last executing test programs:

24m35.86953113s ago: executing program 2 (id=1576):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/options/bin\x00', 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3e, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)
preadv(r0, &(0x7f0000002a40)=[{&(0x7f0000002900)=""/74, 0x4a}], 0x1, 0x6, 0x100000)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
syz_emit_vhci(&(0x7f0000001b80)=ANY=[@ANYBLOB="02c9301c0018000500"], 0x21)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {0x0, 0x1, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e21, 0x4, @private2}}}, 0xa0)

24m35.741098595s ago: executing program 2 (id=1577):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af83, &(0x7f0000000000)=0x4000000)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = socket$inet6(0x10, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x3, 0xffe00002}, {0x16, 0x0, 0x40}]}, 0x10)
sendto$inet6(r2, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
r3 = eventfd(0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000190)={0x1, r3})
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000000)=""/58, &(0x7f0000000040)=0x3a)
rt_tgsigqueueinfo(0x0, 0x0, 0xffffffff, &(0x7f0000000000)={0x0, 0x0, 0x2127})
close(0x3)
mount(&(0x7f0000000180)=@sg0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, &(0x7f00000001c0)='\x02\x00`\xdeW\xda1')

24m35.619396724s ago: executing program 2 (id=1578):
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080)=0x4, 0x8)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000280)=@userptr={0x7fff, 0x2, 0x4, 0x0, 0x5, {}, {0x2, 0x0, 0x8, 0x7, 0x9, 0x59, "2aabb566"}, 0x7fffffff, 0x2, {0x0}, 0xee})
lsetxattr$system_posix_acl(&(0x7f0000000280)='./bus\x00', &(0x7f0000000340)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1fe)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r5, 0x80044dfe, &(0x7f0000000040))
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x3, 0x41)
write(r6, &(0x7f0000000180)='0', 0x1)
r7 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1424}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MTU={0x8, 0x4, 0xb}]}, 0x4c}}, 0x0)

24m35.399508011s ago: executing program 2 (id=1581):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
timer_settime(0x0, 0x1, 0x0, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x8, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x96}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x90)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x976ac43becae565f, 0x5, {}, {0x1, 0x8, 0x8, 0x4, 0x29, 0x6, "0adb3ff8"}, 0x1000003})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = gettid()
capset(&(0x7f0000000040)={0x19980330, r1}, &(0x7f00000000c0)={0x49, 0x7f, 0xf260, 0x6, 0x5, 0x6})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r3, r2, 0x26, 0x0, @val=@iter={0x0}}, 0x20)

24m35.116719954s ago: executing program 2 (id=1588):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000002b000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e6185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f659cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c61a137462c7f2539479f49d4eb2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc16e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c0977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6040099d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663dd472021d202eedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe3594d4a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed180d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35f267632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12a851810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f314001a62863f6e04b4506ac2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab79e609c57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2b4bb9905a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296e99d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55000048e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cf7800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc699d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7dc1a869fa5551b873e2c838e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0000000000000000000000a0616252abda1102c3eee13eddef0275f21752ee474e32d790ae1f3df77e303ae1968c2a4419d1ca13b97b2c3123ab5b8473b880644e6acfe1d346d1528262c6e91f38029ec24eeb4fe5c1b3726bcfd386ba153fed11692170e5a09432bd02fa9dba861ecad4dbf61a93733a21aeff5f541b8f78bccbf1ac0000000000000000000000145aaaa62ff74b216b2977e7b9261824f663cea60ec6e0fa03bd596cec6d12316c8ed147d4cdd140857444c27c1946b1afcd4ec260694cb71e421744cf1f860840b0decf9be35aeb02d1bf6137b3189edb2d21557e6804ed52305e7deace8b97cd2b423cb79c541762097e29c386634a4bcc3ee91266d808706aadbc4650183d71bf5341edfe4c815d3a87c05d75da20b260d39cdd8559292000cb06faf9972683d379565dcd932fbc6bfb13f938a693252fc3af8088fcf8e06a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
sched_rr_get_interval(r1, &(0x7f0000000100))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1c0)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x10, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/exits\x00', 0x1, 0x0)
write(r2, &(0x7f0000000180)='0', 0x1)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x81, 0x0, &(0x7f0000000500)="e02742e8680d597d164cda7289e9e7dab88c4c2768f1f1094d1e4c46380e2adadae1f18e50a85d120499e362cbf721ba96d19bc536913a1a60dd11628597830dbc326518cb76c9aacb13305dab58cb3a6dfddb3918969d10bb8831b3e55f87aa9a11ad47ca4df71faab1215d53c974ef9e191b98cedc4915fc8cd263d65a86a3dd", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

24m34.555357142s ago: executing program 2 (id=1607):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000306010300000000000000000a0000000900020073797a31000000000500010007000000aee271b7252b1b81bf78a4e3c71fa64574bfa39997b2a8b4d7a47d33d717656ea95967ea20ef216475a883959080bd8be0e34caed5df910d8de9aa490b02624c740e9f82ca04ef93c42fd15426217563ee7f32dc09e3f3ffe12a3ff48f088bf447f22a84b1bc4e374564688fc7"], 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x24000000)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000580)="1c0000001d005f0214ffff11000000f9070000000d00000000d432ee", 0x1c)
ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000000)={0x9, 0x8})

24m14.456610669s ago: executing program 32 (id=1607):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000306010300000000000000000a0000000900020073797a31000000000500010007000000aee271b7252b1b81bf78a4e3c71fa64574bfa39997b2a8b4d7a47d33d717656ea95967ea20ef216475a883959080bd8be0e34caed5df910d8de9aa490b02624c740e9f82ca04ef93c42fd15426217563ee7f32dc09e3f3ffe12a3ff48f088bf447f22a84b1bc4e374564688fc7"], 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x24000000)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000580)="1c0000001d005f0214ffff11000000f9070000000d00000000d432ee", 0x1c)
ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000000)={0x9, 0x8})

22.997486092s ago: executing program 4 (id=3621):
r0 = socket$packet(0x11, 0x2, 0x300)
syz_open_procfs(0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
socket$pppoe(0x18, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00')
readv(r1, 0x0, 0x0)
lseek(r1, 0xffffffffffffffff, 0x1)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r3, &(0x7f0000000000), &(0x7f0000000600)=@udp=r4, 0x2}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000080), &(0x7f0000000280)=r5}, 0x20)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7}, 0x14)
syz_emit_ethernet(0xd81, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xd4b, 0x2b, 0x0, @private2, @local, {[], {0x2100, 0x0, 0xd4b, 0x0, @gue={{0x2, 0x1, 0x3, 0x6, 0x100, @val=0x80}, "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"}}}}}}}, 0x0)
sendmsg$nl_generic(r2, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000002e80), 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)

16.996761382s ago: executing program 3 (id=3624):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', <r2=>0x0})
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001a00130700000000ffdbdf25fe8000000000000000000000000000bbfe880000000000000000000000000897000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)

10.000128766s ago: executing program 0 (id=3632):
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e07032d0c"], 0xa)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xfc, 0xc8, 0xa}}}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0)

9.999633618s ago: executing program 1 (id=3633):
io_setup(0x6, &(0x7f00000003c0))
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f00000000c0)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000200)={r1})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
io_setup(0xffffffff, &(0x7f0000000280))
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r2, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[<r4=>0x0, 0x0, <r5=>0x0], &(0x7f0000000300), 0x3, r3})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000300)={0x3})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000007000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r3], &(0x7f0000000100)=[0x3], &(0x7f0000000640)=[r5, r4, r5], &(0x7f0000000280), 0x0, 0x2})

9.997936796s ago: executing program 4 (id=3634):
r0 = socket$packet(0x11, 0x2, 0x300)
syz_open_procfs(0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
socket$pppoe(0x18, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00')
readv(r1, 0x0, 0x0)
lseek(r1, 0xffffffffffffffff, 0x1)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r2, &(0x7f0000000000), &(0x7f0000000600)=@udp=r3, 0x2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000080), &(0x7f0000000280)=r4}, 0x20)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6}, 0x14)
syz_emit_ethernet(0xd81, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xd4b, 0x2b, 0x0, @private2, @local, {[], {0x2100, 0x0, 0xd4b, 0x0, @gue={{0x2, 0x1, 0x3, 0x6, 0x100, @val=0x80}, "6df79342a9984f6868f47218a5f4500cc3beff6184277dc0935af46ae405b0f24d04b0e93b3edcd14a688b54df418e157fd95c90c70f834ac0bea2479d3ba800bf76b39c8e5b7ad9666f38c1c2631c5727830869c660580f79dad694531ade4367d1106fc0ad8213e615f1a38ae677d7db6b2ba14d3aef04b8133710c146fc41593d398c05333d81eb48dbcbf20946ad8d8f26d30f0a1c31c3d088a11ba975b1c76b70e42312ec79128c7c24b98d98b59d165a8fb9dc005e3f937fcc6842ac6a7a1ee142bb5de997a59244e0137af359a9581add0d7daa2782386fa7ccaeae36aacac738c2571919136e508ed7b1e83e19b4a5fe9b928106f5aea4280a6326f0c45c3de2e56676f83f3248fa49ead371c16f50d1b944161c2941e9d15243a0fe5252156844f0c6a48d1949c1f1d937dd064f3a7bb0c8a3b35733d3bee6ea088ddf96676abe784fbcb2b5e04a4d927de9ed53ca625219b5a4e987bfe3e6e571bad65dab4d081fa472c825b6e7a75b86fad5cc0e1ddf15b3ae6710e79e3de2e98c131b3b936f3add6692c843b06120f06cf36abca6908a4726d63c94823dc4d0767ce7d07c99e06f7fa98f6134976552cfeb3562da5044c3e3593f354cabf5cdd7a5ca7c00546988e1874af4bede37bc5cb0ed6a28f765184c70ee5ab813363df7771682075ae265f8f34846d1008b59eb25bb50070880c608e673c3679324b8d917f4c151f353233b1bfedb66041212067146fc3fa1fa36d547608f16fd8d61c643e9851adcc8f82cbf45c2b69bbf935f7514e2a4082ea9f822bfdf1d26c15379aa46741da7cbc659c51f727b49c10b13d401122392b1910f29634de116710bebe0809573faa1811d985b9f65d736f13578d6bf307486df37ccbd909aec584ed3ff86b64a5cbbe7fd16f265c6dfcbf8696670ab02a2f2849e243510e1eb0a21b0e3a6064a010b63ad960ffe56e5591cf8fa845197ddf1efe9598024b44e76a8baa0fca52388d257aaf94ae3c03323cca842d16bca3a446e41f4be5ab504db78159ae979705c35e603954cb94dc259e3cb879de99212771428c97bea627a753d205696a07419f5f9d99463987cf52cda56ef71847b2ef3b262ce9acb43a8b17d8d255389b79d8a91dc688b41a291f0e60b1e5dc7929787f07a642eec8e644af63e293c4da4fb2248bd66734db7ce0e006c2e4f4510b029d2bc0769487cde6fb2cf6f11e4f78a09a9d041725d96cce9e3cd5a31524eb811beab5e822cf2a8773444878e3f04213b2a6c51157f8174243554223a016613ff6e3e30eab14bb1e859d700cdda697af2ae375304805e7369f30f03ad085864b6af4c3555f2e43b5714f356a6d259b68164b80e0f68cb10d4717d87af1a84383b81bfbae0e821a21cb0dfc47d64da0418aa0009386fbcd6f5476b80578f09faa35bbd3f29cef71292d05fb2581a837282f6beb82ab081c7cd452856b971f0b8dcd95218cab04471c2037f206b71d9e4b6d439adc259a97a640e2d7a907b801db5d702cbc34354d9cfe85d21a1652175fc7fe3c3ab00ed1abe361cf97a445525c22a2f3029dae1dc87e71761f0a13863d364edbae2d04c8ff17624166b5186f2c1def031d1885b242daf26b7df4b2f16b03d7ef02139c8b23bd7aa5869324733ca334d2c3033a543c79ee09b9758a932da58345ea265fb0dbdfc2dd912f16c1b0b02d89aa0e696d07e54d48f982003fae6d448a7d4bac91b2d8c8dc915d647df96b930769eaa54245fa870043dfa7640203897b21fa7c8ec9a861650708007cd89b7ce361a195bc6f8a52a1187a190155e51f2cc3d80b4512e8bcae403eff774626b4f3fdcdefef76f87e625fcddf9c21087d39cfc8ae3673e6b45508c35ac1d53f7c8f708785e84f37aa816f400d7b503b96d4f851005aebc9a6ffb0b3378998a25485fad0d7b6357df8db299ee5d4b1e9cbe93c9a6cf0db6ded788e56bcf2b16363388862679fd0c7e9c779f23ee11849e477c73741a4c0a39ce847e72e2b6062aa2adddb09d12a97a01e7a50e2d697c879ac079e801b34334cd30e0a808d30597609ea61e436abf8d6b3fbe097b75c4dc444af837b37fb34caf05e2e6d814b99133cad4c763415071141b081af7820a020a46f5201f795ab4cbaa06a40e76af5f6981646a59b1467286e42adafafa7cc00ad3b6788cc4ba07a8d81ae00547c4ab8648be22bc0c6621e170b75da679d81b795fa7a7efd368ed0e954081153544cf41b3851d2d00171e30c3b56739c5c853010167c44f53cb5ffb00a5fdfb7a11c1f8961e7c23987e1c4dc7168ea5fa8f49dd72102fd448a8803546238aa63a2571b489430d18921136fe42fabf5086004fe3f6e22fa1dd0b39f92cf22040a4e887690ac0c74de934685b6fe9a0e8df36eaee4dadcaca5c48c5737b2bfb33f094abb8c49b5bc4899b5a95bdd1180cdb37f252436ef3ae35e1e3a3d79144fc3c54b50e15d3535be02fda038f5011fd8951388154039c799f18fac97e4d504dc1b5582e3b799a63e7173a4f6202afd7e8cfe4bd0be65f7816ad744c98d597f506fc545aabba4c480b198e9741f91edbeb1c0c525b02883de998f4eaf646fe3d3c320991180afccc4e7cd9f14c90b6c1366edb82615b4e0ac8862e6ea043bd34c27c978a1c1ac28b47f8f67082a1361359cc038e3617d2ce5123490151b70e030865df89b9510e2643d08ea531231c4db7c1f80eb113267556fe56868b78a6dda37ec946eb6e40b49458b450ed2dcad5445d56d6ee1bc6750a84a36466a2623973047f4a9b5a282d213bd5770d698946528c533f826a6b697a6772e37b28a14422126b7bd869e7f1bab47e5a43fb7f5580db9b318189ed9f661afd5e820132c803b4f4e55e05a1ae22191ae16f8c7bb9c9494f18a8237b4ea61be46b2f0a0a82dc802f82632a2aca37a319b40aa2510db9e3409e52e36dccfc57c8937927d132947d4fd7272266c98d5bad0ff3113e80483f3c508739297626034783f7f09e2c7195d75de6ccb4ff503b0d12987a3db7b183876b4094a687454ea1cf8b62a77ed705524c4d58d3df347204b9b8af5e87db23df3e306141e28f30df24e5b33952918603ab94ce41268d742e1a3cf2b16ca5f77fcaadb0bd9380f353b4f6eb2945e70655edf46b3e5ef427d26a7bf4485cc9bce1f25aca2f70d6a1711c9a9810c36bc441dc829082fd7ab066b4dd3a78274571f5615d070bc5fdf4adaa4d633c233e0744a6f149d6d7d4cf756d4822ea12feeea2419229cffef6e78d950d6ac06b4e750114b304e704e901b1a23d4817e6baced272f157d860ab1b47f1454e9e8d616ef15571a63f4efcd65a57e38b255b84ccffa4dbc39b05e288252b5d435e0035a06e78ca229c108d6152aa86a7c787fb5552e3444544cbadc587a5e8306f44b405dd33258dddb2a0d4e5e2c8a93d939ae357ae4fd595bc78285dfb00b6ed9abae5b5f8492d2d905e68222bb59c7570c06c096407e2d80aadbbe3ce5df92774e83d819be4703b058c7664d6562cfe8311eb948b04c7398f823d28242289f750c2a8459b4469f172416447a340b7e5c78563d3f2f0a905d9fcd137f12c84181ca50eb8e1cf9dbc9f1eb1449bd81739818094dd32c1b7bee15c7734db0faa5c5d167e383e9cba56f039cc5e9bff96b013f7a1b4837e1e6d626c5ce42ccade8d39f9254aaadcd848931429768aecc4a41e69fd9f73df5f46a668f934dc591653280f78b15ea97d71bd1efc6a94b8d9fd284985b9179b4670432b72cc82b59029a3072bd8b60e6f0f7b6ec7799248393d2927f4a330179259d90969675f0a9adcd210e9bb7fd0b59f23172538500c3f3735daf7363c3172a35493a5ec191b54c9e60597caef31bce22945bace7c499bb1d8f770a8c2308bf781532d46f038feaad6886437e1e4d7a66e0286f7e1d38011d373a1e776fd854b81a320892d567a09764e880f67c031cf934d2aeb74e4def0bd1325d866928d303c9371663b87015c2087d681d19dff15b2082ee2afd057062519f8709209cb2b2c92aae8f93310591cd7387d3713011ce713d210c1674306d2aaee87a7b2e79e4588c2d4c3ed28e8e226ada391bcb6371a76de677cff44285217b2ba4487797b68a5ab9277fe78444b9d4b996d1b834a5a44dd140acbcc77e472d99ec90de7cfbb97b5b8bfe1e6c79f97184a15d656e155af64c14bea2ff5609e0f8e96426bba82ab3d5196946b3f6cd5486f005ece8331b6e65072c0e3dbc53c577b0e3475878feecd60b6acb9df65ded5a3cd4f0d3d985539100e99769145bae01286b67a941e976082f798c01acbb9289a30a32a15aaeac54b3fcacbeac9e357ed1749993b7c4f31f9486e0b53d8fb94c1bdd6ce93bcb3f848bd6786846e0c1b628599d78f97ef30520438c7a8c8ce5f94b4fbfb3e6c91da4e28b018d8df80aa2b6de019da19b84bc33d457f5face162d057446e87bcf7cd5eacdb27a9697603e065487b979391aab976265ca13fd04ff056fedd69b5340446920daf8c3cec52ce188c88e6b6b62909dfe85805700abc847aa2567ae3e50d40a5848505309c378c2a751cfd494fe4411b623d5804d9506d3813b429d87e15d1096f919388f28f600b46cf12afa482680503ea86e3f0150e897d44f1f556685fa8efe9e2065a8205ba60a9e74702bd981aa87648a22e755fe23b569dac43cfb08e36cff5f5c2ef65cca2477fa950d6df669393b2ef61ad471fd32cc281371dad43e41fe44b48a356f148ce4fe6eaf9e880bb125c0cd243fd465c3f45"}}}}}}}, 0x0)

9.997083114s ago: executing program 3 (id=3635):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', <r2=>0x0})
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001a00130700000000ffdbdf25fe8000000000000000000000000000bbfe880000000000000000000000000897000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)

9.99443213s ago: executing program 0 (id=3636):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r1=>0x0})
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x81, 0xfffffffb})
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = dup(r5)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c)
sendmsg$inet6(r6, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x9, 0x5, 0x7, 0xfff, 0x0, 0x5, 0x4}, &(0x7f0000000580)=0x9c)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x13a0, 0x11c0, 0xc8, 0x8, 0x0, 0x5803, 0x12d0, 0x2e8, 0x2e8, 0x12d0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x142, 0x1198, 0x11c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x400, 0xa66, 0x2}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x8000000, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1400)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1, 0x5}, @const={0x7ff, {0xfbfe, 0x8, 0x5, 0x81}}})
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x7, &(0x7f00000002c0)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38)
write$binfmt_script(r9, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40)
write$P9_RWSTAT(r9, &(0x7f0000000300)={0x7, 0x7f, 0x2}, 0x7)
close_range(r8, r9, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES16=r6, @ANYBLOB="58237f147775bee1d5f2129ac1738700f948756ddb8b38e92a4bb416bbe9b00bd1e940bf4768bd292624b767a8f6c3639234921eca548102a2794a13307e615a49a6b41460fcf42eadce243b01", @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1})

5.000372623s ago: executing program 0 (id=3637):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r2=>0x0, 0x0, <r3=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000280)={{r1}, r2, 0x4, @unused=[0x4, 0x8, 0x7fffffff, 0x2], @subvolid=0x2})
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001280))
ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f00000012c0)={0x8, 0x1000, 0x101, 0x1, 0xdaea, 0x0, 0x4ad})
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001340), 0x10000, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000001380)=0x7)
ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000013c0)={0x80fd, 0x3})
r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001600)={0x0, &(0x7f0000001400)=[@nested_amd_clgi={0x17f, 0x10}, @uexit={0x0, 0x18, 0x2}, @code={0xa, 0x43, {"0fa22665f20f2add0f01c22e410fc718c44191d9da0faef466b8ce008ec867410f0fa7020000000cb9120000000f3267dcd5"}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_load_syzos={0x136, 0x38, {0x2, 0xaba0, [@rdmsr={0x66, 0x18, {0x12c}}]}}, @code={0xa, 0x61, {"c483dd782b0066baf80cb8f8c7e184ef66bafc0ced66b852008ed8b9e6080000b80f000000ba000000000f3066b845000f00d042dbe4260f7845003e0f0f8a0280000096650f01d1b8010000000f01d9"}}, @nested_load_code={0x12e, 0x61, {0x0, "260f009300980000c401ff2ca6e9637037c46211cf73ad6fb9800000c00f3235010000000f30400f0fe3bbf3420f0926660f5c2666baf80cb844e43680ef66bafc0c66edc4812de3e7"}}, @nested_amd_invlpga={0x17d, 0x20, {0xd000, 0x6d47}}, @nested_create_vm={0x12d, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x7, 0x5}}], 0x1d5})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000001640)={[0x2, 0x4, 0x6, 0x1, 0x0, 0xff, 0x7, 0x3, 0x8, 0x1ff, 0x3, 0x100, 0x81, 0x7, 0xa, 0xfffffffffffffff8], 0x1, 0x10000})
ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000001700)=0x10000)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000001740)={<r6=>0x0, @in={{0x2, 0x4e20, @loopback}}, [0x0, 0x1, 0x4, 0xd0, 0x16, 0x3, 0x6, 0x8, 0x8, 0x100000001, 0xd3a, 0x2, 0x9, 0x10000, 0x6]}, &(0x7f0000001840)=0x100)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000001880)={r6, 0x2, 0x7, [0x8, 0xa, 0x1ff, 0x8, 0x6, 0x0, 0x807f]}, &(0x7f00000018c0)=0x16)
r7 = eventfd(0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000001900)={"765c73d3e07c3bc6636045c4ef2da9ef", r2, r3, {0x80, 0x24c}, {0x7fffffff}, 0x7fff, [0x4, 0x6, 0x1, 0x9, 0x2, 0x7, 0x5, 0x7, 0x8, 0x1b, 0x2, 0xffff, 0x1b40000000, 0x8, 0x3, 0xbda]})
ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0xfff)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000001a00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x79, 0x1803, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x3, 0xdb, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0xcd4}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x5, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xdb, 0x9, 0xb}}]}}}]}}]}}, &(0x7f0000001d80)={0xa, &(0x7f0000001a40)={0xa, 0x6, 0x310, 0x1, 0xed, 0x8, 0x8, 0x6}, 0x107, &(0x7f0000001a80)={0x5, 0xf, 0x107, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "97475af4bad98ab9b678e5b6694e2ee5"}, @ptm_cap={0x3}, @generic={0xd7, 0x10, 0xa, "6959a8413301b355980af7c2355f3221587fa6ec51a0f84a27d2fe907e7aefc595db3376b15382414b51fb85819dab7de55a0be37f890bd61eac62b6381f3756ce7c5093e6011d566d3b3bf0231cd7f73f1fd470a835f0f79ef1c61763d33a84c1d2cc6c4ca1add32809aee8bc2a8f85872ef35f788313faa8cdc9b1ede13c0f4704f810bb821b9e33c7a5faabb3c08df9044df994f0254a173945096f7f91da7716dab48a97be3fcdb7c8eec58975e5eddc20b0f6303be6e99362dc2273cda8e4eea9e7335c6d4fccc0e5e9956fd9bb6b5cb423"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "0ca7e266fbb1917a8818a5d1bf74e225"}]}, 0x5, [{0x41, &(0x7f0000001bc0)=@string={0x41, 0x3, "6b72d6f25588e5786efbbdf4c5bca014c4752932e8bb1cd5a3cf71b2d6ca9f6c3161aaa3e2a40d2c684521a0a249518e7bbf59a9107116075520f75c24b213"}}, {0x4, &(0x7f0000001c40)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x827}}, {0x58, &(0x7f0000001cc0)=@string={0x58, 0x3, "aec85329b17afe9abbeee64d912524c39319411337f76c51a2afa2facd303863b2fecd78748ed4d57b2e191552087dfc131ea9d4dad01ddcdd9cbed9a8db8989f257a691450c12d70461b22d8b4399e526b2afb4a382"}}, {0x4, &(0x7f0000001d40)=@lang_id={0x4, 0x3, 0x2001}}]})
ioctl$SNDRV_PCM_IOCTL_HWSYNC(r1, 0x4122, 0x0)
sendto$phonet(r1, &(0x7f0000001e00)="21624603dfd5c34b8e15590dff5489e34a19f1d421102484767f948612486ca6d0d72f92c35cbca6789c00f61a71831eb0f9e466cd53d02b91ebf721e81ceff340d529b3b5073c02f893dff6e9c97e349f283140831b2460f3fc8f76f85296c1e734460b1b405b0602a74a3d8666abbfcd877d30c181b83212be34f3a545806df71dca4990fcd091512e3852368e9aa9fb94657813670a8e933ab2d2b33d51d0a6614fa63a6757c4476ed91d2e", 0xad, 0x40084, &(0x7f0000001ec0)={0x23, 0x1, 0x5, 0xd}, 0x10)
ioctl$XFS_IOC_FSGEOMETRY_V4(r1, 0x8070587c, &(0x7f0000001f00))
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000001f80))
r8 = syz_open_dev$usbfs(&(0x7f0000001fc0), 0x4, 0x2)
ioctl$USBDEVFS_FORBID_SUSPEND(r8, 0x5521)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000002000)={{0x1, 0x1, 0x18, <r9=>r0, {0x4}}, './file0\x00'})
write$char_usb(r1, &(0x7f0000002040)="5b2c0cf41f675ed133dfbdf0accbc3b4393c24e102b08a71fa4081de68e9d0b8afead6e2796826c305d465fe6c3edf7d7358c5ebf101470d1fea6a4f80ce42c94f5ce2e8069aa3a0a2bf3fd6f4944d8f7cee79df54cc756ae42b721333ba2b6405b31a28a5df818caf50c26742684383c137affc9667ef592119282c7fb8c6226def89e1214159371945a698b96eea517e2b5b23e6d1767344cc0298495d545967617a747347c71862045de5c5408da1c8e6f5", 0xb3)
ioctl$BLKOPENZONE(0xffffffffffffffff, 0x40101286, &(0x7f0000002100)={0x800, 0xbaf})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
poll(&(0x7f0000002400)=[{r0, 0x50c0}, {r4, 0x1000}, {0xffffffffffffffff, 0x41}, {r4, 0x1030}, {r9, 0x238}], 0x5, 0x2)

