last executing test programs:

29.201854985s ago: executing program 0 (id=113):
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x0, {@in6_addr=@mcast1, 0x86dd}}}]}, 0x38}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000000480), 0x40000000000009f, 0x0)
ioctl$CDROM_SELECT_DISC(r0, 0x5323, 0x5)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="e0010000170a010400000000000000000a0000090900020073797a3000000000440003800800024000000bb208000140000000000800024000000002080002400001000118000380140001007465616d5f736c6176655f310000000008000140000000000c00054000000000000000059000038040000380140001006970766c616e3000000000000000000014000100766972745f77696669300000000000001400010073797a6b616c6c65723000000000000008000240000000062c000380140001007767300000000000000000000000000014000100776c616e310000000000000000000000180003801400010062617461647630000000000000000000cc000380b80003801400010073797a6b616c6c657231000000000000140001006261746164765f736c6176655f0ab4ee0874834b903000001400010069705f76746930000000000000000000140001006d6163766c616e3100000000000000001400010070696d72656730000000000000000000140001006e65747063693000000000000000000014000100697036746e6c300000000000000000001400010073797a6b616c6c65723000000000000014000100626f6e64300000000000000000000000080002400000000308000240000000050000000000000031000000000800074000000001c042527e3e09ee34cf6b48647a7a9585970c04b93b10b4417a8de2d2e67c9844a1896d27766a7947dff2cf9f47bf2bfe4b28760769a9c50b7514b6403c3b9aa6af9a82328881995506d65022a350f2502fe52f075c6780e771504e6d4cf77f2040f2879e07ae7c1058dcf6231782339f605739feae47c411c3e939e572ba3017e188c395552ed10d1b6453a1858d7eaf945b42420f37acf5cc7d7b4717f3f72940ff5f29091f326c29069a1ce98ccf2d0f1d680cf88e6f"], 0x1e0}, 0x1, 0x0, 0x0, 0x5}, 0x4005)

29.141497108s ago: executing program 0 (id=115):
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000040), 0x0)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ee0000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c000c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05af3a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e4e4e29d8b33fbdd02e86a6432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3ce8f530ffff19a6471bf5abc742d9cbcfb964b13831034694a6aad84cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df871a8e782339bc424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2485c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb78183e7e68de9dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbefd9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d85618ba2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009de2323f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978addf2f2a29a387c6f0576b36038f819286eea99a6a434811cf2a117d775fe986a49fb82cf5f15972d55185ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e671d305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a540f64000000000000fbb4c256409e54daefbb107c381fa729ff5fe607d93430da178d685d7730f5e129438a5214f722096d2986334c25e454474f92e65828b018174a9f4738b8c71fbdead06ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a379ed4c6267965af78b861bd335312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68ffce8d141e8960ef790fb0078215d65f96eb55db8cbcb060000000d988374e45451a694ffe38a1d03912b31c98d42e1a1bda1290de1a499a5d6849914c1788a7aca37177cc34102f44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553ecece78d4c1541c70f5d81e0725d5b273755c0000000000000000aa4234e282182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a7d72fcdb0a11993d54d97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a9236558fea2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574ea68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa1ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8edc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f24bb68f486e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e8d5bc5642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f0cf74f845d1cc9ec4eee79c290fb0ba939b13707004e2e9cc0d350538c1c8c6bb9a38c6ac5ca07df32601240ea3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4055f05558ab31f339f6a4caf2ee2fd01f34dca330000000000000000000000000000000000000000000000000000000000000000000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd6f7fd7f8898c70b5c65f2e28f22e983892c383882809f557affbda5e1850d66a4a1ee73b2084681f880a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae9052be8eec1e95f6ad8d41dd34829504ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b06a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd31091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a474bd16b8f7e6aed12a305366599f5f029a7b24558c02750500002f1c19d16a6f391906000000cc03bbfb8c698ecc137d96711100e01031aa74fad86b99eebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc86784c9f940d9fb0464a72ce635e14b80dc5c1c64e8f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f938ad16eeb8342278f1c1cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706e587f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2cc0e7c207b8942fafd70530a0fc4622ecf132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af999dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2be0d1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bff348229fa84034faf8421a22c4b4c17a3d24a4aeee0d0850371feefd77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2b59654d49a11c6736ac63e8eb383760fc2b5c976dacf3dda7191c757f28e44f6a5f95db7055f7ed983f5665210f20a494fabb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a5826fdbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193ad0438cdef7a98a1671a1918df310dc4bfd61c3db3c22673884dca370558936b85737e14819ab1c57b348a8ff16d36364a20fe846d11d045de81f069bac8425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb251ab9eefc8e400191f0f0f8c679b0000000000000000000000b41b0ae67d9351c49e1ff285d05a3cc39a5b0cd20afe0a00086650f8fad20c0e1e7131836c85b2cbacd41593928207312189fdd66abc45a139f0c9dbcc58237cec5bd56ffe0c6de23254a7951a298501ca04ab30b5723df6dd01d0b1a87c197b83b286374ba9a9dd1bd09ea1b71b24a1f527bf59d9633e3d15ed3757acc494f464482e49884c13780cc392bfe67b5d91e5b513daea48cac7645db35f07ba41aa187f65c5344717d7a0ee353a7e36b14fdce5898a613cef224d3addb3d2de74cef73f7520dc8cc8ffaa62cbd25e691ef4c45fdd25675b32c129a8464f08c4da9c08713b54416f3b56a04086dab1d196884e062287ad4758e883d2f99833d8aaf0c56718f6b0434740900faf4ab824662a719bf370fd0b2de04c1455ec14908ce5cbec79466f2f2cc337c53437d626254e00000000000000000000000000000000c34646f8ae68c095e7298300feab8a3dfe2c43fc971385b13b4f3b61ddbf5044ff572defcc67930f0e715774e1e970751534398faf79350255cfa9021378f10c2043e7ecd5649c9720530da7ea227b792f31cb5d688b5f1eba9ff5f85c97b35e00ecf76282912b483e31c76e303e527e98a9ca14f718d495ad45db16c4500011de506f0ca35f7ea96ed1831e3c1219f985b26cb8a70e7c8efcb287984871e0fed3f1985cf63f00289292b378188ad0dfae12c265b88961a9223b48cf7055d641595e0cb926d63c1f8a207f48bd482290b79867285c2155e655e017bca6cbba43f9b49042fb2fb390c436b3306e8a0800000090d159004da838a50235b91f5273c1fe083067ce1e2d8011c9e2b6d3ea69dfc3712e5ce440432fbd29ffd004000000"], &(0x7f0000001300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff0, 0x0, 0x0, 0x10, 0x400000}, 0x94)
bpf$BPF_PROG_DETACH(0x26, &(0x7f0000001340)=ANY=[], 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="380000006c00010025bd7000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="8000010018000000180034801400350069703665727370616e", @ANYRESDEC=0x0], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008010)
sendmsg$nl_route(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)=ANY=[@ANYBLOB="3c0000001000fdff2cbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="600200000001001c0012800e00010069703665727370616ef200000800029801000000"], 0x3c}, 0x1, 0x8100}, 0x2800804c)
write(r0, &(0x7f0000000140)='1', 0x23)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r5, &(0x7f0000000300)='1', 0x1)

29.14063822s ago: executing program 0 (id=116):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x22842, 0x0)
write$dsp(r0, &(0x7f0000000380)="5cba91a4", 0xffffffd9)
r1 = syz_open_dev$sndctrl(&(0x7f00000003c0), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000440))
r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f00000004c0)={0x0, "72a59baeb6c10b67b134a5f267418d0000000000000000000000820f2cf9ff6c8d2600", {0x800000000000004, 0x50000000000}})
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000580)={0x1, 0x0, 0xffff5f0f, 0xfffd, 0xfffffffffffffffb, 0xb, 0xfffffffffffffffa, 0x1fe, 0x4a, 0x28, 0x4, 0x2})
r3 = landlock_create_ruleset(&(0x7f0000000640)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r3, 0xe)
setns(0xc9, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f00000000c0), 0x4)
recvmsg$unix(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0)
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xff05, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
socket(0x10, 0x3, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x7)
r8 = socket(0x18, 0x3, 0x9)
sendmsg$nl_route_sched(r8, 0x0, 0x8010)
socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000180)=0x800005, 0x4)
bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c)
socket$inet6(0xa, 0x1, 0x0)

28.051689672s ago: executing program 0 (id=126):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
ioctl$LOOP_SET_FD(r3, 0x4c00, r2)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, 0x0, 0x25, 0x19, @void}, 0x10)
close(r4)
creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139)
ioctl$LOOP_SET_STATUS64(r5, 0x4c04, 0x0)

24.940148143s ago: executing program 0 (id=161):
ioctl$COMEDI_SETWSUBD(0xffffffffffffffff, 0x6411)

24.731908798s ago: executing program 0 (id=165):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000340)=""/98, 0x62}], 0x1, &(0x7f00000003c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @rdma_dest={0x18, 0x114, 0x2, {0x3, 0x4}}], 0x30, 0x8000}, 0x4000000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010082000900010073797a30000000002c000000030a01010000000000000000010000010900010073797a3000000000090003007379779f0000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b0001006578746864720000240002800800014000000087478de9400000003b08000440000000220500020007000000340001800c00010062697477697365002400028008000340000000040800014000000014080002400000001208000640000000010900010073797a3020000000140000001100010000000000000000000700000a"], 0x108}, 0x1, 0x0, 0x0, 0x20040001}, 0x0)

24.707253261s ago: executing program 32 (id=165):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000340)=""/98, 0x62}], 0x1, &(0x7f00000003c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @rdma_dest={0x18, 0x114, 0x2, {0x3, 0x4}}], 0x30, 0x8000}, 0x4000000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010082000900010073797a30000000002c000000030a01010000000000000000010000010900010073797a3000000000090003007379779f0000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b0001006578746864720000240002800800014000000087478de9400000003b08000440000000220500020007000000340001800c00010062697477697365002400028008000340000000040800014000000014080002400000001208000640000000010900010073797a3020000000140000001100010000000000000000000700000a"], 0x108}, 0x1, 0x0, 0x0, 0x20040001}, 0x0)

2.271236796s ago: executing program 1 (id=504):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x60)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000004ffffffff0000ffff01000000210000000000000000000010020000000000"], 0x0, 0x3e}, 0x20)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x2, 0x11c)

2.270988168s ago: executing program 1 (id=505):
r0 = openat$kvm(0x0, &(0x7f0000000380), 0x0, 0x0)
setns(0xc9, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1405, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x4040000)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000003c0)={0x0, 0x0})
ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000440))
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000004c0)={0x3, 0x0, [{0x40000083, 0x0, 0x1001}, {0x400000b0, 0x0, 0x1}, {0x400000b1, 0x0, 0x1}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.105198717s ago: executing program 1 (id=508):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x17, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000094090100000002816500feffffff000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000500)={0x0, 0x1}, 0x1}, 0x94)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000540), 0x0)
close(r4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1a, 0xf, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)
r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@multicast, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, '\x00', 0xf4e, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast1, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x68}], '\r\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0)
ioctl$CDROM_NEXT_WRITABLE(r5, 0x5394, 0x0)

1.877963197s ago: executing program 1 (id=512):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000400), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000440)=0x20)
mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000480)=0xfff)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = eventfd2(0xe5c, 0x80000)
r4 = eventfd2(0x6, 0x80800)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000340)={r4, 0x7, 0x2, r3})
r5 = eventfd2(0xe5c, 0x80000)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r5, 0x7, 0x2, r3})
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000003c0))
r6 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r6, 0x8010671f, &(0x7f00000005c0)={&(0x7f00000004c0)=""/208, 0xd0})
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r7, &(0x7f0000001980)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0xff, 0x0, "d92984bd1cb44c026af5160e961711a077609475b78411e88509de050000000000f2170e65e300b914328734522e080000000000000200000000001900", 0x3c}, 0x60)
listen(r7, 0xf5f)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r8, &(0x7f00000018c0)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
r9 = syz_usb_connect(0x3, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0)
setns(0xc9, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000001940), r10)
r11 = socket(0x8, 0x5, 0x5)
syz_usb_ep_read(r9, 0x1, 0x0, 0x0)
syz_usb_ep_write(r9, 0x81, 0x40, &(0x7f0000000280)="900100"/64)
ioctl$sock_SIOCOUTQNSD(r11, 0x40106151, &(0x7f00000002c0))
ioctl$DM_TABLE_LOAD(r6, 0xc138fd09, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x1d0, 0x138, 0x1, 0x0, 0x10, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@multipath={0x0, 0x8, 0x0, 0x98, 'multipath\x00', {'2 queue_mode rq', 0x20, '0', 0x20, 0x1, 0x20, 0x1, [{0x20, 'historical-service-time 0', 0x20, 0x0, 0x20, '1'}]}}]})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={r1, 0x0, 0x3a, 0x1000, &(0x7f0000000600)="3f243261d30a0eded7f71551847bc768907ba7e706e2a89cbfa2464cde38b6758195d8cd0b73b69da8e8cfb4fcd0e0c13e0e9e1a18af5ad137f1", &(0x7f0000000640)=""/4096, 0x7, 0x0, 0x88, 0xb5, &(0x7f0000001640)="17afa24c0a3f7ae8ee13bb710b509bc8ce193bebbe8188d9291de17c6cf431a5ca01aa16ad2443f5f5cde04aef0c1c52f65730bb1eefeb9c74b0764906baa76e9ceafe9c19c6fcc8f4253c23f3d1839fe95966b5212b7835ba1a7640aa463643f33faac2ea9308352c0da367e202734a906f31edb5b107485a8f735d2fb31df11840f34b32afbd0f", &(0x7f0000001700)="e96a960daba2b089260fab51b7766d0c9fb9acf4d0fbf7198ecedb456d42ff3675d6dd801564258e25427c8d72acbbbf7dee0482c3f89de93e594c77bf4ebf0dc418cb5873b4fee7126109c3ef2bfe11fb89852cba5b72593ff8281f12f93c7a010bcc42cc241e3a06b69b195b68f825fa8f0dfea9704c0257a277aeb9d4ef53b3caf6324d0d05cbb3d1d8a56310c4683acda741ca9909cdfba2ac8efb9e969b9f3f5257e266413f0e7d8579678c92ae6179fcd709", 0x2, 0x0, 0xdb7}, 0x50)

1.561368852s ago: executing program 3 (id=519):
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c0015003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f00001e7000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f0000000440)="f3d92f0f0159d8b9b4080000463266b8c3000f00d00f1807660f38807fb3c4c1fddfe0c4e20d02530c66baf80cb8e8d4f38cef66bafc0ced", 0x38}], 0x1, 0xe, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.381298568s ago: executing program 3 (id=524):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000540)=0x79, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
bind$inet(r0, &(0x7f0000000580)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff0100000001", 0x15}], 0x1)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r2, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x12, r3, 0x0, r2})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000005c0)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x0, 0xf4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000640)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000680)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)="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", 0x2e3}, {&(0x7f00000008c0)="44900001000056ee66c3ba06f274a8d026bd00"/33, 0x21}], 0x2}}], 0x1, 0x2090)
write(r0, &(0x7f0000000d40)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d8b0d9e83983cb7ad8f147f980b06be823e93a93395f5e60b7f31f5aeadc81f02e177446888c15d2845fd675b98360ac2f584a8ab618789499babac77e3311c563fa519a8dbbe49b91a46cc355f8e956c04dfc3b8e218dbe0302ff463fc94eceec7050b7477d9542f6d05d36ee13e664dfc", 0x2f4)

1.381086475s ago: executing program 4 (id=525):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34010000", @ANYRES16=0x0, @ANYBLOB="000429bd7000fddbdf250a0000000c0006800800010001fcffff9c00068008000600010000004200040067636d28616573290000000000000000000000000000000000000000000000001a000000e7f9a0b5633fce78930a47dbdc5543b46911dd5e3876cad483c20000080006000c0000004300040067636d28616573290000000000000000000000000000000000000000000000001b000000eb9447388b7737eca56cfc4f20ea5f16d9b82c443efa5a6a795cb0001c0001800d0001007564703a73797a3000000000080003000300000008000680040005002c0007800c00040003000000000000000c0003000700000000000000080002002ad000000800010000000000240009800800010007000000080001000001000008000100070000000800020002000000040002806e0315d52e16202c8a36224a52242be5a8e4520aca3ff6e702c783c4b80acdf5832c0c1cbfab32e1c1224a0d2096e354881e6747fbb1449a7d0f6663dc1394559cdb71f13d0e3fcef881f17fb249"], 0x134}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
syz_extract_tcp_res(0x0, 0x2, 0x5dd4)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24040800)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x58, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x32, 0x4, 0x80000001}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004414}, 0x4854)

1.251353485s ago: executing program 4 (id=526):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/comedi4\x00', 0x8a241, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, 0x0)

1.250812355s ago: executing program 4 (id=527):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_io_uring_setup(0xf00, &(0x7f00000001c0)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f00000002c0)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd=r1, 0x976, 0x0, 0x0, 0x4, 0x0, {0x1, 0x0, 0x2, '\x00', &(0x7f0000000380)={0x30, 0x4, 0x0, 0x0, 0x5}, 0x1}})
io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000980)=0x9, 0x4)
r7 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000003c0)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x800)
syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="043e7522"], 0x24)
utime(0x0, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000a40)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./proc\x00', 0x1f9)
mount(0x0, &(0x7f0000000780)='./proc\x00', &(0x7f00000007c0)='proc\x00', 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x10c)
write(r9, &(0x7f0000000940)="5c7830313032303330342001", 0xc)
syz_open_dev$vcsn(&(0x7f0000000600), 0xc, 0x400200)
ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000000440)=@req={0x28, &(0x7f0000000400)={'bond_slave_0\x00', @ifru_addrs=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xa5}}})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f00000004c0)='./debug\x00', &(0x7f0000000540)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./debug/page_tables/current_kernel\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x13)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000229bd7000fbdbdf2567073e0008000300", @ANYRES32=r11, @ANYBLOB="0800c300040000000800c300070000000800c300ad000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x2040001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800fffdb50a000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r12, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.250558219s ago: executing program 2 (id=528):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f00000007c0)={'syzkaller0\x00'}) (fail_nth: 7)

1.18124721s ago: executing program 2 (id=529):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, &(0x7f00000000c0)={{@my=0x1, 0x381}, 0x6, 0x3})

1.181000752s ago: executing program 2 (id=530):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x1, 0x1, 0x6, 0x2, 0x0, 0x5})
socket$inet6(0xa, 0x80003, 0xff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
epoll_create1(0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_freeze_timeout', 0x88002, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

1.111374757s ago: executing program 2 (id=531):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="380041dd3951da5e5a11414537c58fe100001000010400000085440ed60000000000", @ANYRES32=0x0, @ANYBLOB="40090000873201251800128008000100687372000c00028008000100", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xd1}, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x638942, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000000600)={0x110c230000, 0x33, 0x2, @tid=0xffffffffffffffff})
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
write$binfmt_elf64(r3, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil)
r5 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f0000000500), 0x4)
pipe2(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000680)='pagemap\x00')
close_range(r8, 0xffffffffffffffff, 0x0)
write$binfmt_misc(r8, &(0x7f0000000280)="dc", 0x1)
splice(r7, 0x0, r5, &(0x7f00000002c0)=0x8008, 0x4, 0x0)
mkdir(&(0x7f00000006c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./bus\x00', 0xa5)
mkdir(&(0x7f0000000740)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f00000007c0), 0x0, &(0x7f0000000800)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r9 = open(&(0x7f0000000840)='./file1\x00', 0x0, 0x48)
mknodat$loop(r9, &(0x7f0000000880)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f00000008c0)='./bus\x00')
linkat(r9, &(0x7f0000000900)='./file1\x00', r9, &(0x7f0000000940)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x0)

940.541799ms ago: executing program 2 (id=532):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1004, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2008800, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x10000010)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe2(&(0x7f0000000580)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
pipe2(&(0x7f00000005c0)={<r4=>0x0, 0x0}, 0x0)
r5 = fanotify_init(0x200, 0x0)
fanotify_mark(r5, 0x1, 0x40001043, r4, 0x0)
splice(r2, 0x0, r3, 0x0, 0x866, 0x0)
write(r1, &(0x7f0000000600), 0xffffff4a)
mount$fuse(0x0, &(0x7f0000000440)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', &(0x7f0000000480), 0x1000040, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}})
write$FUSE_INIT(r0, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x13)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000600)={0x6}, 0x10)
write(r7, &(0x7f0000000640)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x32095}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
ioctl$TCSETSF(r6, 0xc0046686, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/drivers/usb-conn-gpio/uevent\x00', 0x1, 0x0)
write$binfmt_script(r9, &(0x7f0000000180), 0x4)
setresuid(0x0, 0xee00, 0xee01)
r10 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil)
shmctl$SHM_UNLOCK(r10, 0xc)

