadgetfs: bound to dummy_udc driver
[  216.247785][   T35] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  216.248071][    C3] gadgetfs: connected
[  216.248541][   T35] gadgetfs: disconnected
[  216.379067][ T6073] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  216.638541][ T5823] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  217.139430][ T5823] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  217.224036][ T7719] ceph: No mds server is up or the cluster is laggy
[  218.413384][ T6073] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  218.682644][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'.
[  218.821766][ T7730] lo: left promiscuous mode
[  219.071839][ T7735] lo speed is unknown, defaulting to 1000
[  219.128038][ T7735] lo speed is unknown, defaulting to 1000
[  219.150677][ T7735] lo speed is unknown, defaulting to 1000
[  219.160908][ T7735] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  219.162399][ T7735] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  219.162450][ T7735] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  219.175165][ T7735] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  219.201313][ T7735] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  219.301713][ T7735] lo speed is unknown, defaulting to 1000
[  219.307534][ T7735] lo speed is unknown, defaulting to 1000
[  219.309649][ T7735] lo speed is unknown, defaulting to 1000
[  219.311292][ T7735] lo speed is unknown, defaulting to 1000
[  219.315820][ T7735] lo speed is unknown, defaulting to 1000
[  220.401918][ T7744] Invalid ELF header magic: != ELF
[  221.237340][ T7751] netlink: 'syz.2.375': attribute type 10 has an invalid length.
[  221.238584][ T7751] netlink: 14 bytes leftover after parsing attributes in process `syz.2.375'.
[  221.396410][ T7753] syz.2.375: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  221.396472][ T7753] CPU: 0 UID: 0 PID: 7753 Comm: syz.2.375 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  221.396499][ T7753] Tainted: [L]=SOFTLOCKUP
[  221.396505][ T7753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  221.396515][ T7753] Call Trace:
[  221.396521][ T7753]  <TASK>
[  221.396528][ T7753]  dump_stack_lvl+0x100/0x190
[  221.396558][ T7753]  warn_alloc.cold+0x9e/0xb2
[  221.396601][ T7753]  ? __pfx_warn_alloc+0x10/0x10
[  221.396629][ T7753]  ? __lock_acquire+0x5c0/0x1f40
[  221.396657][ T7753]  ? __lock_acquire+0x5c0/0x1f40
[  221.396685][ T7753]  __vmalloc_node_range_noprof+0x123b/0x1420
[  221.396711][ T7753]  ? do_raw_spin_lock+0x128/0x260
[  221.396739][ T7753]  ? find_held_lock+0x2b/0x80
[  221.396760][ T7753]  ? debug_object_activate+0x343/0x4b0
[  221.396786][ T7753]  ? do_replace+0x1c6/0x490
[  221.396812][ T7753]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  221.396839][ T7753]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  221.396864][ T7753]  ? __lock_acquire+0x5c0/0x1f40
[  221.396891][ T7753]  ? do_replace+0x1c6/0x490
[  221.396910][ T7753]  __vmalloc_node_noprof+0xad/0xf0
[  221.396934][ T7753]  ? do_replace+0x1c6/0x490
[  221.396955][ T7753]  __vmalloc_noprof+0xa3/0x120
[  221.396976][ T7753]  ? __pfx___vmalloc_noprof+0x10/0x10
[  221.397005][ T7753]  do_replace+0x1c6/0x490
[  221.397027][ T7753]  ? __pfx_do_replace+0x10/0x10
[  221.397055][ T7753]  ? register_lock_class+0x3f/0x7b0
[  221.397092][ T7753]  compat_do_replace+0x589/0x7a0
[  221.397117][ T7753]  ? __pfx_compat_do_replace+0x10/0x10
[  221.397158][ T7753]  ? bpf_lsm_capable+0x9/0x10
[  221.397185][ T7753]  ? security_capable+0x80/0x260
[  221.397208][ T7753]  do_ebt_set_ctl+0x3f4/0x4a0
[  221.397230][ T7753]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  221.397253][ T7753]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  221.397270][ T7753]  ? futex_wake+0x4ea/0x5e0
[  221.397295][ T7753]  ? nf_sockopt_find.isra.0+0x222/0x290
[  221.397322][ T7753]  nf_setsockopt+0x8d/0xf0
[  221.397349][ T7753]  ip_setsockopt+0xcb/0xf0
[  221.397370][ T7753]  tcp_setsockopt+0xa7/0x100
[  221.397394][ T7753]  smc_setsockopt+0x1b6/0xa40
[  221.397416][ T7753]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  221.397447][ T7753]  ? __pfx_smc_setsockopt+0x10/0x10
[  221.397474][ T7753]  ? aa_sock_opt_perm+0x114/0x1e0
[  221.397500][ T7753]  ? __pfx_smc_setsockopt+0x10/0x10
[  221.397526][ T7753]  do_sock_setsockopt+0xf3/0x1d0
[  221.397557][ T7753]  __sys_setsockopt+0x119/0x190
[  221.397585][ T7753]  __ia32_sys_setsockopt+0xbc/0x160
[  221.397605][ T7753]  ? __do_fast_syscall_32+0xb3/0x8b0
[  221.397635][ T7753]  ? lockdep_hardirqs_on+0x7d/0x110
[  221.397661][ T7753]  __do_fast_syscall_32+0x13a/0x8b0
[  221.397692][ T7753]  do_fast_syscall_32+0x32/0x70
[  221.397717][ T7753]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  221.397739][ T7753] RIP: 0023:0xf706efec
[  221.397762][ T7753] Code: Unable to access opcode bytes at 0xf706efc2.