5.000206083s ago: executing program 1 (id=3638):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=@delpolicy={0x1c4, 0x14, 0x8, 0x70bd2c, 0x25dfdbfc, {{@in6=@private1, @in6=@mcast2, 0x4e24, 0x2395, 0x4e20, 0x7, 0xa, 0x20, 0x0, 0x88}, 0x0, 0x2}, [@sec_ctx={0x171, 0x8, {0x16d, 0x8, 0x1, 0x1, 0x165, "2389efcceffb61bf8c03a1cc1003789f73506042fada39ff02e646fd4c4dc7686f025df7ad42fc0db875ecefb1aeb1db3182e834554f7f780732a0c67dc8eea0d2fad12494ad4d38e28dcc5f97f8d0ece31a5e97d50ad46001b723ce190d8c3d7d49a0533b214eec9b5ec28f5f389f0eed35875f1dd0aae11bd4a8db858a8f19a5216a14ad18058165a548e4da366256fc00706d804bce2fbf926fc7c3c807109ca9595f54774542432d2342173457e4dacaa54e1be863b1d839b5d7ef1e6c763cb225d1fa6df796ef947491d1157de832dbeeb32a8cfe3ca1fdf33050ccf0540460d98435f4541f5ea7ee555585ecca90765af5f22436a985d8bf0219a7cdbc15c86b4c13f2d2e72b601bec7aa6655b3bdf1d094e9ef068a4fc8fca858f0fee202b0d814613660d78eea6082e35bdb1312b68a06a4b8d9d47c33f1bf9c2ba7b18b4c1af8bb9fbc2e4f2b8293d33c6be9261b84b8af0696fcd3aac11bdd5876c434531917f"}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4}, 0x4000084)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000) (async)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
close_range(r5, r5, 0x2)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0x8000018, 0x16, 0x104, 0x0}) (async)
ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0x8000018, 0x16, 0x104, 0x0})
r7 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x2, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x108) (async)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x2, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x108)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xd)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x3a}}}}, 0x108) (async)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x3a}}}}, 0x108)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x400000b4, 0x0, 0x21}]})
ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000040)=0x6)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'})

5.000002961s ago: executing program 4 (id=3639):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x6, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
write(r3, &(0x7f0000000000)='3', 0x4e)
r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0x4, 0x1, 0x1, 0x10, 0x4})
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001bc0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0})

4.999813017s ago: executing program 1 (id=3640):
futex_waitv(&(0x7f0000001500)=[{0xffff, &(0x7f0000000000)=0xffffffff, 0x2}, {0x1, &(0x7f0000000040)=0x1, 0x2}, {0x4, &(0x7f0000000080)=0x7, 0x2}, {0x4, &(0x7f00000000c0)=0x4, 0x2}, {0x1c000000000000, &(0x7f0000000100)=0xf, 0x82}, {0x9, &(0x7f0000000140)=0x40, 0x82}, {0x2, &(0x7f0000000180)=0x3, 0x82}, {0x41c4db85, &(0x7f00000001c0)=0x101, 0x82}, {0x3, &(0x7f0000000200)=0x5df, 0x2}, {0x2, &(0x7f0000000240)=0xac53915, 0x2}, {0x7, &(0x7f0000000280)=0x361d, 0x2}, {0x0, &(0x7f00000002c0)=0xffffffffffffff61, 0x82}, {0x63, &(0x7f0000000300)=0x4, 0x82}, {0x3ff, &(0x7f0000000340)=0x1, 0x82}, {0x9, &(0x7f0000000380)=0x8, 0x2}, {0x8, &(0x7f00000003c0)=0x8, 0x82}, {0x28000, &(0x7f0000000400)=0x400, 0x82}, {0x4, &(0x7f0000000440)=0x10, 0x82}, {0xe, &(0x7f0000000480)=0x7, 0x2}, {0x3, &(0x7f00000004c0)=0xffffffffffffffff, 0x2}, {0xe6b, &(0x7f0000000500)=0xffff, 0x2}, {0x9, &(0x7f0000000540)=0x7fff, 0x2}, {0xffffffffffffffff, &(0x7f0000000580)=0x9, 0x2}, {0x5, &(0x7f00000005c0)=0x5, 0x2}, {0xff89, &(0x7f0000000600)=0x7, 0x82}, {0x8, &(0x7f0000000640)=0x2, 0x82}, {0x7f, &(0x7f0000000680)=0x637b638c, 0x2}, {0x3a, &(0x7f00000006c0)=0x8, 0x2}, {0xb, &(0x7f0000000700)=0x8681, 0x82}, {0x8, &(0x7f0000000740)=0x400040000000000, 0x2}, {0x1, &(0x7f0000000780)=0x4, 0x2}, {0x6, &(0x7f00000007c0)=0x8, 0x2}, {0x7, &(0x7f0000000800)=0x100000000, 0x2}, {0xb, &(0x7f0000000840)=0x2, 0x2}, {0x8, &(0x7f0000000880)=0x6, 0x2}, {0x6, &(0x7f00000008c0)=0xa82, 0x82}, {0xa0, &(0x7f0000000900), 0x82}, {0x7, &(0x7f0000000940)=0x10000, 0x2}, {0x8, &(0x7f0000000980)=0x9, 0x82}, {0x8001, &(0x7f00000009c0)=0x1f3c690f, 0x2}, {0x1, &(0x7f0000000a00)=0x1, 0x82}, {0x8000, &(0x7f0000000a40), 0x2}, {0x3, &(0x7f0000000a80)=0x9e4, 0x82}, {0x7, &(0x7f0000000ac0)=0x3c3095b4, 0x2}, {0x5, &(0x7f0000000b00)=0x1, 0x2}, {0x4, &(0x7f0000000b40)=0x3737, 0x82}, {0x0, &(0x7f0000000b80)=0x6, 0x2}, {0x3, &(0x7f0000000bc0)=0x3, 0x2}, {0xfffffffffffffff6, &(0x7f0000000c00)=0x3, 0x2}, {0xe6a, &(0x7f0000000c40)=0x6, 0x82}, {0x8000, &(0x7f0000000c80)=0x8, 0x82}, {0x4, &(0x7f0000000cc0)=0xfffffffffffffff8, 0x82}, {0x7, &(0x7f0000000d00)=0x2c6}, {0x1, &(0x7f0000000d40)=0x1ff, 0x2}, {0x9, &(0x7f0000000d80)=0x30, 0x2}, {0x1ff, &(0x7f0000000dc0)=0xfffffffffffffc6b, 0x2}, {0x4, &(0x7f0000000e00)=0xffe000, 0x2}, {0x81, &(0x7f0000000e40)=0x2, 0x82}, {0x4, &(0x7f0000000e80)=0x4, 0x82}, {0x100000000, &(0x7f0000000ec0)=0x1}, {0x200, &(0x7f0000000f00)=0x10, 0x2}, {0x7, &(0x7f0000000f40), 0x2}, {0x2, &(0x7f0000000f80)=0x2, 0x80}, {0x2, &(0x7f0000000fc0)=0x8001, 0x2}, {0xdac2, &(0x7f0000001000)=0xe6, 0x82}, {0x5, &(0x7f0000001040)=0x329b0ecd00000, 0x2}, {0x72, &(0x7f0000001080)=0x77ea, 0x82}, {0x8000, &(0x7f00000010c0)=0xefb, 0x82}, {0x5b0cd087, &(0x7f0000001100)=0xf, 0x82}, {0x9, &(0x7f0000001140)=0x8, 0x2}, {0xb, &(0x7f0000001180)=0x6d, 0x2}, {0x4, &(0x7f00000011c0)=0x1, 0x2}, {0x1, &(0x7f0000001200)=0x9, 0x82}, {0x1, &(0x7f0000001240)=0xe1b4, 0x2}, {0xfffffffeffffffff, &(0x7f0000001280)=0x7, 0x2}, {0x1, &(0x7f00000012c0)=0x5, 0x82}, {0xa, &(0x7f0000001300), 0x2}, {0x7, &(0x7f0000001340)=0x5, 0x2}, {0x0, &(0x7f0000001380)=0x3, 0x82}, {0x7fffffffffffffff, &(0x7f00000013c0)=0x4, 0x2}, {0xffffffffffffff3c, &(0x7f0000001400)=0x40, 0x2}, {0x5, &(0x7f0000001440)=0xe, 0x82}, {0x4, &(0x7f0000001480)=0x10001, 0x2}, {0x2, &(0x7f00000014c0), 0x2}], 0x54, 0x0, &(0x7f0000001d00), 0x1)

4.999713994s ago: executing program 1 (id=3641):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDENABIO(r0, 0x4b36)
r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
readv(r1, &(0x7f0000001a40)=[{&(0x7f0000000340)=""/129, 0x81}], 0x1)
syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404f1004000001010200010902200001010080320904000002000000000705810200020007050202"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100070000000900020073"], 0x74}}, 0x4000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x2283c2, 0x0) (async)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x2283c2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r4, 0x0)
ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) (async)
ioctl$SNDCTL_SEQ_RESET(r3, 0x5100)

4.999566957s ago: executing program 4 (id=3642):
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0)
write(r2, &(0x7f0000000100)='measure func=FILE_CHECK', 0x17)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2d00009a2cf20dcb78512f08ca803f5ba210e4e72878b793b463ccc5a22ae56388713d09f5b8ed5996bd35bec9bdfabcbc3f66bfcd393f65879f268868327f593663b7fbedd1c41950b26b87cc1824", @ANYRES16=0x0, @ANYBLOB="00052dbd7000fedbdf251000000008002b000e000000050030000100000005002f0001000000", @ANYRESOCT=r0, @ANYRES64=r1, @ANYBLOB="f51c9302c12a8afa463469bea9db03459f408eadc39f5d4382f13727b1398f811866daab08acc8941700fc93d954c789d900fcaa073bf1943a09eb6c1b591f1508f295845a34cce8bce41c9b8e0d6dd03a3a13c4716719015ef203b2af3e5fdd431650cfaeb4bda963e0b674cbf4419b7d375d9f5b84ffa98d4f6147f3d4576bfd9f5e261e5a9b2525301a7cf5cb969b283dc7207b4ad2da11c67ef19d4e16b98cf0a12e59a1b8ae88a2019d2527e990cf895220b0c2ef3a5aa381d7b528b924bdba248650a5", @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRES8=0x0, @ANYRESDEC=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x84)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9674f468e99ba37235b83c00000010001f00"/30, @ANYRES32=0x0, @ANYBLOB="00000000084400001c0012800b00010067656e65766500000c0002800500040001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

4.999462137s ago: executing program 3 (id=3643):
syz_open_procfs$userns(0x0, &(0x7f0000000180)) (async, rerun: 32)
r0 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x100000000, 0x0) (rerun: 32)
close_range(0xffffffffffffffff, r0, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 64)
prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 64)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x20040084) (async, rerun: 64)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x0, 0xfff3}, {0x2, 0x8}}}, 0x24}}, 0x4000000) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async, rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f0000000500)}, 0x10)
socket$kcm(0x10, 0x2, 0x10) (async)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x802, 0x0) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) (rerun: 64)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0)
write(r5, &(0x7f00000001c0)='1', 0x1) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0) (async)
sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESHEX=r4], 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x24040040)

4.99941009s ago: executing program 4 (id=3644):
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e07032d0c"], 0xa)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xfc, 0xc8, 0xa}}}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0)

4.003685188s ago: executing program 0 (id=3645):
openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/rcu_stall_count', 0xa8001, 0x1a9)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800dd8d000000000000000002001000fe040000001e0004"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002f00090027bd7000000000000400000004001d00040012"], 0x1c}, 0x1, 0x0, 0x5000000, 0x42804}, 0x10)

2.003334359s ago: executing program 1 (id=3646):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_complete(0x0, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0) (async)
r2 = socket(0xa, 0x3, 0x87) (async)
r3 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'veth1_macvtap\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@local, 0x40, r4})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfd, {0xa, 0x3f, 0x0, 0xfe, r4}, [@IFA_FLAGS={0x8, 0x8, 0x320}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x0, 0xd, 0x766f4933, 0x1000, 0xffffffffffffffff, 0x9, '\x00', r4, 0xffffffffffffffff, 0x5, 0x1, 0x5, 0x5}, 0x50) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r7=>0x0})
r8 = dup2(r0, r5)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r10, 0x6a98047402e98331, 0x70bd2c, 0xfffffffc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x48c6)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, r10, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xb}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x577}, @ETHTOOL_A_CHANNELS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7fffffff}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3ff}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x1000) (async)
syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402)
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x10040, 0x0)
writev(r11, &(0x7f0000001780)=[{&(0x7f0000000640)="185f8ed55495358cc703c5d3f6eba57c9fe54b515ad6f0cbd4e23a0279541536cb6d6e35b30547d8f4cc14be9711f0bdf22b79dc841bd4f12447b946b2269f0faa708a2af86b9def6db65e90c343dcff06693b54c90408b7402649bb929eec7e78483594cc02a50fc10bc8dd255b4aa9a80e98e29540973a3a72b6a55e76eccc48532808486d2702f0c254ae82b48740ca48ed0da8da32c6c7dfc649f9003a86eb991f8724a4c7549a413ad92d46d2016df44e437215ff867c23b812c87203a270d3a1188ab9832ff896bea37602d7e45d3c793e85ea4403e51aa9d3df4ac504b7bf2458af613f4e636873c939219aa59ab9d675206f44aa691fcd361d269e9fb3723ca80c7af7ab494706817a19e42ead9e68a2658019416424c23fafb50a0262dd4292ae576b178a826460a41b8e952d021da86c79fe6c4c11e1afb8e2fb216bfe24e36361a88b91d2554430baefc3d4f1e079bf7b8ffbc02f06d3228502e88db4c22f9ce3c8f7a4ad6f479d192e3e1f33626fdfb3cad3afb1ee058624c4019cdd9208f6b959e412d96245da3d7b46a18c57f22e3e0d3876d351f0608a465066ca66b04898c88b11a06ccd848779a68081b8270adfeb65e2e0e1dc2dc7bbd18cf4a9f287c2881bb73fd35081cba2e56fd5d39bc20a44e1247b60eba8d5580a464862b4c29630a4cc74e2c0c08916eddc5b60e13e1a092c9cdcb0a78fc218fca5dd72d6ec81dabd4673d0e4e1d1323f427b9c71c440fd243f370022646f437fe3ea85e76ef5ae7c94a8ffca4fad21ea5f683d308ccbc8b0960115c5e33738fd559c084d7369b0d4cd2dfb7076716a4b0cde029148c6d397e68fd833087e10072262c7340ff50757fe8502fdbfc801a2cdd9061d058daf9cdadfafe99cb24ff9ac8d691674268cbfa0c370851676e2b72d16ba1623caaa7d2bcb20146c794d25b72cb74f5ecb2e7befd56415343d894cbaa21e2fb5505008b15b5cfe6c7005f1eeb6168429b0eeac70abbd0738777063df25d63e321ffcc38e6de531c66d97ea3897de1b08e90c35a47829e39f2f15225333550a8ff45cf78493bedbc0fb0f0186fce28486056ea46ed6b6ddee61c386f0f320e4ebeb0756e1ff869856e574a312e393262a4870f5bbfdda77243c54a1bc5d280bd2b3f894973d7bde1515b2d9a984c1ed91cc1a2b180acb4ee77edcd2b62b1229bcb8141af39b63189615101dbe49860f0c3f721cdeec10524dedacbea68b052cb528366b7bc1c4b2b2cacb637f106bb47471a4391f3f3f53042a487dfcca35d58f7393d8d08173296812974eb651fa1d78cb563b50801050cf5b3d211697a676caedc6efaaf6a9869a372517017dd1bb137d47f4b520a2f9189aaf25255125f538f4849e5e5fb0432cfd790d41712dccf78b030e9df0b3bf6f41b43977908a0c5a16228309f5698a6de5807cedb9e39da3577f6e97f16143623aa190833f24ed64716b518450b3e4a5a9324f7a9ae6a8a67407bf96b54f0763f8cae378e67e55316f2994701be8834c7d479ae91f12eaa10258c50879fe3c682b028e350a66ff079bf9b608c9b15a11007a82b02801ffaa96755b8ec47f44eac95453995aba4b4f0964b154df0e75c1916d90a82b73732164a5cb137b8c145fd4b42accbc40f8803d213a3b3504238b3d279d1a0517a93e40476006ccf1ea9ad25da42cb8e342e34b633cca28b419cfdf635f84ddccb56bd244c574acf3694f9cd9f3f0079ad648c21a22d3650a3fac68945bb28f68991bc4b32461cee4c7b90eb4a623fb885197a1092edabd052039bd676c652edfe8d8899112586d0a9dc7f6323a1e0ce998edf35f31c9f4f0cdb4682c904699c44d9e531ddcfd4157eb5c160c127451d818c8a237952d7ce61675fae3037b5601873f3ea4ce0d99fe88b262a09bcd3e29a1dffefadc58c754be37782c898b188fec047640678dbea79fbcd4866b76d10dedebb2ed575a145cd52a5f6d66372c81e594bffe1fae2e5633b2153229eed13645271af83d088f5aa12912ad5eae8da9d2c49a683a440784eca1680fdec82d2fd361535b3bfb69e588ffabef1bedb3c8ef8255684229db7a01067c9d09ea890a82dea23dc086395fa6331aff58035cbb0f48ecfc3a6113b90e69f4e69025e764f70dae9d84a5d5f74dd9515d6af81d18001deddd5aafeb0ed57b76df7e040ca4aad69e783c0801f4a5d4ec0d34b7efc7fd1635e715526cee0868638d52e16b8efd4122f17c3bae8584e8d5234e83a21ed0a4cbb1d486e13b56582a345a9306625c9d62c1aec376236b6d33de8d55b1dbcdf95e6c92cdba0bb7f9d908afc9af05f35d70c8c4b840a24c48ef2400055c79b461f371840caa1cc0cef542e54cb682b255be546e3a96b1a3b1fab01c4800bbd8487fdf01b606cbc2cc2ca1e268148cb16ebe517004f56195ec1ceac007ca2cd96ad7aee9ff7baed05253fe8876a8fe17f8e606bc2238513c93730c46345dfd2ce6836d513c124dbf7ae845cc1544543b4c6927386f6637444c919100953c91a338550fa35097bf921f37f58923db60fc4c8029a8826304ddb4ded6635cd0c10f7d1b64ece9fb6a4441aee0fd3b52c60fbf3157bb7a5cab9a71fcbf3fe14905aac2f547534a20763e939c7c47490cf3b572aefa8c928c017513bf969a8873ef3ae52f74191bce14eb62a06dfd993f4ac9c0588f3686bd88bf1f26694e498dfda4467b4cc506102cfe6255019952de74415799889f00f3c091bbb2f8be3c4e3dc2f0f98c6107391e640551957d5a72a29bd6425b38c90bc5033af9b62cfaf7019127ae26df2eab951e6a7388609115b8188c572e08fe5c51d82fbfba36b5f78d93d7f605b5ea786b0352c59cfb176ba32446dfc075e096b377d12747f359bf1719d6b4a46c3ff352d9ad5b705a2ec510f2f693900b0d361fbe3d0f52e33cebcae251b4c35383fd650a5952e8c1ed6653a0b1bbdcea2648a19e5e4106e45af7610efcbc6cb8cf336b158e578de527464112586079ec28426d5090f0077464610c10a34f08a977a0617cecf23d9aa62d1ec6d95d6b7c1b1073e9d86fd425ed603c61fea86ee1a374c6f023ac784ab9d78b3ec737f787748b9414d486a3843b70ae180d086e0f803c4918bcef0c8bc49fabdb24b1a850d82ba58c97e3dfeb2f363f9bf943d428f2d4c2bfdc43a980dc00eb5e01ef73de20d1f8dd0d8f738ebc0bc91a0bfedc3bb31a1c1fcd71a507ec38aae2512b65404b9c1b1cfe02e2e5fbd344eca325e0777cac597fa4730aaf08e57085d82725a862a1893ff5981c78255b9e7ac9a57d9086bb0671123c97c98b3b03c3c85870e58bd439f87e66991c1fea923a241e0c18fc73071b87a40d1b28ae33ad7823f4db1e0678b7a720582322b8e97a676703ca83e8d48c87857a2a4fc55e5891cdf78a0d7b7d165bc3569a6b683c9be13d4a54788654b497b86d1077b470fb935563e83d4e0e37ede3ec5993bf824d330e8b42a7eaca28b151cded902f2621c70794009b81b25dd8528995feb3da900a98cbc41eec16072d05e1782a7afffff4897a5be67a94e1e54591f20dd9a531da4eb57aee4cd05b330e28c66c314c20b3949ddc2f73acd7d1c630e2562afa9bdcdd8c6d796a01216e93803c579d6e1b2eff5daa8242af93785b9f04a709779834fe065454f7bff3b27ef8ad8dde732bd1f8ae7bedd7943531cc724dc119cedabace0d5b5ef6d88cbe1b61b188c20fd919e594ecafafebd943ce9766da3fc809621d8f34cf71df2513187b86e832abe00df8721100a3a7119bda69b6161aa7af0d54207b887286d76843844300bf08ee56be28709d1a24b3f59e9cc707d9c36cb8ff0e331ca8649d8e7ac8149fd5d1daadadfbb484153a5a18b8c5324f9d3fc970cfb10ca0fcfe9f4f15ed2fc21c7ab4ee7615e7d492d5ee76022bcfd966dbfda7626a1dcfac6ab88e5e8f4bca99186c69d2d529068361a5e1d79264361b4a5a2922a31d19788c68c7de51f58101051f4d842d64981ff799054d7eb0739638685f0327507e44018bd722db7b0592687887a7dc27264dd5cc83260cb5b857f87e29ae34619509f661a7d7d35f866bfb1f061f0e59f87a13d68fa0005d85ccaeb2fefa5c1199082f8f4c4d7da04c4bc5a03188c5f1d559b0d5bd2f90a0e187ac74858b89f9cc0615b94e33a3f4f219dd70087d3aab50c26a043e0260a32d93f92c0d62d724e4a435ac5702b9c5763a873c8facda2c39945f0cbde69debcc894f3942b1777f9c58a1c2e092e315f7adf6d196685abe871e125a62a5af5998ffb85cf238cb8d6d29466da7e412a28349616e530b4ba86cdee4579b7ab7230a4ce64b7bf4147d13d0ab12f6afc423935d3c1161be223e9fcbd564bb507350a85c910fb719484c51af26249ee6c6a92a72962df1d95e0eca1326e7d16814e955aac443c63d22cb73f6a908daabec79e70578ac13c68b63d442e1c828d7b929898006d8fd928c88c4f99b816a0fdd58fbf3e8ddb15ca4df53489ca8eaeb5225aac3e3f99e38dc1ae8944d6353b6dd1e7f54b27e6d330676d0603b4685c081640dc1f3983f16d899a2284e2920a0b3e9663c6c1211a14f86d4cf7d797aef6994043e43ea591fe0aa9e18ba7324396c861d78695d32b4c27722436a3d9c4949f9309f5d0325b7e4e2300ef57b9ee6e8b018a0ed0e1a1aa968a792dd3c0b44ab1a7c46b61a6d613e6751d07b72d2648e57f9dc2794f976a899934e2bc4cbbce113c1d327ade013cac33b9e6a2579a980366d23108086cd001dde279e9d27c9b59f0f05703e8f5cf62dbb35cbb44560b4de826d162d159c66284ed49b8adf6d102395315fa1ceb6e4a4db61aaa8a779cc3b2b8e9f545d2bf725a7bb93a0cfe9bf50ee335c47e0d9ac232355d473cac56757b8123b6ba17b5f0368be60d08a606c957577d3db2ca1959c80c7c2e31d592007d009e0f9b74d6fd013b5feddc920fd38b614ef6b0d6eb3e88f045fc9c7f890b5e0cadf75721f11b6034fee77a2b5da4e0dcaedefe8bbad8f7e37fcb871403d3b120e0f6581606234a49b13347dfe8a164312cdfa71f23f8e0ddd3e353fc5092154038245c6488e78fbb1dc3959704f5be14815694570f645f134100b56afd1d8c0b7a4be163ad151e14df8cdcb29021835257f03b9515b6d4725944681396c39e97174c449da05630b9f8d672ffd84be2b68b992222a1a7af8fae7923aa491a481d242c15ff1f48470b1c566f81aca7597bc9e576da67749d5cee031879592e9c385604d203fe877364a3ca5dbdfaebd017c5502a8c346d2f911c63b7c77da539bed23e6a2b7046ade618feabad783a988d7e2de8c44d634caaf3769eca679f82c9ef2a1c7b14d06312bad4ab5191d3a78c3c37ead4f39fa4a51b2422e7fd359a2c0485a22ef317ef0ba7e8279f2a54bfd06a64f7b59f9045cf2c433d431e8f053b024de9cc178135d8b57b824a8590e6098eddc65a7f32c91b6240172c6f66dd44ba6471e08e718885c72ad54a0a801781ebbca75fa1c025fd6c996b3b3da1bb92234991d62ba030024619f8a2d53e8809f8be2268841563387125fcbbe547d9a52fdb209cbc3adc923beb24e1bb75277a87f23d529b42f22dbd63f0f79513898a83d24256dc45570746b07fb3d35a1ef34c3f0aa176da3ac02fe81068fbe312a18aa6b9f0eeb95a7959ca6a98c9a6f85fb8ff29c875be0cb890936648712ae37282b3f0984697ef05d500752acf7672c88e5d37b74d4705b069e770f1d70d54db42f65f90c52a2b8ab213ca39b1549"}, {&(0x7f0000001640)="74fcb88bb245b29d9cdb99fa7555dd005d9deb2a0cba5bd08e54d26a9e04431b314d4faa0718bd551eb1b45d3ad83f0d60fb765df77b7f2dc7b64c140437c13a8e03cc9865508514e3ed92dcbb0f88833c2ad82ec19e730b46953dca1e2d861da58b5cf0c7e13f59a065934ea8ec03e5522bb4003d0810c06ccf1b1a36c6b0bb4322ff10b5e2d92f15611ff4780a1c66965da77b957d1aa8a2691292"}, {&(0x7f0000001700)="abf67680db0b7a04baed4168761e1364f80ccaaf7a7943"}, {&(0x7f0000001740)="7e8a4ee999e3aacc95b989e4908f28d64b3a301b41c7bdeee3910bcc9190ef02512ffca96bd67f98e680cd3f4c"}], 0x61) (async)
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000010000000f00000008000300", @ANYRES32=r7, @ANYBLOB="0500330002000000080032000700000008003100fc030000080034"], 0x44}}, 0x80) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001980)=ANY=[@ANYBLOB="600000000206050000000000000000000000fffd0ef402006269746d61703a697000000005000400000000000900020073797a310000000018000780050003001fffc591ff050e93ee000500020000000500010006000000c801798af3e971f5e21634d6064abf2926255600db2aefc3ad3a11e050bf48f82ab342b3b6eb1df371c116e3846ee964794b3d2ea620c46a53c97d9b9e8af1a36a6f30d52f8423cc90e1a423f33bc4f4ce3031ffc6a22dec5ea5b97822f9ee2a2cfea0f8356e7d09035bdc11e6f0417ea7ec16b539b97523e4da296ef0bfe750e953378a5d3cb58244a0c59145c548e146a91289fc8c0000000000000000003a14b42d01acb7d36061234a2ae302f8a89f37cd3cdf718cf9eddb464a5a56e08c8a3a58351bc4bd24a6c91b1d7a44041c4301387eca2aec7091577504a41593c7469e40ef966d80da17295cd31862ab2c4e6f0d32a5e52c0b1f44f28d838b2be096c1cc20ac13062ed9f1032ba567de8054c5a71cb619de27c56d954e9548bac19825361a7f4b1b890338fd5270a7a905613cac0a3800e99ea2878031fbbd36346e55c30ac919b33b8f283549e32451bd9022073b1089fdc8e2107335e7cba9d66f7728a72764b312d08fae1e982cb38c1a5d17f74cc20b6700bea744f4607d"], 0x60}}, 0x0) (async)
ioctl$FE_READ_UNCORRECTED_BLOCKS(0xffffffffffffffff, 0x80046f49, &(0x7f00000002c0)) (async)
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r12, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmmsg(r12, &(0x7f000000b480)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001940)="f661af", 0x3}, {0x0, 0x16}], 0x2}}], 0x1, 0x10) (async)
ioctl$DVB_DVR_DMX_EXPBUF(r8, 0xc00c6f3e, &(0x7f0000000300)={0x8000, 0x80000, r12})