641.494033ms ago: executing program 4 (id=533):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async, rerun: 32)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x88800, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000001c0)={0xffffffffffffff12, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={0x1, <r3=>0xffffffffffffffff, 0x800}, &(0x7f0000000200)=0xc) (rerun: 32)
setsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r3, 0x84, 0x7d, &(0x7f0000000240)={0x2, 0x5}, 0x8)
close_range(r0, 0xffffffffffffffff, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/fscaps', 0x1001, 0x1c8)
sendfile(r4, r4, 0x0, 0x6)

528.803938ms ago: executing program 4 (id=534):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
close(r1)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x2603)
ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x9e, 0x1000, 0x0, 0x0}], 0x1})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0xe, 0xd}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x24, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x2, 0x6}}, @TCA_U32_MARK={0x10, 0xa, {0x5, 0x7}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4894}, 0x2)
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000e40)={&(0x7f0000000a00)={{@any, 0x5}, {@host, 0x4}, 0x400, "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"}, 0x418, 0x5})
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r9, &(0x7f0000000200)={&(0x7f0000000240)=@xdp={0x2c, 0x8, r8, 0x42}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)="270302", 0x3}], 0x1}, 0x4005)

410.100857ms ago: executing program 4 (id=535):
r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0x0, &(0x7f0000000480), 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x22000004)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x3, 0x25, 0x7, 0x67, 0xfffd, 0x3, 0x2, 0x0, @local, @private=0xa010101}}}}}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x42101, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3314)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008804}, 0xc810)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800)
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f0000000640)={&(0x7f0000000680)={{@any, 0x7}, {@host, 0x81}, 0x400, "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"}, 0x418, 0x1})
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)={0x34, r6, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2400000}, 0xc, &(0x7f0000000d40)={0x0}, 0x1, 0x0, 0x0, 0x20000011}, 0x4080)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x4)
r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r0, &(0x7f00000004c0)={0x0, &(0x7f0000000500)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40})

409.845179ms ago: executing program 3 (id=536):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/comedi4\x00', 0x8a241, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000080)={0x0, 0x0})

340.932045ms ago: executing program 3 (id=537):
r0 = open$dir(&(0x7f0000000200)='./proc\x00', 0xea001, 0x4)
mkdirat(r0, &(0x7f0000000040)='./proc\x00', 0x1be)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, <r2=>0x0}, &(0x7f0000000140)=0xc)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=@sr0, r2, &(0x7f0000000180)={0x7, 0x1, 0x7fffffffffffffff, 0x0, 0x81, 0xfffffffffffffff9, 0x2d5f, 0xde4f, 0x2})
write(r1, &(0x7f00000004c0)="1ac7526fb231", 0x6)
read$FUSE(r1, &(0x7f0000000f80)={0x2020}, 0x2020)

340.575374ms ago: executing program 1 (id=538):
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0)
ioctl$CDROMPLAYMSF(r0, 0x5303, &(0x7f0000000000)={0x3, 0x5, 0x9, 0x80, 0x9b, 0x2})
ioctl$CDROM_LOCKDOOR(r0, 0x5329, 0x0)
ioctl$CDROMEJECT(r0, 0x5309)
ioctl$CDROM_DEBUG(r0, 0x5330, 0x1)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x2ddfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xb, 0xb}, {0x4, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x70, 0x7f}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x200080f1}, 0x4008000)
ioctl$CDROMEJECT_SW(r0, 0x530f, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast1, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0xad, 0x0, 0xffffffffffffffff}, {@in=@remote, 0x0, 0x6c}, @in=@broadcast, {0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}, {0x4, 0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x25}, 0x5, 0x5}}, 0xf8}, 0x1, 0x0, 0x0, 0x40011}, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0801000016000100000000000200000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000100000000000000000000000000f2ffffffffffffff00000000000000000000feffffffffffffff000000000000000000000000000001006303000000000000000000b3c90000000000000000000000000000000000000000000000fdffffffffffffff020004fd000000000000000005000000050000000500210002"], 0x108}}, 0x0)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10)
write$cgroup_int(r9, &(0x7f0000000300)=0xb00, 0x12)

340.416801ms ago: executing program 3 (id=539):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fdffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000024000000850000006c00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1b, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x34270, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0)
preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000440)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r2, 0x84, 0x81, &(0x7f00000004c0)=""/4113, &(0x7f0000001500)=0x1011)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x4, 0x1c, 0x67, 0x0, 0x7, 0x1, 0x0, @rand_addr=0x64010100, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x5}}}}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r5=>0x0, <r6=>0x0})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="0f00000004000000040000000400000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000002000000000000"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0xe, 0x5, &(0x7f0000001680)=ANY=[@ANYBLOB="b70200000e000000b703000000000000850000002b000000b7000000010000009500000000000000"], &(0x7f00000016c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001700)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002700)={@map=r7, r8, 0x26, 0x0, 0x0, @void, @value=0x0}, 0x30)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002740)={r7, &(0x7f0000002780)='\x00\x00\x00\x00', &(0x7f00000027c0)=@tcp=r5}, 0x20)
write(r6, &(0x7f0000002800)='abcdefgh', 0x8)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x2e3}]})
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0}], 0x1, 0x82, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

61.445458ms ago: executing program 1 (id=540):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = openat$dm_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x4800, 0x0, 0x0, {<r3=>0x0, {'syz', 0x0, '3\x00'}}})
ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x800, 0x0, 0x0, @by_dev={r3}, [@integrity={0x0, 0x2000, 0x0, 0x58, 'integrity\x00', {{@ram={'/dev/ram', 0x0}, 0x20, '128'}, 0x20, '-', 0x20, 'B', ' 1 internal_hash:sha256'}}]})
ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x188, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r3}, [@snapshot={0x0, 0x8, 0x0, 0x50, 'snapshot-merge\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram_num={'1:', 0x0}, 0x20, 'p', 0x20, '7'}}]})
ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000002a40)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}})

61.100211ms ago: executing program 2 (id=541):
prctl$PR_SET_SECUREBITS(0x1c, 0x14)
prctl$PR_SET_SECUREBITS(0x1c, 0x1b)
r0 = syz_open_dev$sndpcmc(&(0x7f0000004580), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0xc06c4124, &(0x7f00000045c0))
setuid(0xee01)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x40002, 0x128)
sendfile(r1, r1, 0x0, 0x1)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x42d41, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x1, &(0x7f00000046c0)=ANY=[@ANYBLOB="66643d2ddf5f743054d85f62924d61b3799929c68ac63e70f6fa12f25e754ff033e200b24885ed", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r3, &(0x7f0000000340)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2082)
write$FUSE_INIT(r3, &(0x7f0000002380)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x1ff, 0x81, 0xfffffff6}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f0000002400)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142563374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a4047e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050023d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4150a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec5949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a11a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081bb2a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c00", 0x2000, &(0x7f0000004400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000044c0)={0x90, 0x0, 0x6, {0x1, 0xffffffffffffffff, 0x4, 0x1fffffffffffd, 0x40400, 0xc, {0x1, 0x3, 0x8, 0x3, 0x5, 0x4, 0x5cf00000, 0x123, 0xdab5, 0x8000, 0x20000, r5, r6, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000180)={0x6, 0x9, {<r7=>0x0}, {r5}, 0x7})
openat$kvm(0xffffffffffffff9c, &(0x7f0000004680), 0x280c00, 0x0)
syz_pidfd_open(r7, 0x0)

0s ago: executing program 3 (id=542):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000600), 0xffffffffffffffff)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000640), r2)
getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x38, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff0f000000000000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)
r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000400), 0x8002)
write$binfmt_aout(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="03070000b5"], 0xc8)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0)
write$binfmt_aout(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="03040000b500000001008aea0000feffe7d5"], 0xc8)
dup3(r5, r4, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a00074dedceb573799b8316bc0d7026feb62ce8ebfdabcac181ff16deec19bd2c177fb7adbe9da9b1fc6681cccead1fbe90b1e122364427823fa9cf0b62", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c000280080008008aa8ffff"], 0x3c}}, 0x4008080)
mount(0x0, &(0x7f0000000dc0)='./proc\x00', &(0x7f0000003b00)='proc\x00', 0x4000, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000003b40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r8, &(0x7f0000003b80)='27', 0x2)
socket$inet6_sctp(0xa, 0x5, 0x84)
mkdir(&(0x7f0000000040)='./bus\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x143142, 0x120)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
lsetxattr$security_evm(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v2={0x5, 0x1, 0x3, 0x31d}, 0x9, 0x1)
linkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file2\x00', 0x1000)
r9 = semget(0x1, 0x4, 0x39c)
semop(r9, &(0x7f0000000880)=[{0x0, 0x8001, 0x1000}], 0x1)
semop(r9, &(0x7f00000008c0)=[{0x1, 0xbbdd, 0x1000}, {0x0, 0x9270, 0x1800}, {0x0, 0x6, 0x1800}], 0x3)
semctl$SETALL(r9, 0x0, 0x11, &(0x7f0000000900)=[0x6, 0x7fff])

kernel console output (not intermixed with test programs):

