last executing test programs:

4.15060448s ago: executing program 2 (id=204):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='mount_timeout\x00', &(0x7f0000000180)='1\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000080)=ANY=[], 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="2d5a8bfaec0503d4ee82255ccc79459d336c02f6846ffa083727a27fef8e41f33ff61428dc81376619b5746876cab40bea6b76e7a18d9f0f45c5f33c3f3e548879927a89cca1b9829ff887d45cae3a0012b8eec038b982c41410eb0cffe4204a0387ae9ad2d2eb6f904feaea4325a355611cfdb7ac6c3495a4bcfa6a2c3285bf50ca4a25c77f383bdb14c2f038ba311fefcbe3d334550fb18a5f462cec0e41bf00e3ef37c78bb0086cbdc72b561eb2e285a15002dbb8b7a858d33bdfef916ce90eca18739db369eb9aa302efdba714da8bbd0baaeb55eb585585542cdfe62755b7dd303c01c44de59f83de2b9edf1e60279b16bc7ee4c277e23701b7d58fdad36e8d91c111be46581f230b4cbbe8b9ad764cd3e067d7b7c5e1082a55c86f7cbc77e049085b2749b2ead86b176e4c8d2498a331f1118c5ed72ab0fc4228c8214e0e48fd1f265ccfd3311eff1f9548d1217c02de43ebc6c896afbf6065592ce3bafbc138524c4ffa429c33265cc8ebfc69e1adf360f97ec2edbab35cdc965dfadfa522a591734e25f91a44023ceeaac091534ec097d7a6f9a8efe84829719e41c101ee103c7b8c6d7fb630da2ffdd692d13e9212539b8484ea7fbccc74ecd6b44e08852505badf79984da7ffd06e78b05b453e89bbeb44fb0e72d527ee63aee52eebf2e4049705c41ead90017d7a512146287226941b20b4a603d1f5d9e6c559d55c5f6de7e9159e121dbbabdcdae8f359f66c218fb24d20c3b56ca3b4a2639b4b54e0775f29c731a3fd33331a76c280df2bea7fb0778648bc55257c42cb1a4ae173a21e33a782943d733e570595aea49f391ced7df117548032f44d611d1fcafe7c08fcca48ef9bb719d41c2cde9eca1727feb7bcc14757316a3fb315eb0adf3b60f5d6cfe231e4dca32f1cd2a74a68e44b1c09471f135d6abf0d7d417a42323923ced88d39902998a177bda4d7ac9e5479f0ae49f5fe51818fa13dd9131d219658ed2de42587f415396aa610998f2b166a053cd272ef751e5447122c03f33800268f63503a237fd62235c65fa995ced4facfc61959a7b64f7ef4bced8cbc10222a18aaee1fcc282163cafc4bf899a7de76ac61499fa1bdf6e6599a9b6e46d202230ee0be421b38ba66b85c7e5cb73e26085f8b62b4141f8728515f12019e1738bc5b278074c56be74033511b21e97a727c8a5f9c186af9777574f52d957082122dcadefe3c376f73a33e41094ad7cd404b50e963a200b57cbf4329e59c5b5a42f8700613e30af94109d5562262792e77df91e7e75c40080f8ca071449bc999762d483c30a4eee68e89be2d138a4b64af3c0211c3540227d85801dc16d1bb669a16b243fa98ef40edb5b5fe05c50f8702434c4d2663e874aec996463c6d946fd1391096b02198e88f5e568300d6c4848b4fe7273af633cc6fbf6a5e37feea56cfc20a0b42a5c6266c805823bac41f8d4eb43c6c4673a4b6a8dd303fe922ade7af649cb21c2919390a9ee62a08131ea21840adc9cc023e2aab908ea6bf2d41e52918ed6423677933cd1729cfda6423e540aae3f043a1296b6eb9350d38e07abed7d1ea7249b1b67d17322050d01589c9787f4e5a904c5cfb25e047f3e46de5222121c2af122bd3a3b2b0f35ea0a81d3a862d77217e992cc74f678617223cad5ba21afdc58e6af17e7b4ee3a506f34069d2931ac62d47f86f1983d7204a32544ae0b738cd5ab3efb940ad752ebbb59cd28d98cd6e0441f020ab2d68cbe90fa44be7f7191c2f5748c418dde668ee87d579baed4358b5c47e03a89ddb98fd4209fda85a277460ca20cc6de67c0f35e39d3fcfc070530140f648b50dbd3236d8e5b5e63be12191cd67b9ef128440d8794dc452b5a16f250c9e378d52b1132efc4b1ec8a7a3fd04ef82154de056ee5054fb15dff8df06bdca1dc8b1c1d4175c967445105954d10f0fc94acf39b68105d188593584333312eb6fad6371cdbbbf16e88bed86600d9dac851661dd3cc64f9bac0b2b81ad2564274b5bcc040f065f3fc055f7e254f8954304140782b9a2390bb61fd82d7a99ddf96468f3ef43113b767552969d71190265b76c1358c4e16a21ff959631a19c6f5a686b7884d75aca2810decbfd9fe0520f3b322a80838a2e633e1c2a79df01786f605750b84e2b04b7204ca6022973fca4ab0c8c67caee2349a6b839aa6bebc862f2f8246fc293e0f14a375581036becf081e4fd6b0cc2f7465fe7f932890884794215838558c0ae6de81efd624c5290bdf52e95e4d5b1eaf280d76eb0ceddf438bcf1d4b83e8eec3aaacbd7ea0421ac84f08a480ae48edb7c23c3f94dc59a44b3c5712800789fa3b2b938bed137505d2b247a4c4a9bd5ceddb900cb9a502d10dbd620a7ef84fbf49081d52419e5d08ddd5a1873f6d3ea6a822400ffdad29899bfaf73ce3d8ff182b3ca8ef1c39fc34b93767b9a13401427c440edd2e5f801655e60dc4c5b4ba84e504421b758e0b4c743fd1a1b6be27702e751960b431f1d7a7fd68a9ab198a5c6dbbee137283e6d6c69eedba5345e551e4421f3dfc1c957bbf413c48f64871521789487707278c69eb71c33a6999d7e497dc3d7d022f008addc112c116637f6d29c9247de134eb860cd3e5af369ee474883e7a20c40ba02160ec19dcb717cd3f4f3f0293195242fa814042ad751c774728a797a8c483e0562a2cca698053c1b66c0310affdb6e5767ab6db583ac415119f1760bed5f405c5cfb63b2ccfd5dc9d119fc82a86f98551d92f02410fdddd450f0a661ce041fa39aaba50cda470d3080dec7345a54abe2a7630a7fac84bf95c30a0dff1225f7b1aebb41daec68ceff2b0f502e7433f395aeea75c1ba88229b44fa5c6fa2647e44db139eca1f2b7142b6c23d4879603bb5617e94de0d5353d1b17dfb960eb1c11c67d0d1e1cae94699cc9397b79150dacbbc7361261d5445f237210d2ab8120fe721072394b77df46894595b8fd56f034318e90e3cad94f1655911b9bcc0bd15c628c0248e134295f3ff69cf8ea536b4b7a6c11b4e04955f9f1d9bac2ad39d81ec929b0d29999ae5a865bcc2cffc8fb42af6e486ca12a4c83461c6a72b3c88e4f3d1a9c1f13adc6defbf0110746e39b1d01a5129f996a2af48bc52f06a32764d8d8dd984c5dc4e8bca0ffbbc7e4cd226cc278b35ed16bed6e8aca4a1c18120eef0966dd5327f252462477d43cbd1497654ddd3358d24883d9ddde40f1bc8c5610370841b1cb13e84162cc6d0818987350c22362b12c0f315dbc5dbc33c224bf8d57410f2621b9c45d6857b0bed5aae750db0dd4c6cf50bfd6d5e0c816a9d8951402a1c50ad8169fd94427b42c58399c6d72b1f213e009af4f650e5ef67d2f48c7dc3ef74a8ee453ab84118f2f0e4ff2b8130169ccac37198b337205cae506e8d70acba86aab28caa8117b1231d9c4b631fa3aeceb3c236182e25299392f1ed986106071097314a9b9bd0f30d853e8b4044c00f04b45b2923b572a6a41cb5293cc8dfdbeff56a1375a33bac7b220056a6f6a292035b17a3c3fd55897548c68ad7886ef432cef353da3da8deaea09df078569c042258dfc0763d54be89302b11a6d24f4086028b82520fb6d967b78b611a7e9661a92b1a8f12d407d2289e85a82bd0b7c742055acd2396ba8d101e91ce2e9f387e909fe6da3109e1937b1e12515f23c8f1b739d4c40a287cae3bf59e901fff2ba0de0a36a304428e9febe42a01dea2eacae9416a72ddabb98d2e69c70ea9edfc57cd81fc4217ec353caf01a1a61b925102f866b4090b6447cfd8eeff2a3a49e30fe0a4fff77fe1a225dbdb2fac338526c7438631b69ead8781b86801f530b04b1544be2c22aff4ac89b0ce4353526905e59e18f7f01c221e42354a5269e0e28afa29f38bcab3923fe8d64fbf81433991b0bb9df6fc4c28ba175871d87bb5ce6cf5bf4572bb873c044f0aeb2981e34a005df55d354db0353f6433f76adde2c124793a1da43aca0e62a744992ed8efa8571a26857aa65a21cfc3507471ab75525cedb559c430b5d03a5c4e923f7fbec50d0eb10fc40b3d7986245f4c6888a53df7fe7fdcc11261e70d8cca04baff938f8446bd9048baba31085f20746c5f0e00d816dca934804ea2877cca51b5c0e31dfeefb9e91e41189d67412a09af16b4cb709e6fee71b2766a71c8397578516b656633bb620dfc8bc15de4ea5f75f6845ea44805442125adef9377e98b5d8e73f3a0bfbd330467daf10d9f7a95cd6fd4827fa1b062898fa454437bf185b9e0d98c9d10a5db80364bca446205739b23a1e7e860647ed30e2b72524da94a5f70dcbcd67d8df08f0d57583011d5487669c5a45905125186590322dbe481e820a6a6c29c136fa4301ade06baddca45f0d5ce913b5b763d293da4afaa450b17ff4933e4478fbba9ad9e6e5eafe9fdeb82b7d65bc92f6690d03a49923810558b5e0f5bf47e7d000a5e132217c174445565d57d29f02e71d7205b8ec10330fea51d972fc5c81b1b36775816082f979b5b1fe3601c9c8e8fa0c3504bfa30e3603d5a0f3a7cbd27d744b27cdbf318acbed70697519605453df106123e1a6148c9146154986e288d8a70b6fed1667cc1e0b199067c704a6d41ba751b53102ebca01b3ce90226847808646c95f3eb231b6af0b0f329bd997db5a4d3ff18edf0203e351fcfa8c8ae2be6953472bbb3f40bb6ab3f8f2128d11a3bba133f0204e2e0df189cc8d2cb8af81d0941a37c2165112ed452008930bcc607fa6fe3ad1def902d89c7330e6042f6f86c3a75665ec603b6e392b417a0d907d42e6534db72adbad4266c6601d7b8bf8d9cde807088f76b07c06840d0806eb89aa545292284bf050e732e547ed54417b3ec7e7a7c5e8454a56f5092ea8cb27e74e0672c2951647e29dadbdea86d2a4d9e53ab01c9d21e902fc9c6ff4c317b3c0398561364e880e2b079d79a27d6dcc3d586abc043477981bd36746f5570840536bef104a158e2461296717d247b6004565ffb8eb9bb5258c65032f0b472c4f3667a17e3ff65b45c91e2411b5990f054e0c2a05fc175d2db7fb32ca32e4c11b46f08bae1614e2add96133ab383c1e78f4e3f21ed3010a35c76ad88714b526d3a5ba799e6f7bf9d5696e7b42c8c264162a28831baaef180f40489ad681af6c0a674cc7b65e8b8ab704d15546f70ed1e67f7643bbc8d0b8482024b8f320b5bdccb1014f5e1a34c6c795428660f026d93dd5dcabf2330dc62894bfe48fde6b931ba55dc2a222a27a3906ba5b98476321b6d27217fd58ad93b616aac91b139729d91de6f8ef49402e2741b8dd821f4cbaf7c4662ac782b255dc438164e54c417044e9bf5e13a8247777726dacea4341d8ba03bad17070dd0f07da13179d29ac00aefa41aaf4688e99eb395205f6d6d71999b3718f7f2d618117334977a92b15ed52e45e7d5df7a22be9cf0e008c41257d99b2426068c48de100b8e3019b624ce2f2849c35b74fe5ecc4478b2968a97cfcb759fc73c8cd21bda084646dadee926a4f606768749a89e11be2a23985631c922a73ba93f3619dcc4621c8da57697420859210aa43ec06feb649b9f1362fe9553f9d552b77203085d9a4da629f03fbf339bd8ccae6c411f6d8f131232575d28af2a2690529080f02a5a74fe59d1255039f09b8d565a4838930f88d6129389f2312a2ebcf0fe7d8b6dea3484cea9a1628349218b8ccefdea2b6c37676acc2a082fb73b19705e98079c1de7776cb830e79c0081a2da4059714f19587d10223fc50ea8434f1c7919a77acd7c5b20ac9fe8ad9d348e2c5bdb57fac1ec0c31a1688e22aab4f1a81826f3a47bd364505d35975c105a152aa8e42b2422a100ad3d3184d286884552143051b79294aba34bfc5cc332f0b6aa3bf186776ceb8861336ed97b85b9a7d548bf7b7a907256c7c6a2427d92aff68ba18544b95a75564029387fd2569943f8d54e64cc621123105eb56bcfaea06e38af31a05ef38302d2b6178121d52309865c5ec1147159c07b4d4e1ece24f6a1f63a492c617870c96dcabf43b73055d749e465cdbb965b18091eee65bd423f249d934ae904c2129b93d116353fe014e1afbcab5f74766a806451855bc28494653b9a863b9707c2a0fce3eb4b55c4220078651a94d3b9c6e92f4995dd56ec17d144b07bfb1b955b557d14774e64f400e0075781381b33d73a60f6b96cddbda0962b2a609e6bca56a109847bc13798be711d3779d5a8c6541bd247fe3b7477a1378cdafece044db3f31810bc95f8fb4ae7a8815303faac03651a13924308c06c8e86506b7d186a717a1bda1d7cdea2b8b682d37f954f488a8e0d65f868a81b1af4b8f7331ba84414a7ada82e81e06e76ddfa0aca0ca9a53a5de0bcdcbb77284bab522ffb6f803e95f116ac1670c50acd36d80f170e8e7e05163f050dc89dd93bf9160a545174472376e1fcbb945e9294f796a09ca78452683b8bd39049d118acc24ef0dc18ef88899dd7c27a3585e914e6f6bc8bb1950c061c722134243cf151785bc19dada45b90d97cb83bc60885a908d0c13be9e54f1929fe1f76fb9886808caf0442aca4539a42078bfee82418d611f4c432fcbc5242c35a396c17c1b93b98b277a9c8ef0143643e120c0de4b7c6beb0a582789b81a9d3a0b8f96a332c89764283d84ec5e6b8350683a2b4eebcb214a7ad430ff9ebcfc1d850717a8d38b8e35e67fea4b8f14938cc3eeacbee30616c09e848ebae3cefb8f2a904f2b3d1252019ec914278942d9b914f95574031cf21f412aa7500f3955db7b9ef9403750058d75e53d16803d4463f7884df1e361d34ce646e20b3427a45cd307283f1ff00cca6c841fb9b06543bf1a254b21ff421331facb2f08a484904ea25e049597c8b0a2140e8ed2906d574e73165ec5591c89b5dc08e5943ff7399f76b1df90947a9479b1aab40abf8ebadfa1455b6dcac672f495a64b6230fd3fe948ce6c16cb87e11ac7affc9047ef33fa64585c1dce3bab4fecc0c7d81b5ea73aed3ef63fafc880b6e2ba09d0df6d626e817075d5f330d91cec4bcf4829c20192bc0ef7f728f52dd3e074bafda4f8cd8465311a9124baad61bd73ca76a0d0d1b80cb7a5e429067ed4707b64d38613008c8af3ffcedfeb8cda26def8bef7cf947af23939d18adbf56715f90c2df716eb037d536cd36bc2b832c57f4a319f392e1ab37e02dfb392bd52b02801665c8ea28edfcb153f267dcfbd671d4eaa0d56335f7ce5eccda6b9f74621a1b322f1f3a60b00196a65327b36419394e776b2e1c1479f5f902c5918adfa5b112bfaf786eeea1abae7c8c9d3e3fe737c23092143376808b5e26cf896fb5202572533facacaac10ec26cab819f74cd372c95d50a9b6560da69c1b22d5c15759b7ab1d8118e672bea9af7e8a30458ccaa1586ed2720d5465e139fe3dfc0bc95107061471cdf28a42aa8149848a147a1710407021d13e611b36ad3624de35c4dc5a02ba8ae724b2d8cd85f15094e1893c98052cee135d0c1c11a73297775fb517abbb471a8b100cb51d8815acac16703b56f8aadae334601a84fc306efa08aeb2afbad94632b5f209603cf5e5ca634bd74ed2e525580ddd2f2ee65241788f5e867b44d7ecd71f5858d269ffda98d93860d8f1c26c47df1199f95991b54808bc26c0ab67b40745b8dfed41838e2c5594413d2c6022abe3c1f132e9f7c8c69e50729325d37e7502519d53d7e1bf0bc8f62d216fc9c88b197cfa1571ce8368cc1b4b625559cab7e8397c6c7bf537bc8b9d604f4bdb04cab86d349e4a33f92eaa07378eac07ed8d51aea9c15ef4c4b0e0a16f9c794701a1b74b58beb15cc165a4dc1a13a0886f55cba2b977447b61c01e1295a4221e19321201f1df0d25c9e14bc4433678e48a5081de7c81f79a6370843bf0d6e3e5192c1ddc0bad14a11ada8006e4f6549da3a877a991351610eb0c5bb6228d266baa27eab2b9bf4455fc54aed3c74c12590835e498c11efdc63dde52a62d8f3a3c978152018182b3e4cbd00fff317d06f8e9475b4c7506dcc5547d8ace2b71024aa0e2220936d2bd05163b8f15bc429378fec52ac39d167200758884056dc14d3329b1d47f477a217eabb651fa97e05451cd6e861996648ab439c9aa6fa032e9083b8c0f87890c88c50dd5a6e6be8c4a4361f3b4c3181c570407dd1d2d835a87dd4b24f55a649c3e478bc002f30894d06411dc4dd8277f796976b8b2884ed371013225bbd95955827741331777da30b1b3370fb4d0bb914d97660f7e06759ba54b5697a4f7cfb67035867f39e53306eb55b31ba660769ce6993b2f44a7173576766ed20992d04e6b4aff20c138102537a142ceeac3804fb0a4eaddeddb6bcc69007c5531f0ba6851854d8d836a51e8d644c7b79e071f19986090d2404b562a17e1ec1da775c171373bcf5d2c3d7dd64a587d66e42b6963d892df898766648f37c8d10ca249e28368c388f4e70a80b2992a0a390a2d51a17a0c1774fec2d399a2b0a99c802012fff6300c4275d1305b9a9d0f8144df64da9016f16369e813dafc7cff55c5a60602141fcaa62d9fc0b93df6524d8692be3c7ded5354b63014686e98ef2b5947eda93e0cd232d3fdea943d3bc92a6f2835c55aca33dcd087b7260bc68def6ce96ef5d536b61006a595219382d8b8365eb92eab44e677109971bc4dfd077a56ff1f27e9b80edffb5ecac7bde5dc2a74c30a24b9cd1b0d4356ec424350e364d0dc929d657a8626a22111d4a0f360fe33be72a1f2c4f5c1b9843145ddff70d583a9b433cab33b10d93531aab7bb8a53c738aae79222481b135eca9441f47068299deabdc9c4f77e5d4ea286e8300eb5956368d0499691dbab1499baef30bb6c4a9bb0159635dc1774203fda828bf804e8f526ffb55abd8700915232964b7f219a7bb221efa6428089263ab753eb421a1952bc780289a85ebb9b510dec67a826ccce1cdfbb29a3a55f4e1068ca2c077544efac686d77c67c927430c3ac78c7c8b1f834be9a689fdab38f1401797dba32a284f5c5f9ed13d34d8a001cfeeeb7de12aaeae7706004f96a293e52106fd945428e7e98915070b1584a323bd8f00b9803ce189c9c0af032752d979df57a5098458c7de034db79f43d27bcb720078b05e5f364f2d789343fb6fc8b2cab810b1745fa36aaccf5d27fc7f06ab821268d83e697870632814319533373f24584b35b2ba9dd9b52a4a2e559c90b1b87549530a64fdbba5587242535fd0d600fa6e8497369a5587627182c62da4a47bc6ea99f7aaa765e3b74b7d9c48e779c8b13a2535d03ef8ac4bf3fc9e6eda5628034e7e453fbd6153b8b8e9f693c5dfa37f6a0a2542e6f86ebd2ae926822d7b31963c8879557dfa2a869ba3c5dc2dfcb60bc0a0c9816c2c4c58bdc09c2d76a007e68c38fd8b88709e5c49341630e333e13413c3e60c0d768d4c98bcb297e819ceb0f8b229d3037ac95639344bf42ee7f77922a6ac039837356dfd7c0ba3c5393548369bd71b4824326eaeb80a9c249504a08bfc164af220047cdf054d928a8d929a2fb621665122062dbd5cdde82b8289e0d510246e0bc30d34d8e96703f75c75328f99437be474315d8cb55066badbc0ee852c8ef28e1de7f5b58dda97742db5f708c6be3279d700ba147f1519485020336c260d825920870739fdb288f22b980fb7bcbf147b1a95fcc3d8d1899749d928eea8d47cccc1fbbdd5729a3f2f73d2ae352eb3e043405bcb7fa12b2a80d6a3f0178a18cbc5794fd65f0caddaff57616dfed94884a48b27b181c55200d9ecdfbb082dcd2952089938e134eecb40c2f95cb7808fc7da09282787edb1939e75bc8e284c01239a895246be025c8e0168ae83f5adc62f4f81ddbf6ba9b5fce3ddd111eb61c42777a8c303abe291aa9ef383ef1d6c26c4f8698375cc76a7e078ac948f2e84de084fdb380d38d2e1810ce8118999554c06f8d583bd37003b407dd7b41a3b14f10a5ae7c2e8fdd087cc322ddc399fe38cc542bc957b38b0fda34a3ee5c6a97d25629d26a75de211fe1cc4ca63880caa8f85f3bd489c39cf30eac81784e4456a775dee3045df2a1875623a4fbf227cf90cd237721a6dff29d26a16306e4033cc644e35cba3cc4e45cfd0cefc9c8d8a0f35bf31a8319b54fb549554c7089b9334a9867d51d71aae1f342d5602ef2d394e6c8a8aa6c15121d8c8b3abe3416367dcc276c048c65311ad70df0ecf0cf817a1a27e1dc50fedea83de8a8bb7746e23be2f335c9cda9a7f08d72b9debc35d49e9ec4c9815040c38c11375dd7f2897b20479343b86b51c317e0e90f9465d8c425857e1831931714284c60f68036134304558e53d2d42813a42a3017ab21feab6132f3a2f8c5670a1076dab6136cd6836b52d7ee54639758085438831dcd8157ccae47784a35364babff9299e4eaa389931199b4901f12185a0d228473d4a147d88e55bd11f8ed2957b7f2f3efb3e444f0aec9bef1f68cffbdac04698cc277706f2ffdd263586b84c645f1721ee3008b398918fdfb9b06b98078447c0edd7c058524825a1124e9af37fa9cb77302aded60eca394c866397c3bc18f8277d9277921abd06b61b1445f43cd7f0b5b2c023832f6d67f86d9b6ff9985edee1ec2572486b43d3be834d5b60d208b1187ca7cc8b17133f55314ee640268d5337d7dcdf1742cb543d63ae3c09e312ac05b5d585d9437bf16bd560ef739f12c878178757e1f675a8671becae2bf03f87de4bc40b4b7a3aa6e2f28f015332b10b9fe426ebd45d7a26e769bb05eb2866bb34c56b079a5bd23352bcb08c379b400512b0d8438ee5371171ccbf2921c1e150fffb5885286f933f4393088ba21c47b15d1a35de27dbd02e58859aa080f87d0a857e92d0f52c549c04cd9368c94a8024e184773cb3431d854c2855e93ac9f24d5e45d11c2acfb03755e7f279b368e2e31b3653a7d7e2e102ac67f363c195272e2896bec544f669f2d25ae8638ac30da6ed52404b32b8ee9f0f2909ef6b4e2db3a6ea88b8a6f2f2c025959efb7b94005eb307aae01af8a19ee6178270be09d93837793b43bcdab98b9c04b6bfea7ac2217c11aeec277bc199b67ac24b7352299e7fec85aa151029d14441b56bb6031cdc72a1a90ef537c6d2bce7ffc7c366a88f8bc87cd8ef4e91b5ad9d85ed84f9b85f029252ad5ff13d564d842ef310feaba90974e40889e7cb753eb44ef96bc4c25b021fe50e9957a9c3cc9904aa920fc8a8e82a826b945559b57591fa1a26c380afe65d930f9bd9a3d93f57324d28c2741e728cbd106dccdf66863e49db8a0df1398ba8594fa5102b8157e4b987f4339820df5a7aa2b1c47ed0211437ee3d81dcbffa500dc4b743d49028581234c7e9db2e951d5bf3e3c448ce58bf94a2f7ef95eda07daae00bef1794d27330927b2460778fdee580efe431ee244aae452cd60100b6c9f0cd5e79e170a7b149abfcc26b77d33c35311c95e3ba0752eabce3d1310a8aa45ecd1659e4e855919d153ebeb434581a6d352508771b030acd3fee51badf6767a7931bbba2cf195bd98fd096a6be14d7172cf1dbe3a82bae73a29223c623c090cbc5fffe8f3291", 0x2000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
ioctl$EVIOCRMFF(r2, 0x41015500, &(0x7f0000000500)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
r3 = memfd_secret(0x80000)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, 0x0, 0x0, 0x48000)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa0}, "fc3e394e1cfe820aa05b4edb068592192854f7b82dcea84bdab130881ee5b20a7625acc9495d0af4e58234546702d774b2e5d6d1b21411596404380389d4a047799e29f481562a353f2c74866e731440334ffaac700b65f4d602ff26723270d5764abe1f6840cecf1293ab089f983b81b7f75a66243bf46010f0b5a8cbcd17cbc94e0c54c92cb49d9efa176408260eb4cbea989aeeedf4801cbe42b289adb095"}, 0xa4)
r5 = socket(0x10, 0x3, 0x0)
listen(r0, 0x3)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x880)
r6 = socket(0x11, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'gre0\x00'})
getsockopt$inet_mreqn(r3, 0x0, 0xd4393e104f08ad4f, &(0x7f0000002040)={@initdev, @broadcast, <r8=>0x0}, &(0x7f0000002080)=0xc)
bind$packet(r5, &(0x7f0000002000)={0x11, 0x7, r8, 0x1, 0x0, 0x6, @random="64de13c42d66"}, 0x14)
sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x20000400)