2.002986029s ago: executing program 0 (id=3647):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
listen(r1, 0xc)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01002cbd7000ffdbdf250403"], 0x14}, 0x1, 0x0, 0x240, 0x20048001}, 0x800)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001980)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0x2, 0xfff3}, {0x1, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041891}, 0x0)

2.002879209s ago: executing program 1 (id=3648):
syz_open_dev$dvb_frontend(0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000001000ffff27bd7000fadbdf250000c3ff", @ANYRES32=0x0, @ANYBLOB="15010000000000003000128009000100766c616e00000000200002800600050088a8000006000100010000000c000200130000001000000008000500", @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x8048802)

2.002629685s ago: executing program 4 (id=3649):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r3=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x9, 0x2, 0x200, 0x1a41, 0x317dd695, 0xd02, 0x2, 0x3, r3}, 0x20)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r3, @in6={{0xa, 0x4e21, 0x4, @loopback, 0x1}}, 0x5}, &(0x7f0000000240)=0x90)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="7a61ad0fae19810db4a3b18503f7d66dcb6c72e2adf32a428ce772bb0f8ef72f7bec2a89788235e1fcc7732fef5441a87c4f2adc006c756bc797ea96023da51bab64214a37a75e4d85663592240b9f3142670c2b007b92f0f79e4ee6ea1268fd98f1403b84338a1a9d293e3456e187806bcee64f25dfa8d411b499749945512881c455fc1c769f1bea5a82076444399a5b37f1052707c207"], 0x9)
listns(&(0x7f00000010c0)={0x20, 0x0, 0x7, 0x4000000}, &(0x7f0000000040)=[0x0], 0x212e, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r6 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r6, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0xbfb}], 0x1, 0x2000000022, 0x0)
sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x28, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, 0x28}, 0x1, 0x0, 0x0, 0x648d8}, 0x1a)
r9 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff004}, {0x6}]}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c)

2.002542934s ago: executing program 3 (id=3650):
syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
recvmsg(r0, 0x0, 0x700)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

2.000786767s ago: executing program 3 (id=3651):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003f000500010000000000000001010000000000000f0001006f76732d73797374656d0000080002000000000008000900"], 0x38}}, 0xfffffffffffff000)

2.000725689s ago: executing program 3 (id=3652):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003f000500010000000000000001010000000000000f0001002f76732d73797374656d0000080002"], 0x38}, 0x1, 0xfffffffe}, 0x0)

0s ago: executing program 0 (id=3653):
socket$netlink(0x10, 0x3, 0x0)
memfd_create(&(0x7f0000000440)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR\xab\xddt\x96s8\xf4\x1c\bi\xe4^\xd5\xfd+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\x8c\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x9a\xc7sn\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b^\xb9\x00\x00\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4kej\f\x8f\x9b\\\x16\xb3)\xf2\x97;\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\x01\x01\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05}0\xba\xa9\x13\xc4\xd3\xa9\xb6~\x12\xcf.9\xc0\x1e\xbe\x1a:H\xads\x98\xc1m{1YM{d\xec\xff\xff\x8f\xe7j\x9c\xf9+\xc30\x13}\x9e\xff\x8d\xca\xc8)\xc9h(a\xf33\xe8\x90\x03#\xcb\xfb\x14\xe9\x06\xaaQ\x80\xdax=\xf5t-\x88\x9f\xf7\xeavp\aj\xb3\xba\xf4tP>\xf6o\xf2\xb4\xfb\xa9\xe2\x8d\xdf\t\xe9\xcb\xc2wz\x96\xf3)M\xbf\xa8\xba>\xbf\xfe\x16U,Q\x0e\xef\x81\xd55V\n\x8f\xff\xe8d\xc7w;\x92\x19\v\xc0$u\a\xfa\xa7`\xc1@:W<\x96` \xb9\xa1}\x18\xdf\xfbmY\xd2\xb7p<]\\\xec\x84BC\xde\xf3\xf8\x84\xf3f\x99[\xcbD\x93\xbcFo\xd0\xd7\x86\xf7\x98\x95i7\xef\xbe\xf7]z\x17\xd5\xa2\x17\xb5\xa9\x8enU\x0f\b\xa43\x0f\xd1\xfdb\x1eu\xc4\xe9K\xd6\xdf=\xbbL\x8e\xa4o~_\xd7u\xe7+\x86\xf0\x97\xcd\xaa\xbc\x82\xa5\xe3\xe9\x064]5\xa5@\x1bq\xb9\xee\x81.\x1c*I@\xcf\x8b\xa5\xb5\x97|\x8e=\xdc\x18n\x0fA5\x02\xb9\xf4\xb6\xe27_y\xceU\xb0MDS\xf05\a\xdd\x88lP\x0f\xedG\xff\b\xb4@F#T\x81\x11\xb0a\xfcVkr\xd1\x1b\x1b\a\xe5%/\xc1\xca[\x82\x01[\x11\xc0\xc4\xd7+\xe6<\xcbk\x97\xd1^\xe6\xd3\xbc?H\x03\xb0\xd1\x0f\x13', 0x4)
userfaultfd(0x80001)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x400, 0x0, 0x0, 0xfc, 0x0, 0xc, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x10, 0x0, 0x0, 0x8, 0x2, 0x9}]})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