0000
[   56.440891][ T6152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.440900][ T6152] R13: 00007f53eec26038 R14: 00007f53eec25fa0 R15: 00007ffcb4489488
[   56.440928][ T6152]  </TASK>
[   56.479354][ T5786] Bluetooth: hci1: command tx timeout
[   56.550268][ T6161] input: syz0 as /devices/virtual/input/input5
[   56.559104][ T5781] Bluetooth: hci0: command tx timeout
[   56.559125][ T5781] Bluetooth: hci3: command tx timeout
[   56.559150][ T5786] Bluetooth: hci2: command tx timeout
[   56.563837][   T36] IPVS: starting estimator thread 0...
[   56.571892][ T6123] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90
[   56.573514][ T6123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.51'.
[   56.587591][   T58] usb 7-1: USB disconnect, device number 3
[   56.603402][   T58] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[   56.606543][   T58] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[   56.609891][   T58] ti_usb_3410_5052 7-1:2.0: device disconnected
[   56.624723][ T6170] SELinux:  Context :$! is not valid (left unmapped).
[   56.649480][ T6164] IPVS: using max 43 ests per chain, 103200 per kthread
[   56.682831][ T6172] syzkaller1: entered promiscuous mode
[   56.682846][ T6172] syzkaller1: entered allmulticast mode
[   56.809998][ T6173] Zero length message leads to an empty skb
[   56.848840][ T6177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.70'.
[   57.143618][ T6183] netlink: 'syz.0.72': attribute type 10 has an invalid length.
[   57.145262][ T6183] syz_tun: entered promiscuous mode
[   57.151460][ T6183] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   57.489049][ T1368] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   57.532270][ T6200] process 'syz.3.75' launched './file2' with NULL argv: empty string added
[   57.650794][ T1368] usb 5-1: not running at top speed; connect to a high speed hub
[   57.650818][ T1368] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[   57.651738][ T1368] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   57.651756][ T1368] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[   57.651795][ T1368] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.660332][ T1368] uvcvideo 5-1:1.0: Found UVC 1.00 device <unnamed> (046d:0825)
[   57.660395][ T1368] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770.
[   58.020781][ T6215] ip_tables: iptables: counters copy to user failed while replacing table
[   58.022432][ T6215] ip_tables: iptables: counters copy to user failed while replacing table
[   58.187729][ T6218] FAULT_INJECTION: forcing a failure.
[   58.187729][ T6218] name failslab, interval 1, probability 0, space 0, times 0
[   58.187759][ T6218] CPU: 2 UID: 0 PID: 6218 Comm: syz.1.82 Not tainted syzkaller #0 PREEMPT(full) 
[   58.187779][ T6218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   58.187797][ T6218] Call Trace:
[   58.187803][ T6218]  <TASK>
[   58.187810][ T6218]  dump_stack_lvl+0x100/0x190
[   58.187840][ T6218]  should_fail_ex.cold+0x5/0xa
[   58.187857][ T6218]  ? __netlink_lookup+0x692/0x950
[   58.187875][ T6218]  should_failslab+0xc2/0x120
[   58.187892][ T6218]  kmem_cache_alloc_noprof+0x92/0x6a0
[   58.187907][ T6218]  ? netlink_deliver_tap+0x103/0xb50
[   58.187922][ T6218]  ? skb_clone+0x187/0x3f0
[   58.187941][ T6218]  skb_clone+0x187/0x3f0
[   58.187958][ T6218]  netlink_deliver_tap+0x82f/0xb50
[   58.187977][ T6218]  netlink_unicast+0x708/0x950
[   58.187995][ T6218]  ? __pfx_netlink_unicast+0x10/0x10
[   58.188016][ T6218]  netlink_sendmsg+0x9ac/0x10c0
[   58.188035][ T6218]  ? __pfx_netlink_sendmsg+0x10/0x10
[   58.188056][ T6218]  ? selinux_socket_sendmsg+0x198/0x2f0
[   58.188073][ T6218]  ? ____sys_sendmsg+0xa99/0xc30
[   58.188085][ T6218]  ____sys_sendmsg+0xa99/0xc30
[   58.188096][ T6218]  ? __pfx_netlink_sendmsg+0x10/0x10
[   58.188114][ T6218]  ? __pfx_____sys_sendmsg+0x10/0x10
[   58.188130][ T6218]  ? lock_acquire+0x1d1/0x380
[   58.188141][ T6218]  ? get_pid_task+0x2a/0x250
[   58.188157][ T6218]  ___sys_sendmsg+0x190/0x1e0
[   58.188170][ T6218]  ? __pfx____sys_sendmsg+0x10/0x10
[   58.188183][ T6218]  ? get_pid_task+0x106/0x250
[   58.188202][ T6218]  ? find_held_lock+0x2b/0x80
[   58.188226][ T6218]  __sys_sendmsg+0x160/0x210
[   58.188243][ T6218]  ? __pfx___sys_sendmsg+0x10/0x10
[   58.188267][ T6218]  do_syscall_64+0x123/0x790
[   58.188283][ T6218]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.188297][ T6218] RIP: 0033:0x7f616719f559
[   58.188307][ T6218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   58.188320][ T6218] RSP: 002b:00007f616812c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   58.188338][ T6218] RAX: ffffffffffffffda RBX: 00007f6167425fa0 RCX: 00007f616719f559
[   58.188348][ T6218] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[   58.188360][ T6218] RBP: 00007f616812c090 R08: 0000000000000000 R09: 0000000000000000
[   58.188371][ T6218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.188380][ T6218] R13: 00007f6167426038 R14: 00007f6167425fa0 R15: 00007ffd15af9138
[   58.188407][ T6218]  </TASK>
[   58.188970][ T6218] ebt_limit: overflow, try lower: 0/0
[   58.222526][ T3308] libceph: connect (1)[c::]:6789 error -101
[   58.222900][ T3308] libceph: mon0 (1)[c::]:6789 connect error
[   58.413963][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'.
[   58.480185][ T5927] libceph: connect (1)[c::]:6789 error -101
[   58.480284][ T5927] libceph: mon0 (1)[c::]:6789 connect error
[   58.684182][ T6238] FAULT_INJECTION: forcing a failure.
[   58.684182][ T6238] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   58.684208][ T6238] CPU: 1 UID: 0 PID: 6238 Comm: syz.1.89 Not tainted syzkaller #0 PREEMPT(full) 
[   58.684220][ T6238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   58.684226][ T6238] Call Trace:
[   58.684230][ T6238]  <TASK>
[   58.684234][ T6238]  dump_stack_lvl+0x100/0x190
[   58.684254][ T6238]  should_fail_ex.cold+0x5/0xa
[   58.684269][ T6238]  ? prepare_alloc_pages+0x16d/0x5b0
[   58.684287][ T6238]  should_fail_alloc_page+0xeb/0x140
[   58.684305][ T6238]  prepare_alloc_pages+0x1f0/0x5b0
[   58.684321][ T6238]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   58.684335][ T6238]  __alloc_frozen_pages_noprof+0x1e8/0x32e0
[   58.684349][ T6238]  ? unwind_get_return_address+0x59/0xa0
[   58.684365][ T6238]  ? arch_stack_walk+0xa6/0xf0
[   58.684384][ T6238]  ? stack_trace_save+0x8e/0xc0
[   58.684395][ T6238]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   58.684410][ T6238]  ? try_charge_memcg+0x183/0xf60
[   58.684426][ T6238]  ? __lock_acquire+0x5c0/0x1f40
[   58.684443][ T6238]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   58.684459][ T6238]  ? policy_nodemask+0xed/0x4f0
[   58.684477][ T6238]  alloc_pages_mpol+0x201/0x550
[   58.684494][ T6238]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   58.684515][ T6238]  alloc_pages_noprof+0x1a/0x160
[   58.684527][ T6238]  pgd_alloc+0x4d/0x630
[   58.684543][ T6238]  ? mutex_init_lockdep+0xf1/0x120
[   58.684557][ T6238]  mm_init+0x6a3/0xeb0
[   58.684574][ T6238]  copy_process+0x79e9/0x84c0
[   58.684591][ T6238]  ? __pfx_copy_process+0x10/0x10
[   58.684601][ T6238]  ? find_held_lock+0x2b/0x80
[   58.684622][ T6238]  kernel_clone+0x176/0x9d0
[   58.684631][ T6238]  ? find_held_lock+0x2b/0x80
[   58.684647][ T6238]  ? __pfx_kernel_clone+0x10/0x10
[   58.684660][ T6238]  ? ksys_write+0x190/0x250
[   58.684674][ T6238]  ? lock_acquire+0x1d1/0x380
[   58.684687][ T6238]  __do_sys_clone+0xd9/0x120
[   58.684701][ T6238]  ? __pfx___do_sys_clone+0x10/0x10
[   58.684710][ T6238]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   58.684730][ T6238]  ? ksys_write+0x1ac/0x250
[   58.684744][ T6238]  ? __pfx_ksys_write+0x10/0x10
[   58.684761][ T6238]  do_syscall_64+0x123/0x790
[   58.684777][ T6238]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.684788][ T6238] RIP: 0033:0x7f616719f559
[   58.684797][ T6238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   58.684807][ T6238] RSP: 002b:00007f616812bfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[   58.684818][ T6238] RAX: ffffffffffffffda RBX: 00007f6167425fa0 RCX: 00007f616719f559
[   58.684825][ T6238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008100411
[   58.684831][ T6238] RBP: 00007f616812c090 R08: 0000000000000000 R09: 0000000000000000
[   58.684837][ T6238] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002
[   58.684843][ T6238] R13: 00007f6167426038 R14: 00007f6167425fa0 R15: 00007ffd15af9138
[   58.684857][ T6238]  </TASK>
[   58.849384][ T6215] ceph: No mds server is up or the cluster is laggy
[   59.408069][ T1368] rxe_eth0 speed is unknown, defaulting to 1000
[   59.467715][   T42] kauditd_printk_skb: 153 callbacks suppressed
[   59.467732][   T42] audit: type=1400 audit(1792767932.564:396): avc:  denied  { unmount } for  pid=5782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   59.475642][   T42] audit: type=1400 audit(1792767932.574:397): avc:  denied  { write } for  pid=6259 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   59.537260][   T42] audit: type=1400 audit(1792767932.634:398): avc:  denied  { write } for  pid=6262 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   59.814073][   T42] audit: type=1400 audit(1792767932.914:399): avc:  denied  { map_create } for  pid=6265 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   59.814442][   T42] audit: type=1400 audit(1792767932.914:400): avc:  denied  { map_read map_write } for  pid=6265 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   59.858470][   T42] audit: type=1400 audit(1792767932.954:401): avc:  denied  { unlink } for  pid=6269 comm="syz.3.97" name="#1" dev="tmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   59.885633][   T42] audit: type=1400 audit(1792767932.984:402): avc:  denied  { create } for  pid=5776 comm="syz-executor" name="#3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   59.885980][   T42] audit: type=1400 audit(1792767932.984:403): avc:  denied  { link } for  pid=5776 comm="syz-executor" name="#3" dev="tmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   59.886442][   T42] audit: type=1400 audit(1792767932.984:404): avc:  denied  { rename } for  pid=5776 comm="syz-executor" name="#4" dev="tmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   59.964179][ T6274] device-mapper: table: 248:0: cache: Invalid data block size (-EINVAL)
[   59.964199][ T6274] device-mapper: ioctl: error adding target to table
[   60.010764][   T42] audit: type=1400 audit(1792767933.114:405): avc:  denied  { write } for  pid=6277 comm="syz.2.100" name="tcp6" dev="proc" ino=4026532931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   60.188465][ T6293] SELinux:  Context system_u:object_r:src_t:s0 is not valid (left unmapped).
[   60.215194][ T5926] usb 5-1: USB disconnect, device number 2
[   60.323081][ T6307] can: request_module (can-proto-3) failed.
[   60.327417][ T6307] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[   60.327441][ T6307] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   60.327950][ T6307] vhci_hcd vhci_hcd.0: Device attached
[   60.569666][ T3308] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[   60.835228][ T6310] vhci_hcd: connection reset by peer
[   60.838047][ T5588] vhci_hcd vhci_hcd.2: stop threads
[   60.838476][ T5588] vhci_hcd vhci_hcd.2: release socket
[   60.839511][ T5588] vhci_hcd vhci_hcd.2: disconnect device
[   60.881309][ T6341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.115'.
[   61.176495][ T6350] input: syz0 as /devices/virtual/input/input6
[   61.217029][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'.
[   61.253902][ T6354] netlink: 4104 bytes leftover after parsing attributes in process `syz.2.120'.
[   61.277776][ T6357] netlink: 104 bytes leftover after parsing attributes in process `syz.2.121'.
[   62.043957][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'.
[   62.044688][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'.
[   62.044775][ T6383] FAULT_INJECTION: forcing a failure.
[   62.044775][ T6383] name failslab, interval 1, probability 0, space 0, times 0
[   62.044789][ T6383] CPU: 0 UID: 0 PID: 6383 Comm: syz.1.129 Not tainted syzkaller #0 PREEMPT(full) 
[   62.044801][ T6383] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   62.044807][ T6383] Call Trace:
[   62.044811][ T6383]  <TASK>
[   62.044816][ T6383]  dump_stack_lvl+0x100/0x190
[   62.044835][ T6383]  should_fail_ex.cold+0x5/0xa
[   62.044857][ T6383]  should_failslab+0xc2/0x120
[   62.044888][ T6383]  kmem_cache_alloc_noprof+0x92/0x6a0
[   62.044902][ T6383]  ? netlink_deliver_tap+0x103/0xb50
[   62.044918][ T6383]  ? skb_clone+0x187/0x3f0
[   62.044937][ T6383]  skb_clone+0x187/0x3f0
[   62.044953][ T6383]  netlink_deliver_tap+0x82f/0xb50
[   62.044970][ T6383]  ? __pfx_tc_dump_qdisc+0x10/0x10
[   62.044989][ T6383]  netlink_dump+0x63a/0xd00
[   62.045006][ T6383]  ? __pfx_netlink_dump+0x10/0x10
[   62.045020][ T6383]  ? kasan_quarantine_put+0x104/0x240
[   62.045041][ T6383]  ? kfree_skbmem+0x19f/0x210
[   62.045055][ T6383]  netlink_recvmsg+0x86a/0xb60
[   62.045072][ T6383]  ? __pfx_netlink_recvmsg+0x10/0x10
[   62.045093][ T6383]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[   62.045108][ T6383]  ? __pfx_netlink_recvmsg+0x10/0x10
[   62.045125][ T6383]  sock_recvmsg+0x1d5/0x220
[   62.045137][ T6383]  ____sys_recvmsg+0x21e/0x6a0
[   62.045152][ T6383]  ? __pfx_____sys_recvmsg+0x10/0x10
[   62.045169][ T6383]  ? __lock_acquire+0x5c0/0x1f40
[   62.045183][ T6383]  ___sys_recvmsg+0x16a/0x1a0
[   62.045196][ T6383]  ? __pfx____sys_recvmsg+0x10/0x10
[   62.045209][ T6383]  ? lock_acquire+0x1d1/0x380
[   62.045231][ T6383]  do_recvmmsg+0x2f3/0x750
[   62.045245][ T6383]  ? __pfx_do_recvmmsg+0x10/0x10
[   62.045258][ T6383]  ? lock_acquire+0x1d1/0x380
[   62.045271][ T6383]  ? __mutex_unlock_slowpath+0x35d/0x930
[   62.045290][ T6383]  ? __fget_files+0x21f/0x3d0
[   62.045309][ T6383]  __x64_sys_recvmmsg+0x22a/0x280
[   62.045341][ T6383]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[   62.045366][ T6383]  do_syscall_64+0x123/0x790
[   62.045382][ T6383]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.045394][ T6383] RIP: 0033:0x7f616719f559
[   62.045403][ T6383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   62.045413][ T6383] RSP: 002b:00007f616812c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[   62.045424][ T6383] RAX: ffffffffffffffda RBX: 00007f6167425fa0 RCX: 00007f616719f559
[   62.045431][ T6383] RDX: 0000000000000318 RSI: 0000200000000500 RDI: 0000000000000006
[   62.045437][ T6383] RBP: 00007f616812c090 R08: 0000000000000000 R09: 0000000000000000
[   62.045443][ T6383] R10: 0000000000000fc0 R11: 0000000000000246 R12: 0000000000000001
[   62.045449][ T6383] R13: 00007f6167426038 R14: 00007f6167425fa0 R15: 00007ffd15af9138
[   62.045463][ T6383]  </TASK>
[   62.045520][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'.
[   62.045805][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'.
[   62.200182][ T6389] can0: slcan on ptm0.
[   62.611494][ T6403] netlink: 16 bytes leftover after parsing attributes in process `syz.3.134'.
[   62.611514][ T6403] netlink: 16 bytes leftover after parsing attributes in process `syz.3.134'.
[   62.687094][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.134'.
[   62.779903][ T6409] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[   62.808219][ T6411] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   63.044240][ T6387] can0 (unregistered): slcan off ptm0.
[   63.063559][ T1164] nvmet: connect request for invalid subsystem testsubsys!
[   63.064637][ T6428] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys"
[   63.368614][ T6460] infiniband syz0: set active
[   63.369984][ T6460] infiniband syz0: added syz_tun
[   63.384566][ T6460] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   63.384597][ T6460] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   63.384631][ T6460] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   63.405557][ T6460] RDS/IB: syz0: added
[   63.405583][ T6460] smc: adding ib device syz0 with port count 1
[   63.405594][ T6460] smc:    ib device syz0 port 1 has no pnetid
[   63.427081][ T6466] XFS (nbd3): SB validate failed with error -5.
[   63.502041][ T6473] loop5: detected capacity change from 0 to 4095
[   63.565705][ T6473] Buffer I/O error on dev loop5, logical block 511, async page read
[   63.569352][ T5789] Buffer I/O error on dev loop5, logical block 511, async page read
[   63.681026][ T5787] Bluetooth: hci3: command 0x0405 tx timeout
[   63.888034][ T6481] FAULT_INJECTION: forcing a failure.
[   63.888034][ T6481] name failslab, interval 1, probability 0, space 0, times 0
[   63.888057][ T6481] CPU: 1 UID: 0 PID: 6481 Comm: syz.1.153 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   63.888074][ T6481] Tainted: [L]=SOFTLOCKUP
[   63.888080][ T6481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   63.888087][ T6481] Call Trace:
[   63.888091][ T6481]  <TASK>
[   63.888096][ T6481]  dump_stack_lvl+0x100/0x190
[   63.888128][ T6481]  should_fail_ex.cold+0x5/0xa
[   63.888147][ T6481]  should_failslab+0xc2/0x120
[   63.888169][ T6481]  __kmalloc_cache_noprof+0x91/0x6d0
[   63.888182][ T6481]  ? inode_doinit_with_dentry+0x70b/0x1340
[   63.888201][ T6481]  ? inode_doinit_with_dentry+0x7b1/0x1340
[   63.888222][ T6481]  inode_doinit_with_dentry+0x7b1/0x1340
[   63.888243][ T6481]  ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[   63.888256][ T6481]  ? __pfx_inode_doinit_with_dentry+0x10/0x10
[   63.888279][ T6481]  ? ktime_get_coarse_real_ts64_mg+0x249/0x300
[   63.888301][ T6481]  selinux_d_instantiate+0x26/0x40
[   63.888320][ T6481]  security_d_instantiate+0x14c/0x1b0
[   63.888335][ T6481]  d_splice_alias_ops+0xd6/0x1350
[   63.888353][ T6481]  ? do_raw_spin_unlock+0x145/0x1e0
[   63.888369][ T6481]  ? __pfx_d_splice_alias_ops+0x10/0x10
[   63.888386][ T6481]  ? set_nlink+0xb4/0x190
[   63.888399][ T6481]  proc_lookup_de+0x2d2/0x360
[   63.888416][ T6481]  ? __pfx_proc_lookup+0x10/0x10
[   63.888430][ T6481]  proc_lookup+0xd8/0x110
[   63.888445][ T6481]  lookup_open+0xaff/0x1940
[   63.888465][ T6481]  path_openat+0xe75/0x23f0
[   63.888484][ T6481]  ? __pfx_path_openat+0x10/0x10
[   63.888504][ T6481]  do_file_open+0x20e/0x430
[   63.888522][ T6481]  ? __pfx_do_file_open+0x10/0x10
[   63.888544][ T6481]  ? __pfx_proc_put_link+0x10/0x10
[   63.888559][ T6481]  ? __pfx_kfree_link+0x10/0x10
[   63.888576][ T6481]  ? _raw_spin_unlock+0x28/0x50
[   63.888592][ T6481]  ? alloc_fd+0x471/0x7a0
[   63.888613][ T6481]  do_sys_openat2+0x163/0x1d0
[   63.888625][ T6481]  ? __pfx_do_sys_openat2+0x10/0x10
[   63.888636][ T6481]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   63.888656][ T6481]  __x64_sys_openat+0x12d/0x210
[   63.888669][ T6481]  ? __pfx___x64_sys_openat+0x10/0x10
[   63.888681][ T6481]  ? ksys_write+0x1ac/0x250
[   63.888701][ T6481]  do_syscall_64+0x123/0x790
[   63.888719][ T6481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.888731][ T6481] RIP: 0033:0x7f616719f559
[   63.888741][ T6481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   63.888751][ T6481] RSP: 002b:00007f616810b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   63.888771][ T6481] RAX: ffffffffffffffda RBX: 00007f6167426090 RCX: 00007f616719f559
[   63.888778][ T6481] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: ffffffffffffff9c
[   63.888785][ T6481] RBP: 00007f6167236b20 R08: 0000000000000000 R09: 0000000000000000
[   63.888792][ T6481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   63.888799][ T6481] R13: 00007f6167426128 R14: 00007f6167426090 R15: 00007ffd15af9138
[   63.888813][ T6481]  </TASK>
[   63.952870][ T6477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.517949][   T42] kauditd_printk_skb: 85 callbacks suppressed
[   64.517962][   T42] audit: type=1400 audit(1792767937.614:491): avc:  denied  { ioctl } for  pid=6487 comm="syz.3.156" path="socket:[11838]" dev="sockfs" ino=11838 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   64.519110][   T42] audit: type=1400 audit(1792767937.614:492): avc:  denied  { node_bind } for  pid=6487 comm="syz.3.156" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[   64.539141][   T42] audit: type=1400 audit(1792767937.634:493): avc:  denied  { write } for  pid=6487 comm="syz.3.156" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   64.542252][   T42] audit: type=1400 audit(1792767937.644:494): avc:  denied  { create } for  pid=6487 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   64.778971][ T5870] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   64.820073][ T6493] netlink: 'syz.2.158': attribute type 4 has an invalid length.
[   64.820087][ T6493] netlink: 'syz.2.158': attribute type 3 has an invalid length.
[   64.928997][ T5870] usb 8-1: Using ep0 maxpacket: 32
[   64.931222][ T5870] usb 8-1: unable to get BOS descriptor or descriptor too short
[   64.931270][ T5870] usb 8-1: New USB device found, idVendor=0694, idProduct=0064, bcdDevice=78.13
[   64.932367][ T5870] usb 8-1: config 14 has an invalid interface number: 57 but max is 0
[   64.932385][ T5870] usb 8-1: config 14 has no interface number 0
[   64.932414][ T5870] usb 8-1: config 14 interface 57 has no altsetting 0
[   64.934480][ T5870] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.934597][ T5870] usb 8-1: Product: syz
[   64.934610][ T5870] usb 8-1: Manufacturer: syz
[   64.934620][ T5870] usb 8-1: SerialNumber: syz