[  221.397770][ T7753] RSP: 002b:00000000f53ba50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e
[  221.397789][ T7753] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000000
[  221.397802][ T7753] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108
[  221.397815][ T7753] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  221.397827][ T7753] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  221.397837][ T7753] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  221.397860][ T7753]  </TASK>
[  221.427799][ T7753] Mem-Info:
[  221.427818][ T7753] active_anon:6740 inactive_anon:122 isolated_anon:0
[  221.427818][ T7753]  active_file:5 inactive_file:11387 isolated_file:0
[  221.427818][ T7753]  unevictable:0 dirty:397 writeback:0
[  221.427818][ T7753]  slab_reclaimable:5872 slab_unreclaimable:54869
[  221.427818][ T7753]  mapped:24485 shmem:477 pagetables:1278
[  221.427818][ T7753]  sec_pagetables:306 bounce:0
[  221.427818][ T7753]  kernel_misc_reclaimable:0
[  221.427818][ T7753]  free:72644 free_pcp:12476 free_cma:0
[  221.427874][ T7753] Node 0 active_anon:96kB inactive_anon:0kB active_file:20kB inactive_file:120kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8800kB pagetables:1236kB sec_pagetables:1100kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  221.427927][ T7753] Node 1 active_anon:26864kB inactive_anon:488kB active_file:0kB inactive_file:45428kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97912kB dirty:1588kB writeback:0kB shmem:1908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5244kB pagetables:3876kB sec_pagetables:124kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  221.427977][ T7753] Node 0 DMA free:2544kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:416kB local_pcp:136kB free_cma:0kB
[  221.428033][ T7753] lowmem_reserve[]: 0 277 277 277 277
[  221.428067][ T7753] Node 0 DMA32 free:15472kB boost:0kB min:12628kB low:15784kB high:18940kB reserved_highatomic:0kB free_highatomic:0kB active_anon:96kB inactive_anon:0kB active_file:20kB inactive_file:120kB unevictable:0kB writepending:0kB zspages:0kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:10396kB local_pcp:640kB free_cma:0kB
[  221.428131][ T7753] lowmem_reserve[]: 0 0 0 0 0
[  221.428234][ T7753] Node 1 DMA32 free:272560kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:26864kB inactive_anon:488kB active_file:0kB inactive_file:45428kB unevictable:0kB writepending:1588kB zspages:2456kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:39092kB local_pcp:10712kB free_cma:0kB
[  221.428294][ T7753] lowmem_reserve[]: 0 0 0 0 0
[  221.428325][ T7753] Node 0 DMA: 112*4kB (U) 26*8kB (UE) 6*16kB (U) 18*32kB (UE) 11*64kB (UE) 2*128kB (U) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2544kB
[  221.428525][ T7753] Node 0 DMA32: 28*4kB (UE) 22*8kB (UM) 11*16kB (UE) 85*32kB (UME) 20*64kB (UME) 0*128kB 1*256kB (U) 5*512kB (UM) 2*1024kB (U) 3*2048kB (UM) 0*4096kB = 15472kB
[  221.428662][ T7753] Node 1 DMA32: 118*4kB (UE) 149*8kB (UE) 228*16kB (UME) 325*32kB (UE) 233*64kB (UME) 220*128kB (UME) 121*256kB (UME) 71*512kB (UME) 29*1024kB (UM) 9*2048kB (ME) 24*4096kB (M) = 272544kB
[  221.428815][ T7753] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  221.428831][ T7753] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  221.428846][ T7753] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  221.428863][ T7753] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  221.428880][ T7753] 12018 total pagecache pages
[  221.428887][ T7753] 157 pages in swap cache
[  221.428894][ T7753] Free swap  = 120884kB
[  221.428901][ T7753] Total swap = 124996kB
[  221.428908][ T7753] 524155 pages RAM
[  221.428914][ T7753] 0 pages HighMem/MovableOnly
[  221.428920][ T7753] 212121 pages reserved
[  221.428927][ T7753] 0 pages cma reserved
[  221.516700][ T7751] bond0 (unregistering): Released all slaves
[  222.210937][ T7762] Invalid ELF header magic: != ELF
[  223.589902][ T7780] netlink: 'syz.0.379': attribute type 10 has an invalid length.