ound, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[ 1301.032732][T14958] usb 8-1: config 1 has an invalid interface number: 3 but max is 0
[ 1301.032748][T14958] usb 8-1: config 1 has no interface number 0
[ 1301.034891][T14958] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1301.034912][T14958] usb 8-1: Product: syz
[ 1301.034923][T14958] usb 8-1: Manufacturer: syz
[ 1301.034935][T14958] usb 8-1: SerialNumber: syz
[ 1301.062024][T14958] usb 8-1: 3:1 : does not exist
[ 1301.062038][T14958] usb 8-1: 3:2 : does not exist
[ 1301.096213][T15984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3121'.
[ 1301.153489][T15985] cgroup: Unknown subsys name 'pcr'
[ 1301.200337][T15987] ffs_data_put(): freeing
[ 1301.628865][T15988] syz.3.3119 (15988): drop_caches: 2
[ 1302.007244][T15991] No source specified
[ 1302.010965][T15992] ffs_data_put(): freeing
[ 1302.507744][T15965] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1303.541860][T14668] usb 8-1: USB disconnect, device number 23
[ 1305.009262][T16017] fuse: fd is not a fuse device
[ 1306.542376][T16026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3136'.
[ 1306.616886][T16026] cgroup: Unknown subsys name 'pcr'
[ 1307.498238][T16034] syzkaller0: left promiscuous mode
[ 1307.498252][T16034] syzkaller0: left allmulticast mode
[ 1308.574082][T12250] ffs_data_put(): freeing
[ 1308.785702][   T61] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[ 1308.805724][T14668] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[ 1308.915803][   T61] usb 8-1: device descriptor read/64, error -71
[ 1308.956028][T14668] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[ 1308.956940][T14668] usb 9-1: config 1 has an invalid interface number: 3 but max is 0
[ 1308.956953][T14668] usb 9-1: config 1 has no interface number 0
[ 1308.959095][T14668] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1308.959107][T14668] usb 9-1: Product: syz
[ 1308.959115][T14668] usb 9-1: Manufacturer: syz
[ 1308.959122][T14668] usb 9-1: SerialNumber: syz
[ 1308.972767][T14668] usb 9-1: 3:1 : does not exist
[ 1308.972781][T14668] usb 9-1: 3:2 : does not exist
[ 1309.155533][   T61] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[ 1309.285517][   T61] usb 8-1: device descriptor read/64, error -71
[ 1309.395821][   T61] usb usb8-port1: attempt power cycle
[ 1309.519976][T16050] syz.4.3143 (16050): drop_caches: 2
[ 1309.735540][   T61] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[ 1309.757153][   T61] usb 8-1: device descriptor read/8, error -71
[ 1309.995495][   T61] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[ 1310.015951][   T61] usb 8-1: device descriptor read/8, error -71
[ 1310.125803][   T61] usb usb8-port1: unable to enumerate USB device
[ 1311.561714][T11418] usb 9-1: USB disconnect, device number 23
[ 1312.105044][T16065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3152'.
[ 1312.122374][T13842] ffs_data_put(): freeing
[ 1312.127823][T16065] cgroup: Unknown subsys name 'fsmagic'
[ 1316.265009][T14668] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[ 1316.445483][T14668] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[ 1316.446589][T14668] usb 9-1: config 1 has an invalid interface number: 3 but max is 0
[ 1316.446609][T14668] usb 9-1: config 1 has no interface number 0
[ 1316.451620][T14668] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1316.451641][T14668] usb 9-1: Product: syz
[ 1316.451653][T14668] usb 9-1: Manufacturer: syz
[ 1316.451665][T14668] usb 9-1: SerialNumber: syz
[ 1316.460826][T14668] usb 9-1: 3:1 : does not exist
[ 1316.460845][T14668] usb 9-1: 3:2 : does not exist
[ 1317.009540][T12250] ffs_data_put(): freeing
[ 1317.033840][T16093] syz.4.3157 (16093): drop_caches: 2
[ 1319.015497][T12250] ffs_data_put(): freeing
[ 1319.028852][T14668] usb 9-1: USB disconnect, device number 24
[ 1321.123132][T16098] Set syz1 is full, maxelem 65536 reached
[ 1324.136526][T16127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3176'.
[ 1324.171426][T16127] cgroup: Unknown subsys name 'fsmagic'
[ 1324.303972][T14668] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[ 1324.465146][T14668] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[ 1324.466252][T14668] usb 9-1: config 1 has an invalid interface number: 3 but max is 0
[ 1324.466277][T14668] usb 9-1: config 1 has no interface number 0
[ 1324.468427][T14668] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1324.468447][T14668] usb 9-1: Product: syz
[ 1324.468459][T14668] usb 9-1: Manufacturer: syz
[ 1324.468472][T14668] usb 9-1: SerialNumber: syz
[ 1324.491467][T14668] usb 9-1: 3:1 : does not exist
[ 1324.491481][T14668] usb 9-1: 3:2 : does not exist
[ 1325.047919][T16131] syz.4.3174 (16131): drop_caches: 2
[ 1327.029818][T14668] usb 9-1: USB disconnect, device number 25
[ 1328.018624][T16141] No source specified
[ 1328.019432][T16140] FAULT_INJECTION: forcing a failure.
[ 1328.019432][T16140] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1328.019453][T16140] CPU: 2 UID: 0 PID: 16140 Comm: syz.3.3183 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1328.019468][T16140] Tainted: [L]=SOFTLOCKUP
[ 1328.019473][T16140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1328.019481][T16140] Call Trace:
[ 1328.019485][T16140]  <TASK>
[ 1328.019491][T16140]  dump_stack_lvl+0x100/0x190
[ 1328.019512][T16140]  should_fail_ex.cold+0x5/0xa
[ 1328.019528][T16140]  _copy_from_iter+0x1f4/0x1690
[ 1328.019544][T16140]  ? __pfx_tcp_leave_memory_pressure+0x10/0x10
[ 1328.019562][T16140]  ? sk_leave_memory_pressure+0x81/0x140
[ 1328.019581][T16140]  ? __pfx__copy_from_iter+0x10/0x10
[ 1328.019594][T16140]  ? alloc_pages_noprof+0xf9/0x160
[ 1328.019614][T16140]  ? __sk_mem_schedule+0xd0/0x100
[ 1328.019631][T16140]  tcp_sendmsg_locked+0xe18/0x4420
[ 1328.019651][T16140]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[ 1328.019663][T16140]  ? lock_acquire+0x1d1/0x380
[ 1328.019677][T16140]  ? do_raw_spin_lock+0x128/0x260
[ 1328.019692][T16140]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1328.019712][T16140]  ? __local_bh_enable_ip+0xa5/0x120
[ 1328.019727][T16140]  tcp_sendmsg+0x2e/0x50
[ 1328.019736][T16140]  ? __pfx_tcp_sendmsg+0x10/0x10
[ 1328.019747][T16140]  inet_sendmsg+0xb9/0x140
[ 1328.019764][T16140]  __sys_sendto+0x453/0x4e0
[ 1328.019775][T16140]  ? __pfx_inet_sendmsg+0x10/0x10
[ 1328.019792][T16140]  ? __pfx___sys_sendto+0x10/0x10
[ 1328.019808][T16140]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1328.019830][T16140]  ? xfd_validate_state+0x129/0x190
[ 1328.019846][T16140]  __x64_sys_sendto+0xe0/0x1c0
[ 1328.019858][T16140]  ? do_syscall_64+0xae/0x790
[ 1328.019872][T16140]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1328.019887][T16140]  do_syscall_64+0x123/0x790
[ 1328.019904][T16140]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1328.019915][T16140] RIP: 0033:0x7ff02ef9e159
[ 1328.019925][T16140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1328.019936][T16140] RSP: 002b:00007ff02feef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1328.019947][T16140] RAX: ffffffffffffffda RBX: 00007ff02f225fa0 RCX: 00007ff02ef9e159
[ 1328.019955][T16140] RDX: fffffffffffffe88 RSI: 00002000000002c0 RDI: 0000000000000003
[ 1328.019963][T16140] RBP: 00007ff02f03503b R08: 0000000000000000 R09: 0000000000000000
[ 1328.019969][T16140] R10: 000000000000004a R11: 0000000000000246 R12: 0000000000000000
[ 1328.019976][T16140] R13: 00007ff02f226038 R14: 00007ff02f225fa0 R15: 00007ffd4e32c878
[ 1328.019991][T16140]  </TASK>
[ 1334.522999][T14668] page_pool_release_retry() stalled pool shutdown: id 73, 35 inflight 904 sec
[ 1343.013109][T16184] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1349.023811][T16208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3204'.
[ 1349.030635][T16211] FAULT_INJECTION: forcing a failure.
[ 1349.030635][T16211] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1349.030665][T16211] CPU: 0 UID: 0 PID: 16211 Comm: syz.3.3206 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1349.030692][T16211] Tainted: [L]=SOFTLOCKUP
[ 1349.030699][T16211] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1349.030709][T16211] Call Trace:
[ 1349.030713][T16211]  <TASK>
[ 1349.030718][T16211]  dump_stack_lvl+0x100/0x190
[ 1349.030738][T16211]  should_fail_ex.cold+0x5/0xa
[ 1349.030754][T16211]  strncpy_from_user+0x3b/0x2d0
[ 1349.030770][T16211]  do_getname+0x78/0x390
[ 1349.030788][T16211]  __x64_sys_symlinkat+0x7c/0xe0
[ 1349.030805][T16211]  do_syscall_64+0x123/0x790
[ 1349.030822][T16211]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1349.030834][T16211] RIP: 0033:0x7ff02ef9e159
[ 1349.030844][T16211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1349.030854][T16211] RSP: 002b:00007ff02feef028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[ 1349.030866][T16211] RAX: ffffffffffffffda RBX: 00007ff02f225fa0 RCX: 00007ff02ef9e159
[ 1349.030873][T16211] RDX: 0000200000000480 RSI: ffffffffffffff9c RDI: 0000200000000440
[ 1349.030880][T16211] RBP: 00007ff02feef090 R08: 0000000000000000 R09: 0000000000000000
[ 1349.030887][T16211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1349.030893][T16211] R13: 00007ff02f226038 R14: 00007ff02f225fa0 R15: 00007ffd4e32c878
[ 1349.030907][T16211]  </TASK>
[ 1351.241252][    C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1357.006975][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3212'.
[ 1357.049306][T16229] FAULT_INJECTION: forcing a failure.
[ 1357.049306][T16229] name failslab, interval 1, probability 0, space 0, times 0
[ 1357.049328][T16229] CPU: 2 UID: 0 PID: 16229 Comm: syz.0.3211 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1357.049343][T16229] Tainted: [L]=SOFTLOCKUP
[ 1357.049347][T16229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1357.049353][T16229] Call Trace:
[ 1357.049358][T16229]  <TASK>
[ 1357.049363][T16229]  dump_stack_lvl+0x100/0x190
[ 1357.049382][T16229]  should_fail_ex.cold+0x5/0xa
[ 1357.049400][T16229]  should_failslab+0xc2/0x120
[ 1357.049422][T16229]  __kmalloc_cache_noprof+0x91/0x6d0
[ 1357.049446][T16229]  ? shmem_fill_super+0xe0/0x13e0
[ 1357.049487][T16229]  shmem_fill_super+0xe0/0x13e0
[ 1357.049503][T16229]  ? __pfx_cred_has_capability.isra.0+0x10/0x10
[ 1357.049519][T16229]  ? __pfx_set_anon_super_fc+0x10/0x10
[ 1357.049537][T16229]  ? __pfx_sget_fc+0x10/0x10
[ 1357.049548][T16229]  ? __pfx_shmem_fill_super+0x10/0x10
[ 1357.049563][T16229]  ? rcu_is_watching+0x13/0xc0
[ 1357.049580][T16229]  ? cap_capable+0x107/0x430
[ 1357.049598][T16229]  ? __pfx_shmem_fill_super+0x10/0x10
[ 1357.049611][T16229]  get_tree_nodev+0xdd/0x190
[ 1357.049624][T16229]  vfs_get_tree+0x92/0x320
[ 1357.049641][T16229]  path_mount+0x7d0/0x24c0
[ 1357.049659][T16229]  ? __pfx_path_mount+0x10/0x10
[ 1357.049675][T16229]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1357.049691][T16229]  ? putname+0xb1/0x110
[ 1357.049706][T16229]  ? kmem_cache_free+0x127/0x6c0
[ 1357.049728][T16229]  ? __x64_sys_mount+0x293/0x310
[ 1357.049744][T16229]  __x64_sys_mount+0x293/0x310
[ 1357.049760][T16229]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1357.049781][T16229]  do_syscall_64+0x123/0x790
[ 1357.049797][T16229]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1357.049810][T16229] RIP: 0033:0x7f2ba299e159
[ 1357.049819][T16229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1357.049830][T16229] RSP: 002b:00007f2ba37f1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1357.049841][T16229] RAX: ffffffffffffffda RBX: 00007f2ba2c25fa0 RCX: 00007f2ba299e159
[ 1357.049848][T16229] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 0000000000000000
[ 1357.049855][T16229] RBP: 00007f2ba2a3503b R08: 0000200000000200 R09: 0000000000000000
[ 1357.049862][T16229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1357.049868][T16229] R13: 00007f2ba2c26038 R14: 00007f2ba2c25fa0 R15: 00007ffeb4c44a68
[ 1357.049883][T16229]  </TASK>
[ 1357.250549][T11418] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[ 1357.404872][T11418] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[ 1357.406247][T11418] usb 9-1: config 1 has an invalid interface number: 3 but max is 0
[ 1357.406272][T11418] usb 9-1: config 1 has no interface number 0
[ 1357.408465][T11418] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1357.408485][T11418] usb 9-1: Product: syz
[ 1357.408498][T11418] usb 9-1: Manufacturer: syz
[ 1357.408510][T11418] usb 9-1: SerialNumber: syz
[ 1357.435397][T11418] usb 9-1: 3:1 : does not exist
[ 1357.435418][T11418] usb 9-1: 3:2 : does not exist
[ 1358.021578][T16235] tipc: Enabled bearer <eth:team0>, priority 0
[ 1358.053552][T16233] syz.4.3213 (16233): drop_caches: 2
[ 1358.993919][T16244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3217'.
[ 1359.053283][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3217'.
[ 1359.057885][T16247] FAULT_INJECTION: forcing a failure.
[ 1359.057885][T16247] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1359.057964][T16247] CPU: 2 UID: 0 PID: 16247 Comm: syz.0.3216 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1359.057992][T16247] Tainted: [L]=SOFTLOCKUP
[ 1359.057999][T16247] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1359.058009][T16247] Call Trace:
[ 1359.058016][T16247]  <TASK>
[ 1359.058024][T16247]  dump_stack_lvl+0x100/0x190
[ 1359.058054][T16247]  should_fail_ex.cold+0x5/0xa
[ 1359.058090][T16247]  get_futex_key+0x1d0/0x14f0
[ 1359.058119][T16247]  ? __pfx_get_futex_key+0x10/0x10
[ 1359.058141][T16247]  ? __lock_acquire+0x5c0/0x1f40
[ 1359.058162][T16247]  ? futex_wake+0x4ea/0x5e0
[ 1359.058196][T16247]  futex_wake+0xf4/0x5e0
[ 1359.058221][T16247]  ? lock_acquire+0x1d1/0x380
[ 1359.058243][T16247]  ? __pfx_futex_wake+0x10/0x10
[ 1359.058274][T16247]  ? __fget_files+0x21f/0x3d0
[ 1359.058300][T16247]  do_futex+0x2b2/0x440
[ 1359.058325][T16247]  ? __pfx_do_futex+0x10/0x10
[ 1359.058348][T16247]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1359.058378][T16247]  __x64_sys_futex+0x34f/0x4d0
[ 1359.058406][T16247]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1359.058442][T16247]  do_syscall_64+0x123/0x790
[ 1359.058467][T16247]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1359.058486][T16247] RIP: 0033:0x7f2ba299e159
[ 1359.058501][T16247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1359.058517][T16247] RSP: 002b:00007f2ba37cf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1359.058562][T16247] RAX: ffffffffffffffda RBX: 00007f2ba2c26098 RCX: 00007f2ba299e159
[ 1359.058573][T16247] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2ba2c2609c
[ 1359.058585][T16247] RBP: 00007f2ba2c26090 R08: 0000000000000001 R09: 0000000000000000
[ 1359.058596][T16247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1359.058607][T16247] R13: 00007f2ba2c26128 R14: 00007ffeb4c44980 R15: 00007ffeb4c44a68
[ 1359.058630][T16247]  </TASK>
[ 1360.006965][T11418] usb 9-1: USB disconnect, device number 26
[ 1361.481633][ T1441] ieee802154 phy1 wpan1: encryption failed: -22
[ 1367.045119][T16265] ALSA: seq fatal error: cannot create timer (-19)
[ 1370.003640][   T43] audit: type=1400 audit(1789333532.356:1183): avc:  denied  { read } for  pid=16285 comm="syz.0.3227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1370.010065][   T43] audit: type=1400 audit(1789333532.356:1184): avc:  denied  { write } for  pid=16286 comm="syz.4.3229" name="subsystems" dev="configfs" ino=72240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1370.010098][   T43] audit: type=1400 audit(1789333532.356:1185): avc:  denied  { write } for  pid=16286 comm="syz.4.3229" name="subsystems" dev="configfs" ino=72240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1370.054747][T16290] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3227'.
[ 1372.011313][T16299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3232'.
[ 1372.017294][T16298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3233'.
[ 1372.022421][T16300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3230'.
[ 1372.033311][T16299] team1: entered promiscuous mode
[ 1372.033347][T16299] team1: entered allmulticast mode
[ 1372.033560][T16299] 8021q: adding VLAN 0 to HW filter on device team1
[ 1372.050890][T16298] ovs-system: entered promiscuous mode
[ 1372.125205][T16308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3234'.
[ 1377.087320][T16322] FAULT_INJECTION: forcing a failure.
[ 1377.087320][T16322] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1377.087345][T16322] CPU: 2 UID: 0 PID: 16322 Comm: syz.0.3235 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1377.087362][T16322] Tainted: [L]=SOFTLOCKUP
[ 1377.087368][T16322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1377.087375][T16322] Call Trace:
[ 1377.087380][T16322]  <TASK>
[ 1377.087386][T16322]  dump_stack_lvl+0x100/0x190
[ 1377.087406][T16322]  should_fail_ex.cold+0x5/0xa
[ 1377.087423][T16322]  get_futex_key+0x1d0/0x14f0
[ 1377.087440][T16322]  ? __pfx_get_futex_key+0x10/0x10
[ 1377.087453][T16322]  ? __lock_acquire+0x5c0/0x1f40
[ 1377.087466][T16322]  ? futex_wake+0x4ea/0x5e0
[ 1377.087486][T16322]  futex_wake+0xf4/0x5e0
[ 1377.087503][T16322]  ? lock_acquire+0x1d1/0x380
[ 1377.087517][T16322]  ? __pfx_futex_wake+0x10/0x10
[ 1377.087536][T16322]  ? __fget_files+0x21f/0x3d0
[ 1377.087554][T16322]  do_futex+0x2b2/0x440
[ 1377.087570][T16322]  ? __pfx_do_futex+0x10/0x10
[ 1377.087586][T16322]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1377.087604][T16322]  __x64_sys_futex+0x34f/0x4d0
[ 1377.087621][T16322]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1377.087642][T16322]  do_syscall_64+0x123/0x790
[ 1377.087658][T16322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1377.087670][T16322] RIP: 0033:0x7f2ba299e159
[ 1377.087680][T16322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1377.087690][T16322] RSP: 002b:00007f2ba37ce0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1377.087702][T16322] RAX: ffffffffffffffda RBX: 00007f2ba2c26098 RCX: 00007f2ba299e159
[ 1377.087709][T16322] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2ba2c2609c
[ 1377.087716][T16322] RBP: 00007f2ba2c26090 R08: 0000000000000001 R09: 0000000000000000
[ 1377.087724][T16322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1377.087732][T16322] R13: 00007f2ba2c26128 R14: 00007ffeb4c44980 R15: 00007ffeb4c44a68
[ 1377.087747][T16322]  </TASK>
[ 1377.991551][T16325] netlink: 'syz.0.3240': attribute type 2 has an invalid length.
[ 1377.991624][T16326] netlink: 'syz.0.3240': attribute type 2 has an invalid length.
[ 1378.003811][T16330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3241'.
[ 1378.064144][T16332] cgroup: Unknown subsys name 'pcr'
[ 1383.117448][   T43] audit: type=1400 audit(1789333545.467:1186): avc:  denied  { mount } for  pid=16351 comm="syz.1.3250" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[ 1383.132490][T16353] No source specified
[ 1386.988605][T16362] FAULT_INJECTION: forcing a failure.
[ 1386.988605][T16362] name failslab, interval 1, probability 0, space 0, times 0
[ 1386.988628][T16362] CPU: 0 UID: 0 PID: 16362 Comm: syz.4.3254 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1386.988644][T16362] Tainted: [L]=SOFTLOCKUP
[ 1386.988649][T16362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1386.988655][T16362] Call Trace:
[ 1386.988660][T16362]  <TASK>
[ 1386.988665][T16362]  dump_stack_lvl+0x100/0x190
[ 1386.988685][T16362]  should_fail_ex.cold+0x5/0xa
[ 1386.988702][T16362]  should_failslab+0xc2/0x120
[ 1386.988716][T16362]  __kmalloc_cache_noprof+0x91/0x6d0
[ 1386.988734][T16362]  ? __pfx_ida_alloc_range+0x10/0x10
[ 1386.988750][T16362]  ? __hci_conn_add+0x1f4/0x1dc0
[ 1386.988766][T16362]  __hci_conn_add+0x1f4/0x1dc0
[ 1386.988782][T16362]  hci_conn_add_unset+0x76/0x120
[ 1386.988797][T16362]  hci_connect_acl+0x51d/0x7b0
[ 1386.988815][T16362]  hci_connect_sco+0x58/0xef0
[ 1386.988833][T16362]  sco_sock_connect+0x63a/0xf60
[ 1386.988851][T16362]  ? __pfx_sco_sock_connect+0x10/0x10
[ 1386.988866][T16362]  ? __local_bh_enable_ip+0xa5/0x120
[ 1386.988879][T16362]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1386.988894][T16362]  ? selinux_netlbl_socket_connect+0x30/0x40
[ 1386.988907][T16362]  ? __local_bh_enable_ip+0xa5/0x120
[ 1386.988920][T16362]  ? selinux_netlbl_socket_connect+0x30/0x40
[ 1386.988933][T16362]  ? selinux_socket_connect+0x6b/0x80
[ 1386.988946][T16362]  __sys_connect_file+0x146/0x1a0
[ 1386.988967][T16362]  __sys_connect+0x141/0x170
[ 1386.988979][T16362]  ? __pfx___sys_connect+0x10/0x10
[ 1386.988990][T16362]  ? __fget_files+0x21f/0x3d0
[ 1386.989009][T16362]  ? __pfx_ksys_write+0x10/0x10
[ 1386.989024][T16362]  __x64_sys_connect+0x72/0xb0
[ 1386.989035][T16362]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1386.989050][T16362]  do_syscall_64+0x123/0x790
[ 1386.989069][T16362]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1386.989081][T16362] RIP: 0033:0x7f937219e159
[ 1386.989091][T16362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1386.989101][T16362] RSP: 002b:00007f93730c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1386.989113][T16362] RAX: ffffffffffffffda RBX: 00007f9372425fa0 RCX: 00007f937219e159
[ 1386.989120][T16362] RDX: 0000000000000008 RSI: 0000200000000040 RDI: 0000000000000004
[ 1386.989127][T16362] RBP: 00007f93730c4090 R08: 0000000000000000 R09: 0000000000000000
[ 1386.989133][T16362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1386.989140][T16362] R13: 00007f9372426038 R14: 00007f9372425fa0 R15: 00007ffce89eaf78
[ 1386.989154][T16362]  </TASK>
[ 1387.277458][T14958] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[ 1387.437540][T14958] usb 9-1: Using ep0 maxpacket: 32
[ 1387.438652][T14958] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1387.439795][T14958] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 1387.439832][T14958] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1387.439855][T14958] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1387.439879][T14958] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1387.441986][T14958] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1387.442006][T14958] usb 9-1: Product: syz
[ 1387.442021][T14958] usb 9-1: Manufacturer: syz
[ 1387.442035][T14958] usb 9-1: SerialNumber: syz
[ 1387.457486][    C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 1387.465161][T14958] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input30
[ 1387.667364][T14958] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 1387.667377][T14958]  (id 0x00)
[ 1387.728869][T14958] rc_core: IR keymap rc-imon-pad not found
[ 1387.728882][T14958] Registered IR keymap rc-empty
[ 1387.728920][T14958] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 1387.728929][T14958] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1387.885134][T14958] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0
[ 1387.886268][T14958] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input31
[ 1387.889554][T14958] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:27> initialized
[ 1390.013201][ T5875] usb 9-1: USB disconnect, device number 27
[ 1391.011431][T16391] FAULT_INJECTION: forcing a failure.
[ 1391.011431][T16391] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1391.011453][T16391] CPU: 2 UID: 0 PID: 16391 Comm: syz.3.3263 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1391.011469][T16391] Tainted: [L]=SOFTLOCKUP
[ 1391.011474][T16391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1391.011480][T16391] Call Trace:
[ 1391.011485][T16391]  <TASK>
[ 1391.011489][T16391]  dump_stack_lvl+0x100/0x190
[ 1391.011531][T16391]  should_fail_ex.cold+0x5/0xa
[ 1391.011550][T16391]  _copy_from_user+0x2e/0xd0
[ 1391.011564][T16391]  uhid_char_write+0x18d/0x10e0
[ 1391.011582][T16391]  vfs_write+0x2aa/0x1050
[ 1391.011600][T16391]  ? __pfx_uhid_char_write+0x10/0x10
[ 1391.011620][T16391]  ? lock_acquire+0x1d1/0x380
[ 1391.011636][T16391]  ? __fget_files+0x34/0x3d0
[ 1391.011654][T16391]  ? __pfx_vfs_write+0x10/0x10
[ 1391.011670][T16391]  ? find_held_lock+0x2b/0x80
[ 1391.011689][T16391]  ? __fget_files+0x215/0x3d0
[ 1391.011702][T16391]  ? __fget_files+0x215/0x3d0
[ 1391.011718][T16391]  ? __fget_files+0x21f/0x3d0
[ 1391.011736][T16391]  ksys_write+0x1f8/0x250
[ 1391.011748][T16391]  ? __pfx_ksys_write+0x10/0x10
[ 1391.011764][T16391]  do_syscall_64+0x123/0x790
[ 1391.011781][T16391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1391.011793][T16391] RIP: 0033:0x7ff02ef9e159
[ 1391.011819][T16391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1391.011830][T16391] RSP: 002b:00007ff02feef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1391.011841][T16391] RAX: ffffffffffffffda RBX: 00007ff02f225fa0 RCX: 00007ff02ef9e159
[ 1391.011849][T16391] RDX: 0000000000000004 RSI: 00002000000002c0 RDI: 0000000000000004
[ 1391.011856][T16391] RBP: 00007ff02feef090 R08: 0000000000000000 R09: 0000000000000000
[ 1391.011862][T16391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1391.011870][T16391] R13: 00007ff02f226038 R14: 00007ff02f225fa0 R15: 00007ffd4e32c878
[ 1391.011885][T16391]  </TASK>
[ 1391.014779][T16392] FAULT_INJECTION: forcing a failure.
[ 1391.014779][T16392] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1391.014822][T16392] CPU: 0 UID: 0 PID: 16392 Comm: syz.0.3260 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1391.014847][T16392] Tainted: [L]=SOFTLOCKUP
[ 1391.014854][T16392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1391.014865][T16392] Call Trace:
[ 1391.014872][T16392]  <TASK>
[ 1391.014880][T16392]  dump_stack_lvl+0x100/0x190
[ 1391.014911][T16392]  should_fail_ex.cold+0x5/0xa
[ 1391.014937][T16392]  _copy_from_user+0x2e/0xd0
[ 1391.014958][T16392]  copy_msghdr_from_user+0x9f/0x4c0
[ 1391.014987][T16392]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1391.015022][T16392]  ? lock_acquire+0x1d1/0x380
[ 1391.015042][T16392]  ? get_pid_task+0x2a/0x250
[ 1391.015070][T16392]  ___sys_sendmsg+0x106/0x1e0
[ 1391.015100][T16392]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1391.015127][T16392]  ? get_pid_task+0x106/0x250
[ 1391.015161][T16392]  ? find_held_lock+0x2b/0x80
[ 1391.015203][T16392]  __sys_sendmsg+0x160/0x210
[ 1391.015226][T16392]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1391.015259][T16392]  do_syscall_64+0x123/0x790
[ 1391.015285][T16392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1391.015305][T16392] RIP: 0033:0x7f2ba299e159
[ 1391.015320][T16392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1391.015338][T16392] RSP: 002b:00007f2ba37f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1391.015356][T16392] RAX: ffffffffffffffda RBX: 00007f2ba2c25fa0 RCX: 00007f2ba299e159
[ 1391.015369][T16392] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1391.015380][T16392] RBP: 00007f2ba37f1090 R08: 0000000000000000 R09: 0000000000000000
[ 1391.015392][T16392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1391.015404][T16392] R13: 00007f2ba2c26038 R14: 00007f2ba2c25fa0 R15: 00007ffeb4c44a68
[ 1391.015430][T16392]  </TASK>
[ 1391.069565][T16395] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3262'.
[ 1394.836610][   T61] page_pool_release_retry() stalled pool shutdown: id 73, 35 inflight 965 sec
[ 1395.000212][T16417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3270'.
[ 1395.001701][   T43] audit: type=1400 audit(1789333557.348:1187): avc:  denied  { append } for  pid=16414 comm="syz.0.3268" name="pfkey" dev="proc" ino=4026534122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[ 1395.008142][T16419] openvswitch: netlink: Duplicate key (type 6).
[ 1395.055089][T16425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3272'.
[ 1395.148944][   T43] audit: type=1400 audit(1789333557.498:1188): avc:  denied  { name_bind } for  pid=16429 comm="syz.0.3274" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[ 1395.149137][   T43] audit: type=1400 audit(1789333557.498:1189): avc:  denied  { node_bind } for  pid=16429 comm="syz.0.3274" saddr=255.255.255.255 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[ 1395.153247][T16430] netlink: 'syz.0.3274': attribute type 1 has an invalid length.
[ 1395.153304][T16431] kAFS: unable to lookup cell '1'
[ 1395.158623][T16433] erspan1: entered allmulticast mode
[ 1395.197713][T16430] bond0: entered promiscuous mode
[ 1395.197746][T16430] bond0: entered allmulticast mode
[ 1395.197935][T16430] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1398.999978][T16444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3278'.
[ 1399.048662][T16444] cgroup: Unknown subsys name 'pcr'
[ 1399.242367][T16463] FAULT_INJECTION: forcing a failure.
[ 1399.242367][T16463] name failslab, interval 1, probability 0, space 0, times 0