[   65.050141][   T42] audit: type=1400 audit(1792767938.154:495): avc:  denied  { read } for  pid=6495 comm="syz.2.159" name="mouse0" dev="devtmpfs" ino=1223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[   65.108513][   T42] audit: type=1400 audit(1792767938.204:496): avc:  denied  { unmount } for  pid=5774 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   65.162799][ T5870] usb 8-1: USB disconnect, device number 2
[   65.165348][ T5774] bond0: (slave syz_tun): Releasing backup interface
[   65.243652][   T42] audit: type=1400 audit(1792767938.344:497): avc:  denied  { create } for  pid=6508 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   65.273574][ T5588] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.341999][ T5588] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.343690][   T42] audit: type=1400 audit(1792767938.444:498): avc:  denied  { execute } for  pid=6511 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   65.344159][   T42] audit: type=1400 audit(1792767938.444:499): avc:  denied  { execute_no_trans } for  pid=6511 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   65.383776][   T42] audit: type=1400 audit(1792767938.484:500): avc:  denied  { setopt } for  pid=6513 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   65.406452][ T6517] FAULT_INJECTION: forcing a failure.
[   65.406452][ T6517] name failslab, interval 1, probability 0, space 0, times 0
[   65.406481][ T6517] CPU: 3 UID: 0 PID: 6517 Comm: syz.2.168 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   65.406507][ T6517] Tainted: [L]=SOFTLOCKUP
[   65.406514][ T6517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   65.406526][ T6517] Call Trace:
[   65.406533][ T6517]  <TASK>
[   65.406541][ T6517]  dump_stack_lvl+0x100/0x190
[   65.406573][ T6517]  should_fail_ex.cold+0x5/0xa
[   65.406599][ T6517]  should_failslab+0xc2/0x120
[   65.406631][ T6517]  __kmalloc_cache_noprof+0x91/0x6d0
[   65.406653][ T6517]  ? kmem_cache_alloc_node_noprof+0x2eb/0x6e0
[   65.406680][ T6517]  ? blk_alloc_queue_stats+0x3f/0x110
[   65.406710][ T6517]  blk_alloc_queue_stats+0x3f/0x110
[   65.406737][ T6517]  blk_alloc_queue+0xda/0x790
[   65.406759][ T6517]  __blk_alloc_disk+0xa0/0x170
[   65.406785][ T6517]  ? __pfx___blk_alloc_disk+0x10/0x10
[   65.406810][ T6517]  ? __pfx___debug_object_init+0x10/0x10
[   65.406848][ T6517]  ? lockdep_init_map_type+0x5c/0x250
[   65.406871][ T6517]  ? lockdep_init_map_type+0x5c/0x250
[   65.406896][ T6517]  dm_create+0x5e8/0x1530
[   65.406933][ T6517]  dev_create+0x121/0x2a0
[   65.406962][ T6517]  ? __pfx_dev_create+0x10/0x10
[   65.406998][ T6517]  ctl_ioctl+0x4d2/0xcc0
[   65.407026][ T6517]  ? __pfx_dev_create+0x10/0x10
[   65.407053][ T6517]  ? __pfx_ctl_ioctl+0x10/0x10
[   65.407129][ T6517]  ? selinux_file_ioctl+0x1e0/0x290
[   65.407165][ T6517]  dm_ctl_ioctl+0x22/0x30
[   65.407189][ T6517]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[   65.407222][ T6517]  __x64_sys_ioctl+0x18e/0x210
[   65.407252][ T6517]  do_syscall_64+0x123/0x790
[   65.407280][ T6517]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.407298][ T6517] RIP: 0033:0x7ff51cf9f559
[   65.407314][ T6517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   65.407333][ T6517] RSP: 002b:00007ff51de4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   65.407353][ T6517] RAX: ffffffffffffffda RBX: 00007ff51d225fa0 RCX: 00007ff51cf9f559
[   65.407366][ T6517] RDX: 0000200000000140 RSI: 00000000c138fd03 RDI: 0000000000000003
[   65.407378][ T6517] RBP: 00007ff51d036b20 R08: 0000000000000000 R09: 0000000000000000
[   65.407389][ T6517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   65.407398][ T6517] R13: 00007ff51d226038 R14: 00007ff51d225fa0 R15: 00007ffee5696688
[   65.407424][ T6517]  </TASK>
[   65.413614][ T5588] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.446906][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.448460][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.453587][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.454131][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.454358][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.488505][ T5588] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.638128][ T5588] bridge_slave_1: left allmulticast mode
[   65.638162][ T5588] bridge_slave_1: left promiscuous mode
[   65.639042][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.659510][ T5588] bridge_slave_0: left allmulticast mode
[   65.659526][ T5588] bridge_slave_0: left promiscuous mode
[   65.659688][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.669709][ T3308] vhci_hcd vhci_hcd.2: vhci_device speed not set
[   65.711875][ T6545] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   65.718209][ T6545] netlink: 92 bytes leftover after parsing attributes in process `syz.3.175'.
[   65.771496][ T6545] kvm: Disabled LAPIC found during irq injection
[   65.835639][ T5588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   65.842988][ T5588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   65.854437][ T5588] bond0 (unregistering): Released all slaves
[   65.869658][ T5489] 8021q: adding VLAN 0 to HW filter on device eth3
[   65.915179][ T6518] rxe_eth0 speed is unknown, defaulting to 1000
[   65.939366][ T6557] Bluetooth: MGMT ver 1.23
[   65.939649][ T5787] Bluetooth: hci3: unexpected event for opcode 0x2010
[   66.091514][ T6518] lo speed is unknown, defaulting to 1000
[   66.110257][ T5489] 8021q: adding VLAN 0 to HW filter on device eth4
[   66.200767][   T41] usb 6-1: new low-speed USB device number 2 using dummy_hcd
[   66.298694][ T5489] 8021q: adding VLAN 0 to HW filter on device eth5
[   66.374986][   T41] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   66.388351][   T41] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[   66.388372][   T41] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   66.388390][   T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[   66.388402][   T41] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   66.388414][   T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   66.388426][   T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   66.388438][   T41] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   66.388451][   T41] usb 6-1: config 168 interface 0 has no altsetting 0
[   66.393586][ T6586] program syz.3.183 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   66.405002][   T41] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[   66.405020][   T41] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   66.405037][   T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[   66.405049][   T41] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   66.405061][   T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   66.405073][   T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   66.405085][   T41] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   66.405098][   T41] usb 6-1: config 168 interface 0 has no altsetting 0
[   66.418917][   T41] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[   66.418935][   T41] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   66.418952][   T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[   66.418965][   T41] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   66.418976][   T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   66.418988][   T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   66.419001][   T41] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   66.419013][   T41] usb 6-1: config 168 interface 0 has no altsetting 0
[   66.476122][ T6595] ufs: You didn't specify the type of your ufs filesystem
[   66.476122][ T6595] 
[   66.476122][ T6595] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[   66.476122][ T6595] 
[   66.476122][ T6595] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[   66.476141][ T6595] ufs: ufstype=old is supported read-only
[   66.476910][ T6595] ufs: ufs_fill_super(): bad magic number
[   66.514703][   T41] usb 6-1: string descriptor 0 read error: -22
[   66.514795][   T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.542611][   T41] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[   66.547698][ T6601] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   66.547822][ T6601] block device autoloading is deprecated and will be removed.
[   66.642585][ T6609] FAULT_INJECTION: forcing a failure.
[   66.642585][ T6609] name failslab, interval 1, probability 0, space 0, times 0
[   66.642606][ T6609] CPU: 0 UID: 0 PID: 6609 Comm: syz.3.187 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   66.642620][ T6609] Tainted: [L]=SOFTLOCKUP
[   66.642624][ T6609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   66.642631][ T6609] Call Trace:
[   66.642634][ T6609]  <TASK>
[   66.642639][ T6609]  dump_stack_lvl+0x100/0x190
[   66.642673][ T6609]  should_fail_ex.cold+0x5/0xa
[   66.642690][ T6609]  should_failslab+0xc2/0x120
[   66.642712][ T6609]  __kmalloc_cache_noprof+0x91/0x6d0
[   66.642724][ T6609]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   66.642744][ T6609]  ? mgmt_pending_new+0x5b/0x240
[   66.642766][ T6609]  mgmt_pending_new+0x5b/0x240
[   66.642785][ T6609]  mgmt_pending_add+0x3a/0x1a0
[   66.642802][ T6609]  set_discoverable+0xb90/0xfa0
[   66.642816][ T6609]  ? __pfx_set_discoverable+0x10/0x10
[   66.642846][ T6609]  ? do_raw_read_unlock+0x3f/0x70
[   66.642860][ T6609]  ? _raw_read_unlock+0x28/0x50
[   66.642873][ T6609]  ? __pfx_mgmt_init_hdev+0x10/0x10
[   66.642891][ T6609]  hci_sock_sendmsg+0x159f/0x26f0
[   66.642911][ T6609]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[   66.642928][ T6609]  ? selinux_socket_sendmsg+0x198/0x2f0
[   66.642946][ T6609]  sock_write_iter+0x560/0x5d0
[   66.642958][ T6609]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[   66.642975][ T6609]  ? __pfx_sock_write_iter+0x10/0x10
[   66.642991][ T6609]  ? bpf_lsm_file_permission+0x9/0x10
[   66.643007][ T6609]  ? security_file_permission+0x76/0x210
[   66.643018][ T6609]  ? rw_verify_area+0xce/0x6d0
[   66.643032][ T6609]  vfs_write+0x6af/0x1050
[   66.643046][ T6609]  ? __pfx_sock_write_iter+0x10/0x10
[   66.643060][ T6609]  ? __pfx_vfs_write+0x10/0x10
[   66.643072][ T6609]  ? find_held_lock+0x2b/0x80
[   66.643097][ T6609]  ksys_write+0x1f8/0x250
[   66.643111][ T6609]  ? __pfx_ksys_write+0x10/0x10
[   66.643128][ T6609]  do_syscall_64+0x123/0x790
[   66.643144][ T6609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.643156][ T6609] RIP: 0033:0x7f0300d9f559
[   66.643165][ T6609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   66.643177][ T6609] RSP: 002b:00007f0301ba9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   66.643196][ T6609] RAX: ffffffffffffffda RBX: 00007f0301025fa0 RCX: 00007f0300d9f559
[   66.643203][ T6609] RDX: 0000000000000009 RSI: 00002000000005c0 RDI: 0000000000000004
[   66.643209][ T6609] RBP: 00007f0301ba9090 R08: 0000000000000000 R09: 0000000000000000
[   66.643216][ T6609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   66.643222][ T6609] R13: 00007f0301026038 R14: 00007f0301025fa0 R15: 00007ffc5c1b3198
[   66.643236][ T6609]  </TASK>
[   66.645903][ T5588] hsr_slave_0: left promiscuous mode
[   66.646470][ T5588] hsr_slave_1: left promiscuous mode
[   66.647113][ T5588] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.647141][ T5588] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.647774][ T5588] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.647783][ T5588] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.661906][ T5588] veth1_macvtap: left promiscuous mode
[   66.661976][ T5588] veth0_macvtap: left promiscuous mode
[   66.662071][ T5588] veth1_vlan: left promiscuous mode
[   66.662141][ T5588] veth0_vlan: left promiscuous mode
[   66.762179][   T24] usb 6-1: USB disconnect, device number 2
[   66.810700][ T5588] team0 (unregistering): Port device team_slave_1 removed
[   66.815317][ T5588] team0 (unregistering): Port device team_slave_0 removed
[   66.905764][   T64] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed
[   66.927241][ T5489] 8021q: adding VLAN 0 to HW filter on device eth6
[   66.927386][   T58] infiniband syz_device_name_32_chars_1234567: ib_query_port failed (-19)
[   66.955572][ T6518] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.955664][ T6518] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.955720][ T6518] bridge_slave_0: entered allmulticast mode
[   66.956387][ T6518] bridge_slave_0: entered promiscuous mode
[   66.957390][ T6620] netlink: 'syz.3.189': attribute type 4 has an invalid length.
[   66.958049][ T6518] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.958111][ T6518] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.958163][ T6518] bridge_slave_1: entered allmulticast mode
[   66.958697][ T6620] FAULT_INJECTION: forcing a failure.
[   66.958697][ T6620] name failslab, interval 1, probability 0, space 0, times 0
[   66.958715][ T6620] CPU: 0 UID: 0 PID: 6620 Comm: syz.3.189 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   66.958730][ T6620] Tainted: [L]=SOFTLOCKUP
[   66.958734][ T6620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   66.958740][ T6620] Call Trace:
[   66.958744][ T6620]  <TASK>
[   66.958749][ T6620]  dump_stack_lvl+0x100/0x190
[   66.958768][ T6620]  should_fail_ex.cold+0x5/0xa
[   66.958785][ T6620]  should_failslab+0xc2/0x120
[   66.958803][ T6620]  __kmalloc_cache_noprof+0x91/0x6d0
[   66.958816][ T6620]  ? sctp_add_bind_addr+0xae/0x3e0
[   66.958829][ T6620]  sctp_add_bind_addr+0xae/0x3e0
[   66.958841][ T6518] bridge_slave_1: entered promiscuous mode
[   66.958841][ T6620]  sctp_copy_local_addr_list+0x349/0x550
[   66.958857][ T6620]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[   66.958885][ T6620]  ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360
[   66.958900][ T6620]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   66.958916][ T6620]  sctp_bind_addr_copy+0x331/0x530
[   66.958930][ T6620]  sctp_connect_new_asoc+0x1c9/0x770
[   66.958947][ T6620]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[   66.958968][ T6620]  sctp_sendmsg+0x1743/0x22e0
[   66.958986][ T6620]  ? __pfx_sctp_sendmsg+0x10/0x10
[   66.959001][ T6620]  ? __lock_acquire+0x5a0/0x1f40
[   66.959015][ T6620]  ? __pfx_sock_has_perm+0x10/0x10
[   66.959045][ T6620]  ? import_ubuf+0x1b6/0x220
[   66.959071][ T6620]  ? __pfx_sctp_sendmsg+0x10/0x10
[   66.959097][ T6620]  inet_sendmsg+0x11c/0x140
[   66.959126][ T6620]  ____sys_sendmsg+0xa23/0xc30
[   66.959143][ T6620]  ? __pfx_inet_sendmsg+0x10/0x10
[   66.959161][ T6620]  ? __pfx_____sys_sendmsg+0x10/0x10
[   66.959175][ T6620]  ? _kstrtoull+0x144/0x200
[   66.959191][ T6620]  ? __pfx__kstrtoull+0x10/0x10
[   66.959210][ T6620]  ___sys_sendmsg+0x190/0x1e0
[   66.959223][ T6620]  ? __pfx____sys_sendmsg+0x10/0x10
[   66.959242][ T6620]  ? __fget_files+0x34/0x3d0
[   66.959269][ T6620]  __sys_sendmmsg+0x20c/0x440
[   66.959287][ T6620]  ? __pfx___sys_sendmmsg+0x10/0x10
[   66.959303][ T6620]  ? ksys_write+0x190/0x250
[   66.959327][ T6620]  ? fput+0x7c/0x100
[   66.959337][ T6620]  ? ksys_write+0x1ac/0x250
[   66.959350][ T6620]  ? __pfx_ksys_write+0x10/0x10
[   66.959366][ T6620]  __x64_sys_sendmmsg+0x9c/0x100
[   66.959383][ T6620]  ? lockdep_hardirqs_on+0x7d/0x110
[   66.959398][ T6620]  do_syscall_64+0x123/0x790
[   66.959414][ T6620]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.959425][ T6620] RIP: 0033:0x7f0300d9f559
[   66.959435][ T6620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   66.959445][ T6620] RSP: 002b:00007f0301ba9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   66.959456][ T6620] RAX: ffffffffffffffda RBX: 00007f0301025fa0 RCX: 00007f0300d9f559
[   66.959463][ T6620] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003
[   66.959469][ T6620] RBP: 00007f0301ba9090 R08: 0000000000000000 R09: 0000000000000000
[   66.959475][ T6620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   66.959481][ T6620] R13: 00007f0301026038 R14: 00007f0301025fa0 R15: 00007ffc5c1b3198
[   66.959495][ T6620]  </TASK>
[   66.972235][ T6564] adutux: No device or device unplugged -19
[   66.975321][ T6518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.977221][ T6518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.995690][ T6518] team0: Port device team_slave_0 added
[   66.997229][ T6518] team0: Port device team_slave_1 added
[   67.008196][ T6518] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.008207][ T6518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.008219][ T6518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.008844][ T6624] netlink: 'syz.3.190': attribute type 4 has an invalid length.
[   67.009084][ T6518] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.009096][ T6518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.009114][ T6518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.017339][ T6564] iommufd_mock iommufd_mock0: Adding to iommu group 10
[   67.028079][ T6518] hsr_slave_0: entered promiscuous mode
[   67.028475][ T6518] hsr_slave_1: entered promiscuous mode
[   67.028745][ T6518] debugfs: 'hsr0' already exists in 'hsr'
[   67.028756][ T6518] Cannot create hsr debugfs directory
[   67.036339][ T6564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.181'.
[   67.166833][ T6518] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   67.171158][ T6518] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   67.172217][ T6518] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   67.180274][ T6518] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   67.180978][ T6518] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   67.187305][ T6518] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   67.188096][ T6518] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   67.191669][ T6518] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   67.203021][ T6518] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.203037][ T6634] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[   67.203098][ T6518] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.203203][ T6518] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.203253][ T6518] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.212395][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.194'.
[   67.237638][ T6518] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.243156][   T64] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.243540][   T64] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.248598][ T6518] 8021q: adding VLAN 0 to HW filter on device team0
[   67.255298][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.255342][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.263709][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.263754][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.288994][   T41] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   67.439372][   T41] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[   67.440230][   T41] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   67.440252][   T41] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   67.441879][   T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.441891][   T41] usb 8-1: Product: syz
[   67.441898][   T41] usb 8-1: Manufacturer: syz
[   67.441905][   T41] usb 8-1: SerialNumber: syz
[   67.519446][ T5787] Bluetooth: hci0: command tx timeout
[   67.523282][ T6518] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.717513][ T6518] veth0_vlan: entered promiscuous mode
[   67.724037][ T6518] veth1_vlan: entered promiscuous mode
[   67.745524][ T6518] veth0_macvtap: entered promiscuous mode
[   67.749156][ T6518] veth1_macvtap: entered promiscuous mode
[   67.766697][ T6518] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.775068][ T6518] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.800861][ T6635] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.800910][ T6635] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.800941][ T6635] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.800971][ T6635] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.842281][  T669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.842302][  T669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.853907][ T5927] usb 8-1: USB disconnect, device number 3
[   67.867267][  T669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.867284][  T669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.917629][ T6675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.198'.
[   67.960886][ T6678] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   67.979183][ T6680] netlink: 36 bytes leftover after parsing attributes in process `syz.4.171'.
[   67.987173][ T6683] cgroup: Unknown subsys name 'obj_type'
[   68.135302][ T6701] kvm [6700]: vcpu6, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xfffffffffffffeb7
[   68.136592][ T6701] comedi comedi0: Minor 2208 is invalid!
[   68.240569][ T6710] input: syz0 as /devices/virtual/input/input7
[   68.299073][   T58] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   68.442019][ T6724] ptrace attach of "/syz-executor exec"[5782] was attempted by ""[6724]
[   68.442355][ T6726] netlink: 'syz.1.214': attribute type 39 has an invalid length.
[   68.444768][ T6724] FAULT_INJECTION: forcing a failure.
[   68.444768][ T6724] name failslab, interval 1, probability 0, space 0, times 0