3.062360726s ago: executing program 1 (id=214):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@empty, 0x0, 0xfff7, 0x2000, 0x5, 0x0, 0x0, 0x0, 0x3b}, {@in=@multicast1, 0x0, 0x6c}, @in=@remote, {0x80000, 0x0, 0x6, 0x0, 0x5, 0x0, 0x4}, {0x800000001000, 0x4, 0x40000000}, {0x0, 0x2, 0x4}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_thresh={0x8, 0xb, 0x7}]}, 0x140}}, 0xc890)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

3.061103087s ago: executing program 1 (id=216):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b)
close(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
lseek(r0, 0x7, 0x4)
mmap$IORING_OFF_CQ_RING(0x0, 0x3f7, 0x100000b, 0x80010, r0, 0x8000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000)
setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000180), 0x4)
remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f000015a000/0x4000)=nil, r1, 0x1000000, 0x110850, r0, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18)
fcntl$setlease(r3, 0x400, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x400, 0x0)
creat(&(0x7f0000000140)='./file1\x00', 0x40)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000))
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6)
pread64(r5, &(0x7f00000000c0)=""/23, 0x17, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000002300)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x81, 0x0}}}, 0x1, 0x0, 0xce0, 0x10, 0x20, 0x9, 0x9}, &(0x7f00000023c0)=0x9c)
r7 = syz_clone(0x41005680, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0)
ioctl$CDROMCLOSETRAY(r8, 0x5319)
process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000000000), 0x0, 0x0)

2.469879733s ago: executing program 2 (id=225):
r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
close_range(r0, r1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000080)={<r3=>0x0, 0xe1, "d3b3969f1a9d20ae18e269168b77547432825ad96bb2fccac272c25c4df390c3b96639399b0bf934186a78c5d7a1af250dd23ea59aabd8b665cc9b90d5e5a0aeb366c4a32867e4c689a38b1d135471e823e679a1b6b2869f57d69e9dc9339f5e778a0b3b0154b95b7aa3ffc3530ae140b3a1b669fcf2d3d88762fcdec5bf0a60e4fbaa266e4ce6333db109a229a22a213a54f3cf4a5de82bb7eaa648ba58672858697cbeb7123e974f1569fe99369b4147086cd8b8c1b5f8e2ada252f425a35c2e2e54df5e12e70d98f45c0b201d5e8542f702c51c7a5e09411a81ec2bbb48b0b3"}, &(0x7f0000000180)=0xe9)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={r3, 0x4}, 0x8)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000200)={0x1, {{0x2, 0x4e23, @empty}}}, 0x88)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f00000002c0)={@multicast1, @dev={0xac, 0x14, 0x14, 0xe}}, 0x8)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000300)={0x9, [0x2, 0x1, 0xfff, 0x6, 0x7fff, 0x2, 0x738f, 0x72, 0x4cfa]}, &(0x7f0000000340)=0x16) (async)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000300)={0x9, [0x2, 0x1, 0xfff, 0x6, 0x7fff, 0x2, 0x738f, 0x72, 0x4cfa]}, &(0x7f0000000340)=0x16)
socket$rds(0x15, 0x5, 0x0) (async)
r5 = socket$rds(0x15, 0x5, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@local, @in6=@ipv4={""/10, ""/2, @empty}}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000480)=0xe8) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@local, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000480)=0xe8)
quotactl_fd$Q_GETQUOTA(r5, 0xffffffff80000701, r6, &(0x7f00000004c0)) (async)
quotactl_fd$Q_GETQUOTA(r5, 0xffffffff80000701, r6, &(0x7f00000004c0))
getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000540), &(0x7f0000000580)=0xc)
bind$inet(r1, &(0x7f00000005c0)={0x2, 0x4e24, @loopback}, 0x10) (async)
bind$inet(r1, &(0x7f00000005c0)={0x2, 0x4e24, @loopback}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r7)
fcntl$getflags(r1, 0x401)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000640)=0x2)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000680)={r3, @in6={{0xa, 0x4e22, 0x13f7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, [0x4, 0x7, 0xea, 0x9d5, 0xca, 0xffffffffffffa873, 0x9, 0x80000000000, 0x9, 0x200, 0x1, 0x4, 0x8001, 0x80, 0x1]}, &(0x7f0000000780)=0x100) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000680)={r3, @in6={{0xa, 0x4e22, 0x13f7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, [0x4, 0x7, 0xea, 0x9d5, 0xca, 0xffffffffffffa873, 0x9, 0x80000000000, 0x9, 0x200, 0x1, 0x4, 0x8001, 0x80, 0x1]}, &(0x7f0000000780)=0x100)
recvfrom$inet_nvme(r1, &(0x7f00000007c0)=""/46, 0x2e, 0x0, &(0x7f0000000800)=@l2tp={0x2, 0x0, @empty}, 0x80) (async)
recvfrom$inet_nvme(r1, &(0x7f00000007c0)=""/46, 0x2e, 0x0, &(0x7f0000000800)=@l2tp={0x2, 0x0, @empty}, 0x80)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
bind$inet(r1, &(0x7f0000000880)={0x2, 0x4e23, @multicast1}, 0x10)
ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r1, 0x7aa, &(0x7f00000008c0)={{@hyper, 0x8}, 0x10000, 0xa})
r8 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r8, 0x8983, &(0x7f0000000900)={0x8, 'veth1_to_hsr\x00', {'syzkaller0\x00'}, 0x7fff})
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001a00)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/132, 0x84, 0x0, &(0x7f0000000a00)=""/4096, 0x1000}, &(0x7f0000001a40)=0x40)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001a80), r7)
ioctl$KVM_RUN(r1, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$FE_SET_FRONTEND_TUNE_MODE(0xffffffffffffffff, 0x6f51, &(0x7f0000001ac0)=0x1)

2.461597102s ago: executing program 2 (id=227):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000003e0000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="000006bca1000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x49}, 0x94)

2.40033502s ago: executing program 2 (id=229):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x82c0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
r3 = syz_open_dev$hidraw(&(0x7f0000000040), 0x80000001, 0x20443)
read$hidraw(r3, &(0x7f0000001900)=""/4096, 0x1000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b80))
r4 = socket$packet(0x11, 0x3, 0x300)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0)
r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000002000)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]})
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000002000)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1001}]})
socket(0x10, 0x3, 0x0)
write(r7, &(0x7f0000000040)="240000001a005f3814f9dc070009040180002000000000000000000008000f0040000000", 0x24)
r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0)
read(r8, 0x0, 0x0)
r9 = dup(r1)
ftruncate(r4, 0xffff)
r10 = fcntl$dupfd(r0, 0x406, r4)
syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902"], 0x0)
ioctl$VHOST_SET_VRING_ADDR(r10, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0x8000000})
ioctl$VHOST_NET_SET_BACKEND(r10, 0x4008af30, &(0x7f0000000080)={0x0, r9})
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000018c0)={0x200000000000011c, &(0x7f0000000100)=[{0x3, 0x0, 0x0, 0xb99}]})
close_range(r11, 0xffffffffffffffff, 0x0)

2.150497269s ago: executing program 1 (id=231):
writev(0xffffffffffffffff, &(0x7f0000003580)=[{&(0x7f00000014c0)="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", 0x623}], 0x1)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty=0xffffffff}})
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0)
ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f000000f240)={0xc000003, 0x0, 0x0, 0x2, 0x10001})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000001c40), 0x2040, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, 0x0)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)=r3)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000140)=0x1, 0x4)
sendmsg$NFT_BATCH(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323900080003400000000720000480060001000002000005000200110000000c000300080001000000001e140000001100"], 0xcd0}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a0103000000000000000002000000090001"], 0x28}}, 0x0)

2.050254457s ago: executing program 1 (id=232):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}}, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
read$rfkill(r0, &(0x7f0000000040), 0x8) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40300, 0x0)
ioctl$TIOCCONS(r1, 0x541d) (async)
lsetxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f00000002c0), &(0x7f00000001c0)=@v1={0x1000000, [{0x80000001, 0x9}]}, 0xc, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x100000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file2'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@volatile}], [], 0x2c}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
listen(r2, 0x0) (async)
write(0xca, &(0x7f0000000040)="0404e70000000004de92050000", 0xd) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
syz_pidfd_open(0x0, 0x0) (async)
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x8200)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async)
ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f0000000100)=""/192)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})