[ 1399.242388][T16463] CPU: 2 UID: 0 PID: 16463 Comm: syz.4.3280 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1399.242404][T16463] Tainted: [L]=SOFTLOCKUP
[ 1399.242408][T16463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1399.242415][T16463] Call Trace:
[ 1399.242420][T16463]  <TASK>
[ 1399.242425][T16463]  dump_stack_lvl+0x100/0x190
[ 1399.242445][T16463]  should_fail_ex.cold+0x5/0xa
[ 1399.242462][T16463]  should_failslab+0xc2/0x120
[ 1399.242478][T16463]  __kmalloc_noprof+0xfc/0x840
[ 1399.242490][T16463]  ? tomoyo_encode2+0xfb/0x3c0
[ 1399.242506][T16463]  tomoyo_encode2+0xfb/0x3c0
[ 1399.242528][T16463]  tomoyo_encode+0x29/0x50
[ 1399.242541][T16463]  tomoyo_mount_acl+0x14c/0x8b0
[ 1399.242553][T16463]  ? is_bpf_text_address+0x8a/0x1a0
[ 1399.242569][T16463]  ? is_bpf_text_address+0x8a/0x1a0
[ 1399.242586][T16463]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1399.242599][T16463]  ? __pfx_tomoyo_mount_acl+0x10/0x10
[ 1399.242611][T16463]  ? kernel_text_address+0x8d/0x100
[ 1399.242630][T16463]  ? unwind_get_return_address+0x59/0xa0
[ 1399.242647][T16463]  ? arch_stack_walk+0xa6/0xf0
[ 1399.242663][T16463]  ? __lock_acquire+0x5c0/0x1f40
[ 1399.242683][T16463]  ? tomoyo_mount_permission+0x1f6/0x460
[ 1399.242697][T16463]  ? tomoyo_domain+0xb2/0x150
[ 1399.242712][T16463]  ? tomoyo_profile+0x47/0x60
[ 1399.242729][T16463]  tomoyo_mount_permission+0x214/0x460
[ 1399.242742][T16463]  ? tomoyo_mount_permission+0x1f6/0x460
[ 1399.242755][T16463]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[ 1399.242778][T16463]  security_sb_mount+0xdd/0x270
[ 1399.242791][T16463]  path_mount+0x158/0x24c0
[ 1399.242811][T16463]  ? __pfx_path_mount+0x10/0x10
[ 1399.242827][T16463]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1399.242844][T16463]  ? putname+0xb1/0x110
[ 1399.242859][T16463]  ? kmem_cache_free+0x127/0x6c0
[ 1399.242880][T16463]  ? __x64_sys_mount+0x293/0x310
[ 1399.242897][T16463]  __x64_sys_mount+0x293/0x310
[ 1399.242913][T16463]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1399.242934][T16463]  do_syscall_64+0x123/0x790
[ 1399.242951][T16463]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1399.242963][T16463] RIP: 0033:0x7f937219e159
[ 1399.242973][T16463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1399.242984][T16463] RSP: 002b:00007f93730c4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1399.242997][T16463] RAX: ffffffffffffffda RBX: 00007f9372425fa0 RCX: 00007f937219e159
[ 1399.243005][T16463] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000000000
[ 1399.243012][T16463] RBP: 00007f93730c4090 R08: 0000000000000000 R09: 0000000000000000
[ 1399.243021][T16463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1399.243028][T16463] R13: 00007f9372426038 R14: 00007f9372425fa0 R15: 00007ffce89eaf78
[ 1399.243043][T16463]  </TASK>
[ 1399.370789][   T43] audit: type=1400 audit(1789333561.729:1190): avc:  denied  { create } for  pid=16465 comm="syz.0.3282" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1
[ 1399.386298][   T43] audit: type=1400 audit(1789333561.729:1191): avc:  denied  { write } for  pid=16465 comm="syz.0.3282" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1
[ 1404.245668][ T5875] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 1404.396648][ T5875] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[ 1404.397846][ T5875] usb 5-1: config 1 has an invalid interface number: 3 but max is 0
[ 1404.397870][ T5875] usb 5-1: config 1 has no interface number 0
[ 1404.400101][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1404.400124][ T5875] usb 5-1: Product: syz
[ 1404.400139][ T5875] usb 5-1: Manufacturer: syz
[ 1404.400154][ T5875] usb 5-1: SerialNumber: syz
[ 1404.408388][ T5875] usb 5-1: 3:1 : does not exist
[ 1404.408409][ T5875] usb 5-1: 3:2 : does not exist
[ 1405.004786][T16499] FAULT_INJECTION: forcing a failure.
[ 1405.004786][T16499] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1405.004807][T16499] CPU: 0 UID: 0 PID: 16499 Comm: syz.4.3287 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1405.004823][T16499] Tainted: [L]=SOFTLOCKUP
[ 1405.004827][T16499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1405.004834][T16499] Call Trace:
[ 1405.004838][T16499]  <TASK>
[ 1405.004843][T16499]  dump_stack_lvl+0x100/0x190
[ 1405.004863][T16499]  should_fail_ex.cold+0x5/0xa
[ 1405.004880][T16499]  _copy_to_user+0x32/0xd0
[ 1405.004893][T16499]  simple_read_from_buffer+0xcb/0x170
[ 1405.004909][T16499]  proc_fail_nth_read+0x1af/0x230
[ 1405.004925][T16499]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1405.004940][T16499]  ? rw_verify_area+0xce/0x6d0
[ 1405.004957][T16499]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1405.004994][T16499]  vfs_read+0x1e4/0xb40
[ 1405.005007][T16499]  ? lock_acquire+0x1d1/0x380
[ 1405.005019][T16499]  ? __fget_files+0x34/0x3d0
[ 1405.005033][T16499]  ? __pfx_vfs_read+0x10/0x10
[ 1405.005044][T16499]  ? find_held_lock+0x2b/0x80
[ 1405.005060][T16499]  ? __fget_files+0x215/0x3d0
[ 1405.005076][T16499]  ? __fget_files+0x21f/0x3d0
[ 1405.005094][T16499]  ksys_read+0x12a/0x250
[ 1405.005105][T16499]  ? __pfx_ksys_read+0x10/0x10
[ 1405.005121][T16499]  do_syscall_64+0x123/0x790
[ 1405.005138][T16499]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1405.005150][T16499] RIP: 0033:0x7f937215e98e
[ 1405.005161][T16499] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1405.005172][T16499] RSP: 002b:00007f93730c3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1405.005184][T16499] RAX: ffffffffffffffda RBX: 00007f93730c46c0 RCX: 00007f937215e98e
[ 1405.005192][T16499] RDX: 000000000000000f RSI: 00007f93730c40a0 RDI: 0000000000000005
[ 1405.005199][T16499] RBP: 00007f93730c4090 R08: 0000000000000000 R09: 0000000000000000
[ 1405.005206][T16499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1405.005212][T16499] R13: 00007f9372426038 R14: 00007f9372425fa0 R15: 00007ffce89eaf78
[ 1405.005227][T16499]  </TASK>
[ 1407.004590][T15700] usb 5-1: USB disconnect, device number 52
[ 1409.985722][T16523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3296'.
[ 1410.068780][   T43] audit: type=1400 audit(1789333572.420:1192): avc:  denied  { map } for  pid=16522 comm="syz.0.3296" path="socket:[84748]" dev="sockfs" ino=84748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[ 1414.045474][   T43] audit: type=1400 audit(1789333576.390:1193): avc:  denied  { mount } for  pid=16538 comm="syz.3.3303" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[ 1414.073655][T16541] iommufd_mock iommufd_mock0: Adding to iommu group 9
[ 1414.116486][T16542] jffs2: notice: (16542) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 1416.011447][T16556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3306'.
[ 1416.028594][T16557] openvswitch: netlink: Duplicate or invalid key (type 0).
[ 1416.073349][T16560] cgroup: Unknown subsys name 'pcr'
[ 1417.995848][T16563] FAULT_INJECTION: forcing a failure.
[ 1417.995848][T16563] name failslab, interval 1, probability 0, space 0, times 0
[ 1417.995870][T16563] CPU: 2 UID: 0 PID: 16563 Comm: syz.0.3308 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1417.995886][T16563] Tainted: [L]=SOFTLOCKUP
[ 1417.995890][T16563] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1417.995897][T16563] Call Trace:
[ 1417.995902][T16563]  <TASK>
[ 1417.995907][T16563]  dump_stack_lvl+0x100/0x190
[ 1417.995928][T16563]  should_fail_ex.cold+0x5/0xa
[ 1417.995945][T16563]  should_failslab+0xc2/0x120
[ 1417.995961][T16563]  __kmalloc_cache_noprof+0x91/0x6d0
[ 1417.995979][T16563]  ? ffs_fs_init_fs_context+0x43/0x1f0
[ 1417.995999][T16563]  ffs_fs_init_fs_context+0x43/0x1f0
[ 1417.996017][T16563]  alloc_fs_context+0x60c/0xf40
[ 1417.996037][T16563]  path_mount+0xdbd/0x24c0
[ 1417.996056][T16563]  ? __pfx_path_mount+0x10/0x10
[ 1417.996071][T16563]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1417.996089][T16563]  ? putname+0xb1/0x110
[ 1417.996103][T16563]  ? kmem_cache_free+0x127/0x6c0
[ 1417.996124][T16563]  ? __x64_sys_mount+0x293/0x310
[ 1417.996140][T16563]  __x64_sys_mount+0x293/0x310
[ 1417.996156][T16563]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1417.996176][T16563]  do_syscall_64+0x123/0x790
[ 1417.996193][T16563]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1417.996205][T16563] RIP: 0033:0x7f2ba299e159
[ 1417.996215][T16563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1417.996226][T16563] RSP: 002b:00007f2ba37f1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1417.996238][T16563] RAX: ffffffffffffffda RBX: 00007f2ba2c25fa0 RCX: 00007f2ba299e159
[ 1417.996245][T16563] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000000000
[ 1417.996252][T16563] RBP: 00007f2ba37f1090 R08: 0000000000000000 R09: 0000000000000000
[ 1417.996258][T16563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1417.996265][T16563] R13: 00007f2ba2c26038 R14: 00007f2ba2c25fa0 R15: 00007ffeb4c44a68
[ 1417.996279][T16563]  </TASK>
[ 1418.161923][T16574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3311'.
[ 1421.986770][T16576] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20003
[ 1422.915086][ T1441] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.243782][T11418] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 1423.404056][T11418] usb 5-1: Using ep0 maxpacket: 32
[ 1423.404949][T11418] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1423.406042][T11418] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1423.406064][T11418] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1423.406081][T11418] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1423.406117][T11418] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1423.406136][T11418] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1423.406157][T11418] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1423.406188][T11418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1423.409985][T11418] usb 5-1: config 0 descriptor??
[ 1423.615828][T11418] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1423.619926][T11418] usb 5-1: USB disconnect, device number 53
[ 1423.623313][T11418] usblp0: removed
[ 1424.007550][T16594] overlayfs: failed to resolve './file1': -2
[ 1424.013361][T16598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3320'.
[ 1424.045618][   T43] audit: type=1400 audit(1789333586.401:1194): avc:  denied  { unmount } for  pid=11379 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 1424.053704][T11418] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 1424.064261][T16598] cgroup: Unknown subsys name 'pcr'
[ 1424.214285][T11418] usb 5-1: Using ep0 maxpacket: 32
[ 1424.214746][T11418] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1424.215642][T11418] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1424.215656][T11418] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1424.215667][T11418] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1424.215688][T11418] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1424.215701][T11418] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1424.215714][T11418] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1424.215734][T11418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1424.217986][T11418] usb 5-1: config 0 descriptor??
[ 1424.422738][T11418] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1424.773451][   T43] audit: type=1400 audit(1789333587.121:1195): avc:  denied  { ioctl } for  pid=16585 comm="syz.0.3316" path="/dev/usb/lp0" dev="devtmpfs" ino=3604 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[ 1424.777893][T16599] usblp0:failed reading printer status (-32)
[ 1424.785450][T11418] usb 5-1: USB disconnect, device number 54
[ 1424.792266][T11418] usblp0: removed
[ 1426.041977][T16609] FAULT_INJECTION: forcing a failure.
[ 1426.041977][T16609] name failslab, interval 1, probability 0, space 0, times 0
[ 1426.042012][T16609] CPU: 0 UID: 0 PID: 16609 Comm: syz.0.3323 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1426.042039][T16609] Tainted: [L]=SOFTLOCKUP
[ 1426.042046][T16609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1426.042058][T16609] Call Trace:
[ 1426.042065][T16609]  <TASK>
[ 1426.042074][T16609]  dump_stack_lvl+0x100/0x190
[ 1426.042109][T16609]  should_fail_ex.cold+0x5/0xa
[ 1426.042137][T16609]  should_failslab+0xc2/0x120
[ 1426.042164][T16609]  __kmalloc_cache_noprof+0x91/0x6d0
[ 1426.042195][T16609]  ? io_uring_alloc_task_context+0xa7/0x656
[ 1426.042249][T16609]  io_uring_alloc_task_context+0xa7/0x656
[ 1426.042274][T16609]  ? __pfx_io_uring_alloc_task_context+0x10/0x10
[ 1426.042299][T16609]  ? lock_acquire+0x1d1/0x380
[ 1426.042318][T16609]  ? __fget_files+0x34/0x3d0
[ 1426.042350][T16609]  __io_uring_add_tctx_node.cold+0x15/0x20a
[ 1426.042374][T16609]  ? __pfx___io_uring_add_tctx_node+0x10/0x10
[ 1426.042412][T16609]  ? __fget_files+0x21f/0x3d0
[ 1426.042440][T16609]  __io_uring_add_tctx_node_from_submit+0x89/0x130
[ 1426.042473][T16609]  __do_sys_io_uring_enter+0x1626/0x1b10
[ 1426.042500][T16609]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1426.042534][T16609]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[ 1426.042557][T16609]  ? __x64_sys_futex+0x34f/0x4d0
[ 1426.042583][T16609]  ? __x64_sys_futex+0x358/0x4d0
[ 1426.042612][T16609]  ? xfd_validate_state+0x129/0x190
[ 1426.042644][T16609]  do_syscall_64+0x123/0x790
[ 1426.042673][T16609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1426.042694][T16609] RIP: 0033:0x7f2ba299e159
[ 1426.042711][T16609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1426.042729][T16609] RSP: 002b:00007f2ba37cdfb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1426.042748][T16609] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ba299e159
[ 1426.042761][T16609] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000003
[ 1426.042773][T16609] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000008
[ 1426.042784][T16609] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[ 1426.042796][T16609] R13: 00007f2ba2c26128 R14: 00007f2ba2c26090 R15: 00007ffeb4c44a68
[ 1426.042823][T16609]  </TASK>
[ 1427.998422][T16619] tmpfs: Cannot enable quota on remount
[ 1429.992077][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3329'.
[ 1429.997986][T16627] openvswitch: ovs-system: Dropping previously announced user features
[ 1430.003458][T16630] CIFS: Attempting to mount //127.0.0.1/share
[ 1430.833698][T16630] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1430.833744][T16630] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1430.984891][T16634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3332'.
[ 1430.985421][T16634] openvswitch: ovs-system: Dropping previously announced user features
[ 1431.003204][T16638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3333'.
[ 1431.005160][T16638] openvswitch: ovs-system: Dropping previously announced user features
[ 1431.078039][T16645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3335'.
[ 1434.020915][T16647] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1434.035622][T16647] kvm: pic: level sensitive irq not supported
[ 1434.036125][T16647] kvm: pic: non byte read
[ 1434.037053][T16647] kvm: pic: level sensitive irq not supported
[ 1434.037321][T16647] kvm: pic: non byte read
[ 1434.038258][T16647] kvm: pic: level sensitive irq not supported
[ 1434.038529][T16647] kvm: pic: non byte read
[ 1434.039457][T16647] kvm: pic: level sensitive irq not supported
[ 1434.039724][T16647] kvm: pic: non byte read
[ 1434.041234][T16647] kvm: pic: level sensitive irq not supported
[ 1434.041529][T16647] kvm: pic: non byte read
[ 1434.064278][T16647] kvm: pic: level sensitive irq not supported
[ 1434.065013][T16647] kvm: pic: non byte read
[ 1434.066129][T16647] kvm: pic: level sensitive irq not supported
[ 1434.066746][T16647] kvm: pic: non byte read
[ 1434.988885][T16651] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32)
[ 1434.998149][   T43] audit: type=1400 audit(1789333597.353:1196): avc:  denied  { create } for  pid=16652 comm="syz.0.3338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1436.008479][T16659] No source specified
[ 1436.015540][   T43] audit: type=1400 audit(1789333598.373:1197): avc:  denied  { read } for  pid=16660 comm="syz.3.3343" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 1436.015583][   T43] audit: type=1400 audit(1789333598.373:1198): avc:  denied  { open } for  pid=16660 comm="syz.3.3343" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 1436.215813][   T43] audit: type=1400 audit(1789333598.573:1199): avc:  denied  { write } for  pid=16670 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1436.337445][   T43] audit: type=1400 audit(1789333598.693:1200): avc:  denied  { write } for  pid=16673 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1436.479494][   T43] audit: type=1400 audit(1789333598.833:1201): avc:  denied  { write } for  pid=16676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1436.524844][   T43] audit: type=1400 audit(1789333598.883:1202): avc:  denied  { write } for  pid=16679 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1436.913892][   T43] audit: type=1400 audit(1789333599.273:1203): avc:  denied  { write } for  pid=16681 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1436.977229][   T43] audit: type=1400 audit(1789333599.333:1204): avc:  denied  { write } for  pid=16684 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1437.054397][   T43] audit: type=1400 audit(1789333599.413:1205): avc:  denied  { write } for  pid=16686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1444.049116][   T43] kauditd_printk_skb: 4 callbacks suppressed
[ 1444.049130][   T43] audit: type=1400 audit(1789333606.403:1210): avc:  denied  { create } for  pid=16706 comm="syz.1.3347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[ 1444.992462][T16721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3351'.
[ 1445.984336][T16731] fuse: fd is not a fuse device
[ 1448.502393][T16733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3355'.
[ 1448.503186][T16733] openvswitch: ovs-system: Dropping previously announced user features
[ 1448.543322][T16738] FAULT_INJECTION: forcing a failure.
[ 1448.543322][T16738] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1448.543355][T16738] CPU: 0 UID: 0 PID: 16738 Comm: syz.3.3357 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1448.543383][T16738] Tainted: [L]=SOFTLOCKUP
[ 1448.543391][T16738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1448.543403][T16738] Call Trace:
[ 1448.543411][T16738]  <TASK>
[ 1448.543420][T16738]  dump_stack_lvl+0x100/0x190
[ 1448.543454][T16738]  should_fail_ex.cold+0x5/0xa
[ 1448.543482][T16738]  get_futex_key+0x1d0/0x14f0
[ 1448.543513][T16738]  ? __pfx_get_futex_key+0x10/0x10
[ 1448.543537][T16738]  ? find_held_lock+0x2b/0x80
[ 1448.543564][T16738]  ? avc_has_perm_noaudit+0x11e/0x3b0
[ 1448.543600][T16738]  futex_wake+0xf4/0x5e0
[ 1448.543635][T16738]  ? __pfx_futex_wake+0x10/0x10
[ 1448.543664][T16738]  ? find_held_lock+0x2b/0x80
[ 1448.543700][T16738]  ? __do_sys_fsconfig+0x564/0xcb0
[ 1448.543727][T16738]  ? __mutex_unlock_slowpath+0x35d/0x930
[ 1448.543762][T16738]  do_futex+0x2b2/0x440
[ 1448.543791][T16738]  ? __pfx_do_futex+0x10/0x10
[ 1448.543817][T16738]  ? rcu_is_watching+0x13/0xc0
[ 1448.543844][T16738]  ? __do_sys_fsconfig+0x31d/0xcb0
[ 1448.543866][T16738]  ? kfree+0x1e5/0x6d0
[ 1448.543892][T16738]  ? vfs_get_tree+0x1f9/0x320
[ 1448.543928][T16738]  __x64_sys_futex+0x34f/0x4d0
[ 1448.543958][T16738]  ? __pfx___do_sys_fsconfig+0x10/0x10
[ 1448.543979][T16738]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1448.544016][T16738]  do_syscall_64+0x123/0x790
[ 1448.544064][T16738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1448.544088][T16738] RIP: 0033:0x7ff02ef9e159
[ 1448.544107][T16738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1448.544126][T16738] RSP: 002b:00007ff02feef0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1448.544145][T16738] RAX: ffffffffffffffda RBX: 00007ff02f225fa8 RCX: 00007ff02ef9e159
[ 1448.544158][T16738] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff02f225fac
[ 1448.544170][T16738] RBP: 00007ff02f225fa0 R08: 0000000000000001 R09: 0000000000000000
[ 1448.544182][T16738] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 1448.544193][T16738] R13: 00007ff02f226038 R14: 00007ffd4e32c790 R15: 00007ffd4e32c878
[ 1448.544219][T16738]  </TASK>
[ 1448.665104][T16743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16743 comm=syz.1.3358
[ 1448.665227][T16743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16743 comm=syz.1.3358
[ 1448.665350][T16743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16743 comm=syz.1.3358
[ 1448.665464][T16743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16743 comm=syz.1.3358
[ 1448.665575][T16743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16743 comm=syz.1.3358
[ 1448.666875][T16743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16743 comm=syz.1.3358
[ 1448.666951][T16743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16743 comm=syz.1.3358
[ 1448.667321][T16743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16743 comm=syz.1.3358
[ 1448.667388][T16743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16743 comm=syz.1.3358
[ 1448.667449][T16743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16743 comm=syz.1.3358
[ 1449.545169][T16751] FAULT_INJECTION: forcing a failure.
[ 1449.545169][T16751] name failslab, interval 1, probability 0, space 0, times 0
[ 1449.545191][T16751] CPU: 0 UID: 0 PID: 16751 Comm: syz.0.3360 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1449.545209][T16751] Tainted: [L]=SOFTLOCKUP
[ 1449.545214][T16751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1449.545221][T16751] Call Trace:
[ 1449.545225][T16751]  <TASK>
[ 1449.545230][T16751]  dump_stack_lvl+0x100/0x190
[ 1449.545251][T16751]  should_fail_ex.cold+0x5/0xa
[ 1449.545268][T16751]  should_failslab+0xc2/0x120
[ 1449.545284][T16751]  __kmalloc_cache_noprof+0x91/0x6d0
[ 1449.545302][T16751]  ? io_uring_alloc_task_context+0xa7/0x656
[ 1449.545317][T16751]  io_uring_alloc_task_context+0xa7/0x656
[ 1449.545330][T16751]  ? __pfx_io_uring_alloc_task_context+0x10/0x10
[ 1449.545343][T16751]  ? lock_acquire+0x1d1/0x380
[ 1449.545355][T16751]  ? __fget_files+0x34/0x3d0
[ 1449.545372][T16751]  __io_uring_add_tctx_node.cold+0x15/0x20a
[ 1449.545385][T16751]  ? __pfx___io_uring_add_tctx_node+0x10/0x10
[ 1449.545403][T16751]  ? __fget_files+0x21f/0x3d0
[ 1449.545419][T16751]  __io_uring_add_tctx_node_from_submit+0x89/0x130
[ 1449.545437][T16751]  __do_sys_io_uring_enter+0x1626/0x1b10
[ 1449.545453][T16751]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1449.545471][T16751]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[ 1449.545484][T16751]  ? __x64_sys_futex+0x34f/0x4d0
[ 1449.545499][T16751]  ? __x64_sys_futex+0x358/0x4d0
[ 1449.545514][T16751]  ? fput+0x7c/0x100
[ 1449.545528][T16751]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1449.545543][T16751]  ? ksys_write+0x1ac/0x250
[ 1449.545554][T16751]  ? __pfx_ksys_write+0x10/0x10
[ 1449.545564][T16751]  ? kcov_ioctl+0x17a/0x760
[ 1449.545581][T16751]  do_syscall_64+0x123/0x790
[ 1449.545599][T16751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1449.545610][T16751] RIP: 0033:0x7f2ba299e159
[ 1449.545620][T16751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1449.545631][T16751] RSP: 002b:00007f2ba37cdfb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1449.545643][T16751] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ba299e159
[ 1449.545651][T16751] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000003
[ 1449.545657][T16751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000008
[ 1449.545664][T16751] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[ 1449.545670][T16751] R13: 00007f2ba2c26128 R14: 00007f2ba2c26090 R15: 00007ffeb4c44a68
[ 1449.545684][T16751]  </TASK>
[ 1450.494554][T16753] sctp: [Deprecated]: syz.4.3364 (pid 16753) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1450.494554][T16753] Use struct sctp_sack_info instead
[ 1450.506538][   T43] audit: type=1400 audit(1789333612.864:1211): avc:  denied  { setattr } for  pid=16754 comm="syz.0.3362" name="tun" dev="devtmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[ 1451.507451][T16768] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3368'.
[ 1451.508857][   T43] audit: type=1400 audit(1789333613.864:1212): avc:  denied  { listen } for  pid=16767 comm="syz.0.3368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1451.509047][T16768] cgroup: Unknown subsys name 'pcr'
[ 1452.497739][T16775] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3373'.
[ 1452.498171][T16775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3373'.
[ 1452.500902][T16775] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3373'.
[ 1452.501240][T16775] netlink: 'syz.3.3373': attribute type 32 has an invalid length.
[ 1452.686767][   T43] audit: type=1400 audit(1789333615.044:1213): avc:  denied  { create } for  pid=16789 comm="syz.1.3375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1452.689546][T16790] tipc: Failed to remove unknown binding: 66,0,0/33554436:1409317360/1409317361
[ 1452.690251][T16790] tipc: Failed to remove unknown binding: 66,0,0/33554436:1409317360/1409317361
[ 1452.714346][T16791] FAULT_INJECTION: forcing a failure.
[ 1452.714346][T16791] name failslab, interval 1, probability 0, space 0, times 0
[ 1452.714378][T16791] CPU: 2 UID: 0 PID: 16791 Comm: syz.0.3374 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1452.714403][T16791] Tainted: [L]=SOFTLOCKUP
[ 1452.714410][T16791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1452.714421][T16791] Call Trace:
[ 1452.714430][T16791]  <TASK>
[ 1452.714439][T16791]  dump_stack_lvl+0x100/0x190
[ 1452.714473][T16791]  should_fail_ex.cold+0x5/0xa
[ 1452.714499][T16791]  should_failslab+0xc2/0x120
[ 1452.714525][T16791]  __kmalloc_cache_noprof+0x91/0x6d0
[ 1452.714553][T16791]  ? io_uring_alloc_task_context+0xa7/0x656
[ 1452.714577][T16791]  io_uring_alloc_task_context+0xa7/0x656
[ 1452.714603][T16791]  ? __pfx_io_uring_alloc_task_context+0x10/0x10
[ 1452.714628][T16791]  ? lock_acquire+0x1d1/0x380
[ 1452.714646][T16791]  ? __fget_files+0x34/0x3d0
[ 1452.714671][T16791]  __io_uring_add_tctx_node.cold+0x15/0x20a
[ 1452.714693][T16791]  ? __pfx___io_uring_add_tctx_node+0x10/0x10
[ 1452.714721][T16791]  ? __fget_files+0x21f/0x3d0
[ 1452.714749][T16791]  __io_uring_add_tctx_node_from_submit+0x89/0x130
[ 1452.714781][T16791]  __do_sys_io_uring_enter+0x1626/0x1b10
[ 1452.714804][T16791]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1452.714839][T16791]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[ 1452.714863][T16791]  ? __x64_sys_futex+0x34f/0x4d0
[ 1452.714889][T16791]  ? __x64_sys_futex+0x358/0x4d0
[ 1452.714922][T16791]  ? xfd_validate_state+0x129/0x190
[ 1452.714953][T16791]  do_syscall_64+0x123/0x790
[ 1452.714980][T16791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1452.714998][T16791] RIP: 0033:0x7f2ba299e159
[ 1452.715012][T16791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1452.715028][T16791] RSP: 002b:00007f2ba37cdfb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1452.715048][T16791] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ba299e159
[ 1452.715063][T16791] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000004
[ 1452.715075][T16791] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000008
[ 1452.715086][T16791] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[ 1452.715096][T16791] R13: 00007f2ba2c26128 R14: 00007f2ba2c26090 R15: 00007ffeb4c44a68
[ 1452.715120][T16791]  </TASK>
[ 1452.750654][ T5875] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[ 1452.911569][ T5875] usb 8-1: New USB device found, idVendor=0711, idProduct=0b00, bcdDevice= 1.03
[ 1452.912478][ T5875] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1452.912495][ T5875] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1452.914214][ T5875] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1452.914227][ T5875] usb 8-1: Product: syz
[ 1452.914234][ T5875] usb 8-1: Manufacturer: syz
[ 1452.914242][ T5875] usb 8-1: SerialNumber: syz
[ 1453.122157][ T5875] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 2 vid 0x0711 pid 0x0B00
[ 1453.322894][T16775] sctp: [Deprecated]: syz.3.3373 (pid 16775) Use of int in maxseg socket option.
[ 1453.322894][T16775] Use struct sctp_assoc_value instead
[ 1453.327033][ T5875] usb 8-1: USB disconnect, device number 28
[ 1453.328989][ T5875] usblp0: removed
[ 1453.489651][T16793] ptrace attach of "/syz-executor exec"[11379] was attempted by "                                                                
   