[  223.595509][ T7780] bridge0: port 1(dummy0) entered disabled state
[  223.596958][ T7780] dummy0: left allmulticast mode
[  223.596994][ T7780] dummy0: left promiscuous mode
[  223.597165][ T7780] bridge0: port 1(dummy0) entered disabled state
[  223.832763][   T35] Process accounting resumed
[  224.167792][ T7780] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  225.305013][ T7796] gfs2: error -5 reading superblock
[  225.339906][ T7793] netlink: 'syz.2.381': attribute type 21 has an invalid length.
[  225.339930][ T7793] IPv6: NLM_F_CREATE should be specified when creating new route
[  226.617111][ T7800] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  227.013784][ T7812] Invalid ELF header magic: != ELF
[  228.133374][ T7822] Invalid ELF header magic: != ELF
[  228.763622][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'.
[  230.589874][ T7839] 9pnet_virtio: no channels available for device syz
[  230.885027][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  232.710611][ T7857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.396'.
[  232.787049][ T7853] gadgetfs: bound to dummy_udc driver
[  233.047872][   T30] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  233.048115][    C1] gadgetfs: connected
[  233.048358][   T30] gadgetfs: disconnected
[  233.461979][ T7864] Invalid ELF header magic: != ELF
[  233.593073][    C1] gadgetfs: connected
[  233.593570][   T30] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[  233.599786][   T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.688904][    C1] gadgetfs: configuration #1
[  234.025714][   T30] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input9
[  234.090007][ T7851] gadgetfs: suspended from state 3
[  234.090058][ T7851] gadgetfs: disconnected
[  234.182794][   T30] usb 5-1: USB disconnect, device number 22
[  234.183101][    C0] usbtouchscreen 5-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  235.159809][ T7874] gadgetfs: bound to dummy_udc driver
[  235.256536][ T7875] Invalid ELF header magic: != ELF
[  236.316131][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'.
[  236.942212][ T7880] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2.1.3), cmd(8)
[  239.072068][ T7893] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[  239.073692][ T7893] udc dummy_udc.0: failed to start g1: -19
[  239.113293][ T7893] UDC core: g1: couldn't find an available UDC or it's busy
[  240.324793][ T7908] Invalid ELF header magic: != ELF
[  240.993202][ T7916] SQUASHFS error: Failed to read block 0x0: -5
[  240.993268][ T7916] unable to read squashfs_super_block
[  241.133914][ T7914] loop9: detected capacity change from 0 to 524287998
[  241.299020][ T7911] cdrom: dropping to single frame dma
[  241.642659][ T7913] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.643142][ T7913] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.930478][ T7913] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  242.974064][ T7913] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.021145][ T7913] bridge1: left promiscuous mode
[  244.034340][ T7913] bridge2: left promiscuous mode
[  244.062192][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.062238][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.062265][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.062292][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.800631][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'.
[  244.837009][ T7939] 9pnet_virtio: no channels available for device syz
[  245.167732][    T9] usb 5-1: new low-speed USB device number 23 using dummy_hcd
[  245.393197][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  245.393241][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  245.395340][    T9] usb 5-1: config 1 interface 0 altsetting 135 endpoint 0x82 is Bulk; changing to Interrupt
[  245.395368][    T9] usb 5-1: config 1 interface 0 altsetting 135 endpoint 0x3 is Bulk; changing to Interrupt
[  245.395387][    T9] usb 5-1: config 1 interface 0 altsetting 135 endpoint 0x3 has invalid wMaxPacketSize 0
[  245.395406][    T9] usb 5-1: config 1 interface 0 has no altsetting 0
[  245.398948][    T9] usb 5-1: language id specifier not provided by device, defaulting to English
[  246.412729][ T1169] IPVS: starting estimator thread 0...