2.049259134s ago: executing program 1 (id=233):
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x6, "e8594867d91786ababad56dce73e454f6d359dbccc4450cce7652a8bc07c1dd6", <r0=>0xffffffffffffffff})
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000014c0), 0x42100, 0x0)
r2 = creat(&(0x7f0000001580)='./file0\x00', 0x1)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001640), 0x200080, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x9)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088d0}, 0x48000)
r6 = eventfd(0x2)
r7 = syz_open_dev$vcsu(&(0x7f0000001880), 0x31, 0x2086)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x1000, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r10 = dup3(r9, r8, 0x0)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000b00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x1d}, @ptr={0x70742a85, 0x80002, &(0x7f0000000440)=""/210, 0xd2, 0xfffffffffffffffc, 0x31}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001a80), 0x20000, 0x0)
r12 = eventfd2(0xffffffff, 0x0)
r13 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card3/oss_mixer\x00', 0x401, 0x0)
r14 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r14, &(0x7f0000002080)={[&(0x7f0000000380)=']n&\x00', &(0x7f0000001e80)='\'](&\'-^\x00', &(0x7f0000001ec0)='%-,{%\x00', &(0x7f0000001f00)='%-,{%\x00', &(0x7f0000001f40)='/dev/vcsu#\x00', &(0x7f0000001f80)='(G\xb9\x00', &(0x7f0000001fc0)=']\x00', &(0x7f0000002000)='-($@o}@\x00', &(0x7f0000002040)='%-,{%\x00']}, &(0x7f0000000400)={[&(0x7f0000000140)='/dev/full\x00', &(0x7f00000002c0)='/dev/kvm\x00', &(0x7f0000001e00)='/proc/asoend/card3/oss_mixer\xdf\xe6\x81c\xc7]\xed\xaf\xff#\xb2\x89:2UG\xfc\x9a\x84\x88\x9aP#L\x03\xb6\x1fb\'J\x16Z\xfbAQ\t PP\xfa8^\x1e<\xac9,k', &(0x7f00000003c0)='%-,{%\x00']}, 0x100)
r15 = openat$binfmt(0xffffffffffffff9c, r14, 0x42, 0x1ff)
close(r15)
io_submit(0x0, 0xa, &(0x7f0000001d80)=[&(0x7f0000001480)={0x0, 0x0, 0x0, 0xf, 0x3, r0, &(0x7f0000000480)="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", 0x1000, 0x3, 0x0, 0x1}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0xffff, r1, &(0x7f0000001500)="bb64c499086868551e56b4e25a40d702db1f28dcb67ecbed4f2b5b5729184fa0adbe3ae58b305ebf1bbe1ce3a920503a4520c08fe283d50ea1d2572ae8877061045644d017ace75671bc3eaa07cead019a3572b873eda9cbf360521dd20180c48a19894156dc09e0be69e6f64178ae1a2508", 0x72, 0x2, 0x0, 0x0, r2}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x8, 0x4de6, 0xffffffffffffffff, &(0x7f0000001600)="60216249beaa3fc122cbdfcbc81dd706ea9d663cb1e481c780e1270b3f096e47e8eed86a1e240e8793d8292a9f30de580c79337b7ab02977c6", 0x39, 0x8, 0x0, 0x2, r3}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x1, 0x27a, r4, &(0x7f00000016c0)="e327efd0f2dcf074daf01d167a300affb14574cb323539f2e61c5ea05f608d7618607f669c647eacd7f23c9346deea201495401b8195107711eab4fb40130b01a8294babe9970fdbfe6a05992d850559aeda35b1b7927ad204ea71aaf42ad1cadcf897f47405782e4383d7be23c406be3604424df17088789cc7039eb3751cd9d5ef333956090381b16b7d2519897bda417cb0ccc40a85dccceeebdf47d637f41f2a5fd463c8e612f95ae622be2db5147baf1324000f4476e9bbd9ed21de7984854cda9052", 0xc5, 0x3, 0x0, 0x1, r5}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000001800)="84a822564d12adfb0547b45896fb3f3a9b3e5978691d447ac03b8a", 0x1b, 0x800, 0x0, 0x0, r6}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x7, 0x5, r7, &(0x7f00000018c0)="835fffba1a9e6c1c23c1feb27fc3d17473af0e41fb8afe48158a4b40fe902772cb6661c65806519b565ac9b6851fec252f53f6d5ebdefda6f510fb974d538e59528b1655b235b92795c43d890a8e28064fa0f86660d9ef53fd2473fee61b024f3c74e20c4befac988ab6a02855833eec892e2e934b8b5cb46f404acd8e4eab1065b872468c51795994c8c6558e6fd8e1ee9902fbb0d8d6e434f576e3d4affa8f0f925e419a49b4ebc2f24b872e1c010611243e", 0xb3, 0x2, 0x0, 0x2}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, &(0x7f00000019c0)="36bd60f979c94a75f5c487ee71c121b42f27cd0fea0f91c9ebac8346767e5fcd25ae5331095ffa2e758702c0f677ad91299125c386d439d51a263ffe0d87448338fb9c9153efffe95fdbf4f63eca583517b3e8cacc0c3bd10926", 0x5a, 0xc, 0x0, 0x0, r10}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x6, 0x0, r11, &(0x7f0000001ac0)="837f7373a0bbf7ff212a4409291e32c263a3", 0x12, 0x7, 0x0, 0x1, r12}, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x1, 0x7, r13, &(0x7f0000001b80)="36d5e37a6ddff23f56d6e98c824b54ec0dc422e86d71a228b3f7a1d89b4755d1d0eec307e007a16a1d6733f52f4ca2c06cd0c7d6ff44105ae2d4ff8ecbc560973df772752ddc58598449202d1a27a62a7e0ac5b851cc9bd9f4b5abc013a778f34665fce38b99f5007d25814eb56a72234f4b8a629c2c8986860446795925ced5cd7ee0069125ad09e53ab4c8a6e26a648a7a3fb5fbf3f4e9", 0x98, 0x4, 0x0, 0x2}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x3729, r15, &(0x7f0000001c80)="a75025e82bfd736240d13ddcc888a8c9780bffdd8926bf2fc55219b7d1dbbfc7e2d926a085d0ec359f466d42deec334d597a3405e4b7e7d525bb004e111952741a888550343b534d8dfc0024b3f6432a366b6518c219f02f476ee535c7101a824b0c56eea3edcfbcaf22a6c63ce9eeb7cfc0711e5583c2b61a63efc21c43b105b0c54f97cc1fce74ecd8111c", 0x8c, 0xffffffffffffffff, 0x0, 0x1}])
r16 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r16, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001a0000022cbd7000fcdbdf2500100000"], 0x14}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x49080)

1.77014551s ago: executing program 1 (id=236):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]})
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000140)={0x0, 0xffff, 0x0, 0x0, <r1=>0xffffffffffffffff})
ptrace$getregs(0x656e638b7a4a6490, r1, 0x25, &(0x7f0000000440)=""/218)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0))
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x12bc81, 0x20)
syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x62a, 0x5110, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x10, 0x8, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x7a9e, 0x1, 0x1, {0x22, 0x5c1}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x9, 0xa}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x83, 0x3, 0xb1}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x38, 0x1, 0x6, 0xff, 0x60}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x80c}}, {0x6f, &(0x7f00000005c0)=@string={0x6f, 0x3, "c61a6fdd54a547b2287b1c3365ed69cbfda32053c757d6e706cbf100f69ed9214e2fa8c515809ba7544274b25381f13c6e17952581590aa69d0049888a6f3eee0f71ffa488e13f52668af2ddd5959ecf1dcf4dac055b7ded96e4b8efeaa8d7f5e31bc08e6d767459c03acd003d"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xf4ff}}, {0xba, &(0x7f00000006c0)=@string={0xba, 0x3, "5af89daa2b57d2f1bc69e1503499012770e6ea09e50875712a192e7e5be96531a8b3b771d9b10e9accc85fc9a5e478fc0693cd5ef866f8d9be5346576b69af9617e47b680addfec7bffda36438291a357a8ec0e1eab637bd9f61e6ead131a3c991470b41241830cb105efaf6ff1a851c30d4e053986ee7ccde62f38e42fd966e96fbc38084b430dc20c1206a12594eff5cd7ec09220f3fe27ea7b21d6a9a3459268a5519717e95d58087fa4967607830bb2b49f60749539e"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4}}]})
write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './sys', [{0x20, '\xf3\xbd\b\xc6\x1e\x8f\xe3\x80L^6#! \xc9\xefe\xe7S\x1c\xee\x11\xfa\xeb\xd9\xc5\xa9g]\xa3s\xdd\xeaP\x84\xdf6\x88i\x13\xf7\x7fS?\xe6\x0f\'\x1b\x9fsP\x05\xedT\xcdlc\xcb\xed\xe1\xe0*\bi\xf9qq\b\xcf}g\xfe\xc65d\xafA\x04:\xd7g\xeb\x81\x94\xff4aG\xfe}\x1e|\xf7\xe9\xf8\\\xd4\xa0\a}\xe4\xb2\x01\x8a\x807$\x8b>\xab\x84\xf0\x88\xf0FHP\xe4\"\xa2\xcd\xc8\x86\x9dG^\x0e\xc2\b\xc6\x95[\xd1\xca\xbf\x13\xa26~\xa9\xdd\xb3\xb0\xe2\xcaW\xaa\x1c\xcb\x8f{\x99K\xb9(\xc3:\xef\x9e5\xb7)\xff!\xcf\x91\x19\xb6\xe3\xd6&\xb7\x9bD\xffG=\x8c\xbe?k/\xcc\xb3\xc3z\x88\xfbR\x8b\xfd\xe3TB\xef\xc6[\xf1\xe5\xc7\xd0\x89I\xe28\x86=~\xf5\x03\xad7\x9a\x8b'}]}, 0xe0)

1.189022487s ago: executing program 0 (id=245):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0)
ioctl$FE_READ_BER(r1, 0x80046f46, &(0x7f0000000100))
getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000001040))
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='romfs\x00', 0x8410, 0x0)
r2 = signalfd(r0, &(0x7f0000000000)={[0x2]}, 0x8)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0x200, 0x100, 0x0, 0x8316, 0x6, "03f07f0900", 0x2, 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1df)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
listxattr(&(0x7f00000001c0)='./mnt\x00', 0x0, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r4)
tkill(r4, 0x12)
ptrace(0x4208, r4)
tkill(r4, 0x12)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0xd6)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x211})

1.120538224s ago: executing program 0 (id=246):
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000440)='./cgroup.cpu/memory.limit_in_bytes\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sunx86\x00')
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x220080c1, &(0x7f0000000040)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c)
sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7", 0x65, 0x1, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0)
statx(r0, &(0x7f0000000000)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2000, 0x100, &(0x7f0000000080))

1.12010626s ago: executing program 0 (id=247):
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pim6reg0\x00'})
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
symlinkat(&(0x7f0000000280)='./sec\x00', r2, &(0x7f00000000c0)='./file0\x00')

1.070781653s ago: executing program 2 (id=248):
r0 = socket(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x6, 0x1ff, 0x0, 0x8009}, 0x10)
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe02000000020000", 0x1c)

1.069046443s ago: executing program 0 (id=249):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {r0}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
ioctl$RTC_WIE_ON(r1, 0x700f)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'hsr0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r3, @ANYBLOB="0500060001000000050007d60500000005000300df00000008000200", @ANYRES64=r2], 0x68}, 0x1, 0x0, 0x0, 0x4810}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20004000)

859.560072ms ago: executing program 0 (id=251):
setns(0xc9, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
listen(r1, 0x5)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
r3 = accept(r1, 0x0, 0x0)
setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000080)='espintcp', 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0xd0, r5, 0x300, 0x0, 0x0, {0xa}, [@TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x60, @private1}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x17}]}]}, 0xd0}}, 0x0)
write(r2, &(0x7f0000000100)='\x00\n\x00\x00\x00\x00\x00\x00\x00\x00', 0xa)
r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01)
ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000000080)=0x1)
r7 = syz_io_uring_setup(0x10002b06, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ffd000), &(0x7f0000ffe000), &(0x7f0000000240))
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x0, 0x2, 0x9, 0x1ff, 0x0, 0xfffffffc, {0x0, 0x0, 0x3, 0xffffffff, 0xe07, 0x0, 0x10200000, 0x3, 0x401, 0x0, 0x0, 0xffffffffffffffff}}}, 0x90)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
io_uring_register$IORING_REGISTER_FILES(r7, 0x14, &(0x7f00000003c0), 0x2)
read(r3, &(0x7f0000000140)=""/2, 0x2)
r8 = syz_open_dev$usbmon(&(0x7f00000001c0), 0xc030, 0x201)
ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f0000000200))
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000484100100000000004e438d2fd00000000004a7b72000000000000000000f90000", 0x39}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6149be97ba41e89863638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000340)='./file0\x00')
r9 = socket(0x2, 0x3, 0x6)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)

859.122396ms ago: executing program 2 (id=252):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe9, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3, 0x7, 0x7, 0x1, 0x2}}, {0x4}}]}]}, 0x54}}, 0x0) (async)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) (async)
socket$kcm(0x2, 0x5, 0x106) (async)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) (async)
get_mempolicy(&(0x7f0000000100), 0x0, 0x7, &(0x7f00007d3000/0x4000)=nil, 0x4) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 32)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xc280, 0x0) (async, rerun: 32)
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') (async, rerun: 32)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) (rerun: 32)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000480)=0x1) (async)
read(r3, 0x0, 0x0)
write$tcp_mem(r2, 0x0, 0x0) (async)
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000140)={0x60, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}]}}) (async, rerun: 32)
mbind(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x101, 0x9, 0x1) (rerun: 32)

270.050158ms ago: executing program 3 (id=254):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000380)={0x7, 0x8, 0x4, 0x1, 0x8, 0x0, 0x8})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
pwrite64(r1, &(0x7f0000000100)="0000010042", 0x5, 0x1be)
pwrite64(r1, &(0x7f0000000100)="55aa", 0x2, 0x1fe)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3400000018000100fd0f00000000000002000000fd000009000400000600150002000000100016800c000280"], 0x34}}, 0x44890)
pwrite64(r1, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00)
ioctl(r1, 0x6, &(0x7f0000000140)="38474f9186525a413f5ef1c78ce2bf300c3d57ddc65757727b6a4dce2ecde94c4687505e8e1185def7f0e85db4fde54cc398cc89c42ec296d897ffa5c556b0c5eb8aba878ba4d95ad6bd653d3c06c482d9a29a35efcffc30b928836129a77ae907dcee52fb2932ff295ea704e311111cc92085e0d3")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0)
pwrite64(r1, &(0x7f0000000100)="0002000b", 0x4, 0xc0c)
pwrite64(r1, &(0x7f0000000100)='\x00\x00', 0x2, 0x1e8123)
r6 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2)
ioctl$LOOP_SET_FD(r6, 0x4c00, r1)
ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})
ioctl(r6, 0x9, &(0x7f0000000080)="78ca9ea103d6a6795efa7ab7ad9d7a963badb4a72343f23573051bd0de1ed9c28affc294c7d21370a9bebd9378")

138.587815ms ago: executing program 3 (id=255):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = fanotify_init(0x0, 0x400)
setns(0xc9, 0x0)
r2 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r2, 0x89ee, &(0x7f0000000000)=0x2)
close_range(r1, 0xffffffffffffffff, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000002c0)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x7, 0x4, 0x1, 0x2, 0x7]}, &(0x7f0000000200)=0x78)

138.143003ms ago: executing program 3 (id=256):
r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x48402, 0x11, 0x20}, 0x18)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000080)={0x5, 0xfff}, 0x1)
landlock_restrict_self(r0, 0x19)
landlock_restrict_self(r0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
fdatasync(r1)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)={0x324, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x80000001}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xd5}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x100}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x16, 0xfffb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0xffc8}, {0x8, 0xb, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9477}, {0x8, 0xb, 0x400}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xff}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0xfffb}, {0x8, 0xb, 0x401}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x40}, {0x8, 0xb, 0x81}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x80}, {0x6, 0x16, 0x81}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10}, {0x6, 0x16, 0xfffd}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x8}}]}, 0x324}, 0x1, 0x0, 0x0, 0xc000}, 0x20000040)
r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/vmstat\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r5=>r3, {0x1}}, './file0\x00'})
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r5)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580), 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xf8, r6, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf70}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x2004c004)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, 0x1409, 0x200, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc00}, 0x40)
sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, 0xf, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x884}, 0x40)
sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, r6, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2a0}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x12a}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c010}, 0x80)
r7 = accept4(r4, &(0x7f0000000b00)=@sco, &(0x7f0000000b80)=0x80, 0x80000)
ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r7, 0xc040583f, &(0x7f0000000d40)={{@align=0xcf85, {0x8000, 0x0, 0xfffffff7, 0x2}}, {{[0x3, 0x5, 0x5, 0x401]}, 0x0, 0x1, 0xfffffeff, 0x0, &(0x7f0000000bc0)=[{{@_ha_fsid={[0x1, 0x7]}, {0x5, 0x5, 0xfffffffb, 0x7}}, 0x5, 0x0, 'veth0_virt_wifi\x00'}, {{@align=0xb793, {0xf65c, 0x9, 0x80000001, 0x8}}, 0x1, 0x0, '&[)^)\x00'}, {{@align, {0x9, 0x2, 0x1000, 0x7}}, 0x3, 0x0, '{\x00'}, {{@align=0x2, {0x1, 0xfff5, 0xffff, 0x7f}}, 0x0, 0x0, '[.\x00'}, {{@align=0xd06, {0x0, 0x3, 0x7fff, 0x10}}, 0x400, 0x0, '!\'^#-{@@\x00'}, {{@align=0x1, {0x0, 0x5, 0x9f, 0x7ff}}, 0x7, 0x0, 'ip6gretap0\x00'}, {{@align=0xfb, {0x1, 0x200, 0x6, 0x6}}, 0x11, 0x0, 'lblc\x00'}, {{@align=0x3, {0x8, 0x3, 0x9, 0xfff}}, 0xfffffc01, 0x0, 'netdevsim'}, {{@_ha_fsid={[0x1, 0x80]}, {0x9, 0x1, 0x2, 0x5}}, 0x1000, 0x0, '4\xf4\x00'}]}})
io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000d80)={0x9b, 0xf8, 0x0, '\x00', 0x549}, 0x1)
ioctl$FE_READ_SNR(r4, 0x80026f48, &(0x7f0000000dc0))
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x408a1)
sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)={0xfc, r6, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x340}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffdaa1}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2a, 0x15}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x30}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x65ac}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x100}, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r4, 0x7a9, &(0x7f0000001100)={{@host, 0x2}, 0x101, 0xcaac, 0x5, 0x9, 0x0, 0x2, 0x6, 0x1ff})
socket$inet_udp(0x2, 0x2, 0x0)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'wpan3\x00', <r10=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x54, r9, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x54}, 0x1, 0x0, 0x0, 0x44081}, 0x20000000)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_SCAN_REQ(r11, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x2c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x14}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)