   \x09   ����   \x09   �  
      �  �e     �  \x07      �   ��         ����       \x09            \x0d      q    �  
  ��        <   �   R\x0c[\x0b   �   \x07   �  \x09         \x0a   7        �  �\x07     V�     \x09   \x09    �Xـ   �   �N�@0        @   ^
  ��  ����   
            �
           �   ����u�`(�\x0d  \x09                   �
     g��� 
  \x09   
   0  �\x09   �         $  
   v      \x07      �bM        
   \x09      �\x0c      \x07   
   
      �  
�     

      ��    -�     �      \x07            \x09   \x09      \x07      �����  ���� �     �   �     @
   
�  �
  �   \x09   \x09   �        /\x0d  �  \x09   �               
   �(v�\x0a    
  \x09      \x09      \x07   \x09      
     7�}d   @   Ft  ����   \x07   l   �        
      �����\x0c  

  \x07   \x09      
         ����
[ 1453.491638][   T43] audit: type=1400 audit(1789333615.854:1214): avc:  denied  { write } for  pid=16792 comm="syz.4.3377" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1453.535326][    C2] hpet: Lost 1 RTC interrupts
[ 1455.074343][   T43] audit: type=1400 audit(1789333617.435:1215): avc:  denied  { create } for  pid=16801 comm="syz.1.3379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[ 1455.078578][T16812] 9p: Bad value for 'wfdno'
[ 1455.109550][T16805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3381'.
[ 1455.151731][   T61] page_pool_release_retry() stalled pool shutdown: id 73, 35 inflight 1025 sec
[ 1455.986404][T16820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3384'.
[ 1461.047919][T16850] FAULT_INJECTION: forcing a failure.
[ 1461.047919][T16850] name failslab, interval 1, probability 0, space 0, times 0
[ 1461.047941][T16850] CPU: 0 UID: 0 PID: 16850 Comm: syz.0.3392 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1461.047957][T16850] Tainted: [L]=SOFTLOCKUP
[ 1461.047961][T16850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1461.047968][T16850] Call Trace:
[ 1461.047973][T16850]  <TASK>
[ 1461.047978][T16850]  dump_stack_lvl+0x100/0x190
[ 1461.047998][T16850]  should_fail_ex.cold+0x5/0xa
[ 1461.048015][T16850]  should_failslab+0xc2/0x120
[ 1461.048030][T16850]  __kmalloc_cache_noprof+0x91/0x6d0
[ 1461.048048][T16850]  ? io_uring_alloc_task_context+0xa7/0x656
[ 1461.048063][T16850]  io_uring_alloc_task_context+0xa7/0x656
[ 1461.048077][T16850]  ? __pfx_io_uring_alloc_task_context+0x10/0x10
[ 1461.048090][T16850]  ? lock_acquire+0x1d1/0x380
[ 1461.048102][T16850]  ? __fget_files+0x34/0x3d0
[ 1461.048118][T16850]  __io_uring_add_tctx_node.cold+0x15/0x20a
[ 1461.048132][T16850]  ? __pfx___io_uring_add_tctx_node+0x10/0x10
[ 1461.048150][T16850]  ? __fget_files+0x21f/0x3d0
[ 1461.048171][T16850]  __io_uring_add_tctx_node_from_submit+0x89/0x130
[ 1461.048189][T16850]  __do_sys_io_uring_enter+0x1626/0x1b10
[ 1461.048206][T16850]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1461.048225][T16850]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[ 1461.048239][T16850]  ? __x64_sys_futex+0x34f/0x4d0
[ 1461.048254][T16850]  ? __x64_sys_futex+0x358/0x4d0
[ 1461.048270][T16850]  ? fput+0x7c/0x100
[ 1461.048284][T16850]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1461.048298][T16850]  ? ksys_write+0x1ac/0x250
[ 1461.048309][T16850]  ? __pfx_ksys_write+0x10/0x10
[ 1461.048320][T16850]  ? kcov_ioctl+0x17a/0x760
[ 1461.048337][T16850]  do_syscall_64+0x123/0x790
[ 1461.048353][T16850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1461.048365][T16850] RIP: 0033:0x7f2ba299e159
[ 1461.048374][T16850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1461.048385][T16850] RSP: 002b:00007f2ba37cdfb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1461.048396][T16850] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ba299e159
[ 1461.048403][T16850] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000003
[ 1461.048409][T16850] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000008
[ 1461.048416][T16850] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[ 1461.048422][T16850] R13: 00007f2ba2c26128 R14: 00007f2ba2c26090 R15: 00007ffeb4c44a68
[ 1461.048436][T16850]  </TASK>
[ 1462.511652][T16858] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1462.521213][T16856] ipvlan2: entered allmulticast mode
[ 1462.521739][T16856] virt_wifi0: entered allmulticast mode
[ 1462.525582][T16856] batman_adv: batadv0: Adding interface: ipvlan2
[ 1462.525592][T16856] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1462.525607][T16856] batman_adv: batadv0: Interface activated: ipvlan2
[ 1462.557460][T16858] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 1462.557634][T16858] overlayfs: failed to look up (tracing) for ino (-66)
[ 1462.566211][T16858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3397'.
[ 1462.586727][T16858] team0: Port device team_slave_0 removed
[ 1463.500457][T16874] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1463.501088][T16874] x_tables: duplicate underflow at hook 3
[ 1464.482553][T16878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3402'.
[ 1464.495857][T16878] cgroup: Unknown subsys name 'pcr'
[ 1465.079123][   T43] audit: type=1400 audit(1789333627.436:1216): avc:  denied  { bind } for  pid=16891 comm="syz.3.3407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1466.129380][   T43] audit: type=1400 audit(1789333628.486:1217): avc:  denied  { search } for  pid=16902 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1466.129439][   T43] audit: type=1400 audit(1789333628.496:1218): avc:  denied  { read write } for  pid=16902 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1
[ 1466.129621][   T43] audit: type=1400 audit(1789333628.496:1219): avc:  denied  { open } for  pid=16902 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1
[ 1466.130182][   T43] audit: type=1400 audit(1789333628.496:1220): avc:  denied  { lock } for  pid=16902 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1
[ 1466.130650][   T43] audit: type=1400 audit(1789333628.496:1221): avc:  denied  { read } for  pid=16902 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1