[  246.435110][    C0] ==================================================================
[  246.435124][    C0] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60
[  246.435152][    C0] Read of size 1 at addr ffff8880142d6418 by task syz.1.415/7949
[  246.435166][    C0] 
[  246.435177][    C0] CPU: 0 UID: 0 PID: 7949 Comm: syz.1.415 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  246.435199][    C0] Tainted: [L]=SOFTLOCKUP
[  246.435205][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  246.435215][    C0] Call Trace:
[  246.435221][    C0]  <IRQ>
[  246.435228][    C0]  dump_stack_lvl+0x100/0x190
[  246.435251][    C0]  print_report+0x13d/0x4b0
[  246.435273][    C0]  ? __virt_addr_valid+0x239/0x430
[  246.435295][    C0]  ? _raw_spin_lock_irqsave+0x3a/0x60
[  246.435311][    C0]  kasan_report+0xdf/0x1c0
[  246.435332][    C0]  ? _raw_spin_lock_irqsave+0x3a/0x60
[  246.435353][    C0]  ? _raw_spin_lock_irqsave+0x3a/0x60
[  246.435373][    C0]  __kasan_check_byte+0x36/0x50
[  246.435395][    C0]  lock_acquire+0x132/0x380
[  246.435417][    C0]  ? do_raw_spin_unlock+0x53/0x1e0
[  246.435432][    C0]  ? .slowpath+0x9/0x18
[  246.435453][    C0]  _raw_spin_lock_irqsave+0x3a/0x60
[  246.435474][    C0]  ? p9_req_put+0xaf/0x250
[  246.435489][    C0]  p9_req_put+0xaf/0x250
[  246.435505][    C0]  req_done+0x1dc/0x2e0
[  246.435527][    C0]  ? __pfx_req_done+0x10/0x10
[  246.435546][    C0]  ? clockevents_program_event+0x1bf/0x820
[  246.435565][    C0]  ? find_held_lock+0x2b/0x80
[  246.435581][    C0]  ? __pfx_req_done+0x10/0x10
[  246.435602][    C0]  vring_interrupt+0x2ef/0x660
[  246.435623][    C0]  ? __pfx_vring_interrupt+0x10/0x10
[  246.435641][    C0]  __handle_irq_event_percpu+0x232/0x880
[  246.435660][    C0]  handle_irq_event+0xab/0x1e0
[  246.435676][    C0]  handle_edge_irq+0x34c/0x950
[  246.435693][    C0]  __common_interrupt+0xd8/0x2f0
[  246.435715][    C0]  common_interrupt+0x60/0xe0
[  246.435734][    C0]  asm_common_interrupt+0x26/0x40
[  246.435751][    C0] RIP: 0010:handle_softirqs+0x1a9/0x9d0
[  246.435777][    C0] Code: 89 6c 24 28 4c 89 7c 24 10 48 c7 c7 a0 9c ed 8b e8 cc b3 04 0a 31 d2 65 66 89 15 de 39 c2 12 e8 6d ed 49 00 fb bb ff ff ff ff <48> c7 c5 c0 a0 a0 8e 41 0f bc dc 83 c3 01 0f 85 9d 00 00 00 e9 b9
[  246.435794][    C0] RSP: 0018:ffffc90000007f20 EFLAGS: 00000202
[  246.435810][    C0] RAX: 00000000000005a4 RBX: 00000000ffffffff RCX: 0000000000000000
[  246.435820][    C0] RDX: 0000000000000102 RSI: ffffffff8e3f18bd RDI: ffffffff8c622c80
[  246.435830][    C0] RBP: 1ffff92000000fec R08: 0000000000000001 R09: 0000000000000000
[  246.435839][    C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000100
[  246.435849][    C0] R13: 000000000000000a R14: 00000000ffffea8f R15: fffffbfff1d41e50
[  246.435866][    C0]  ? __hrtimer_rearm_deferred+0x23c/0x7b0
[  246.435888][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  246.435909][    C0]  ? _raw_spin_unlock+0x28/0x50
[  246.435929][    C0]  ? __hrtimer_rearm_deferred+0x9b/0x7b0
[  246.435947][    C0]  __irq_exit_rcu+0x16a/0x210
[  246.435968][    C0]  irq_exit_rcu+0x9/0x30
[  246.435999][    C0]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  246.436022][    C0]  </IRQ>
[  246.436028][    C0]  <TASK>
[  246.436033][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  246.436051][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  246.436074][    C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 5a 15 f6 48 89 df e8 7e b1 15 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 05 a7 04 f6 65 48 83 3d 74 a4 ba 08 00 74 16 5b
[  246.436089][    C0] RSP: 0018:ffffc900067d7ac0 EFLAGS: 00000246
[  246.436101][    C0] RAX: 0000000000000002 RBX: ffff888043ce3000 RCX: 0000000000000000
[  246.436111][    C0] RDX: 0000000000000002 RSI: ffffffff8e3f18bd RDI: ffffffff8c622c80
[  246.436122][    C0] RBP: 0000000000000206 R08: 0000000000000001 R09: 0000000000000000
[  246.436132][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff948dc040