70.563524ms ago: executing program 3 (id=257):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20009825}, 0x40040c0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) (async)
ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040))
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe81}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) (async)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r4, 0x40047438, &(0x7f0000000040)) (async)
readv(r4, &(0x7f0000000280), 0x37) (async)
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0)

69.951038ms ago: executing program 3 (id=258):
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0x40, 0x26, 0xb}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40010)
syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

532.274µs ago: executing program 3 (id=259):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) (async)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
userfaultfd(0x80801) (async)
r2 = userfaultfd(0x80801)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r3, 0x5) (async)
listen(r3, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x3, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0x3e}, @generic={0x95, 0x0, 0x7, 0x4}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200001, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r4, r5, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r4, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r3}, 0x20)
sendto(r3, &(0x7f0000000700)="01", 0x1, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r3)
close_range(r2, 0xffffffffffffffff, 0x0)

0s ago: executing program 0 (id=260):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x3, 0xc06a2f6, 0x8, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$kcm(0x11, 0x3, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r10, 0x109}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)='k', 0x1}], 0x1}, 0x20000885)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a1042cbd7000fedbdf0d01000000000000000b0000000014001462726f6164636173742d6c69dfc2df6e"], 0x30}, 0x1, 0x0, 0x0, 0x8840}, 0x40)

kernel console output (not intermixed with test programs):