syzkaller
syzkaller login: [ 1467.509754][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3412'.
[ 1467.561233][   T43] audit: type=1400 audit(1789333629.926:1222): avc:  denied  { create } for  pid=16904 comm="syz.0.3410" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1467.562744][   T43] audit: type=1400 audit(1789333629.926:1223): avc:  denied  { map } for  pid=16904 comm="syz.0.3410" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=88091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1467.562770][   T43] audit: type=1400 audit(1789333629.926:1224): avc:  denied  { read write } for  pid=16904 comm="syz.0.3410" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=88091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1468.487852][T16926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3416'.
[ 1468.507345][T16928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3417'.
[ 1469.510113][T16934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3420'.
[ 1469.510719][T16934] openvswitch: ovs-system: Dropping previously announced user features
[ 1469.514402][   T43] audit: type=1400 audit(1789333631.876:1225): avc:  denied  { getopt } for  pid=16929 comm="syz.0.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[ 1470.005461][T16939] netlink: 'syz.0.3421': attribute type 10 has an invalid length.
[ 1471.006740][   T43] audit: type=1400 audit(1789333633.366:1226): avc:  denied  { ioctl } for  pid=16943 comm="syz.0.3424" path="socket:[87965]" dev="sockfs" ino=87965 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[ 1474.993134][   T43] audit: type=1400 audit(1789333637.357:1227): avc:  denied  { mount } for  pid=16959 comm="syz.0.3430" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 1475.002950][   T43] audit: type=1400 audit(1789333637.367:1228): avc:  denied  { unmount } for  pid=12250 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 1479.003620][T16974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3435'.
[ 1479.007440][T16974] IPv6: sit1: Disabled Multicast RS
[ 1479.008396][T16974] sit1: entered allmulticast mode
[ 1479.077131][   T43] audit: type=1400 audit(1789333641.437:1229): avc:  denied  { write } for  pid=16980 comm="syz.3.3438" path="socket:[88361]" dev="sockfs" ino=88361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1479.094485][   T43] audit: type=1400 audit(1789333641.457:1230): avc:  denied  { read } for  pid=16972 comm="syz.4.3436" path="socket:[89171]" dev="sockfs" ino=89171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1479.099046][   T43] audit: type=1400 audit(1789333641.467:1231): avc:  denied  { node_bind } for  pid=16973 comm="syz.1.3435" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[ 1479.099630][T16981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3435'.
[ 1479.228083][    C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1479.994859][   T43] audit: type=1400 audit(1789333642.357:1232): avc:  denied  { mounton } for  pid=16985 comm="syz.0.3439" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[ 1480.000886][T16986] FAT-fs (nbd0): unable to read boot sector
[ 1482.053131][T16991] ipt_ah: unknown flags FF
[ 1482.055023][T16991] No source specified
[ 1484.003165][T16994] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3442'.
[ 1484.042472][T17001] sit2: entered promiscuous mode
[ 1484.350204][ T1441] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.994153][T17012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3449'.
[ 1484.996858][T17011] vlan0: entered promiscuous mode
[ 1486.500442][T17023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3452'.
[ 1486.501020][T17023] openvswitch: ovs-system: Dropping previously announced user features
[ 1486.507508][T17021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3450'.
[ 1486.777288][   T61] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[ 1486.937847][   T61] usb 9-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1486.938766][   T61] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1486.938788][   T61] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1487.153601][   T61] qmi_wwan 9-1:1.0: cdc-wdm0: USB WDM device
[ 1487.180773][   T61] wwan wwan0: port wwan0qmi0 attached
[ 1487.373340][   T61] qmi_wwan 9-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, c6:61:2a:1c:e6:c7
[ 1487.445803][   T43] audit: type=1400 audit(1789333649.798:1233): avc:  denied  { write } for  pid=17034 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1487.515031][   T43] audit: type=1400 audit(1789333649.868:1234): avc:  denied  { write } for  pid=17039 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1487.557192][T17026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1487.561189][T17026] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1487.567843][T17026] bridge0: port 3(syz_tun) entered blocking state
[ 1487.568003][T17026] bridge0: port 3(syz_tun) entered disabled state
[ 1487.568143][T17026] syz_tun: entered allmulticast mode
[ 1487.570479][T17026] syz_tun: entered promiscuous mode
[ 1487.575663][T17044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1487.580216][T17044] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1487.581673][T17043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1487.581977][T17043] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1487.669214][   T43] audit: type=1400 audit(1789333650.028:1235): avc:  denied  { write } for  pid=17051 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1487.739452][   T43] audit: type=1400 audit(1789333650.098:1236): avc:  denied  { write } for  pid=17054 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1489.397444][T17083] sctp: [Deprecated]: syz.1.3463 (pid 17083) Use of int in max_burst socket option deprecated.
[ 1489.397444][T17083] Use struct sctp_assoc_value instead
[ 1489.397782][T17083] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3463'.
[ 1489.551559][ T5875] usb 9-1: USB disconnect, device number 28
[ 1489.552889][ T5875] qmi_wwan 9-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device
[ 1489.607865][   T43] audit: type=1400 audit(1789333651.958:1237): avc:  denied  { write } for  pid=17085 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1489.659527][   T43] audit: type=1400 audit(1789333652.028:1238): avc:  denied  { write } for  pid=17088 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1489.704426][ T5875] wwan wwan0: port wwan0qmi0 disconnected
[ 1489.752904][   T43] audit: type=1400 audit(1789333652.108:1239): avc:  denied  { write } for  pid=17090 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1489.805863][   T43] audit: type=1400 audit(1789333652.158:1240): avc:  denied  { write } for  pid=17093 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1489.886095][   T43] audit: type=1400 audit(1789333652.238:1241): avc:  denied  { write } for  pid=17095 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1489.935100][   T43] audit: type=1400 audit(1789333652.288:1242): avc:  denied  { write } for  pid=17098 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1491.511324][T17124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3467'.
[ 1491.520061][T17122] MTD: Attempt to mount non-MTD device "/dev/sr0"
[ 1491.563683][T17126] netlink: 'syz.3.3469': attribute type 32 has an invalid length.
[ 1491.563698][T17126] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3469'.
[ 1491.577262][T17130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3470'.
[ 1491.597112][T17122] cramfs: wrong magic
[ 1492.480989][T17138] netlink: 'syz.0.3472': attribute type 14 has an invalid length.
[ 1493.489274][T17143] input: syz0 as /devices/virtual/input/input32
[ 1494.047835][   T43] kauditd_printk_skb: 6 callbacks suppressed
[ 1494.047848][   T43] audit: type=1400 audit(1789333656.408:1249): avc:  denied  { create } for  pid=17147 comm="syz.0.3475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1494.049452][   T43] audit: type=1400 audit(1789333656.408:1250): avc:  denied  { write } for  pid=17147 comm="syz.0.3475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1495.001223][T17163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1496.492157][   T43] audit: type=1400 audit(1789333658.849:1251): avc:  denied  { watch } for  pid=17164 comm="syz.0.3482" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="hugetlbfs" ino=88720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[ 1496.494500][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3484'.
[ 1497.492875][T17179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3488'.
[ 1497.493387][T17179] openvswitch: ovs-system: Dropping previously announced user features
[ 1497.494578][T17177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3489'.
[ 1498.492224][T17183] input: syz1 as /devices/virtual/input/input33
[ 1499.498352][T17209] [U] zͻ�i������[27|
[ 1499.498388][T17209] [U] �Bs��w�A�er��OU�]~�A��`1e��X�!��j5i�5�����y2�ڂ_�S�"q��h$�������6���\P�[2�*/��Wb_$�0A�7� X�ۖ(wc#����� =��g����<�
[ 1499.498397][T17209] [U] �I��w�u��b:l��E�e�iBH��k��^�VI|ȥ�\x�d��
[ 1499.498424][T17209] [U] ����|K�IH�����;F~�{I�ӎ�����=Mkq%����hd9�!�@a�*���lz��~`E���=��[>me��L�h��c��`��'�u���~+ۤ�m�ͷL�����X��������X����舂�i'�j��3�e=:3�/�C�_��<i�eT^��.��q9!��c���7Q���uR�`���S��+Z�	�
[ 1499.498437][T17209] [U] T�qt�v�b����|�@��D D��E/Q�u�ٝ
3������2������y�rr�|l;6�D�����%��jK���Ʒ2A[��ikuC��덁-T1x�T���v���3��l<��3Α��K�Ì5I�.��>��81�(FW
[ 1499.498461][T17209] [U] 8)��X�)�YvxRĻ���b��m�b�N�
@ox�;JD�����,
[ 1499.498470][T17209] [U] *C�n�3��v7�K�E�Xgt_3�����
[ 1499.498476][T17209] [U] D��/Q�a���zҬE�H��gE1$_k����s�=�R@
[ 1499.498496][T17209] [U] �ϼcEv��@�
[ 1499.498500][T17209] [U] a�
�%
[ 1499.498513][T17209] [U] �@���������cÏ_-Ʊ��Z����&�<Z9�ah�_�L@bKÈ�s�3J�J�5����D��;w�W��ˆUu�yL���bҳ53�ż��{�4XRQ���r�H=M"�/�@	o��������p��S�����~{P���ӡ�~i*�T���~W����)�Q�~ȵ�_ߜ�ͬz�~Vq�۪`
[ 1499.498525][T17209] [U] �f1�p�3
[ 1499.498530][T17209] [U] N0[L;a�_��l�&�k�M�C��
[ 1499.498545][T17209] [U] ��r6w^����g��P$�u����4�~GC����ߚp�k��Ft��w��~�@�L1�
[ 1499.499782][T17207] [U] �:��K!:��Y咑�;R�����dm����a9�tb�����t���=� Ҫ�+�sS�i�-�Y�Jc� �(����ґ��x�|]k|��_V�
�����҉�T�8MN�i���׎�ͪ���Y΃�zAM�"e�v3�KěO0q]^�)��?ס8ⅴ��S��	�ܝX�e�ݢ��%4�<�g�!���y.����w��a�����׹����)�0�P�/��Q����{���n
[ 1500.493897][T17218] netlink: 'syz.3.3501': attribute type 2 has an invalid length.
[ 1500.501760][T17223] binder: BINDER_SET_CONTEXT_MGR already set
[ 1500.501770][T17223] binder: 17215:17223 ioctl 40046207 0 returned -16
[ 1500.501913][T17225] netlink: 'syz.3.3501': attribute type 2 has an invalid length.
[ 1500.997770][   T43] audit: type=1400 audit(1789333663.359:1252): avc:  denied  { map } for  pid=17229 comm="syz.0.3503" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[ 1502.054638][T17235] FAULT_INJECTION: forcing a failure.
[ 1502.054638][T17235] name failslab, interval 1, probability 0, space 0, times 0
[ 1502.054671][T17235] CPU: 2 UID: 0 PID: 17235 Comm: syz.0.3504 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1502.054698][T17235] Tainted: [L]=SOFTLOCKUP
[ 1502.054705][T17235] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1502.054717][T17235] Call Trace:
[ 1502.054724][T17235]  <TASK>
[ 1502.054731][T17235]  dump_stack_lvl+0x100/0x190
[ 1502.054781][T17235]  should_fail_ex.cold+0x5/0xa
[ 1502.054809][T17235]  should_failslab+0xc2/0x120
[ 1502.054840][T17235]  __kmalloc_cache_noprof+0x91/0x6d0
[ 1502.054869][T17235]  ? io_uring_alloc_task_context+0xa7/0x656
[ 1502.054896][T17235]  io_uring_alloc_task_context+0xa7/0x656
[ 1502.054921][T17235]  ? __pfx_io_uring_alloc_task_context+0x10/0x10
[ 1502.054944][T17235]  ? lock_acquire+0x1d1/0x380
[ 1502.054965][T17235]  ? __fget_files+0x34/0x3d0
[ 1502.054993][T17235]  __io_uring_add_tctx_node.cold+0x15/0x20a
[ 1502.055017][T17235]  ? __pfx___io_uring_add_tctx_node+0x10/0x10
[ 1502.055047][T17235]  ? __fget_files+0x21f/0x3d0
[ 1502.055077][T17235]  __io_uring_add_tctx_node_from_submit+0x89/0x130
[ 1502.055108][T17235]  __do_sys_io_uring_enter+0x1626/0x1b10
[ 1502.055133][T17235]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1502.055168][T17235]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[ 1502.055190][T17235]  ? __x64_sys_futex+0x34f/0x4d0
[ 1502.055213][T17235]  ? __x64_sys_futex+0x358/0x4d0
[ 1502.055239][T17235]  ? fput+0x7c/0x100
[ 1502.055261][T17235]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1502.055285][T17235]  ? ksys_write+0x1ac/0x250
[ 1502.055303][T17235]  ? __pfx_ksys_write+0x10/0x10
[ 1502.055321][T17235]  ? kcov_ioctl+0x17a/0x760
[ 1502.055348][T17235]  do_syscall_64+0x123/0x790
[ 1502.055373][T17235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1502.055394][T17235] RIP: 0033:0x7f2ba299e159
[ 1502.055411][T17235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1502.055427][T17235] RSP: 002b:00007f2ba37cdfb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1502.055447][T17235] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ba299e159
[ 1502.055461][T17235] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000003
[ 1502.055473][T17235] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000008
[ 1502.055484][T17235] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[ 1502.055496][T17235] R13: 00007f2ba2c26128 R14: 00007f2ba2c26090 R15: 00007ffeb4c44a68
[ 1502.055520][T17235]  </TASK>
[ 1503.998953][T17238] openvswitch: ovs-system: Dropping previously announced user features
[ 1504.016419][   T43] audit: type=1400 audit(1789333666.379:1253): avc:  denied  { shutdown } for  pid=17239 comm="syz.0.3506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1504.016484][   T43] audit: type=1400 audit(1789333666.379:1254): avc:  denied  { ioctl } for  pid=17239 comm="syz.0.3506" path="socket:[88902]" dev="sockfs" ino=88902 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1504.019387][   T43] audit: type=1400 audit(1789333666.379:1255): avc:  denied  { create } for  pid=17239 comm="syz.0.3506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 1504.020816][   T43] audit: type=1400 audit(1789333666.379:1256): avc:  denied  { ioctl } for  pid=17239 comm="syz.0.3506" path="socket:[89944]" dev="sockfs" ino=89944 ioctlcmd=0x6e85 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 1504.024056][   T43] audit: type=1400 audit(1789333666.379:1257): avc:  denied  { ioctl } for  pid=17237 comm="syz.3.3509" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=88905 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1504.132235][T17255] netlink: 'syz.0.3511': attribute type 10 has an invalid length.
[ 1504.135512][T17255] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1504.140784][T17255] team0: Port device netdevsim1 added
[ 1504.141479][T17255] netlink: 'syz.0.3511': attribute type 10 has an invalid length.
[ 1512.016581][T17268] FAULT_INJECTION: forcing a failure.
[ 1512.016581][T17268] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1512.016603][T17268] CPU: 0 UID: 0 PID: 17268 Comm: syz.0.3514 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1512.016619][T17268] Tainted: [L]=SOFTLOCKUP
[ 1512.016623][T17268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1512.016630][T17268] Call Trace:
[ 1512.016635][T17268]  <TASK>
[ 1512.016640][T17268]  dump_stack_lvl+0x100/0x190
[ 1512.016661][T17268]  should_fail_ex.cold+0x5/0xa
[ 1512.016676][T17268]  ? prepare_alloc_pages+0x16d/0x5b0
[ 1512.016693][T17268]  should_fail_alloc_page+0xeb/0x140
[ 1512.016709][T17268]  prepare_alloc_pages+0x1f0/0x5b0
[ 1512.016726][T17268]  __alloc_frozen_pages_noprof+0x1e9/0x3300
[ 1512.016739][T17268]  ? stack_trace_save+0x8e/0xc0
[ 1512.016750][T17268]  ? __pfx_stack_trace_save+0x10/0x10
[ 1512.016760][T17268]  ? stack_depot_save_flags+0x27/0x9f0
[ 1512.016778][T17268]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1512.016788][T17268]  ? kasan_save_track+0x14/0x30
[ 1512.016801][T17268]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[ 1512.016818][T17268]  ? create_new_namespaces+0x48a/0xac0
[ 1512.016831][T17268]  ? unshare_nsproxy_namespaces+0xf2/0x220
[ 1512.016844][T17268]  ? ksys_unshare+0x4a2/0xa70
[ 1512.016857][T17268]  ? __x64_sys_unshare+0x31/0x40
[ 1512.016870][T17268]  ? do_syscall_64+0x123/0x790
[ 1512.016884][T17268]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1512.016906][T17268]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1512.016927][T17268]  ? policy_nodemask+0xed/0x4f0
[ 1512.016944][T17268]  alloc_pages_mpol+0x201/0x550
[ 1512.016960][T17268]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1512.016976][T17268]  ? kasan_save_track+0x14/0x30
[ 1512.016989][T17268]  ? __kasan_kmalloc+0xaa/0xb0
[ 1512.017003][T17268]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[ 1512.017023][T17268]  alloc_pages_noprof+0x1a/0x160
[ 1512.017041][T17268]  timens_vdso_alloc_vvar_page+0x1d/0x70
[ 1512.017057][T17268]  copy_time_ns+0x10b/0x790
[ 1512.017071][T17268]  create_new_namespaces+0x48a/0xac0
[ 1512.017087][T17268]  unshare_nsproxy_namespaces+0xf2/0x220
[ 1512.017102][T17268]  ksys_unshare+0x4a2/0xa70
[ 1512.017115][T17268]  ? __pfx_ksys_unshare+0x10/0x10
[ 1512.017133][T17268]  __x64_sys_unshare+0x31/0x40
[ 1512.017146][T17268]  do_syscall_64+0x123/0x790
[ 1512.017162][T17268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1512.017174][T17268] RIP: 0033:0x7f2ba299e159
[ 1512.017184][T17268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1512.017195][T17268] RSP: 002b:00007f2ba37f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1512.017206][T17268] RAX: ffffffffffffffda RBX: 00007f2ba2c25fa0 RCX: 00007f2ba299e159
[ 1512.017214][T17268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000080
[ 1512.017220][T17268] RBP: 00007f2ba2a3503b R08: 0000000000000000 R09: 0000000000000000
[ 1512.017227][T17268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1512.017233][T17268] R13: 00007f2ba2c26038 R14: 00007f2ba2c25fa0 R15: 00007ffeb4c44a68
[ 1512.017247][T17268]  </TASK>
[ 1512.044877][T17275] FAULT_INJECTION: forcing a failure.
[ 1512.044877][T17275] name failslab, interval 1, probability 0, space 0, times 0
[ 1512.044900][T17275] CPU: 0 UID: 0 PID: 17275 Comm: syz.4.3516 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1512.044922][T17275] Tainted: [L]=SOFTLOCKUP
[ 1512.044926][T17275] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1512.044933][T17275] Call Trace:
[ 1512.044937][T17275]  <TASK>
[ 1512.044942][T17275]  dump_stack_lvl+0x100/0x190
[ 1512.044963][T17275]  should_fail_ex.cold+0x5/0xa
[ 1512.044980][T17275]  should_failslab+0xc2/0x120
[ 1512.044996][T17275]  __kmalloc_cache_noprof+0x91/0x6d0
[ 1512.045013][T17275]  ? io_wq_create+0x6a/0x9a0
[ 1512.045029][T17275]  io_wq_create+0x6a/0x9a0
[ 1512.045044][T17275]  io_uring_alloc_task_context+0x2d9/0x656
[ 1512.045057][T17275]  ? __pfx_io_uring_alloc_task_context+0x10/0x10
[ 1512.045071][T17275]  ? lock_acquire+0x1d1/0x380
[ 1512.045082][T17275]  ? __fget_files+0x34/0x3d0
[ 1512.045097][T17275]  __io_uring_add_tctx_node.cold+0x15/0x20a
[ 1512.045126][T17275]  ? __pfx___io_uring_add_tctx_node+0x10/0x10
[ 1512.045144][T17275]  ? __fget_files+0x21f/0x3d0
[ 1512.045160][T17275]  __io_uring_add_tctx_node_from_submit+0x89/0x130
[ 1512.045179][T17275]  __do_sys_io_uring_enter+0x1626/0x1b10
[ 1512.045195][T17275]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1512.045214][T17275]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[ 1512.045227][T17275]  ? __x64_sys_futex+0x34f/0x4d0
[ 1512.045242][T17275]  ? __x64_sys_futex+0x358/0x4d0
[ 1512.045258][T17275]  ? xfd_validate_state+0x129/0x190
[ 1512.045275][T17275]  do_syscall_64+0x123/0x790
[ 1512.045291][T17275]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1512.045302][T17275] RIP: 0033:0x7f937219e159
[ 1512.045312][T17275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1512.045323][T17275] RSP: 002b:00007f93730a0fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1512.045335][T17275] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f937219e159
[ 1512.045342][T17275] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000003
[ 1512.045349][T17275] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000008
[ 1512.045355][T17275] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[ 1512.045361][T17275] R13: 00007f9372426128 R14: 00007f9372426090 R15: 00007ffce89eaf78
[ 1512.045375][T17275]  </TASK>
[ 1512.987213][T17277] openvswitch: ovs-system: Dropping previously announced user features
[ 1513.010256][T17282] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3518'.
[ 1515.002745][   T43] audit: type=1400 audit(1789333677.361:1258): avc:  denied  { shutdown } for  pid=17293 comm="syz.1.3524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1515.043002][T17302] selinux_netlink_send: 23 callbacks suppressed
[ 1515.043023][T17302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7508 sclass=netlink_route_socket pid=17302 comm=syz.0.3523
[ 1515.476212][T14668] page_pool_release_retry() stalled pool shutdown: id 73, 35 inflight 1085 sec
[ 1518.977317][T17306] fuse: fd is not a fuse device
[ 1518.980596][T17306] overlayfs: failed to clone upperpath
[ 1519.002461][   T43] audit: type=1400 audit(1789333681.361:1259): avc:  denied  { map } for  pid=17307 comm="syz.4.3528" path="socket:[91174]" dev="sockfs" ino=91174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1519.002490][   T43] audit: type=1400 audit(1789333681.361:1260): avc:  denied  { read } for  pid=17307 comm="syz.4.3528" path="socket:[91174]" dev="sockfs" ino=91174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1519.060283][T17321] FAULT_INJECTION: forcing a failure.
[ 1519.060283][T17321] name failslab, interval 1, probability 0, space 0, times 0
[ 1519.060308][T17321] CPU: 2 UID: 0 PID: 17321 Comm: syz.3.3529 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1519.060323][T17321] Tainted: [L]=SOFTLOCKUP
[ 1519.060327][T17321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1519.060334][T17321] Call Trace:
[ 1519.060338][T17321]  <TASK>
[ 1519.060343][T17321]  dump_stack_lvl+0x100/0x190
[ 1519.060369][T17321]  should_fail_ex.cold+0x5/0xa
[ 1519.060387][T17321]  should_failslab+0xc2/0x120
[ 1519.060404][T17321]  __kmalloc_cache_noprof+0x91/0x6d0
[ 1519.060422][T17321]  ? io_wq_create+0x6a/0x9a0
[ 1519.060437][T17321]  io_wq_create+0x6a/0x9a0
[ 1519.060450][T17321]  io_uring_alloc_task_context+0x2d9/0x656
[ 1519.060464][T17321]  ? __pfx_io_uring_alloc_task_context+0x10/0x10
[ 1519.060477][T17321]  ? lock_acquire+0x1d1/0x380
[ 1519.060489][T17321]  ? __fget_files+0x34/0x3d0
[ 1519.060505][T17321]  __io_uring_add_tctx_node.cold+0x15/0x20a
[ 1519.060518][T17321]  ? __pfx___io_uring_add_tctx_node+0x10/0x10
[ 1519.060537][T17321]  ? __fget_files+0x21f/0x3d0
[ 1519.060553][T17321]  __io_uring_add_tctx_node_from_submit+0x89/0x130
[ 1519.060571][T17321]  __do_sys_io_uring_enter+0x1626/0x1b10
[ 1519.060586][T17321]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1519.060603][T17321]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[ 1519.060617][T17321]  ? __x64_sys_futex+0x34f/0x4d0
[ 1519.060632][T17321]  ? __x64_sys_futex+0x358/0x4d0
[ 1519.060648][T17321]  ? xfd_validate_state+0x129/0x190
[ 1519.060665][T17321]  do_syscall_64+0x123/0x790
[ 1519.060681][T17321]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1519.060693][T17321] RIP: 0033:0x7ff02ef9e159
[ 1519.060705][T17321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1519.060716][T17321] RSP: 002b:00007ff02fecbfb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1519.060727][T17321] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff02ef9e159
[ 1519.060735][T17321] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000003
[ 1519.060741][T17321] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000008
[ 1519.060748][T17321] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[ 1519.060755][T17321] R13: 00007ff02f226128 R14: 00007ff02f226090 R15: 00007ffd4e32c878
[ 1519.060768][T17321]  </TASK>
[ 1520.480631][T17325] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3533'.
[ 1520.486636][T17331] openvswitch: ovs-system: Dropping previously announced user features
[ 1520.833846][T14668] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 1520.985259][T14668] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[ 1520.986286][T14668] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1520.986321][T14668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1521.000803][T14668] as10x_usb: device has been detected
[ 1521.001281][T14668] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[ 1521.048837][T14668] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[ 1521.102198][T14668] as10x_usb: error during firmware upload part1
[ 1521.103901][T14668] Registered device Abilis Systems DVB-Titan
[ 1521.601613][   T43] audit: type=1326 audit(1789333683.961:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17326 comm="syz.0.3531" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ba299e159 code=0x0
[ 1522.488276][T17338] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3534'.
[ 1523.486819][ T5875] usb 5-1: USB disconnect, device number 55
[ 1523.516102][ T5875] Unregistered device Abilis Systems DVB-Titan
[ 1523.517041][ T5875] as10x_usb: device has been disconnected
[ 1526.538407][T17357] ip_tables: iptables: counters copy to user failed while replacing table
[ 1526.540558][T17351] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3541'.
[ 1526.682255][T17362] openvswitch: ovs-system: Dropping previously announced user features
[ 1526.729287][T17365] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3544'.
[ 1528.492147][   T43] audit: type=1400 audit(1789333690.852:1262): avc:  denied  { mounton } for  pid=17368 comm="syz.0.3546" path="/" dev="nsfs" ino=4026532879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1531.001958][T17387] openvswitch: ovs-system: Dropping previously announced user features
[ 1531.052959][T17388] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3552'.
[ 1536.498067][T17401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3556'.
[ 1536.939405][   T43] audit: type=1400 audit(1789333699.303:1263): avc:  denied  { setopt } for  pid=17407 comm="syz.1.3560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1536.940782][   T43] audit: type=1400 audit(1789333699.303:1264): avc:  denied  { connect } for  pid=17407 comm="syz.1.3560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1537.061360][   T43] audit: type=1400 audit(1789333699.423:1265): avc:  denied  { watch } for  pid=17412 comm="syz.0.3561" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[ 1537.061412][   T43] audit: type=1400 audit(1789333699.423:1266): avc:  denied  { watch_sb watch_reads } for  pid=17412 comm="syz.0.3561" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 1542.998870][T17443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3568'.
[ 1543.068161][T17440] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1543.068325][T17440] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1543.105606][T17440] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1543.153548][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1543.153576][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1543.153595][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1543.153613][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1545.782809][ T1441] ieee802154 phy1 wpan1: encryption failed: -22
[ 1550.990480][T17458] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3574'.
[ 1550.990501][T17458] veth0_to_bond: default FDB implementation only supports local addresses
[ 1551.062056][T17456] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1551.078038][T17466] netlink: 'syz.4.3576': attribute type 10 has an invalid length.
[ 1551.092997][T17456] kvm: pic: level sensitive irq not supported
[ 1551.093342][T17456] kvm: pic: non byte read
[ 1551.095578][T17456] kvm: pic: level sensitive irq not supported
[ 1551.095840][T17456] kvm: pic: non byte read
[ 1551.096620][T17466] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1551.097998][T17466] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[ 1551.099155][T17456] kvm: pic: level sensitive irq not supported
[ 1551.099530][T17456] kvm: pic: non byte read
[ 1551.132956][T17456] kvm: pic: level sensitive irq not supported
[ 1551.133470][T17456] kvm: pic: non byte read
[ 1551.133594][T17471] netlink: 'syz.4.3576': attribute type 10 has an invalid length.
[ 1551.136803][T17456] kvm: pic: level sensitive irq not supported
[ 1551.137147][T17456] kvm: pic: non byte read
[ 1552.983530][T17486] ip6t_hbh: unknown flags 83
[ 1553.995254][T17494] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3586'.
[ 1555.165586][ T5840] bridge_slave_1: left allmulticast mode
[ 1555.165605][ T5840] bridge_slave_1: left promiscuous mode
[ 1555.165796][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1555.167393][ T5840] bridge_slave_0: left allmulticast mode
[ 1555.167406][ T5840] bridge_slave_0: left promiscuous mode
[ 1555.167501][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1555.286621][ T5840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1555.288100][ T5840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1555.289370][ T5840] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface
[ 1555.290134][ T5840] bond0 (unregistering): Released all slaves
[ 1555.297750][ T5840] bond1 (unregistering): Released all slaves
[ 1555.366782][ T5840] ovs-system: left promiscuous mode
[ 1555.823738][ T5840] hsr_slave_1: left promiscuous mode
[ 1555.824453][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1555.825285][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1555.825309][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1555.826017][ T5840] batman_adv: batadv0: Interface deactivated: dummy0
[ 1555.826031][ T5840] batman_adv: batadv0: Removing interface: dummy0
[ 1555.849233][ T5840] veth1_macvtap: left allmulticast mode
[ 1555.849393][ T5840] veth1_macvtap: left promiscuous mode
[ 1555.849422][ T5840] veth0_macvtap: left promiscuous mode
[ 1555.849634][ T5840] veth1_vlan: left promiscuous mode
[ 1555.955227][ T5840] team0 (unregistering): Port device vlan0 removed
[ 1556.017884][ T5840] team0 (unregistering): Port device team_slave_1 removed
[ 1556.046062][ T5840] team0 (unregistering): Port device team_slave_0 removed
[ 1558.979143][T17508] block nbd0: server does not support multiple connections per device.
[ 1558.980431][T17508] block nbd0: shutting down sockets
[ 1559.988210][T17516] openvswitch: ovs-system: Dropping previously announced user features
[ 1560.069406][T17517] SELinux:  invalid class
[ 1560.097713][T17517] SELinux: failed to load policy
[ 1560.125988][T17518] SELinux:  invalid class
[ 1560.150473][T17518] SELinux: failed to load policy
[ 1564.993746][T17539] block nbd0: server does not support multiple connections per device.
[ 1565.005472][T17539] block nbd0: shutting down sockets
[ 1569.971805][T17567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3605'.
[ 1570.009770][   T43] audit: type=1107 audit(1789333732.376:1267): pid=17569 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='AH�=V�1�~ꣻN����s5�QqO��z�RTU�S���{�7����i�d#�o�bW(�Y�Bz_Lp�Ak3��,+C^�4M;�x@SQ�}���=
[ 1570.009770][   T43] H��}4����ד�_^;F�a8Cޣ��_���_��^�j���䐉ِ0{	_����q�|[Ȧ0����y��DU#�jӧB�P���L[�q�v3
[ 1570.009770][   T43] ���KTc3�3*q�Dߕ������'
[ 1570.053794][T17574] FAULT_INJECTION: forcing a failure.
[ 1570.053794][T17574] name failslab, interval 1, probability 0, space 0, times 0
[ 1570.053817][T17574] CPU: 0 UID: 0 PID: 17574 Comm: syz.3.3608 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1570.053832][T17574] Tainted: [L]=SOFTLOCKUP
[ 1570.053837][T17574] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1570.053855][T17574] Call Trace:
[ 1570.053861][T17574]  <TASK>
[ 1570.053866][T17574]  dump_stack_lvl+0x100/0x190
[ 1570.053888][T17574]  should_fail_ex.cold+0x5/0xa
[ 1570.053906][T17574]  should_failslab+0xc2/0x120
[ 1570.053921][T17574]  __kmalloc_cache_noprof+0x91/0x6d0
[ 1570.053940][T17574]  ? io_uring_alloc_task_context+0xa7/0x656
[ 1570.053954][T17574]  io_uring_alloc_task_context+0xa7/0x656
[ 1570.053968][T17574]  ? __pfx_io_uring_alloc_task_context+0x10/0x10
[ 1570.053981][T17574]  ? lock_acquire+0x1d1/0x380
[ 1570.053993][T17574]  ? __fget_files+0x34/0x3d0
[ 1570.054009][T17574]  __io_uring_add_tctx_node.cold+0x15/0x20a
[ 1570.054022][T17574]  ? __pfx___io_uring_add_tctx_node+0x10/0x10
[ 1570.054041][T17574]  ? __fget_files+0x21f/0x3d0
[ 1570.054056][T17574]  __io_uring_add_tctx_node_from_submit+0x89/0x130
[ 1570.054074][T17574]  __do_sys_io_uring_enter+0x1626/0x1b10
[ 1570.054089][T17574]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1570.054108][T17574]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[ 1570.054121][T17574]  ? __x64_sys_futex+0x34f/0x4d0
[ 1570.054135][T17574]  ? __x64_sys_futex+0x358/0x4d0
[ 1570.054151][T17574]  ? xfd_validate_state+0x129/0x190
[ 1570.054169][T17574]  do_syscall_64+0x123/0x790
[ 1570.054185][T17574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1570.054199][T17574] RIP: 0033:0x7ff02ef9e159
[ 1570.054211][T17574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1570.054221][T17574] RSP: 002b:00007ff02fecbfb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1570.054232][T17574] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff02ef9e159
[ 1570.054239][T17574] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000003
[ 1570.054246][T17574] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000008
[ 1570.054252][T17574] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[ 1570.054258][T17574] R13: 00007ff02f226128 R14: 00007ff02f226090 R15: 00007ffd4e32c878
[ 1570.054272][T17574]  </TASK>
[ 1570.973741][T17576] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13)
[ 1570.973758][T17576] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1570.973907][T17576] vhci_hcd vhci_hcd.0: Device attached
[ 1570.976109][T17579] usbip_core: unknown command
[ 1570.976117][T17579] vhci_hcd: unknown pdu 0
[ 1570.976123][T17579] usbip_core: unknown command
[ 1570.977773][ T5840] vhci_hcd vhci_hcd.0: stop threads
[ 1570.977783][ T5840] vhci_hcd vhci_hcd.0: release socket
[ 1570.977793][ T5840] vhci_hcd vhci_hcd.0: disconnect device
[ 1574.064133][T17587] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[ 1574.064167][T17587] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1575.778475][T14668] page_pool_release_retry() stalled pool shutdown: id 73, 35 inflight 1146 sec
[ 1576.002133][T17592] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1576.026521][T17592] kvm: pic: level sensitive irq not supported
[ 1576.027120][T17592] kvm: pic: non byte read
[ 1576.033246][T17592] kvm: pic: level sensitive irq not supported
[ 1576.033734][T17592] kvm: pic: non byte read
[ 1576.035300][T17592] kvm: pic: level sensitive irq not supported
[ 1576.036126][T17592] kvm: pic: non byte read
[ 1576.037708][T17592] kvm: pic: level sensitive irq not supported
[ 1576.044232][T17592] kvm: pic: non byte read
[ 1576.046464][T17592] kvm: pic: level sensitive irq not supported
[ 1576.046885][T17592] kvm: pic: non byte read
[ 1576.052734][T17592] kvm: pic: level sensitive irq not supported
[ 1576.053243][T17592] kvm: pic: non byte read
[ 1578.068418][T17610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3617'.
[ 1578.130277][T14795] vhci_hcd: connection reset by peer
[ 1578.130464][T14515] vhci_hcd vhci_hcd.3: stop threads
[ 1578.130478][T14515] vhci_hcd vhci_hcd.3: release socket
[ 1578.136850][T14515] vhci_hcd vhci_hcd.3: disconnect device
[ 1578.200097][T12799] vhci_hcd vhci_hcd.3: vhci_device speed not set
[ 1578.215700][T14515] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1578.305893][T14515] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1578.384683][T14515] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1578.463452][T14515] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1578.553112][T14514] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 6081 - 0
[ 1578.588639][   T13] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 6081 - 0
[ 1578.588688][   T13] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 6081 - 0
[ 1578.597031][T14515] bridge_slave_1: left allmulticast mode
[ 1578.597048][T14515] bridge_slave_1: left promiscuous mode
[ 1578.597181][T14515] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1578.610662][T14515] bridge_slave_0: left allmulticast mode
[ 1578.610688][T14515] bridge_slave_0: left promiscuous mode
[ 1578.610814][T14515] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1578.670223][   T43] audit: type=1400 audit(1789333741.047:1268): avc:  denied  { write } for  pid=17613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1578.715503][   T43] audit: type=1400 audit(1789333741.087:1269): avc:  denied  { write } for  pid=17616 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1578.751238][T14515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1578.754010][T14515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1578.754921][T14515] bond0 (unregistering): Released all slaves
[ 1578.761236][ T5440] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1578.778157][ T5840] netdevsim netdevsim3 eth9: set [1, 0] type 2 family 0 port 6081 - 0
[ 1578.817054][T14515] ovs-system: left promiscuous mode
[ 1578.836403][   T43] audit: type=1400 audit(1789333741.207:1270): avc:  denied  { write } for  pid=17619 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1578.914235][   T43] audit: type=1400 audit(1789333741.287:1271): avc:  denied  { write } for  pid=17622 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1578.943256][ T5440] 8021q: adding VLAN 0 to HW filter on device eth7
[ 1579.043842][   T43] audit: type=1400 audit(1789333741.417:1272): avc:  denied  { write } for  pid=17625 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1579.097305][   T43] audit: type=1400 audit(1789333741.467:1273): avc:  denied  { write } for  pid=17628 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1579.149885][ T5440] 8021q: adding VLAN 0 to HW filter on device eth8
[ 1579.152421][T14515] hsr_slave_0: left promiscuous mode
[ 1579.152785][T14515] hsr_slave_1: left promiscuous mode
[ 1579.153146][T14515] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1579.153157][T14515] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1579.153563][T14515] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1579.153573][T14515] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1579.171485][T14515] veth1_macvtap: left promiscuous mode
[ 1579.171508][T14515] veth0_macvtap: left promiscuous mode
[ 1579.171553][T14515] veth1_vlan: left promiscuous mode
[ 1579.171584][T14515] veth0_vlan: left promiscuous mode
[ 1579.317175][T14515] team0 (unregistering): Port device team_slave_1 removed
[ 1579.435773][   T43] audit: type=1400 audit(1789333741.807:1274): avc:  denied  { write } for  pid=17631 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1579.494729][   T43] audit: type=1400 audit(1789333741.867:1275): avc:  denied  { write } for  pid=17634 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1579.534290][ T5440] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1580.983345][   T43] audit: type=1400 audit(1789333743.357:1276): avc:  denied  { cmd } for  pid=17650 comm="syz.0.3620" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1
[ 1580.992658][   T43] audit: type=1400 audit(1789333743.367:1277): avc:  denied  { ioctl } for  pid=17650 comm="syz.0.3620" path="pid:[4026532864]" dev="nsfs" ino=4026532864 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1585.055365][   T43] audit: type=1400 audit(1789333747.428:1278): avc:  denied  { ioctl } for  pid=17664 comm="syz-executor" path="socket:[93493]" dev="sockfs" ino=93493 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1585.079120][T13844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1585.084467][T13844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1585.086656][T13844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1585.098940][T13844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1585.099682][T13844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1585.257490][T14668] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[ 1585.422622][T14668] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1585.423525][T14668] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1585.423542][T14668] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1585.423554][T14668] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1585.423579][T14668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1585.424994][T14668] usb 5-1: config 0 descriptor??
[ 1585.510564][T17664] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1585.510644][T17664] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1585.510743][T17664] bridge_slave_0: entered allmulticast mode
[ 1585.511786][T17664] bridge_slave_0: entered promiscuous mode
[ 1585.518803][T17664] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1585.518845][T17664] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1585.521958][T17664] bridge_slave_1: entered allmulticast mode
[ 1585.522752][T17664] bridge_slave_1: entered promiscuous mode
[ 1585.548288][T17664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1585.549842][T17664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1585.562516][T17664] team0: Port device team_slave_0 added
[ 1585.563900][T17664] team0: Port device team_slave_1 added
[ 1585.583986][T17664] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1585.584003][T17664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1585.584024][T17664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1585.585419][T17664] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1585.585430][T17664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1585.585451][T17664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1585.620639][T17664] hsr_slave_0: entered promiscuous mode
[ 1585.621372][T17664] hsr_slave_1: entered promiscuous mode
[ 1585.755281][   T43] audit: type=1400 audit(1789333748.118:1279): avc:  denied  { write } for  pid=17682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1585.775230][T17664] netdevsim netdevsim3 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1585.830522][   T43] audit: type=1400 audit(1789333748.208:1280): avc:  denied  { write } for  pid=17685 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1585.846026][T17664] netdevsim netdevsim3 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1585.869843][T14668] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[ 1585.869882][T14668] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[ 1585.869903][T14668] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[ 1585.869921][T14668] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[ 1585.869939][T14668] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[ 1585.869957][T14668] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[ 1585.869975][T14668] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[ 1585.869994][T14668] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[ 1585.870012][T14668] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[ 1585.870030][T14668] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[ 1585.952714][T14668] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[ 1585.977398][   T43] audit: type=1400 audit(1789333748.338:1281): avc:  denied  { setattr } for  pid=17689 comm="syz.1.3625" name="NETLINK" dev="sockfs" ino=93592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1586.004673][   T43] audit: type=1400 audit(1789333748.378:1282): avc:  denied  { write } for  pid=17688 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1586.057921][T17664] netdevsim netdevsim3 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1586.084492][   T43] audit: type=1400 audit(1789333748.448:1283): avc:  denied  { write } for  pid=17694 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1586.138347][T17661] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1586.139154][T17661] overlayfs: failed to resolve 'smackfsdef=](J���)-(-T[': -2
[ 1586.139529][T17664] netdevsim netdevsim3 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1586.142338][ T5875] usb 5-1: USB disconnect, device number 56
[ 1586.205164][   T43] audit: type=1400 audit(1789333748.568:1284): avc:  denied  { write } for  pid=17696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1586.286313][   T43] audit: type=1400 audit(1789333748.648:1285): avc:  denied  { write } for  pid=17699 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1586.359036][T17664] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1586.362517][T17664] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1586.363022][T17664] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1586.365798][T17664] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1586.366410][T17664] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1586.374273][T17664] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1586.374786][T17664] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1586.393258][   T43] audit: type=1400 audit(1789333748.758:1286): avc:  denied  { write } for  pid=17701 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1586.395253][T17664] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1586.464791][   T43] audit: type=1400 audit(1789333748.828:1287): avc:  denied  { write } for  pid=17710 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1586.479763][T17664] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1586.486979][T17664] 8021q: adding VLAN 0 to HW filter on device team0
[ 1586.491177][T13379] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1586.491253][T13379] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1586.494618][T13379] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1586.494664][T13379] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1586.803965][T17664] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1586.854185][T17664] veth0_vlan: entered promiscuous mode
[ 1586.864184][T17664] veth1_vlan: entered promiscuous mode
[ 1586.881055][T17664] veth0_macvtap: entered promiscuous mode
[ 1586.883156][T17664] veth1_macvtap: entered promiscuous mode
[ 1586.895124][T17664] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1586.903761][T17664] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1586.947419][T14515] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1586.947618][T14515] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1586.947639][T14515] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1586.947657][T14515] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1587.024066][T13371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1587.024080][T13371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1587.069894][ T5958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1587.069909][ T5958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1587.139123][T13844] Bluetooth: hci1: command tx timeout
[ 1587.479521][T17752] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=17752 comm=syz.0.3626
[ 1587.985023][T17754] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3627'.
[ 1588.983532][T17758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3628'.
[ 1589.217167][T13844] Bluetooth: hci1: command tx timeout
[ 1589.987674][   T68] block nbd0: Receive control failed (result -32)
[ 1591.297214][T13844] Bluetooth: hci1: command tx timeout
[ 1593.376776][T13844] Bluetooth: hci1: command tx timeout
[ 1596.128325][T17788] iommufd_mock iommufd_mock0: Adding to iommu group 9
[ 1600.705875][   T61] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[ 1600.835869][   T61] usb 5-1: device descriptor read/64, error -71
[ 1600.980916][   T43] kauditd_printk_skb: 11 callbacks suppressed
[ 1600.980935][   T43] audit: type=1400 audit(1789333763.349:1299): avc:  denied  { ioctl } for  pid=17795 comm="syz.4.3639" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 1601.075873][   T61] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[ 1601.205952][   T61] usb 5-1: device descriptor read/64, error -71
[ 1601.232247][   T43] audit: type=1400 audit(1789333763.599:1300): avc:  denied  { execmod } for  pid=17794 comm="syz.1.3638" path="/540/memory.events" dev="tmpfs" ino=2976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1601.315961][   T61] usb usb5-port1: attempt power cycle
[ 1601.655911][   T61] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[ 1601.677501][   T61] usb 5-1: device descriptor read/8, error -71
[ 1601.915846][   T61] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[ 1601.937283][   T61] usb 5-1: device descriptor read/8, error -71
[ 1602.046104][   T61] usb usb5-port1: unable to enumerate USB device
[ 1602.985108][T17808] overlayfs: upper fs does not support file handles, falling back to index=off.
[ 1607.216563][ T1441] ieee802154 phy1 wpan1: encryption failed: -22
[ 1607.972646][T17821] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3646'.
[ 1608.986639][   T43] audit: type=1400 audit(1789333771.360:1301): avc:  denied  { read } for  pid=17828 comm="syz.4.3649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1609.072178][T17844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3652'.
[ 1610.997924][T17846] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1613.045971][ T5958] ==================================================================
[ 1613.045982][ T5958] BUG: KASAN: slab-use-after-free in drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0
[ 1613.046015][ T5958] Read of size 1 at addr ffff88803f9f5809 by task kworker/u33:21/5958
[ 1613.046030][ T5958] 
[ 1613.046037][ T5958] CPU: 0 UID: 0 PID: 5958 Comm: kworker/u33:21 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1613.046053][ T5958] Tainted: [L]=SOFTLOCKUP
[ 1613.046058][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1613.046065][ T5958] Workqueue: events_unbound commit_work
[ 1613.046081][ T5958] Call Trace:
[ 1613.046086][ T5958]  <TASK>
[ 1613.046091][ T5958]  dump_stack_lvl+0x100/0x190
[ 1613.046108][ T5958]  print_report+0x13d/0x4b0
[ 1613.046125][ T5958]  ? __virt_addr_valid+0x239/0x430
[ 1613.046136][ T5958]  ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0
[ 1613.046151][ T5958]  kasan_report+0xdf/0x1c0
[ 1613.046166][ T5958]  ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0
[ 1613.046183][ T5958]  drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0
[ 1613.046199][ T5958]  ? preempt_schedule_common+0x3c/0xb0
[ 1613.046217][ T5958]  ? preempt_schedule_thunk+0x16/0x40
[ 1613.046232][ T5958]  ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10
[ 1613.046248][ T5958]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[ 1613.046261][ T5958]  ? drm_atomic_helper_commit_hw_done+0x36d/0x490
[ 1613.046278][ T5958]  drm_atomic_helper_commit_tail+0xff/0x130
[ 1613.046293][ T5958]  commit_tail+0x338/0x430
[ 1613.046309][ T5958]  process_one_work+0xac7/0x1b10
[ 1613.046328][ T5958]  ? __pfx_process_one_work+0x10/0x10
[ 1613.046345][ T5958]  ? lock_acquire+0x1d1/0x380
[ 1613.046359][ T5958]  ? __pfx_commit_work+0x10/0x10
[ 1613.046374][ T5958]  worker_thread+0x5ef/0xe50
[ 1613.046392][ T5958]  ? kthread+0x13a/0x450
[ 1613.046407][ T5958]  ? __pfx_worker_thread+0x10/0x10
[ 1613.046423][ T5958]  kthread+0x373/0x450
[ 1613.046438][ T5958]  ? __pfx_kthread+0x10/0x10
[ 1613.046453][ T5958]  ret_from_fork+0x730/0xd60
[ 1613.046466][ T5958]  ? __pfx_ret_from_fork+0x10/0x10
[ 1613.046478][ T5958]  ? __switch_to+0x800/0x10f0
[ 1613.046494][ T5958]  ? __pfx_kthread+0x10/0x10
[ 1613.046509][ T5958]  ret_from_fork_asm+0x1a/0x30
[ 1613.046523][ T5958]  </TASK>
[ 1613.046527][ T5958] 
[ 1613.046530][ T5958] Allocated by task 17855:
[ 1613.046536][ T5958]  kasan_save_stack+0x30/0x50
[ 1613.046548][ T5958]  kasan_save_track+0x14/0x30
[ 1613.046559][ T5958]  __kasan_kmalloc+0xaa/0xb0
[ 1613.046569][ T5958]  __kmalloc_cache_noprof+0x2f8/0x6d0
[ 1613.046584][ T5958]  drm_atomic_helper_crtc_duplicate_state+0x72/0xd0
[ 1613.046601][ T5958]  drm_atomic_get_crtc_state+0x1de/0x690
[ 1613.046613][ T5958]  drm_atomic_set_property+0x165/0x3f90
[ 1613.046626][ T5958]  drm_mode_atomic_ioctl+0x6ed/0x27c0
[ 1613.046640][ T5958]  drm_ioctl_kernel+0x1f3/0x3e0
[ 1613.046652][ T5958]  drm_ioctl+0x5e6/0xc60
[ 1613.046664][ T5958]  __x64_sys_ioctl+0x18e/0x210
[ 1613.046674][ T5958]  do_syscall_64+0x123/0x790
[ 1613.046687][ T5958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1613.046697][ T5958] 
[ 1613.046699][ T5958] Freed by task 5875:
[ 1613.046704][ T5958]  kasan_save_stack+0x30/0x50
[ 1613.046715][ T5958]  kasan_save_track+0x14/0x30
[ 1613.046726][ T5958]  kasan_save_free_info+0x3b/0x70
[ 1613.046741][ T5958]  __kasan_slab_free+0x5f/0x80
[ 1613.046753][ T5958]  kfree+0x22b/0x6d0
[ 1613.046766][ T5958]  drm_atomic_commit_default_clear+0x465/0x10c0
[ 1613.046779][ T5958]  __drm_atomic_commit_free+0x185/0x2f0
[ 1613.046792][ T5958]  drm_atomic_helper_dirtyfb+0x578/0x790
[ 1613.046802][ T5958]  drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x350
[ 1613.046813][ T5958]  drm_fb_helper_damage_work+0x4c8/0xab0
[ 1613.046827][ T5958]  process_one_work+0xac7/0x1b10
[ 1613.046842][ T5958]  worker_thread+0x5ef/0xe50
[ 1613.046857][ T5958]  kthread+0x373/0x450
[ 1613.046870][ T5958]  ret_from_fork+0x730/0xd60
[ 1613.046881][ T5958]  ret_from_fork_asm+0x1a/0x30
[ 1613.046891][ T5958] 
[ 1613.046894][ T5958] The buggy address belongs to the object at ffff88803f9f5800
[ 1613.046894][ T5958]  which belongs to the cache kmalloc-512 of size 512
[ 1613.046902][ T5958] The buggy address is located 9 bytes inside of
[ 1613.046902][ T5958]  freed 512-byte region [ffff88803f9f5800, ffff88803f9f5a00)
[ 1613.046911][ T5958] 
[ 1613.046914][ T5958] The buggy address belongs to the physical page:
[ 1613.046919][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3f9f4
[ 1613.046929][ T5958] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1613.046937][ T5958] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1613.046947][ T5958] page_type: f5(slab)
[ 1613.046956][ T5958] raw: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122
[ 1613.046965][ T5958] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 1613.046975][ T5958] head: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122
[ 1613.046984][ T5958] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 1613.046993][ T5958] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[ 1613.047002][ T5958] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 1613.047008][ T5958] page dumped because: kasan: bad access detected
[ 1613.047013][ T5958] page_owner tracks the page as allocated
[ 1613.047017][ T5958] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5725, tgid 5725 (syz-executor), ts 49376349424
[ 1613.047037][ T5958]  post_alloc_hook+0xfd/0x120
[ 1613.047052][ T5958]  get_page_from_freelist+0x110d/0x35d0
[ 1613.047068][ T5958]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[ 1613.047078][ T5958]  new_slab+0xa9/0x6e0
[ 1613.047093][ T5958]  refill_objects+0xe3/0x410
[ 1613.047101][ T5958]  __pcs_replace_empty_main+0x35e/0x650
[ 1613.047116][ T5958]  __kmalloc_noprof+0x67c/0x840
[ 1613.047126][ T5958]  fib6_info_alloc+0x40/0x160
[ 1613.047154][ T5958]  ip6_route_info_create+0x14c/0xad0
[ 1613.047164][ T5958]  ip6_route_add+0x4b/0x1d0
[ 1613.047176][ T5958]  addrconf_add_mroute+0x1de/0x350
[ 1613.047192][ T5958]  addrconf_add_dev+0x14e/0x1a0
[ 1613.047200][ T5958]  inet6_addr_add+0xfc/0x9a0
[ 1613.047210][ T5958]  inet6_rtm_newaddr+0x147a/0x1bb0
[ 1613.047221][ T5958]  rtnetlink_rcv_msg+0x95e/0xe90
[ 1613.047235][ T5958]  netlink_rcv_skb+0x159/0x420
[ 1613.047246][ T5958] page last free pid 5839 tgid 5839 ts 49040363877 stack trace:
[ 1613.047253][ T5958]  __free_frozen_pages+0x79f/0x10f0
[ 1613.047267][ T5958]  qlist_free_all+0x47/0xf0
[ 1613.047276][ T5958]  kasan_quarantine_reduce+0x1a0/0x1f0
[ 1613.047287][ T5958]  __kasan_slab_alloc+0x69/0x90
[ 1613.047299][ T5958]  kmem_cache_alloc_noprof+0x269/0x6a0
[ 1613.047310][ T5958]  vm_area_alloc+0x1f/0x160
[ 1613.047323][ T5958]  __mmap_region+0x107c/0x32c0
[ 1613.047339][ T5958]  mmap_region+0x3db/0x6d0
[ 1613.047347][ T5958]  do_mmap+0x12c7/0x1c30
[ 1613.047358][ T5958]  vm_mmap_pgoff+0x28d/0x470
[ 1613.047369][ T5958]  vm_mmap+0x8e/0xc0
[ 1613.047378][ T5958]  elf_load+0x46e/0x720
[ 1613.047388][ T5958]  load_elf_binary+0xf34/0x51a0
[ 1613.047398][ T5958]  bprm_execve+0x8cd/0x1940
[ 1613.047408][ T5958]  kernel_execve+0x31e/0x3a0
[ 1613.047419][ T5958]  call_usermodehelper_exec_async+0x239/0x4b0
[ 1613.047429][ T5958] 
[ 1613.047432][ T5958] Memory state around the buggy address:
[ 1613.047437][ T5958]  ffff88803f9f5700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1613.047444][ T5958]  ffff88803f9f5780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1613.047452][ T5958] >ffff88803f9f5800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1613.047458][ T5958]                       ^
[ 1613.047463][ T5958]  ffff88803f9f5880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1613.047470][ T5958]  ffff88803f9f5900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1613.047476][ T5958] ==================================================================
[ 1613.049522][ T5958] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1613.288013][ T5958] CPU: 0 UID: 0 PID: 5958 Comm: kworker/u33:21 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1613.291381][ T5958] Tainted: [L]=SOFTLOCKUP
[ 1613.292665][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1613.295708][ T5958] Workqueue: events_unbound commit_work
[ 1613.297417][ T5958] Call Trace:
[ 1613.298464][ T5958]  <TASK>
[ 1613.299393][ T5958]  dump_stack_lvl+0x100/0x190
[ 1613.300836][ T5958]  vpanic+0x553/0x970
[ 1613.302111][ T5958]  ? __pfx_vpanic+0x10/0x10
[ 1613.303515][ T5958]  ? mark_held_locks+0x40/0x70
[ 1613.305011][ T5958]  ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0
[ 1613.307205][ T5958]  panic+0xd1/0xe0
[ 1613.308392][ T5958]  ? __pfx_panic+0x10/0x10
[ 1613.309761][ T5958]  ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0
[ 1613.311895][ T5958]  ? preempt_schedule_common+0x3c/0xb0
[ 1613.313548][ T5958]  check_panic_on_warn.cold+0x19/0x34
[ 1613.315164][ T5958]  end_report.part.0+0x3a/0x90
[ 1613.316638][ T5958]  kasan_report.cold+0xe/0x18
[ 1613.318083][ T5958]  ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0
[ 1613.320228][ T5958]  drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0
[ 1613.322287][ T5958]  ? preempt_schedule_common+0x3c/0xb0
[ 1613.323912][ T5958]  ? preempt_schedule_thunk+0x16/0x40
[ 1613.325524][ T5958]  ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10
[ 1613.327758][ T5958]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[ 1613.329538][ T5958]  ? drm_atomic_helper_commit_hw_done+0x36d/0x490
[ 1613.331491][ T5958]  drm_atomic_helper_commit_tail+0xff/0x130
[ 1613.333357][ T5958]  commit_tail+0x338/0x430
[ 1613.334760][ T5958]  process_one_work+0xac7/0x1b10
[ 1613.336256][ T5958]  ? __pfx_process_one_work+0x10/0x10
[ 1613.337879][ T5958]  ? lock_acquire+0x1d1/0x380
[ 1613.339285][ T5958]  ? __pfx_commit_work+0x10/0x10
[ 1613.340784][ T5958]  worker_thread+0x5ef/0xe50
[ 1613.342195][ T5958]  ? kthread+0x13a/0x450
[ 1613.343472][ T5958]  ? __pfx_worker_thread+0x10/0x10
[ 1613.344995][ T5958]  kthread+0x373/0x450
[ 1613.346238][ T5958]  ? __pfx_kthread+0x10/0x10
[ 1613.347655][ T5958]  ret_from_fork+0x730/0xd60
[ 1613.349059][ T5958]  ? __pfx_ret_from_fork+0x10/0x10
[ 1613.350624][ T5958]  ? __switch_to+0x800/0x10f0
[ 1613.352034][ T5958]  ? __pfx_kthread+0x10/0x10
[ 1613.353441][ T5958]  ret_from_fork_asm+0x1a/0x30
[ 1613.354889][ T5958]  </TASK>
[ 1613.356366][ T5958] Kernel Offset: disabled
[ 1613.357684][ T5958] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:05:15  Registers:
info registers vcpu 0