[   68.444797][ T6724] CPU: 3 UID: 0 PID: 6724 Comm: syz.2.215 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   68.444817][ T6724] Tainted: [L]=SOFTLOCKUP
[   68.444822][ T6724] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   68.444828][ T6724] Call Trace:
[   68.444833][ T6724]  <TASK>
[   68.444839][ T6724]  dump_stack_lvl+0x100/0x190
[   68.444867][ T6724]  should_fail_ex.cold+0x5/0xa
[   68.444889][ T6724]  should_failslab+0xc2/0x120
[   68.444916][ T6724]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[   68.444940][ T6724]  ? selinux_socket_create+0xe7/0x590
[   68.444961][ T6724]  ? sock_alloc_inode+0x26/0x2c0
[   68.444991][ T6724]  ? __pfx_sock_alloc_inode+0x10/0x10
[   68.445005][ T6724]  sock_alloc_inode+0x26/0x2c0
[   68.445017][ T6724]  ? __pfx_sock_alloc_inode+0x10/0x10
[   68.445028][ T6724]  alloc_inode+0x68/0x250
[   68.445043][ T6724]  sock_alloc+0x42/0x240
[   68.445055][ T6724]  __sock_create+0xc2/0x860
[   68.445070][ T6724]  __sys_socket+0x14d/0x260
[   68.445084][ T6724]  ? __pfx___sys_socket+0x10/0x10
[   68.445103][ T6724]  __x64_sys_socket+0x72/0xb0
[   68.445116][ T6724]  ? lockdep_hardirqs_on+0x7d/0x110
[   68.445130][ T6724]  do_syscall_64+0x123/0x790
[   68.445147][ T6724]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.445159][ T6724] RIP: 0033:0x7ff51cf9f559
[   68.445168][ T6724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   68.445180][ T6724] RSP: 002b:00007ff51de4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   68.445193][ T6724] RAX: ffffffffffffffda RBX: 00007ff51d225fa0 RCX: 00007ff51cf9f559
[   68.445201][ T6724] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[   68.445208][ T6724] RBP: 00007ff51d036b20 R08: 0000000000000000 R09: 0000000000000000
[   68.445214][ T6724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   68.445221][ T6724] R13: 00007ff51d226038 R14: 00007ff51d225fa0 R15: 00007ffee5696688
[   68.445235][ T6724]  </TASK>
[   68.445268][ T6724] socket: no more sockets
[   68.475667][   T58] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[   68.495294][   T58] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   68.495321][   T58] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   68.510843][   T58] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.510857][   T58] usb 8-1: Product: syz
[   68.510865][   T58] usb 8-1: Manufacturer: syz
[   68.510872][   T58] usb 8-1: SerialNumber: syz
[   68.640385][ T6743] netlink: 52 bytes leftover after parsing attributes in process `syz.2.220'.
[   68.640681][ T6743] syzkaller0: entered promiscuous mode
[   68.640692][ T6743] syzkaller0: entered allmulticast mode
[   68.717457][   T58] usb 8-1: USB disconnect, device number 4
[   69.072607][ T6760] syzkaller0: entered promiscuous mode
[   69.072676][ T6760] syzkaller0: entered allmulticast mode
[   69.246220][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'.
[   69.263380][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'.
[   69.269489][ T5588] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   69.281721][ T5588] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   69.281958][ T5588] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   69.282178][ T5588] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   69.519768][   T42] kauditd_printk_skb: 13410 callbacks suppressed
[   69.519781][   T42] audit: type=1326 audit(1792767942.614:13911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.1.221" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616719f559 code=0x50000
[   69.519804][   T42] audit: type=1326 audit(1792767942.614:13912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.1.221" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616719f559 code=0x50000
[   69.519825][   T42] audit: type=1326 audit(1792767942.614:13913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.1.221" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616719f559 code=0x50000
[   69.519846][   T42] audit: type=1326 audit(1792767942.614:13914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.1.221" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616719f559 code=0x50000
[   69.519866][   T42] audit: type=1326 audit(1792767942.624:13915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.1.221" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616719f559 code=0x50000
[   69.519886][   T42] audit: type=1326 audit(1792767942.624:13916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.1.221" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616719f559 code=0x50000
[   69.519908][   T42] audit: type=1326 audit(1792767942.624:13917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.1.221" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616719f559 code=0x50000
[   69.519929][   T42] audit: type=1326 audit(1792767942.624:13918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.1.221" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616719f559 code=0x50000
[   69.519948][   T42] audit: type=1326 audit(1792767942.624:13919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.1.221" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616719f559 code=0x50000
[   69.519968][   T42] audit: type=1326 audit(1792767942.624:13920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.1.221" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616719f559 code=0x50000
[   69.608988][ T5787] Bluetooth: hci0: command tx timeout
[   69.728367][ T6786] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.732891][ T6786] bond0: (slave bond1): Enslaving as an active interface with an up link
[   69.829668][ T6793] netlink: 'syz.4.235': attribute type 4 has an invalid length.
[   69.964925][ T6799] FAULT_INJECTION: forcing a failure.
[   69.964925][ T6799] name failslab, interval 1, probability 0, space 0, times 0
[   69.964947][ T6799] CPU: 0 UID: 0 PID: 6799 Comm: syz.2.239 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   69.964962][ T6799] Tainted: [L]=SOFTLOCKUP
[   69.964967][ T6799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   69.964973][ T6799] Call Trace:
[   69.964977][ T6799]  <TASK>
[   69.964982][ T6799]  dump_stack_lvl+0x100/0x190
[   69.965001][ T6799]  should_fail_ex.cold+0x5/0xa
[   69.965017][ T6799]  should_failslab+0xc2/0x120
[   69.965034][ T6799]  __kmalloc_noprof+0xfc/0x840
[   69.965048][ T6799]  ? __kasan_kmalloc+0xaa/0xb0
[   69.965063][ T6799]  ? nla_strdup+0xc3/0x150
[   69.965076][ T6799]  nla_strdup+0xc3/0x150
[   69.965087][ T6799]  nf_tables_addchain.constprop.0+0x83b/0x1ca0
[   69.965103][ T6799]  ? nft_chain_lookup+0x59c/0xa60
[   69.965117][ T6799]  ? __kasan_kmalloc+0xaa/0xb0
[   69.965132][ T6799]  ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10
[   69.965157][ T6799]  ? __pfx_nft_chain_lookup+0x10/0x10
[   69.965170][ T6799]  ? __lock_acquire+0x5c0/0x1f40
[   69.965193][ T6799]  ? nla_strcmp+0xff/0x130
[   69.965205][ T6799]  ? nft_table_lookup.part.0+0x1e3/0x230
[   69.965219][ T6799]  nf_tables_newchain+0x1824/0x2a50
[   69.965230][ T6799]  ? __pfx_net_generic+0x1/0x10
[   69.965249][ T6799]  ? __pfx_nf_tables_newchain+0x10/0x10
[   69.965260][ T6799]  ? __pfx___nla_validate_parse+0x10/0x10
[   69.965277][ T6799]  ? lock_acquire+0x1d1/0x380
[   69.965288][ T6799]  ? net_generic+0x25/0x2a0
[   69.965303][ T6799]  ? __nla_parse+0x40/0x60
[   69.965316][ T6799]  nfnetlink_rcv_batch+0x1410/0x2880
[   69.965338][ T6799]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[   69.965354][ T6799]  ? lock_acquire+0x1d1/0x380
[   69.965365][ T6799]  ? avc_has_perm_noaudit+0x56/0x470
[   69.965384][ T6799]  ? avc_has_perm_noaudit+0x145/0x470
[   69.965410][ T6799]  ? __nla_parse+0x40/0x60
[   69.965424][ T6799]  nfnetlink_rcv+0x3bd/0x440
[   69.965437][ T6799]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   69.965454][ T6799]  netlink_unicast+0x668/0x950
[   69.965473][ T6799]  ? __pfx_netlink_unicast+0x10/0x10
[   69.965494][ T6799]  netlink_sendmsg+0x9ac/0x10c0
[   69.965514][ T6799]  ? __pfx_netlink_sendmsg+0x10/0x10
[   69.965534][ T6799]  ? selinux_socket_sendmsg+0x198/0x2f0
[   69.965552][ T6799]  ? ____sys_sendmsg+0xa99/0xc30
[   69.965564][ T6799]  ____sys_sendmsg+0xa99/0xc30
[   69.965575][ T6799]  ? __pfx_netlink_sendmsg+0x10/0x10
[   69.965593][ T6799]  ? __pfx_____sys_sendmsg+0x10/0x10
[   69.965609][ T6799]  ? lock_acquire+0x1d1/0x380
[   69.965620][ T6799]  ? get_pid_task+0x2a/0x250
[   69.965635][ T6799]  ___sys_sendmsg+0x190/0x1e0
[   69.965649][ T6799]  ? __pfx____sys_sendmsg+0x10/0x10
[   69.965662][ T6799]  ? get_pid_task+0x106/0x250
[   69.965681][ T6799]  ? find_held_lock+0x2b/0x80
[   69.965706][ T6799]  __sys_sendmsg+0x160/0x210
[   69.965723][ T6799]  ? __pfx___sys_sendmsg+0x10/0x10
[   69.965748][ T6799]  do_syscall_64+0x123/0x790
[   69.965764][ T6799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.965775][ T6799] RIP: 0033:0x7ff51cf9f559
[   69.965785][ T6799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   69.965796][ T6799] RSP: 002b:00007ff51de4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   69.965807][ T6799] RAX: ffffffffffffffda RBX: 00007ff51d225fa0 RCX: 00007ff51cf9f559
[   69.965814][ T6799] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[   69.965820][ T6799] RBP: 00007ff51de4d090 R08: 0000000000000000 R09: 0000000000000000
[   69.965827][ T6799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   69.965833][ T6799] R13: 00007ff51d226038 R14: 00007ff51d225fa0 R15: 00007ffee5696688
[   69.965848][ T6799]  </TASK>
[   70.354229][ T6822] netlink: 40 bytes leftover after parsing attributes in process `syz.2.245'.
[   70.411817][ T6824] Cannot find del_set index 4 as target
[   70.819050][ T6848] FAULT_INJECTION: forcing a failure.
[   70.819050][ T6848] name failslab, interval 1, probability 0, space 0, times 0
[   70.819073][ T6848] CPU: 2 UID: 0 PID: 6848 Comm: syz.4.257 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   70.819088][ T6848] Tainted: [L]=SOFTLOCKUP
[   70.819092][ T6848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   70.819099][ T6848] Call Trace:
[   70.819103][ T6848]  <TASK>
[   70.819108][ T6848]  dump_stack_lvl+0x100/0x190
[   70.819128][ T6848]  should_fail_ex.cold+0x5/0xa
[   70.819145][ T6848]  should_failslab+0xc2/0x120
[   70.819164][ T6848]  kmem_cache_alloc_noprof+0x92/0x6a0
[   70.819180][ T6848]  ? do_getname+0x35/0x390
[   70.819195][ T6848]  do_getname+0x35/0x390
[   70.819208][ T6848]  do_sys_openat2+0xc3/0x1d0
[   70.819219][ T6848]  ? __pfx_do_sys_openat2+0x10/0x10
[   70.819232][ T6848]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   70.819251][ T6848]  __x64_sys_openat+0x12d/0x210
[   70.819263][ T6848]  ? __pfx___x64_sys_openat+0x10/0x10
[   70.819274][ T6848]  ? ksys_write+0x1ac/0x250
[   70.819292][ T6848]  do_syscall_64+0x123/0x790
[   70.819308][ T6848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.819321][ T6848] RIP: 0033:0x7f81ef79f559
[   70.819336][ T6848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   70.819348][ T6848] RSP: 002b:00007f81f06ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   70.819361][ T6848] RAX: ffffffffffffffda RBX: 00007f81efa25fa0 RCX: 00007f81ef79f559
[   70.819369][ T6848] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffffffffffffff9c
[   70.819376][ T6848] RBP: 00007f81ef836b20 R08: 0000000000000000 R09: 0000000000000000
[   70.819383][ T6848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   70.819391][ T6848] R13: 00007f81efa26038 R14: 00007f81efa25fa0 R15: 00007ffcd7068fe8
[   70.819407][ T6848]  </TASK>
[   71.060345][ T6863] mmap: syz.2.262 (6863) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   71.149814][ T6865] xt_hashlimit: size too large, truncated to 1048576
[   71.365126][ T1446] ieee802154 phy0 wpan0: encryption failed: -22
[   71.365182][ T1446] ieee802154 phy1 wpan1: encryption failed: -22
[   71.381082][   T50] cfg80211: failed to load regulatory.db
[   71.679814][ T5787] Bluetooth: hci0: command tx timeout
[   71.734107][ T6892] netlink: 'syz.4.274': attribute type 10 has an invalid length.
[   71.809015][ T5926] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   71.959525][ T5926] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[   71.960359][ T5926] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   71.960383][ T5926] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[   71.960396][ T5926] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[   71.960415][ T5926] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.268971][ T1713] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   72.440550][ T1713] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   72.441374][ T5926] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[   72.441384][ T5926] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[   72.444571][ T1713] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.444587][ T1713] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   72.444598][ T1713] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   72.444618][ T1713] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.446157][ T5926] cxacru 8-1:1.0: probe with driver cxacru failed with error -71
[   72.449181][ T1713] usb 7-1: config 0 descriptor??
[   72.453718][ T5926] usb 8-1: USB disconnect, device number 5
[   72.467971][ T6903] vcan0: tx address claim with dest, not broadcast
[   72.468800][ T6903] netlink: 64 bytes leftover after parsing attributes in process `syz.1.279'.
[   72.776085][ T6911] warning: `syz.4.281' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   72.828693][ T6918] tap0: tun_chr_ioctl cmd 1074025678
[   72.828715][ T6918] tap0: group set to 0
[   72.859144][ T1713] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd
[   72.859478][ T6920] netlink: 'syz.1.285': attribute type 1 has an invalid length.
[   72.873591][ T1713] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   72.892770][ T6920] 8021q: adding VLAN 0 to HW filter on device bond2
[   72.894790][ T6920] bond1: (slave bond2): making interface the new active one
[   72.895190][ T6920] bond1: (slave bond2): Enslaving as an active interface with an up link
[   72.897274][ T6920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.285'.
[   73.028140][ T6927] null_blk: disk my_zoned_dev created
[   73.141363][ T6947] nvmet: Invalid value 'òcp\ºú0Ó}8’Än)#Hrs£6šg�=r!OJ‰pÃ}Älé_îdæð' for trtype
[   73.186791][ T6949] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[   73.466824][ T6971] XFS (nbd4): Invalid device [./loop0], error=-13
[   73.569594][ T6980] fuse: Invalid rootmode
[   73.587866][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'.
[   73.769094][ T5787] Bluetooth: hci0: command tx timeout
[   74.020910][ T7009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.308'.
[   74.049572][ T7005] md: could not open device unknown-block(1,7).
[   74.049658][ T7005] md: error, md_import_device() returned -16
[   74.123661][ T7014] FAULT_INJECTION: forcing a failure.
[   74.123661][ T7014] name failslab, interval 1, probability 0, space 0, times 0
[   74.123685][ T7014] CPU: 0 UID: 0 PID: 7014 Comm: syz.4.309 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   74.123701][ T7014] Tainted: [L]=SOFTLOCKUP
[   74.123705][ T7014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   74.123712][ T7014] Call Trace:
[   74.123717][ T7014]  <TASK>
[   74.123722][ T7014]  dump_stack_lvl+0x100/0x190
[   74.123750][ T7014]  should_fail_ex.cold+0x5/0xa
[   74.123775][ T7014]  should_failslab+0xc2/0x120
[   74.123797][ T7014]  kmem_cache_alloc_noprof+0x92/0x6a0
[   74.123813][ T7014]  ? d_instantiate+0x8a/0xb0
[   74.123825][ T7014]  ? alloc_empty_file+0x5b/0x1c0
[   74.123841][ T7014]  alloc_empty_file+0x5b/0x1c0
[   74.123853][ T7014]  alloc_file_pseudo+0x17e/0x290
[   74.123866][ T7014]  ? __pfx_alloc_file_pseudo+0x10/0x10
[   74.123879][ T7014]  ? alloc_fd+0x471/0x7a0
[   74.123901][ T7014]  sock_alloc_file+0x50/0x210
[   74.123923][ T7014]  __sys_socket+0x1c0/0x260
[   74.123937][ T7014]  ? __pfx___sys_socket+0x10/0x10
[   74.123954][ T7014]  __x64_sys_socket+0x72/0xb0
[   74.123967][ T7014]  ? lockdep_hardirqs_on+0x7d/0x110
[   74.123985][ T7014]  do_syscall_64+0x123/0x790
[   74.124001][ T7014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.124014][ T7014] RIP: 0033:0x7f81ef79f559
[   74.124023][ T7014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   74.124034][ T7014] RSP: 002b:00007f81f06cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   74.124052][ T7014] RAX: ffffffffffffffda RBX: 00007f81efa26090 RCX: 00007f81ef79f559
[   74.124060][ T7014] RDX: 0000000000000004 RSI: 0000000000000003 RDI: 0000000000000010
[   74.124066][ T7014] RBP: 00007f81ef836b20 R08: 0000000000000000 R09: 0000000000000000
[   74.124073][ T7014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   74.124080][ T7014] R13: 00007f81efa26128 R14: 00007f81efa26090 R15: 00007ffcd7068fe8
[   74.124094][ T7014]  </TASK>
[   74.270393][ T7018] Bluetooth: hci0: too big key_count value 62977
[   74.891623][   T42] kauditd_printk_skb: 35253 callbacks suppressed
[   74.891641][   T42] audit: type=1400 audit(1792767947.994:49173): avc:  denied  { sqpoll } for  pid=7022 comm="syz.1.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   74.896868][   T42] audit: type=1400 audit(1792767947.994:49174): avc:  denied  { ioctl } for  pid=7022 comm="syz.1.313" path="socket:[15329]" dev="sockfs" ino=15329 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   74.971415][   T42] audit: type=1400 audit(1792767948.074:49175): avc:  denied  { setopt } for  pid=7025 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   75.090927][ T7035] netlink: 20 bytes leftover after parsing attributes in process `syz.4.318'.
[   75.091022][ T7035] xfrm0: entered promiscuous mode
[   75.091038][ T7035] xfrm0: entered allmulticast mode
[   75.092610][ T7035] netlink: 20 bytes leftover after parsing attributes in process `syz.4.318'.
[   75.131397][   T42] audit: type=1400 audit(1792767948.234:49176): avc:  denied  { unmount } for  pid=5776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   75.185811][ T5870] usb 7-1: USB disconnect, device number 4
[   75.186329][   T42] audit: type=1400 audit(1792767948.284:49177): avc:  denied  { connect } for  pid=7041 comm="syz.4.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   75.193309][ T7042] loop4: detected capacity change from 0 to 7
[   75.229294][ T7042]  loop4: [CUMANA/ADFS] p1 [ADFS] p1
[   75.229322][ T7042] loop4: partition table partially beyond EOD, truncated
[   75.229493][ T7042] loop4: p1 size 2989602745 extends beyond EOD, truncated
[   75.274290][ T7042] device-mapper: ioctl: Invalid data size in the ioctl structure: 0
[   75.295876][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'.
[   75.305888][ T5789] udevd[5789]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   75.417945][   T42] audit: type=1400 audit(1792767948.514:49178): avc:  denied  { read write } for  pid=7052 comm="syz.2.326" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   75.420568][   T42] audit: type=1400 audit(1792767948.524:49179): avc:  denied  { open } for  pid=7052 comm="syz.2.326" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   75.421067][   T42] audit: type=1400 audit(1792767948.524:49180): avc:  denied  { ioctl } for  pid=7052 comm="syz.2.326" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   75.460290][   T42] audit: type=1400 audit(1792767948.564:49181): avc:  denied  { read } for  pid=7067 comm="syz.4.328" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[   75.460436][   T42] audit: type=1400 audit(1792767948.564:49182): avc:  denied  { open } for  pid=7067 comm="syz.4.328" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[   75.469836][ T7071] FAULT_INJECTION: forcing a failure.
[   75.469836][ T7071] name failslab, interval 1, probability 0, space 0, times 0
[   75.469864][ T7071] CPU: 3 UID: 0 PID: 7071 Comm: syz.3.329 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   75.469888][ T7071] Tainted: [L]=SOFTLOCKUP
[   75.469894][ T7071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   75.469903][ T7071] Call Trace:
[   75.469909][ T7071]  <TASK>
[   75.469917][ T7071]  dump_stack_lvl+0x100/0x190
[   75.469948][ T7071]  should_fail_ex.cold+0x5/0xa
[   75.469975][ T7071]  should_failslab+0xc2/0x120
[   75.470003][ T7071]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[   75.470030][ T7071]  ? __alloc_skb+0x5b7/0x710
[   75.470055][ T7071]  ? __alloc_skb+0x140/0x710
[   75.470084][ T7071]  __alloc_skb+0x140/0x710
[   75.470108][ T7071]  ? __alloc_skb+0x5b7/0x710
[   75.470149][ T7071]  ? __pfx___alloc_skb+0x10/0x10
[   75.470182][ T7071]  netlink_alloc_large_skb+0x69/0x150
[   75.470212][ T7071]  netlink_sendmsg+0x755/0x10c0
[   75.470242][ T7071]  ? __pfx_netlink_sendmsg+0x10/0x10
[   75.470273][ T7071]  ? selinux_socket_sendmsg+0x198/0x2f0
[   75.470304][ T7071]  ? ____sys_sendmsg+0xa99/0xc30
[   75.470322][ T7071]  ____sys_sendmsg+0xa99/0xc30
[   75.470341][ T7071]  ? __pfx_netlink_sendmsg+0x10/0x10
[   75.470371][ T7071]  ? __pfx_____sys_sendmsg+0x10/0x10
[   75.470397][ T7071]  ? lock_acquire+0x1d1/0x380
[   75.470413][ T7071]  ? get_pid_task+0x2a/0x250
[   75.470428][ T7071]  ___sys_sendmsg+0x190/0x1e0
[   75.470442][ T7071]  ? __pfx____sys_sendmsg+0x10/0x10
[   75.470455][ T7071]  ? get_pid_task+0x106/0x250
[   75.470474][ T7071]  ? find_held_lock+0x2b/0x80
[   75.470498][ T7071]  __sys_sendmsg+0x160/0x210
[   75.470516][ T7071]  ? __pfx___sys_sendmsg+0x10/0x10
[   75.470540][ T7071]  do_syscall_64+0x123/0x790