[   28.809206][   T43] audit: type=1400 audit(1790966885.310:115): avc:  denied  { siginh } for  pid=5632 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '[localhost]:10931' (ED25519) to the list of known hosts.
[   30.018997][   T43] audit: type=1400 audit(1790966886.520:116): avc:  denied  { name_bind } for  pid=5640 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   32.112756][   T43] kauditd_printk_skb: 2 callbacks suppressed
[   32.112773][   T43] audit: type=1400 audit(1790966888.610:119): avc:  denied  { write } for  pid=5642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   32.155528][   T43] audit: type=1400 audit(1790966888.660:120): avc:  denied  { write } for  pid=5645 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   32.265414][   T43] audit: type=1400 audit(1790966888.760:121): avc:  denied  { write } for  pid=5648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   32.310592][   T43] audit: type=1400 audit(1790966888.810:122): avc:  denied  { write } for  pid=5651 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   32.542186][   T43] audit: type=1400 audit(1790966889.040:123): avc:  denied  { mounton } for  pid=5641 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   32.545311][   T43] audit: type=1400 audit(1790966889.040:124): avc:  denied  { mount } for  pid=5641 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   32.547097][ T5641] cgroup: Unknown subsys name 'net'
[   32.548514][   T43] audit: type=1400 audit(1790966889.050:125): avc:  denied  { unmount } for  pid=5641 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   32.680420][ T5641] cgroup: Unknown subsys name 'cpuset'
[   32.684025][ T5641] cgroup: Unknown subsys name 'rlimit'
[   32.823625][   T43] audit: type=1400 audit(1790966889.320:126): avc:  denied  { write } for  pid=5655 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   32.823783][   T43] audit: type=1400 audit(1790966889.320:127): avc:  denied  { create } for  pid=5655 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   32.824181][   T43] audit: type=1400 audit(1790966889.320:128): avc:  denied  { write open } for  pid=5655 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.ipv4ll" dev="tmpfs" ino=1879 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   32.898294][ T5659] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   33.630975][ T5641] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   37.239789][   T43] kauditd_printk_skb: 32 callbacks suppressed
[   37.239802][   T43] audit: type=1400 audit(1790966893.740:161): avc:  denied  { execmem } for  pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   37.475153][   T43] audit: type=1400 audit(1790966893.970:162): avc:  denied  { create } for  pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   37.477352][   T43] audit: type=1400 audit(1790966893.980:163): avc:  denied  { read write } for  pid=5724 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   37.477377][   T43] audit: type=1400 audit(1790966893.980:164): avc:  denied  { open } for  pid=5724 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   37.484152][   T43] audit: type=1400 audit(1790966893.980:165): avc:  denied  { ioctl } for  pid=5725 comm="syz-executor" path="socket:[7332]" dev="sockfs" ino=7332 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   37.510684][ T5735] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   37.512440][ T5735] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   37.512925][ T5735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   37.513359][ T5735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   37.513529][ T5740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   37.514569][ T5735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   37.514810][ T5735] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   37.515675][ T5738] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   37.515734][ T5740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   37.515904][ T5740] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   37.518632][ T5739] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   37.518785][ T5089] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   37.519652][ T5089] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   37.519803][ T5739] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   37.520225][ T5741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   37.522578][ T5089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   37.525377][ T5089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   37.526491][   T43] audit: type=1400 audit(1790966894.030:166): avc:  denied  { read } for  pid=5724 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   37.527942][   T43] audit: type=1400 audit(1790966894.030:167): avc:  denied  { open } for  pid=5724 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   37.528258][ T5739] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   37.528841][ T5729] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   37.530219][   T43] audit: type=1400 audit(1790966894.030:168): avc:  denied  { mounton } for  pid=5724 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   37.531393][ T5729] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   37.534747][   T43] audit: type=1400 audit(1790966894.030:169): avc:  denied  { module_request } for  pid=5724 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   37.534770][   T43] audit: type=1400 audit(1790966894.030:170): avc:  denied  { module_request } for  pid=5726 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   38.131061][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.131108][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.131181][ T5727] bridge_slave_0: entered allmulticast mode
[   38.132029][ T5727] bridge_slave_0: entered promiscuous mode
[   38.135054][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.135181][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.135343][ T5727] bridge_slave_1: entered allmulticast mode
[   38.136124][ T5727] bridge_slave_1: entered promiscuous mode
[   38.136778][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.136848][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.136938][ T5725] bridge_slave_0: entered allmulticast mode
[   38.138318][ T5725] bridge_slave_0: entered promiscuous mode
[   38.140701][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.140773][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.140862][ T5725] bridge_slave_1: entered allmulticast mode
[   38.143072][ T5725] bridge_slave_1: entered promiscuous mode
[   38.178765][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.178846][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.179117][ T5724] bridge_slave_0: entered allmulticast mode
[   38.180487][ T5724] bridge_slave_0: entered promiscuous mode
[   38.213325][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.213463][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.213763][ T5724] bridge_slave_1: entered allmulticast mode
[   38.215395][ T5724] bridge_slave_1: entered promiscuous mode
[   38.242215][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.242258][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.242417][ T5726] bridge_slave_0: entered allmulticast mode
[   38.243129][ T5726] bridge_slave_0: entered promiscuous mode
[   38.246677][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.247853][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.250144][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.252094][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.252278][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.252319][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.252383][ T5726] bridge_slave_1: entered allmulticast mode
[   38.253083][ T5726] bridge_slave_1: entered promiscuous mode
[   38.255827][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.257230][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.309974][ T5727] team0: Port device team_slave_0 added
[   38.311852][ T5724] team0: Port device team_slave_0 added
[   38.313365][ T5727] team0: Port device team_slave_1 added
[   38.326289][ T5725] team0: Port device team_slave_0 added
[   38.327198][ T5724] team0: Port device team_slave_1 added
[   38.328618][ T5725] team0: Port device team_slave_1 added
[   38.343971][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.362289][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.362306][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.362327][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.372040][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.372460][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.372470][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.372482][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.373180][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.373191][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.373211][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.374646][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.374653][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.374665][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.375331][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.375339][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.375351][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.384918][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.384928][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.384940][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.402540][ T5726] team0: Port device team_slave_0 added
[   38.424376][ T5724] hsr_slave_0: entered promiscuous mode
[   38.424992][ T5724] hsr_slave_1: entered promiscuous mode
[   38.426767][ T5726] team0: Port device team_slave_1 added
[   38.454503][ T5725] hsr_slave_0: entered promiscuous mode
[   38.454923][ T5725] hsr_slave_1: entered promiscuous mode
[   38.455431][ T5725] debugfs: 'hsr0' already exists in 'hsr'
[   38.455504][ T5725] Cannot create hsr debugfs directory
[   38.465534][ T5727] hsr_slave_0: entered promiscuous mode
[   38.466208][ T5727] hsr_slave_1: entered promiscuous mode
[   38.466521][ T5727] debugfs: 'hsr0' already exists in 'hsr'
[   38.466538][ T5727] Cannot create hsr debugfs directory
[   38.478951][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.478964][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.478983][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.493053][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.493066][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.493086][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.578791][ T5726] hsr_slave_0: entered promiscuous mode
[   38.579262][ T5726] hsr_slave_1: entered promiscuous mode
[   38.579609][ T5726] debugfs: 'hsr0' already exists in 'hsr'
[   38.579627][ T5726] Cannot create hsr debugfs directory
[   38.778391][ T5724] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   38.784207][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   38.796422][ T5724] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   38.799822][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   38.800460][ T5724] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   38.804006][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   38.814175][ T5724] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   38.818966][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   38.854367][ T5727] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   38.856896][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   38.860123][ T5727] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   38.863060][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   38.863624][ T5727] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   38.868677][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   38.869296][ T5727] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   38.871809][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   38.885579][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.885685][ T5724] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.885991][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.886038][ T5724] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.928975][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.929023][ T5727] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.929161][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.929205][ T5727] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.935661][ T5725] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   38.940541][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   38.941285][ T5725] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   38.945792][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   38.946209][ T5725] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   38.950897][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   38.951717][   T79] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.955934][   T79] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.960500][   T79] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.962702][   T79] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.974975][ T5725] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   38.979321][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.037121][ T5726] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   39.039921][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.049929][ T5726] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   39.052017][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.054843][ T5726] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   39.057919][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.060181][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.060373][ T5726] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   39.063226][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.100109][ T5724] 8021q: adding VLAN 0 to HW filter on device team0
[   39.106000][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.108478][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.108571][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.119857][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.119904][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.141954][ T5727] 8021q: adding VLAN 0 to HW filter on device team0
[   39.157130][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.157183][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.167363][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.169561][   T79] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.169607][   T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.202375][ T5725] 8021q: adding VLAN 0 to HW filter on device team0
[   39.230797][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.230943][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.237632][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.253482][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.253566][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.271328][ T5726] 8021q: adding VLAN 0 to HW filter on device team0
[   39.288490][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.288579][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.296707][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.296790][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.368199][ T5726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   39.514650][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.550202][ T5724] veth0_vlan: entered promiscuous mode
[   39.557888][ T5724] veth1_vlan: entered promiscuous mode
[   39.566330][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.577754][ T5741] Bluetooth: hci3: command tx timeout
[   39.577866][ T5741] Bluetooth: hci0: command tx timeout
[   39.578660][ T5741] Bluetooth: hci2: command tx timeout
[   39.578820][ T5741] Bluetooth: hci1: command tx timeout
[   39.584840][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.593986][ T5724] veth0_macvtap: entered promiscuous mode
[   39.600591][ T5724] veth1_macvtap: entered promiscuous mode
[   39.637790][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.651148][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.663632][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.665383][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.666529][ T5727] veth0_vlan: entered promiscuous mode
[   39.669722][ T5725] veth0_vlan: entered promiscuous mode
[   39.679497][ T5727] veth1_vlan: entered promiscuous mode
[   39.687415][ T5725] veth1_vlan: entered promiscuous mode
[   39.738028][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.738086][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.764789][ T5727] veth0_macvtap: entered promiscuous mode
[   39.774503][ T5726] veth0_vlan: entered promiscuous mode
[   39.778714][ T5725] veth0_macvtap: entered promiscuous mode
[   39.783438][ T5727] veth1_macvtap: entered promiscuous mode
[   39.788220][   T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.788238][   T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.791912][ T5725] veth1_macvtap: entered promiscuous mode
[   39.796876][ T5726] veth1_vlan: entered promiscuous mode
[   39.816242][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.829305][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.833230][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.838937][ T5726] veth0_macvtap: entered promiscuous mode
[   39.853485][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.854744][ T5724] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   39.857712][ T5726] veth1_macvtap: entered promiscuous mode
[   39.882227][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.890280][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.935570][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.935687][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.935858][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.936046][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.936122][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.936134][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.968178][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.968192][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.995804][   T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.995823][   T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.045867][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.045887][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.063084][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.063103][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.093761][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.093775][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.125672][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.125699][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.125716][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.125953][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.125972][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.125989][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.126007][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.126024][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.126041][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.126058][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.126076][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.172177][ T5885] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns
[   40.172335][ T5885] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer.
[   40.234586][ T5894] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   40.303666][ T5904] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A08:00/device:00: unknown uevent action string
[   40.303739][ T5904] acpi device:00: uevent: failed to send synthetic uevent: -22
[   40.375051][ T5903] Zero length message leads to an empty skb
[   40.556700][ T5910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'.
[   40.995278][ T5820] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   41.050654][ T5924] ovs-dp0: entered promiscuous mode
[   41.084904][ T5926] FAULT_INJECTION: forcing a failure.
[   41.084904][ T5926] name failslab, interval 1, probability 0, space 0, times 1
[   41.084928][ T5926] CPU: 2 UID: 0 PID: 5926 Comm: syz.1.14 Not tainted syzkaller #0 PREEMPT(full) 
[   41.084944][ T5926] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   41.084952][ T5926] Call Trace:
[   41.084957][ T5926]  <TASK>
[   41.084962][ T5926]  dump_stack_lvl+0x100/0x190
[   41.084989][ T5926]  should_fail_ex.cold+0x5/0xa
[   41.085010][ T5926]  should_failslab+0xc2/0x120
[   41.085030][ T5926]  kmem_cache_alloc_noprof+0x92/0x6a0
[   41.085047][ T5926]  ? __kernfs_new_node+0xd2/0xa10
[   41.085065][ T5926]  __kernfs_new_node+0xd2/0xa10
[   41.085078][ T5926]  ? kernfs_add_one+0x611/0xaa0
[   41.085093][ T5926]  ? __pfx___kernfs_new_node+0x10/0x10
[   41.085127][ T5926]  ? lock_acquire+0x1d1/0x380
[   41.085143][ T5926]  ? kernfs_root+0x23/0x2a0
[   41.085164][ T5926]  ? find_held_lock+0x2b/0x80
[   41.085192][ T5926]  ? kernfs_root+0xee/0x2a0
[   41.085211][ T5926]  ? kernfs_root+0xee/0x2a0
[   41.085237][ T5926]  kernfs_new_node+0x117/0x150
[   41.085255][ T5926]  __kernfs_create_file+0x53/0x350
[   41.085275][ T5926]  sysfs_add_file_mode_ns+0x207/0x3c0
[   41.085301][ T5926]  sysfs_create_file_ns+0x145/0x1e0
[   41.085320][ T5926]  ? rcu_is_watching+0x13/0xc0
[   41.085341][ T5926]  ? __pfx_sysfs_create_file_ns+0x10/0x10
[   41.085363][ T5926]  ? __pfx___up_read+0x10/0x10
[   41.085385][ T5926]  ? acpi_device_notify+0x464/0x500
[   41.085411][ T5926]  ? kobject_put+0xb9/0x640
[   41.085438][ T5926]  device_create_file+0xf2/0x1d0
[   41.085459][ T5926]  device_add+0x2cb/0x1970
[   41.085488][ T5926]  ? __pfx_device_add+0x10/0x10
[   41.085512][ T5926]  ? kfree_const+0x5a/0x70
[   41.085527][ T5926]  ? kfree+0x1e5/0x6d0
[   41.085551][ T5926]  device_create_groups_vargs+0x1f8/0x270
[   41.085582][ T5926]  device_create+0xed/0x130
[   41.085610][ T5926]  ? __pfx_device_create+0x10/0x10
[   41.085634][ T5926]  ? lockdep_init_map_type+0x5c/0x250
[   41.085653][ T5926]  ? timer_init_key+0x150/0x310
[   41.085679][ T5926]  ? ieee80211_roc_setup+0x136/0x270
[   41.085704][ T5926]  ? ieee80211_alloc_hw_nm+0x1a2a/0x2310
[   41.085729][ T5926]  mac80211_hwsim_new_radio+0x37c/0x6510
[   41.085766][ T5926]  ? __asan_memset+0x23/0x50
[   41.085785][ T5926]  ? __nla_validate_parse+0x1e7/0x28b0
[   41.085806][ T5926]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   41.085838][ T5926]  hwsim_new_radio_nl+0xc6b/0x13f0
[   41.085864][ T5926]  ? trace_kmalloc+0xeb/0x110
[   41.085888][ T5926]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   41.085918][ T5926]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0
[   41.085947][ T5926]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[   41.085975][ T5926]  genl_family_rcv_msg_doit+0x214/0x300
[   41.086005][ T5926]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   41.086037][ T5926]  ? bpf_lsm_capable+0x9/0x10
[   41.086049][ T5926]  ? security_capable+0x80/0x260
[   41.086064][ T5926]  ? ns_capable+0xd2/0xf0
[   41.086080][ T5926]  genl_rcv_msg+0x560/0x800
[   41.086102][ T5926]  ? __pfx_genl_rcv_msg+0x10/0x10
[   41.086122][ T5926]  ? __lock_acquire+0x5c0/0x1f40
[   41.086137][ T5926]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   41.086165][ T5926]  netlink_rcv_skb+0x159/0x420
[   41.086190][ T5926]  ? __pfx_genl_rcv_msg+0x10/0x10
[   41.086211][ T5926]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   41.086238][ T5926]  ? netlink_deliver_tap+0x1ae/0xcc0
[   41.086259][ T5926]  genl_rcv+0x28/0x40
[   41.086276][ T5926]  netlink_unicast+0x585/0x850
[   41.086298][ T5926]  ? __pfx_netlink_unicast+0x10/0x10
[   41.086322][ T5926]  netlink_sendmsg+0x8b0/0xda0
[   41.086343][ T5926]  ? __pfx_netlink_sendmsg+0x10/0x10
[   41.086363][ T5926]  ? selinux_socket_sendmsg+0x198/0x2f0
[   41.086383][ T5926]  ____sys_sendmsg+0xa4d/0xbe0
[   41.086397][ T5926]  ? __pfx_netlink_sendmsg+0x10/0x10
[   41.086416][ T5926]  ? __pfx_____sys_sendmsg+0x10/0x10
[   41.086440][ T5926]  ___sys_sendmsg+0x190/0x1e0
[   41.086458][ T5926]  ? __pfx____sys_sendmsg+0x10/0x10
[   41.086473][ T5926]  ? futex_wait+0x11e/0x370
[   41.086498][ T5926]  ? find_held_lock+0x2b/0x80
[   41.086534][ T5926]  __sys_sendmsg+0x160/0x210
[   41.086555][ T5926]  ? __pfx___sys_sendmsg+0x10/0x10
[   41.086586][ T5926]  do_syscall_64+0x123/0x790
[   41.086604][ T5926]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.086622][ T5926] RIP: 0033:0x7fdfbc79e159
[   41.086638][ T5926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   41.086653][ T5926] RSP: 002b:00007fdfbd5da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   41.086672][ T5926] RAX: ffffffffffffffda RBX: 00007fdfbca25fa0 RCX: 00007fdfbc79e159
[   41.086683][ T5926] RDX: 0000000004000014 RSI: 0000200000000100 RDI: 0000000000000005
[   41.086693][ T5926] RBP: 00007fdfbc83506b R08: 0000000000000000 R09: 0000000000000000
[   41.086701][ T5926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   41.086709][ T5926] R13: 00007fdfbca26038 R14: 00007fdfbca25fa0 R15: 00007ffc01f77c68
[   41.086728][ T5926]  </TASK>
[   41.115897][ T5930] overlayfs: failed to resolve './file1': -2
[   41.116716][ T5929] overlayfs: failed to resolve './file1': -2
[   41.203921][ T5820] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[   41.237559][ T5943] bond1: (slave bond_slave_0): Device is not our slave
[   41.237572][ T5943] bond1: option active_slave: invalid value (bond_slave_0)
[   41.263441][ T5943] bond1 (unregistering): Released all slaves
[   41.305369][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[   41.305398][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   41.305417][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[   41.305438][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[   41.307740][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.307763][ T5820] usb 5-1: Product: syz
[   41.307776][ T5820] usb 5-1: Manufacturer: syz
[   41.307789][ T5820] usb 5-1: SerialNumber: syz
[   41.315467][ T5820] usb 5-1: config 0 descriptor??
[   41.402698][ T5941] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   41.404512][ T5941] netlink: 'syz.1.19': attribute type 1 has an invalid length.
[   41.404945][ T5940] iommufd_mock iommufd_mock1: Adding to iommu group 10
[   41.473782][ T5965] syzkaller0: entered promiscuous mode
[   41.473796][ T5965] syzkaller0: entered allmulticast mode
[   41.478495][ T5965] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[   41.481969][ T5965] netlink: 36 bytes leftover after parsing attributes in process `syz.2.22'.
[   41.522908][ T5820] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[   41.655995][ T5729] Bluetooth: hci1: command tx timeout
[   41.656025][ T5729] Bluetooth: hci2: command tx timeout
[   41.656044][ T5729] Bluetooth: hci0: command tx timeout
[   41.656063][ T5729] Bluetooth: hci3: command tx timeout
[   41.721136][ T5917] usb 5-1: Couldn't submit interrupt_out_urb -90
[   41.724069][ T5917] netlink: 'syz.0.11': attribute type 2 has an invalid length.
[   42.050166][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'.
[   42.051410][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'.
[   42.051972][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'.
[   42.144316][ T5980] netlink: 'syz.1.26': attribute type 1 has an invalid length.
[   42.257632][ T5980] FAULT_INJECTION: forcing a failure.
[   42.257632][ T5980] name failslab, interval 1, probability 0, space 0, times 0
[   42.257661][ T5980] CPU: 2 UID: 0 PID: 5980 Comm: syz.1.26 Not tainted syzkaller #0 PREEMPT(full) 
[   42.257679][ T5980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   42.257690][ T5980] Call Trace:
[   42.257696][ T5980]  <TASK>
[   42.257702][ T5980]  dump_stack_lvl+0x100/0x190
[   42.257735][ T5980]  should_fail_ex.cold+0x5/0xa
[   42.257763][ T5980]  should_failslab+0xc2/0x120
[   42.257790][ T5980]  kmem_cache_alloc_noprof+0x92/0x6a0
[   42.257811][ T5980]  ? security_file_alloc+0x34/0x2c0
[   42.257845][ T5980]  security_file_alloc+0x34/0x2c0
[   42.257867][ T5980]  init_file+0x95/0x480
[   42.257890][ T5980]  alloc_empty_file+0x79/0x1c0
[   42.257914][ T5980]  alloc_file_pseudo+0x183/0x290
[   42.257941][ T5980]  ? __pfx_alloc_file_pseudo+0x10/0x10
[   42.257968][ T5980]  ? alloc_fd+0x471/0x7a0
[   42.257994][ T5980]  sock_alloc_file+0x50/0x210
[   42.258018][ T5980]  __sys_socket+0x1c0/0x260
[   42.258040][ T5980]  ? __pfx___sys_socket+0x10/0x10
[   42.258066][ T5980]  __x64_sys_socket+0x72/0xb0
[   42.258082][   T43] kauditd_printk_skb: 95 callbacks suppressed
[   42.258086][ T5980]  ? lockdep_hardirqs_on+0x7d/0x110
[   42.258092][   T43] audit: type=1400 audit(1790966898.760:266): avc:  denied  { read write } for  pid=5984 comm="syz.2.27" name="video2" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   42.258106][ T5980]  do_syscall_64+0x123/0x790
[   42.258126][ T5980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.258144][ T5980] RIP: 0033:0x7fdfbc79f9c7
[   42.258158][ T5980] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   42.258172][ T5980] RSP: 002b:00007fdfbd5d8f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[   42.258189][ T5980] RAX: ffffffffffffffda RBX: 00007fdfbca25fa0 RCX: 00007fdfbc79f9c7
[   42.258200][ T5980] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[   42.258210][ T5980] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[   42.258220][ T5980] R10: 0000200000000040 R11: 0000000000000286 R12: 0000000000000000
[   42.258231][ T5980] R13: 00007fdfbca26038 R14: 00007fdfbca25fa0 R15: 00007ffc01f77c68
[   42.258256][ T5980]  </TASK>
[   42.258397][   T43] audit: type=1400 audit(1790966898.760:267): avc:  denied  { open } for  pid=5984 comm="syz.2.27" path="/dev/video2" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   42.259918][ T5838] usb 5-1: USB disconnect, device number 2
[   42.292587][ T5985] bridge0: entered promiscuous mode
[   42.292603][ T5985] bridge0: entered allmulticast mode