[  246.436143][    C0] R13: ffff888096b60000 R14: ffff888043ce3000 R15: ffff888043ce2580
[  246.436160][    C0]  try_to_wake_up+0xd8d/0x1c90
[  246.436185][    C0]  ? __pfx_try_to_wake_up+0x10/0x10
[  246.436205][    C0]  ? futex_hash+0x311/0x400
[  246.436261][    C0]  ? plist_check_list+0x1b8/0x280
[  246.436283][    C0]  ? plist_check_list+0x1b8/0x280
[  246.436301][    C0]  ? plist_del+0x308/0x510
[  246.436318][    C0]  ? find_held_lock+0x2b/0x80
[  246.436332][    C0]  ? futex_wake+0x4ea/0x5e0
[  246.436350][    C0]  wake_up_q+0xa1/0x130
[  246.436372][    C0]  futex_wake+0x4f4/0x5e0
[  246.436392][    C0]  ? __pfx_futex_wake+0x10/0x10
[  246.436413][    C0]  ? __css_rstat_updated+0x1ce/0x590
[  246.436437][    C0]  ? __pfx___handle_mm_fault+0x10/0x10
[  246.436462][    C0]  ? __pfx___css_rstat_updated+0x10/0x10
[  246.436488][    C0]  do_futex+0x2b2/0x440
[  246.436505][    C0]  ? __pfx_do_futex+0x10/0x10
[  246.436523][    C0]  ? find_held_lock+0x2b/0x80
[  246.436541][    C0]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  246.436561][    C0]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  246.436583][    C0]  __ia32_sys_futex_time32+0x2f4/0x470
[  246.436606][    C0]  ? __pfx___ia32_sys_futex_time32+0x10/0x10
[  246.436633][    C0]  __do_fast_syscall_32+0x13a/0x8b0
[  246.436663][    C0]  do_fast_syscall_32+0x32/0x70
[  246.436692][    C0]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  246.436716][    C0] RIP: 0023:0xf7f32fec
[  246.436738][    C0] Code: Unable to access opcode bytes at 0xf7f32fc2.
[  246.436747][    C0] RSP: 002b:00000000ff80662c EFLAGS: 00000246 ORIG_RAX: 00000000000000f0
[  246.436767][    C0] RAX: ffffffffffffffda RBX: 00000000f73f4f88 RCX: 0000000000000081
[  246.436781][    C0] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000000000000000
[  246.436794][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  246.436805][    C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  246.436817][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  246.436834][    C0]  </TASK>
[  246.436841][    C0] 
[  246.436846][    C0] Allocated by task 7950:
[  246.436855][    C0]  kasan_save_stack+0x30/0x50
[  246.436874][    C0]  kasan_save_track+0x14/0x30
[  246.436891][    C0]  __kasan_kmalloc+0xaa/0xb0
[  246.436907][    C0]  __kmalloc_cache_noprof+0x2f8/0x6d0
[  246.436932][    C0]  p9_client_create+0xaf/0xd40
[  246.436950][    C0]  v9fs_session_init+0x3c/0xdd0
[  246.436968][    C0]  v9fs_get_tree+0xb8/0xb50
[  246.436996][    C0]  vfs_get_tree+0x92/0x320
[  246.437020][    C0]  path_mount+0x7d0/0x24c0
[  246.437041][    C0]  __ia32_sys_mount+0x292/0x310
[  246.437063][    C0]  __do_fast_syscall_32+0x13a/0x8b0
[  246.437087][    C0]  do_fast_syscall_32+0x32/0x70
[  246.437110][    C0]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  246.437131][    C0] 
[  246.437135][    C0] Freed by task 7950:
[  246.437143][    C0]  kasan_save_stack+0x30/0x50
[  246.437160][    C0]  kasan_save_track+0x14/0x30
[  246.437179][    C0]  kasan_save_free_info+0x3b/0x70
[  246.437201][    C0]  __kasan_slab_free+0x5f/0x80
[  246.437217][    C0]  kfree+0x22b/0x6d0
[  246.437238][    C0]  p9_client_create+0x72d/0xd40
[  246.437254][    C0]  v9fs_session_init+0x3c/0xdd0
[  246.437271][    C0]  v9fs_get_tree+0xb8/0xb50
[  246.437289][    C0]  vfs_get_tree+0x92/0x320
[  246.437310][    C0]  path_mount+0x7d0/0x24c0
[  246.437329][    C0]  __ia32_sys_mount+0x292/0x310
[  246.437349][    C0]  __do_fast_syscall_32+0x13a/0x8b0
[  246.437371][    C0]  do_fast_syscall_32+0x32/0x70
[  246.437392][    C0]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  246.437411][    C0] 
[  246.437415][    C0] The buggy address belongs to the object at ffff8880142d6400
[  246.437415][    C0]  which belongs to the cache kmalloc-512 of size 512
[  246.437429][    C0] The buggy address is located 24 bytes inside of
[  246.437429][    C0]  freed 512-byte region [ffff8880142d6400, ffff8880142d6600)
[  246.437446][    C0] 
[  246.437451][    C0] The buggy address belongs to the physical page:
[  246.437459][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x142d4
[  246.437474][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  246.437489][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  246.437506][    C0] page_type: f5(slab)
[  246.437523][    C0] raw: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122
[  246.437539][    C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  246.437556][    C0] head: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122
[  246.437571][    C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  246.437587][    C0] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[  246.437603][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  246.437816][    C0] page dumped because: kasan: bad access detected
[  246.437826][    C0] page_owner tracks the page as allocated
[  246.437832][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6187, tgid 6187 (kworker/u32:5), ts 190778888833
[  246.437863][    C0]  post_alloc_hook+0xfd/0x120
[  246.437888][    C0]  get_page_from_freelist+0x110d/0x35d0
[  246.437905][    C0]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  246.437922][    C0]  new_slab+0xa9/0x6e0
[  246.437936][    C0]  refill_objects+0xe3/0x410
[  246.437951][    C0]  __pcs_replace_empty_main+0x35e/0x650
[  246.437983][    C0]  __kmalloc_cache_noprof+0x4f4/0x6d0
[  246.438006][    C0]  batadv_forw_packet_alloc+0x3a9/0x4d0
[  246.438023][    C0]  batadv_iv_ogm_aggregate_new+0x11e/0x4c0
[  246.438045][    C0]  batadv_iv_ogm_schedule_buff+0x94d/0x15d0
[  246.438068][    C0]  batadv_iv_send_outstanding_bat_ogm_packet+0x517/0x7d0
[  246.438092][    C0]  process_one_work+0xac7/0x1b10
[  246.438111][    C0]  worker_thread+0x5ef/0xe50
[  246.438127][    C0]  kthread+0x373/0x450
[  246.438143][    C0]  ret_from_fork+0x730/0xd60
[  246.438165][    C0]  ret_from_fork_asm+0x1a/0x30
[  246.438179][    C0] page last free pid 7458 tgid 7457 ts 190650483991 stack trace:
[  246.438192][    C0]  __free_frozen_pages+0x79f/0x10f0
[  246.438213][    C0]  tlb_finish_mmu+0x27d/0x810
[  246.438234][    C0]  exit_mmap+0x454/0xa00
[  246.438251][    C0]  __mmput+0x12a/0x410
[  246.438271][    C0]  mmput+0x67/0x80
[  246.438292][    C0]  do_exit+0x8b1/0x2ae0
[  246.438310][    C0]  do_group_exit+0xd5/0x2a0
[  246.438326][    C0]  get_signal+0x1ec7/0x21e0
[  246.438348][    C0]  arch_do_signal_or_restart+0x91/0x7a0
[  246.438370][    C0]  exit_to_user_mode_loop+0x139/0x700
[  246.438395][    C0]  __do_fast_syscall_32+0x59f/0x8b0
[  246.438422][    C0]  do_fast_syscall_32+0x32/0x70
[  246.438448][    C0]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  246.438471][    C0] 
[  246.438475][    C0] Memory state around the buggy address:
[  246.438485][    C0]  ffff8880142d6300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  246.438498][    C0]  ffff8880142d6380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  246.438511][    C0] >ffff8880142d6400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  246.438522][    C0]                             ^
[  246.438531][    C0]  ffff8880142d6480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  246.438544][    C0]  ffff8880142d6500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  246.438555][    C0] ==================================================================
[  246.438566][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  247.490464][    C0] CPU: 0 UID: 0 PID: 7949 Comm: syz.1.415 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  247.496039][    C0] Tainted: [L]=SOFTLOCKUP
[  247.499347][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  247.503607][    C0] Call Trace:
[  247.504947][    C0]  <IRQ>
[  247.506111][    C0]  dump_stack_lvl+0x100/0x190
[  247.508035][    C0]  vpanic+0x553/0x970
[  247.509845][    C0]  ? __pfx_vpanic+0x10/0x10
[  247.511935][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  247.516554][    C0]  ? _raw_spin_lock_irqsave+0x3a/0x60
[  247.519956][    C0]  panic+0xd1/0xe0