[   75.470556][ T7071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.470567][ T7071] RIP: 0033:0x7f0300d9f559
[   75.470577][ T7071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   75.470588][ T7071] RSP: 002b:00007f0301ba9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   75.470599][ T7071] RAX: ffffffffffffffda RBX: 00007f0301025fa0 RCX: 00007f0300d9f559
[   75.470607][ T7071] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[   75.470613][ T7071] RBP: 00007f0301ba9090 R08: 0000000000000000 R09: 0000000000000000
[   75.470620][ T7071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   75.470626][ T7071] R13: 00007f0301026038 R14: 00007f0301025fa0 R15: 00007ffc5c1b3198
[   75.470661][ T7071]  </TASK>
[   75.622361][ T7082] netlink: 104 bytes leftover after parsing attributes in process `syz.4.334'.
[   75.839740][ T5787] Bluetooth: hci0: command tx timeout
[   75.990868][ T7111] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   75.996367][ T7111] kAFS: unable to lookup cell '.'
[   76.010917][    C3] Illegal XDP return value 16128 on prog  (id 22) dev veth0, expect packet loss!
[   76.241632][ T7128] netlink: 72 bytes leftover after parsing attributes in process `syz.3.351'.
[   76.242968][ T7128] capability: warning: `syz.3.351' uses deprecated v2 capabilities in a way that may be insecure
[   76.315289][ T7135] fuse: Unknown parameter '®0x0000000000000003'
[   76.549007][ T5870] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[   76.698986][ T5870] usb 8-1: Using ep0 maxpacket: 16
[   76.701482][ T5870] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[   76.701942][ T5870] usb 8-1: config 0 has no interfaces?
[   76.703500][ T5870] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.703512][ T5870] usb 8-1: Product: syz
[   76.703519][ T5870] usb 8-1: Manufacturer: syz
[   76.703526][ T5870] usb 8-1: SerialNumber: syz
[   76.704814][ T5870] usb 8-1: config 0 descriptor??
[   77.000572][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.359'.
[   77.001532][ T7153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7153 comm=syz.1.359
[   77.090266][ T7132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.090468][ T7132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.368042][ T7193] =======================================================
[   77.368042][ T7193] WARNING: The mand mount option has been deprecated and
[   77.368042][ T7193]          and is ignored by this kernel. Remove the mand
[   77.368042][ T7193]          option from the mount to silence this warning.
[   77.368042][ T7193] =======================================================
[   77.490005][   T50] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   77.548977][ T5927] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   77.640439][   T50] usb 9-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[   77.644562][   T50] usb 9-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[   77.644598][   T50] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12336, setting to 64
[   77.644617][   T50] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   77.647167][ T7210] hfsplus: unable to find HFS+ superblock
[   77.647721][   T50] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.647739][   T50] usb 9-1: Product: syz
[   77.647749][   T50] usb 9-1: Manufacturer: syz
[   77.647763][   T50] usb 9-1: SerialNumber: syz
[   77.723782][ T5927] usb 7-1: Using ep0 maxpacket: 16
[   77.725067][ T5927] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[   77.728809][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.728824][ T5927] usb 7-1: Product: syz
[   77.728831][ T5927] usb 7-1: Manufacturer: syz
[   77.728838][ T5927] usb 7-1: SerialNumber: syz
[   77.743710][ T7220] overlay: ./file0 is not a directory
[   77.744423][ T7220] overlay: ./file0 is not a directory
[   77.746915][ T7220] overlay: ./file0 is not a directory
[   77.750318][ T7220] overlay: ./file0 is not a directory
[   77.754069][ T7220] overlay: ./file0 is not a directory
[   77.756408][ T7220] overlay: ./file0 is not a directory
[   77.758652][ T7220] overlay: ./file0 is not a directory
[   77.761676][ T7220] overlay: ./file0 is not a directory
[   77.768419][ T7220] overlay: ./file0 is not a directory
[   77.769621][ T7220] overlay: ./file0 is not a directory
[   77.771292][ T7220] overlay: ./file0 is not a directory
[   77.773172][ T7220] overlay: ./file0 is not a directory
[   77.776489][ T7220] overlay: ./file0 is not a directory
[   77.777361][ T7220] overlay: ./file0 is not a directory
[   77.784358][ T7220] overlay: ./file0 is not a directory
[   77.787424][ T7220] overlay: ./file0 is not a directory
[   77.791471][ T7220] overlay: ./file0 is not a directory
[   77.792774][ T7220] overlay: ./file0 is not a directory
[   77.800511][ T7220] overlay: ./file0 is not a directory
[   77.803395][ T7220] overlay: ./file0 is not a directory
[   77.806593][ T7220] overlay: ./file0 is not a directory
[   77.814271][ T7220] overlay: ./file0 is not a directory
[   77.814746][ T7220] overlay: ./file0 is not a directory
[   77.815385][ T7220] overlay: ./file0 is not a directory
[   77.815857][ T7220] overlay: ./file0 is not a directory
[   77.817056][ T7220] overlay: ./file0 is not a directory
[   77.817264][ T7220] overlay: ./file0 is not a directory
[   77.819204][ T7220] overlay: ./file0 is not a directory
[   77.821557][ T7220] overlay: ./file0 is not a directory
[   77.826188][ T7220] overlay: ./file0 is not a directory
[   77.828533][ T7220] overlay: ./file0 is not a directory
[   77.833123][ T7220] overlay: ./file0 is not a directory
[   77.835321][ T7220] overlay: ./file0 is not a directory
[   77.898398][ T7224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=7224 comm=syz.1.375
[   77.941411][ T5927] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[   77.948532][ T5927] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   77.948839][ T5927] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[   77.949013][ T5927] usb 7-1: media controller created
[   77.963397][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   78.113840][ T7240] device-mapper: table: 248:4: ram3 too small for target: start=0, len=12296, dev_size=8192
[   78.145923][ T5927] zl10353_read_register: readreg error (reg=127, ret==-32)
[   78.171181][   T50] usb 9-1: Cannot retrieve CPort count: -110
[   78.171207][   T50] usb 9-1: Cannot retrieve CPort count: -110
[   78.171227][   T50] es2_ap_driver 9-1:1.0: probe with driver es2_ap_driver failed with error -110
[   78.396475][ T5927] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[   78.404562][ T5927] usb 7-1: USB disconnect, device number 5
[   78.431874][ T7252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.433023][ T7252] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.753805][ T7266] Could not find key with description: [syzlecryptfs_fne]
[   78.753821][ T7266] process_request_key_err: No key
[   78.753827][ T7266] Could not find valid key in user session keyring for sig specified in mount option: [syzlecryptfs_fne]
[   78.753838][ T7266] One or more global auth toks could not properly register; rc = [-2]
[   78.753867][ T7266] Error validating options; rc = [-2]
[   78.945916][ T7277] FAULT_INJECTION: forcing a failure.
[   78.945916][ T7277] name failslab, interval 1, probability 0, space 0, times 0
[   78.945948][ T7277] CPU: 0 UID: 0 PID: 7277 Comm: syz.1.386 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   78.945973][ T7277] Tainted: [L]=SOFTLOCKUP
[   78.945980][ T7277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   78.945991][ T7277] Call Trace:
[   78.945998][ T7277]  <TASK>
[   78.946006][ T7277]  dump_stack_lvl+0x100/0x190
[   78.946050][ T7277]  should_fail_ex.cold+0x5/0xa
[   78.946080][ T7277]  should_failslab+0xc2/0x120
[   78.946114][ T7277]  __kmalloc_cache_noprof+0x91/0x6d0
[   78.946135][ T7277]  ? proc_init_fs_context+0x329/0x620
[   78.946160][ T7277]  ? fscontext_alloc_log+0x4a/0x1b0
[   78.946191][ T7277]  fscontext_alloc_log+0x4a/0x1b0
[   78.946217][ T7277]  __x64_sys_fsopen+0x1d7/0x2d0
[   78.946243][ T7277]  do_syscall_64+0x123/0x790
[   78.946274][ T7277]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.946293][ T7277] RIP: 0033:0x7f616719f559
[   78.946308][ T7277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   78.946326][ T7277] RSP: 002b:00007f616812c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[   78.946354][ T7277] RAX: ffffffffffffffda RBX: 00007f6167425fa0 RCX: 00007f616719f559
[   78.946366][ T7277] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0
[   78.946377][ T7277] RBP: 00007f6167236b20 R08: 0000000000000000 R09: 0000000000000000
[   78.946388][ T7277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   78.946399][ T7277] R13: 00007f6167426038 R14: 00007f6167425fa0 R15: 00007ffd15af9138
[   78.946425][ T7277]  </TASK>
[   79.010680][ T7283] netlink: 16 bytes leftover after parsing attributes in process `syz.1.386'.
[   79.087793][ T7282] netlink: 'syz.2.388': attribute type 8 has an invalid length.
[   79.210091][ T7291] pimreg: entered allmulticast mode
[   79.318536][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.392'.
[   79.319028][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.392'.
[   79.319054][ T7297] netlink: 'syz.3.392': attribute type 30 has an invalid length.
[   79.333658][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.392'.
[   79.333698][ T7297] netlink: 'syz.3.392': attribute type 30 has an invalid length.
[   79.344043][ T7297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7297 comm=syz.3.392
[   79.344072][ T7297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=7297 comm=syz.3.392
[   79.357566][ T7299] netlink: 348 bytes leftover after parsing attributes in process `syz.2.393'.
[   79.361762][ T5588] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   79.361806][ T5588] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   79.361840][ T5588] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   79.361874][ T5588] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   79.437335][ T7306] tmpfs: Bad value for 'mpol'
[   79.461665][ T7308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.461924][ T7308] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.527519][ T7315] x_tables: duplicate underflow at hook 1
[   79.819835][ T5927] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   79.979035][ T5927] usb 7-1: Using ep0 maxpacket: 32
[   79.979759][ T5927] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   79.981061][ T5927] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[   79.986545][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   79.986568][ T5927] usb 7-1: Product: syz
[   79.986581][ T5927] usb 7-1: Manufacturer: syz
[   79.986593][ T5927] usb 7-1: SerialNumber: syz
[   79.990107][ T5927] usb 7-1: config 0 descriptor??
[   79.991947][ T7317] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[   79.995355][ T5927] hub 7-1:0.0: bad descriptor, ignoring hub
[   79.995375][ T5927] hub 7-1:0.0: probe with driver hub failed with error -5
[   80.054429][ T5927] usb 9-1: USB disconnect, device number 2
[   80.103835][   T42] kauditd_printk_skb: 42 callbacks suppressed
[   80.103853][   T42] audit: type=1400 audit(1792767953.204:49225): avc:  denied  { setattr } for  pid=7328 comm="syz.4.403" path="/dev/vmci" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   80.104377][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'.
[   80.327354][   T42] audit: type=1807 audit(1792767953.424:49226): UNKNOWN=me res=0
[   80.327670][   T42] audit: type=1802 audit(1792767953.424:49227): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.4.405" res=0 errno=-22
[   80.328169][ T7337] ima: policy update failed
[   80.328299][   T42] audit: type=1802 audit(1792767953.424:49228): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.4.405" res=0 errno=-22
[   80.615810][ T5927] usb 7-1: USB disconnect, device number 6
[   80.709022][   T58] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   80.778987][ T5927] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[   80.868989][   T58] usb 9-1: Using ep0 maxpacket: 16
[   80.870667][   T58] usb 9-1: New USB device found, idVendor=1a8d, idProduct=1008, bcdDevice=5d.37
[   80.871437][   T58] usb 9-1: config 14 has an invalid interface number: 233 but max is 0
[   80.871451][   T58] usb 9-1: config 14 has no interface number 0
[   80.871471][   T58] usb 9-1: config 14 interface 233 altsetting 3 endpoint 0x6 has invalid maxpacket 576, setting to 64
[   80.871484][   T58] usb 9-1: config 14 interface 233 altsetting 3 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[   80.871498][   T58] usb 9-1: config 14 interface 233 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[   80.871509][   T58] usb 9-1: config 14 interface 233 altsetting 3 has a duplicate endpoint with address 0x9, skipping
[   80.871520][   T58] usb 9-1: config 14 interface 233 altsetting 3 has a duplicate endpoint with address 0x9, skipping
[   80.871531][   T58] usb 9-1: config 14 interface 233 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64
[   80.871544][   T58] usb 9-1: config 14 interface 233 altsetting 3 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[   80.871577][   T58] usb 9-1: config 14 interface 233 altsetting 3 has a duplicate endpoint with address 0x4, skipping
[   80.871589][   T58] usb 9-1: config 14 interface 233 altsetting 3 endpoint 0x7 has invalid maxpacket 2031, setting to 64
[   80.871601][   T58] usb 9-1: config 14 interface 233 has no altsetting 0
[   80.873146][   T58] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.873158][   T58] usb 9-1: Product: �푞ￊ�蠗䫉類ᧃ韔⽣㖭䇊䭳�웉�ᇻ漷鬿뺅鮃欳绵䔪邞बី撎ꅑ뱘鱶녴묩㲛㙆ꟃꋂ㨪뭾襨츮䶰�뵸⦚ꎷ�簲︭麓궉櫭阦�짒⃯髭칙�ᖻ䩻��
[   80.873172][   T58] usb 9-1: Manufacturer: à §
[   80.873179][   T58] usb 9-1: SerialNumber: �
[   80.942278][ T5927] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   80.943439][ T5927] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64
[   80.945738][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   80.945751][ T5927] usb 7-1: Product: syz
[   80.945758][ T5927] usb 7-1: Manufacturer: ɛ틄ﴼꇓ譫民＇釔蓥�蘸뀱踅﷒ˉ
[   80.945767][ T5927] usb 7-1: SerialNumber: 侮锛瓪꼼ꠈ�猩ᑻ㬋铋鞳䇈�첧ﾩ惡ڎ⿒�꣞皮蕵벽┛ɵ�훋醺윫�ᎅ尅碩跒徿�뺖ꮗ䎺譡봳ୖ婢ꊗꠕ蕗鲄�涯‸䑠Ⲿ蜿僎�ʀ��쉀
[   80.947176][ T5927] usb 7-1: config 0 descriptor??
[   80.947711][ T7332] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   80.948815][ T5927] hub 7-1:0.0: bad descriptor, ignoring hub
[   80.948828][ T5927] hub 7-1:0.0: probe with driver hub failed with error -5
[   81.100028][   T42] audit: type=1400 audit(1792767954.204:49229): avc:  denied  { map } for  pid=7343 comm="syz.1.408" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   81.100220][   T42] audit: type=1400 audit(1792767954.204:49230): avc:  denied  { execute } for  pid=7343 comm="syz.1.408" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   81.251583][ T7352] No such timeout policy "syz1"
[   81.261036][ T5927] usb 7-1: USB disconnect, device number 7
[   81.345533][ T7354] FAULT_INJECTION: forcing a failure.
[   81.345533][ T7354] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   81.345554][ T7354] CPU: 2 UID: 0 PID: 7354 Comm: syz.3.412 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   81.345570][ T7354] Tainted: [L]=SOFTLOCKUP
[   81.345574][ T7354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   81.345580][ T7354] Call Trace:
[   81.345584][ T7354]  <TASK>
[   81.345589][ T7354]  dump_stack_lvl+0x100/0x190
[   81.345613][ T7354]  should_fail_ex.cold+0x5/0xa
[   81.345643][ T7354]  _copy_to_user+0x32/0xd0
[   81.345657][ T7354]  simple_read_from_buffer+0xcb/0x170
[   81.345677][ T7354]  proc_fail_nth_read+0x1af/0x230
[   81.345696][ T7354]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   81.345714][ T7354]  ? rw_verify_area+0xce/0x6d0
[   81.345727][ T7354]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   81.345745][ T7354]  vfs_read+0x1e4/0xb40
[   81.345760][ T7354]  ? lock_acquire+0x1d1/0x380
[   81.345771][ T7354]  ? __fget_files+0x34/0x3d0
[   81.345788][ T7354]  ? __pfx_vfs_read+0x10/0x10
[   81.345800][ T7354]  ? find_held_lock+0x2b/0x80
[   81.345816][ T7354]  ? __fget_files+0x215/0x3d0
[   81.345835][ T7354]  ? __fget_files+0x21f/0x3d0
[   81.345855][ T7354]  ksys_read+0x12a/0x250
[   81.345869][ T7354]  ? __pfx_ksys_read+0x10/0x10
[   81.345887][ T7354]  do_syscall_64+0x123/0x790
[   81.345904][ T7354]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.345916][ T7354] RIP: 0033:0x7f0300d5fd8e
[   81.345925][ T7354] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   81.345936][ T7354] RSP: 002b:00007f0301ba8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   81.345947][ T7354] RAX: ffffffffffffffda RBX: 00007f0301ba96c0 RCX: 00007f0300d5fd8e
[   81.345955][ T7354] RDX: 000000000000000f RSI: 00007f0301ba90a0 RDI: 0000000000000005
[   81.345961][ T7354] RBP: 00007f0301ba9090 R08: 0000000000000000 R09: 0000000000000000
[   81.345967][ T7354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   81.345974][ T7354] R13: 00007f0301026038 R14: 00007f0301025fa0 R15: 00007ffc5c1b3198
[   81.345988][ T7354]  </TASK>
[   81.689258][ T7378] netlink: 'syz.2.419': attribute type 39 has an invalid length.
[   81.799824][ T7383] syzkaller1: entered promiscuous mode
[   81.799839][ T7383] syzkaller1: entered allmulticast mode
[   81.878144][ T7391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59426 sclass=netlink_route_socket pid=7391 comm=syz.2.423
[   82.029654][   T42] audit: type=1400 audit(1792767955.134:49231): avc:  denied  { create } for  pid=7395 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   82.032050][   T42] audit: type=1400 audit(1792767955.134:49232): avc:  denied  { bind } for  pid=7395 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   82.053015][   T42] audit: type=1400 audit(1792767955.144:49233): avc:  denied  { listen } for  pid=7395 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   82.053531][   T42] audit: type=1400 audit(1792767955.154:49234): avc:  denied  { write } for  pid=7395 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   82.181362][ T7401] overlayfs: conflicting lowerdir path
[   82.421463][ T7413] batman_adv: batadv0: Adding interface: syzkaller0
[   82.421476][ T7413] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.421587][ T7413] batman_adv: batadv0: Interface activated: syzkaller0
[   82.434179][ T7412] batman_adv: batadv0: Interface deactivated: syzkaller0
[   82.441986][ T7412] batman_adv: batadv0: Removing interface: syzkaller0
[   82.681724][ T5787] Bluetooth: hci3: SCO packet too small
[   83.185865][ T7431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.440'.
[   83.194350][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.440'.
[   83.238354][ T7433] misc userio: Invalid payload size
[   83.273190][ T7435] FAULT_INJECTION: forcing a failure.
[   83.273190][ T7435] name failslab, interval 1, probability 0, space 0, times 0
[   83.273212][ T7435] CPU: 2 UID: 0 PID: 7435 Comm: syz.3.442 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   83.273227][ T7435] Tainted: [L]=SOFTLOCKUP
[   83.273231][ T7435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   83.273250][ T7435] Call Trace:
[   83.273255][ T7435]  <TASK>
[   83.273259][ T7435]  dump_stack_lvl+0x100/0x190
[   83.273279][ T7435]  should_fail_ex.cold+0x5/0xa
[   83.273296][ T7435]  should_failslab+0xc2/0x120
[   83.273313][ T7435]  __kmalloc_cache_noprof+0x91/0x6d0
[   83.273327][ T7435]  ? rds_cong_from_addr+0x50/0x540
[   83.273352][ T7435]  rds_cong_from_addr+0x50/0x540
[   83.273368][ T7435]  ? __rds_conn_create+0x19b4/0x2650
[   83.273381][ T7435]  rds_cong_get_maps+0x21/0xe0
[   83.273397][ T7435]  ? __ipv6_addr_type+0xe8/0x2e0
[   83.273413][ T7435]  __rds_conn_create+0xa7e/0x2650
[   83.273424][ T7435]  ? do_raw_spin_unlock+0x145/0x1e0
[   83.273444][ T7435]  ? __pfx___rds_conn_create+0x10/0x10
[   83.273460][ T7435]  rds_conn_create_outgoing+0x44/0x60
[   83.273474][ T7435]  rds_sendmsg+0x10da/0x34c0
[   83.273495][ T7435]  ? __pfx_rds_sendmsg+0x10/0x10
[   83.273517][ T7435]  ? selinux_socket_sendmsg+0x198/0x2f0
[   83.273534][ T7435]  ? ____sys_sendmsg+0xa99/0xc30
[   83.273546][ T7435]  ____sys_sendmsg+0xa99/0xc30
[   83.273557][ T7435]  ? __pfx_rds_sendmsg+0x10/0x10
[   83.273572][ T7435]  ? __pfx_____sys_sendmsg+0x10/0x10
[   83.273588][ T7435]  ? lock_acquire+0x1d1/0x380
[   83.273599][ T7435]  ? get_pid_task+0x2a/0x250
[   83.273615][ T7435]  ___sys_sendmsg+0x190/0x1e0
[   83.273631][ T7435]  ? __pfx____sys_sendmsg+0x10/0x10
[   83.273644][ T7435]  ? get_pid_task+0x106/0x250
[   83.273663][ T7435]  ? find_held_lock+0x2b/0x80
[   83.273689][ T7435]  __sys_sendmsg+0x160/0x210
[   83.273705][ T7435]  ? __pfx___sys_sendmsg+0x10/0x10
[   83.273730][ T7435]  do_syscall_64+0x123/0x790
[   83.273747][ T7435]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.273758][ T7435] RIP: 0033:0x7f0300d9f559
[   83.273768][ T7435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   83.273779][ T7435] RSP: 002b:00007f0301ba9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   83.273791][ T7435] RAX: ffffffffffffffda RBX: 00007f0301025fa0 RCX: 00007f0300d9f559
[   83.273798][ T7435] RDX: 0000000004000000 RSI: 0000200000000140 RDI: 0000000000000003
[   83.273804][ T7435] RBP: 00007f0301ba9090 R08: 0000000000000000 R09: 0000000000000000
[   83.273811][ T7435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   83.273817][ T7435] R13: 00007f0301026038 R14: 00007f0301025fa0 R15: 00007ffc5c1b3198