[   42.305294][   T43] audit: type=1400 audit(1790966898.800:268): avc:  denied  { map } for  pid=5984 comm="syz.2.27" path="/dev/video2" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   42.387310][   T43] audit: type=1400 audit(1790966898.890:269): avc:  denied  { write } for  pid=5997 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   42.388233][   T43] audit: type=1400 audit(1790966898.890:270): avc:  denied  { append } for  pid=5997 comm="syz.2.30" name="comedi3" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   42.412814][   T43] audit: type=1400 audit(1790966898.910:271): avc:  denied  { write } for  pid=5996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   42.437599][   T43] audit: type=1400 audit(1790966898.940:272): avc:  denied  { create } for  pid=6001 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   42.439729][   T43] audit: type=1400 audit(1790966898.940:273): avc:  denied  { search } for  pid=6000 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   42.470144][   T43] audit: type=1400 audit(1790966898.970:274): avc:  denied  { ioctl } for  pid=6004 comm="syz.0.32" path="socket:[11322]" dev="sockfs" ino=11322 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   42.483685][   T43] audit: type=1400 audit(1790966898.980:275): avc:  denied  { write } for  pid=6007 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   42.667829][ T6018] netlink: 44 bytes leftover after parsing attributes in process `syz.0.34'.
[   42.712616][ T6023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6023 comm=syz.1.36
[   42.712698][ T6023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6023 comm=syz.1.36
[   42.712743][ T6023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6023 comm=syz.1.36
[   42.712790][ T6023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6023 comm=syz.1.36
[   42.712834][ T6023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6023 comm=syz.1.36
[   42.712878][ T6023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6023 comm=syz.1.36
[   42.712921][ T6023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6023 comm=syz.1.36
[   42.712965][ T6023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6023 comm=syz.1.36
[   42.713009][ T6023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6023 comm=syz.1.36
[   42.713053][ T6023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6023 comm=syz.1.36
[   42.801128][ T6028] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[   42.803875][ T6029] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[   42.838085][ T6034] netlink: 34 bytes leftover after parsing attributes in process `syz.1.38'.
[   43.346687][ T6068] netlink: 36 bytes leftover after parsing attributes in process `syz.2.48'.
[   43.377163][ T6070] netlink: 'syz.2.49': attribute type 1 has an invalid length.
[   43.377285][ T6071] netlink: 'syz.2.49': attribute type 1 has an invalid length.
[   43.402048][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'.
[   43.404781][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'.
[   43.438641][ T6075] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   43.546685][ T6080] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   43.558095][ T5741] Bluetooth: hci1: Unknown advertising packet type: 0x78
[   43.558113][ T5741] Bluetooth: hci1: Malformed LE Event: 0x0d
[   43.735986][ T5741] Bluetooth: hci3: command tx timeout
[   43.736022][ T5741] Bluetooth: hci0: command tx timeout
[   43.736040][ T5741] Bluetooth: hci2: command tx timeout
[   43.736057][ T5741] Bluetooth: hci1: command tx timeout
[   43.961902][ T6105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   44.015705][ T6109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   44.017975][ T6105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   44.450562][ T6118] comedi: valid board names for 8255 driver are:
[   44.450573][ T6118]  8255
[   44.450577][ T6118] comedi: valid board names for vmk80xx driver are:
[   44.450581][ T6118]  vmk80xx
[   44.450585][ T6118] comedi: valid board names for usbduxsigma driver are:
[   44.450589][ T6118]  usbduxsigma
[   44.450593][ T6118] comedi: valid board names for usbduxfast driver are:
[   44.450597][ T6118]  usbduxfast
[   44.450601][ T6118] comedi: valid board names for usbdux driver are:
[   44.450605][ T6118]  usbdux
[   44.450608][ T6118] comedi: valid board names for ni6501 driver are:
[   44.450612][ T6118]  ni6501
[   44.450615][ T6118] comedi: valid board names for dt9812 driver are:
[   44.450619][ T6118]  dt9812
[   44.450623][ T6118] comedi: valid board names for ni_labpc_cs driver are:
[   44.450627][ T6118]  ni_labpc_cs
[   44.450630][ T6118] comedi: valid board names for ni_daq_700 driver are:
[   44.450634][ T6118]  ni_daq_700
[   44.450638][ T6118] comedi: valid board names for labpc_pci driver are:
[   44.450642][ T6118]  labpc_pci
[   44.450645][ T6118] comedi: valid board names for adl_pci9118 driver are:
[   44.450649][ T6118]  pci9118dg
[   44.450653][ T6118]  pci9118hg
[   44.450656][ T6118]  pci9118hr
[   44.450660][ T6118] comedi: valid board names for 8255_pci driver are:
[   44.450664][ T6118]  8255_pci
[   44.450667][ T6118] comedi: valid board names for s526 driver are:
[   44.450671][ T6118]  s526
[   44.450674][ T6118] comedi: valid board names for multiq3 driver are:
[   44.450678][ T6118]  multiq3
[   44.450682][ T6118] comedi: valid board names for pcmuio driver are:
[   44.450686][ T6118]  pcmuio48
[   44.450689][ T6118]  pcmuio96
[   44.450692][ T6118] comedi: valid board names for pcmmio driver are:
[   44.450696][ T6118]  pcmmio
[   44.450700][ T6118] comedi: valid board names for pcmda12 driver are:
[   44.450704][ T6118]  pcmda12
[   44.450707][ T6118] comedi: valid board names for pcmad driver are:
[   44.450711][ T6118]  pcmad12
[   44.450714][ T6118]  pcmad16
[   44.450718][ T6118] comedi: valid board names for ni_labpc driver are:
[   44.450722][ T6118]  lab-pc-1200
[   44.450725][ T6118]  lab-pc-1200ai
[   44.450729][ T6118]  lab-pc+
[   44.450732][ T6118] comedi: valid board names for atmio16 driver are:
[   44.450736][ T6118]  atmio16
[   44.450739][ T6118]  atmio16d
[   44.450743][ T6118] comedi: valid board names for ni_at_ao driver are:
[   44.450747][ T6118]  at-ao-6
[   44.450750][ T6118]  at-ao-10
[   44.450753][ T6118] comedi: valid board names for ni_at_a2150 driver are:
[   44.450758][ T6118]  ni_at_a2150
[   44.450761][ T6118] comedi: valid board names for adq12b driver are:
[   44.450765][ T6118]  adq12b
[   44.450768][ T6118] comedi: valid board names for mpc624 driver are:
[   44.450772][ T6118]  mpc624
[   44.450776][ T6118] comedi: valid board names for c6xdigio driver are:
[   44.450780][ T6118]  c6xdigio
[   44.450783][ T6118] comedi: valid board names for aio_iiro_16 driver are:
[   44.450789][ T6118]  aio_iiro_16
[   44.450794][ T6118] comedi: valid board names for aio_aio12_8 driver are:
[   44.450800][ T6118]  aio_aio12_8
[   44.450806][ T6118]  aio_ai12_8
[   44.450811][ T6118]  aio_ao12_4
[   44.450816][ T6118] comedi: valid board names for fl512 driver are:
[   44.450822][ T6118]  fl512
[   44.450827][ T6118] comedi: valid board names for dmm32at driver are:
[   44.450833][ T6118]  dmm32at
[   44.450838][ T6118] comedi: valid board names for dt282x driver are:
[   44.450846][ T6118]  dt2821
[   44.450851][ T6118]  dt2821-f
[   44.450862][ T6118]  dt2821-g
[   44.450867][ T6118]  dt2823
[   44.450874][ T6118]  dt2824-pgh
[   44.450879][ T6118]  dt2824-pgl
[   44.450886][ T6118]  dt2825
[   44.450891][ T6118]  dt2827
[   44.450895][ T6118]  dt2828
[   44.450900][ T6118]  dt2829
[   44.450905][ T6118]  dt21-ez
[   44.450911][ T6118]  dt23-ez
[   44.450917][ T6118]  dt24-ez
[   44.450922][ T6118]  dt24-ez-pgl
[   44.450929][ T6118] comedi: valid board names for dt2817 driver are:
[   44.450935][ T6118]  dt2817
[   44.450940][ T6118] comedi: valid board names for dt2815 driver are:
[   44.450946][ T6118]  dt2815
[   44.450951][ T6118] comedi: valid board names for dt2814 driver are:
[   44.450957][ T6118]  dt2814
[   44.450964][ T6118] comedi: valid board names for dt2811 driver are:
[   44.450971][ T6118]  dt2811-pgh
[   44.450976][ T6118]  dt2811-pgl
[   44.450981][ T6118] comedi: valid board names for dt2801 driver are:
[   44.450987][ T6118]  dt2801
[   44.450992][ T6118] comedi: valid board names for das6402 driver are:
[   44.450997][ T6118]  das6402-12
[   44.451563][ T6118]  das6402-16
[   44.451569][ T6118] comedi: valid board names for das1800 driver are:
[   44.451574][ T6118]  das-1701st
[   44.451577][ T6118]  das-1701st-da
[   44.451580][ T6118]  das-1702st
[   44.451584][ T6118]  das-1702st-da
[   44.451587][ T6118]  das-1702hr
[   44.451590][ T6118]  das-1702hr-da
[   44.451594][ T6118]  das-1701ao
[   44.451597][ T6118]  das-1702ao
[   44.451600][ T6118]  das-1801st
[   44.451604][ T6118]  das-1801st-da
[   44.451607][ T6118]  das-1802st
[   44.451610][ T6118]  das-1802st-da
[   44.451614][ T6118]  das-1802hr
[   44.451617][ T6118]  das-1802hr-da
[   44.451621][ T6118]  das-1801hc
[   44.451624][ T6118]  das-1802hc
[   44.451627][ T6118]  das-1801ao
[   44.451630][ T6118]  das-1802ao
[   44.451634][ T6118] comedi: valid board names for das800 driver are:
[   44.451638][ T6118]  das-800
[   44.451641][ T6118]  cio-das800
[   44.451645][ T6118]  das-801
[   44.451648][ T6118]  cio-das801
[   44.451651][ T6118]  das-802
[   44.451654][ T6118]  cio-das802
[   44.451657][ T6118]  cio-das802/16
[   44.451661][ T6118] comedi: valid board names for isa-das08 driver are:
[   44.451665][ T6118]  isa-das08
[   44.451669][ T6118]  das08-pgm
[   44.451672][ T6118]  das08-pgh
[   44.451675][ T6118]  das08-pgl
[   44.451678][ T6118]  das08-aoh
[   44.451682][ T6118]  das08-aol
[   44.451685][ T6118]  das08-aom
[   44.451688][ T6118]  das08/jr-ao
[   44.451692][ T6118]  das08jr-16-ao
[   44.451695][ T6118]  pc104-das08
[   44.451698][ T6118]  das08jr/16
[   44.451702][ T6118] comedi: valid board names for das16m1 driver are:
[   44.451706][ T6118]  das16m1
[   44.451710][ T6118] comedi: valid board names for dac02 driver are:
[   44.451714][ T6118]  dac02
[   44.451717][ T6118] comedi: valid board names for rti802 driver are:
[   44.451721][ T6118]  rti802
[   44.451724][ T6118] comedi: valid board names for rti800 driver are:
[   44.451728][ T6118]  rti800
[   44.451732][ T6118]  rti815
[   44.451735][ T6118] comedi: valid board names for pcm3724 driver are:
[   44.451739][ T6118]  pcm3724
[   44.451742][ T6118] comedi: valid board names for pcl818 driver are:
[   44.451746][ T6118]  pcl818l
[   44.451750][ T6118]  pcl818h
[   44.451753][ T6118]  pcl818hd
[   44.451756][ T6118]  pcl818hg
[   44.451759][ T6118]  pcl818
[   44.451762][ T6118]  pcl718
[   44.451766][ T6118]  pcm3718
[   44.451769][ T6118] comedi: valid board names for pcl816 driver are:
[   44.451773][ T6118]  pcl816
[   44.451776][ T6118]  pcl814b
[   44.451779][ T6118] comedi: valid board names for pcl812 driver are:
[   44.451783][ T6118]  pcl812
[   44.451787][ T6118]  pcl812pg
[   44.451790][ T6118]  acl8112pg
[   44.451793][ T6118]  acl8112dg
[   44.451796][ T6118]  acl8112hg
[   44.451800][ T6118]  a821pgl
[   44.451803][ T6118]  a821pglnda
[   44.451806][ T6118]  a821pgh
[   44.451809][ T6118]  a822pgl
[   44.451813][ T6118]  a822pgh
[   44.451816][ T6118]  a823pgl
[   44.451819][ T6118]  a823pgh
[   44.451822][ T6118]  pcl813
[   44.451825][ T6118]  pcl813b
[   44.451828][ T6118]  acl8113
[   44.451832][ T6118]  iso813
[   44.451835][ T6118]  acl8216
[   44.451838][ T6118]  a826pg
[   44.451841][ T6118] comedi: valid board names for pcl730 driver are:
[   44.451845][ T6118]  pcl730
[   44.451848][ T6118]  iso730
[   44.451852][ T6118]  acl7130
[   44.451855][ T6118]  pcm3730
[   44.451865][ T6118]  pcl725
[   44.451868][ T6118]  p8r8dio
[   44.451871][ T6118]  acl7225b
[   44.451874][ T6118]  p16r16dio
[   44.451878][ T6118]  pcl733
[   44.451881][ T6118]  pcl734
[   44.451884][ T6118]  opmm-1616-xt
[   44.451888][ T6118]  pearl-mm-p
[   44.451891][ T6118]  ir104-pbf
[   44.451894][ T6118] comedi: valid board names for pcl726 driver are:
[   44.451899][ T6118]  pcl726
[   44.451902][ T6118]  pcl727
[   44.451905][ T6118]  pcl728
[   44.451908][ T6118]  acl6126
[   44.451911][ T6118]  acl6128
[   44.451915][ T6118] comedi: valid board names for pcl724 driver are:
[   44.451919][ T6118]  pcl724
[   44.451922][ T6118]  pcl722
[   44.451925][ T6118]  pcl731
[   44.451928][ T6118]  acl7122
[   44.451931][ T6118]  acl7124
[   44.451935][ T6118]  pet48dio
[   44.451938][ T6118]  pcmio48
[   44.451941][ T6118]  onyx-mm-dio
[   44.451945][ T6118] comedi: valid board names for pcl711 driver are:
[   44.451949][ T6118]  pcl711
[   44.451952][ T6118]  pcl711b
[   44.451956][ T6118]  acl8112hg
[   44.451961][ T6118]  acl8112dg
[   44.451966][ T6118] comedi: valid board names for amplc_pc263 driver are:
[   44.451973][ T6118]  pc263
[   44.451977][ T6118] comedi: valid board names for amplc_pc236 driver are:
[   44.451984][ T6118]  pc36at
[   44.451988][ T6118] comedi: valid board names for amplc_dio200 driver are:
[   44.451995][ T6118]  pc212e
[   44.451999][ T6118]  pc214e
[   44.452004][ T6118]  pc215e
[   44.452009][ T6118]  pc218e
[   44.452015][ T6118]  pc272e
[   44.452021][ T6118] comedi: valid board names for comedi_parport driver are:
[   44.452028][ T6118]  comedi_parport
[   44.452033][ T6118] comedi: valid board names for comedi_test driver are:
[   44.452041][ T6118]  comedi_test
[   44.452047][ T6118] comedi: valid board names for comedi_bond driver are:
[   44.452053][ T6118]  comedi_bond
[   44.487021][ T6124] syz.3.62 uses obsolete (PF_INET,SOCK_PACKET)
[   44.535072][ T6124] syzkaller1: entered promiscuous mode
[   44.535085][ T6124] syzkaller1: entered allmulticast mode
[   44.679684][ T6144] netlink: 'syz.0.67': attribute type 1 has an invalid length.
[   44.724702][ T6155] syzkaller0: entered promiscuous mode
[   44.724721][ T6155] syzkaller0: entered allmulticast mode
[   44.733841][ T6161] tipc: Invalid UDP bearer configuration
[   44.733863][ T6161] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   44.814226][ T6144] FAULT_INJECTION: forcing a failure.
[   44.814226][ T6144] name fail_futex, interval 1, probability 0, space 0, times 1
[   44.814250][ T6144] CPU: 0 UID: 0 PID: 6144 Comm: syz.0.67 Not tainted syzkaller #0 PREEMPT(full) 
[   44.814265][ T6144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   44.814272][ T6144] Call Trace:
[   44.814277][ T6144]  <TASK>
[   44.814283][ T6144]  dump_stack_lvl+0x100/0x190
[   44.814307][ T6144]  should_fail_ex.cold+0x5/0xa
[   44.814325][ T6144]  get_futex_key+0x1d0/0x14f0
[   44.814344][ T6144]  ? __pfx_get_futex_key+0x10/0x10
[   44.814362][ T6144]  ? wakeup_preempt_fair+0x5c3/0xdc0
[   44.814383][ T6144]  futex_wait_setup+0x91/0x540
[   44.814401][ T6144]  __futex_wait+0x19f/0x300
[   44.814416][ T6144]  ? __pfx___futex_wait+0x10/0x10
[   44.814429][ T6144]  ? __pfx_try_to_wake_up+0x10/0x10
[   44.814444][ T6144]  ? futex_hash+0x311/0x400
[   44.814463][ T6144]  ? __pfx_futex_wake_mark+0x10/0x10
[   44.814479][ T6144]  ? find_held_lock+0x2b/0x80
[   44.814499][ T6144]  ? futex_wake+0x4ea/0x5e0
[   44.814516][ T6144]  futex_wait+0xe6/0x370
[   44.814553][ T6144]  ? __pfx_futex_wait+0x10/0x10
[   44.814571][ T6144]  ? fdget+0x18b/0x210
[   44.814590][ T6144]  ? __sys_sendto+0x2a8/0x4e0
[   44.814611][ T6144]  do_futex+0x265/0x440
[   44.814631][ T6144]  ? __pfx_do_futex+0x10/0x10
[   44.814655][ T6144]  __x64_sys_futex+0x34f/0x4d0
[   44.814677][ T6144]  ? __pfx___x64_sys_futex+0x10/0x10
[   44.814702][ T6144]  do_syscall_64+0x123/0x790
[   44.814717][ T6144]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.814730][ T6144] RIP: 0033:0x7f093819e159
[   44.814742][ T6144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   44.814754][ T6144] RSP: 002b:00007f093902f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   44.814767][ T6144] RAX: ffffffffffffffda RBX: 00007f0938425fa8 RCX: 00007f093819e159
[   44.814776][ T6144] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0938425fa8
[   44.814783][ T6144] RBP: 00007f0938425fa0 R08: 0000000000000000 R09: 0000000000000000
[   44.814791][ T6144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   44.814798][ T6144] R13: 00007f0938426038 R14: 00007fff78647530 R15: 00007fff78647618
[   44.814815][ T6144]  </TASK>
[   44.888996][ T6179] lo: entered promiscuous mode
[   44.891601][ T6179] bond0: entered promiscuous mode
[   44.892135][ T6179] dummy0: entered promiscuous mode
[   44.892417][ T6179] eql: entered promiscuous mode
[   44.892570][ T6179] ifb0: entered promiscuous mode
[   44.892852][ T6179] ifb1: entered promiscuous mode
[   44.897331][ T6179] e1000 0000:00:06.0 eth0: entered promiscuous mode
[   44.904847][ T6179] e1000e 0000:00:02.0 eth1: entered promiscuous mode
[   44.909225][ T6179] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode
[   44.909604][ T6179] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode
[   44.910237][ T6179] hwsim0: entered promiscuous mode
[   44.910748][ T6179] ieee802154 phy0 wpan0: entered promiscuous mode
[   44.910938][ T6179] ieee802154 phy1 wpan1: entered promiscuous mode
[   44.911098][ T6179] teql0: entered promiscuous mode
[   44.911293][ T6179] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[   45.061365][ T6193] sctp: [Deprecated]: syz.0.79 (pid 6193) Use of int in max_burst socket option.
[   45.061365][ T6193] Use struct sctp_assoc_value instead
[   45.285236][   T30] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   45.447247][   T30] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[   45.448199][   T30] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   45.449113][   T30] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   45.452011][   T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.452032][   T30] usb 6-1: Product: syz
[   45.452045][   T30] usb 6-1: Manufacturer: syz
[   45.452057][   T30] usb 6-1: SerialNumber: syz
[   45.482851][   T30] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected
[   45.493450][   T30] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[   45.503759][   T30] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[   45.815329][ T5741] Bluetooth: hci2: command tx timeout
[   45.815360][ T5741] Bluetooth: hci0: command tx timeout
[   45.815379][ T5741] Bluetooth: hci3: command tx timeout
[   45.815417][ T5729] Bluetooth: hci1: command tx timeout
[   45.936292][ T6207] __nla_validate_parse: 1 callbacks suppressed
[   45.936304][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'.
[   45.936321][ T6207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.81'.
[   45.939419][ T6207] geneve2: entered promiscuous mode
[   45.939432][ T6207] geneve2: entered allmulticast mode
[   46.086442][ T6225] netlink: 72 bytes leftover after parsing attributes in process `syz.0.87'.
[   46.087014][ T6225] netlink: 'syz.0.87': attribute type 7 has an invalid length.
[   46.142817][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'.
[   46.150858][ T6204] ip6erspan0: entered promiscuous mode
[   46.228078][ T6231] netlink: 'syz.0.89': attribute type 21 has an invalid length.
[   46.615309][ T1762] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   46.765717][ T1762] usb 7-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01
[   46.766573][ T1762] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   46.768677][ T1762] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.768694][ T1762] usb 7-1: Product: syz
[   46.768704][ T1762] usb 7-1: Manufacturer: syz
[   46.768715][ T1762] usb 7-1: SerialNumber: syz
[   46.774622][ T1762] etas_es58x 7-1:1.0: Starting syz syz (Serial Number syz)
[   46.802849][ T6243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.803208][ T6243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.804824][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'.
[   46.813093][ T6244] ip6erspan0: entered promiscuous mode
[   46.931823][ T6251] blkio.reset_stats is deprecated
[   47.003247][ T6255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.94'.
[   47.003262][ T6255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.94'.
[   47.003268][ T6255] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22)
[   47.003276][ T6255] iwpm_hello_cb: Unable to parse nlmsg
[   47.071256][ T6241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.071523][ T6241] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.075704][   T10] usb 7-1: USB disconnect, device number 2
[   47.312043][   T43] kauditd_printk_skb: 96 callbacks suppressed
[   47.312060][   T43] audit: type=1400 audit(1790966903.810:372): avc:  denied  { search } for  pid=6264 comm="syz.0.97" name="/" dev="configfs" ino=1038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   47.312093][   T43] audit: type=1400 audit(1790966903.810:373): avc:  denied  { search } for  pid=6264 comm="syz.0.97" name="nullb" dev="configfs" ino=6231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   47.313362][   T43] audit: type=1400 audit(1790966903.810:374): avc:  denied  { write search } for  pid=6264 comm="syz.0.97" name="nullb" dev="configfs" ino=6231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   47.314048][   T43] audit: type=1400 audit(1790966903.810:375): avc:  denied  { add_name } for  pid=6264 comm="syz.0.97" name="nullb1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   47.314483][   T43] audit: type=1400 audit(1790966903.810:376): avc:  denied  { create } for  pid=6264 comm="syz.0.97" name="nullb1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[   47.320117][   T43] audit: type=1400 audit(1790966903.820:377): avc:  denied  { search } for  pid=6264 comm="syz.0.97" name="/" dev="configfs" ino=1038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   47.321882][   T43] audit: type=1400 audit(1790966903.820:378): avc:  denied  { search } for  pid=6264 comm="syz.0.97" name="nullb" dev="configfs" ino=6231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   47.321908][   T43] audit: type=1400 audit(1790966903.820:379): avc:  denied  { search } for  pid=6264 comm="syz.0.97" name="nullb1" dev="configfs" ino=14378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   47.321927][   T43] audit: type=1400 audit(1790966903.820:380): avc:  denied  { read write } for  pid=6264 comm="syz.0.97" name="size" dev="configfs" ino=14380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[   47.321993][   T43] audit: type=1400 audit(1790966903.820:381): avc:  denied  { open } for  pid=6264 comm="syz.0.97" path="/25/config/nullb/nullb1/size" dev="configfs" ino=14380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[   47.327875][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'.
[   47.327895][ T6265] nbd: must specify an index to disconnect
[   47.855827][ T6293] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   47.855987][ T6293] block device autoloading is deprecated and will be removed.
[   47.860427][ T6292] md: md2 stopped.
[   47.870234][ T6292] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size.
[   47.935890][ T6297] xt_NETMAP: bad rangesize 37.
[   47.936741][ T6297] netlink: 180 bytes leftover after parsing attributes in process `syz.0.107'.
[   48.061830][ T6188] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110
[   48.068222][ T6188] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32
[   48.075505][ T5685] usb 6-1: USB disconnect, device number 2
[   48.119994][ T5685] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[   48.133040][ T5685] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[   48.139090][ T5685] ti_usb_3410_5052 6-1:2.0: device disconnected
[   48.146880][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.112'.
[   48.385346][   T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   48.412251][ T6333] qrtr: Invalid version 173
[   48.555480][   T10] usb 5-1: Using ep0 maxpacket: 8
[   48.556256][   T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   48.557628][   T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[   48.557649][   T10] usb 5-1: config 0 has no interface number 0
[   48.557681][   T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   48.557702][   T10] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   48.557724][   T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   48.557747][   T10] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   48.557777][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.562014][   T10] usb 5-1: config 0 descriptor??
[   48.575501][   T10] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   48.601594][ T6357] warning: `syz.2.119' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   48.844470][ T5685] usb 5-1: USB disconnect, device number 3
[   48.844660][    C0] ldusb 5-1:0.55: usb_submit_urb failed (-19)
[   49.460151][ T6385] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun!
[   49.462761][ T6385] autofs: Bad value for 'fd'
[   49.508459][ T6387] validate_nla: 1 callbacks suppressed
[   49.508471][ T6387] netlink: 'syz.1.123': attribute type 1 has an invalid length.
[   49.530253][ T6387] bond1: entered promiscuous mode
[   49.530551][ T6387] 8021q: adding VLAN 0 to HW filter on device bond1
[   49.546237][ T6387] ipvlan3: entered allmulticast mode
[   49.546256][ T6387] bond1: entered allmulticast mode
[   49.561176][ T6387] bond1: (slave bridge1): making interface the new active one
[   49.561197][ T6387] bridge1: entered promiscuous mode
[   49.561336][ T6387] bridge1: entered allmulticast mode
[   49.563643][ T6387] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   49.696395][ T6405] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.697417][ T6405] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.750188][ T6405] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   49.754793][ T6405] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   49.848672][ T6405] bond1: left promiscuous mode
[   49.848695][ T6405] bridge1: left promiscuous mode
[   49.850081][ T6405] ipvlan3: left allmulticast mode
[   49.850097][ T6405] bond1: left allmulticast mode
[   49.850108][ T6405] bridge1: left allmulticast mode
[   49.865912][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.865953][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.865980][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.866006][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.916626][ T6413] nbd0: detected capacity change from 0 to 63
[   49.924104][   T67] block nbd0: Receive control failed (result -104)
[   50.198764][ T6443] 8021q: adding VLAN 0 to HW filter on device bond1
[   50.223923][ T6443] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.227333][ T6443] bond1: (slave bond0): making interface the new active one
[   50.228198][ T6443] bond1: (slave bond0): Enslaving as an active interface with an up link
[   50.236235][ T6443] netlink: 'syz.2.138': attribute type 4 has an invalid length.
[   50.238182][ T6443] .`: renamed from bond0 (while UP)
[   50.257875][ T6443] ip6gretap0: entered promiscuous mode
[   50.453788][ T6461] batman_adv: batadv0: Adding interface: veth0
[   50.453806][ T6461] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   50.453831][ T6461] batman_adv: batadv0: Interface activated: veth0
[   50.469405][ T6461] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   50.469426][ T6461] batman_adv: batadv0: Removing interface: batadv_slave_0
[   50.471225][ T6461] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   50.471240][ T6461] batman_adv: batadv0: Removing interface: batadv_slave_1
[   50.472077][ T6461] batman_adv: batadv0: Interface deactivated: veth0
[   50.472088][ T6461] batman_adv: batadv0: Removing interface: veth0
[   50.675813][ T6469] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   50.675836][ T6470] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   50.696077][ T1762] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   50.865739][ T1762] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[   50.866621][ T1762] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   50.866635][ T1762] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[   50.866700][ T1762] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.871280][ T1762] spcp8x5 8-1:1.0: SPCP8x5 converter detected
[   50.873406][ T1762] usb 8-1: SPCP8x5 converter now attached to ttyUSB0
[   51.138624][ T5685] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[   51.199437][ T6481] 8021q: adding VLAN 0 to HW filter on device bond1
[   51.213051][ T6481] __nla_validate_parse: 18 callbacks suppressed
[   51.213063][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'.
[   51.213071][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'.
[   51.224342][ T6481] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.236130][ T6459] SPCP8x5 ttyUSB0: failed to set control lines: -110
[   51.236485][ T6459] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32)
[   51.238175][ T6481] bond1: (slave bond0): making interface the new active one
[   51.239438][ T6459] SPCP8x5 ttyUSB0: failed to set control lines: -32
[   51.239451][ T6481] bond1: (slave bond0): Enslaving as an active interface with an up link
[   51.251887][ T6481] netlink: 'syz.0.149': attribute type 4 has an invalid length.
[   51.251900][ T6481] netlink: 152 bytes leftover after parsing attributes in process `syz.0.149'.
[   51.254464][ T6481] .`: renamed from bond0 (while UP)
[   51.277069][ T6481] ip6gretap0: entered promiscuous mode
[   51.345963][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.345997][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346016][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346033][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346050][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346087][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346107][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346157][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346176][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346218][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346237][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346254][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346271][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346289][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346334][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346352][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346394][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346411][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346428][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346460][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346478][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346494][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346510][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346526][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346543][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346560][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346576][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346592][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346609][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346625][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346642][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.346659][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.347485][ T6492] IPVS: ip_vs_add_dest(): server weight less than zero