[  247.522337][    C0]  ? __pfx_panic+0x10/0x10
[  247.527997][    C0]  ? end_report.part.0+0x23/0x90
[  247.534152][    C0]  ? rcu_is_watching+0x13/0xc0
[  247.539211][    C0]  ? end_report.part.0+0x23/0x90
[  247.543181][    C0]  check_panic_on_warn.cold+0x19/0x34
[  247.546079][    C0]  end_report.part.0+0x3a/0x90
[  247.548506][    C0]  kasan_report.cold+0xe/0x18
[  247.550669][    C0]  ? _raw_spin_lock_irqsave+0x3a/0x60
[  247.552845][    C0]  ? _raw_spin_lock_irqsave+0x3a/0x60
[  247.554954][    C0]  __kasan_check_byte+0x36/0x50
[  247.557615][    C0]  lock_acquire+0x132/0x380
[  247.560242][    C0]  ? do_raw_spin_unlock+0x53/0x1e0
[  247.562744][    C0]  ? .slowpath+0x9/0x18
[  247.564651][    C0]  _raw_spin_lock_irqsave+0x3a/0x60
[  247.566951][    C0]  ? p9_req_put+0xaf/0x250
[  247.569355][    C0]  p9_req_put+0xaf/0x250
[  247.572694][    C0]  req_done+0x1dc/0x2e0
[  247.574907][    C0]  ? __pfx_req_done+0x10/0x10
[  247.576731][    C0]  ? clockevents_program_event+0x1bf/0x820
[  247.578674][    C0]  ? find_held_lock+0x2b/0x80
[  247.580277][    C0]  ? __pfx_req_done+0x10/0x10
[  247.582047][    C0]  vring_interrupt+0x2ef/0x660
[  247.583914][    C0]  ? __pfx_vring_interrupt+0x10/0x10
[  247.585907][    C0]  __handle_irq_event_percpu+0x232/0x880
[  247.588064][    C0]  handle_irq_event+0xab/0x1e0
[  247.590984][    C0]  handle_edge_irq+0x34c/0x950
[  247.593506][    C0]  __common_interrupt+0xd8/0x2f0
[  247.596093][    C0]  common_interrupt+0x60/0xe0
[  247.599303][    C0]  asm_common_interrupt+0x26/0x40
[  247.602477][    C0] RIP: 0010:handle_softirqs+0x1a9/0x9d0
[  247.605918][    C0] Code: 89 6c 24 28 4c 89 7c 24 10 48 c7 c7 a0 9c ed 8b e8 cc b3 04 0a 31 d2 65 66 89 15 de 39 c2 12 e8 6d ed 49 00 fb bb ff ff ff ff <48> c7 c5 c0 a0 a0 8e 41 0f bc dc 83 c3 01 0f 85 9d 00 00 00 e9 b9
[  247.616628][    C0] RSP: 0018:ffffc90000007f20 EFLAGS: 00000202
[  247.619841][    C0] RAX: 00000000000005a4 RBX: 00000000ffffffff RCX: 0000000000000000
[  247.624564][    C0] RDX: 0000000000000102 RSI: ffffffff8e3f18bd RDI: ffffffff8c622c80
[  247.628904][    C0] RBP: 1ffff92000000fec R08: 0000000000000001 R09: 0000000000000000
[  247.633130][    C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000100
[  247.637212][    C0] R13: 000000000000000a R14: 00000000ffffea8f R15: fffffbfff1d41e50
[  247.640816][    C0]  ? __hrtimer_rearm_deferred+0x23c/0x7b0
[  247.643484][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  247.645998][    C0]  ? _raw_spin_unlock+0x28/0x50
[  247.648604][    C0]  ? __hrtimer_rearm_deferred+0x9b/0x7b0
[  247.651553][    C0]  __irq_exit_rcu+0x16a/0x210
[  247.654188][    C0]  irq_exit_rcu+0x9/0x30
[  247.656506][    C0]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  247.661424][    C0]  </IRQ>
[  247.663379][    C0]  <TASK>
[  247.665384][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  247.669456][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  247.673236][    C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 5a 15 f6 48 89 df e8 7e b1 15 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 05 a7 04 f6 65 48 83 3d 74 a4 ba 08 00 74 16 5b
[  247.683556][    C0] RSP: 0018:ffffc900067d7ac0 EFLAGS: 00000246
[  247.688797][    C0] RAX: 0000000000000002 RBX: ffff888043ce3000 RCX: 0000000000000000
[  247.693893][    C0] RDX: 0000000000000002 RSI: ffffffff8e3f18bd RDI: ffffffff8c622c80
[  247.698955][    C0] RBP: 0000000000000206 R08: 0000000000000001 R09: 0000000000000000
[  247.703472][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff948dc040
[  247.707924][    C0] R13: ffff888096b60000 R14: ffff888043ce3000 R15: ffff888043ce2580
[  247.712771][    C0]  try_to_wake_up+0xd8d/0x1c90
[  247.718029][    C0]  ? __pfx_try_to_wake_up+0x10/0x10
[  247.722740][    C0]  ? futex_hash+0x311/0x400
[  247.733179][    C0]  ? plist_check_list+0x1b8/0x280
[  247.736137][    C0]  ? plist_check_list+0x1b8/0x280
[  247.738923][    C0]  ? plist_del+0x308/0x510
[  247.741371][    C0]  ? find_held_lock+0x2b/0x80
[  247.744057][    C0]  ? futex_wake+0x4ea/0x5e0