[   83.273832][ T7435]  </TASK>
[   83.420581][   T58] option 9-1:14.233: GSM modem (1-port) converter detected
[   83.434209][   T58] usb 9-1: USB disconnect, device number 3
[   83.447940][ T7439] FAULT_INJECTION: forcing a failure.
[   83.447940][ T7439] name failslab, interval 1, probability 0, space 0, times 0
[   83.447974][ T7439] CPU: 0 UID: 0 PID: 7439 Comm: syz.4.444 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   83.448000][ T7439] Tainted: [L]=SOFTLOCKUP
[   83.448006][ T7439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   83.448019][ T7439] Call Trace:
[   83.448025][ T7439]  <TASK>
[   83.448033][ T7439]  dump_stack_lvl+0x100/0x190
[   83.448065][ T7439]  should_fail_ex.cold+0x5/0xa
[   83.448095][ T7439]  should_failslab+0xc2/0x120
[   83.448124][ T7439]  __kmalloc_cache_noprof+0x91/0x6d0
[   83.448148][ T7439]  ? sctp_auth_shkey_create+0x9e/0x210
[   83.448177][ T7439]  sctp_auth_shkey_create+0x9e/0x210
[   83.448202][ T7439]  sctp_auth_asoc_copy_shkeys+0x1f2/0x360
[   83.448230][ T7439]  sctp_association_new+0x19ab/0x2990
[   83.448265][ T7439]  sctp_connect_new_asoc+0x1a8/0x770
[   83.448294][ T7439]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[   83.448326][ T7439]  ? sctp_get_af_specific+0x62/0x70
[   83.448348][ T7439]  ? sctp_sockaddr_af+0x2a3/0x340
[   83.448372][ T7439]  __sctp_connect+0x3e7/0xc70
[   83.448400][ T7439]  ? lock_acquire+0x1d1/0x380
[   83.448425][ T7439]  ? __pfx___sctp_connect+0x10/0x10
[   83.448453][ T7439]  ? selinux_sctp_bind_connect+0xe0/0x230
[   83.448483][ T7439]  __sctp_setsockopt_connectx+0x100/0x190
[   83.448513][ T7439]  sctp_getsockopt+0x3f06/0x7160
[   83.448541][ T7439]  ? avc_has_perm_noaudit+0x56/0x470
[   83.448567][ T7439]  ? find_held_lock+0x2b/0x80
[   83.448593][ T7439]  ? avc_has_perm_noaudit+0x11e/0x470
[   83.448615][ T7439]  ? avc_has_perm_noaudit+0x11e/0x470
[   83.448645][ T7439]  ? __pfx_sctp_getsockopt+0x10/0x10
[   83.448676][ T7439]  ? __lock_acquire+0x5c0/0x1f40
[   83.448699][ T7439]  ? avc_has_perm+0x135/0x1e0
[   83.448721][ T7439]  ? __pfx_avc_has_perm+0x10/0x10
[   83.448742][ T7439]  ? __might_fault+0xc5/0x140
[   83.448767][ T7439]  ? lock_acquire+0x1d1/0x380
[   83.448787][ T7439]  ? __might_fault+0xc5/0x140
[   83.448808][ T7439]  ? find_held_lock+0x2b/0x80
[   83.448833][ T7439]  ? __might_fault+0xc5/0x140
[   83.448853][ T7439]  ? __might_fault+0xc5/0x140
[   83.448898][ T7439]  ? _copy_from_user+0x59/0xd0
[   83.448921][ T7439]  ? copy_from_sockptr_offset.constprop.0+0xe2/0x150
[   83.448945][ T7439]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[   83.448971][ T7439]  ? __pfx_sock_common_getsockopt+0x10/0x10
[   83.448992][ T7439]  do_sock_getsockopt+0x415/0x570
[   83.449021][ T7439]  ? __pfx_do_sock_getsockopt+0x10/0x10
[   83.449053][ T7439]  ? __fget_files+0x34/0x3d0
[   83.449082][ T7439]  ? find_held_lock+0x2b/0x80
[   83.449115][ T7439]  ? __fget_files+0x21f/0x3d0
[   83.449148][ T7439]  __sys_getsockopt+0x148/0x260
[   83.449184][ T7439]  ? __x64_sys_getsockopt+0xbd/0x160
[   83.449209][ T7439]  __x64_sys_getsockopt+0xbd/0x160
[   83.449234][ T7439]  ? do_syscall_64+0xae/0x790
[   83.449259][ T7439]  ? lockdep_hardirqs_on+0x7d/0x110
[   83.449282][ T7439]  do_syscall_64+0x123/0x790
[   83.449307][ T7439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.449326][ T7439] RIP: 0033:0x7f81ef79f559
[   83.449341][ T7439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   83.449358][ T7439] RSP: 002b:00007f81f06ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[   83.449376][ T7439] RAX: ffffffffffffffda RBX: 00007f81efa25fa0 RCX: 00007f81ef79f559
[   83.449388][ T7439] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003
[   83.449399][ T7439] RBP: 00007f81f06ee090 R08: 0000200000000080 R09: 0000000000000000
[   83.449411][ T7439] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002
[   83.449422][ T7439] R13: 00007f81efa26038 R14: 00007f81efa25fa0 R15: 00007ffcd7068fe8
[   83.449449][ T7439]  </TASK>
[   83.451153][   T58] option 9-1:14.233: device disconnected
[   83.580613][ T7441] kvm: vcpu 0: requested 3072 ns lapic timer period limited to 200000 ns
[   83.714623][ T7453] netlink: 'syz.2.449': attribute type 10 has an invalid length.
[   83.732037][ T7455] ip_tables: iptables: counters copy to user failed while replacing table
[   83.732527][ T7455] ip_tables: iptables: counters copy to user failed while replacing table
[   83.732822][ T7455] ip_tables: iptables: counters copy to user failed while replacing table
[   83.733093][ T7455] ip_tables: iptables: counters copy to user failed while replacing table
[   83.733380][ T7455] ip_tables: iptables: counters copy to user failed while replacing table
[   83.733658][ T7455] ip_tables: iptables: counters copy to user failed while replacing table
[   83.734494][ T7455] ip_tables: iptables: counters copy to user failed while replacing table
[   83.734793][ T7455] ip_tables: iptables: counters copy to user failed while replacing table
[   83.735128][ T7455] ip_tables: iptables: counters copy to user failed while replacing table
[   83.735622][ T7455] ip_tables: iptables: counters copy to user failed while replacing table
[   83.743715][ T7453] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   83.746807][ T7453] team0: Port device wlan0 added
[   84.005723][ T7470] FAULT_INJECTION: forcing a failure.
[   84.005723][ T7470] name failslab, interval 1, probability 0, space 0, times 0
[   84.005746][ T7470] CPU: 2 UID: 0 PID: 7470 Comm: syz.1.454 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   84.005761][ T7470] Tainted: [L]=SOFTLOCKUP
[   84.005766][ T7470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   84.005773][ T7470] Call Trace:
[   84.005777][ T7470]  <TASK>
[   84.005782][ T7470]  dump_stack_lvl+0x100/0x190
[   84.005802][ T7470]  should_fail_ex.cold+0x5/0xa
[   84.005819][ T7470]  should_failslab+0xc2/0x120
[   84.005837][ T7470]  kmem_cache_alloc_noprof+0x92/0x6a0
[   84.005853][ T7470]  ? d_instantiate+0x8a/0xb0
[   84.005864][ T7470]  ? alloc_empty_file+0x5b/0x1c0
[   84.005878][ T7470]  alloc_empty_file+0x5b/0x1c0
[   84.005889][ T7470]  alloc_file_pseudo+0x17e/0x290
[   84.005902][ T7470]  ? __pfx_alloc_file_pseudo+0x10/0x10
[   84.005914][ T7470]  ? alloc_fd+0x471/0x7a0
[   84.005935][ T7470]  sock_alloc_file+0x50/0x210
[   84.005953][ T7470]  sctp_getsockopt_peeloff_common.constprop.0+0x378/0x640
[   84.005971][ T7470]  ? __pfx_sctp_getsockopt_peeloff_common.constprop.0+0x10/0x10
[   84.005992][ T7470]  sctp_getsockopt+0x2fb2/0x7160
[   84.006008][ T7470]  ? avc_has_perm_noaudit+0x56/0x470
[   84.006024][ T7470]  ? find_held_lock+0x2b/0x80
[   84.006041][ T7470]  ? avc_has_perm_noaudit+0x11e/0x470
[   84.006056][ T7470]  ? avc_has_perm_noaudit+0x11e/0x470
[   84.006072][ T7470]  ? __pfx_sctp_getsockopt+0x10/0x10
[   84.006092][ T7470]  ? __pfx_avc_has_perm+0x10/0x10
[   84.006105][ T7470]  ? futex_unqueue+0x13d/0x2c0
[   84.006123][ T7470]  ? lock_acquire+0x1d1/0x380
[   84.006134][ T7470]  ? __might_fault+0xc5/0x140
[   84.006168][ T7470]  ? find_held_lock+0x2b/0x80
[   84.006184][ T7470]  ? __might_fault+0xc5/0x140
[   84.006196][ T7470]  ? __might_fault+0xc5/0x140
[   84.006213][ T7470]  ? _copy_from_user+0x59/0xd0
[   84.006227][ T7470]  ? copy_from_sockptr_offset.constprop.0+0xe2/0x150
[   84.006242][ T7470]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[   84.006259][ T7470]  ? __pfx_sock_common_getsockopt+0x10/0x10
[   84.006272][ T7470]  do_sock_getsockopt+0x415/0x570
[   84.006292][ T7470]  ? __pfx_do_sock_getsockopt+0x10/0x10
[   84.006312][ T7470]  ? __fget_files+0x34/0x3d0
[   84.006330][ T7470]  ? find_held_lock+0x2b/0x80
[   84.006350][ T7470]  ? __fget_files+0x21f/0x3d0
[   84.006370][ T7470]  __sys_getsockopt+0x148/0x260
[   84.006391][ T7470]  ? __x64_sys_getsockopt+0xbd/0x160
[   84.006407][ T7470]  __x64_sys_getsockopt+0xbd/0x160
[   84.006423][ T7470]  ? do_syscall_64+0xae/0x790
[   84.006438][ T7470]  ? lockdep_hardirqs_on+0x7d/0x110
[   84.006452][ T7470]  do_syscall_64+0x123/0x790
[   84.006467][ T7470]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.006479][ T7470] RIP: 0033:0x7f616719f559
[   84.006489][ T7470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   84.006501][ T7470] RSP: 002b:00007f616812c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[   84.006514][ T7470] RAX: ffffffffffffffda RBX: 00007f6167425fa0 RCX: 00007f616719f559
[   84.006521][ T7470] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000004
[   84.006527][ T7470] RBP: 00007f6167236b20 R08: 00002000000003c0 R09: 0000000000000000
[   84.006534][ T7470] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000
[   84.006541][ T7470] R13: 00007f6167426038 R14: 00007f6167425fa0 R15: 00007ffd15af9138
[   84.006556][ T7470]  </TASK>
[   84.289907][   T58] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   84.463125][   T58] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   84.463163][   T58] usb 6-1: too many configurations: 91, using maximum allowed: 8
[   84.478383][   T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.478408][   T58] usb 6-1: Product: syz
[   84.478420][   T58] usb 6-1: Manufacturer: syz
[   84.478433][   T58] usb 6-1: SerialNumber: syz
[   84.564123][ T7483] misc userio: Begin command sent, but we're already running
[   84.724695][   T58] rtl8150 6-1:1.0: couldn't reset the device
[   84.724964][   T58] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5
[   84.736266][   T58] usb 6-1: USB disconnect, device number 3
[   84.947389][ T7488] netlink: 24 bytes leftover after parsing attributes in process `syz.4.462'.
[   85.010808][ T7491] netlink: 'syz.4.463': attribute type 1 has an invalid length.
[   85.115419][ T1164] nvmet: connect request for invalid subsystem teotsubsys!
[   85.117747][ T7495] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "teotsubsys"
[   85.303118][ T7500] comedi comedi0: Minor 2208 is invalid!
[   85.334515][   T77] nvmet: connect request for invalid subsystem testsubsys!
[   85.334667][ T7500] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys"
[   85.869144][ T5870] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[   86.019586][ T5870] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   86.020438][ T5870] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   86.020455][ T5870] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.020466][ T5870] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   86.020485][ T5870] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.022105][ T5870] usb 9-1: config 0 descriptor??
[   86.443389][ T5870] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   86.443425][ T5870] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   86.443443][ T5870] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   86.443460][ T5870] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   86.443477][ T5870] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   86.443494][ T5870] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   86.443511][ T5870] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   86.443550][ T5870] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   86.443572][ T5870] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   86.443592][ T5870] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   86.465583][ T5870] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   86.551340][ T7526] capability: warning: `syz.3.475' uses 32-bit capabilities (legacy support in use)
[   86.551585][ T7526] program syz.3.475 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   86.554351][   T42] kauditd_printk_skb: 7 callbacks suppressed
[   86.554361][   T42] audit: type=1400 audit(1792767959.654:49242): avc:  denied  { open } for  pid=7525 comm="syz.3.475" path="/dev/ptyqb" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[   86.556494][   T42] audit: type=1400 audit(1792767959.654:49243): avc:  denied  { ioctl } for  pid=7525 comm="syz.3.475" path="/dev/ptyqb" dev="devtmpfs" ino=138 ioctlcmd=0x80045439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[   86.738105][   T42] audit: type=1326 audit(1792767959.834:49244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7527 comm="syz.1.476" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616719f559 code=0x7fc00000
[   86.738169][   T42] audit: type=1326 audit(1792767959.834:49245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7527 comm="syz.1.476" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616719f559 code=0x7fc00000
[   86.738207][   T42] audit: type=1326 audit(1792767959.834:49246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7527 comm="syz.1.476" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616719f559 code=0x7fc00000
[   86.738244][   T42] audit: type=1326 audit(1792767959.834:49247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7527 comm="syz.1.476" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616719f559 code=0x7fc00000
[   86.738281][   T42] audit: type=1326 audit(1792767959.834:49248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7527 comm="syz.1.476" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616719f559 code=0x7fc00000
[   86.738318][   T42] audit: type=1326 audit(1792767959.834:49249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7527 comm="syz.1.476" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616719f559 code=0x7fc00000
[   86.738354][   T42] audit: type=1326 audit(1792767959.834:49250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7527 comm="syz.1.476" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616719f559 code=0x7fc00000
[   86.738387][   T42] audit: type=1326 audit(1792767959.834:49251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7527 comm="syz.1.476" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616719f559 code=0x7fc00000
[   87.034191][ T7544] FAULT_INJECTION: forcing a failure.
[   87.034191][ T7544] name failslab, interval 1, probability 0, space 0, times 0
[   87.034212][ T7544] CPU: 3 UID: 0 PID: 7544 Comm: syz.2.480 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   87.034228][ T7544] Tainted: [L]=SOFTLOCKUP
[   87.034232][ T7544] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   87.034239][ T7544] Call Trace:
[   87.034242][ T7544]  <TASK>
[   87.034247][ T7544]  dump_stack_lvl+0x100/0x190
[   87.034277][ T7544]  should_fail_ex.cold+0x5/0xa
[   87.034305][ T7544]  should_failslab+0xc2/0x120
[   87.034327][ T7544]  __kmalloc_noprof+0xfc/0x840
[   87.034342][ T7544]  ? rcu_is_watching+0x13/0xc0
[   87.034358][ T7544]  ? tomoyo_encode2+0xfb/0x3c0
[   87.034372][ T7544]  tomoyo_encode2+0xfb/0x3c0
[   87.034385][ T7544]  tomoyo_encode+0x29/0x50
[   87.034396][ T7544]  tomoyo_realpath_from_path+0x18c/0x690
[   87.034411][ T7544]  tomoyo_path_number_perm+0x23c/0x580
[   87.034427][ T7544]  ? tomoyo_path_number_perm+0x22e/0x580
[   87.034444][ T7544]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   87.034466][ T7544]  ? __lock_acquire+0x5c0/0x1f40
[   87.034485][ T7544]  ? __fget_files+0x34/0x3d0
[   87.034502][ T7544]  ? find_held_lock+0x2b/0x80
[   87.034518][ T7544]  ? hook_file_ioctl_common+0x140/0x440
[   87.034540][ T7544]  ? __fget_files+0x21f/0x3d0
[   87.034559][ T7544]  security_file_ioctl+0xd3/0x230
[   87.034577][ T7544]  __x64_sys_ioctl+0xb7/0x210
[   87.034592][ T7544]  do_syscall_64+0x123/0x790
[   87.034612][ T7544]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.034623][ T7544] RIP: 0033:0x7ff51cf9f559
[   87.034633][ T7544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   87.034644][ T7544] RSP: 002b:00007ff51de4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   87.034661][ T7544] RAX: ffffffffffffffda RBX: 00007ff51d225fa0 RCX: 00007ff51cf9f559
[   87.034668][ T7544] RDX: 0000200000000300 RSI: 00000000c0184d03 RDI: 0000000000000003
[   87.034675][ T7544] RBP: 00007ff51de4d090 R08: 0000000000000000 R09: 0000000000000000
[   87.034681][ T7544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   87.034688][ T7544] R13: 00007ff51d226038 R14: 00007ff51d225fa0 R15: 00007ffee5696688
[   87.034702][ T7544]  </TASK>
[   87.034713][ T7544] ERROR: Out of memory at tomoyo_realpath_from_path.
[   87.152317][ T5870] usb 9-1: USB disconnect, device number 4
[   87.260420][ T7554] input: syz0 as /devices/virtual/input/input10
[   87.380131][ T7573] netlink: 'syz.4.493': attribute type 16 has an invalid length.
[   87.380151][ T7573] netlink: 52 bytes leftover after parsing attributes in process `syz.4.493'.
[   87.382019][ T7572] 9p: p9: multiple sources not supported
[   87.387695][ T7572] FAULT_INJECTION: forcing a failure.
[   87.387695][ T7572] name failslab, interval 1, probability 0, space 0, times 0
[   87.387724][ T7572] CPU: 0 UID: 0 PID: 7572 Comm: syz.1.492 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   87.387749][ T7572] Tainted: [L]=SOFTLOCKUP
[   87.387755][ T7572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   87.387765][ T7572] Call Trace:
[   87.387773][ T7572]  <TASK>
[   87.387779][ T7572]  dump_stack_lvl+0x100/0x190
[   87.387810][ T7572]  should_fail_ex.cold+0x5/0xa
[   87.387836][ T7572]  should_failslab+0xc2/0x120
[   87.387864][ T7572]  __kvmalloc_node_noprof+0x113/0x9b0
[   87.387888][ T7572]  ? __kmalloc_cache_noprof+0x241/0x6d0
[   87.387908][ T7572]  ? percpu_ref_init+0xec/0x3f0
[   87.387934][ T7572]  ? io_alloc_cache_init+0x38/0x170
[   87.387964][ T7572]  io_alloc_cache_init+0x38/0x170
[   87.387991][ T7572]  io_uring_setup.cold+0x46e/0x1c7e
[   87.388010][ T7572]  ? lock_acquire+0x1d1/0x380
[   87.388030][ T7572]  ? avc_has_perm_noaudit+0x56/0x470
[   87.388052][ T7572]  ? __pfx_io_uring_setup+0x10/0x10
[   87.388071][ T7572]  ? find_held_lock+0x2b/0x80
[   87.388095][ T7572]  ? avc_has_perm_noaudit+0x11e/0x470
[   87.388121][ T7572]  ? avc_has_perm_noaudit+0x11e/0x470
[   87.388173][ T7572]  ? xfd_validate_state+0x129/0x190
[   87.388201][ T7572]  __x64_sys_io_uring_setup+0xc2/0x170
[   87.388225][ T7572]  do_syscall_64+0x123/0x790
[   87.388251][ T7572]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.388268][ T7572] RIP: 0033:0x7f616719f559
[   87.388284][ T7572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   87.388299][ T7572] RSP: 002b:00007f616812bfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[   87.388318][ T7572] RAX: ffffffffffffffda RBX: 0000200000000740 RCX: 00007f616719f559
[   87.388329][ T7572] RDX: 0000200000000800 RSI: 0000200000000740 RDI: 0000000000000839
[   87.388339][ T7572] RBP: 00007f6167236b20 R08: 0000000000000000 R09: 0000000000000000
[   87.388350][ T7572] R10: 0000200000000840 R11: 0000000000000206 R12: 0000200000000800
[   87.388362][ T7572] R13: 0000200000000840 R14: 00002000000007c0 R15: 00007ffd15af9138
[   87.388386][ T7572]  </TASK>
[   87.391642][ T7572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12321 sclass=netlink_route_socket pid=7572 comm=syz.1.492
[   87.396196][ T7575] 9p: p9: multiple sources not supported
[   87.399192][ T7572] 9p: p9: multiple sources not supported
[   87.399784][ T7572] FAULT_INJECTION: forcing a failure.
[   87.399784][ T7572] name failslab, interval 1, probability 0, space 0, times 0
[   87.399810][ T7572] CPU: 0 UID: 0 PID: 7572 Comm: syz.1.492 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   87.399834][ T7572] Tainted: [L]=SOFTLOCKUP
[   87.399841][ T7572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   87.399850][ T7572] Call Trace:
[   87.399857][ T7572]  <TASK>
[   87.399864][ T7572]  dump_stack_lvl+0x100/0x190
[   87.399888][ T7572]  should_fail_ex.cold+0x5/0xa
[   87.399904][ T7572]  should_failslab+0xc2/0x120
[   87.399921][ T7572]  __kvmalloc_node_noprof+0x113/0x9b0
[   87.399938][ T7572]  ? io_alloc_cache_init+0x38/0x170
[   87.399957][ T7572]  io_alloc_cache_init+0x38/0x170
[   87.399974][ T7572]  io_rsrc_cache_init+0x40/0x50
[   87.399990][ T7572]  io_uring_setup.cold+0x4c0/0x1c7e
[   87.400003][ T7572]  ? lock_acquire+0x1d1/0x380
[   87.400015][ T7572]  ? avc_has_perm_noaudit+0x56/0x470
[   87.400029][ T7572]  ? __pfx_io_uring_setup+0x10/0x10
[   87.400041][ T7572]  ? find_held_lock+0x2b/0x80
[   87.400056][ T7572]  ? avc_has_perm_noaudit+0x11e/0x470
[   87.400069][ T7572]  ? avc_has_perm_noaudit+0x11e/0x470
[   87.400091][ T7572]  ? xfd_validate_state+0x129/0x190
[   87.400107][ T7572]  __x64_sys_io_uring_setup+0xc2/0x170
[   87.400127][ T7572]  do_syscall_64+0x123/0x790
[   87.400143][ T7572]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.400154][ T7572] RIP: 0033:0x7f616719f559
[   87.400164][ T7572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   87.400175][ T7572] RSP: 002b:00007f616812bfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[   87.400186][ T7572] RAX: ffffffffffffffda RBX: 0000200000000740 RCX: 00007f616719f559
[   87.400193][ T7572] RDX: 0000200000000800 RSI: 0000200000000740 RDI: 0000000000000839
[   87.400199][ T7572] RBP: 00007f6167236b20 R08: 0000000000000000 R09: 0000000000000000
[   87.400206][ T7572] R10: 0000200000000840 R11: 0000000000000206 R12: 0000200000000800
[   87.400212][ T7572] R13: 0000200000000840 R14: 00002000000007c0 R15: 00007ffd15af9138
[   87.400227][ T7572]  </TASK>
[   87.400372][ T7572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12321 sclass=netlink_route_socket pid=7572 comm=syz.1.492
[   87.473505][ T7581] syzkaller0: entered promiscuous mode
[   87.473520][ T7581] syzkaller0: entered allmulticast mode
[   87.547147][ T7588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7588 comm=syz.1.496