[   51.347635][   T56] IPVS: starting estimator thread 0...
[   51.347965][ T6459] SPCP8x5 ttyUSB0: failed to set control lines: -32
[   51.354296][ T5838] usb 8-1: USB disconnect, device number 2
[   51.403520][ T5838] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[   51.403980][ T5838] spcp8x5 8-1:1.0: device disconnected
[   51.455225][ T6494] IPVS: using max 43 ests per chain, 103200 per kthread
[   51.471354][ T6501] netlink: 168 bytes leftover after parsing attributes in process `syz.2.154'.
[   51.605837][ T6520] xt_CONNSECMARK: invalid mode: 0
[   51.607545][ T6520] tmpfs: Unknown parameter 'ÿÿÿÿ¨Ñ}þ –'
[   51.608186][ T6520] afs: Unknown parameter 'dyn©Ç·)Ëâ×@œ°bt;'
[   51.647665][ T6522] capability: warning: `syz.0.160' uses 32-bit capabilities (legacy support in use)
[   51.699395][ T6532] netlink: 32 bytes leftover after parsing attributes in process `syz.1.164'.
[   51.700530][ T6532] netlink: 75 bytes leftover after parsing attributes in process `syz.1.164'.
[   51.871402][ T6543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   51.922779][ T6545] netlink: 132 bytes leftover after parsing attributes in process `syz.3.168'.
[   51.931840][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.168'.
[   52.115221][ T1762] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   52.155178][ T5838] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   52.228047][   T30] libceph: mon0 (1)[c::]:6789 socket error on write
[   52.265290][ T1762] usb 5-1: Using ep0 maxpacket: 8
[   52.267800][ T1762] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   52.268554][ T1762] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   52.268570][ T1762] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   52.268582][ T1762] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   52.268657][ T1762] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   52.268678][ T1762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.325194][ T5838] usb 6-1: Using ep0 maxpacket: 8
[   52.325895][ T5838] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   52.326422][ T5838] usb 6-1: config 0 has no interfaces?
[   52.326446][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.328426][ T5838] usb 6-1: config 0 descriptor??
[   52.473785][ T1762] usb 5-1: GET_CAPABILITIES returned 0
[   52.473822][ T1762] usbtmc 5-1:16.0: can't read capabilities
[   52.486966][   T30] libceph: mon0 (1)[c::]:6789 socket error on write
[   52.538998][ T1762] usb 6-1: USB disconnect, device number 3
[   52.788203][   T50] usb 5-1: USB disconnect, device number 4
[   52.996416][   T42] libceph: mon0 (1)[c::]:6789 socket error on write
[   53.075495][   T43] kauditd_printk_skb: 163 callbacks suppressed
[   53.075508][   T43] audit: type=1400 audit(1790966909.580:545): avc:  denied  { read } for  pid=6571 comm="syz.2.175" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   53.075892][   T43] audit: type=1400 audit(1790966909.580:546): avc:  denied  { write } for  pid=6571 comm="syz.2.175" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   53.076181][   T43] audit: type=1400 audit(1790966909.580:547): avc:  denied  { write } for  pid=6571 comm="syz.2.175" name="loop4" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   53.079570][ T6572] loop4: detected capacity change from 0 to 2640
[   53.083609][ T6572] Buffer I/O error on dev loop4, logical block 0, async page read
[   53.083638][ T6572] Buffer I/O error on dev loop4, logical block 0, async page read
[   53.083654][ T6572] Buffer I/O error on dev loop4, logical block 0, async page read
[   53.083670][ T6572] Buffer I/O error on dev loop4, logical block 0, async page read
[   53.083685][ T6572] Buffer I/O error on dev loop4, logical block 0, async page read
[   53.083709][ T6572] Buffer I/O error on dev loop4, logical block 0, async page read
[   53.083732][ T6572] Buffer I/O error on dev loop4, logical block 0, async page read
[   53.083748][ T6572] Buffer I/O error on dev loop4, logical block 0, async page read
[   53.083757][ T6572] ldm_validate_partition_table(): Disk read failed.
[   53.083772][ T6572] Buffer I/O error on dev loop4, logical block 0, async page read
[   53.083788][ T6572] Buffer I/O error on dev loop4, logical block 0, async page read
[   53.083813][ T6572] Dev loop4: unable to read RDB block 0
[   53.083950][ T6572]  loop4: unable to read partition table
[   53.084040][ T6572] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[   53.100457][   T43] audit: type=1400 audit(1790966909.600:548): avc:  denied  { unmount } for  pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   53.130682][   T43] audit: type=1400 audit(1790966909.630:549): avc:  denied  { create } for  pid=6573 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   53.131001][   T43] audit: type=1400 audit(1790966909.630:550): avc:  denied  { ioctl } for  pid=6573 comm="syz.2.176" path="socket:[13725]" dev="sockfs" ino=13725 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   53.140821][   T43] audit: type=1400 audit(1790966909.640:551): avc:  denied  { ioctl } for  pid=6576 comm="syz.1.177" path="socket:[13726]" dev="sockfs" ino=13726 ioctlcmd=0x582c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   53.141502][   T43] audit: type=1400 audit(1790966909.640:552): avc:  denied  { read write } for  pid=6576 comm="syz.1.177" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[   53.142070][   T43] audit: type=1400 audit(1790966909.640:553): avc:  denied  { open } for  pid=6576 comm="syz.1.177" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[   53.169958][   T43] audit: type=1400 audit(1790966909.670:554): avc:  denied  { mount } for  pid=6579 comm="syz.2.178" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[   53.268345][ T6587] process 'syz.2.179' launched './file2' with NULL argv: empty string added
[   53.347038][ T6589] pim6reg: entered allmulticast mode
[   53.425836][ T6558] ceph: No mds server is up or the cluster is laggy
[   54.091566][ T6613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.186'.
[   54.573340][ T6659] FAULT_INJECTION: forcing a failure.
[   54.573340][ T6659] name failslab, interval 1, probability 0, space 0, times 0
[   54.573365][ T6659] CPU: 3 UID: 0 PID: 6659 Comm: syz.2.199 Not tainted syzkaller #0 PREEMPT(full) 
[   54.573377][ T6659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   54.573384][ T6659] Call Trace:
[   54.573388][ T6659]  <TASK>
[   54.573392][ T6659]  dump_stack_lvl+0x100/0x190
[   54.573412][ T6659]  should_fail_ex.cold+0x5/0xa
[   54.573428][ T6659]  should_failslab+0xc2/0x120
[   54.573445][ T6659]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[   54.573460][ T6659]  ? __d_alloc+0x35/0xa50
[   54.573478][ T6659]  __d_alloc+0x35/0xa50
[   54.573496][ T6659]  d_alloc_pseudo+0x1c/0xc0
[   54.573509][ T6659]  alloc_file_pseudo+0x118/0x290
[   54.573527][ T6659]  ? __pfx_alloc_file_pseudo+0x10/0x10
[   54.573544][ T6659]  ? _raw_spin_unlock+0x28/0x50
[   54.573561][ T6659]  ? alloc_fd+0x471/0x7a0
[   54.573577][ T6659]  __anon_inode_getfile+0xe8/0x280
[   54.573592][ T6659]  __anon_inode_getfd+0x5c/0xe0
[   54.573606][ T6659]  __x64_sys_fsopen+0x190/0x220
[   54.573620][ T6659]  do_syscall_64+0x123/0x790
[   54.573632][ T6659]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.573644][ T6659] RIP: 0033:0x7fd5efb9e159
[   54.573653][ T6659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   54.573663][ T6659] RSP: 002b:00007fd5f0b1f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[   54.573674][ T6659] RAX: ffffffffffffffda RBX: 00007fd5efe25fa0 RCX: 00007fd5efb9e159
[   54.573681][ T6659] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000240
[   54.573687][ T6659] RBP: 00007fd5f0b1f090 R08: 0000000000000000 R09: 0000000000000000
[   54.573694][ T6659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   54.573700][ T6659] R13: 00007fd5efe26038 R14: 00007fd5efe25fa0 R15: 00007ffd4c9ee758
[   54.573717][ T6659]  </TASK>
[   54.628478][ T6665] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   54.922852][   T30] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[   54.930819][   T30] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[   55.185939][   T30] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[   55.686268][ T6694] ALSA: mixer_oss: invalid OSS volume ''
[   55.686284][ T6694] ALSA: mixer_oss: invalid OSS volume '@'
[   55.686915][ T6694] ALSA: mixer_oss: invalid OSS volume '|'
[   55.707682][   T30] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[   55.827194][ T5113] block nbd0: Connection timed out, retrying (0/1 alive)
[   55.828083][ T5113] block nbd0: Connection timed out, retrying (0/1 alive)
[   55.828285][ T5113] block nbd0: Dead connection, failed to find a fallback
[   55.828300][ T5113] block nbd0: shutting down sockets
[   55.828356][ T5113] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[   55.828419][ T5113] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   55.830422][ T5113] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[   55.831495][ T5113] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   55.831579][ T5113] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   55.831657][ T5113] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   55.831738][ T5113] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   55.831835][ T5113] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   55.831915][ T5113] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   55.831993][ T5113] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   55.833245][ T5737] ldm_validate_partition_table(): Disk read failed.
[   55.834289][ T5737] Dev nbd0: unable to read RDB block 0
[   55.835552][ T5737]  nbd0: unable to read partition table
[   55.844398][ T5737] ldm_validate_partition_table(): Disk read failed.
[   55.845330][ T5737] Dev nbd0: unable to read RDB block 0
[   55.851048][ T5737]  nbd0: unable to read partition table
[   55.874061][ T6703] FAULT_INJECTION: forcing a failure.
[   55.874061][ T6703] name failslab, interval 1, probability 0, space 0, times 0
[   55.874083][ T6703] CPU: 1 UID: 0 PID: 6703 Comm: syz.1.210 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   55.874098][ T6703] Tainted: [L]=SOFTLOCKUP
[   55.874102][ T6703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   55.874109][ T6703] Call Trace:
[   55.874114][ T6703]  <TASK>
[   55.874119][ T6703]  dump_stack_lvl+0x100/0x190
[   55.874140][ T6703]  should_fail_ex.cold+0x5/0xa
[   55.874156][ T6703]  should_failslab+0xc2/0x120
[   55.874172][ T6703]  kmem_cache_alloc_noprof+0x92/0x6a0
[   55.874186][ T6703]  ? d_instantiate+0x8a/0xb0
[   55.874196][ T6703]  ? alloc_empty_file+0x5b/0x1c0
[   55.874215][ T6703]  alloc_empty_file+0x5b/0x1c0
[   55.874232][ T6703]  alloc_file_pseudo+0x183/0x290
[   55.874249][ T6703]  ? __pfx_alloc_file_pseudo+0x10/0x10
[   55.874267][ T6703]  ? _raw_spin_unlock+0x28/0x50
[   55.874283][ T6703]  ? alloc_fd+0x471/0x7a0
[   55.874299][ T6703]  __anon_inode_getfile+0xe8/0x280
[   55.874314][ T6703]  __anon_inode_getfd+0x5c/0xe0
[   55.874328][ T6703]  __x64_sys_fsopen+0x190/0x220
[   55.874342][ T6703]  do_syscall_64+0x123/0x790
[   55.874354][ T6703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.874366][ T6703] RIP: 0033:0x7fdfbc79e159
[   55.874375][ T6703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   55.874385][ T6703] RSP: 002b:00007fdfbd5da028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[   55.874396][ T6703] RAX: ffffffffffffffda RBX: 00007fdfbca25fa0 RCX: 00007fdfbc79e159
[   55.874403][ T6703] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000240
[   55.874409][ T6703] RBP: 00007fdfbd5da090 R08: 0000000000000000 R09: 0000000000000000
[   55.874416][ T6703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   55.874422][ T6703] R13: 00007fdfbca26038 R14: 00007fdfbca25fa0 R15: 00007ffc01f77c68
[   55.874435][ T6703]  </TASK>
[   55.899673][ T6705] tipc: Started in network mode
[   55.899685][ T6705] tipc: Node identity 4, cluster identity 4711
[   55.899691][ T6705] tipc: Node number set to 4
[   55.900422][ T6705] tipc: Enabled bearer <eth:syz_tun>, priority 0
[   55.900646][ T6705] tipc: Disabling bearer <eth:syz_tun>
[   55.985631][ T6680] ceph: No mds server is up or the cluster is laggy
[   56.068271][ T6728] netlink: 36 bytes leftover after parsing attributes in process `syz.3.219'.
[   56.091599][ T6730] FAULT_INJECTION: forcing a failure.
[   56.091599][ T6730] name failslab, interval 1, probability 0, space 0, times 0
[   56.091628][ T6730] CPU: 0 UID: 0 PID: 6730 Comm: syz.3.220 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   56.091651][ T6730] Tainted: [L]=SOFTLOCKUP
[   56.091657][ T6730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   56.091666][ T6730] Call Trace:
[   56.091672][ T6730]  <TASK>
[   56.091680][ T6730]  dump_stack_lvl+0x100/0x190
[   56.091705][ T6730]  should_fail_ex.cold+0x5/0xa
[   56.091729][ T6730]  should_failslab+0xc2/0x120
[   56.091752][ T6730]  kmem_cache_alloc_noprof+0x92/0x6a0
[   56.091773][ T6730]  ? security_file_alloc+0x34/0x2c0
[   56.091796][ T6730]  security_file_alloc+0x34/0x2c0
[   56.091837][ T6730]  init_file+0x95/0x480
[   56.091861][ T6730]  alloc_empty_file+0x79/0x1c0
[   56.091886][ T6730]  alloc_file_pseudo+0x183/0x290
[   56.091908][ T6730]  ? __pfx_alloc_file_pseudo+0x10/0x10
[   56.091949][ T6730]  ? _raw_spin_unlock+0x28/0x50
[   56.091974][ T6730]  ? alloc_fd+0x471/0x7a0
[   56.091994][ T6730]  __anon_inode_getfile+0xe8/0x280
[   56.092017][ T6730]  __anon_inode_getfd+0x5c/0xe0
[   56.092039][ T6730]  __x64_sys_fsopen+0x190/0x220
[   56.092060][ T6730]  do_syscall_64+0x123/0x790
[   56.092080][ T6730]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.092092][ T6730] RIP: 0033:0x7fbb4ab9e159
[   56.092106][ T6730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   56.092120][ T6730] RSP: 002b:00007fbb4ba75028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[   56.092142][ T6730] RAX: ffffffffffffffda RBX: 00007fbb4ae25fa0 RCX: 00007fbb4ab9e159
[   56.092153][ T6730] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000240
[   56.092163][ T6730] RBP: 00007fbb4ba75090 R08: 0000000000000000 R09: 0000000000000000
[   56.092173][ T6730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.092181][ T6730] R13: 00007fbb4ae26038 R14: 00007fbb4ae25fa0 R15: 00007ffc834ff128
[   56.092200][ T6730]  </TASK>
[   56.123129][ T6726] mmap: syz.1.216 (6726) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   56.241361][ T6734] Bluetooth: MGMT ver 1.23
[   56.907778][ T6778] comedi comedi4: bad chanlist[0]=0x00010001 chan=1 range length=1
[   56.917608][ T6778] __nla_validate_parse: 2 callbacks suppressed
[   56.917626][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'.
[   56.925495][   T30] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   57.099149][   T30] usb 7-1: Using ep0 maxpacket: 32
[   57.099815][   T30] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[   57.100320][   T30] usb 7-1: config 0 has no interfaces?
[   57.104328][   T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.104342][   T30] usb 7-1: Product: syz
[   57.104349][   T30] usb 7-1: Manufacturer: syz
[   57.104356][   T30] usb 7-1: SerialNumber: syz
[   57.110214][   T30] usb 7-1: config 0 descriptor??
[   57.279323][ T6802] nfs: Unknown parameter '18446744073709551615'
[   57.321338][ T5838] usb 7-1: USB disconnect, device number 3
[   57.550623][ T6812] binder: 6811:6812 ioctl 40809440 200000001500 returned -22
[   57.625223][   T30] usb 6-1: new low-speed USB device number 4 using dummy_hcd
[   57.647350][ T6815] netlink: 'syz.0.241': attribute type 12 has an invalid length.
[   57.647372][ T6815] netlink: 132 bytes leftover after parsing attributes in process `syz.0.241'.
[   57.755635][   T30] usb 6-1: device descriptor read/64, error -71
[   57.806377][   T37] IPVS: starting estimator thread 0...
[   57.847571][ T6825] ./dev/sda1: Can't open blockdev
[   57.915518][ T6823] IPVS: using max 28 ests per chain, 67200 per kthread
[   57.982392][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'.
[   58.005223][   T30] usb 6-1: new low-speed USB device number 5 using dummy_hcd
[   58.034640][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'.
[   58.137715][   T30] usb 6-1: device descriptor read/64, error -71
[   58.142238][ T6838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.250'.
[   58.142262][ T6838] netlink: 'syz.3.250': attribute type 7 has an invalid length.
[   58.142268][ T6838] netlink: 'syz.3.250': attribute type 8 has an invalid length.
[   58.142275][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.250'.
[   58.146720][ T6838] ip6gretap0: entered promiscuous mode
[   58.147676][ T6838] syz_tun: entered promiscuous mode
[   58.151852][ T6838] ip6gretap0: left promiscuous mode
[   58.152899][ T6838] syz_tun: left promiscuous mode
[   58.211723][   T43] kauditd_printk_skb: 102 callbacks suppressed
[   58.211735][   T43] audit: type=1400 audit(1790966914.710:657): avc:  denied  { read } for  pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   58.256701][   T30] usb usb6-port1: attempt power cycle
[   58.273872][   T43] audit: type=1400 audit(1790966914.770:658): avc:  denied  { write } for  pid=6853 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   58.315449][   T43] audit: type=1400 audit(1790966914.820:659): avc:  denied  { write } for  pid=6856 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   58.393978][   T43] audit: type=1400 audit(1790966914.890:660): avc:  denied  { write } for  pid=6859 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   58.425223][   T50] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   58.439680][   T43] audit: type=1400 audit(1790966914.940:661): avc:  denied  { write } for  pid=6862 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   58.575207][   T50] usb 7-1: Using ep0 maxpacket: 8
[   58.576024][   T50] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   58.576808][   T50] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   58.576819][   T50] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[   58.576839][   T50] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[   58.576852][   T50] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[   58.576871][   T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.582136][   T50] hub 7-1:1.0: bad descriptor, ignoring hub
[   58.582148][   T50] hub 7-1:1.0: probe with driver hub failed with error -5
[   58.582367][   T50] cdc_wdm 7-1:1.0: skipping garbage
[   58.582374][   T50] cdc_wdm 7-1:1.0: skipping garbage
[   58.583779][   T50] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[   58.583789][   T50] cdc_wdm 7-1:1.0: Unknown control protocol
[   58.615192][   T30] usb 6-1: new low-speed USB device number 6 using dummy_hcd
[   58.646042][   T30] usb 6-1: device descriptor read/8, error -71
[   58.738113][   T43] audit: type=1400 audit(1790966915.240:662): avc:  denied  { setopt } for  pid=6864 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   58.770250][ T6868] netlink: 'syz.3.254': attribute type 2 has an invalid length.
[   58.791131][ T6868] loop0: detected capacity change from 0 to 3904
[   58.838731][ T6868] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[   58.838756][ T6868] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size
[   58.838767][ T6868] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   58.838812][ T6868]  loop0:
[   58.868735][   T43] audit: type=1400 audit(1790966915.370:663): avc:  denied  { ioctl } for  pid=6870 comm="syz.3.255" path="socket:[15165]" dev="sockfs" ino=15165 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   58.885252][   T30] usb 6-1: new low-speed USB device number 7 using dummy_hcd
[   58.885333][   T50] usb 7-1: USB disconnect, device number 4
[   58.906722][   T30] usb 6-1: device descriptor read/8, error -71
[   58.939708][   T43] audit: type=1400 audit(1790966915.440:664): avc:  denied  { ioctl } for  pid=6874 comm="syz.3.257" path="socket:[15174]" dev="sockfs" ino=15174 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   58.942518][ T6875] netlink: 'syz.3.257': attribute type 2 has an invalid length.
[   58.943007][   T43] audit: type=1400 audit(1790966915.440:665): avc:  denied  { read write } for  pid=6874 comm="syz.3.257" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   58.943241][   T43] audit: type=1400 audit(1790966915.440:666): avc:  denied  { open } for  pid=6874 comm="syz.3.257" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   58.945797][ T6876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   58.970179][ T6878] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   59.016986][   T30] usb usb6-port1: unable to enumerate USB device
[   59.027299][ T6881] XFS (nullb0): Invalid superblock magic number
[   59.037970][ T6890] syzkaller0: entered promiscuous mode
[   59.037982][ T6890] syzkaller0: entered allmulticast mode
[   59.053030][ T6880] ==================================================================
[   59.053038][ T6880] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x4f3/0x5d0
[   59.053059][ T6880] Read of size 4 at addr ffff8880298c163c by task syz.3.259/6880
[   59.053068][ T6880] 
[   59.053075][ T6880] CPU: 1 UID: 0 PID: 6880 Comm: syz.3.259 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   59.053090][ T6880] Tainted: [L]=SOFTLOCKUP
[   59.053094][ T6880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   59.053100][ T6880] Call Trace:
[   59.053104][ T6880]  <TASK>
[   59.053109][ T6880]  dump_stack_lvl+0x100/0x190
[   59.053125][ T6880]  print_report+0x13d/0x4b0
[   59.053141][ T6880]  ? __virt_addr_valid+0x239/0x430
[   59.053157][ T6880]  ? dvb_frontend_release+0x4f3/0x5d0
[   59.053174][ T6880]  kasan_report+0xdf/0x1c0
[   59.053190][ T6880]  ? dvb_frontend_release+0x4f3/0x5d0
[   59.053221][ T6880]  dvb_frontend_release+0x4f3/0x5d0
[   59.053238][ T6880]  ? __pfx_dvb_frontend_release+0x10/0x10
[   59.053256][ T6880]  __fput+0x3ff/0xb50
[   59.053272][ T6880]  task_work_run+0x150/0x240
[   59.053288][ T6880]  ? __pfx_task_work_run+0x10/0x10
[   59.053306][ T6880]  exit_to_user_mode_loop+0x1d8/0x700
[   59.053320][ T6880]  ? rcu_is_watching+0x13/0xc0
[   59.053336][ T6880]  do_syscall_64+0x661/0x790
[   59.053348][ T6880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.053359][ T6880] RIP: 0033:0x7fbb4ab9e159
[   59.053368][ T6880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   59.053378][ T6880] RSP: 002b:00007ffc834ff288 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[   59.053389][ T6880] RAX: 0000000000000000 RBX: 00007ffc834ff370 RCX: 00007fbb4ab9e159
[   59.053396][ T6880] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[   59.053402][ T6880] RBP: 000000000000e613 R08: 0000000000000001 R09: 0000000000000000
[   59.053408][ T6880] R10: 0000001b31b20000 R11: 0000000000000246 R12: 00007ffc834ff3b0
[   59.053415][ T6880] R13: 00007fbb4ae25fac R14: 000000000000e675 R15: 00007fbb4ae25fa0
[   59.053425][ T6880]  </TASK>
[   59.053429][ T6880] 
[   59.053431][ T6880] Allocated by task 1:
[   59.053436][ T6880]  kasan_save_stack+0x30/0x50
[   59.053449][ T6880]  kasan_save_track+0x14/0x30
[   59.053461][ T6880]  __kasan_kmalloc+0xaa/0xb0
[   59.053473][ T6880]  __kmalloc_cache_noprof+0x2f8/0x6d0
[   59.053483][ T6880]  dvb_register_device+0x1d6/0x1e20
[   59.053492][ T6880]  dvb_register_frontend+0x552/0x820
[   59.053508][ T6880]  vidtv_bridge_probe+0x44b/0xa30
[   59.053520][ T6880]  platform_probe+0x106/0x1d0
[   59.053530][ T6880]  really_probe+0x241/0xa60
[   59.053542][ T6880]  __driver_probe_device+0x210/0x460
[   59.053555][ T6880]  driver_probe_device+0x4a/0x140
[   59.053568][ T6880]  __driver_attach+0x21f/0x5b0
[   59.053580][ T6880]  bus_for_each_dev+0x13e/0x1d0
[   59.053589][ T6880]  bus_add_driver+0x305/0x5b0
[   59.053600][ T6880]  driver_register+0x1e2/0x360
[   59.053613][ T6880]  vidtv_bridge_init+0x52/0x80
[   59.053629][ T6880]  do_one_initcall+0x11c/0x6f0
[   59.053639][ T6880]  kernel_init_freeable+0x6ea/0x7b0
[   59.053651][ T6880]  kernel_init+0x21/0x1e0
[   59.053663][ T6880]  ret_from_fork+0x730/0xd60
[   59.053673][ T6880]  ret_from_fork_asm+0x1a/0x30
[   59.053683][ T6880] 
[   59.053685][ T6880] Freed by task 6880:
[   59.053690][ T6880]  kasan_save_stack+0x30/0x50
[   59.053702][ T6880]  kasan_save_track+0x14/0x30
[   59.053714][ T6880]  kasan_save_free_info+0x3b/0x70
[   59.053723][ T6880]  __kasan_slab_free+0x5f/0x80
[   59.053735][ T6880]  kfree+0x22b/0x6d0
[   59.053743][ T6880]  dvb_device_put.part.0+0x57/0x90
[   59.053752][ T6880]  dvb_generic_release+0xe2/0x160
[   59.053761][ T6880]  dvb_frontend_release+0x13d/0x5d0
[   59.053776][ T6880]  __fput+0x3ff/0xb50
[   59.053789][ T6880]  task_work_run+0x150/0x240
[   59.053804][ T6880]  exit_to_user_mode_loop+0x1d8/0x700
[   59.053817][ T6880]  do_syscall_64+0x661/0x790
[   59.053826][ T6880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.053836][ T6880] 
[   59.053838][ T6880] The buggy address belongs to the object at ffff8880298c1600
[   59.053838][ T6880]  which belongs to the cache kmalloc-256 of size 256
[   59.053846][ T6880] The buggy address is located 60 bytes inside of
[   59.053846][ T6880]  freed 256-byte region [ffff8880298c1600, ffff8880298c1700)
[   59.053855][ T6880] 
[   59.053858][ T6880] The buggy address belongs to the physical page:
[   59.053863][ T6880] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x298c0
[   59.053872][ T6880] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   59.053881][ T6880] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   59.053891][ T6880] page_type: f5(slab)
[   59.053900][ T6880] raw: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122
[   59.053909][ T6880] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   59.053917][ T6880] head: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122
[   59.053926][ T6880] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   59.053935][ T6880] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[   59.053943][ T6880] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[   59.053949][ T6880] page dumped because: kasan: bad access detected
[   59.053954][ T6880] page_owner tracks the page as allocated
[   59.053958][ T6880] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6556128530
[   59.053974][ T6880]  post_alloc_hook+0xfd/0x120
[   59.053983][ T6880]  get_page_from_freelist+0x110d/0x35d0
[   59.053993][ T6880]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[   59.054004][ T6880]  new_slab+0xa9/0x6e0
[   59.054012][ T6880]  refill_objects+0xe3/0x410
[   59.054022][ T6880]  __pcs_replace_empty_main+0x35e/0x650
[   59.054031][ T6880]  __kmalloc_cache_noprof+0x4f4/0x6d0
[   59.054040][ T6880]  bus_add_driver+0x92/0x5b0
[   59.054051][ T6880]  driver_register+0x1e2/0x360
[   59.054064][ T6880]  usb_register_driver+0x21c/0x3e0
[   59.054080][ T6880]  do_one_initcall+0x11c/0x6f0
[   59.054090][ T6880]  kernel_init_freeable+0x6ea/0x7b0
[   59.054101][ T6880]  kernel_init+0x21/0x1e0
[   59.054113][ T6880]  ret_from_fork+0x730/0xd60
[   59.054124][ T6880]  ret_from_fork_asm+0x1a/0x30
[   59.054134][ T6880] page_owner free stack trace missing
[   59.054138][ T6880] 
[   59.054140][ T6880] Memory state around the buggy address:
[   59.054149][ T6880]  ffff8880298c1500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   59.054156][ T6880]  ffff8880298c1580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   59.054163][ T6880] >ffff8880298c1600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   59.054168][ T6880]                                         ^
[   59.054174][ T6880]  ffff8880298c1680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   59.054180][ T6880]  ffff8880298c1700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   59.054186][ T6880] ==================================================================
[   59.054214][ T6880] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   59.276120][ T6880] CPU: 1 UID: 0 PID: 6880 Comm: syz.3.259 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   59.279541][ T6880] Tainted: [L]=SOFTLOCKUP
[   59.280942][ T6880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   59.284196][ T6880] Call Trace:
[   59.285326][ T6880]  <TASK>
[   59.286307][ T6880]  dump_stack_lvl+0x100/0x190
[   59.287838][ T6880]  vpanic+0x553/0x970
[   59.289181][ T6880]  ? __pfx_vpanic+0x10/0x10
[   59.290656][ T6880]  ? rcu_is_watching+0x13/0xc0
[   59.292201][ T6880]  ? irqentry_exit+0x24d/0xa10
[   59.293804][ T6880]  ? dvb_frontend_release+0x4f3/0x5d0
[   59.295540][ T6880]  panic+0xd1/0xe0
[   59.296776][ T6880]  ? __pfx_panic+0x10/0x10
[   59.298253][ T6880]  ? dvb_frontend_release+0x4f3/0x5d0
[   59.299967][ T6880]  ? preempt_schedule_common+0x3c/0xb0
[   59.301752][ T6880]  check_panic_on_warn.cold+0x19/0x34
[   59.303475][ T6880]  end_report.part.0+0x3a/0x90
[   59.305095][ T6880]  kasan_report.cold+0xe/0x18
[   59.306622][ T6880]  ? dvb_frontend_release+0x4f3/0x5d0
[   59.308375][ T6880]  dvb_frontend_release+0x4f3/0x5d0
[   59.310062][ T6880]  ? __pfx_dvb_frontend_release+0x10/0x10
[   59.311919][ T6880]  __fput+0x3ff/0xb50
[   59.313230][ T6880]  task_work_run+0x150/0x240
[   59.314779][ T6880]  ? __pfx_task_work_run+0x10/0x10
[   59.316465][ T6880]  exit_to_user_mode_loop+0x1d8/0x700
[   59.318194][ T6880]  ? rcu_is_watching+0x13/0xc0
[   59.319771][ T6880]  do_syscall_64+0x661/0x790
[   59.321269][ T6880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.323180][ T6880] RIP: 0033:0x7fbb4ab9e159
[   59.324687][ T6880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   59.330821][ T6880] RSP: 002b:00007ffc834ff288 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[   59.333515][ T6880] RAX: 0000000000000000 RBX: 00007ffc834ff370 RCX: 00007fbb4ab9e159
[   59.336093][ T6880] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[   59.338620][ T6880] RBP: 000000000000e613 R08: 0000000000000001 R09: 0000000000000000
[   59.341184][ T6880] R10: 0000001b31b20000 R11: 0000000000000246 R12: 00007ffc834ff3b0
[   59.343700][ T6880] R13: 00007fbb4ae25fac R14: 000000000000e675 R15: 00007fbb4ae25fa0
[   59.346292][ T6880]  </TASK>
[   59.347991][ T6880] Kernel Offset: disabled
[   59.349406][ T6880] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:48:35  Registers:
info registers vcpu 0