[  247.746662][    C0]  wake_up_q+0xa1/0x130
[  247.749985][    C0]  futex_wake+0x4f4/0x5e0
[  247.753023][    C0]  ? __pfx_futex_wake+0x10/0x10
[  247.756113][    C0]  ? __css_rstat_updated+0x1ce/0x590
[  247.759484][    C0]  ? __pfx___handle_mm_fault+0x10/0x10
[  247.762587][    C0]  ? __pfx___css_rstat_updated+0x10/0x10
[  247.765450][    C0]  do_futex+0x2b2/0x440
[  247.767166][    C0]  ? __pfx_do_futex+0x10/0x10
[  247.769605][    C0]  ? find_held_lock+0x2b/0x80
[  247.772546][    C0]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  247.775589][    C0]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  247.778390][    C0]  __ia32_sys_futex_time32+0x2f4/0x470
[  247.780651][    C0]  ? __pfx___ia32_sys_futex_time32+0x10/0x10
[  247.783551][    C0]  __do_fast_syscall_32+0x13a/0x8b0
[  247.799138][    C0]  do_fast_syscall_32+0x32/0x70
[  247.802257][    C0]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  247.806290][    C0] RIP: 0023:0xf7f32fec
[  247.809153][    C0] Code: Unable to access opcode bytes at 0xf7f32fc2.
[  247.814069][    C0] RSP: 002b:00000000ff80662c EFLAGS: 00000246 ORIG_RAX: 00000000000000f0
[  247.828600][    C0] RAX: ffffffffffffffda RBX: 00000000f73f4f88 RCX: 0000000000000081
[  247.833800][    C0] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000000000000000
[  247.841886][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  247.856486][    C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  247.863910][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  247.873811][    C0]  </TASK>
[  247.890001][    C0] Kernel Offset: disabled
[  247.893941][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:18:42  Registers:
info registers vcpu 0

CPU#0
RAX=fffff52000000e4e RBX=dffffc0000000000 RCX=0000000001000105 RDX=ffff888021b52580
RSI=0000000000000000 RDI=ffffc90000007620 RBP=0000000000000000 RSP=ffffc90000007258
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000061 R11=20666f2064616552
R12=0000000000000000 R13=ffffffff9bc571a0 R14=ffffc90000007620 R15=ffffc90000007620
RIP=ffffffff81e9b874 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096960000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000f7f33000 CR3=000000004dc63000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffffff8edec220 RCX=0000000000000001 RDX=0000000000000001
RSI=ffffffff8e3cb4bf RDI=ffffffff8c622c80 RBP=ffff888028b9a580 RSP=ffffc90007ecf160
R8 =0000000000000006 R9 =0000000000001000 R10=0000000000000000 R11=0000000000000000
R12=00000000ffffffff R13=0000000000000246 R14=ffff888028b9b130 R15=0000000000000000
RIP=ffffffff8bce605e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096a60000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000080001280 CR3=0000000053bae000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000170f49 RBX=ffff88801cb12580 RCX=ffffffff8bce7185 RDX=0000000000000001
RSI=ffffffff8e3f18bd RDI=ffffffff8c622c80 RBP=ffffed10039624b0 RSP=ffffc9000048fe00
R8 =0000000000000001 R9 =ffffed10056867bd R10=ffff88802b433deb R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000
RIP=ffffffff8bce56bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096b60000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f9c433225d0 CR3=000000004e14f000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=00000000001acdf7 RBX=ffff88801cb10000 RCX=ffffffff8bce7185 RDX=0000000000000001
RSI=ffffffff8e3f18bd RDI=ffffffff8c622c80 RBP=ffffed1003962000 RSP=ffffc9000049fe00
R8 =0000000000000001 R9 =ffffed10056a67bd R10=ffff88802b533deb R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000093fc4 R15=dffffc0000000000
RIP=ffffffff8bce56bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00000000
DS =0000 0000000000000000 ffffffff 00000000
FS =0000 0000000000000000 ffffffff 00000000
GS =0000 ffff888096c60000 ffffffff 00000000
LDT=0000 0000000000000000 ffffffff 00000000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000f73f6288 CR3=00000000671ea000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000