[   87.601301][ T7594] PM: Enabling pm_trace changes system date and time during resume.
[   87.601301][ T7594] PM: Correct system time has to be restored manually after resume.
[   87.671940][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'.
[   87.672860][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'.
[   87.673237][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'.
[   87.673627][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'.
[   87.690849][ T7593] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[   87.729567][ T7604] fuse: Bad value for 'rootmode'
[   87.732166][ T7602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.502'.
[   87.796123][ T7602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.502'.
[   87.797416][ T7609] rxe_eth0 speed is unknown, defaulting to 1000
[   87.832061][ T7611] rxe_eth0 speed is unknown, defaulting to 1000
[   88.254003][ T7625] FAULT_INJECTION: forcing a failure.
[   88.254003][ T7625] name failslab, interval 1, probability 0, space 0, times 0
[   88.254034][ T7625] CPU: 0 UID: 0 PID: 7625 Comm: syz.4.511 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   88.254060][ T7625] Tainted: [L]=SOFTLOCKUP
[   88.254066][ T7625] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   88.254077][ T7625] Call Trace:
[   88.254083][ T7625]  <TASK>
[   88.254089][ T7625]  dump_stack_lvl+0x100/0x190
[   88.254133][ T7625]  should_fail_ex.cold+0x5/0xa
[   88.254159][ T7625]  should_failslab+0xc2/0x120
[   88.254194][ T7625]  __kmalloc_noprof+0xfc/0x840
[   88.254217][ T7625]  ? __pfx_dynamic_dname+0x10/0x10
[   88.254242][ T7625]  ? tomoyo_encode2+0xfb/0x3c0
[   88.254267][ T7625]  tomoyo_encode2+0xfb/0x3c0
[   88.254288][ T7625]  tomoyo_encode+0x29/0x50
[   88.254306][ T7625]  tomoyo_realpath_from_path+0x18c/0x690
[   88.254332][ T7625]  tomoyo_path_number_perm+0x23c/0x580
[   88.254357][ T7625]  ? tomoyo_path_number_perm+0x22e/0x580
[   88.254385][ T7625]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   88.254422][ T7625]  ? __lock_acquire+0x5c0/0x1f40
[   88.254473][ T7625]  ? __fget_files+0x34/0x3d0
[   88.254502][ T7625]  ? find_held_lock+0x2b/0x80
[   88.254526][ T7625]  ? hook_file_ioctl_common+0x140/0x440
[   88.254554][ T7625]  ? __fget_files+0x21f/0x3d0
[   88.254586][ T7625]  security_file_ioctl+0xd3/0x230
[   88.254614][ T7625]  __x64_sys_ioctl+0xb7/0x210
[   88.254640][ T7625]  do_syscall_64+0x123/0x790
[   88.254673][ T7625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.254697][ T7625] RIP: 0033:0x7f81ef79f559
[   88.254713][ T7625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   88.254730][ T7625] RSP: 002b:00007f81f06ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   88.254760][ T7625] RAX: ffffffffffffffda RBX: 00007f81efa25fa0 RCX: 00007f81ef79f559
[   88.254772][ T7625] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   88.254783][ T7625] RBP: 00007f81f06ee090 R08: 0000000000000000 R09: 0000000000000000
[   88.254794][ T7625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   88.254806][ T7625] R13: 00007f81efa26038 R14: 00007f81efa25fa0 R15: 00007ffcd7068fe8
[   88.254833][ T7625]  </TASK>
[   88.254865][ T7625] ERROR: Out of memory at tomoyo_realpath_from_path.
[   88.345883][ T7631] affs: No valid root block on device nullb0
[   88.426056][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.516'.
[   88.426174][ T7637] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.445171][ T7637] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.469262][ T5870] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   88.508728][ T7645] netlink: 'syz.3.519': attribute type 21 has an invalid length.
[   88.635197][ T5870] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[   88.636038][ T5870] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   88.636065][ T5870] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[   88.636078][ T5870] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[   88.636098][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.684612][ T7665] bridge_slave_0: left allmulticast mode
[   88.684630][ T7665] bridge_slave_0: left promiscuous mode
[   88.686226][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.688775][ T7665] bridge_slave_1: left allmulticast mode
[   88.688789][ T7665] bridge_slave_1: left promiscuous mode
[   88.688967][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.703185][ T7665] bond0: (slave bond_slave_0): Releasing backup interface
[   88.715210][ T7665] bond0: (slave bond_slave_1): Releasing backup interface
[   88.722366][ T7665] team0: Port device team_slave_0 removed
[   88.725397][ T7665] team0: Port device team_slave_1 removed
[   88.725786][ T7665] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.725798][ T7665] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.733974][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.525'.
[   88.802105][ T7666] iommufd_mock iommufd_mock0: Adding to iommu group 10
[   89.053224][ T5870] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[   89.053241][ T5870] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[   89.060805][ T5870] cxacru 6-1:1.0: probe with driver cxacru failed with error -71
[   89.065714][ T5870] usb 6-1: USB disconnect, device number 4
[   89.244813][ T7683] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.245089][ T7683] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.265575][ T7687] synth uevent: /bus/platform/drivers/usb-conn-gpio: unknown uevent action string
[   89.293320][ T7683] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.297403][ T7683] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.416945][ T3415] syz0: Port: 1 Link DOWN
[   89.419092][ T6635] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.419122][ T6635] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.419153][ T6635] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.419176][ T6635] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.419205][ T6635] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.419228][ T6635] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.419275][ T6635] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.419299][ T6635] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.616641][ T7696] random: crng reseeded on system resumption
[   89.677852][ T7696] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.802150][ T7696] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.857658][ T7696] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.917205][ T7696] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.061897][ T7710] device-mapper: table: 248:5: integrity: The device is not initializ
** replaying previous printk message **
[   90.061897][ T7710] device-mapper: table: 248:5: integrity: The device is not initialized (-EINVAL)
[   90.061923][ T7710] device-mapper: ioctl: error adding target to table
[   90.064294][ T7717] ==================================================================
[   90.064304][ T7717] BUG: KASAN: slab-use-after-free in snapshot_ctr+0x1c20/0x1fd0
[   90.064344][ T7717] Read of size 8 at addr ffff888025010d98 by task syz.1.540/7717
[   90.064357][ T7717] 
[   90.064368][ T7717] CPU: 3 UID: 0 PID: 7717 Comm: syz.1.540 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   90.064394][ T7717] Tainted: [L]=SOFTLOCKUP
[   90.064401][ T7717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   90.064413][ T7717] Call Trace:
[   90.064419][ T7717]  <TASK>
[   90.064427][ T7717]  dump_stack_lvl+0x100/0x190
[   90.064452][ T7717]  print_report+0x13d/0x4b0
[   90.064487][ T7717]  ? __virt_addr_valid+0x239/0x430
[   90.064502][ T7717]  ? snapshot_ctr+0x1c20/0x1fd0
[   90.064521][ T7717]  kasan_report+0xdf/0x1c0
[   90.064554][ T7717]  ? snapshot_ctr+0x1c20/0x1fd0
[   90.064585][ T7717]  snapshot_ctr+0x1c20/0x1fd0
[   90.064612][ T7717]  ? kasan_save_track+0x14/0x30
[   90.064636][ T7717]  ? __pfx_snapshot_ctr+0x10/0x10
[   90.064663][ T7717]  ? dm_split_args+0xc1/0x570
[   90.064683][ T7717]  ? rcu_is_watching+0x13/0xc0
[   90.064706][ T7717]  ? dm_split_args+0xc1/0x570
[   90.064724][ T7717]  ? kfree+0x1e5/0x6d0
[   90.064742][ T7717]  ? skip_spaces+0xee/0x130
[   90.064764][ T7717]  dm_table_add_target+0x58b/0xee0
[   90.064777][ T7717]  ? __pfx_dm_table_add_target+0x10/0x10
[   90.064791][ T7717]  ? dm_table_create+0x2d3/0x3d0
[   90.064803][ T7717]  table_load+0x3b9/0x7b0
[   90.064814][ T7717]  ? __pfx_table_load+0x10/0x10
[   90.064823][ T7717]  ? __might_fault+0xc5/0x140
[   90.064835][ T7717]  ? __might_fault+0xc5/0x140
[   90.064849][ T7717]  ctl_ioctl+0x4d2/0xcc0
[   90.064887][ T7717]  ? __pfx_table_load+0x10/0x10
[   90.064905][ T7717]  ? __pfx_ctl_ioctl+0x10/0x10
[   90.064946][ T7717]  ? selinux_file_ioctl+0x1e0/0x290
[   90.064966][ T7717]  dm_ctl_ioctl+0x22/0x30
[   90.064990][ T7717]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[   90.065013][ T7717]  __x64_sys_ioctl+0x18e/0x210
[   90.065028][ T7717]  do_syscall_64+0x123/0x790
[   90.065051][ T7717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.065064][ T7717] RIP: 0033:0x7f616719f559
[   90.065074][ T7717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.065087][ T7717] RSP: 002b:00007f616810b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   90.065107][ T7717] RAX: ffffffffffffffda RBX: 00007f6167426090 RCX: 00007f616719f559
[   90.065116][ T7717] RDX: 0000200000000540 RSI: 00000000c138fd09 RDI: 0000000000000003
[   90.065126][ T7717] RBP: 00007f6167236b20 R08: 0000000000000000 R09: 0000000000000000
[   90.065137][ T7717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   90.065154][ T7717] R13: 00007f6167426128 R14: 00007f6167426090 R15: 00007ffd15af9138
[   90.065176][ T7717]  </TASK>
[   90.065184][ T7717] 
[   90.065189][ T7717] Allocated by task 7717:
[   90.065199][ T7717]  kasan_save_stack+0x30/0x50
[   90.065222][ T7717]  kasan_save_track+0x14/0x30
[   90.065243][ T7717]  __kasan_kmalloc+0xaa/0xb0
[   90.065265][ T7717]  __kmalloc_cache_node_noprof+0x30c/0x710
[   90.065282][ T7717]  dm_get_table_device+0x2fc/0x820
[   90.065296][ T7717]  dm_get_device+0x525/0x7e0
[   90.065306][ T7717]  snapshot_ctr+0x201/0x1fd0
[   90.065321][ T7717]  dm_table_add_target+0x58b/0xee0
[   90.065332][ T7717]  table_load+0x3b9/0x7b0
[   90.065340][ T7717]  ctl_ioctl+0x4d2/0xcc0
[   90.065354][ T7717]  dm_ctl_ioctl+0x22/0x30
[   90.065368][ T7717]  __x64_sys_ioctl+0x18e/0x210
[   90.065380][ T7717]  do_syscall_64+0x123/0x790
[   90.065393][ T7717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.065403][ T7717] 
[   90.065405][ T7717] Freed by task 7717:
[   90.065410][ T7717]  kasan_save_stack+0x30/0x50
[   90.065424][ T7717]  kasan_save_track+0x14/0x30
[   90.065441][ T7717]  kasan_save_free_info+0x3b/0x70
[   90.065458][ T7717]  __kasan_slab_free+0x5f/0x80
[   90.065480][ T7717]  kfree+0x22b/0x6d0
[   90.065496][ T7717]  dm_put_table_device+0x2bf/0x380
[   90.065519][ T7717]  dm_get_device+0x3f1/0x7e0
[   90.065535][ T7717]  snapshot_ctr+0x326/0x1fd0
[   90.065558][ T7717]  dm_table_add_target+0x58b/0xee0
[   90.065573][ T7717]  table_load+0x3b9/0x7b0
[   90.065581][ T7717]  ctl_ioctl+0x4d2/0xcc0
[   90.065595][ T7717]  dm_ctl_ioctl+0x22/0x30
[   90.065614][ T7717]  __x64_sys_ioctl+0x18e/0x210
[   90.065634][ T7717]  do_syscall_64+0x123/0x790
[   90.065654][ T7717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.065672][ T7717] 
[   90.065676][ T7717] The buggy address belongs to the object at ffff888025010d80
[   90.065676][ T7717]  which belongs to the cache kmalloc-96 of size 96
[   90.065689][ T7717] The buggy address is located 24 bytes inside of
[   90.065689][ T7717]  freed 96-byte region [ffff888025010d80, ffff888025010de0)
[   90.065705][ T7717] 
[   90.065709][ T7717] The buggy address belongs to the physical page:
[   90.065717][ T7717] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25010
[   90.065732][ T7717] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   90.065745][ T7717] page_type: f5(slab)
[   90.065759][ T7717] raw: 00fff00000000000 ffff88801d442280 dead000000000100 dead000000000122
[   90.065776][ T7717] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000
[   90.065787][ T7717] page dumped because: kasan: bad access detected
[   90.065810][ T7717] page_owner tracks the page as allocated
[   90.065816][ T7717] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2, tgid 2 (kthreadd), ts 4159184483
[   90.065845][ T7717]  post_alloc_hook+0xfd/0x120
[   90.065862][ T7717]  get_page_from_freelist+0x110d/0x35d0
[   90.065882][ T7717]  __alloc_frozen_pages_noprof+0x2e9/0x32e0
[   90.065901][ T7717]  new_slab+0xa9/0x6e0
[   90.065912][ T7717]  refill_objects+0xe3/0x410
[   90.065924][ T7717]  __pcs_replace_empty_main+0x35e/0x650
[   90.065940][ T7717]  __kmalloc_cache_node_noprof+0x517/0x710
[   90.065962][ T7717]  __get_vm_area_node+0x124/0x350
[   90.065987][ T7717]  __vmalloc_node_range_noprof+0x268/0x1420
[   90.066013][ T7717]  __vmalloc_node_noprof+0xad/0xf0
[   90.066036][ T7717]  copy_process+0x80b/0x84c0
[   90.066050][ T7717]  kernel_clone+0x176/0x9d0
[   90.066064][ T7717]  kernel_thread+0xdb/0x120
[   90.066078][ T7717]  kthreadd+0x498/0x7a0
[   90.066098][ T7717]  ret_from_fork+0x730/0xd60
[   90.066109][ T7717]  ret_from_fork_asm+0x1a/0x30
[   90.066121][ T7717] page last free pid 2 tgid 2 ts 4158626769 stack trace:
[   90.066131][ T7717]  __free_frozen_pages+0x79f/0x10f0
[   90.066152][ T7717]  __kasan_populate_vmalloc+0x1ea/0x210
[   90.066175][ T7717]  alloc_vmap_area+0x963/0x2bc0
[   90.066199][ T7717]  __get_vm_area_node+0x1ed/0x350
[   90.066222][ T7717]  __vmalloc_node_range_noprof+0x268/0x1420
[   90.066248][ T7717]  __vmalloc_node_noprof+0xad/0xf0
[   90.066273][ T7717]  copy_process+0x80b/0x84c0
[   90.066287][ T7717]  kernel_clone+0x176/0x9d0
[   90.066301][ T7717]  kernel_thread+0xdb/0x120
[   90.066315][ T7717]  kthreadd+0x498/0x7a0
[   90.066338][ T7717]  ret_from_fork+0x730/0xd60
[   90.066354][ T7717]  ret_from_fork_asm+0x1a/0x30
[   90.066370][ T7717] 
[   90.066373][ T7717] Memory state around the buggy address:
[   90.066382][ T7717]  ffff888025010c80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[   90.066393][ T7717]  ffff888025010d00: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[   90.066404][ T7717] >ffff888025010d80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[   90.066413][ T7717]                             ^
[   90.066422][ T7717]  ffff888025010e00: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[   90.066433][ T7717]  ffff888025010e80: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[   90.066442][ T7717] ==================================================================
[   90.073169][ T7717] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   90.386927][ T7717] CPU: 3 UID: 0 PID: 7717 Comm: syz.1.540 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   90.391366][ T7717] Tainted: [L]=SOFTLOCKUP
[   90.393135][ T7717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   90.397176][ T7717] Call Trace:
[   90.398417][ T7717]  <TASK>
[   90.399445][ T7717]  dump_stack_lvl+0x100/0x190
[   90.401453][ T7717]  vpanic+0x553/0x970
[   90.403152][ T7717]  ? __pfx_vpanic+0x10/0x10
[   90.404668][ T7717]  ? mark_held_locks+0x40/0x70
[   90.406662][ T7717]  ? snapshot_ctr+0x1c20/0x1fd0
[   90.408756][ T7717]  panic+0xd1/0xe0
[   90.410351][ T7717]  ? __pfx_panic+0x10/0x10
[   90.412256][ T7717]  ? snapshot_ctr+0x1c20/0x1fd0
[   90.414294][ T7717]  ? preempt_schedule+0x57/0xd0
[   90.416373][ T7717]  check_panic_on_warn.cold+0x19/0x34
[   90.418617][ T7717]  end_report.part.0+0x3a/0x90
[   90.420617][ T7717]  kasan_report.cold+0xe/0x18
[   90.422529][ T7717]  ? snapshot_ctr+0x1c20/0x1fd0
[   90.424617][ T7717]  snapshot_ctr+0x1c20/0x1fd0
[   90.426638][ T7717]  ? kasan_save_track+0x14/0x30
[   90.428726][ T7717]  ? __pfx_snapshot_ctr+0x10/0x10
[   90.430843][ T7717]  ? dm_split_args+0xc1/0x570
[   90.432846][ T7717]  ? rcu_is_watching+0x13/0xc0
[   90.434859][ T7717]  ? dm_split_args+0xc1/0x570
[   90.436799][ T7717]  ? kfree+0x1e5/0x6d0
[   90.438564][ T7717]  ? skip_spaces+0xee/0x130
[   90.440431][ T7717]  dm_table_add_target+0x58b/0xee0
[   90.442553][ T7717]  ? __pfx_dm_table_add_target+0x10/0x10
[   90.444930][ T7717]  ? dm_table_create+0x2d3/0x3d0
[   90.447050][ T7717]  table_load+0x3b9/0x7b0
[   90.448888][ T7717]  ? __pfx_table_load+0x10/0x10
[   90.450933][ T7717]  ? __might_fault+0xc5/0x140
[   90.452937][ T7717]  ? __might_fault+0xc5/0x140
[   90.454936][ T7717]  ctl_ioctl+0x4d2/0xcc0
[   90.456769][ T7717]  ? __pfx_table_load+0x10/0x10
[   90.458833][ T7717]  ? __pfx_ctl_ioctl+0x10/0x10
[   90.460889][ T7717]  ? selinux_file_ioctl+0x1e0/0x290
[   90.463077][ T7717]  dm_ctl_ioctl+0x22/0x30
[   90.464920][ T7717]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[   90.467077][ T7717]  __x64_sys_ioctl+0x18e/0x210
[   90.469110][ T7717]  do_syscall_64+0x123/0x790
[   90.471076][ T7717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.473540][ T7717] RIP: 0033:0x7f616719f559
[   90.475379][ T7717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.483230][ T7717] RSP: 002b:00007f616810b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   90.486700][ T7717] RAX: ffffffffffffffda RBX: 00007f6167426090 RCX: 00007f616719f559
[   90.490012][ T7717] RDX: 0000200000000540 RSI: 00000000c138fd09 RDI: 0000000000000003
[   90.493300][ T7717] RBP: 00007f6167236b20 R08: 0000000000000000 R09: 0000000000000000
[   90.496524][ T7717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   90.499776][ T7717] R13: 00007f6167426128 R14: 00007f6167426090 R15: 00007ffd15af9138
[   90.503033][ T7717]  </TASK>
[   90.505074][ T7717] Kernel Offset: disabled
[   90.506928][ T7717] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:06:03  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000002 RDX=ffff8880206c8000
RSI=ffffffff82011c4e RDI=ffff8880206c8000 RBP=ffffc90000157cd8 RSP=ffffc90000157bc0
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a334120
R12=ffff88806a03d640 R13=ffffed100d407ac9 R14=ffff88806a03d648 R15=0000000000000001
RIP=ffffffff82011c50 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d44e2000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f0301b5da08 CR3=0000000052035000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 726573755f757063 7265705f65676173
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5c1b3686
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5c1b3686 00007ffc5c1b368c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0300e3714a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0300e37184
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0300e372e8
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0300e37176
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff88801e72a580
RSI=ffffffff81ebb496 RDI=ffff88801e72a580 RBP=0000000000000003 RSP=ffffc900007bf950
R8 =0000000000000004 R9 =0000000000000001 R10=0000000000000003 R11=6d2d656369766564
R12=ffffffff90de68a0 R13=ffffc900007bfda8 R14=0000000000000000 R15=ffffc900007bfdb4
RIP=ffffffff820db336 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d45e2000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000555564737000 CR3=00000000521ba000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee5694810 0000003000000018
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f736e6f69746365 6e6e6f632f657375
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee5696b76
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee5696b76 00007ffee5696b7c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff51d03714a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff51d037184
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff51d0372e8
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff51d037176
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000046 RBX=ffffffff8ffec4a0 RCX=ffffc9000d4c72cc RDX=0000000000000000
RSI=ffffffff8e5dfdf4 RDI=ffffffff8c82a080 RBP=ffffffff81bb1d4e RSP=ffffc9000d4c72c0
R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=0000000000019c3e
R12=ffff888024a6cb00 R13=ffffc9000d4c7378 R14=0000000000000202 R15=0000000000000002
RIP=ffffffff81e8bea6 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d46e2000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f0300d8a6c0 CR3=00000000326c6000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85b70ae5 RDI=ffffffff9cee40c0 RBP=ffffffff9cee4080 RSP=ffffc900055d70a0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552
R12=0000000000000000 R13=0000000000000034 R14=000000000000000e R15=ffffc900055d73b8
RIP=ffffffff85b70b0f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f616810b6c0 ffffffff 00c00000
GS =0000 ffff8880d47e2000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c265e0a CR3=0000000036e6c000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0301b5d560
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5c1b3686
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5c1b3686 00007ffc5c1b368c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0300e3714a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0300e37184
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0300e372e8
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0300e37176
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0300ff9600 00007f0300ff95e0 00007f0300ff95e8 00007f0300ff9618
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0300ff95f8 00007f0300ff95c8 00007f0300ff9600 00007f0300ff95e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000