CPU#0
RAX=00000000000d64cf RBX=ffffffff8ea91580 RCX=ffffffff8bd28215 RDX=0000000000000001
RSI=ffffffff8e38e858 RDI=ffffffff8c623980 RBP=fffffbfff1d522b0 RSP=ffffffff8ea07cf0
R8 =0000000000000001 R9 =ffffed100d4867bd R10=ffff88806a433deb R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000
RIP=ffffffff8bd2674f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5b4f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fbb4ba32ff8 CR3=00000000515e9000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73657479625f6e69 5f65676173752e42
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4c9eec46
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4c9eec46 00007ffd4c9eec4c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5efc3564e
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5efc3568e
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5efc357f2
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5efc35680
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85b180b5 RDI=ffffffff9bc75f60 RBP=ffffffff9bc75f20 RSP=ffffc90004dd7528
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552
R12=0000000000000000 R13=0000000000000074 R14=0000000000000002 R15=ffffc90004dd7840
RIP=ffffffff85b180df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556cddd500 ffffffff 00c00000
GS =0000 ffff8880d5c4f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fbb44000020 CR3=0000000035d3b000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb4adf2600 00007fbb4adf25e0 00007fbb4adf25e8 00007fbb4adf2618
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000700080006
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb4adf25f8 00007fbb4adf25c8 00007fbb4adf2600 00007fbb4adf25e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000071b97 RBX=ffff88801f2d2580 RCX=ffffffff8bd28215 RDX=0000000000000001
RSI=ffffffff8e38e858 RDI=ffffffff8c623980 RBP=ffffed1003e5a4b0 RSP=ffffc90000197e00
R8 =0000000000000001 R9 =ffffed100d4c67bd R10=ffff88806a633deb R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000
RIP=ffffffff8bd2674f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5d4f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000200000002280 CR3=0000000052c04000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73657479625f6e69 5f65676173752e42
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc834ff616
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc834ff616 00007ffc834ff61c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb4ac3564e
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb4ac3568e
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb4ac357f2
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb4ac35680
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000054773 RBX=ffff88801f2d0000 RCX=ffffffff8bd28215 RDX=0000000000000001
RSI=ffffffff8e38e858 RDI=ffffffff8c623980 RBP=ffffed1003e5a000 RSP=ffffc900001a7e00
R8 =0000000000000001 R9 =ffffed100d4e67bd R10=ffff88806a733deb R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000034fc4 R15=dffffc0000000000
RIP=ffffffff8bd2674f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5e4f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c3fe9d6 CR3=0000000051738000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 307a79732f74656e 2f70756f7267637a
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff78647b06
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff78647b06 00007fff78647b0c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f093823564e
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f093823568e
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09382357f2
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0938235680
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000