CPU#0
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff85b0c0d0 RDI=ffffffff9bc6bca0 RBP=ffffffff9bc6bc60 RSP=ffffc90004b4f198
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6639663330386552
R12=0000000000000000 R13=0000000000000020 R14=fffffbfff378d7e9 R15=dffffc0000000000
RIP=ffffffff85b0c0f7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5b59000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fff971db000 CR3=0000000064689000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7379735f75706372 65705f6567617375
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce89eb466
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce89eb466 00007ffce89eb46c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f937223561e
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f937223565e
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f93722357c2
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9372235650
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801f69cb00
RSI=ffffffff81b6be9e RDI=ffff88801f69cb00 RBP=0000000000000001 RSP=ffffc90000187df8
R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=0000000000000000
RIP=ffffffff81b6be9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5c59000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f0884f4ee9c CR3=000000000eb96000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 657565757165642e 7166622e6f696b6c
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb4c44f56
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb4c44f56 00007ffeb4c44f5c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2ba2a3561e
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2ba2a3565e
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2ba2a357c2
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2ba2a35650
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=dffffc0000000000 RCX=0000000000000000 RDX=ffff888022e5a580
RSI=ffffffff8b984201 RDI=ffff888022e5a580 RBP=0000000000000001 RSP=ffffc90003aefa80
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffff88805b79e000 R13=00000000228bf620 R14=0000000000000153 R15=ffff88802d8f9080
RIP=ffffffff820c1516 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5d59000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000055b4f8c57e60 CR3=0000000053dc0000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000c0800000 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000020400004
Opmask04=00000000ff7fffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 303a37622f617461 642f766564752f6e
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 000055b4f8c47a10
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5fc93d17f0 00007f5fc93d17e0
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5fc95f1b20
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ff00000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326c78bb0c483 737326c2d09cc059
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 634b3e22f1fd739c 73737376283cff35
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b4f6fa59d7 00706d742e303a37 622f617461642f76 6564752f6e75722f
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6c6174735f7563 725f78616d006c74 6373797300313d65 6c62616e65000030
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 756d006469766976 000055b4f8a0351e 00000000000000b1 0000003077617264
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c3937312c3136 312c3131312c3031 312c32452c34442c 30442c45412c3841
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c34412c42382c30 382c33372c32372c 31376b2c34312c32 2c312c30652d3033
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4442654344464670 3243353176333030 30623a7475706e69 3d5341494c41444f
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801f698000
RSI=ffffffff81b6be9e RDI=ffff88801f698000 RBP=0000000000000003 RSP=ffffc900001a7df8
R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000034fc4 R15=0000000000000000
RIP=ffffffff81b6be9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5e59000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007ffc866b1000 CR3=000000000eb96000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000101 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000
Opmask04=00000000ff7fffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b4f8c5cb50 000055b4f8c5cb50
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b4f8c3e1b0
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b4f8c564b0
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5fc95f1b20
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ffffff0000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326c78bb0c483 737326c2d09cc059
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 634b3e22f1fd739c 73737376283cff35
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d6166303030306e 65762c3638783a65 7079743a75706300 5341494c41444f00
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 505c5b0d0d0d0d53 584b110b05450758 4d444907484d5e00 5341494c41444f00
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c333431302c32 3431302c31343130 2c303431302c4633 31302c453331302c
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4131302c43413130 2c423731302c3137 31302c453631302c 353631302c343631
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3532302c42353230 2c413532302c4134 32302c343432302c 363132302c453032
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c433032302c42 3032302c41303230 2c393032302c3830 32302c363032302c
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000